aimeat 2.7.0 → 3.0.0

package/dist/src/mcp/catalog/surfaces.js

@@ -19,6 +19,9 @@
  *   import { toolsForSurface } from '../catalog/surfaces.js';
  *   const allowed = toolsForSurface('agent'); // register only these on /v2/mcp/agent
  * @version-history
+ *   2026-08-10 — Place aimeat_portfolio_publish on `agent`. It shipped into the catalog with no
+ *     surface, so no v2 client could call the one tool that writes the person's own welcome page.
+ *     It sits beside aimeat_company_portfolio_publish, which is the same act for a company.
  *   2026-07-28 — The `enterprise` surface becomes `commerce` (/v2/mcp/commerce): the edition seam is
  *     gone, so the surface is named after what it does — sell and get paid — and its allowlist is
  *     fixed rather than extendable at boot.
@@ -73,8 +76,11 @@ export const MCP_SURFACES = {
         'aimeat_workflow_save', 'aimeat_workflow_get', 'aimeat_workflow_run', 'aimeat_workflow_answer', 'aimeat_workflow_pending_inputs',
         'aimeat_message_inbox', 'aimeat_message_send', 'aimeat_message_history',
         'aimeat_dm_send', 'aimeat_dm_send_as_owner', 'aimeat_dm_ask', 'aimeat_dm_inbox', 'aimeat_dm_thread',
+        'aimeat_company_list', 'aimeat_company_create', 'aimeat_company_update',
+        'aimeat_company_front_page', 'aimeat_company_portfolio_publish',
+        // The person's own welcome page, beside the company one: same act, different owner.
+        'aimeat_portfolio_publish',
         'aimeat_contact_list', 'aimeat_contact_add', 'aimeat_contact_remove', 'aimeat_contact_resolve_email',
-        'aimeat_feedback_send', 'aimeat_feedback_inbox',
         'aimeat_knowledge_list', 'aimeat_knowledge_get', 'aimeat_knowledge_contribute', 'aimeat_knowledge_links',
         'aimeat_appdev_overview', 'aimeat_appdev_pitfall_report', 'aimeat_appdev_pitfall_list', 'aimeat_appdev_pitfall_delete',
         'aimeat_app_template_propose', 'aimeat_app_template_list', 'aimeat_app_template_get', 'aimeat_app_template_delete',
@@ -111,7 +117,6 @@ export const MCP_SURFACES = {
         'aimeat_board_list', 'aimeat_board_read', 'aimeat_board_create', 'aimeat_board_post', 'aimeat_board_reply',
         'aimeat_board_react', 'aimeat_board_subscribe', 'aimeat_board_members', 'aimeat_board_delete',
         'aimeat_work_inbox', 'aimeat_work_accept', 'aimeat_work_deliver',
-        'aimeat_feedback_send', 'aimeat_feedback_inbox',
         'aimeat_action_execute',
         'aimeat_wallet_balance', 'aimeat_wallet_transactions',
         'aimeat_capabilities_list', 'aimeat_capabilities_get', 'aimeat_capabilities_invoke',
@@ -144,6 +149,7 @@ export const MCP_SURFACES = {
         'aimeat_admin_stats', 'aimeat_admin_agents', 'aimeat_admin_config', 'aimeat_admin_mint',
         'aimeat_flag_report',
         'aimeat_group_list', 'aimeat_group_get', 'aimeat_group_create', 'aimeat_group_add_member', 'aimeat_group_remove_member',
+        'aimeat_share_create', 'aimeat_share_list', 'aimeat_share_revoke',
         'aimeat_consent_grant', 'aimeat_consent_list', 'aimeat_consent_revoke',
         'aimeat_agent_mode_set', 'aimeat_agent_tags_set',
         'aimeat_operator_agent_configure', 'aimeat_operator_ai_config',

package/dist/src/mcp/catalog/surfaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"surfaces.js","sourceRoot":"","sources":["../../../../src/mcp/catalog/surfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAGjE,MAAM,CAAC,MAAM,QAAQ,GAA2B,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AAEpG;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC1C,sBAAsB,EAAE,wBAAwB,EAAE,wBAAwB;IAC1E,6BAA6B;IAC7B,2EAA2E;IAC3E,yBAAyB;CAC5B,CAAC;AAEF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,YAAY,GAAkC;IACvD,MAAM,EAAE;QACJ,uBAAuB,EAAE,yBAAyB;QAClD,iBAAiB;QACjB,oBAAoB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,mBAAmB;QACtL,0BAA0B,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,uBAAuB;QACtG,2BAA2B,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,mBAAmB;QAC1G,uBAAuB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,sBAAsB;QAC3H,sBAAsB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,mCAAmC,EAAE,yCAAyC,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,6BAA6B,EAAE,oCAAoC,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB;QAC7kB,yBAAyB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,2BAA2B;QAC3e,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB;QAC3G,wBAAwB,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,8BAA8B;QACtH,iBAAiB,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,4BAA4B;QACrI,4BAA4B;QAC5B,qBAAqB;KACxB;IACD,KAAK,EAAE;QACH,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,2BAA2B;QACtH,uBAAuB,EAAE,yBAAyB;QAClD,yFAAyF;QACzF,4FAA4F;QAC5F,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,2BAA2B;QACxF,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,kBAAkB;QACnF,wBAAwB,EAAE,sBAAsB,EAAE,wBAAwB;QAC1E,wBAAwB,EAAE,iCAAiC;QAC3D,sBAAsB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,gCAAgC;QAChI,sBAAsB,EAAE,qBAAqB,EAAE,wBAAwB;QACvE,gBAAgB,EAAE,yBAAyB,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB;QACnG,qBAAqB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,8BAA8B;QACpG,sBAAsB,EAAE,uBAAuB;QAC/C,uBAAuB,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,wBAAwB;QACxG,wBAAwB,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,8BAA8B;QACtH,6BAA6B,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,4BAA4B;QAClH,4BAA4B;QAC5B,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB;QAC3G,iCAAiC,EAAE,2BAA2B;QAC9D,0BAA0B,EAAE,yBAAyB,EAAE,4BAA4B;QACnF,sBAAsB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,mCAAmC,EAAE,yCAAyC,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,6BAA6B,EAAE,oCAAoC,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB;QAC7kB,yBAAyB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,2BAA2B;QAC3e,iBAAiB;QACjB,yBAAyB,EAAE,4BAA4B,EAAE,yBAAyB;QAClF,mBAAmB;QACnB,sBAAsB,EAAE,uBAAuB,EAAE,kCAAkC,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,oBAAoB;QACnK,0BAA0B,EAAE,qCAAqC,EAAE,2CAA2C;QAC9G,2CAA2C,EAAE,oCAAoC;QACjF,qBAAqB;QACrB,iFAAiF;QACjF,sBAAsB,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,sBAAsB;QAClG,kFAAkF;QAClF,2BAA2B,EAAE,8BAA8B,EAAE,wBAAwB;QACrF,2BAA2B,EAAE,8BAA8B,EAAE,uBAAuB;QACpF,2BAA2B,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,2BAA2B;QAC7G,4FAA4F;QAC5F,wBAAwB,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,2BAA2B;QAC7G,2BAA2B,EAAE,iCAAiC;KACjE;IACD,OAAO,EAAE;QACL,iBAAiB;QACjB,yBAAyB,EAAE,yBAAyB,EAAE,yBAAyB;QAC/E,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,2BAA2B;QACtH,uBAAuB,EAAE,yBAAyB;QAClD,uBAAuB,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,wBAAwB;QACxG,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB;QAC3G,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB;QAC1G,oBAAoB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,qBAAqB;QAC7F,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB;QAChE,sBAAsB,EAAE,uBAAuB;QAC/C,uBAAuB;QACvB,uBAAuB,EAAE,4BAA4B;QACrD,0BAA0B,EAAE,yBAAyB,EAAE,4BAA4B;QACnF,4BAA4B,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,2BAA2B;QACrH,sBAAsB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,mCAAmC,EAAE,yCAAyC,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,6BAA6B,EAAE,oCAAoC,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB;QAC7kB,yBAAyB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,2BAA2B;QAC3e,sBAAsB,EAAE,uBAAuB,EAAE,kCAAkC,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,oBAAoB;QACnK,0BAA0B,EAAE,qCAAqC,EAAE,2CAA2C;QAC9G,2CAA2C,EAAE,oCAAoC;QACjF,qBAAqB;QACrB,sFAAsF;QACtF,2EAA2E;QAC3E,yBAAyB,EAAE,4BAA4B,EAAE,4BAA4B;QACrF,0BAA0B,EAAE,sBAAsB,EAAE,wBAAwB;QAC5E,sBAAsB,EAAE,0BAA0B,EAAE,sBAAsB;QAC1E,0FAA0F;QAC1F,2FAA2F;QAC3F,uCAAuC,EAAE,oCAAoC;QAC7E,qCAAqC,EAAE,oCAAoC;QAC3E,sCAAsC,EAAE,qCAAqC;QAC7E,sGAAsG;QACtG,2BAA2B,EAAE,8BAA8B,EAAE,wBAAwB;QACrF,2BAA2B,EAAE,8BAA8B,EAAE,uBAAuB;QACpF,2BAA2B,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,2BAA2B;QAC7G,4FAA4F;QAC5F,wBAAwB,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,2BAA2B;QAC7G,2BAA2B,EAAE,iCAAiC;KACjE;IACD,KAAK,EAAE;QACH,oBAAoB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,mBAAmB;QACvF,oBAAoB;QACpB,mBAAmB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,4BAA4B;QACvH,sBAAsB,EAAE,qBAAqB,EAAE,uBAAuB;QACtE,uBAAuB,EAAE,uBAAuB;QAChD,iCAAiC,EAAE,2BAA2B;KACjE;IACD,6FAA6F;IAC7F,6FAA6F;IAC7F,mFAAmF;IACnF,QAAQ,EAAE;QACN,yBAAyB,EAAE,4BAA4B,EAAE,4BAA4B;QACrF,0BAA0B,EAAE,sBAAsB,EAAE,wBAAwB;QAC5E,sBAAsB,EAAE,0BAA0B,EAAE,sBAAsB;QAC1E,0FAA0F;QAC1F,2FAA2F;QAC3F,uCAAuC,EAAE,oCAAoC;QAC7E,qCAAqC,EAAE,oCAAoC;QAC3E,sCAAsC,EAAE,qCAAqC;QAC7E,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,2BAA2B;QACtH,uBAAuB,EAAE,yBAAyB;QAClD,uBAAuB,EAAE,4BAA4B;QACrD,iBAAiB;QACjB,qBAAqB;KACxB;CACJ,CAAC;AAEF,MAAM,YAAY,GAAqC;IACnD,MAAM,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;IACtC,KAAK,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;IAClC,QAAQ,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC;CAC3C,CAAC;AAEF,2DAA2D;AAC3D,MAAM,UAAU,eAAe,CAAC,IAAiB;IAC7C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACjC,OAAQ,QAA8B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;IACjD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC;AAC1E,CAAC;AAED,8FAA8F;AAC9F,CAAC;IACG,MAAM,EAAE,YAAY,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC5C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,2DAA2D,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;AACL,CAAC"}
+{"version":3,"file":"surfaces.js","sourceRoot":"","sources":["../../../../src/mcp/catalog/surfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAGjE,MAAM,CAAC,MAAM,QAAQ,GAA2B,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AAEpG;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC1C,sBAAsB,EAAE,wBAAwB,EAAE,wBAAwB;IAC1E,6BAA6B;IAC7B,2EAA2E;IAC3E,yBAAyB;CAC5B,CAAC;AAEF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,YAAY,GAAkC;IACvD,MAAM,EAAE;QACJ,uBAAuB,EAAE,yBAAyB;QAClD,iBAAiB;QACjB,oBAAoB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,mBAAmB;QACtL,0BAA0B,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,uBAAuB;QACtG,2BAA2B,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,mBAAmB;QAC1G,uBAAuB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,sBAAsB;QAC3H,sBAAsB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,mCAAmC,EAAE,yCAAyC,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,6BAA6B,EAAE,oCAAoC,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB;QAC7kB,yBAAyB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,2BAA2B;QAC3e,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB;QAC3G,wBAAwB,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,8BAA8B;QACtH,iBAAiB,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,4BAA4B;QACrI,4BAA4B;QAC5B,qBAAqB;KACxB;IACD,KAAK,EAAE;QACH,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,2BAA2B;QACtH,uBAAuB,EAAE,yBAAyB;QAClD,yFAAyF;QACzF,4FAA4F;QAC5F,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,2BAA2B;QACxF,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,kBAAkB;QACnF,wBAAwB,EAAE,sBAAsB,EAAE,wBAAwB;QAC1E,wBAAwB,EAAE,iCAAiC;QAC3D,sBAAsB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,gCAAgC;QAChI,sBAAsB,EAAE,qBAAqB,EAAE,wBAAwB;QACvE,gBAAgB,EAAE,yBAAyB,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB;QACnG,qBAAqB,EAAE,uBAAuB,EAAE,uBAAuB;QACvE,2BAA2B,EAAE,kCAAkC;QAC/D,oFAAoF;QACpF,0BAA0B;QAC1B,qBAAqB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,8BAA8B;QACpG,uBAAuB,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,wBAAwB;QACxG,wBAAwB,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,8BAA8B;QACtH,6BAA6B,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,4BAA4B;QAClH,4BAA4B;QAC5B,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB;QAC3G,iCAAiC,EAAE,2BAA2B;QAC9D,0BAA0B,EAAE,yBAAyB,EAAE,4BAA4B;QACnF,sBAAsB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,mCAAmC,EAAE,yCAAyC,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,6BAA6B,EAAE,oCAAoC,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB;QAC7kB,yBAAyB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,2BAA2B;QAC3e,iBAAiB;QACjB,yBAAyB,EAAE,4BAA4B,EAAE,yBAAyB;QAClF,mBAAmB;QACnB,sBAAsB,EAAE,uBAAuB,EAAE,kCAAkC,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,oBAAoB;QACnK,0BAA0B,EAAE,qCAAqC,EAAE,2CAA2C;QAC9G,2CAA2C,EAAE,oCAAoC;QACjF,qBAAqB;QACrB,iFAAiF;QACjF,sBAAsB,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,sBAAsB;QAClG,kFAAkF;QAClF,2BAA2B,EAAE,8BAA8B,EAAE,wBAAwB;QACrF,2BAA2B,EAAE,8BAA8B,EAAE,uBAAuB;QACpF,2BAA2B,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,2BAA2B;QAC7G,4FAA4F;QAC5F,wBAAwB,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,2BAA2B;QAC7G,2BAA2B,EAAE,iCAAiC;KACjE;IACD,OAAO,EAAE;QACL,iBAAiB;QACjB,yBAAyB,EAAE,yBAAyB,EAAE,yBAAyB;QAC/E,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,2BAA2B;QACtH,uBAAuB,EAAE,yBAAyB;QAClD,uBAAuB,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,wBAAwB;QACxG,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB;QAC3G,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB;QAC1G,oBAAoB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,qBAAqB;QAC7F,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB;QAChE,uBAAuB;QACvB,uBAAuB,EAAE,4BAA4B;QACrD,0BAA0B,EAAE,yBAAyB,EAAE,4BAA4B;QACnF,4BAA4B,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,2BAA2B;QACrH,sBAAsB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,mCAAmC,EAAE,yCAAyC,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,6BAA6B,EAAE,oCAAoC,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB;QAC7kB,yBAAyB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,2BAA2B;QAC3e,sBAAsB,EAAE,uBAAuB,EAAE,kCAAkC,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,oBAAoB;QACnK,0BAA0B,EAAE,qCAAqC,EAAE,2CAA2C;QAC9G,2CAA2C,EAAE,oCAAoC;QACjF,qBAAqB;QACrB,sFAAsF;QACtF,2EAA2E;QAC3E,yBAAyB,EAAE,4BAA4B,EAAE,4BAA4B;QACrF,0BAA0B,EAAE,sBAAsB,EAAE,wBAAwB;QAC5E,sBAAsB,EAAE,0BAA0B,EAAE,sBAAsB;QAC1E,0FAA0F;QAC1F,2FAA2F;QAC3F,uCAAuC,EAAE,oCAAoC;QAC7E,qCAAqC,EAAE,oCAAoC;QAC3E,sCAAsC,EAAE,qCAAqC;QAC7E,sGAAsG;QACtG,2BAA2B,EAAE,8BAA8B,EAAE,wBAAwB;QACrF,2BAA2B,EAAE,8BAA8B,EAAE,uBAAuB;QACpF,2BAA2B,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,2BAA2B;QAC7G,4FAA4F;QAC5F,wBAAwB,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,2BAA2B;QAC7G,2BAA2B,EAAE,iCAAiC;KACjE;IACD,KAAK,EAAE;QACH,oBAAoB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,mBAAmB;QACvF,oBAAoB;QACpB,mBAAmB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,4BAA4B;QACvH,qBAAqB,EAAE,mBAAmB,EAAE,qBAAqB;QACjE,sBAAsB,EAAE,qBAAqB,EAAE,uBAAuB;QACtE,uBAAuB,EAAE,uBAAuB;QAChD,iCAAiC,EAAE,2BAA2B;KACjE;IACD,6FAA6F;IAC7F,6FAA6F;IAC7F,mFAAmF;IACnF,QAAQ,EAAE;QACN,yBAAyB,EAAE,4BAA4B,EAAE,4BAA4B;QACrF,0BAA0B,EAAE,sBAAsB,EAAE,wBAAwB;QAC5E,sBAAsB,EAAE,0BAA0B,EAAE,sBAAsB;QAC1E,0FAA0F;QAC1F,2FAA2F;QAC3F,uCAAuC,EAAE,oCAAoC;QAC7E,qCAAqC,EAAE,oCAAoC;QAC3E,sCAAsC,EAAE,qCAAqC;QAC7E,oBAAoB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,2BAA2B;QACtH,uBAAuB,EAAE,yBAAyB;QAClD,uBAAuB,EAAE,4BAA4B;QACrD,iBAAiB;QACjB,qBAAqB;KACxB;CACJ,CAAC;AAEF,MAAM,YAAY,GAAqC;IACnD,MAAM,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;IACtC,KAAK,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;IAClC,QAAQ,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC;CAC3C,CAAC;AAEF,2DAA2D;AAC3D,MAAM,UAAU,eAAe,CAAC,IAAiB;IAC7C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACjC,OAAQ,QAA8B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;IACjD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC;AAC1E,CAAC;AAED,8FAA8F;AAC9F,CAAC;IACG,MAAM,EAAE,YAAY,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC5C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,2DAA2D,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;AACL,CAAC"}

package/dist/src/mcp/chat-instances.d.ts

@@ -13,6 +13,10 @@
  *   v1.1.0 -- 2026-05-29 -- Add tool annotations (title + read/destructive/idempotent/openWorld hints)
  *     from shared annotations.ts for Connectors Directory compliance.
  *   v1.2.0 -- 2026-05-30 -- MCP audit Phase 1: tool descriptions sourced from canonical catalog via descriptionFor().
+ *   v1.3.0 -- 2026-08-10 -- August audit step 8: aimeat_instance_create builds no record of its own.
+ *     It calls registerChatInstance (services/chat-instance-write.ts), the same write POST
+ *     /v1/chat-instances uses, so the GHII check, the isAnonymous flag and the change event are
+ *     decided once. The tool keeps its own text rendering.
  */
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { AimeatConfig } from '../config.js';

package/dist/src/mcp/chat-instances.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chat-instances.d.ts","sourceRoot":"","sources":["../../../src/mcp/chat-instances.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAEtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAKvD,wBAAgB,0BAA0B,CACtC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7D,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACrD,IAAI,CAmLN"}
+{"version":3,"file":"chat-instances.d.ts","sourceRoot":"","sources":["../../../src/mcp/chat-instances.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAEtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAMvD,wBAAgB,0BAA0B,CACtC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7D,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACrD,IAAI,CA4JN"}

package/dist/src/mcp/chat-instances.js

@@ -13,12 +13,17 @@
  *   v1.1.0 -- 2026-05-29 -- Add tool annotations (title + read/destructive/idempotent/openWorld hints)
  *     from shared annotations.ts for Connectors Directory compliance.
  *   v1.2.0 -- 2026-05-30 -- MCP audit Phase 1: tool descriptions sourced from canonical catalog via descriptionFor().
+ *   v1.3.0 -- 2026-08-10 -- August audit step 8: aimeat_instance_create builds no record of its own.
+ *     It calls registerChatInstance (services/chat-instance-write.ts), the same write POST
+ *     /v1/chat-instances uses, so the GHII check, the isAnonymous flag and the change event are
+ *     decided once. The tool keeps its own text rendering.
  */
 import { ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
-import { parseGaiiLoose, buildChatInstanceId } from '../utils/gaii.js';
+import { parseGaiiLoose } from '../utils/gaii.js';
 import { annotationsFor } from './annotations.js';
 import { descriptionFor } from './catalog/shape.js';
+import { registerChatInstance } from '../services/chat-instance-write.js';
 export function registerChatInstancesTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged) {
     const agentGaii = getAgentGaii();
     /** Resolve owner name from agent GAII */
@@ -87,40 +92,15 @@ export function registerChatInstancesTools(mcp, storage, config, getAgentGaii, e
         name: z.string().describe('Application name for this instance'),
         model: z.string().optional().describe('AI model identifier (e.g. gpt-4o, claude-3-5-sonnet)'),
     }, annotationsFor('aimeat_instance_create'), async ({ name, model }) => {
-        const owner = ownerName();
+        // The tool's own parameter is a model id; the record's platform is its vendor segment.
         const platform = model ? model.split('-')[0] ?? 'unknown' : 'unknown';
-        const id = buildChatInstanceId(platform, name, owner, config.nodeId);
-        const ghii = `${owner}@${config.nodeId}`;
-        const now = new Date().toISOString();
-        // Upsert: if already exists just return it
-        const existing = await storage.getChatInstance(id);
-        if (existing) {
-            return {
-                content: [{
-                        type: 'text',
-                        text: JSON.stringify({
-                            id: existing.id,
-                            name: existing.appName,
-                            platform: existing.platform,
-                            status: 'existing',
-                            created_at: existing.createdAt,
-                        }, null, 2),
-                    }],
-            };
+        const out = await registerChatInstance({ storage, config }, { ownerName: ownerName(), agentGaii }, { platform, appName: name });
+        if (!out.ok) {
+            return { content: [{ type: 'text', text: out.message }], isError: true };
         }
-        const inst = await storage.createChatInstance({
-            id,
-            platform,
-            appName: name,
-            ownerName: owner,
-            ghii,
-            nodeId: config.nodeId,
-            isAnonymous: false,
-            agentGaii: agentGaii,
-            createdAt: now,
-            lastSeen: now,
-        });
-        emitResourceListChanged(agentGaii);
+        const { record: inst, created } = out.value;
+        if (created)
+            emitResourceListChanged(agentGaii);
         return {
             content: [{
                     type: 'text',
@@ -128,7 +108,7 @@ export function registerChatInstancesTools(mcp, storage, config, getAgentGaii, e
                         id: inst.id,
                         name: inst.appName,
                         platform: inst.platform,
-                        status: 'created',
+                        status: created ? 'created' : 'existing',
                         created_at: inst.createdAt,
                     }, null, 2),
                 }],

package/dist/src/mcp/chat-instances.js.map

@@ -1 +1 @@
-{"version":3,"file":"chat-instances.js","sourceRoot":"","sources":["../../../src/mcp/chat-instances.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAa,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,MAAM,UAAU,0BAA0B,CACtC,GAAc,EACd,OAAgB,EAChB,MAAoB,EACpB,YAA0B,EAC1B,mBAA6D,EAC7D,uBAAoD;IAEpD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,yCAAyC;IACzC,SAAS,SAAS;QACd,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC;IAED,gCAAgC;IAChC,GAAG,CAAC,gBAAgB,CAChB,eAAe,EACf,IAAI,gBAAgB,CAAC,yBAAyB,EAAE;QAC5C,IAAI,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9E,OAAO;gBACH,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC9B,GAAG,EAAE,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;oBACxD,IAAI,EAAE,IAAI,CAAC,OAAO;oBAClB,QAAQ,EAAE,kBAAkB;oBAC5B,WAAW,EAAE,aAAa,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,GAAG;iBACzD,CAAC,CAAC;aACN,CAAC;QACN,CAAC;KACJ,CAAC,EACF,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,uBAAuB,EAAE,EACtE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,EAAY,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;QAEtF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QAC1E,CAAC;QAED,OAAO;YACH,QAAQ,EAAE,CAAC;oBACP,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ,EAAE,IAAI,CAAC,OAAO;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,YAAY,EAAE,IAAI,CAAC,WAAW;wBAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;wBAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;wBACxB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;qBACrC,EAAE,IAAI,EAAE,CAAC,CAAC;oBACX,QAAQ,EAAE,kBAAkB;iBAC/B,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,qCAAqC;IACrC,GAAG,CAAC,IAAI,CACJ,sBAAsB,EACtB,cAAc,CAAC,sBAAsB,CAAC,EACtC,EAAE,EACF,cAAc,CAAC,sBAAsB,CAAC,EACtC,KAAK,IAAI,EAAE;QACP,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAE9E,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACxC,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ,EAAE,IAAI,CAAC,OAAO;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,YAAY,EAAE,IAAI,CAAC,WAAW;wBAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;wBAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;wBACxB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;qBACrC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;iBAChB,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,uCAAuC;IACvC,GAAG,CAAC,IAAI,CACJ,wBAAwB,EACxB,cAAc,CAAC,wBAAwB,CAAC,EACxC;QACI,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;KAChG,EACD,cAAc,CAAC,wBAAwB,CAAC,EACxC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACtB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO;gBACH,OAAO,EAAE,CAAC;wBACN,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACjB,EAAE,EAAE,QAAQ,CAAC,EAAE;4BACf,IAAI,EAAE,QAAQ,CAAC,OAAO;4BACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;4BAC3B,MAAM,EAAE,UAAU;4BAClB,UAAU,EAAE,QAAQ,CAAC,SAAS;yBACjC,EAAE,IAAI,EAAE,CAAC,CAAC;qBACd,CAAC;aACL,CAAC;QACN,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC;YAC1C,EAAE;YACF,QAAQ;YACR,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK;YAChB,IAAI;YACJ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,KAAK;YAClB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,GAAG;SAChB,CAAC,CAAC;QAEH,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAEnC,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,IAAI,EAAE,IAAI,CAAC,OAAO;wBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,MAAM,EAAE,SAAS;wBACjB,UAAU,EAAE,IAAI,CAAC,SAAS;qBAC7B,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,uCAAuC;IACvC,GAAG,CAAC,IAAI,CACJ,wBAAwB,EACxB,cAAc,CAAC,wBAAwB,CAAC,EACxC;QACI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;KACvD,EACD,cAAc,CAAC,wBAAwB,CAAC,EACxC,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC/F,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1F,CAAC;QAED,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ,EAAE,IAAI,CAAC,OAAO;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,YAAY,EAAE,IAAI,CAAC,WAAW;wBAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;wBAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;wBACxB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;wBAClC,OAAO,EAAE,IAAI,CAAC,MAAM;qBACvB,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"chat-instances.js","sourceRoot":"","sources":["../../../src/mcp/chat-instances.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAa,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,MAAM,UAAU,0BAA0B,CACtC,GAAc,EACd,OAAgB,EAChB,MAAoB,EACpB,YAA0B,EAC1B,mBAA6D,EAC7D,uBAAoD;IAEpD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,yCAAyC;IACzC,SAAS,SAAS;QACd,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC;IAED,gCAAgC;IAChC,GAAG,CAAC,gBAAgB,CAChB,eAAe,EACf,IAAI,gBAAgB,CAAC,yBAAyB,EAAE;QAC5C,IAAI,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9E,OAAO;gBACH,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC9B,GAAG,EAAE,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;oBACxD,IAAI,EAAE,IAAI,CAAC,OAAO;oBAClB,QAAQ,EAAE,kBAAkB;oBAC5B,WAAW,EAAE,aAAa,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,GAAG;iBACzD,CAAC,CAAC;aACN,CAAC;QACN,CAAC;KACJ,CAAC,EACF,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,uBAAuB,EAAE,EACtE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,EAAY,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;QAEtF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QAC1E,CAAC;QAED,OAAO;YACH,QAAQ,EAAE,CAAC;oBACP,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ,EAAE,IAAI,CAAC,OAAO;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,YAAY,EAAE,IAAI,CAAC,WAAW;wBAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;wBAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;wBACxB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;qBACrC,EAAE,IAAI,EAAE,CAAC,CAAC;oBACX,QAAQ,EAAE,kBAAkB;iBAC/B,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,qCAAqC;IACrC,GAAG,CAAC,IAAI,CACJ,sBAAsB,EACtB,cAAc,CAAC,sBAAsB,CAAC,EACtC,EAAE,EACF,cAAc,CAAC,sBAAsB,CAAC,EACtC,KAAK,IAAI,EAAE;QACP,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAE9E,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACxC,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ,EAAE,IAAI,CAAC,OAAO;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,YAAY,EAAE,IAAI,CAAC,WAAW;wBAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;wBAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;wBACxB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;qBACrC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;iBAChB,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,uCAAuC;IACvC,GAAG,CAAC,IAAI,CACJ,wBAAwB,EACxB,cAAc,CAAC,wBAAwB,CAAC,EACxC;QACI,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;KAChG,EACD,cAAc,CAAC,wBAAwB,CAAC,EACxC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACtB,uFAAuF;QACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtE,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAClC,EAAE,OAAO,EAAE,MAAM,EAAE,EACnB,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,EACrC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAC9B,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtF,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAC5C,IAAI,OAAO;YAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAEhD,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,IAAI,EAAE,IAAI,CAAC,OAAO;wBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;wBACxC,UAAU,EAAE,IAAI,CAAC,SAAS;qBAC7B,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,uCAAuC;IACvC,GAAG,CAAC,IAAI,CACJ,wBAAwB,EACxB,cAAc,CAAC,wBAAwB,CAAC,EACxC;QACI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;KACvD,EACD,cAAc,CAAC,wBAAwB,CAAC,EACxC,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC/F,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1F,CAAC;QAED,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ,EAAE,IAAI,CAAC,OAAO;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,YAAY,EAAE,IAAI,CAAC,WAAW;wBAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;wBAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;wBACxB,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;wBAClC,OAAO,EAAE,IAAI,CAAC,MAAM;qBACvB,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC"}

package/dist/src/mcp/commerce.d.ts

@@ -4,9 +4,11 @@
  *   managing its owner's SELLING (PSP credentials — masked, the secret never returns; app-tool
  *   manifests; offer money pricing) and for BUYING through checkout sessions. Every tool wraps an
  *   EXISTING commerce mechanism — the commerce.psp / apps.{appId}.tools memory-record conventions
- *   the sellable resolvers read, the agents.{name}.offers document (validated with the same
- *   OffersDocSchema the REST route uses), and src/commerce/session-service.ts — no new business
- *   logic. Ownership is always the CALLER's own owner (derived from the session GAII, never from
+ *   the sellable resolvers read, the agents.{name}.offers document (published through
+ *   services/agent-offers-write.ts, the same function the REST route's publish uses), and
+ *   src/commerce/session-service.ts — no new business logic, and no write of its own: every record
+ *   this file stores goes through services/memory-write.ts. Ownership is always the CALLER's own
+ *   owner (derived from the session GAII, never from
  *   input). Money = integer 6-decimal micro-units through money.ts. Scope gates (commerce:sell /
  *   commerce:buy) are enforced by the per-session registration filter (catalog/scopes.ts).
  *   checkout_complete mints a short-lived JWT for the CALLING agent itself (same identity, no
@@ -16,12 +18,25 @@
  *   import { registerCommerceTools } from './commerce.js';
  *   registerCommerceTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged);
  * @version-history
+ *   v1.3.0 — 2026-08-11 — The last three direct storage writes leave this file. Offer pricing goes
+ *     through services/agent-offers-write.ts, the same publish PUT /v1/agents/:name/offers performs.
+ *     psp_delete clears the card credentials by MERGING, the way DELETE /v1/commerce/payout/stripe
+ *     does, instead of dropping a record that also holds the seller's stablecoin payout address;
+ *     psp_status therefore reports `configured` from the credentials rather than from the record's
+ *     existence, matching GET /v1/commerce/payout. putOwnerRecord names the commerce word that
+ *     actually governs each record, so an agent granted only `commerce:psp` is no longer refused.
  *   Limits aligned with the raised model schemas -- 2026-07-30 -- the tool kept its own max(40) on
  *     `tools`, which shadowed the manifest's raised 200 and refused a 41st tool anyway.
+ *   v1.2.0 — 2026-08-11 — putOwnerRecord goes through services/memory-write.ts, so the PSP record
+ *     and the app-tool manifest answer to memory's ceilings, archive guard and byte quota. The
+ *     authorising permission stays commerce:sell, named through the service rather than replaced.
+ *   v1.1.0 — 2026-08-10 — The fulfillment re-issue carries the agent's own scopes.
  *   v1.0.0 — 2026-07-14 — Initial commerce MCP surface (PSP, app-tools, offer pricing, checkout)
  */
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { AimeatConfig } from '../config.js';
 import type { Storage } from '../storage/interface.js';
-export declare function registerCommerceTools(mcp: McpServer, storage: Storage, config: AimeatConfig, getAgentGaii: () => string, _emitResourceUpdated: (agentGaii: string, uri: string) => void, _emitResourceListChanged: (agentGaii: string) => void): void;
+export declare function registerCommerceTools(mcp: McpServer, storage: Storage, config: AimeatConfig, getAgentGaii: () => string, _emitResourceUpdated: (agentGaii: string, uri: string) => void, _emitResourceListChanged: (agentGaii: string) => void, 
+/** The session's own scopes, for the shared memory write behind putOwnerRecord(). */
+sessionScopes?: string[]): void;
 //# sourceMappingURL=commerce.d.ts.map

package/dist/src/mcp/commerce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commerce.d.ts","sourceRoot":"","sources":["../../../src/mcp/commerce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AA+DvD,wBAAgB,qBAAqB,CACjC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC9D,wBAAwB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACtD,IAAI,CA0eN"}
+{"version":3,"file":"commerce.d.ts","sourceRoot":"","sources":["../../../src/mcp/commerce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AA+DvD,wBAAgB,qBAAqB,CACjC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC9D,wBAAwB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI;AACrD,qFAAqF;AACrF,aAAa,GAAE,MAAM,EAAO,GAC7B,IAAI,CA6iBN"}

package/dist/src/mcp/commerce.js

@@ -3,17 +3,17 @@ import { parseGaiiLoose } from '../utils/gaii.js';
 import { annotationsFor } from './annotations.js';
 import { descriptionFor, responseFormatSchema, shapeResponse } from './catalog/shape.js';
 import { AppToolsDocSchema, appToolsKey, appIdFromToolsKey } from '../models/app-tool-schemas.js';
-import { OffersDocSchema } from '../models/offer-schemas.js';
-import { reconcileAfterSourceWrite } from '../services/exchange-projection.js';
+import { loadAgentOffers, publishAgentOffers } from '../services/agent-offers-write.js';
 import { integerMicros, isSupportedMoneyCurrency } from '../commerce/money.js';
 import { createSession, getSession, completeSession, listSessions, CommerceError } from '../commerce/session-service.js';
 import { PaymentError } from '../commerce/payment-handlers.js';
 import { putSplit, deleteSplit, listSplitsByProvider, BENEFICIARIES_MAX } from '../commerce/beneficiary-split.js';
-import { listBeneficiaryEntries, listBeneficiaryObligations } from '../commerce/beneficiary-book.js';
+import { listBeneficiaryEntries, listBeneficiaryObligations, totalsOf } from '../commerce/beneficiary-book.js';
 import { readApproval, putApproval, beneficiaryEligibility, releaseBeneficiaryShare } from '../commerce/beneficiary-release.js';
 import { quoteBeneficiaryPayout, settleBeneficiaryPayout } from '../commerce/beneficiary-payout.js';
 import { issueJWT } from '../auth/jwt.js';
-import { emitChange } from '../services/event-bus.js';
+import { writeMemoryRecord } from '../services/memory-write.js';
+import { scopeIsCovered } from '../utils/scope-coverage.js';
 import { logger } from '../utils/logger.js';
 const PSP_KEY = 'commerce.psp';
 function ok(data) {
@@ -56,40 +56,99 @@ async function listAppToolManifests(storage, ownerGhii, includePrivate) {
         return [];
     }
 }
-export function registerCommerceTools(mcp, storage, config, getAgentGaii, _emitResourceUpdated, _emitResourceListChanged) {
+export function registerCommerceTools(mcp, storage, config, getAgentGaii, _emitResourceUpdated, _emitResourceListChanged, 
+/** The session's own scopes, for the shared memory write behind putOwnerRecord(). */
+sessionScopes = []) {
+    // The operator kill switch, honoured here too. routes/commerce.ts:139-146 turns the WHOLE
+    // /v1/commerce surface off with a 503 when AIMEAT_COMMERCE_ENABLED=false, and that middleware
+    // sits on the router, so it covers the payout routes as well. The MCP tools were registered
+    // regardless, so an agent could still write and destroy the seller's payment credentials on a
+    // node where the operator had switched commerce off. Not registering them is the same answer
+    // the route gives, in this protocol's terms.
+    if (!config.commerceEnabled)
+        return;
     const agentGaii = getAgentGaii();
     const owner = parseGaiiLoose(agentGaii).owner;
     const ownerGhii = `${owner}@${config.nodeId}`;
-    /** Upsert one memory record under the caller's OWNER GHII (the seller identity resolvers read). */
-    async function putOwnerRecord(key, value, visibility, tags) {
-        const existing = await storage.getMemory(ownerGhii, key);
-        const now = new Date().toISOString();
-        await storage.setMemory({
-            key, ownerGaii: ownerGhii, value, visibility, tags, ttlHours: null,
-            version: (existing?.version ?? 0) + 1, createdAt: existing?.createdAt ?? now, updatedAt: now,
+    /**
+     * Upsert one memory record under the caller's OWNER GHII (the seller identity resolvers read).
+     *
+     * It goes through the shared write, because a seller's PSP configuration and an app's tool
+     * manifest are memory records and answer to memory's rules. Writing them straight to storage
+     * meant no archive guard, no value-size ceiling, no key count and no byte quota or overage
+     * charge — the manifest in particular is up to 200 entries of unbounded records, so the only
+     * thing that would ever have bounded it was the ceiling that was missing.
+     *
+     * The authorising permission is a commerce word and not memory:write: that is what the owner
+     * granted for exactly this, and demanding a memory permission nobody was asked for would refuse
+     * a seller who is properly configured. WHICH commerce word is the caller's to say, because the
+     * two records do not share one: the PSP credentials ride `commerce:psp` and the app-tool
+     * manifest rides `commerce:sell`, exactly as the registration filter has them
+     * (mcp/catalog/scopes.ts). Naming one for both meant an agent granted only `commerce:psp` had
+     * psp_set registered and then had its write refused.
+     */
+    async function putOwnerRecord(key, value, visibility, tags, authorisingScope) {
+        const written = await writeMemoryRecord({ storage, config }, {
+            principal: agentGaii, targetGaii: ownerGhii, scopes: sessionScopes, roles: ['agent'],
+        }, {
+            key, value, visibility, tags,
+            pipeline: 'mcp.commerce',
+            ownerScoped: true,
+            authorisingScope,
         });
+        return written.ok ? null : `${written.code}: ${written.message}`;
     }
     // ── Seller: PSP credentials (secret in, masked status out — NEVER the secret) ──
     mcp.tool('aimeat_commerce_psp_set', descriptionFor('aimeat_commerce_psp_set'), {
         provider: z.string().min(1).max(60),
         secret_key: z.string().min(4).max(500),
     }, annotationsFor('aimeat_commerce_psp_set'), async ({ provider, secret_key }) => {
+        // Same bound the route applies (routes/commerce.ts:210-214). This tool stored whatever
+        // arrived, so a blank or truncated key became the seller's configured PSP credential
+        // and every money sale failed at settlement instead of at configuration.
+        const key = String(secret_key ?? '').trim();
+        if (key.length < 8 || key.length > 200) {
+            return fail('INVALID_PSP: secret_key must be your PSP secret (8-200 characters). It is stored server-side and never returned.');
+        }
         // MERGE: the same record also holds the seller's x402 USDC payout address. Replacing it
         // wholesale would silently delete the other rail's setting (and vice versa).
         const existing = (await storage.getMemory(ownerGhii, PSP_KEY))?.value;
-        await putOwnerRecord(PSP_KEY, { ...(existing ?? {}), provider, secretKey: secret_key }, 'private', ['commerce']);
-        return ok({ configured: true, provider, key_hint: maskSecret(secret_key), note: 'Stored server-side; money sales settle on this PSP account. The secret is never returned by any tool.' });
+        const pspRefusal = await putOwnerRecord(PSP_KEY, { ...(existing ?? {}), provider, secretKey: key }, 'private', ['commerce'], 'commerce:psp');
+        if (pspRefusal)
+            return { content: [{ type: 'text', text: pspRefusal }], isError: true };
+        return ok({ configured: true, provider, key_hint: maskSecret(key), note: 'Stored server-side; money sales settle on this PSP account. The secret is never returned by any tool.' });
     });
     mcp.tool('aimeat_commerce_psp_status', descriptionFor('aimeat_commerce_psp_status'), {}, annotationsFor('aimeat_commerce_psp_status'), async () => {
         const rec = await storage.getMemory(ownerGhii, PSP_KEY);
-        if (!rec)
+        const v = (rec?.value ?? {});
+        // `configured` means CREDENTIALS are set, which is what GET /v1/commerce/payout has
+        // always reported (`stripe.configured: !!psp.secretKey`). Keying it off the record's
+        // existence answered "configured" for a seller whose record holds only the stablecoin
+        // payout address and no card credentials at all.
+        if (!v.secretKey)
             return ok({ configured: false });
-        const v = rec.value;
-        return ok({ configured: true, provider: v.provider ?? 'unknown', key_hint: maskSecret(v.secretKey), updated_at: rec.updatedAt });
+        return ok({ configured: true, provider: v.provider ?? 'unknown', key_hint: maskSecret(v.secretKey), updated_at: rec?.updatedAt });
     });
     mcp.tool('aimeat_commerce_psp_delete', descriptionFor('aimeat_commerce_psp_delete'), {}, annotationsFor('aimeat_commerce_psp_delete'), async () => {
-        const deleted = await storage.deleteMemory(ownerGhii, PSP_KEY);
-        return ok({ deleted, note: deleted ? 'Money-currency checkouts of your items now fail until new credentials are set.' : 'No PSP credentials were configured.' });
+        // MERGE, the same way DELETE /v1/commerce/payout/stripe does it. The record also holds
+        // the seller's x402 stablecoin payout address, so dropping the whole record threw away a
+        // hand-typed on-chain address that four validation steps guard on the way in — and
+        // psp_set a few lines above already merges for exactly that reason. What the tool says
+        // it removes is the credentials, so that is what it removes.
+        const existing = (await storage.getMemory(ownerGhii, PSP_KEY))?.value;
+        if (!existing || (existing.secretKey === undefined && existing.provider === undefined)) {
+            return ok({ deleted: false, note: 'No PSP credentials were configured.' });
+        }
+        const next = { ...existing };
+        delete next.secretKey;
+        delete next.provider;
+        const clearRefusal = await putOwnerRecord(PSP_KEY, next, 'private', ['commerce'], 'commerce:psp');
+        if (clearRefusal)
+            return { content: [{ type: 'text', text: clearRefusal }], isError: true };
+        return ok({
+            deleted: true,
+            note: 'Card sales now fail until credentials are set again. Stablecoin and invoice settlement are unaffected.',
+        });
     });
     // ── Seller: app-tool manifest (apps.{appId}.tools — the record the resolver + feed read) ──
     mcp.tool('aimeat_app_tools_publish', descriptionFor('aimeat_app_tools_publish'), {
@@ -110,9 +169,12 @@ export function registerCommerceTools(mcp, storage, config, getAgentGaii, _emitR
             ...(parsed.data.provenance ? { provenance: parsed.data.provenance } : {}),
             tools: parsed.data.tools,
         };
-        await putOwnerRecord(key, doc, 'public', ['commerce', 'app-tools']);
-        // TARGET-050: the manifest is the source of truth for the EXCHANGE listing — project it now.
-        await reconcileAfterSourceWrite(storage, ownerGhii, key);
+        const manifestRefusal = await putOwnerRecord(key, doc, 'public', ['commerce', 'app-tools'], 'commerce:sell');
+        if (manifestRefusal)
+            return { content: [{ type: 'text', text: manifestRefusal }], isError: true };
+        // TARGET-050: the manifest is the source of truth for the EXCHANGE listing. The
+        // projection is not called here any more — the shared write reconciles it, and calling
+        // it again did the same work twice.
         return ok({
             app: `${owner}/${app_id}`,
             version: doc.version,
@@ -157,16 +219,15 @@ export function registerCommerceTools(mcp, storage, config, getAgentGaii, _emitR
         clear_money: z.boolean().optional(),
         visibility: z.enum(['private', 'unlisted', 'public']).optional(),
     }, annotationsFor('aimeat_offer_price_set'), async ({ agent_name, offer_id, price_morsels, money_amount_micros, money_currency, clear_morsels, clear_money, visibility }) => {
-        // Ownership: only the caller's OWN owner's agents — the GAII is built from the
-        // session owner, never from input, so a foreign agent name simply won't resolve.
-        const targetGaii = `${agent_name}#${owner}@${config.nodeId}`;
-        const agent = await storage.getAgent(targetGaii);
-        if (!agent)
-            return fail(`AGENT_NOT_FOUND: you have no agent named "${agent_name}"`);
-        const key = `agents.${agent_name}.offers`;
-        const rec = await storage.getMemory(targetGaii, key);
-        const doc = rec?.value ?? { offers: [] };
-        const offers = doc.offers ?? [];
+        // Ownership: only the caller's OWN owner's agents. The target is resolved from the
+        // session owner, never from input, so a foreign agent name simply will not resolve.
+        const loaded = await loadAgentOffers({ storage, config }, owner, agent_name);
+        if (!loaded.ok) {
+            return fail(loaded.code === 'AGENT_NOT_FOUND'
+                ? `AGENT_NOT_FOUND: you have no agent named "${agent_name}"`
+                : `${loaded.code}: ${loaded.message}`);
+        }
+        const offers = loaded.offers;
         const offer = offers.find((o) => o.id === offer_id);
         if (!offer)
             return fail(`OFFER_NOT_FOUND: ${offer_id} (agent ${agent_name} has ${offers.length} offer(s))`);
@@ -184,22 +245,20 @@ export function registerCommerceTools(mcp, storage, config, getAgentGaii, _emitR
             offer.priceMoney = null;
         if (visibility)
             offer.visibility = visibility;
-        // Same write-path contract as the REST route: the WHOLE document must validate.
-        const parsed = OffersDocSchema.safeParse({ offers });
-        if (!parsed.success)
-            return fail(`INVALID_OFFERS: ${parsed.error.message}`);
-        const now = new Date().toISOString();
-        await storage.setMemory({
-            key, ownerGaii: targetGaii,
-            value: { version: (doc.version ?? 0) + 1, updatedAt: now, offers: parsed.data.offers },
-            visibility: 'owner', tags: ['offers'], ttlHours: null,
-            version: (rec?.version ?? 0) + 1, createdAt: rec?.createdAt ?? now, updatedAt: now,
-        });
-        emitChange('agents');
-        // TARGET-050: an offer flagged `exchange` is projected onto the market from here.
-        await reconcileAfterSourceWrite(storage, targetGaii, key);
+        // ONE implementation, and it is not this one. services/agent-offers-write.ts owns the
+        // whole-document validation, the version bump, the record shape, the memory rules the
+        // record answers to and the change event — the same sequence PUT /v1/agents/:name/offers
+        // runs, because publishing an offers document is the same act either way. What stays
+        // here is the price edit above and the answer below.
+        const published = await publishAgentOffers({ storage, config }, {
+            principal: agentGaii, owner, scopes: sessionScopes, roles: ['agent'],
+            pipeline: 'mcp.offer_price_set',
+            authorisingScope: 'commerce:sell',
+        }, agent_name, offers);
+        if (!published.ok)
+            return fail(`${published.code}: ${published.message}`);
         return ok({
-            agent: agent_name, offer: offer_id,
+            agent: published.agentName, offer: offer_id,
             price: offer.price ?? null, priceMoney: offer.priceMoney ?? null,
             visibility: offer.visibility ?? 'private',
         });
@@ -246,8 +305,23 @@ export function registerCommerceTools(mcp, storage, config, getAgentGaii, _emitR
             // buyer's token. The MCP layer holds no forwardable bearer, so mint a SHORT-LIVED
             // token for the CALLING AGENT ITSELF (same sub/owner/roles as its session — the
             // node is the token authority; this is re-issuance, not privilege escalation).
-            const callerJwt = await issueJWT({ sub: agentGaii, owner, node: config.nodeId, roles: ['agent'], mcp_client: 'mcp-commerce-fulfillment' }, 120);
-            const completed = await completeSession(storage, config, session, handler, undefined, callerJwt);
+            // The agent's own scopes ride along. Omitting them meant a wildcard, so a
+            // round trip through fulfillment handed back more authority than the session held.
+            const fulfilAgent = await storage.getAgent(agentGaii);
+            const callerJwt = await issueJWT({
+                sub: agentGaii, owner, node: config.nodeId, roles: ['agent'],
+                scopes: fulfilAgent?.defaultScopes ?? config.defaultAgentScopes,
+                mcp_client: 'mcp-commerce-fulfillment',
+            }, 120);
+            // The completing principal, which this call used to omit entirely. Today it is
+            // dormant — appSpendRefusal only bites role 'app', and an MCP session is always an
+            // agent record — but "a fifth door cannot forget it" is exactly what the per-app
+            // spend gate was written for, and this door forgot it. Passing the caller means the
+            // day an app-grant or ecosystem principal can open an MCP session, contract:spend
+            // and the per-app cap apply here without anyone remembering to come back.
+            const completed = await completeSession(storage, config, session, handler, undefined, callerJwt, {
+                roles: ['agent'], scopes: sessionScopes, appGrantId: null,
+            });
             return ok({ session: completed });
         }
         catch (err) {
@@ -267,18 +341,6 @@ export function registerCommerceTools(mcp, storage, config, getAgentGaii, _emitR
     // hand-rolling a bearer token. Every one of them resolves the caller's OWN owner GHII and
     // never accepts a provider id from the argument list: the revenue being given away has to be
     // the giver's, and that is the whole cross-owner question here.
-    /** Money micros and morsels are different KINDS of quantity, so they are bucketed, never summed. */
-    function totalsOf(entries) {
-        const totals = {};
-        for (const e of entries) {
-            // Keyed by currency. No morsel bucket: morsels pace usage and are never shared.
-            const bucket = e.currency;
-            const t = totals[bucket] ?? (totals[bucket] = { accrued: 0, released: 0, paid: 0, reversed: 0, entries: 0 });
-            t[e.status] += e.amount;
-            t.entries += 1;
-        }
-        return totals;
-    }
     mcp.tool('aimeat_commerce_beneficiary_split_set', descriptionFor('aimeat_commerce_beneficiary_split_set'), {
         ext: z.string().min(1).max(200),
         action: z.string().min(1).max(200),
@@ -410,9 +472,16 @@ export function registerCommerceTools(mcp, storage, config, getAgentGaii, _emitR
             const gate = await beneficiaryEligibility(storage, config, target);
             return ok({ ghii: target, approval, state: gate.state, payable: gate.eligible, message: gate.message });
         }
-        // WRITE path. Operator only: a gate a provider could open for their own payees is not a gate.
+        // WRITE path. Operator only: a gate a provider could open for their own payees is not a
+        // gate. On top of the role, its own permission word — recording a beneficiary as
+        // verified is what makes a payout possible, so it costs an explicit tick that no
+        // wildcard carries rather than riding along with Full access.
         if (!isOperator)
             return fail('FORBIDDEN: recording an approval is an operator action');
+        if (!scopeIsCovered(sessionScopes, 'commerce:beneficiary-verify')) {
+            return fail('Recording a beneficiary approval needs the "commerce:beneficiary-verify" '
+                + 'permission, which this session does not carry.');
+        }
         if (!ghii)
             return fail('INVALID_INPUT: name the beneficiary GHII to record an approval for');
         if (state === 'verified' && !method) {