aimeat 2.7.0 → 3.1.0

package/dist/scripts/check-outbound-fetch.js

@@ -0,0 +1,134 @@
+/**
+ * @file scripts/check-outbound-fetch.ts
+ * @description The gate for Rule 10 invariant 3: any fetch whose URL is not a compile-time constant
+ *   goes through safeFetch(), which re-validates every redirect hop. A validated host can 3xx-bounce
+ *   to 169.254.169.254 or to loopback, so validating only the first hop validates nothing.
+ *
+ *   The federation carve-out is real and deliberate — peer-to-peer calls go to operator-approved URLs
+ *   and safeFetch would break legitimate private-network federation — but it lives nowhere in the
+ *   code, so a reader cannot tell an intentional peer fetch from an oversight. Neither can a
+ *   reviewer, and the August 2026 audit could not either without reading all fifty-one call sites.
+ *   This turns each one into either a safeFetch call or a written, reviewable statement.
+ *
+ *   Ratchet, not a wall: seeded with today's call sites, so the gate fails only on a NEW one. Same
+ *   shape as check-route-scopes.ts and check-silent-catch.ts.
+ * @structure
+ *   - collectFetches(): every bare fetch( with a non-literal URL under src/
+ *   - main(): compare against security/outbound-fetch-exemptions.json; --strict gates; --seed rewrites
+ * @usage
+ *   cd aimeat && pnpm check:outbound-fetch            # report
+ *   cd aimeat && pnpm check:outbound-fetch --strict   # the hook/CI gate
+ *   cd aimeat && pnpm check:outbound-fetch --seed     # rewrite the exemption file
+ * @version-history
+ *   v1.0.0 — 2026-08-10 — Initial (August 2026 audit, systemic pattern 6).
+ */
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from 'node:fs';
+import { join, relative } from 'node:path';
+const ROOT = process.cwd();
+const SRC = join(ROOT, 'src');
+const EXEMPTIONS = join(ROOT, 'security', 'outbound-fetch-exemptions.json');
+function walk(dir, out = []) {
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        if (statSync(full).isDirectory()) {
+            // src/static is browser code: its fetch() runs in the user's tab, not on the node, so
+            // server-side SSRF does not apply there.
+            if (entry === 'static' || entry === 'generated')
+                continue;
+            walk(full, out);
+        }
+        else if (entry.endsWith('.ts'))
+            out.push(full);
+    }
+    return out;
+}
+/** A URL argument that is a plain string literal cannot be steered by a caller, so it is not the
+ *  hazard this rule is about. Everything else (a variable, a template with a hole, a property) is. */
+function isConstantUrl(arg) {
+    const t = arg.trim();
+    if (/^['"][^'"]*['"]$/.test(t))
+        return true;
+    if (/^`[^`${}]*`$/.test(t))
+        return true;
+    return false;
+}
+export function collectFetches(files) {
+    const findings = [];
+    for (const file of files) {
+        const source = readFileSync(file, 'utf-8');
+        const rel = relative(ROOT, file).replace(/\\/g, '/');
+        if (rel.endsWith('utils/url-validator.ts'))
+            continue; // safeFetch itself
+        const lines = source.split(/\r?\n/);
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            // `await fetch(` / `= fetch(` / `return fetch(` — but not safeFetch(, and not a method
+            // call like `res.fetch(` or `session.fetch(` (those are the browser SDK's own helper).
+            const m = /(^|[^.\w])fetch\s*\(/.exec(line);
+            if (!m)
+                continue;
+            if (/safeFetch\s*\(/.test(line))
+                continue;
+            const after = line.slice(m.index + m[0].length);
+            if (isConstantUrl(after.split(',')[0]))
+                continue;
+            findings.push({ file: rel, line: i + 1, snippet: line.trim().slice(0, 96) });
+        }
+    }
+    return findings;
+}
+const softKey = (f) => `${f.file}:${f.snippet.slice(0, 60)}`;
+function main() {
+    const strict = process.argv.includes('--strict');
+    const seed = process.argv.includes('--seed');
+    const findings = collectFetches(walk(SRC));
+    if (seed) {
+        const exempt = {};
+        for (const f of findings) {
+            const fed = f.file.includes('federation') || /peer|genesis/i.test(f.file);
+            exempt[softKey(f)] = fed
+                ? 'Federation outbound to an operator-approved peer URL. Deliberate: safeFetch would break '
+                    + 'legitimate private-network federation. Ruled by-design 2026-07-10.'
+                : 'Seeded 2026-08-10 from the August audit. Not yet reviewed: decide whether this URL can be '
+                    + 'influenced by a low-privilege principal, and move it to safeFetch if so.';
+        }
+        const out = {
+            note: 'Bare fetch() call sites with a non-constant URL. Seeded from the state on 2026-08-10 so the '
+                + 'gate can only ratchet down. A new one must either use safeFetch (utils/url-validator.ts) or '
+                + 'be added here with a reason. The federation entries are the documented carve-out.',
+            exempt,
+        };
+        writeFileSync(EXEMPTIONS, JSON.stringify(out, null, 2) + '\n');
+        console.log(`Seeded ${findings.length} exemptions into ${relative(ROOT, EXEMPTIONS)}`);
+        return;
+    }
+    const exempt = existsSync(EXEMPTIONS)
+        ? JSON.parse(readFileSync(EXEMPTIONS, 'utf-8')).exempt
+        : {};
+    const known = new Set(Object.keys(exempt));
+    const fresh = findings.filter(f => !known.has(softKey(f)));
+    const fed = findings.filter(f => (exempt[softKey(f)] ?? '').startsWith('Federation outbound'));
+    console.log('');
+    console.log('  Outbound fetch — Rule 10 invariant 3');
+    console.log('  ' + '─'.repeat(62));
+    console.log(`  bare non-constant fetch   ${String(findings.length).padStart(4)}`);
+    console.log(`  of which federation       ${String(fed.length).padStart(4)}   (documented carve-out)`);
+    console.log(`  NEW, not exempt           ${String(fresh.length).padStart(4)}`);
+    console.log('');
+    if (fresh.length) {
+        console.log('  A non-constant outbound URL goes through safeFetch(), which re-validates every');
+        console.log('  redirect hop. If this one is a deliberate exception, add it with a reason to');
+        console.log('  security/outbound-fetch-exemptions.json.');
+        console.log('');
+        for (const f of fresh)
+            console.log(`    ${f.file}:${f.line}  ${f.snippet}`);
+        console.log('');
+    }
+    if (strict && fresh.length) {
+        console.error(`✖ ${fresh.length} new bare outbound fetch(es).`);
+        process.exit(1);
+    }
+    console.log(fresh.length ? '  (report only — pass --strict to gate)' : '  ✓ no new bare outbound fetches');
+}
+main();
+//# sourceMappingURL=check-outbound-fetch.js.map

package/dist/scripts/check-outbound-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-outbound-fetch.js","sourceRoot":"","sources":["../../scripts/check-outbound-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;AAK5E,SAAS,IAAI,CAAC,GAAW,EAAE,MAAgB,EAAE;IACzC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,sFAAsF;YACtF,yCAAyC;YACzC,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,WAAW;gBAAE,SAAS;YAC1D,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;sGACsG;AACtG,SAAS,aAAa,CAAC,GAAW;IAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAe;IAC1C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAAE,SAAS,CAAG,mBAAmB;QAE3E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,uFAAuF;YACvF,uFAAuF;YACvF,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YACjD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAEtE,SAAS,IAAI;IACT,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3C,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG;gBACpB,CAAC,CAAC,0FAA0F;sBACxF,oEAAoE;gBACxE,CAAC,CAAC,4FAA4F;sBAC1F,0EAA0E,CAAC;QACvF,CAAC;QACD,MAAM,GAAG,GAAkB;YACvB,IAAI,EAAE,8FAA8F;kBAC9F,8FAA8F;kBAC9F,mFAAmF;YACzF,MAAM;SACT,CAAC;QACF,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,UAAU,QAAQ,CAAC,MAAM,oBAAoB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC;QACjC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAmB,CAAC,MAAM;QACzE,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAE/F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACtG,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,+BAA+B,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC;AAC/G,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/scripts/check-profile-tabs.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=check-profile-tabs.d.ts.map

package/dist/scripts/check-profile-tabs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-profile-tabs.d.ts","sourceRoot":"","sources":["../../scripts/check-profile-tabs.ts"],"names":[],"mappings":""}

package/dist/scripts/check-profile-tabs.js

@@ -0,0 +1,71 @@
+/**
+ * @file scripts/check-profile-tabs.ts
+ * @description Pre-commit gate: every profile tab registered in profile.js must also have an
+ *   entry in the sidebar menu (landing-page.cards.js). A tab that is registered but not
+ *   listed is reachable ONLY by typing ?tab=<id> into the address bar — it renders fine, it
+ *   answers its API calls, and no test fails, so the miss is invisible until a person spends
+ *   ten minutes hunting for a feature that has no door.
+ *
+ *   This has now happened three times (generator 2026-07-19, then pnl and companies
+ *   2026-08-07), which is what turns it from a slip into a gate.
+ *
+ *   Deliberate exceptions live in ALLOWED_ORPHANS with the reason they are reachable some
+ *   other way. Adding an id there is a decision, not a workaround — an entry without a real
+ *   alternative door is the bug this file exists to catch.
+ *
+ * @structure ALLOWED_ORPHANS · parse both files · report · exit 1 on any unexplained orphan
+ * @usage pnpm check:profile-tabs   (runs in .githooks/pre-commit and CI)
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Added after the Companies tab shipped with no menu entry.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve } from 'node:path';
+const here = dirname(fileURLToPath(import.meta.url));
+const TABS_FILE = resolve(here, '../public/views/profile.js');
+const MENU_FILE = resolve(here, '../public/views/profile/landing-page.cards.js');
+/** Tab ids that legitimately have no sidebar entry, each with the door they DO have. */
+const ALLOWED_ORPHANS = {
+    messages: 'has its own top-level sidebar button above the groups, not a group item',
+    nodeStats: 'lives as a tab on the Nodes page since 2026-06; the route id is kept for old links',
+};
+function read(path) {
+    try {
+        return readFileSync(path, 'utf-8');
+    }
+    catch (err) {
+        console.error(`[check:profile-tabs] cannot read ${path}: ${err.message}`);
+        process.exit(1);
+    }
+}
+const registered = [...read(TABS_FILE).matchAll(/\{\s*id:\s*'([A-Za-z]+)',\s*key:/g)].map((m) => m[1]);
+const menuSource = read(MENU_FILE);
+const inMenu = new Set([...menuSource.matchAll(/\{\s*id:\s*'([A-Za-z]+)',\s*labelKey:/g)].map((m) => m[1]));
+if (registered.length === 0 || inMenu.size === 0) {
+    console.error('[check:profile-tabs] parsed 0 entries — the shape of profile.js or landing-page.cards.js changed, so this gate is no longer checking anything. Fix the patterns.');
+    process.exit(1);
+}
+const orphans = registered.filter((id) => !inMenu.has(id) && !(id in ALLOWED_ORPHANS));
+// The reverse direction matters too: a menu entry pointing at a tab that no longer exists is a
+// dead link, and open() refuses an unknown id silently.
+const dangling = [...inMenu].filter((id) => !registered.includes(id));
+if (orphans.length === 0 && dangling.length === 0) {
+    const explained = Object.keys(ALLOWED_ORPHANS).length;
+    console.log(`✓ profile tabs reachable — ${registered.length} registered, ${inMenu.size} in the sidebar, ${explained} documented exception(s).`);
+    process.exit(0);
+}
+if (orphans.length > 0) {
+    console.error('\n  Profile tabs with NO sidebar entry — reachable only by typing ?tab=<id>:\n');
+    for (const id of orphans)
+        console.error(`    - ${id}`);
+    console.error('\n  Add each to SIDEBAR_GROUPS in public/views/profile/landing-page.cards.js,');
+    console.error('  or to ALLOWED_ORPHANS in this script WITH the other door it has.\n');
+}
+if (dangling.length > 0) {
+    console.error('\n  Sidebar entries pointing at tabs that are not registered (dead menu items):\n');
+    for (const id of dangling)
+        console.error(`    - ${id}`);
+    console.error('');
+}
+process.exit(1);
+//# sourceMappingURL=check-profile-tabs.js.map

package/dist/scripts/check-profile-tabs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-profile-tabs.js","sourceRoot":"","sources":["../../scripts/check-profile-tabs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;AAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,+CAA+C,CAAC,CAAC;AAEjF,wFAAwF;AACxF,MAAM,eAAe,GAA2B;IAC9C,QAAQ,EAAE,yEAAyE;IACnF,SAAS,EAAE,oFAAoF;CAChG,CAAC;AAEF,SAAS,IAAI,CAAC,IAAY;IACxB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;AACjH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;AAEtH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,kKAAkK,CAAC,CAAC;IAClL,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,eAAe,CAAC,CAAC,CAAC;AACvF,+FAA+F;AAC/F,wDAAwD;AACxD,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AAEtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,8BAA8B,UAAU,CAAC,MAAM,gBAAgB,MAAM,CAAC,IAAI,oBAAoB,SAAS,2BAA2B,CAAC,CAAC;IAChJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACvB,OAAO,CAAC,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAChG,KAAK,MAAM,EAAE,IAAI,OAAO;QAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;IAC/F,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;AACxF,CAAC;AACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACxB,OAAO,CAAC,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACnG,KAAK,MAAM,EAAE,IAAI,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC"}

package/dist/scripts/check-route-scopes.d.ts

@@ -0,0 +1,8 @@
+export interface Finding {
+    file: string;
+    line: number;
+    method: string;
+    path: string;
+}
+export declare function collectRoutes(files: string[]): Finding[];
+//# sourceMappingURL=check-route-scopes.d.ts.map

package/dist/scripts/check-route-scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-route-scopes.d.ts","sourceRoot":"","sources":["../../scripts/check-route-scopes.ts"],"names":[],"mappings":"AA6CA,MAAM,WAAW,OAAO;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CAChB;AAkDD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CA8BxD"}

package/dist/scripts/check-route-scopes.js

@@ -0,0 +1,174 @@
+/**
+ * @file scripts/check-route-scopes.ts
+ * @description The gate for Rule 10 invariant 4: every mutating route carries an explicit scope or
+ *   role check. Whether a route requires a scope is stated in exactly one place, the argument list
+ *   of an Express handler, and until this script nothing read that place. The August 2026 audit
+ *   found roughly twenty findings that are each one entry in the list this produces.
+ *
+ *   Why it matters more than it reads: `requireScope`'s owner bypass deliberately excludes the
+ *   `app` role, so `requireScope` is the ONLY middleware that stops an app-grant token. A mutating
+ *   handler with `requireAuth()` alone is exactly the surface a granted app reaches holding whatever
+ *   single scope the consent screen displayed.
+ *
+ *   Ratchet, not a wall: the exemption file is seeded with today's offenders, so the gate fails only
+ *   on a NEW un-exempted handler. The count can go down and never up. Same shape as
+ *   check-silent-catch.ts, which is the repo's established pattern for this.
+ * @structure
+ *   - GATES: middleware names that count as an explicit authorization decision
+ *   - collectRoutes(): parse router.<verb>( calls and resolve their middleware chain
+ *   - main(): compare against security/route-scope-exemptions.json; --strict exits 1 on new ones
+ * @usage
+ *   cd aimeat && pnpm check:route-scopes            # report
+ *   cd aimeat && pnpm check:route-scopes --strict   # the hook/CI gate
+ *   cd aimeat && pnpm check:route-scopes --seed     # rewrite the exemption file from today's state
+ * @version-history
+ *   v1.1.0 — 2026-08-11 — requireOwnerPrincipal counts as a gate (August 2026 audit H-1/H-7), so
+ *     the fourteen account-security routes it now carries could leave the exemption file.
+ *   v1.0.0 — 2026-08-10 — Initial (August 2026 audit, systemic pattern 1).
+ */
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from 'node:fs';
+import { join, relative } from 'node:path';
+const ROOT = process.cwd();
+const ROUTES_DIR = join(ROOT, 'src', 'routes');
+const EXEMPTIONS = join(ROOT, 'security', 'route-scope-exemptions.json');
+/** Middleware that constitutes an explicit authorization decision. `requireAuth` is NOT one: it
+ *  answers "is anyone there", never "may this principal do this". `requireOwnerPrincipal` is one:
+ *  it answers "is this the account holder, or something acting for them", which is the decision the
+ *  account-security doors need and the one no scope word can express. */
+const GATES = ['requireScope', 'requireAnyScope', 'requireRole', 'requireRoleOrScope', 'requireOperator',
+    'requireOwnerPrincipal'];
+/** Verbs that change state. A GET is only checked when it already carries requireAuth (below). */
+const MUTATING = ['post', 'put', 'patch', 'delete'];
+function walk(dir, out = []) {
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        if (statSync(full).isDirectory())
+            walk(full, out);
+        else if (entry.endsWith('.ts'))
+            out.push(full);
+    }
+    return out;
+}
+/**
+ * The middleware section of a `router.verb(...)` call: everything between the path argument and the
+ * handler. Stops at the handler's parameter list, which is the first `(req`/`(_req`/`(async` shape,
+ * so a handler body full of parentheses never confuses the scan.
+ */
+function middlewareSection(source, from) {
+    const slice = source.slice(from, from + 900);
+    const handlerAt = slice.search(/(async\s*)?\(\s*_?req\b|\basync\s*\(\s*_?\w*\s*[,)]/);
+    return handlerAt > 0 ? slice.slice(0, handlerAt) : slice;
+}
+/** Middleware-array constants: `const auth = [requireAuth(), requireRole('operator')]`. */
+function gatedArrayNames(source) {
+    const names = new Set();
+    const re = /const\s+(\w+)\s*(?::[^=]+)?=\s*\[([^\]]*)\]/g;
+    let m;
+    while ((m = re.exec(source))) {
+        if (GATES.some(g => m[2].includes(g)))
+            names.add(m[1]);
+    }
+    return names;
+}
+/**
+ * Federation is authorized by an Ed25519 peer signature verified inside the handler, not by a scope:
+ * there is no auth middleware on `/v1/federation/*` by design (Rule 10 invariant 5), and a scope is
+ * meaningless for a peer node. Those routes have their own gate and their own audit; asking them for
+ * a scope would fill this list with noise and hide the routes that genuinely lack one.
+ */
+function isFederationRoute(rel, path) {
+    return rel.includes('/federation') || path.startsWith('/v1/federation');
+}
+export function collectRoutes(files) {
+    const findings = [];
+    for (const file of files) {
+        const source = readFileSync(file, 'utf-8');
+        const rel = relative(ROOT, file).replace(/\\/g, '/');
+        const arrays = gatedArrayNames(source);
+        // A router-level gate applies to every route in the file: `router.use(requireAuth(), requireRole(...))`
+        const routerLevelGate = /router\.use\(([^)]*(?:requireScope|requireRole|requireAnyScope)[^)]*)\)/.test(source);
+        if (routerLevelGate)
+            continue;
+        const re = /router\.(post|put|patch|delete|get)\(\s*(['"`])([^'"`]+)\2\s*,?/g;
+        let m;
+        while ((m = re.exec(source))) {
+            const [, method, , path] = m;
+            if (isFederationRoute(rel, path))
+                continue;
+            const chain = middlewareSection(source, m.index + m[0].length);
+            const hasGate = GATES.some(g => chain.includes(g))
+                || [...arrays].some(name => new RegExp(`\\b${name}\\b`).test(chain));
+            if (hasGate)
+                continue;
+            // A GET with no auth at all is a deliberately public read (catalogue, bootstrap, an
+            // <img src> path). Only an AUTHENTICATED read is asked to say which scope it needs.
+            if (method === 'get' && !chain.includes('requireAuth'))
+                continue;
+            const line = source.slice(0, m.index).split('\n').length;
+            findings.push({ file: rel, line, method: method.toUpperCase(), path });
+        }
+    }
+    return findings;
+}
+const key = (f) => `${f.file}:${f.line}:${f.method}:${f.path}`;
+/** Line numbers move; the identity that survives an edit is file + method + path. */
+const softKey = (f) => `${f.file}:${f.method}:${f.path}`;
+function loadExemptions() {
+    if (!existsSync(EXEMPTIONS))
+        return { note: '', exempt: {} };
+    return JSON.parse(readFileSync(EXEMPTIONS, 'utf-8'));
+}
+function main() {
+    const strict = process.argv.includes('--strict');
+    const seed = process.argv.includes('--seed');
+    const files = walk(ROUTES_DIR);
+    const findings = collectRoutes(files);
+    if (seed) {
+        const exempt = {};
+        for (const f of findings) {
+            exempt[softKey(f)] = 'Seeded 2026-08-10 from the August audit. Not yet reviewed: this route '
+                + 'changes state (or reads authenticated) without saying which scope it needs.';
+        }
+        const out = {
+            note: 'Routes that mutate (or read while authenticated) without an explicit scope or role gate. '
+                + 'Seeded from the state on 2026-08-10 so the gate can only ratchet down. Remove an entry when '
+                + 'the route gets its gate; never add one without a written reason and an approver.',
+            exempt,
+        };
+        writeFileSync(EXEMPTIONS, JSON.stringify(out, null, 2) + '\n');
+        console.log(`Seeded ${findings.length} exemptions into ${relative(ROOT, EXEMPTIONS)}`);
+        return;
+    }
+    const { exempt } = loadExemptions();
+    const known = new Set(Object.keys(exempt));
+    const fresh = findings.filter(f => !known.has(softKey(f)));
+    const stale = [...known].filter(k => !findings.some(f => softKey(f) === k));
+    const byFile = new Map();
+    for (const f of findings)
+        byFile.set(f.file, [...(byFile.get(f.file) ?? []), f]);
+    console.log('');
+    console.log('  Route authorization gate — Rule 10 invariant 4');
+    console.log('  ' + '─'.repeat(62));
+    console.log(`  ungated handlers   ${String(findings.length).padStart(5)}`);
+    console.log(`  of which exempt    ${String(findings.length - fresh.length).padStart(5)}   (seeded backlog, may only shrink)`);
+    console.log(`  NEW, not exempt    ${String(fresh.length).padStart(5)}`);
+    if (stale.length)
+        console.log(`  exemptions now fixed ${String(stale.length).padStart(3)}   (remove them from the file)`);
+    console.log('');
+    if (fresh.length) {
+        console.log('  A mutating route with requireAuth() alone is reachable by any app-grant token,');
+        console.log('  whatever single scope its owner approved. Add requireScope/requireRole, or add an');
+        console.log('  entry with a reason to security/route-scope-exemptions.json.');
+        console.log('');
+        for (const f of fresh)
+            console.log(`    ${f.file}:${f.line}  ${f.method} ${f.path}`);
+        console.log('');
+    }
+    if (strict && fresh.length) {
+        console.error(`✖ ${fresh.length} new ungated route handler(s).`);
+        process.exit(1);
+    }
+    console.log(fresh.length ? '  (report only — pass --strict to gate)' : '  ✓ no new ungated handlers');
+}
+main();
+//# sourceMappingURL=check-route-scopes.js.map

package/dist/scripts/check-route-scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-route-scopes.js","sourceRoot":"","sources":["../../scripts/check-route-scopes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,6BAA6B,CAAC,CAAC;AAEzE;;;yEAGyE;AACzE,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,oBAAoB,EAAE,iBAAiB;IACpG,uBAAuB,CAAC,CAAC;AAE7B,kGAAkG;AAClG,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAgBpD,SAAS,IAAI,CAAC,GAAW,EAAE,MAAgB,EAAE;IACzC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;aAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAY;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,qDAAqD,CAAC,CAAC;IACtF,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAED,2FAA2F;AAC3F,SAAS,eAAe,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,EAAE,GAAG,8CAA8C,CAAC;IAC1D,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW,EAAE,IAAY;IAChD,OAAO,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAe;IACzC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,wGAAwG;QACxG,MAAM,eAAe,GAAG,yEAAyE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/G,IAAI,eAAe;YAAE,SAAS;QAE9B,MAAM,EAAE,GAAG,kEAAkE,CAAC;QAC9E,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,AAAD,EAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;gBAAE,SAAS;YAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;mBAC3C,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE,IAAI,OAAO;gBAAE,SAAS;YAEtB,oFAAoF;YACpF,oFAAoF;YACpF,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAAE,SAAS;YAEjE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACxE,qFAAqF;AACrF,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAElE,SAAS,cAAc;IACnB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAkB,CAAC;AAC1E,CAAC;AAED,SAAS,IAAI;IACT,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACvB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,wEAAwE;kBACvF,6EAA6E,CAAC;QACxF,CAAC;QACD,MAAM,GAAG,GAAkB;YACvB,IAAI,EAAE,2FAA2F;kBAC3F,8FAA8F;kBAC9F,kFAAkF;YACxF,MAAM;SACT,CAAC;QACF,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,UAAU,QAAQ,CAAC,MAAM,oBAAoB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO;IACX,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC;IAC9H,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAC1H,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;QACnG,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,gCAAgC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;AAC1G,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/scripts/check-shared-implementation.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=check-shared-implementation.d.ts.map

package/dist/scripts/check-shared-implementation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-shared-implementation.d.ts","sourceRoot":"","sources":["../../scripts/check-shared-implementation.ts"],"names":[],"mappings":""}

package/dist/scripts/check-shared-implementation.js

@@ -0,0 +1,158 @@
+/**
+ * @file scripts/check-shared-implementation.ts
+ * @description How far the MCP surface still is from calling what REST calls.
+ *
+ *   THE RULE (CLAUDE.md, Backend): one capability, one implementation, whatever the interface. An MCP
+ *   tool declares its own name, description and parameters because the protocol requires that. It
+ *   does not do the work itself: it calls the same route or the same service function REST calls, so
+ *   the scope check, the validation and the provenance happen where they were written once.
+ *
+ *   THE COST OF NOT DOING THAT, measured rather than argued: the same defect has been fixed three
+ *   separate times inside `aimeat_memory_write` — schema locks, the write target, the provenance
+ *   stamp — each time in one place while the other surface kept the old behaviour. The August 2026
+ *   audit then found two more of the same kind, and step 4 found eight more in the extension sandbox.
+ *
+ *   WHAT THIS COUNTS. A file under src/mcp/ that calls `storage.<something>` is doing the work
+ *   itself. That is the number to drive to zero, and it is a ratchet: the seed is the count on the
+ *   day this was written, and the gate fails only if the number GOES UP. Fixing one tool at a time
+ *   is the intended way through, because each fix is local — one tool swaps a direct call for a
+ *   shared service function that takes the caller and holds the gate.
+ * @structure SEED — the count on 2026-08-10. main(): report, and gate on any increase.
+ * @usage
+ *   cd aimeat && pnpm check:shared-impl            # report
+ *   cd aimeat && pnpm check:shared-impl --strict   # the hook/CI gate
+ * @version-history
+ *   v1.1.0 — 2026-08-11 — WRITE_SEED 2 → 1: aimeat_operator_agent_configure writes through
+ *     services/agent-profile-write.ts. The remaining writer is named, with what its REST twin is
+ *     and how the two already disagree.
+ *   v1.0.0 — 2026-08-10 — Initial (August 2026 audit step 3, option B).
+ */
+import { readFileSync, readdirSync, statSync, existsSync } from 'node:fs';
+import { join, relative } from 'node:path';
+const ROOT = process.cwd();
+const MCP = join(ROOT, 'src', 'mcp');
+/**
+ * Files under src/mcp/ that are not tool surfaces and may talk to storage freely: the OAuth server,
+ * session plumbing, and the catalog. They implement the protocol, not a capability.
+ */
+const NOT_A_TOOL_SURFACE = new Set([
+    'src/mcp/oauth.ts',
+    'src/mcp/session.ts',
+    'src/mcp/sessions.ts',
+    'src/mcp/transport.ts',
+]);
+/**
+ * The count on the day the rule got a measure. The gate fails only above this.
+ *
+ * 44 when the number was first taken (the diagram the developer asked for, commit 846f21f4).
+ * 43 after aimeat_memory_write moved onto services/memory-write.ts — the capability whose same
+ * defect had been fixed three separate times. Lower this line with every tool that follows.
+ *
+ * 44 on 2026-08-11 after mcp/apps-fork.ts moved its quota onto services/install-quotas.ts.
+ * 45 earlier that day, and the two extra files were NOT new offenders: apps-fork.ts and
+ * workspace-create.ts are pure extractions out of apps.ts and workspaces.ts, which grew past
+ * max-file-lines while their gates were being fixed. The same code, counted in two places instead
+ * of one. Raising a ratchet needs a reason in writing, and that is the reason; the backlog did not
+ * grow, and clearing either parent clears its extraction with it.
+ *
+ * 39 files / 2 writers on 2026-08-11, audit step 8: nineteen capabilities moved in one pass, each
+ * one's write extracted into the service its REST twin already called. The number that matters is
+ * the second one, 29 writing tool surfaces became 2, because a tool that only READS a record it did
+ * not build has no shape to drift. The move found 169 places where the two copies had already
+ * disagreed, 113 of them visible to whoever was using the tool. That is the argument for this rule
+ * restated as measurement rather than as principle.
+ */
+const SEED = 39;
+/**
+ * The number that actually matters. A READ through storage is the same read whichever door asks;
+ * a WRITE is where the two implementations drift, because a write carries a gate, a validation and
+ * a side effect that one copy can forget. 30 of the 45 files write. Reported separately so progress
+ * on the risky half is visible even while the file-level count sits still.
+ *
+ * 30 rather than 28 for the same reason as SEED above: two pure extractions, no new capability
+ * writing on its own. Both parents still write, so both extractions count as writers too.
+ *
+ * 2 on 2026-08-11 after step 8. Nineteen capabilities moved in one pass.
+ *
+ * 1 on 2026-08-11 after aimeat_operator_agent_configure moved onto services/agent-profile-write.ts,
+ * where PATCH /v1/agents/:name/tags and /mode already were. Three rules it had been writing around:
+ * tags were stored verbatim, a mode change skipped the Hello Integration step-list re-derive, and an
+ * empty scope list was accepted where REST refuses it.
+ *
+ * The one that remains is mcp/agent-tasks.ts, and the step 8 note that it has "no REST twin at all"
+ * is wrong: aimeat_task_complete writes the same two records POST /v1/agents/:name/tasks/:id/complete
+ * writes, and the two have already drifted. REST completes an ACTIVE or a STALLED task and the tool
+ * only an active one, so an agent that crashed and came back cannot report the work it finished --
+ * the same narrowing services/agent-task-fanout.ts was written to close on the failure path. REST
+ * takes a deliverable_key and the tool has no way to send one, so an MCP completion never reaches
+ * the public feed. And the tool stamps AI provenance on the completion message where REST does not.
+ * The shared home is a completeTask() in services/agent-task-fanout.ts, next to the failTask() that
+ * is the same shape, and closing it means editing the REST door in the same pass.
+ */
+const WRITE_SEED = 1;
+/** Storage methods that change something. Everything else is a read. */
+const WRITEISH = /^(create|set|update|delete|add|remove|insert|upsert|write|debit|credit|transfer|enqueue|revoke|grant|mint|save|publish|archive|deactivate|activate|link|unlink)/i;
+function walk(dir, out = []) {
+    if (!existsSync(dir))
+        return out;
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        if (statSync(full).isDirectory())
+            walk(full, out);
+        else if (entry.endsWith('.ts'))
+            out.push(full);
+    }
+    return out;
+}
+/** Drop comments so a docblock naming `storage.setMemory` does not read as a call. */
+function stripComments(source) {
+    return source.replace(/\/\*[\s\S]*?\*\//g, '').replace(/\/\/.*$/gm, '');
+}
+function main() {
+    const strict = process.argv.includes('--strict');
+    const offenders = [];
+    for (const file of walk(MCP)) {
+        const rel = relative(ROOT, file).replace(/\\/g, '/');
+        if (NOT_A_TOOL_SURFACE.has(rel))
+            continue;
+        const source = stripComments(readFileSync(file, 'utf-8'));
+        const calls = [...source.matchAll(/\bstorage\.([a-zA-Z]+)\s*\(/g)].map(m => m[1]);
+        if (calls.length)
+            offenders.push({ file: rel, calls: [...new Set(calls)].sort() });
+    }
+    const count = offenders.length;
+    const writers = offenders.filter(o => o.calls.some(c => WRITEISH.test(c)));
+    console.log('');
+    console.log('  One capability, one implementation — MCP files doing the work themselves');
+    console.log('  ' + '─'.repeat(62));
+    console.log(`  tool-surface files calling storage directly  ${String(count).padStart(4)}`);
+    console.log(`  seeded on 2026-08-10                         ${String(SEED).padStart(4)}`);
+    console.log('');
+    console.log(`  of those, files that WRITE                   ${String(writers.length).padStart(4)}`);
+    console.log(`  seeded on 2026-08-10                         ${String(WRITE_SEED).padStart(4)}`);
+    console.log('');
+    if (writers.length > WRITE_SEED) {
+        console.error(`✖ ${writers.length} files write through storage directly, above the seeded ${WRITE_SEED}.`);
+        if (strict)
+            process.exit(1);
+        return;
+    }
+    if (count > SEED) {
+        console.log('  NEW since the seed — these are the ones to look at:');
+        for (const o of offenders.slice(0, 10))
+            console.log(`    ${o.file}  (${o.calls.slice(0, 5).join(', ')})`);
+        console.log('');
+        console.error(`✖ ${count} exceeds the seeded ${SEED}. A new MCP tool must call the same service or route REST calls.`);
+        if (strict)
+            process.exit(1);
+        return;
+    }
+    if (count < SEED) {
+        console.log(`  ✓ down ${SEED - count} from the seed. Lower the SEED constant in this script to lock the gain in.`);
+    }
+    else {
+        console.log('  ✓ no new direct-storage tool surfaces (the backlog is unchanged)');
+    }
+}
+main();
+//# sourceMappingURL=check-shared-implementation.js.map

package/dist/scripts/check-shared-implementation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-shared-implementation.js","sourceRoot":"","sources":["../../scripts/check-shared-implementation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAErC;;;GAGG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS;IACvC,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,sBAAsB;CACzB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,IAAI,GAAG,EAAE,CAAC;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB,wEAAwE;AACxE,MAAM,QAAQ,GAAG,kKAAkK,CAAC;AAEpL,SAAS,IAAI,CAAC,GAAW,EAAE,MAAgB,EAAE;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;aAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,sFAAsF;AACtF,SAAS,aAAa,CAAC,MAAc;IACjC,OAAO,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,IAAI;IACT,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,SAAS,GAAwC,EAAE,CAAC;IAE1D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,CAAC,MAAM;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;IAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,kDAAkD,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,kDAAkD,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kDAAkD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,kDAAkD,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,MAAM,2DAA2D,UAAU,GAAG,CAAC,CAAC;QAC3G,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO;IACX,CAAC;IAED,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,uBAAuB,IAAI,kEAAkE,CAAC,CAAC;QACvH,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO;IACX,CAAC;IAED,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,KAAK,6EAA6E,CAAC,CAAC;IACvH,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;IACtF,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/scripts/check-sse-parity.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=check-sse-parity.d.ts.map

package/dist/scripts/check-sse-parity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-sse-parity.d.ts","sourceRoot":"","sources":["../../scripts/check-sse-parity.ts"],"names":[],"mappings":""}