aimeat 2.7.0 → 3.1.0

package/dist/scripts/check-sse-parity.js

@@ -0,0 +1,195 @@
+/**
+ * @file scripts/check-sse-parity.ts
+ * @description An MCP tool file that writes must say so on the change bus.
+ *
+ *   WHY. Every live view in this node subscribes to SSE change domains, and every REST route that
+ *   writes emits the domain its view listens on. The tool surface mostly did not: on 2026-08-11,
+ *   21 of the 31 tool files that write emitted nothing at all. The write landed, so nothing looked
+ *   broken — and the person watching the screen saw the old state until they reloaded, which reads
+ *   as "the agent did nothing" rather than "the page is stale". It is the quietest class of drift
+ *   there is, which is exactly why it needs a machine to notice it.
+ *
+ *   WHAT IT ASSERTS. A file under src/mcp/ that calls a write-shaped storage method must either
+ *   emit a change domain itself, or delegate to something that does — a shared service, or a route
+ *   function it calls. Both count: the point is that the write announces itself, not where the line
+ *   sits.
+ *
+ *   WHAT IT DOES NOT ASSERT. Which domain. A tool writing an app record could plausibly emit 'apps'
+ *   or 'owners', and a check that guessed would be noise. Whether the domain is the RIGHT one is
+ *   what test/e2e-mcp-sse-parity.ts measures, against a real open stream.
+ *
+ *   FALSE POSITIVES, and the shape of the exemption. Three kinds of file genuinely write and
+ *   genuinely must not emit: the OAuth server (a token is protocol, not a view), the session and
+ *   transport layer (it touches a chat instance on every request, and emitting there would be a
+ *   firehose), and a tool whose REST twin emits nothing either — capabilities is the standing
+ *   example. Each exemption below carries its reason, because "this one is fine" without a reason
+ *   is how the list grows until it means nothing.
+ * @structure EXEMPT (with reasons) · DELEGATES (files whose emit happens downstream) · main()
+ * @usage pnpm check:sse-parity  ·  --strict fails the build
+ * @version-history
+ *   v1.1.0 — 2026-08-11 — The rule reads the tool ANNOTATIONS as well as storage calls. The first
+ *     version looked only for storage.*, and four files walked past it — companies, skills,
+ *     workflows and the email invitations all write through a service, and each was silently
+ *     missing its emit. Found by an adversarial pass over this very check.
+ *   v1.0.0 — 2026-08-11 — Initial (August 2026 audit, the side-effect sweep).
+ */
+import { readFileSync, readdirSync, statSync, existsSync } from 'node:fs';
+import { join, relative, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const MCP = join(ROOT, 'src/mcp');
+const ANNOTATIONS = join(ROOT, 'src/mcp/annotations.ts');
+/** Storage methods that change something. Everything else is a read, and a read announces nothing. */
+const WRITEISH = /\bstorage\.(?:create|set|update|delete|add|remove|insert|upsert|write|debit|credit|transfer|enqueue|revoke|grant|mint|save|publish|archive|deactivate|activate|link|unlink)[A-Za-z]*\s*\(/;
+/**
+ * Every tool that declares itself as changing something (`readOnlyHint: false` in annotations.ts).
+ *
+ * The first version of this check looked only for `storage.*` calls, and four files walked straight
+ * past it — companies, skills, workflows and the email invitations all write through a SERVICE, so
+ * the regex above never saw them and each was silently missing its emit. A tool's own annotation is
+ * the honest signal: it is what the tool tells its client about itself, and a mutating tool that
+ * lies there has a bigger problem than a missing event.
+ */
+function mutatingTools() {
+    const src = readFileSync(ANNOTATIONS, 'utf-8');
+    const out = new Set();
+    for (const m of src.matchAll(/(\w+):\s*\{[^}]*readOnlyHint:\s*false/g))
+        out.add(m[1]);
+    return out;
+}
+/** Files that write and must NOT emit, each with the reason it is not a gap. */
+const EXEMPT = {
+    'src/mcp/oauth.ts': 'The OAuth server. A client registration, an approval and a refresh token are protocol state, '
+        + 'not something a view renders, and no REST route emits for them either.',
+    'src/mcp/index.ts': 'The session and transport layer. It touches the chat instance on EVERY request to keep '
+        + 'lastSeen current, so emitting here would be a frame per tool call rather than a change '
+        + 'anyone asked about. The chat-instance tools emit for the acts a person cares about.',
+    'src/mcp/capabilities.ts': 'routes/capabilities.ts emits nothing either — a published capability is read through the '
+        + 'catalogue, which is not SSE-backed. Silence here is parity, not a gap.',
+    'src/mcp/agent-onboarding.ts': 'Emits agent-onboarding on its own; listed because the storage write sits in a helper the '
+        + 'regex below does not associate with the emit.',
+    'src/mcp/exchange.ts': 'The EXCHANGE surface has no SSE domain at all — routes/exchange.ts and exchange-market.ts '
+        + 'emit nothing either, and the market is read through the catalogue rather than a live view. '
+        + 'Silence is parity. If the exchange ever gets a live surface, both doors need the domain.',
+    'src/mcp/exchange-run.ts': 'Same as exchange.ts: no SSE domain exists for the running half either.',
+    'src/mcp/app-template-proposals.ts': 'There is no REST route for template proposals — it is an MCP-only capability, so there is '
+        + 'no twin to be out of step with. Emitting here would be a new behaviour, not a repair.',
+};
+/**
+ * Files whose write announces itself DOWNSTREAM: they call a service or a route function that emits.
+ * Named rather than inferred, because "somewhere below this there is an emit" is exactly the kind of
+ * claim that rots — each entry says which function carries it.
+ */
+const DELEGATES = {
+    // Step 8 (2026-08-11) moved each of these writes into the service its REST twin already called,
+    // and the emit went with the write. Each was verified by reading the domain out of the service
+    // rather than trusting the delegation: a tool that hands its write to a silent service is the
+    // same defect as a tool that never emitted, and it hides better.
+    'src/mcp/agent-capabilities.ts': "services/agent-profile-write.ts, which emits 'agent-capabilities'",
+    'src/mcp/agent-management.ts': "services/agent-profile-write.ts, which emits 'agents'",
+    'src/mcp/appdev-pitfalls.ts': "services/memory-write.ts and services/appdev-kb.ts, both emitting 'memory'",
+    'src/mcp/appdev-proofs.ts': "services/contribution-proofs.ts, which writes through "
+        + "services/memory-write.ts and emits 'memory' there. No REST twin exists for this one: the "
+        + 'proof is attached from the appdev tool surface only.',
+    'src/mcp/apps.ts': "services/app-publish.ts and services/app-lifecycle.ts, both emitting 'apps'",
+    'src/mcp/boards.ts': "services/board-write.ts and services/board-post.ts, both emitting 'boards'",
+    'src/mcp/chat-instances.ts': "services/chat-instance-write.ts, which emits 'chat'",
+    'src/mcp/commerce.ts': "services/memory-write.ts ('memory') and services/agent-offers-write.ts ('agents')",
+    'src/mcp/operator-config.ts': "services/memory-write.ts ('memory') and services/agent-profile-write.ts ('agents')",
+    'src/mcp/cortex.ts': "services/cortex-lifecycle.ts, which emits 'cortex'",
+    'src/mcp/extensions.ts': "services/extension-lifecycle.ts, which emits 'extensions'",
+    'src/mcp/knowledge.ts': "services/knowledge-package-entry.ts, which emits 'knowledge'",
+    'src/mcp/organisms-name-invites.ts': "services/invitations.ts, which emits 'organisms' and 'notifications'",
+    'src/mcp/sharing-groups.ts': "services/sharing-group-members.ts, which emits 'groups'",
+    'src/mcp/workspace-create.ts': 'writeRecord() from mcp/workspaces.ts, which emits organisms',
+    'src/mcp/apps-fork.ts': 'emits apps itself',
+    'src/mcp/consent.ts': "services/consent-write.ts, which emits 'consent'",
+    'src/mcp/contacts.ts': "services/contacts.ts, which emits 'messages'",
+    'src/mcp/dm-messages.ts': "services/message-send.ts, which emits 'messages'",
+    'src/mcp/feedback.ts': "services/feedback.ts, which emits 'feedback'",
+    'src/mcp/flags.ts': "services/moderation-flags.ts, which emits 'flags'",
+    'src/mcp/agent-messages.ts': "services/agent-message-send.ts, which emits 'agent-messages' scoped to the owner",
+    'src/mcp/agent-tasks.ts': "services/agent-task-write.ts (create, event, plan and todo) and "
+        + "services/agent-task-fanout.ts (completion and failure), both emitting 'agent-tasks' scoped to the owner",
+    'src/mcp/agent-telemetry.ts': "services/telemetry-buffer.ts ('agents') and usage-metering.ts ('agent-usage')",
+    'src/mcp/core.ts': "services/work-lifecycle.ts ('work' on accept and deliver), routes/work.ts "
+        + "createWorkItem ('work'), services/memory-write.ts ('memory') and services/board-post.ts ('boards')",
+    'src/mcp/core-admin.ts': "services/morsel.ts mintMorsels, which emits 'config' and 'wallet'",
+    'src/mcp/core-storage.ts': "services/storage-file-write.ts, which emits 'files' and 'memory'",
+};
+function walk(dir, out = []) {
+    if (!existsSync(dir))
+        return out;
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        if (statSync(full).isDirectory())
+            walk(full, out);
+        else if (entry.endsWith('.ts'))
+            out.push(full);
+    }
+    return out;
+}
+/** Drop comments so a docblock naming emitChange does not read as a call. */
+function stripComments(source) {
+    return source.replace(/\/\*[\s\S]*?\*\//g, '').replace(/\/\/.*$/gm, '');
+}
+function main() {
+    const strict = process.argv.includes('--strict');
+    const mutating = mutatingTools();
+    const silent = [];
+    let writers = 0;
+    let emitters = 0;
+    for (const file of walk(MCP)) {
+        const rel = relative(ROOT, file).replace(/\\/g, '/');
+        const source = stripComments(readFileSync(file, 'utf-8'));
+        // A file counts as writing if it touches storage directly OR REGISTERS a tool that declares
+        // itself mutating. The second half is what catches a file writing through a service.
+        //
+        // src/mcp/catalog/ is excluded from that half: those files are the metadata tables — tool
+        // descriptions, scope requirements, surface membership — so they NAME every tool without
+        // being any tool's surface. Including them would make the check noise on its first run,
+        // which is how a gate stops being read.
+        const isCatalog = rel.startsWith('src/mcp/catalog/');
+        const registersMutating = !isCatalog && [...mutating].some(t => source.includes(`mcp.tool(
+        '${t}'`)
+            || source.includes(`mcp.tool('${t}'`) || source.includes(`'${t}',
+`) && source.includes('mcp.tool'));
+        if (!WRITEISH.test(source) && !registersMutating)
+            continue;
+        writers++;
+        if (rel in EXEMPT)
+            continue;
+        if (/emitChange\(/.test(source)) {
+            emitters++;
+            continue;
+        }
+        if (rel in DELEGATES) {
+            emitters++;
+            continue;
+        }
+        silent.push(rel);
+    }
+    console.log('');
+    console.log('  An agent writes, and the open page hears about it (SSE parity)');
+    console.log('  ' + '─'.repeat(62));
+    console.log(`  tool-surface files that write            ${String(writers).padStart(4)}`);
+    console.log(`  of those, exempt with a reason           ${String(Object.keys(EXEMPT).length).padStart(4)}`);
+    console.log(`  announcing the change                    ${String(emitters).padStart(4)}`);
+    console.log(`  SILENT                                   ${String(silent.length).padStart(4)}`);
+    console.log('');
+    if (silent.length) {
+        for (const s of silent)
+            console.error(`  ✖ ${s} changes something and emits no change domain`);
+        console.error('');
+        console.error('  Emit the domain the view for this capability listens on, right after the write —');
+        console.error('  the same one its REST twin emits. If it genuinely should not, add it to EXEMPT in');
+        console.error('  this file WITH THE REASON, or to DELEGATES naming the function that emits for it.');
+        console.error('  Which domain is right is measured by test/e2e-mcp-sse-parity.ts against a real stream.');
+        if (strict)
+            process.exit(1);
+        return;
+    }
+    console.log('  ✓ every writing tool surface announces its change');
+}
+main();
+//# sourceMappingURL=check-sse-parity.js.map

package/dist/scripts/check-sse-parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-sse-parity.js","sourceRoot":"","sources":["../../scripts/check-sse-parity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACjE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAClC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;AAEzD,sGAAsG;AACtG,MAAM,QAAQ,GAAG,2LAA2L,CAAC;AAE7M;;;;;;;;GAQG;AACH,SAAS,aAAa;IAClB,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,MAAM,GAA2B;IACnC,kBAAkB,EACd,+FAA+F;UAC7F,wEAAwE;IAC9E,kBAAkB,EACd,yFAAyF;UACvF,yFAAyF;UACzF,qFAAqF;IAC3F,yBAAyB,EACrB,2FAA2F;UACzF,wEAAwE;IAC9E,6BAA6B,EACzB,2FAA2F;UACzF,+CAA+C;IACrD,qBAAqB,EACjB,4FAA4F;UAC1F,6FAA6F;UAC7F,0FAA0F;IAChG,yBAAyB,EACrB,wEAAwE;IAC5E,mCAAmC,EAC/B,4FAA4F;UAC1F,uFAAuF;CAChG,CAAC;AAEF;;;;GAIG;AACH,MAAM,SAAS,GAA2B;IACtC,gGAAgG;IAChG,+FAA+F;IAC/F,8FAA8F;IAC9F,iEAAiE;IACjE,+BAA+B,EAAE,mEAAmE;IACpG,6BAA6B,EAAE,uDAAuD;IACtF,4BAA4B,EAAE,4EAA4E;IAC1G,0BAA0B,EAAE,wDAAwD;UAC9E,2FAA2F;UAC3F,sDAAsD;IAC5D,iBAAiB,EAAE,6EAA6E;IAChG,mBAAmB,EAAE,4EAA4E;IACjG,2BAA2B,EAAE,qDAAqD;IAClF,qBAAqB,EAAE,mFAAmF;IAC1G,4BAA4B,EAAE,oFAAoF;IAClH,mBAAmB,EAAE,oDAAoD;IACzE,uBAAuB,EAAE,2DAA2D;IACpF,sBAAsB,EAAE,8DAA8D;IACtF,mCAAmC,EAAE,sEAAsE;IAC3G,2BAA2B,EAAE,yDAAyD;IAEtF,6BAA6B,EAAE,6DAA6D;IAC5F,sBAAsB,EAAE,mBAAmB;IAC3C,oBAAoB,EAAE,kDAAkD;IACxE,qBAAqB,EAAE,8CAA8C;IACrE,wBAAwB,EAAE,kDAAkD;IAC5E,qBAAqB,EAAE,8CAA8C;IACrE,kBAAkB,EAAE,mDAAmD;IACvE,2BAA2B,EAAE,kFAAkF;IAC/G,wBAAwB,EAAE,kEAAkE;UACtF,yGAAyG;IAC/G,4BAA4B,EAAE,+EAA+E;IAC7G,iBAAiB,EAAE,4EAA4E;UACzF,oGAAoG;IAC1G,uBAAuB,EAAE,mEAAmE;IAC5F,yBAAyB,EAAE,kEAAkE;CAChG,CAAC;AAEF,SAAS,IAAI,CAAC,GAAW,EAAE,MAAgB,EAAE;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;aAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,MAAc;IACjC,OAAO,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,IAAI;IACT,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,4FAA4F;QAC5F,qFAAqF;QACrF,EAAE;QACF,0FAA0F;QAC1F,yFAAyF;QACzF,wFAAwF;QACxF,wCAAwC;QACxC,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;WAC7E,CAAC,GAAG,CAAC;eACD,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;CACzE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB;YAAE,SAAS;QAC3D,OAAO,EAAE,CAAC;QACV,IAAI,GAAG,IAAI,MAAM;YAAE,SAAS;QAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAAC,QAAQ,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;YAAC,QAAQ,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,8CAA8C,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,8CAA8C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5G,OAAO,CAAC,GAAG,CAAC,8CAA8C,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,8CAA8C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;QAC/F,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACpG,OAAO,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;QACrG,OAAO,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;QACrG,OAAO,CAAC,KAAK,CAAC,0FAA0F,CAAC,CAAC;QAC1G,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;AACvE,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/scripts/check-storage-parity.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=check-storage-parity.d.ts.map

package/dist/scripts/check-storage-parity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-storage-parity.d.ts","sourceRoot":"","sources":["../../scripts/check-storage-parity.ts"],"names":[],"mappings":""}

package/dist/scripts/check-storage-parity.js

@@ -0,0 +1,121 @@
+/**
+ * @file scripts/check-storage-parity.ts
+ * @description The static half of the storage contract: every table with an owner-scoped column is
+ *   named in the deletion cascade of BOTH providers, or is on a written exemption list. The dynamic
+ *   half is test/unit/storage-conformance.test.ts, which runs the same scenario against both and
+ *   compares the result; this one catches the table nobody thought about, which is how the audit's
+ *   H-30 happened — Postgres cleared five tables where SQLite cleared thirty, and both returned true.
+ *
+ *   Erasure is the reason this is a gate and not a report. The developer decided on 2026-08-10 that a
+ *   deleted username is released rather than reserved, which puts the whole weight on the cascade:
+ *   if nothing owner-scoped survives, there is nothing for the next registrant to inherit.
+ * @structure
+ *   - OWNER_COLUMNS: the column names that make a table owner-scoped
+ *   - main(): read the schema, read both cascades, report tables missing from either
+ * @usage
+ *   cd aimeat && pnpm check:storage-parity            # report
+ *   cd aimeat && pnpm check:storage-parity --strict   # the hook/CI gate
+ *   cd aimeat && pnpm check:storage-parity --seed     # rewrite the exemption file
+ * @version-history
+ *   v1.0.0 — 2026-08-10 — Initial (August 2026 audit, step 5c / systemic pattern 5).
+ */
+import { readFileSync, writeFileSync, existsSync, readdirSync } from 'node:fs';
+import { join, relative } from 'node:path';
+const ROOT = process.cwd();
+const PG_SCHEMA = join(ROOT, 'src', 'storage', 'providers', 'postgres-kysely', 'migrations');
+const PG_METHODS = join(ROOT, 'src', 'storage', 'providers', 'postgres-kysely', 'methods');
+const SQLITE_METHODS = join(ROOT, 'src', 'storage', 'providers', 'sqlite', 'methods');
+const EXEMPTIONS = join(ROOT, 'security', 'storage-parity-exemptions.json');
+/** A column of one of these names makes a row belong to somebody. */
+const OWNER_COLUMNS = ['ownerGaii', 'ownerName', 'buyerOwner', 'sellerOwner', 'agentGaii', 'flaggedBy'];
+function readAll(dir) {
+    if (!existsSync(dir))
+        return '';
+    return readdirSync(dir)
+        .filter(f => f.endsWith('.ts') || f.endsWith('.sql'))
+        .map(f => readFileSync(join(dir, f), 'utf-8'))
+        .join('\n');
+}
+/** Tables in the Postgres schema that carry an owner-scoped column. */
+function ownerScopedTables(schema) {
+    const tables = new Map();
+    const re = /CREATE TABLE "(\w+)" \(([\s\S]*?)\n\);/g;
+    let m;
+    while ((m = re.exec(schema))) {
+        const [, table, body] = m;
+        const cols = OWNER_COLUMNS.filter(c => new RegExp(`"${c}"`).test(body));
+        if (cols.length)
+            tables.set(table, cols);
+    }
+    return tables;
+}
+/** The SQLite table name for a Postgres table: PascalCase to snake_case, pluralised loosely. */
+function sqliteCandidates(pgTable) {
+    const snake = pgTable.replace(/([a-z0-9])([A-Z])/g, '$1_$2').toLowerCase();
+    return [snake, `${snake}s`, `${snake}es`, pgTable.toLowerCase(), `${pgTable.toLowerCase()}s`];
+}
+function main() {
+    const strict = process.argv.includes('--strict');
+    const seed = process.argv.includes('--seed');
+    const schema = readAll(PG_SCHEMA);
+    const pgCascade = readAll(PG_METHODS);
+    const sqliteCascade = readAll(SQLITE_METHODS);
+    const tables = ownerScopedTables(schema);
+    const missing = [];
+    for (const [table, cols] of tables) {
+        // "named in the cascade" is deliberately loose: the delete may be a Kysely deleteFrom, a raw
+        // DELETE, or a helper. What matters is that the table name appears in the provider's delete
+        // paths at all — a table nobody mentions is a table nobody clears.
+        const inPg = new RegExp(`deleteFrom\\('${table}'\\)`).test(pgCascade);
+        const inSqlite = sqliteCandidates(table).some(c => new RegExp(`DELETE FROM ${c}\\b`, 'i').test(sqliteCascade));
+        if (inPg && inSqlite)
+            continue;
+        missing.push({
+            table, columns: cols,
+            where: !inPg && !inSqlite ? 'neither provider' : (!inPg ? 'postgres-kysely' : 'sqlite'),
+        });
+    }
+    if (seed) {
+        const exempt = {};
+        for (const t of missing) {
+            exempt[t.table] = `Seeded 2026-08-10. Owner-scoped by ${t.columns.join('/')} and not cleared in ${t.where}. `
+                + 'Decide: add it to the cascade, or record here why the row must outlive its owner '
+                + '(an immutable ledger entry, a counterparty\'s copy, an anonymised aggregate).';
+        }
+        writeFileSync(EXEMPTIONS, JSON.stringify({
+            note: 'Owner-scoped tables not cleared by one or both deletion cascades. Seeded from the state on '
+                + '2026-08-10 so the gate can only ratchet down. A deleted username is released for reuse '
+                + '(decision 2026-08-10), so anything left here is inheritable by the next registrant.',
+            exempt,
+        }, null, 2) + '\n');
+        console.log(`Seeded ${missing.length} exemptions into ${relative(ROOT, EXEMPTIONS)}`);
+        return;
+    }
+    const exempt = existsSync(EXEMPTIONS)
+        ? JSON.parse(readFileSync(EXEMPTIONS, 'utf-8')).exempt
+        : {};
+    const fresh = missing.filter(t => !exempt[t.table]);
+    console.log('');
+    console.log('  Storage parity — owner-scoped tables vs the deletion cascades');
+    console.log('  ' + '─'.repeat(62));
+    console.log(`  owner-scoped tables      ${String(tables.size).padStart(4)}`);
+    console.log(`  not cleared somewhere    ${String(missing.length).padStart(4)}`);
+    console.log(`  NEW, not exempt          ${String(fresh.length).padStart(4)}`);
+    console.log('');
+    if (fresh.length) {
+        for (const t of fresh)
+            console.log(`    ${t.table.padEnd(28)} ${t.columns.join('/').padEnd(22)} missing in ${t.where}`);
+        console.log('');
+        console.log('  A deleted username is released for reuse, so a surviving owner-scoped row is');
+        console.log('  inheritable by whoever registers that name next. Add the table to the cascade,');
+        console.log('  or record in security/storage-parity-exemptions.json why it must outlive its owner.');
+        console.log('');
+    }
+    if (strict && fresh.length) {
+        console.error(`✖ ${fresh.length} owner-scoped table(s) newly outside a deletion cascade.`);
+        process.exit(1);
+    }
+    console.log(fresh.length ? '  (report only — pass --strict to gate)' : '  ✓ no new owner-scoped tables outside the cascades');
+}
+main();
+//# sourceMappingURL=check-storage-parity.js.map

package/dist/scripts/check-storage-parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-storage-parity.js","sourceRoot":"","sources":["../../scripts/check-storage-parity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;AAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAC3F,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AACtF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;AAE5E,qEAAqE;AACrE,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAIxG,SAAS,OAAO,CAAC,GAAW;IACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;SAC7C,IAAI,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,uEAAuE;AACvE,SAAS,iBAAiB,CAAC,MAAc;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,MAAM,EAAE,GAAG,yCAAyC,CAAC;IACrD,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,gGAAgG;AAChG,SAAS,gBAAgB,CAAC,OAAe;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3E,OAAO,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,IAAI;IACT,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAEzC,MAAM,OAAO,GAA0D,EAAE,CAAC;IAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QACjC,6FAA6F;QAC7F,4FAA4F;QAC5F,mEAAmE;QACnE,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QAC/G,IAAI,IAAI,IAAI,QAAQ;YAAE,SAAS;QAC/B,OAAO,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,OAAO,EAAE,IAAI;YACpB,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;SAC1F,CAAC,CAAC;IACP,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,sCAAsC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,KAAK,IAAI;kBACvG,mFAAmF;kBACnF,+EAA+E,CAAC;QAC1F,CAAC;QACD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;YACrC,IAAI,EAAE,6FAA6F;kBAC7F,yFAAyF;kBACzF,qFAAqF;YAC3F,MAAM;SACQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,MAAM,oBAAoB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC;QACjC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAmB,CAAC,MAAM;QACzE,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACxH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;QACrG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,0DAA0D,CAAC,CAAC;QAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC;AAClI,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/scripts/check-trusted-keys.d.ts

@@ -0,0 +1,9 @@
+interface Finding {
+    file: string;
+    line: number;
+    key: string;
+    identity: string;
+}
+export declare function collectReads(files: string[]): Finding[];
+export {};
+//# sourceMappingURL=check-trusted-keys.d.ts.map

package/dist/scripts/check-trusted-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-trusted-keys.d.ts","sourceRoot":"","sources":["../../scripts/check-trusted-keys.ts"],"names":[],"mappings":"AAmCA,UAAU,OAAO;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAkB/E,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAkBvD"}

package/dist/scripts/check-trusted-keys.js

@@ -0,0 +1,122 @@
+/**
+ * @file scripts/check-trusted-keys.ts
+ * @description The gate for Rule 10 invariant 2: a memory key the server reads and ACTS ON must be
+ *   unreachable by a scoped app or agent. The reason is the whole H-2 grant model: an app-grant
+ *   token resolves to the owner's GHII, so its writes land in the owner's namespace by design. That
+ *   is fine for the owner's data and fatal for the server's own configuration.
+ *
+ *   Two accepted patterns (security-development-dna.md §2): store it under a synthetic system
+ *   identity no owner-scoped principal can address, or put its prefix on the reserved-key denylist.
+ *   The August 2026 audit found the denylist at three prefixes against sixty-nine trusted keys, and
+ *   two of the unprotected ones were a cross-owner authorization list and a payout address with a
+ *   Stripe secret beside it.
+ *
+ *   Ratchet, not a wall: seeded with today's reads, so the gate fails only on a NEW unprotected key.
+ * @structure
+ *   - collectReads(): every resolvable storage.getMemory / getPublicMemory key in the server code
+ *   - main(): compare against security/trusted-key-exemptions.json; --strict gates; --seed rewrites
+ * @usage
+ *   cd aimeat && pnpm check:trusted-keys            # report
+ *   cd aimeat && pnpm check:trusted-keys --strict   # the hook/CI gate
+ *   cd aimeat && pnpm check:trusted-keys --seed     # rewrite the exemption file
+ * @version-history
+ *   v1.0.0 — 2026-08-10 — Initial (August 2026 audit, systemic pattern 3).
+ */
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { RESERVED_OWNER_KEY_PREFIXES } from '../src/utils/reserved-keys.js';
+const ROOT = process.cwd();
+const AREAS = ['services', 'routes', 'commerce', 'mcp'].map(d => join(ROOT, 'src', d));
+const EXEMPTIONS = join(ROOT, 'security', 'trusted-key-exemptions.json');
+/** Identities no owner-scoped principal can address, so a key under one is already out of reach. */
+const SYSTEM_IDENTITIES = ['__network_policy__', 'SITE_OWNER_GAII', '__genesis__', 'system@', '__system__'];
+function walk(dir, out = []) {
+    if (!existsSync(dir))
+        return out;
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        if (statSync(full).isDirectory())
+            walk(full, out);
+        else if (entry.endsWith('.ts'))
+            out.push(full);
+    }
+    return out;
+}
+/** True when the key sits under a prefix the reserved-key guard already refuses for app tokens. */
+function isReserved(key) {
+    return RESERVED_OWNER_KEY_PREFIXES.some(p => key.startsWith(p));
+}
+export function collectReads(files) {
+    const findings = [];
+    // getMemory(identity, 'literal.key') or getMemory(identity, `literal.${x}`) — only the resolvable
+    // ones. A key built entirely from variables cannot be judged here and is not reported.
+    const re = /\b(?:getMemory|getPublicMemory)\s*\(\s*([^,]+?)\s*,\s*(['"`])([A-Za-z0-9_.:-]+)/g;
+    for (const file of files) {
+        const source = readFileSync(file, 'utf-8');
+        const rel = relative(ROOT, file).replace(/\\/g, '/');
+        let m;
+        while ((m = re.exec(source))) {
+            const [, identity, , key] = m;
+            if (isReserved(key))
+                continue;
+            if (SYSTEM_IDENTITIES.some(s => identity.includes(s)))
+                continue;
+            const line = source.slice(0, m.index).split('\n').length;
+            findings.push({ file: rel, line, key, identity: identity.trim().slice(0, 40) });
+        }
+    }
+    return findings;
+}
+const softKey = (f) => `${f.file}:${f.key}`;
+function main() {
+    const strict = process.argv.includes('--strict');
+    const seed = process.argv.includes('--seed');
+    const files = AREAS.flatMap(a => walk(a));
+    const findings = collectReads(files);
+    if (seed) {
+        const exempt = {};
+        for (const f of findings) {
+            exempt[softKey(f)] = 'Seeded 2026-08-10 from the August audit. Not yet reviewed: decide whether the '
+                + 'server ACTS on this value (a URL it fetches, a credential, a policy, a budget, a listing flag) '
+                + 'or merely echoes it back as user data. If it acts on it, reserve the prefix or move it under a '
+                + 'system identity.';
+        }
+        writeFileSync(EXEMPTIONS, JSON.stringify({
+            note: 'Memory keys the server reads that are neither reserved nor under a system identity. Seeded '
+                + 'from the state on 2026-08-10 so the gate can only ratchet down. Most are ordinary user data '
+                + 'the server hands back untouched; the dangerous ones are those it acts on.',
+            exempt,
+        }, null, 2) + '\n');
+        console.log(`Seeded ${findings.length} exemptions into ${relative(ROOT, EXEMPTIONS)}`);
+        return;
+    }
+    const exempt = existsSync(EXEMPTIONS)
+        ? JSON.parse(readFileSync(EXEMPTIONS, 'utf-8')).exempt
+        : {};
+    const known = new Set(Object.keys(exempt));
+    const fresh = findings.filter(f => !known.has(softKey(f)));
+    const distinct = new Set(findings.map(f => f.key));
+    console.log('');
+    console.log('  Server-trusted memory keys — Rule 10 invariant 2');
+    console.log('  ' + '─'.repeat(62));
+    console.log(`  reads outside the guard   ${String(findings.length).padStart(4)}   (${distinct.size} distinct keys)`);
+    console.log(`  reserved prefixes         ${String(RESERVED_OWNER_KEY_PREFIXES.length).padStart(4)}   ${RESERVED_OWNER_KEY_PREFIXES.join(' ')}`);
+    console.log(`  NEW, not exempt           ${String(fresh.length).padStart(4)}`);
+    console.log('');
+    if (fresh.length) {
+        console.log('  If the server ACTS on this value, an app the owner granted memory:write can poison it.');
+        console.log('  Reserve the prefix (utils/reserved-keys.ts), move it under a system identity, or record');
+        console.log('  in security/trusted-key-exemptions.json why it is user data rather than configuration.');
+        console.log('');
+        for (const f of fresh)
+            console.log(`    ${f.file}:${f.line}  ${f.key}`);
+        console.log('');
+    }
+    if (strict && fresh.length) {
+        console.error(`✖ ${fresh.length} new unguarded server-read key(s).`);
+        process.exit(1);
+    }
+    console.log(fresh.length ? '  (report only — pass --strict to gate)' : '  ✓ no new unguarded server-read keys');
+}
+main();
+//# sourceMappingURL=check-trusted-keys.js.map

package/dist/scripts/check-trusted-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-trusted-keys.js","sourceRoot":"","sources":["../../scripts/check-trusted-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3B,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACvF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,6BAA6B,CAAC,CAAC;AAEzE,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAK5G,SAAS,IAAI,CAAC,GAAW,EAAE,MAAgB,EAAE;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;aAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,mGAAmG;AACnG,SAAS,UAAU,CAAC,GAAW;IAC3B,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAe;IACxC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,kGAAkG;IAClG,uFAAuF;IACvF,MAAM,EAAE,GAAG,kFAAkF,CAAC;IAC9F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,EAAE,QAAQ,EAAE,AAAD,EAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YAChE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;AAErD,SAAS,IAAI;IACT,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAErC,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACvB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,gFAAgF;kBAC/F,iGAAiG;kBACjG,iGAAiG;kBACjG,kBAAkB,CAAC;QAC7B,CAAC;QACD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;YACrC,IAAI,EAAE,6FAA6F;kBAC7F,8FAA8F;kBAC9F,2EAA2E;YACjF,MAAM;SACQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,UAAU,QAAQ,CAAC,MAAM,oBAAoB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC;QACjC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAmB,CAAC,MAAM;QACzE,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,iBAAiB,CAAC,CAAC;IACrH,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChJ,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,0FAA0F,CAAC,CAAC;QACxG,OAAO,CAAC,GAAG,CAAC,2FAA2F,CAAC,CAAC;QACzG,OAAO,CAAC,GAAG,CAAC,0FAA0F,CAAC,CAAC;QACxG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,oCAAoC,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC;AACpH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/scripts/lib/locale-files.d.ts

@@ -0,0 +1,40 @@
+export declare const LOCALES_DIR: string;
+/** A leaf in a locale file: a string, or a list of strings the view renders as a group. */
+export type LocaleValue = string | string[];
+export type LocaleTree = Record<string, unknown>;
+/** Every locale the node ships, taken from the files themselves. English first, then the rest. */
+export declare function shippedLocales(): string[];
+export declare function loadLocale(tag: string): LocaleTree;
+export declare function writeLocale(tag: string, tree: LocaleTree): void;
+/**
+ * Dotted key → value, exactly as t() resolves it. Handles both spellings a locale file uses:
+ * nested objects, and top-level keys that already carry dots.
+ */
+export declare function flatten(obj: LocaleTree, prefix?: string, out?: Record<string, LocaleValue>): Record<string, LocaleValue>;
+/**
+ * Where a dotted key belongs inside en.json's OWN shape, as a path of literal object keys.
+ * `admin.messages.desc` may be one key at the top level or three levels of nesting, and English
+ * decides which — a translation that guesses lands somewhere t() will never look.
+ * Returns null when English has no such key.
+ */
+export declare function pathIn(en: LocaleTree, key: string): string[] | null;
+export declare function setDeep(tree: LocaleTree, path: string[], value: LocaleValue): void;
+/**
+ * Rewrite `target` in `source`'s key order, keeping only keys source has. A diff between en.json
+ * and a translation should line up line for line; a file in insertion order does not.
+ */
+export declare function orderLike(source: LocaleTree, target: LocaleTree): LocaleTree;
+/** The {name} and {{name}} tokens a value interpolates. Both forms are in use on this node. */
+export declare function varsOf(v: LocaleValue): Set<string>;
+export interface Defect {
+    key: string;
+    what: string;
+    fix: string;
+}
+/**
+ * What is wrong with a translation, given English. Deliberately NOT "incomplete": a missing key
+ * falls back to English per key, which is the design and is how a language gets filled in over
+ * several passes. These are the four ways a key that IS there can still be broken.
+ */
+export declare function findDefects(tag: string, en: Record<string, LocaleValue>, loc: Record<string, LocaleValue>): Defect[];
+//# sourceMappingURL=locale-files.d.ts.map

package/dist/scripts/lib/locale-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"locale-files.d.ts","sourceRoot":"","sources":["../../../scripts/lib/locale-files.ts"],"names":[],"mappings":"AA4BA,eAAO,MAAM,WAAW,QAAoC,CAAC;AAE7D,2FAA2F;AAC3F,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAC5C,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,kGAAkG;AAClG,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAKzC;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAElD;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAE/D;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,SAAK,EAAE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAM,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAOxH;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAYnE;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAQlF;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAU5E;AAED,+FAA+F;AAC/F,wBAAgB,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAKlD;AAED,MAAM,WAAW,MAAM;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;CAAE;AAoBnE;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,EAAE,CAqDpH"}