aimeat 2.7.0 → 3.1.0

package/dist/src/mcp/consent.js

@@ -16,11 +16,14 @@
  */
 import { ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
-import { randomBytes } from 'node:crypto';
 import { parseGaiiLoose } from '../utils/gaii.js';
 import { annotationsFor } from './annotations.js';
 import { descriptionFor } from './catalog/shape.js';
-export function registerConsentTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged) {
+import { grantConsent, revokeConsent } from '../services/consent-write.js';
+export function registerConsentTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged, 
+/** The session's own scopes. The gate lives inside the shared service, not only in the
+ *  registration filter, so a door that forgets to register cannot also forget to check. */
+sessionScopes = []) {
     const agentGaii = getAgentGaii();
     /** Resolve owner GHII from agent GAII */
     function ownerGhii() {
@@ -77,32 +80,25 @@ export function registerConsentTools(mcp, storage, config, getAgentGaii, emitRes
         purpose: z.string().describe('Human-readable purpose for this consent'),
         ttl_hours: z.number().optional().describe('Expiry in hours from now (omit for indefinite)'),
     }, annotationsFor('aimeat_consent_grant'), async ({ target_gaii, scope, data_pattern, purpose, ttl_hours }) => {
-        const ghii = ownerGhii();
-        // Quota check
-        const existing = await storage.listConsents(ghii);
-        if (existing.length >= 100) {
-            return {
-                content: [{ type: 'text', text: 'Quota exceeded: maximum 100 consent records' }],
-                isError: true,
-            };
-        }
-        const now = new Date().toISOString();
-        const expires = ttl_hours != null
-            ? new Date(Date.now() + ttl_hours * 3_600_000).toISOString()
-            : null;
-        const id = randomBytes(16).toString('hex');
-        const consent = await storage.createConsent({
-            id,
-            ownerGaii: ghii,
-            dataPattern: data_pattern,
+        // ONE implementation (services/consent-write.ts). This tool used to build the record
+        // itself, which is why it accepted a recipient no access check will ever match, wrote no
+        // audit entry, and never refreshed the federation directory — three things the REST door
+        // has always done for the same operation.
+        const granted = await grantConsent({ storage, config }, {
+            ownerGaii: ownerGhii(),
+            scopes: sessionScopes,
+            roles: ['agent'],
+        }, {
             recipient: target_gaii,
+            dataPattern: data_pattern,
             purpose,
             scope,
-            expires,
-            status: 'active',
-            grantedAt: now,
-            revokedAt: null,
+            expires: ttl_hours != null ? new Date(Date.now() + ttl_hours * 3_600_000).toISOString() : null,
         });
+        if (!granted.ok) {
+            return { content: [{ type: 'text', text: `${granted.code}: ${granted.message}` }], isError: true };
+        }
+        const consent = granted.value;
         emitResourceListChanged(agentGaii);
         return {
             content: [{
@@ -141,16 +137,17 @@ export function registerConsentTools(mcp, storage, config, getAgentGaii, emitRes
     mcp.tool('aimeat_consent_revoke', descriptionFor('aimeat_consent_revoke'), {
         consent_id: z.string().describe('ID of the consent to revoke'),
     }, annotationsFor('aimeat_consent_revoke'), async ({ consent_id }) => {
-        const consent = await storage.getConsent(consent_id);
-        if (!consent) {
-            return { content: [{ type: 'text', text: 'Consent not found' }], isError: true };
-        }
-        const ghii = ownerGhii();
-        if (consent.ownerGaii !== ghii) {
-            return { content: [{ type: 'text', text: 'Only the consent owner can revoke' }], isError: true };
+        // Same function the REST door calls: it owns the ownership check, the audit entry and
+        // the directory refresh, so this door cannot be the one that forgets one of them.
+        const revoked = await revokeConsent({ storage, config }, {
+            ownerGaii: ownerGhii(),
+            scopes: sessionScopes,
+            roles: ['agent'],
+        }, consent_id);
+        if (!revoked.ok) {
+            return { content: [{ type: 'text', text: `${revoked.code}: ${revoked.message}` }], isError: true };
         }
-        const now = new Date().toISOString();
-        await storage.updateConsent(consent_id, { status: 'revoked', revokedAt: now });
+        const now = revoked.value.revokedAt;
         emitResourceUpdated(agentGaii, `aimeat://consent/${encodeURIComponent(consent_id)}`);
         return {
             content: [{

package/dist/src/mcp/consent.js.map

@@ -1 +1 @@
-{"version":3,"file":"consent.js","sourceRoot":"","sources":["../../../src/mcp/consent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAa,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,MAAM,UAAU,oBAAoB,CAChC,GAAc,EACd,OAAgB,EAChB,MAAoB,EACpB,YAA0B,EAC1B,mBAA6D,EAC7D,uBAAoD;IAEpD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,yCAAyC;IACzC,SAAS,SAAS;QACd,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED,iCAAiC;IACjC,GAAG,CAAC,gBAAgB,CAChB,gBAAgB,EAChB,IAAI,gBAAgB,CAAC,uBAAuB,EAAE;QAC1C,IAAI,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO;gBACH,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC1B,GAAG,EAAE,oBAAoB,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;oBACnD,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,SAAS,EAAE;oBACzC,QAAQ,EAAE,kBAAkB;oBAC5B,WAAW,EAAE,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG;iBACrD,CAAC,CAAC;aACN,CAAC;QACN,CAAC;KACJ,CAAC,EACF,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,wBAAwB,EAAE,EACvE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,EAAY,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;QAExF,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QAC1E,CAAC;QAED,OAAO;YACH,QAAQ,EAAE,CAAC;oBACP,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,YAAY,EAAE,OAAO,CAAC,WAAW;wBACjC,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,UAAU,EAAE,OAAO,CAAC,SAAS;wBAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;wBAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;qBAC7B,EAAE,IAAI,EAAE,CAAC,CAAC;oBACX,QAAQ,EAAE,kBAAkB;iBAC/B,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,qCAAqC;IACrC,GAAG,CAAC,IAAI,CACJ,sBAAsB,EACtB,cAAc,CAAC,sBAAsB,CAAC,EACtC;QACI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC;QAC9G,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC9E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QAClF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;KAC9F,EACD,cAAc,CAAC,sBAAsB,CAAC,EACtC,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QAEzB,cAAc;QACd,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACzB,OAAO;gBACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,6CAA6C,EAAE,CAAC;gBACzF,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI;YAC7B,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5D,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;YACxC,EAAE;YACF,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,YAAY;YACzB,SAAS,EAAE,WAAW;YACtB,OAAO;YACP,KAAK;YACL,OAAO;YACP,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAEnC,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,UAAU,EAAE,OAAO,CAAC,EAAE;wBACtB,WAAW,EAAE,OAAO,CAAC,SAAS;wBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,UAAU,EAAE,OAAO,CAAC,OAAO;qBAC9B,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,oCAAoC;IACpC,GAAG,CAAC,IAAI,CACJ,qBAAqB,EACrB,cAAc,CAAC,qBAAqB,CAAC,EACrC,EAAE,EACF,cAAc,CAAC,qBAAqB,CAAC,EACrC,KAAK,IAAI,EAAE;QACP,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAElD,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACpC,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,YAAY,EAAE,CAAC,CAAC,WAAW;wBAC3B,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,UAAU,EAAE,CAAC,CAAC,SAAS;wBACvB,UAAU,EAAE,CAAC,CAAC,SAAS;qBAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;iBAChB,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,sCAAsC;IACtC,GAAG,CAAC,IAAI,CACJ,uBAAuB,EACvB,cAAc,CAAC,uBAAuB,CAAC,EACvC;QACI,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KACjE,EACD,cAAc,CAAC,uBAAuB,CAAC,EACvC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC9F,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC9G,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAE/E,mBAAmB,CAAC,SAAS,EAAE,oBAAoB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAErF,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;iBAChF,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../../../src/mcp/consent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAa,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE3E,MAAM,UAAU,oBAAoB,CAChC,GAAc,EACd,OAAgB,EAChB,MAAoB,EACpB,YAA0B,EAC1B,mBAA6D,EAC7D,uBAAoD;AACpD;2FAC2F;AAC3F,gBAA0B,EAAE;IAE5B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,yCAAyC;IACzC,SAAS,SAAS;QACd,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED,iCAAiC;IACjC,GAAG,CAAC,gBAAgB,CAChB,gBAAgB,EAChB,IAAI,gBAAgB,CAAC,uBAAuB,EAAE;QAC1C,IAAI,EAAE,KAAK,IAAI,EAAE;YACb,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO;gBACH,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC1B,GAAG,EAAE,oBAAoB,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;oBACnD,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,SAAS,EAAE;oBACzC,QAAQ,EAAE,kBAAkB;oBAC5B,WAAW,EAAE,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG;iBACrD,CAAC,CAAC;aACN,CAAC;QACN,CAAC;KACJ,CAAC,EACF,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,wBAAwB,EAAE,EACvE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,EAAY,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;QAExF,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QAC1E,CAAC;QAED,OAAO;YACH,QAAQ,EAAE,CAAC;oBACP,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,YAAY,EAAE,OAAO,CAAC,WAAW;wBACjC,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,UAAU,EAAE,OAAO,CAAC,SAAS;wBAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;wBAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;qBAC7B,EAAE,IAAI,EAAE,CAAC,CAAC;oBACX,QAAQ,EAAE,kBAAkB;iBAC/B,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,qCAAqC;IACrC,GAAG,CAAC,IAAI,CACJ,sBAAsB,EACtB,cAAc,CAAC,sBAAsB,CAAC,EACtC;QACI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC;QAC9G,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC9E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QAClF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;KAC9F,EACD,cAAc,CAAC,sBAAsB,CAAC,EACtC,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;QAC/D,qFAAqF;QACrF,yFAAyF;QACzF,yFAAyF;QACzF,0CAA0C;QAC1C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YACpD,SAAS,EAAE,SAAS,EAAE;YACtB,MAAM,EAAE,aAAa;YACrB,KAAK,EAAE,CAAC,OAAO,CAAC;SACnB,EAAE;YACC,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,YAAY;YACzB,OAAO;YACP,KAAK;YACL,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SACjG,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChH,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QAE9B,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAEnC,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,UAAU,EAAE,OAAO,CAAC,EAAE;wBACtB,WAAW,EAAE,OAAO,CAAC,SAAS;wBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,UAAU,EAAE,OAAO,CAAC,OAAO;qBAC9B,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,oCAAoC;IACpC,GAAG,CAAC,IAAI,CACJ,qBAAqB,EACrB,cAAc,CAAC,qBAAqB,CAAC,EACrC,EAAE,EACF,cAAc,CAAC,qBAAqB,CAAC,EACrC,KAAK,IAAI,EAAE;QACP,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAElD,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACpC,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,YAAY,EAAE,CAAC,CAAC,WAAW;wBAC3B,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,UAAU,EAAE,CAAC,CAAC,SAAS;wBACvB,UAAU,EAAE,CAAC,CAAC,SAAS;qBAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;iBAChB,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,sCAAsC;IACtC,GAAG,CAAC,IAAI,CACJ,uBAAuB,EACvB,cAAc,CAAC,uBAAuB,CAAC,EACvC;QACI,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KACjE,EACD,cAAc,CAAC,uBAAuB,CAAC,EACvC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACrB,sFAAsF;QACtF,kFAAkF;QAClF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YACrD,SAAS,EAAE,SAAS,EAAE;YACtB,MAAM,EAAE,aAAa;YACrB,KAAK,EAAE,CAAC,OAAO,CAAC;SACnB,EAAE,UAAU,CAAC,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChH,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAEpC,mBAAmB,CAAC,SAAS,EAAE,oBAAoB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAErF,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;iBAChF,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC"}

package/dist/src/mcp/core-admin.d.ts

@@ -9,6 +9,10 @@
  *   import { registerCoreAdminTools } from './core-admin.js';
  *   registerCoreAdminTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged);
  * @version-history
+ *   v1.1.0 — 2026-08-11 — aimeat_admin_mint calls services/morsel.ts mintMorsels, the same function
+ *     POST /v1/admin/mint calls. The two copies computed the daily cap, credited the balance and
+ *     wrote the ledger row separately, and had already drifted apart on what they told the live
+ *     wallet stream. (August 2026 audit step 8.)
  *   v1.0.0 — 2026-07-13 — Extracted from src/mcp/core.ts (max-file-lines); no behavior change
  */
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';

package/dist/src/mcp/core-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-admin.d.ts","sourceRoot":"","sources":["../../../src/mcp/core-admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAKvD,wBAAgB,sBAAsB,CAClC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7D,wBAAwB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACtD,IAAI,CA+IN"}
+{"version":3,"file":"core-admin.d.ts","sourceRoot":"","sources":["../../../src/mcp/core-admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAMvD,wBAAgB,sBAAsB,CAClC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7D,wBAAwB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACtD,IAAI,CAgIN"}

package/dist/src/mcp/core-admin.js

@@ -9,12 +9,17 @@
  *   import { registerCoreAdminTools } from './core-admin.js';
  *   registerCoreAdminTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged);
  * @version-history
+ *   v1.1.0 — 2026-08-11 — aimeat_admin_mint calls services/morsel.ts mintMorsels, the same function
+ *     POST /v1/admin/mint calls. The two copies computed the daily cap, credited the balance and
+ *     wrote the ledger row separately, and had already drifted apart on what they told the live
+ *     wallet stream. (August 2026 audit step 8.)
  *   v1.0.0 — 2026-07-13 — Extracted from src/mcp/core.ts (max-file-lines); no behavior change
  */
 import { z } from 'zod';
 import { parseGAII } from '../utils/gaii.js';
 import { annotationsFor } from './annotations.js';
 import { descriptionFor } from './catalog/shape.js';
+import { mintMorsels } from '../services/morsel.js';
 export function registerCoreAdminTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, _emitResourceListChanged) {
     const agentGaii = getAgentGaii();
     // ── Admin Tools (operator-only) ──
@@ -109,30 +114,15 @@ export function registerCoreAdminTools(mcp, storage, config, getAgentGaii, emitR
     mcp.tool('aimeat_admin_mint', descriptionFor('aimeat_admin_mint'), { gaii: z.string(), amount: z.number().int().positive() }, annotationsFor('aimeat_admin_mint'), async ({ gaii, amount }) => {
         if (!(await isOperator()))
             return { content: [{ type: 'text', text: 'Operator role required' }], isError: true };
-        const agent = await storage.getAgent(gaii);
-        if (!agent)
-            return { content: [{ type: 'text', text: `Agent not found: ${gaii}` }], isError: true };
-        const dayStart = new Date();
-        dayStart.setUTCHours(0, 0, 0, 0);
-        const allTx = await storage.listAllTransactions();
-        const mintedToday = allTx
-            .filter(tx => tx.type === 'mint' && new Date(tx.timestamp) >= dayStart)
-            .reduce((sum, tx) => sum + tx.amount, 0);
-        if (mintedToday + amount > config.maxOperatorMintPerDay) {
-            return { content: [{ type: 'text', text: `Daily mint cap (${config.maxOperatorMintPerDay}) would be exceeded. Already minted ${mintedToday} today.` }], isError: true };
+        // ONE implementation (services/morsel.ts mintMorsels). This tool carried its own copy of
+        // the cap arithmetic, the credit and the ledger row, which is a second answer to "how
+        // much has been minted today" sitting next to the HTTP one.
+        const minted = await mintMorsels({ storage, config }, agentGaii, gaii, amount);
+        if (!minted.ok) {
+            return { content: [{ type: 'text', text: `${minted.code}: ${minted.message}` }], isError: true };
         }
-        await storage.creditBalance(gaii, amount);
-        const { randomBytes: rb } = await import('node:crypto');
-        await storage.addTransaction({
-            id: `tx-${Date.now()}-${rb(4).toString('hex')}`,
-            gaii, type: 'mint', amount,
-            counterpartyGaii: agentGaii,
-            timestamp: new Date().toISOString(),
-        });
         emitResourceUpdated(gaii, `aimeat://wallet/${encodeURIComponent(gaii)}`);
-        const mintedAgentRecord = await storage.getAgent(gaii);
-        const mintedGhii = mintedAgentRecord ? await storage.getGHIIByOwner(mintedAgentRecord.owner) : null;
-        return { content: [{ type: 'text', text: JSON.stringify({ gaii, minted: amount, new_balance: mintedGhii?.morselBalance ?? 0 }, null, 2) }] };
+        return { content: [{ type: 'text', text: JSON.stringify({ gaii, minted: minted.minted, new_balance: minted.newBalance }, null, 2) }] };
     });
 }
 //# sourceMappingURL=core-admin.js.map

package/dist/src/mcp/core-admin.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-admin.js","sourceRoot":"","sources":["../../../src/mcp/core-admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,MAAM,UAAU,sBAAsB,CAClC,GAAc,EACd,OAAgB,EAChB,MAAoB,EACpB,YAA0B,EAC1B,mBAA6D,EAC7D,wBAAqD;IAErD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,oCAAoC;IACpC,kFAAkF;IAClF,8DAA8D;IAE9D,KAAK,UAAU,UAAU;QACrB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,oCAAoC;IACpC,GAAG,CAAC,IAAI,CACJ,oBAAoB,EACpB,cAAc,CAAC,oBAAoB,CAAC,EACpC,EAAE,EACF,cAAc,CAAC,oBAAoB,CAAC,EACpC,KAAK,IAAI,EAAE;QACP,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1H,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnD,YAAY,IAAI,IAAI,EAAE,aAAa,IAAI,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,GAAG,UAAU;gBAAE,YAAY,EAAE,CAAC;QACxF,CAAC;QACD,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,OAAO,EAAE,MAAM,CAAC,MAAM;wBACtB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;wBAC5C,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE;wBAC9I,OAAO,EAAE,EAAE,4BAA4B,EAAE,YAAY,EAAE;qBAC1D,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,qCAAqC;IACrC,GAAG,CAAC,IAAI,CACJ,qBAAqB,EACrB,cAAc,CAAC,qBAAqB,CAAC,EACrC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAChC,cAAc,CAAC,qBAAqB,CAAC,EACrC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAChB,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1H,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnD,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW;YACzD,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1E,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS;SACjD,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC,CACJ,CAAC;IAEF,qCAAqC;IACrC,GAAG,CAAC,IAAI,CACJ,qBAAqB,EACrB,cAAc,CAAC,qBAAqB,CAAC,EACrC,EAAE,EACF,cAAc,CAAC,qBAAqB,CAAC,EACrC,KAAK,IAAI,EAAE;QACP,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1H,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;wBACzC,YAAY,EAAE,MAAM,CAAC,eAAe;wBACpC,eAAe,EAAE,MAAM,CAAC,aAAa;wBACrC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,cAAc;wBAC1E,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,yBAAyB,EAAE,MAAM,CAAC,qBAAqB;wBACnF,0EAA0E;wBAC1E,2EAA2E;wBAC3E,0EAA0E;wBAC1E,+BAA+B;wBAC/B,gBAAgB,EAAE,MAAM,CAAC,eAAe;wBACxC,uBAAuB,EAAE,MAAM,CAAC,oBAAoB;wBACpD,cAAc,EAAE,MAAM,CAAC,aAAa;wBACpC,iBAAiB,EAAE,MAAM,CAAC,cAAc;qBAC3C,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,mCAAmC;IACnC,GAAG,CAAC,IAAI,CACJ,mBAAmB,EACnB,cAAc,CAAC,mBAAmB,CAAC,EACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EACzD,cAAc,CAAC,mBAAmB,CAAC,EACnC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1H,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,IAAI,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAE7G,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAClD,MAAM,WAAW,GAAG,KAAK;aACpB,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC;aACtE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7C,IAAI,WAAW,GAAG,MAAM,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACtD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mBAAmB,MAAM,CAAC,qBAAqB,uCAAuC,WAAW,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrL,CAAC;QAED,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACxD,MAAM,OAAO,CAAC,cAAc,CAAC;YACzB,EAAE,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAC/C,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;YAC1B,gBAAgB,EAAE,SAAS;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QACH,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1J,CAAC,CACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"core-admin.js","sourceRoot":"","sources":["../../../src/mcp/core-admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,UAAU,sBAAsB,CAClC,GAAc,EACd,OAAgB,EAChB,MAAoB,EACpB,YAA0B,EAC1B,mBAA6D,EAC7D,wBAAqD;IAErD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,oCAAoC;IACpC,kFAAkF;IAClF,8DAA8D;IAE9D,KAAK,UAAU,UAAU;QACrB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,oCAAoC;IACpC,GAAG,CAAC,IAAI,CACJ,oBAAoB,EACpB,cAAc,CAAC,oBAAoB,CAAC,EACpC,EAAE,EACF,cAAc,CAAC,oBAAoB,CAAC,EACpC,KAAK,IAAI,EAAE;QACP,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1H,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnD,YAAY,IAAI,IAAI,EAAE,aAAa,IAAI,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,GAAG,UAAU;gBAAE,YAAY,EAAE,CAAC;QACxF,CAAC;QACD,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,OAAO,EAAE,MAAM,CAAC,MAAM;wBACtB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;wBAC5C,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE;wBAC9I,OAAO,EAAE,EAAE,4BAA4B,EAAE,YAAY,EAAE;qBAC1D,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,qCAAqC;IACrC,GAAG,CAAC,IAAI,CACJ,qBAAqB,EACrB,cAAc,CAAC,qBAAqB,CAAC,EACrC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAChC,cAAc,CAAC,qBAAqB,CAAC,EACrC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAChB,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1H,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnD,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW;YACzD,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1E,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS;SACjD,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC,CACJ,CAAC;IAEF,qCAAqC;IACrC,GAAG,CAAC,IAAI,CACJ,qBAAqB,EACrB,cAAc,CAAC,qBAAqB,CAAC,EACrC,EAAE,EACF,cAAc,CAAC,qBAAqB,CAAC,EACrC,KAAK,IAAI,EAAE;QACP,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1H,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;wBACzC,YAAY,EAAE,MAAM,CAAC,eAAe;wBACpC,eAAe,EAAE,MAAM,CAAC,aAAa;wBACrC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,cAAc;wBAC1E,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,yBAAyB,EAAE,MAAM,CAAC,qBAAqB;wBACnF,0EAA0E;wBAC1E,2EAA2E;wBAC3E,0EAA0E;wBAC1E,+BAA+B;wBAC/B,gBAAgB,EAAE,MAAM,CAAC,eAAe;wBACxC,uBAAuB,EAAE,MAAM,CAAC,oBAAoB;wBACpD,cAAc,EAAE,MAAM,CAAC,aAAa;wBACpC,iBAAiB,EAAE,MAAM,CAAC,cAAc;qBAC3C,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd,CAAC;SACL,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,mCAAmC;IACnC,GAAG,CAAC,IAAI,CACJ,mBAAmB,EACnB,cAAc,CAAC,mBAAmB,CAAC,EACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EACzD,cAAc,CAAC,mBAAmB,CAAC,EACnC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1H,yFAAyF;QACzF,sFAAsF;QACtF,4DAA4D;QAC5D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC9G,CAAC;QACD,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpJ,CAAC,CACJ,CAAC;AACN,CAAC"}

package/dist/src/mcp/core-storage.d.ts

@@ -15,6 +15,12 @@
  *   registerCoreStorageTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged);
  * @version-history
  *   v1.0.0 — 2026-07-26 — Extracted from src/mcp/core.ts together with the reference-read change.
+ *   v1.1.0 — 2026-08-11 — aimeat_storage_upload stores through services/storage-file-write.ts, the
+ *     same write POST /v1/storage runs. This copy had never checked the account-wide storage quota
+ *     and never charged the overage that follows it, so an agent could pass the node's storage
+ *     ceiling through the tool and be billed for none of it, while the identical upload from the
+ *     browser was gated and charged. It also took Node's permissive base64 reader, which turns
+ *     mis-sent HTML or JSON into a few bytes of garbage stored as a successful file.
  */
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { AimeatConfig } from '../config.js';

package/dist/src/mcp/core-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-storage.d.ts","sourceRoot":"","sources":["../../../src/mcp/core-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAgBvD,wBAAgB,wBAAwB,CACpC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7D,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACrD,IAAI,CA2JN"}
+{"version":3,"file":"core-storage.d.ts","sourceRoot":"","sources":["../../../src/mcp/core-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAiBvD,wBAAgB,wBAAwB,CACpC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7D,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACrD,IAAI,CAqJN"}

package/dist/src/mcp/core-storage.js

@@ -15,12 +15,19 @@
  *   registerCoreStorageTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged);
  * @version-history
  *   v1.0.0 — 2026-07-26 — Extracted from src/mcp/core.ts together with the reference-read change.
+ *   v1.1.0 — 2026-08-11 — aimeat_storage_upload stores through services/storage-file-write.ts, the
+ *     same write POST /v1/storage runs. This copy had never checked the account-wide storage quota
+ *     and never charged the overage that follows it, so an agent could pass the node's storage
+ *     ceiling through the tool and be billed for none of it, while the identical upload from the
+ *     browser was gated and charged. It also took Node's permissive base64 reader, which turns
+ *     mis-sent HTML or JSON into a few bytes of garbage stored as a successful file.
  */
 import { z } from 'zod';
 import { parseGaiiLoose } from '../utils/gaii.js';
-import { generateUploadToken, buildUploadMeta } from '../services/upload-token.js';
+import { writeStorageFile, mintStorageUploadUrl } from '../services/storage-file-write.js';
 import { resolveFileRef, handleFromResolved } from '../services/file-refs.js';
 import { pubEmbedUrl, pubEmbedMarkdown } from '../services/doc-images.js';
+import { decodeStrictBase64 } from '../utils/base64.js';
 import { annotationsFor } from './annotations.js';
 import { descriptionFor, jsonContent } from './catalog/shape.js';
 /** F11: storage holds binaries (images, video, large blobs). aimeat_storage_download returns a
@@ -40,65 +47,58 @@ export function registerCoreStorageTools(mcp, storage, config, getAgentGaii, emi
         visibility: z.enum(['private', 'owner', 'group', 'public']).optional().describe('Access control (default: private)'),
         group_id: z.string().optional().describe('ID of sharing group for group visibility'),
     }, annotationsFor('aimeat_storage_upload'), async ({ key, data_base64, mime_type, visibility, group_id }) => {
+        const deps = { storage, config, emitResourceUpdated, emitResourceListChanged };
         // --- UPLOAD MODE ---
         if (!data_base64) {
-            // The operator's own setting, not a constant. This was hardcoded to 10 MB, so a node
-            // configured for 50 MB still minted 10 MB tokens and refused everything above it with
-            // 413 FILE_TOO_LARGE — the admin page said 50 and the tool said 10, with nothing
-            // connecting the two.
-            const maxBytes = config.storageMaxFileSizeMb * 1024 * 1024;
-            const contentType = mime_type ?? 'application/octet-stream';
-            const token = await generateUploadToken({
-                sub: agentGaii,
-                utype: 'storage',
-                meta: buildUploadMeta('storage', {
-                    key, mime_type: contentType, visibility: visibility ?? 'private', group_id,
-                }),
-                maxBytes,
-                contentType,
+            const minted = await mintStorageUploadUrl(deps, agentGaii, {
+                key, mimeType: mime_type, visibility, groupId: group_id,
             });
-            const uploadUrl = `${config.baseUrl}/v1/upload/${token}`;
+            if (!minted.ok) {
+                return { content: [{ type: 'text', text: minted.message }], isError: true };
+            }
             return {
                 content: [{
                         type: 'text',
                         text: JSON.stringify({
                             mode: 'upload',
-                            upload_url: uploadUrl,
+                            upload_url: minted.uploadUrl,
                             upload_method: 'PUT',
-                            content_type: contentType,
-                            max_size_bytes: maxBytes,
-                            expires_in_seconds: 3600,
+                            content_type: minted.contentType,
+                            max_size_bytes: minted.maxBytes,
+                            expires_in_seconds: minted.expiresInSeconds,
                             note: 'PUT the raw file to upload_url. The response contains the result as JSON.',
                         }, null, 2),
                     }],
             };
         }
         // --- INLINE MODE ---
-        const fileData = Buffer.from(data_base64, 'base64');
-        if (fileData.length > config.storageMaxFileSizeMb * 1024 * 1024) {
+        // Strict decode, as every other inline-upload door does: Node's own base64 reader drops
+        // anything outside the alphabet, so raw HTML or JSON sent here used to be stored as a few
+        // bytes of garbage and served back as a successful file.
+        const fileData = decodeStrictBase64(data_base64);
+        if (!fileData) {
             return {
-                content: [{
-                        type: 'text',
-                        text: `File exceeds this node's ${config.storageMaxFileSizeMb}MB per-file limit. Omit data_base64 to get a presigned upload URL instead.`,
-                    }],
+                content: [{ type: 'text', text: 'data_base64 must be base64-encoded.' }],
                 isError: true,
             };
         }
-        const file = await storage.createStorageFile({
-            key,
-            ownerGaii: agentGaii,
-            visibility: visibility ?? 'private',
-            groupId: visibility === 'group' ? group_id : undefined,
-            mimeType: mime_type ?? 'application/octet-stream',
-            size: fileData.length,
-            data: fileData,
-            createdAt: new Date().toISOString(),
+        const written = await writeStorageFile(deps, agentGaii, {
+            key, data: fileData, mimeType: mime_type, visibility, groupId: group_id,
         });
-        emitResourceUpdated(agentGaii, `aimeat://storage/${encodeURIComponent(key)}`);
-        emitResourceListChanged(agentGaii);
+        if (!written.ok) {
+            // Only the per-file ceiling has an answer the caller can act on. Offering the
+            // presigned URL against the ACCOUNT quota would send an agent round a loop that
+            // ends in the same refusal, since that door checks the same ceiling.
+            const alternative = written.limit === 'per_file'
+                ? ' Omit data_base64 to get a presigned upload URL instead.'
+                : '';
+            return { content: [{ type: 'text', text: written.message + alternative }], isError: true };
+        }
+        const file = written.file;
         return {
             content: [{ type: 'text', text: JSON.stringify({
                         mode: 'inline', key: file.key, owner_gaii: file.ownerGaii, size: file.size, uploaded: true,
+                        ...(written.overageMorsels > 0 ? { overage_charged: written.overageMorsels } : {}),
                         // To embed this image in a workspace document, use embed_markdown / embed_url — NOT the raw
                         // /v1/storage/<key> path. Saving it into a document scopes the file to that workspace's
                         // members (visibility:'workspace'); it is never exposed to the public internet.

package/dist/src/mcp/core-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-storage.js","sourceRoot":"","sources":["../../../src/mcp/core-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjE;;mEAEmE;AACnE,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,SAAS,gBAAgB,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,wBAAwB,CACpC,GAAc,EACd,OAAgB,EAChB,MAAoB,EACpB,YAA0B,EAC1B,mBAA6D,EAC7D,uBAAoD;IAEpD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,uCAAuC;IACvC,GAAG,CAAC,IAAI,CACJ,uBAAuB,EACvB,cAAc,CAAC,uBAAuB,CAAC,EACvC;QACI,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4FAA4F,CAAC;QACzI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QAC1F,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACpH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;KACvF,EACD,cAAc,CAAC,uBAAuB,CAAC,EACvC,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5D,sBAAsB;QACtB,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,qFAAqF;YACrF,sFAAsF;YACtF,iFAAiF;YACjF,sBAAsB;YACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;YAC3D,MAAM,WAAW,GAAG,SAAS,IAAI,0BAA0B,CAAC;YAC5D,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;gBACpC,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,eAAe,CAAC,SAAS,EAAE;oBAC7B,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,IAAI,SAAS,EAAE,QAAQ;iBAC7E,CAAC;gBACF,QAAQ;gBACR,WAAW;aACd,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,OAAO,cAAc,KAAK,EAAE,CAAC;YAEzD,OAAO;gBACH,OAAO,EAAE,CAAC;wBACN,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACjB,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE,SAAS;4BACrB,aAAa,EAAE,KAAK;4BACpB,YAAY,EAAE,WAAW;4BACzB,cAAc,EAAE,QAAQ;4BACxB,kBAAkB,EAAE,IAAI;4BACxB,IAAI,EAAE,2EAA2E;yBACpF,EAAE,IAAI,EAAE,CAAC,CAAC;qBACd,CAAC;aACL,CAAC;QACN,CAAC;QAED,sBAAsB;QACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAC9D,OAAO;gBACH,OAAO,EAAE,CAAC;wBACN,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4BAA4B,MAAM,CAAC,oBAAoB,4EAA4E;qBAC5I,CAAC;gBACF,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;YACzC,GAAG;YACH,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,UAAU,IAAI,SAAS;YACnC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACtD,QAAQ,EAAE,SAAS,IAAI,0BAA0B;YACjD,IAAI,EAAE,QAAQ,CAAC,MAAM;YACrB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QACH,mBAAmB,CAAC,SAAS,EAAE,oBAAoB,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO;YACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACpD,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI;wBAC1F,4FAA4F;wBAC5F,wFAAwF;wBACxF,gFAAgF;wBAChF,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC;wBAChD,cAAc,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC;qBAC7D,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACjB,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,yCAAyC;IACzC,gGAAgG;IAChG,mGAAmG;IACnG,oGAAoG;IACpG,gGAAgG;IAChG,GAAG,CAAC,IAAI,CACJ,yBAAyB,EACzB,cAAc,CAAC,yBAAyB,CAAC,EACzC;QACI,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iHAAiH,CAAC;QAC3I,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2JAA2J,CAAC;QAClM,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iIAAiI,CAAC;KAC7K,EACD,cAAc,CAAC,yBAAyB,CAAC,EACzC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE;YACxD,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,KAAK;SAC1E,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClD,qFAAqF;YACrF,sFAAsF;YACtF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,KAAK,6BAA6B;gBAC1D,CAAC,CAAC,YAAY,QAAQ,CAAC,GAAG,qIAAqI,QAAQ,CAAC,GAAG,KAAK;gBAChL,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;oBAC1B,CAAC,CAAC,oBAAoB,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,mIAAmI,QAAQ,CAAC,GAAG,GAAG;oBACxM,CAAC,CAAC,iBAAiB,QAAQ,CAAC,GAAG,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACjL,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,MAAM,WAAW,GAAG,oBAAoB,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAE3E,+FAA+F;QAC/F,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,wBAAwB,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,OAAO,WAAW,CAAC;gBACf,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS;gBACjD,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;gBACxD,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,WAAW;aACtF,CAAC,CAAC;QACP,CAAC;QAED,sFAAsF;QACtF,2FAA2F;QAC3F,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO;YACH,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,eAAwB;oBAC9B,GAAG,EAAE,WAAW;oBAChB,IAAI,EAAE,IAAI,CAAC,GAAG;oBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,qEAAqE;iBACjG;gBACD;oBACI,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW;wBAC5E,IAAI,EAAE,MAAM;4BACR,CAAC,CAAC,0EAA0E;4BAC5E,CAAC,CAAC,iFAAiF;qBAC1F,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd;aACJ;SACJ,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"core-storage.js","sourceRoot":"","sources":["../../../src/mcp/core-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjE;;mEAEmE;AACnE,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,SAAS,gBAAgB,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,wBAAwB,CACpC,GAAc,EACd,OAAgB,EAChB,MAAoB,EACpB,YAA0B,EAC1B,mBAA6D,EAC7D,uBAAoD;IAEpD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,uCAAuC;IACvC,GAAG,CAAC,IAAI,CACJ,uBAAuB,EACvB,cAAc,CAAC,uBAAuB,CAAC,EACvC;QACI,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4FAA4F,CAAC;QACzI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QAC1F,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACpH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;KACvF,EACD,cAAc,CAAC,uBAAuB,CAAC,EACvC,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,CAAC;QAE/E,sBAAsB;QACtB,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE;gBACvD,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ;aAC1D,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACzF,CAAC;YACD,OAAO;gBACH,OAAO,EAAE,CAAC;wBACN,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACjB,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE,MAAM,CAAC,SAAS;4BAC5B,aAAa,EAAE,KAAK;4BACpB,YAAY,EAAE,MAAM,CAAC,WAAW;4BAChC,cAAc,EAAE,MAAM,CAAC,QAAQ;4BAC/B,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;4BAC3C,IAAI,EAAE,2EAA2E;yBACpF,EAAE,IAAI,EAAE,CAAC,CAAC;qBACd,CAAC;aACL,CAAC;QACN,CAAC;QAED,sBAAsB;QACtB,wFAAwF;QACxF,0FAA0F;QAC1F,yDAAyD;QACzD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO;gBACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC;gBACjF,OAAO,EAAE,IAAI;aAChB,CAAC;QACN,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE;YACpD,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ;SAC1E,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACd,8EAA8E;YAC9E,gFAAgF;YAChF,qEAAqE;YACrE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,KAAK,UAAU;gBAC5C,CAAC,CAAC,0DAA0D;gBAC5D,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACxG,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,OAAO;YACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACpD,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI;wBAC1F,GAAG,CAAC,OAAO,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClF,4FAA4F;wBAC5F,wFAAwF;wBACxF,gFAAgF;wBAChF,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC;wBAChD,cAAc,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC;qBAC7D,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACjB,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,yCAAyC;IACzC,gGAAgG;IAChG,mGAAmG;IACnG,oGAAoG;IACpG,gGAAgG;IAChG,GAAG,CAAC,IAAI,CACJ,yBAAyB,EACzB,cAAc,CAAC,yBAAyB,CAAC,EACzC;QACI,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iHAAiH,CAAC;QAC3I,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2JAA2J,CAAC;QAClM,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iIAAiI,CAAC;KAC7K,EACD,cAAc,CAAC,yBAAyB,CAAC,EACzC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE;YACxD,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,KAAK;SAC1E,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClD,qFAAqF;YACrF,sFAAsF;YACtF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,KAAK,6BAA6B;gBAC1D,CAAC,CAAC,YAAY,QAAQ,CAAC,GAAG,qIAAqI,QAAQ,CAAC,GAAG,KAAK;gBAChL,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;oBAC1B,CAAC,CAAC,oBAAoB,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,mIAAmI,QAAQ,CAAC,GAAG,GAAG;oBACxM,CAAC,CAAC,iBAAiB,QAAQ,CAAC,GAAG,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACjL,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,MAAM,WAAW,GAAG,oBAAoB,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAE3E,+FAA+F;QAC/F,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,wBAAwB,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,OAAO,WAAW,CAAC;gBACf,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS;gBACjD,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;gBACxD,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,WAAW;aACtF,CAAC,CAAC;QACP,CAAC;QAED,sFAAsF;QACtF,2FAA2F;QAC3F,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO;YACH,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,eAAwB;oBAC9B,GAAG,EAAE,WAAW;oBAChB,IAAI,EAAE,IAAI,CAAC,GAAG;oBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,qEAAqE;iBACjG;gBACD;oBACI,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW;wBAC5E,IAAI,EAAE,MAAM;4BACR,CAAC,CAAC,0EAA0E;4BAC5E,CAAC,CAAC,iFAAiF;qBAC1F,EAAE,IAAI,EAAE,CAAC,CAAC;iBACd;aACJ;SACJ,CAAC;IACN,CAAC,CACJ,CAAC;AACN,CAAC"}

package/dist/src/mcp/core.d.ts

@@ -9,6 +9,18 @@
  *   import { registerCoreTools } from './core.js';
  *   registerCoreTools(mcp, storage, config, getAgentGaii, emitResourceUpdated, emitResourceListChanged);
  * @version-history
+ *   v1.17.0 — 2026-08-11 — aimeat_work_accept and aimeat_work_deliver call services/work-lifecycle.ts,
+ *     the same functions POST /v1/work/:tc/accept and /deliver call. Accepting over MCP skipped the
+ *     work→task bridge, so the agent had no task to work from; delivering over MCP skipped the
+ *     requester's callback webhook and both extension hooks, so the requester was told about an HTTP
+ *     delivery and not about this one.
+ *   v1.16.0 — 2026-08-11 — aimeat_action_execute calls routes/work.ts createWorkItem, the same
+ *     function POST /v1/work/request calls. It was a second, thinner implementation: no provider
+ *     resolution (so cross-node work held escrow here while the provider's node heard nothing),
+ *     no visiting-tier peer policy, no pending-queue ceiling.
+ *   v1.13.0 — 2026-08-10 — aimeat_memory_write calls services/memory-write.ts. It had the same
+ *     defect fixed inside it three separate times — schema locks, the write target, the provenance
+ *     stamp — because it reimplemented what POST /v1/memory does instead of calling it.
  *   v1.0.0 — 2026-03-20 — Extracted from src/routes/mcp.ts (pure refactor, no logic changes)
  *   v1.1.0 -- 2026-05-28 -- Add memory tags and owner-scope listing support
  *   v1.2.0 -- 2026-05-29 -- Add tool annotations (title + read/destructive/idempotent/openWorld hints)
@@ -62,9 +74,23 @@
  *     result. Both write tools reached storage DIRECTLY before this, so an agent writing over MCP
  *     left content with no provenance at all while the identical write over REST /v1/memory was
  *     stamped — the MCP hop was exactly where the information was being lost.
+ *   v1.14.0 -- 2026-08-08 -- owner_scope on aimeat_memory_read and aimeat_memory_write, behind
+ *     memory:write-as-owner, decided by the same routes/memory/owner-target.ts the REST path uses.
+ *     The write result reports the namespace the record LANDED in rather than the caller: verified
+ *     against production, a delegated write succeeded into the owner's GHII while answering with the
+ *     agent's — for a call whose whole subject is which namespace was written, the one field that
+ *     mattered was the one that was wrong.
+ *   v1.15.0 -- 2026-08-09 -- expected_version on aimeat_memory_write. The optimistic lock the REST
+ *     key route enforces was unreachable from MCP, so an agent's write was last-write-wins against
+ *     a person editing the same record. Optional. Reasoning: mcp/memory-version-lock.ts.
  */
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { AimeatConfig } from '../config.js';
 import type { Storage } from '../storage/interface.js';
-export declare function registerCoreTools(mcp: McpServer, storage: Storage, config: AimeatConfig, getAgentGaii: () => string, emitResourceUpdated: (agentGaii: string, uri: string) => void, emitResourceListChanged: (agentGaii: string) => void): void;
+import type { PeerInfo } from '../services/federation.js';
+export declare function registerCoreTools(mcp: McpServer, storage: Storage, config: AimeatConfig, getAgentGaii: () => string, emitResourceUpdated: (agentGaii: string, uri: string) => void, emitResourceListChanged: (agentGaii: string) => void, 
+/** This session's granted scopes. Needed by the owner_scope write gate; empty = no delegation. */
+sessionScopes?: string[], 
+/** Known peers, for the provider resolution createWorkItem does on a cross-node commission. */
+peers?: Map<string, PeerInfo>): void;
 //# sourceMappingURL=core.d.ts.map

package/dist/src/mcp/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/mcp/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AAEH,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAEtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AA6BvD,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7D,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GACrD,IAAI,CAwoBN"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/mcp/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAEtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAsBvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAW1D,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,MAAM,EAC1B,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7D,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI;AACpD,kGAAkG;AAClG,aAAa,GAAE,MAAM,EAAO;AAC5B,+FAA+F;AAC/F,KAAK,GAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAa,GACzC,IAAI,CAwnBN"}