aimeat 3.1.0 → 3.3.0

package/dist/.env.example

@@ -296,6 +296,62 @@ AIMEAT_PORT=40050
 # AIMEAT_STORAGE_QUOTA_MB=100
 # AIMEAT_STORAGE_MAX_FILE_SIZE_MB=10
 # AIMEAT_STORAGE_MAX_CHUNKED_FILE_SIZE_GB=5
+# How many on-demand app screenshots one owner may ask for per hour (POST .../screenshot/capture,
+# and the aimeat_app_screenshot tool). Rendering is the most expensive thing this node does per
+# request, so this is a throttle rather than a preference.
+# AIMEAT_SCREENSHOT_ONDEMAND_PER_HOUR=20
+# ── The chat agent (a `goose acp` child process, ACP over stdio) ──
+# Empty (the default) disables the chat entirely, which is what every node does until an operator
+# installs goose. The node spawns it, speaks ACP over its stdin/stdout, and stops it on shutdown.
+#
+# Stdio rather than `goose serve` over HTTP, and that was measured rather than preferred: the HTTP
+# transport accepts requests and answers them, but never delivers a session/update notification, so
+# every turn is silent. The same prompt over stdio answers in seconds. Stdio also needs no port, no
+# shared secret and no loopback surface to protect.
+# How many chat conversations stay open before the oldest rolls into a per-month archive record.
+# A memory namespace holds 1000 keys, and one key per conversation forever would spend them.
+# AIMEAT_CHAT_MAX_LIVE_THREADS=50
+# AIMEAT_GOOSE_BIN=goose
+# Its own config and session store, away from any human's goose profile on the same machine.
+# AIMEAT_GOOSE_PATH_ROOT=
+# The provider key the agent calls with. Who may spend it is decided before a turn starts.
+# AIMEAT_GOOSE_PROVIDER_API_KEY=
+# ── This node's own AI key, and what one person may spend of it ──
+# Empty (the default) means the node pays for nothing and everyone brings their own key, which is
+# how every node behaved before this existed. Set it and a person who has not brought a key can
+# still do something on the day they arrive.
+#
+# The key is SHARED by everyone here, so the node meters each person itself rather than handing out
+# provider access: that is the shape OpenRouter's terms allow. Someone who wants unmetered use
+# brings their own key, which bypasses the allowance entirely and is the recommended path.
+# AIMEAT_OPENROUTER_INSTANCE_KEY=
+# Free starting allowance in USD, applied once per person. 0 grants nothing.
+# AIMEAT_CHAT_FREE_ALLOWANCE_USD=0
+# Model used when someone on the node's key has spent their allowance. Empty refuses instead of
+# degrading. A free model is a worse answer, not a wrong one, as long as the person is told — and
+# they are: the response says it was degraded.
+# AIMEAT_MODEL_FREE_FALLBACK=openrouter/free
+# ── Instance model defaults, one per role ──
+# Read only when the OWNER has not chosen a model of their own: owner setting, then this, then a
+# refusal that names what to set. Empty (the default) means the node states no preference and every
+# role resolves exactly as it did before these existed.
+#
+# These belong with an instance API key rather than beside it. A key alone does not let a new person
+# speak, read an image or make one, because every model role is an owner-level setting and an unset
+# one is an error rather than a fallback. Speech is the sharpest case: without AIMEAT_MODEL_DEFAULT_STT
+# a brand-new account cannot use the microphone at all until it finds a settings page it has no
+# reason to know about.
+# AIMEAT_MODEL_DEFAULT_CHAT=
+# AIMEAT_MODEL_DEFAULT_REASONING=
+# AIMEAT_MODEL_DEFAULT_EXECUTION=
+# AIMEAT_MODEL_DEFAULT_VISION=
+# AIMEAT_MODEL_DEFAULT_STT=
+# AIMEAT_MODEL_DEFAULT_IMAGE=
+# The image model is used by POST /v1/ai/image and aimeat_image_generate. Without one, on the
+# owner or here, that route refuses by name rather than handing the request to a chat model.
+# ISO-639-1 hint for speech-to-text. Empty lets the model detect it, which is what mixed-language
+# speech wants, so set this only where the node knows its audio is one language.
+# AIMEAT_STT_LANGUAGE_DEFAULT=
 # ── Speech-to-text (POST /v1/ai/transcribe, voice messages) ──
 # Largest audio file accepted for transcription. 25 MB is the provider-side multipart ceiling, so
 # raising this past it turns a clear local refusal into an opaque upstream one.
@@ -484,7 +540,8 @@ AIMEAT_PORT=40050
 
 # ── Crawlers / Content Signals / Web Bot Auth ──────────────────
 # AIMEAT_WEB_BOT_AUTH_SIGN=false           # Sign outbound HTTP (RFC 9421 Web Bot Auth, node Ed25519 key) so peers/CDNs can verify AIMEAT traffic against /.well-known/http-message-signatures-directory. OFF by default: stamps identifying Signature headers on every outbound request (linkability; rare strict endpoints may reject unknown headers). The key directory is always served.
-# AIMEAT_CONTENT_SIGNAL="search=yes, ai-input=yes, ai-train=no"   # robots.txt Content Signals Policy directive (contentsignals.org). Keep consistent with the per-bot rules in public/robots.txt; 'off' removes the directive.
+# AIMEAT_AI_TRAINING=deny                  # Allow the AI TRAINING crawlers (GPTBot, ClaudeBot, Google-Extended, Applebot-Extended, meta-externalagent) in robots.txt: 'allow' | 'deny'. Denied by default because a personal node holds one person's data, and a safe public default has to assume that case. Denying keeps the node out of what the models know without being pointed at it, and is a stated preference rather than an enforceable control. The SEARCH and RETRIEVAL bots (OAI-SearchBot, Claude-SearchBot, Claude-User, PerplexityBot, Googlebot, Bingbot, Applebot ...) are always allowed and are NOT affected by this: blocking those would make the node unfindable. aimeat.io runs 'allow'.
+# AIMEAT_CONTENT_SIGNAL=""                 # robots.txt Content Signals Policy directive (contentsignals.org), e.g. "search=yes, ai-input=yes, ai-train=no". Leave empty to pair it to AIMEAT_AI_TRAINING so the directive and the per-bot rules cannot contradict each other; set it to override both; 'off' removes the directive.
 
 # ── IndexNow (Bing/Yandex search indexing) ─────────────────────
 # Generate a key: openssl rand -hex 16

package/dist/build-stamp.json

@@ -1,10 +1,10 @@
 {
   "schema_version": 1,
-  "version": "3.1.0",
-  "commit": "35ae25faecb61625b9c41d9502920e3f12d981cd",
+  "version": "3.3.0",
+  "commit": "ff14a2711f15567c13f31d005ac6e39cbe5cf346",
   "dirty": false,
-  "built_at": "2026-08-14T04:40:18.095Z",
-  "newest_source_mtime": 1786642352443.2114,
+  "built_at": "2026-08-16T11:14:52.462Z",
+  "newest_source_mtime": 1786878872198.984,
   "source_dirs": [
     "src",
     "bin",