aimeat 3.1.0 → 3.3.0

package/dist/public/llms-index-template.txt

@@ -0,0 +1,60 @@
+---
+description: AIMEAT Protocol Node — index
+version: v2
+downloadedFrom: {{BASE_URL}}/llms.txt
+---
+
+# AIMEAT Protocol Node
+
+> This page is the index. The full builder's manual is at {{BASE_URL}}/llms-full.txt, and that is
+> the document to fetch when you are helping someone build an app or calling this API directly.
+> An AIMEAT node holds persistent memory, identity for humans and their AI agents (GHII/GAII),
+> shared workspaces, skills, tasks and a usage meter, reachable over REST and MCP. The person who
+> owns an account here owns what is stored under it and grants or revokes each agent's reach, one
+> scope at a time.
+
+- Node URL: {{BASE_URL}}
+- Node ID: {{NODE_ID}}
+- Protocol: AIMEAT v1
+
+## Start here
+
+- [You are a person]({{BASE_URL}}/v1/portal): register in the portal, then connect an assistant
+- [You are an assistant helping someone build]({{BASE_URL}}/llms-full.txt): the manual, with SDK libraries, app templates and worked examples
+- [You are an agent joining under your own identity]({{BASE_URL}}/auth.md): RFC 8628 device flow, the owner approves you and picks your scopes
+- [You are a coding agent meeting AIMEAT as a dependency]({{BASE_URL}}/AGENTS.md): short orientation, installation and configuration
+
+## Documentation
+
+- [Full builder's manual]({{BASE_URL}}/llms-full.txt): everything below in one document — SDK libraries, app templates, core concepts, connection flows and the complete endpoint reference
+- [Site map]({{BASE_URL}}/sitemap.md): every page and endpoint on this node, one page
+- [Glossary]({{BASE_URL}}/v1/glossary): GHII, GAII, GEAI, morsels, organisms and the rest, defined
+- [OpenAPI contract]({{BASE_URL}}/v1/spec): the canonical API contract this node is held to
+- [API documentation]({{BASE_URL}}/v1/docs): browsable endpoint reference
+- [Agent registration]({{BASE_URL}}/auth.md): RFC 8628 device flow, owner-approved
+- [App building prompt]({{BASE_URL}}/v1/prompts/build-app): the canonical single-file app spec
+- [App templates]({{BASE_URL}}/v1/app-templates): starter skeletons
+- [App-build pitfalls]({{BASE_URL}}/v1/appdev/pitfalls): what breaks app builds, curated
+
+## Discovery
+
+- [Node descriptor]({{BASE_URL}}/.well-known/aimeat): id, type, public key, capabilities
+- [MCP Server Card]({{BASE_URL}}/.well-known/mcp.json): the MCP server, its transport and auth
+- [Machine-readable bootstrap]({{BASE_URL}}/?format=json): what this node is and what to call next
+- [API catalog]({{BASE_URL}}/.well-known/api-catalog): RFC 9727 linkset
+- [Agent Skills index]({{BASE_URL}}/.well-known/agent-skills/index.json): skill packs published here
+- [Crawl policy]({{BASE_URL}}/robots.txt): the content signals this node sets
+
+## Human pages
+
+{{HUMAN_PAGES}}
+
+## Optional
+
+Secondary reading. Skip these when you need a shorter context.
+
+{{OPTIONAL_PAGES}}
+- [AI transparency]({{BASE_URL}}/v1/ai-transparency): what this node marks as AI-generated, how, and in which posture. Content generated here carries an `aimeat.provenance/v1` record on every surface; ask {{BASE_URL}}/v1/provenance/by-hash/<sha256> about bytes you hold, no account needed
+- [UCP profile]({{BASE_URL}}/.well-known/ucp): commerce transports, checkout capability, payment handlers
+- [ACP profile]({{BASE_URL}}/.well-known/acp.json): agentic-commerce discovery and the product feed
+- [Web Bot Auth directory]({{BASE_URL}}/.well-known/http-message-signatures-directory): the keys this node signs outbound requests with

package/dist/public/robots.node.txt

@@ -23,52 +23,93 @@ User-agent: *
 Content-Signal: search=yes, ai-input=yes, ai-train=no
 Allow: /
 
-# ── OpenAI ──────────────────────────────────────────────────────────────────
-# OAI-SearchBot: powers ChatGPT search results (allow — we want to show up)
+# ── Search and retrieval ────────────────────────────────────────────────────
+# These are the bots that decide whether an AI assistant can answer a live question about this
+# node correctly. Every one of them is allowed, on every node, and that is not operator-tunable:
+# a node nobody can look up is a node nobody can join.
+#
+# Two kinds are mixed here on purpose, because blocking them has different costs. A SEARCH bot
+# feeds the index an assistant queries; blocking it removes this node from that assistant's
+# answers. A USER bot fetches one page because a human asked for it, and the vendors document
+# that those may ignore robots.txt precisely because a person asked.
+
+# OpenAI — OAI-SearchBot powers ChatGPT search results; blocking it removes this node from them.
 User-agent: OAI-SearchBot
 Allow: /
 
-# GPTBot: training data crawler (blocked — training is a separate decision)
-User-agent: GPTBot
-Disallow: /
+User-agent: ChatGPT-User
+Allow: /
 
-# ── Anthropic / Claude ───────────────────────────────────────────────────────
-# Claude-SearchBot: search indexing
+User-agent: OAI-AdsBot
+Allow: /
+
+# Anthropic — rules apply per subdomain, which is why app origins serve their own robots.txt.
 User-agent: Claude-SearchBot
 Allow: /
 
-# Claude-User: user-initiated fetches (cowork, claude.ai browsing)
 User-agent: Claude-User
 Allow: /
 
-# ClaudeBot: training crawler
-User-agent: ClaudeBot
-Disallow: /
-
-# ── Perplexity ───────────────────────────────────────────────────────────────
-# PerplexityBot: search indexing (respects robots.txt)
+# Perplexity
 User-agent: PerplexityBot
 Allow: /
 
-# Perplexity-User: user-initiated fetches (typically ignores robots.txt anyway)
 User-agent: Perplexity-User
 Allow: /
 
-# ── Google ───────────────────────────────────────────────────────────────────
-# Googlebot: standard search indexing (allow)
+# Google — Googlebot feeds Search, and therefore AI Overviews and AI Mode, which are retrieval
+# over the Search index. Google-Extended is a separate decision and sits in the training block.
 User-agent: Googlebot
 Allow: /
 
-# Google-Extended: Gemini training/grounding — does NOT affect Google Search
+# Microsoft — bingbot feeds both Bing Search and Copilot.
+User-agent: Bingbot
+Allow: /
+
+# Apple — Applebot indexes for Siri and Spotlight. Applebot-Extended does not crawl at all; it is
+# the training opt-out token, so it belongs in the block below.
+User-agent: Applebot
+Allow: /
+
+# Meta — meta-externalfetcher is the user-requested single-link fetch.
+User-agent: meta-externalfetcher
+Allow: /
+
+# xAI / Grok: deliberately absent. No vendor-documented crawler token exists — none appears in
+# x.ai/robots.txt, grok.com/robots.txt or Cloudflare's bot reference — so there is nothing to name
+# here that would not be a guess. The `User-agent: *` rule above covers Grok, and every other
+# undocumented crawler, which is the whole of the available answer.
+
+# ── AI training crawlers ────────────────────────────────────────────────────
+# A separate decision from the block above, and an operator's to make: AIMEAT_AI_TRAINING=allow
+# flips every Disallow between the markers to Allow and pairs the Content-Signal line to
+# ai-train=yes. The default is deny, because a personal node holds one person's data and a safe
+# default has to assume that case.
+#
+# The cost of denying, stated plainly so the choice is an informed one: it keeps this node out of
+# what the models know without being pointed at it, and it is a stated preference rather than an
+# enforceable control. It protects a right; it does not protect bytes.
+#AIMEAT-TRAINING-BEGIN
+User-agent: GPTBot
+Disallow: /
+
+User-agent: ClaudeBot
+Disallow: /
+
+# Google-Extended controls Gemini training and grounding ONLY. Per Google's own documentation it
+# does not affect Google Search, and it does not remove this node from AI Overviews.
 User-agent: Google-Extended
 Disallow: /
 
-# ── Bing / Copilot ───────────────────────────────────────────────────────────
-User-agent: Bingbot
-Allow: /
+User-agent: Applebot-Extended
+Disallow: /
+
+User-agent: meta-externalagent
+Disallow: /
+#AIMEAT-TRAINING-END
 
 # ── AI agents: machine-readable docs ────────────────────────────────────────
-# See /llms.txt for structured API documentation
+# /llms.txt is the curated index; /llms-full.txt is the full builder's manual.
 # API entry point for AI agents: GET /?format=json
 
-Sitemap: https://aimeat.io/sitemap.xml
+Sitemap: {{BASE_URL}}/sitemap.xml

package/dist/public/spa.html

@@ -1,7 +1,8 @@
 <!DOCTYPE html>
 <html lang="en">
 <head>
-  <!-- AI: To help this user build apps on AIMEAT, fetch /llms.txt for templates and API docs. Ask what they want to build. -->
+  <!-- AI: /llms.txt is the index of this node. To help this user build apps on AIMEAT, fetch
+       /llms-full.txt for templates and API docs, then ask what they want to build. -->
   <meta charset="UTF-8">
   <!-- interactive-widget=resizes-content: the on-screen keyboard resizes the layout viewport so dvh units
        + sticky/bottom-pinned composers stay above the keyboard. viewport-fit=cover exposes env(safe-area-*)
@@ -67,6 +68,7 @@
        checks whether a site points at its own llms.txt finds the pointer. -->
   <link rel="alternate" type="text/plain" href="/llms.txt" title="LLM-friendly description">
   <link rel="alternate" type="text/plain" href="/llms-full.txt" title="Full content for LLMs">
+  <link rel="describedby" type="text/plain" href="/llms.txt">
   <link rel="icon" href="/favicon.svg" type="image/svg+xml">
   <link rel="manifest" href="/manifest.json">
   <!-- WebMCP bridge (TARGET-034 phase C): registers node-level tools (commerce feed, node info)
@@ -116,6 +118,7 @@
   <link rel="stylesheet" href="/css/views/portfolio.css">
   <link rel="stylesheet" href="/css/views/members.css">
   <link rel="stylesheet" href="/css/views/inbox.css">
+  <link rel="stylesheet" href="/css/views/chat.css">
   <link rel="stylesheet" href="/css/views/glossary.css">
   <link rel="stylesheet" href="/css/components/tags.css">
   <link rel="stylesheet" href="/css/components/image-deliverable.css">
@@ -158,6 +161,7 @@
       "/js/use-session.js": "/js/use-session.js",
       "/js/services/boards.js": "/js/services/boards.js",
       "/js/services/catalogue.js": "/js/services/catalogue.js",
+      "/js/services/chat.js": "/js/services/chat.js",
       "/js/services/consent.js": "/js/services/consent.js",
       "/js/services/cortex.js": "/js/services/cortex.js",
       "/js/services/extensions.js": "/js/services/extensions.js",
@@ -174,6 +178,7 @@
       "/js/services/notebook-plan.js": "/js/services/notebook-plan.js",
       "/js/services/nodes.js": "/js/services/nodes.js",
       "/js/services/organisms.js": "/js/services/organisms.js",
+      "/js/services/organism-roles.js": "/js/services/organism-roles.js",
       "/js/services/hello-mcp.js": "/js/services/hello-mcp.js",
       "/js/services/offers.js": "/js/services/offers.js",
       "/js/services/offers-grouping.js": "/js/services/offers-grouping.js",
@@ -429,6 +434,7 @@
       '/v1/glossary':    () => import('/views/glossary.js' + B),
       '/v1/business':    () => import('/views/business.js' + B),
       '/v1/transparency': () => import('/views/transparency.js' + B),
+      '/v1/chat':        () => import('/views/chat.js' + B),
       '/v1/profile':     () => import('/views/profile.js' + B),
       '/v1/home':        () => import('/views/home/index.js' + B),
       '/v1/app-grant':   () => import('/views/app-grant.js' + B),
@@ -809,6 +815,8 @@
                    only existed because the bar was carrying the marketing links at the same
                    time. Those links are anon-only now, so these three fit on the row. -->
               ${session && html`
+                <a href="/v1/chat" class="${currentPath === '/v1/chat' ? 'active' : ''}"
+                  onClick=${(e) => { handleNav(e, '/v1/chat'); setMenuOpen(false); }}>${t('nav.chat') || 'Chat'}</a>
                 <a href="/app-catalog.html" target="_blank" onClick=${() => setMenuOpen(false)}
                   class="${currentPath === '/app-catalog.html' ? 'active' : ''}">${t('nav.apps') || 'Apps'}</a>
                 <a href="/v1/profile" class="profile-link visible ${currentPath === '/v1/profile' ? 'active' : ''}"

package/dist/public/views/admin/organism-ownership-tab.js

@@ -0,0 +1,124 @@
+/**
+ * @file organism-ownership-tab.js
+ * @description The operator's break-glass over an organism's ownership, on a screen. Look up an
+ *   organism by id, see who holds it and who made it, and add an owner to one whose own owners can
+ *   no longer be reached.
+ *
+ *   Why an operator screen exists for this at all: every gate inside an organism defers to its
+ *   owners, so an organism whose owners are unreachable cannot be repaired from the inside, and the
+ *   node operator had no override either. The repair used to be a hand-written SQL transaction
+ *   against the production database.
+ *
+ *   It is ADDITIVE. Adding an owner takes nothing from the people already there, so the operator
+ *   never has to decide who loses their organism in order to fix it.
+ * @structure OrganismOwnershipTab — lookup form, ownership card, add-owner form
+ * @usage registered in views/admin.js under the Identity group
+ * @version-history
+ *   v1.0.0 — 2026-08-15 — Initial, beside POST /v1/admin/organisms/:id/ownership.
+ */
+import { h } from 'preact';
+import { useState, useCallback } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import { dt, Empty, DataTable } from './shared.js';
+import { KeyValueRow } from '/components/KeyValueRow.js';
+import { apiGet, apiPost } from '/js/api.js';
+
+export default function OrganismOwnershipTab() {
+  const [orgId, setOrgId] = useState('');
+  const [state, setState] = useState(null);      // { id, name, owners, created_by, admins, members }
+  const [candidate, setCandidate] = useState('');
+  const [busy, setBusy] = useState(false);
+  const [msg, setMsg] = useState(null);          // { text, bad }
+
+  const load = useCallback(async (id) => {
+    const target = (id ?? orgId).trim();
+    if (!target) return;
+    setBusy(true);
+    setMsg(null);
+    try {
+      const r = await apiGet(`/v1/admin/organisms/${encodeURIComponent(target)}/ownership`);
+      if (r?.data) { setState(r.data); }
+      else { setState(null); setMsg({ text: r?.error?.message || t('admin.orgOwnership.notFound') || 'Organism not found', bad: true }); }
+    } catch (e) {
+      setState(null);
+      setMsg({ text: e?.message || 'Lookup failed', bad: true });
+    }
+    setBusy(false);
+  }, [orgId]);
+
+  const addOwner = useCallback(async () => {
+    const name = candidate.trim();
+    if (!name || !state) return;
+    setBusy(true);
+    setMsg(null);
+    try {
+      const r = await apiPost(`/v1/admin/organisms/${encodeURIComponent(state.id)}/ownership`, { ghii: name });
+      if (r?.data) {
+        setMsg({ text: (t('admin.orgOwnership.added') || 'Added {name} as an owner').replace('{name}', name), bad: false });
+        setCandidate('');
+        await load(state.id);
+      } else {
+        setMsg({ text: r?.error?.message || 'Failed', bad: true });
+      }
+    } catch (e) {
+      setMsg({ text: e?.message || 'Failed', bad: true });
+    }
+    setBusy(false);
+  }, [candidate, state, load]);
+
+  const rows = (state?.members || []).map(m => [
+    m.ghii,
+    (state.owners || []).includes(m.ghii)
+      ? html`<span class="badge badge-success">${t('admin.orgOwnership.owner') || 'owner'}</span>`
+      : m.role,
+    m.status,
+    dt(m.joined_at),
+  ]);
+
+  return html`
+    <div class="admin-section">
+      <p class="section-desc">
+        ${t('admin.orgOwnership.desc')
+          || 'Put an owner back on an organism whose own owners can no longer be reached. Adding is additive: nobody inside loses anything.'}
+      </p>
+
+      <div class="adm-oo-row">
+        <input class="input-field" type="text" value=${orgId} placeholder=${t('admin.orgOwnership.idPlaceholder') || 'Organism id'}
+          onInput=${(e) => setOrgId(e.target.value)} onKeyDown=${(e) => { if (e.key === 'Enter') load(); }} />
+        <button class="btn-outline" disabled=${busy || !orgId.trim()} onClick=${() => load()}>
+          ${t('admin.orgOwnership.look') || 'Look up'}
+        </button>
+      </div>
+
+      ${msg ? html`<p class=${msg.bad ? 'form-error' : 'form-note'}>${msg.text}</p>` : null}
+
+      ${state ? html`
+        <div class="adm-oo-card">
+          <${KeyValueRow} label=${t('admin.orgOwnership.name') || 'Organism'} value=${state.name} />
+          <${KeyValueRow} label=${t('admin.orgOwnership.owners') || 'Owners'} value=${(state.owners || []).join(', ')} />
+          <${KeyValueRow} label=${t('admin.orgOwnership.createdBy') || 'Created by'} value=${state.created_by || '—'} />
+          <${KeyValueRow} label=${t('admin.orgOwnership.created') || 'Created'} value=${dt(state.created_at)} />
+        </div>
+
+        <div class="adm-oo-row">
+          <input class="input-field" type="text" value=${candidate}
+            placeholder=${t('admin.orgOwnership.addPlaceholder') || 'Owner name to add'}
+            onInput=${(e) => setCandidate(e.target.value)} onKeyDown=${(e) => { if (e.key === 'Enter') addOwner(); }} />
+          <button class="btn-primary" disabled=${busy || !candidate.trim()} onClick=${addOwner}>
+            ${t('admin.orgOwnership.add') || 'Add owner'}
+          </button>
+        </div>
+
+        ${rows.length
+          ? html`<${DataTable} headers=${[
+              t('admin.orgOwnership.member') || 'Member',
+              t('admin.orgOwnership.role') || 'Role',
+              t('admin.orgOwnership.status') || 'Status',
+              t('admin.orgOwnership.joined') || 'Joined',
+            ]} rows=${rows} />`
+          : html`<${Empty} text=${t('admin.orgOwnership.noMembers') || 'This organism has no members.'} />`}
+      ` : null}
+    </div>`;
+}

package/dist/public/views/admin/owners-tab.js

@@ -1,16 +1,18 @@
 /**
  * @file public/views/admin/owners-tab.js
  * @description Admin dashboard tab listing registered owners (name, display name, roles,
- *   agent count, created date) with an operator action to grant the operator role.
+ *   agent count, created date) with operator actions to grant and revoke the operator role.
  *
  * @structure
  *   - OwnersTab({ data, reload }): renders the owners table
  *   - doGrant(name): confirms then grants the operator role via grantRole and reloads
+ *   - doRevoke(name): confirms then removes the operator role via revokeRole and reloads
  *
  * @version-history
- *   v1.0.0 — 2026-07-13 — Header added; file pre-dates header standard
+ *   v1.2.0 — 2026-08-14 — Revoke Operator action next to Grant Operator.
  *   v1.1.0 — 2026-07-18 — Vaihe 2d: hand-rolled <table> → canonical admin <DataTable> (rows/headers
  *     model); cell content preserved verbatim.
+ *   v1.0.0 — 2026-07-13 — Header added; file pre-dates header standard
  */
 import { h } from 'preact';
 import htm from 'htm';
@@ -18,7 +20,7 @@ const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { escHtml } from '/js/utils.js';
 import { dt, Empty, useToast, Toast, DataTable } from './shared.js';
-import { grantRole } from '/js/services/admin.js';
+import { grantRole, revokeRole } from '/js/services/admin.js';
 import { useConfirm } from '/components/Modal.js';
 
 export default function OwnersTab({ data, reload }) {
@@ -34,6 +36,13 @@ export default function OwnersTab({ data, reload }) {
     });
   }
 
+  function doRevoke(name) {
+    confirm(t('dashboard.revokeConfirm').replace('{name}', name), async () => {
+      try { await revokeRole(name, 'operator'); reload(); }
+      catch (e) { showErr(e.message); }
+    });
+  }
+
   return html`
     ${toast && html`<${Toast} ...${toast} onDismiss=${clearToast} />`}
     <${DataTable}
@@ -48,7 +57,9 @@ export default function OwnersTab({ data, reload }) {
           roles.length ? html`${roles.map(r => html`<span class="tag" style="font-size:.75rem">${r}</span> `)}` : html`<span style="color:var(--text-dim)">—</span>`,
           ow.agents ? ow.agents.length : 0,
           html`<span style="color:var(--text-dim)">${dt(ow.created_at)}</span>`,
-          !isOp && html`<button class="adm-btn-sm" onClick=${() => doGrant(ow.name)}>${t('dashboard.grantOperator')}</button>`,
+          isOp
+            ? html`<button class="adm-btn-sm" onClick=${() => doRevoke(ow.name)}>${t('dashboard.revokeOperator')}</button>`
+            : html`<button class="adm-btn-sm" onClick=${() => doGrant(ow.name)}>${t('dashboard.grantOperator')}</button>`,
         ];
       })}
     />

package/dist/public/views/admin/usage-tab.calls.js

@@ -0,0 +1,120 @@
+/**
+ * @file usage-tab.calls.js
+ * @description Admin Usage tab, section 3 — the CALL stream. The other two sections count LLM
+ *   spend; this one counts what was actually invoked on the node: which surface carried the work,
+ *   which tools get called, which apps are alive, and how much of it was REFUSED.
+ *
+ *   REFUSALS ARE THE POINT. Before the usage-telemetry layer, a call the node declined left no
+ *   record anywhere, so demand that was not served was the one thing an operator could never see.
+ *   It gets its own column beside errors on every table here, because a refusal is the system
+ *   working and an error is it failing, and one number covering both is useless for either.
+ *
+ *   IT IS A SEPARATE FILE, NOT MORE OF usage-tab.js. That file is at the size where a fourth
+ *   concern makes it unreadable; the split is a pure extraction with its own heading.
+ * @structure
+ *   - CallsSection({ data }) — three tables over GET /v1/admin/usage/summary reports
+ * @usage  Imported by views/admin/usage-tab.js and rendered under the shared time range.
+ * @version-history
+ *   v1.1.0 — 2026-08-15 — Drop the local per-surface collapsing: the read service no longer groups
+ *     by outcome, so one surface is one row before it gets here.
+ *   v1.0.0 — 2026-08-14 — Initial: the call stream reaches the operator dashboard.
+ */
+import { h } from 'preact';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import { num, StatsGrid, DataTable, Empty } from './shared.js';
+
+function ms(n) {
+  const v = Number(n) || 0;
+  return v >= 1000 ? (v / 1000).toFixed(1) + ' s' : Math.round(v) + ' ms';
+}
+
+/** A percentage that stays honest at small n: 0 calls is a dash, not 0 %. */
+function rate(part, whole) {
+  const w = Number(whole) || 0;
+  if (w === 0) return '—';
+  return Math.round(((Number(part) || 0) / w) * 100) + '%';
+}
+
+/**
+ * @param {object} props
+ * @param {{surface: object|null, tool: object|null, apps: object|null}} props.data
+ *   Three already-fetched report payloads from GET /v1/admin/usage/summary.
+ */
+export function CallsSection({ data }) {
+  const heading = html`<h2 class="adm-section-purple">${t('dashboard.callsSection')}</h2>`;
+  const surface = data?.surface;
+  const tool = data?.tool;
+  const apps = data?.apps;
+
+  const totals = surface?.totals;
+  if (!totals || (totals.calls || 0) === 0) {
+    return html`<div>${heading}<${Empty} text=${t('dashboard.callsEmpty')} /></div>`;
+  }
+
+  const statItems = [
+    { label: t('dashboard.callsTotal'), value: num(totals.calls || 0), tone: 'blue' },
+    { label: t('dashboard.callsRefused'), value: num(totals.refusals || 0), tone: 'purple' },
+    { label: t('dashboard.callsFailed'), value: num(totals.errors || 0), tone: 'red' },
+    { label: t('dashboard.callsSlowest'), value: ms(totals.duration_ms_max), tone: 'cyan' },
+  ];
+
+  // One row per surface already: the read service treats `outcome` as a qualifier rather than a
+  // grouping key, because `refusals` and `errors` are metrics on every row. Before that it split one
+  // surface into an ok row and an error row that both read "mcp".
+  const surfaceRows = (surface.groups || []).map(g => [
+    g.key,
+    { text: num(g.calls || 0), mono: true },
+    { text: num(g.refusals || 0), mono: true },
+    { text: num(g.errors || 0), mono: true },
+    { text: rate((g.errors || 0) + (g.refusals || 0), g.calls), mono: true },
+    { text: ms(g.duration_ms_max), mono: true },
+  ]);
+
+  const toolRows = (tool?.groups || []).slice(0, 50).map(g => [
+    { text: g.key, mono: true },
+    g.dims?.surface || '',
+    { text: num(g.calls || 0), mono: true },
+    { text: num(g.refusals || 0), mono: true },
+    { text: num(g.errors || 0), mono: true },
+    { text: ms(g.duration_ms_avg), mono: true },
+  ]);
+
+  // A row with no app id is not an app open — it is a call that happened to be counted in the same
+  // cut. Showing it here would put a row in an "apps opened" table that names no app.
+  const appRows = (apps?.groups || []).filter(g => !!g.dims?.appId).slice(0, 50).map(g => [
+    { text: g.key, mono: true },
+    { text: num(g.calls || 0), mono: true },
+    { text: num(g.actors_seen_approx || 0), mono: true },
+  ]);
+
+  return html`
+    <div>
+      ${heading}
+      <p class="adm-text-sm">${t('dashboard.callsIntro')}</p>
+      <${StatsGrid} items=${statItems} />
+
+      <h3 class="adm-mt-lg adm-text-sm adm-section-cyan">${t('dashboard.callsBySurface')}</h3>
+      <${DataTable}
+        headers=${[
+          t('dashboard.callsColSurface'), t('dashboard.callsTotal'), t('dashboard.callsRefused'),
+          t('dashboard.callsFailed'), t('dashboard.callsColNotServed'), t('dashboard.callsSlowest'),
+        ]}
+        rows=${surfaceRows} scroll=${true} />
+
+      <h3 class="adm-mt-lg adm-text-sm adm-section-purple">${t('dashboard.callsByTool')}</h3>
+      <${DataTable}
+        headers=${[
+          t('dashboard.callsColTool'), t('dashboard.callsColSurface'), t('dashboard.callsTotal'),
+          t('dashboard.callsRefused'), t('dashboard.callsFailed'), t('dashboard.callsColAvgTime'),
+        ]}
+        rows=${toolRows} scroll=${true} />
+
+      <h3 class="adm-mt-lg adm-text-sm adm-section-cyan">${t('dashboard.callsByApp')}</h3>
+      <${DataTable}
+        headers=${[t('dashboard.callsColApp'), t('dashboard.callsColOpens'), t('dashboard.callsColUsers')]}
+        rows=${appRows} scroll=${true} />
+      <p class="adm-text-sm">${t('dashboard.callsUsersNote')}</p>
+    </div>`;
+}

package/dist/public/views/admin/usage-tab.js

@@ -15,6 +15,9 @@
  * @usage  Registered in views/admin.js NAV_GROUPS (replaces the old ai-usage entry); rendered with
  *   the shared admin tab props.
  * @version-history
+ *   v1.1.0 — 2026-08-14 — Third section: the CALL stream (surfaces, tools, apps, refusals) from
+ *     GET /v1/admin/usage/summary. It counts invocations, never spend, so it is never summed with
+ *     the two above. Body in usage-tab.calls.js.
  *   v1.0.0 — 2026-07-11 — Initial: unified operator usage tab (agent LLM ledger + AI apps spend),
  *     with per-user drill-down on the ledger's top-spenders table.
  */
@@ -27,6 +30,7 @@ import { num, StatsGrid, DataTable, Spinner, Empty } from './shared.js';
 import { UsageChart, colorForIndex } from '/components/UsageChart.js';
 import * as api from '/js/services/admin.js';
 import { swallowed } from '/js/swallowed.js';
+import { CallsSection } from './usage-tab.calls.js';
 
 const usd = (n) => { const v = Number(n) || 0; return '$' + (v < 1 ? v.toFixed(4) : v.toFixed(2)); };
 function fmtCompact(n) {
@@ -58,17 +62,25 @@ export default function UsageTab() {
   const [aiUsage, setAiUsage] = useState(null);
   const [loading, setLoading] = useState(true);
   const [selectedUser, setSelectedUser] = useState(null);
+  const [calls, setCalls] = useState(null);
 
   const load = useCallback(async (p) => {
     setLoading(true);
     try {
       const range = getDateRange(p);
-      const [lr, ar] = await Promise.all([
-        api.getLedger(range.from, range.to).catch(err => { swallowed('usage-tab: UsageTab', err); return null; }),
-        api.getAiUsage(range.from, range.to).catch(err => { swallowed('usage-tab: UsageTab', err); return null; }),
+      const quiet = (err) => { swallowed('usage-tab: UsageTab', err); return null; };
+      // Five reads in parallel rather than in sequence: they are independent, and the tab is only as
+      // fast as its slowest one either way.
+      const [lr, ar, cs, ct, ca] = await Promise.all([
+        api.getLedger(range.from, range.to).catch(quiet),
+        api.getAiUsage(range.from, range.to).catch(quiet),
+        api.getUsageSummary('surface', range.from, range.to).catch(quiet),
+        api.getUsageSummary('tool', range.from, range.to).catch(quiet),
+        api.getUsageSummary('apps-used', range.from, range.to).catch(quiet),
       ]);
       if (lr && lr.data) setLedger(lr.data);
       if (ar && ar.data) setAiUsage(ar.data);
+      setCalls({ surface: cs?.data ?? null, tool: ct?.data ?? null, apps: ca?.data ?? null });
     } catch (err) { swallowed('usage-tab: UsageTab', err); }
     setLoading(false);
   }, []);
@@ -101,7 +113,7 @@ export default function UsageTab() {
       </span>
     </div>`;
 
-  if (!ledger && !aiUsage) {
+  if (!ledger && !aiUsage && !calls) {
     return html`<div>${timeRange}${loading ? html`<${Spinner} />` : html`<${Empty} text=${t('dashboard.aiUsageEmpty') || 'No AI usage yet.'} />`}</div>`;
   }
 
@@ -111,6 +123,8 @@ export default function UsageTab() {
       ${renderLedgerSection(ledger, metric, selectedUser, setSelectedUser)}
       <hr class="adm-mt-lg" />
       ${renderAiAppsSection(aiUsage, metric)}
+      <hr class="adm-mt-lg" />
+      <${CallsSection} data=${calls} />
     </div>`;
 }
 

package/dist/public/views/admin.js

@@ -39,6 +39,7 @@ import UsageTab        from './admin/usage-tab.js';
 import OwnersTab       from './admin/owners-tab.js';
 import AgentsTab       from './admin/agents-tab.js';
 import GhiiTab         from './admin/ghii-tab.js';
+import OrganismOwnershipTab from './admin/organism-ownership-tab.js';
 import ActionsTab      from './admin/actions-tab.js';
 import BoardsTab       from './admin/boards-tab.js';
 import ChatInstancesTab from './admin/chat-instances-tab.js';
@@ -92,6 +93,7 @@ const NAV_GROUPS = [
     { id: 'agents',  key: 'dashboard.agents',  component: AgentsTab,  count: 'agents' },
     { id: 'ghii',    key: 'dashboard.ghii',    component: GhiiTab,    count: 'ghii' },
     { id: 'agent-integration', key: 'admin.tabs.agentIntegration', component: AgentIntegrationAdminTab },
+    { id: 'org-ownership', key: 'admin.tabs.orgOwnership', component: OrganismOwnershipTab },
   ]},
   { key: 'dashboard.navData', items: [
     { id: 'actions',       key: 'dashboard.actions',       component: ActionsTab,        count: 'actions' },