aimeat 3.1.0 → 3.3.0

package/dist/src/utils/http-range.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-range.js","sourceRoot":"","sources":["../../../src/utils/http-range.ts"],"names":[],"mappings":"AAmDA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAWzD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAiC,EAAE,IAAY;IAC5E,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAElC,6FAA6F;IAC7F,uFAAuF;IACvF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEtD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO;YACH,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,oFAAoF;kBACtF,qFAAqF;kBACrF,yCAAyC;SAClD,CAAC;IACN,CAAC;IAED,0FAA0F;IAC1F,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,iBAAiB,IAAI,eAAe,IAAI,sBAAsB,EAAE,CAAC;QAC7G,CAAC;QACD,wFAAwF;QACxF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC;IACjF,CAAC;IAED,sCAAsC;IACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,2BAA2B,IAAI,GAAG,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,wFAAwF;IACxF,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,eAAe,IAAI,sBAAsB,EAAE,CAAC;IAC3G,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAa;IACzC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAa,EAAE,IAAY,EAAE,MAAc;IAC3E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAClD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,8BAA8B,MAAM,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAC9B,GAAa,EACb,IAA4F,EAC5F,KAAqC,EACrC,KAAa;IAEb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkD;IAChF,OAAO,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAWD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,GAAa,EACb,IAAiG,EACjG,WAA+B,EAC/B,IAAsB,EACtB,OAA+B,EAAE;IAEjC,+FAA+F;IAC/F,gGAAgG;IAChG,0EAA0E;IAC1E,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,gGAAgG;IAChG,iGAAiG;IACjG,+FAA+F;IAC/F,6FAA6F;IAC7F,0CAA0C;IAC1C,EAAE;IACF,yFAAyF;IACzF,gGAAgG;IAChG,8FAA8F;IAC9F,iGAAiG;IACjG,8BAA8B;IAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzD,+FAA+F;IAC/F,0FAA0F;IAC1F,kDAAkD;IAClD,EAAE;IACF,gGAAgG;IAChG,iGAAiG;IACjG,iGAAiG;IACjG,+FAA+F;IAC/F,kGAAkG;IAClG,iGAAiG;IACjG,gGAAgG;IAChG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3G,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrC,eAAe,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACrF,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACJ,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3G,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,2FAA2F;QAC3F,mEAAmE;QACnE,MAAM,KAAK,GAAG,KAAK;YACf,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;YAChD,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,kBAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,IAAI,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,oBAAoB,CAAC,GAAG,EAAE,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/src/utils/page-head.d.ts

@@ -19,6 +19,11 @@
  * @usage
  *   html = injectPageHead(html, findPublicPage('/v1/connect'), config, nonceAttr);
  * @version-history
+ *   v1.1.0 — 2026-08-16 — The per-page WebPage JSON-LD is emitted again. Its guard was "the
+ *     document has no ld+json at all", and spa.html always ships SoftwareApplication +
+ *     Organization, so on every SPA route — which is every page in the registry — the per-page
+ *     block was silently skipped. Guard is now the WebPage marker itself. Adds the llmstxt.org
+ *     v2 rel="describedby" link beside the markdown alternate.
  *   v1.0.0 — 2026-07-28 — Initial (agent-readability phases 07 + 08)
  */
 import type { AimeatConfig } from '../config.js';

package/dist/src/utils/page-head.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"page-head.d.ts","sourceRoot":"","sources":["../../../src/utils/page-head.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAc1D;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,YAAY,EACpB,SAAS,SAAK,GACb,MAAM,CAqCR"}
+{"version":3,"file":"page-head.d.ts","sourceRoot":"","sources":["../../../src/utils/page-head.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAc1D;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,YAAY,EACpB,SAAS,SAAK,GACb,MAAM,CAgDR"}

package/dist/src/utils/page-head.js

@@ -30,7 +30,16 @@ export function injectPageHead(html, page, config, nonceAttr = '') {
     if (page.markdown) {
         out = upsert(out, /<link rel="alternate" type="text\/markdown"[^>]*>/i, `<link rel="alternate" type="text/markdown" href="${mirror}">`);
     }
-    if (!/application\/ld\+json/i.test(out)) {
+    // llmstxt.org v2 names rel="describedby" as the link from a page to the llms.txt that covers it,
+    // beside the markdown alternate above. A reader that finds one convention and not the other has
+    // to guess the path.
+    out = upsert(out, /<link rel="describedby"[^>]*>/i, `<link rel="describedby" type="text/plain" href="${b}/llms.txt">`);
+    // The WebPage block describes THIS page and is separate from the site-level SoftwareApplication
+    // and Organization blocks that spa.html ships. This used to be guarded by "does the document
+    // already contain any ld+json", which spa.html always does — so on every SPA route, which is
+    // every page in the registry, the per-page structured data was never emitted. Multiple ld+json
+    // blocks in one document are legal, and are how you say two different things.
+    if (!/"@type"\s*:\s*"WebPage"/.test(out)) {
         const jsonLd = JSON.stringify({
             '@context': 'https://schema.org',
             '@type': 'WebPage',

package/dist/src/utils/page-head.js.map

@@ -1 +1 @@
-{"version":3,"file":"page-head.js","sourceRoot":"","sources":["../../../src/utils/page-head.ts"],"names":[],"mappings":"AA0BA,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC;AAChG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,IAAgB,EAChB,MAAoB,EACpB,SAAS,GAAG,EAAE;IAEd,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC;IAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEnC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,2BAA2B,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC;IAC1E,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,kDAAkD,EAClE,qCAAqC,IAAI,IAAI,CAAC,CAAC;IACjD,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,mDAAmD,EACnE,sCAAsC,KAAK,IAAI,CAAC,CAAC;IACnD,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,yDAAyD,EACzE,4CAA4C,IAAI,IAAI,CAAC,CAAC;IACxD,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,iDAAiD,EACjE,oCAAoC,GAAG,IAAI,CAAC,CAAC;IAC/C,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,8BAA8B,EAAE,+BAA+B,GAAG,IAAI,CAAC,CAAC;IAC1F,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,oDAAoD,EACpE,oDAAoD,MAAM,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,UAAU,EAAE,oBAAoB;YAChC,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,IAAI,CAAC,KAAK;YACpB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG;YACH,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACpD,QAAQ,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;SAC/D,CAAC,CAAC;QACH,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,qCAAqC,SAAS,IAAI,MAAM,oBAAoB,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"page-head.js","sourceRoot":"","sources":["../../../src/utils/page-head.ts"],"names":[],"mappings":"AA+BA,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC;AAChG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,IAAgB,EAChB,MAAoB,EACpB,SAAS,GAAG,EAAE;IAEd,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC;IAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEnC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,2BAA2B,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC;IAC1E,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,kDAAkD,EAClE,qCAAqC,IAAI,IAAI,CAAC,CAAC;IACjD,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,mDAAmD,EACnE,sCAAsC,KAAK,IAAI,CAAC,CAAC;IACnD,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,yDAAyD,EACzE,4CAA4C,IAAI,IAAI,CAAC,CAAC;IACxD,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,iDAAiD,EACjE,oCAAoC,GAAG,IAAI,CAAC,CAAC;IAC/C,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,8BAA8B,EAAE,+BAA+B,GAAG,IAAI,CAAC,CAAC;IAC1F,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,oDAAoD,EACpE,oDAAoD,MAAM,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,iGAAiG;IACjG,gGAAgG;IAChG,qBAAqB;IACrB,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,gCAAgC,EAChD,mDAAmD,CAAC,aAAa,CAAC,CAAC;IAErE,gGAAgG;IAChG,6FAA6F;IAC7F,6FAA6F;IAC7F,+FAA+F;IAC/F,8EAA8E;IAC9E,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,UAAU,EAAE,oBAAoB;YAChC,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,IAAI,CAAC,KAAK;YACpB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG;YACH,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACpD,QAAQ,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;SAC/D,CAAC,CAAC;QACH,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,qCAAqC,SAAS,IAAI,MAAM,oBAAoB,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/utils/reserved-keys.d.ts

@@ -16,6 +16,9 @@
  *   appMayWriteKey(roles, key, delegatedOwnerWrite?, reservedAllowed?)
  * @usage import { appMayWriteKey } from '../utils/reserved-keys.js';
  * @version-history
+ *   v1.4.0 — 2026-08-16 — `chat.` joins the list. A conversation is what the person said and what
+ *     the agent did on their behalf, and an app-grant token that could append to one could put
+ *     words in either mouth — including instructions the next turn would read as the person's own.
  *   v1.3.0 — 2026-08-11 — `finance.` and `commerce.` join the list (August 2026 audit H-6, H-23).
  *     Both became server-trusted after the list was written and neither was added.
  *     `finance.accountants` is the CROSS-OWNER authorization list for the whole finance area:
@@ -57,7 +60,7 @@
  * write that never passes through this gate, which is what the openrouter, finance and commerce
  * keys all use.
  */
-export declare const RESERVED_OWNER_KEY_PREFIXES: readonly ["openrouter.", "ai-usage.", "profile.", "finance.", "commerce."];
+export declare const RESERVED_OWNER_KEY_PREFIXES: readonly ["openrouter.", "ai-usage.", "profile.", "finance.", "commerce.", "chat."];
 /** True iff `key` falls under a reserved, server-trusted owner-namespace prefix. */
 export declare function isReservedServerKey(key: string): boolean;
 /**

package/dist/src/utils/reserved-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reserved-keys.d.ts","sourceRoot":"","sources":["../../../src/utils/reserved-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,2BAA2B,4EAE9B,CAAC;AAEX,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,mBAAmB,UAAQ,EAAE,eAAe,UAAQ,GACjF,OAAO,CAQT"}
+{"version":3,"file":"reserved-keys.d.ts","sourceRoot":"","sources":["../../../src/utils/reserved-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,2BAA2B,qFAE9B,CAAC;AAEX,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,mBAAmB,UAAQ,EAAE,eAAe,UAAQ,GACjF,OAAO,CAQT"}

package/dist/src/utils/reserved-keys.js

@@ -16,6 +16,9 @@
  *   appMayWriteKey(roles, key, delegatedOwnerWrite?, reservedAllowed?)
  * @usage import { appMayWriteKey } from '../utils/reserved-keys.js';
  * @version-history
+ *   v1.4.0 — 2026-08-16 — `chat.` joins the list. A conversation is what the person said and what
+ *     the agent did on their behalf, and an app-grant token that could append to one could put
+ *     words in either mouth — including instructions the next turn would read as the person's own.
  *   v1.3.0 — 2026-08-11 — `finance.` and `commerce.` join the list (August 2026 audit H-6, H-23).
  *     Both became server-trusted after the list was written and neither was added.
  *     `finance.accountants` is the CROSS-OWNER authorization list for the whole finance area:
@@ -58,7 +61,7 @@
  * keys all use.
  */
 export const RESERVED_OWNER_KEY_PREFIXES = [
-    'openrouter.', 'ai-usage.', 'profile.', 'finance.', 'commerce.',
+    'openrouter.', 'ai-usage.', 'profile.', 'finance.', 'commerce.', 'chat.',
 ];
 /** True iff `key` falls under a reserved, server-trusted owner-namespace prefix. */
 export function isReservedServerKey(key) {

package/dist/src/utils/reserved-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"reserved-keys.js","sourceRoot":"","sources":["../../../src/utils/reserved-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW;CACvD,CAAC;AAEX,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAe,EAAE,GAAW,EAAE,mBAAmB,GAAG,KAAK,EAAE,eAAe,GAAG,KAAK;IAElF,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3G,IAAI,cAAc;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAChE,+FAA+F;IAC/F,kFAAkF;IAClF,IAAI,eAAe;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"reserved-keys.js","sourceRoot":"","sources":["../../../src/utils/reserved-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO;CAChE,CAAC;AAEX,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAe,EAAE,GAAW,EAAE,mBAAmB,GAAG,KAAK,EAAE,eAAe,GAAG,KAAK;IAElF,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3G,IAAI,cAAc;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAChE,+FAA+F;IAC/F,kFAAkF;IAClF,IAAI,eAAe;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC"}

package/dist/src/utils/scope-coverage.d.ts

@@ -28,6 +28,10 @@
  *   const added = uncoveredScopes(agent.defaultScopes ?? [], proposed.scopes);
  *   if (added.length > 0) return err(`…${added.join(', ')}`);
  * @version-history
+ *   v1.2.0 — 2026-08-15 — OPERATOR_ORGANISM_REPAIR_SCOPE, the operator's break-glass over an
+ *     organism's ownership. Outside the wildcard from the day it exists: the incident it answers was
+ *     an unscoped agent handing away an organism, so a repair word that "Full access" carries would
+ *     rebuild the same hole with a wider blast radius.
  *   v1.1.0 — 2026-08-11 — ACCOUNT_SECURITY_SCOPE. Out of the wildcard from the day it exists,
  *     because the narrow-only check on the agent-configure surface asks THIS file whether a scope
  *     is already covered: a '*' agent would have been told yes and could have written the word
@@ -54,6 +58,23 @@ export declare const WRITE_RESERVED_SCOPE = "memory:write-reserved";
  * (services/scope-vocabulary-migration.ts), so an agent holding it was ticked by hand.
  */
 export declare const ACCOUNT_SECURITY_SCOPE = "account:security";
+/**
+ * The node operator's break-glass over an organism nobody else can reach: install an owner on an
+ * organism the caller does not own. It exists because ownership had no repair path at all — an admin
+ * cannot remove, demote or replace a creator, and the operator running the node could not either, so
+ * a handover to an account that later went unreachable was permanent.
+ *
+ * Enforced by requireOperatorPrincipal() in auth/middleware.ts, which admits an operator session
+ * outright and any other principal only when its OWNER holds the operator role AND the token carries
+ * this exact word. Out of every wildcard, and for the sharpest reason on this list: the incident that
+ * produced this scope was an unscoped agent calling POST /v1/organisms/:id/transfer in a test run and
+ * handing away the node's own development organism. A break-glass that "Full access" carries by
+ * default is the same hole one level up.
+ *
+ * Nobody is grandfathered onto it (services/scope-vocabulary-migration.ts has no entry): this names
+ * a capability that did not exist before, so no agent can lose one it had.
+ */
+export declare const OPERATOR_ORGANISM_REPAIR_SCOPE = "operator:organism-repair";
 export declare const SCOPES_OUTSIDE_WILDCARD: readonly string[];
 /** True when `scope` is one of the scopes only an exact grant can confer. */
 export declare function isOutsideWildcard(scope: string): boolean;

package/dist/src/utils/scope-coverage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-coverage.d.ts","sourceRoot":"","sources":["../../../src/utils/scope-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAiCzD,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EACiB,CAAC;AAEvE,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAM9E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAE5F"}
+{"version":3,"file":"scope-coverage.d.ts","sourceRoot":"","sources":["../../../src/utils/scope-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAEzD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,8BAA8B,6BAA6B,CAAC;AAiCzE,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EACiD,CAAC;AAEvG,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAM9E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAE5F"}

package/dist/src/utils/scope-coverage.js

@@ -28,6 +28,10 @@
  *   const added = uncoveredScopes(agent.defaultScopes ?? [], proposed.scopes);
  *   if (added.length > 0) return err(`…${added.join(', ')}`);
  * @version-history
+ *   v1.2.0 — 2026-08-15 — OPERATOR_ORGANISM_REPAIR_SCOPE, the operator's break-glass over an
+ *     organism's ownership. Outside the wildcard from the day it exists: the incident it answers was
+ *     an unscoped agent handing away an organism, so a repair word that "Full access" carries would
+ *     rebuild the same hole with a wider blast radius.
  *   v1.1.0 — 2026-08-11 — ACCOUNT_SECURITY_SCOPE. Out of the wildcard from the day it exists,
  *     because the narrow-only check on the agent-configure surface asks THIS file whether a scope
  *     is already covered: a '*' agent would have been told yes and could have written the word
@@ -54,6 +58,23 @@ export const WRITE_RESERVED_SCOPE = 'memory:write-reserved';
  * (services/scope-vocabulary-migration.ts), so an agent holding it was ticked by hand.
  */
 export const ACCOUNT_SECURITY_SCOPE = 'account:security';
+/**
+ * The node operator's break-glass over an organism nobody else can reach: install an owner on an
+ * organism the caller does not own. It exists because ownership had no repair path at all — an admin
+ * cannot remove, demote or replace a creator, and the operator running the node could not either, so
+ * a handover to an account that later went unreachable was permanent.
+ *
+ * Enforced by requireOperatorPrincipal() in auth/middleware.ts, which admits an operator session
+ * outright and any other principal only when its OWNER holds the operator role AND the token carries
+ * this exact word. Out of every wildcard, and for the sharpest reason on this list: the incident that
+ * produced this scope was an unscoped agent calling POST /v1/organisms/:id/transfer in a test run and
+ * handing away the node's own development organism. A break-glass that "Full access" carries by
+ * default is the same hole one level up.
+ *
+ * Nobody is grandfathered onto it (services/scope-vocabulary-migration.ts has no entry): this names
+ * a capability that did not exist before, so no agent can lose one it had.
+ */
+export const OPERATOR_ORGANISM_REPAIR_SCOPE = 'operator:organism-repair';
 /**
  * Scopes no wildcard carries — neither `*` nor `{domain}:*`. Only the exact string counts, anywhere
  * a scope is checked, proposed, or approved.
@@ -84,7 +105,7 @@ const OWN_TICK_SCOPES = [
     'share:manage', // hand another account a standing right to read part of the owner's memory
     'social:members', // change who may read a shared board
 ];
-export const SCOPES_OUTSIDE_WILDCARD = [WRITE_RESERVED_SCOPE, ACCOUNT_SECURITY_SCOPE, ...OWN_TICK_SCOPES];
+export const SCOPES_OUTSIDE_WILDCARD = [WRITE_RESERVED_SCOPE, ACCOUNT_SECURITY_SCOPE, OPERATOR_ORGANISM_REPAIR_SCOPE, ...OWN_TICK_SCOPES];
 /** True when `scope` is one of the scopes only an exact grant can confer. */
 export function isOutsideWildcard(scope) {
     return SCOPES_OUTSIDE_WILDCARD.includes(scope);

package/dist/src/utils/scope-coverage.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-coverage.js","sourceRoot":"","sources":["../../../src/utils/scope-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAEzD;;;;;;;GAOG;AACH;;;;;;;;;;;;;GAaG;AACH,MAAM,eAAe,GAAG;IACpB,cAAc,EAAa,oDAAoD;IAC/E,6BAA6B,EAAE,oDAAoD;IACnF,mBAAmB,EAAQ,yCAAyC;IACpE,gBAAgB,EAAW,qDAAqD;IAChF,cAAc,EAAa,2EAA2E;IACtG,gBAAgB,EAAW,qCAAqC;CAC1D,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAChC,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,GAAG,eAAe,CAAC,CAAC;AAEvE,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC3C,OAAO,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAuB,EAAE,KAAa;IACjE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAuB,EAAE,MAAyB;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC"}
+{"version":3,"file":"scope-coverage.js","sourceRoot":"","sources":["../../../src/utils/scope-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAEzD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AAEzE;;;;;;;GAOG;AACH;;;;;;;;;;;;;GAaG;AACH,MAAM,eAAe,GAAG;IACpB,cAAc,EAAa,oDAAoD;IAC/E,6BAA6B,EAAE,oDAAoD;IACnF,mBAAmB,EAAQ,yCAAyC;IACpE,gBAAgB,EAAW,qDAAqD;IAChF,cAAc,EAAa,2EAA2E;IACtG,gBAAgB,EAAW,qCAAqC;CAC1D,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAChC,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,GAAG,eAAe,CAAC,CAAC;AAEvG,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC3C,OAAO,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAuB,EAAE,KAAa;IACjE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAuB,EAAE,MAAyB;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/static/sdk-libs/datapackage/index.js

@@ -0,0 +1,336 @@
+/**
+ * @file datapackage/index.js
+ * @description The aimeat-datapackage library — AIMEAT.datapackage. Build, check, publish and read
+ *   a Frictionless Data Package with AIMEAT provenance, without an app parsing CSV, inferring a
+ *   type, computing a hash or assembling a provenance block itself.
+ *
+ *   IT IS A CLIENT, NOT A SECOND IMPLEMENTATION, and that is the whole design. A package's identity
+ *   is a content hash: two pieces of code that compute it differently produce two identities for the
+ *   same bytes, and every consumer pinned to a hash breaks silently. This node has already paid for
+ *   that shape once, which is why `ctx.hash` is published as source (EXT_HASH_REFERENCE_JS) rather
+ *   than described. So the inference, the quality gate, the canonical CSV and the hash all happen on
+ *   the server, in services/datapackage/, and this library carries the rows there and brings the
+ *   answer back. An app, an extension and an agent therefore cannot disagree about what a package is.
+ *
+ *   WHAT AN APP STILL GETS LOCALLY: the shape of the work. `create()` gives a small builder so a
+ *   page can accumulate resources and provenance as the user fills a form, `validate()` shows the
+ *   row and the column before anything is stored, and `publish()` is one call at the end.
+ *
+ *   THE ADDRESS IS NOT THIS LIBRARY. Every answer carries `descriptorUrl` — a permanent, auth-free,
+ *   range-readable /v1/pub URL. That is what you give to DuckDB, pandas, frictionless-py, Excel or a
+ *   person. Reading a package back through here is a convenience for a UI, not the road.
+ * @structure makeSession/authFetch · DataPackageBuilder (create) · publish/validate/inferSchema ·
+ *   list/open/rows/exportAs · attach('datapackage', …)
+ * @usage
+ *   <script src="/v1/libs/aimeat-auth.js"></script>
+ *   <script src="/v1/libs/aimeat-datapackage.js"></script>
+ *   const pkg = AIMEAT.datapackage.create({ name: 'laake-weekly' });
+ *   pkg.addResource('rows', rows);                    // schema inferred unless you declare one
+ *   const check = await pkg.validate();               // { ok, issues:[{row, field, message}], schemas }
+ *   pkg.changes('Added the sentiment column');
+ *   const out = await pkg.publish();                  // { packageId, contentHash, descriptorUrl }
+ * @version-history
+ *   v1.0.0 — 2026-08-15 — Initial (TARGET-063 vaihe 1, B1).
+ *   v1.1.0 — 2026-08-15 — Three session.fetch contract errors fixed against a real browser (see call()),
+ *                         and parseTable() added so an app does not rebuild paste handling.
+ *   v1.2.0 — 2026-08-16 — versions(): a package's history, each entry with the explanation it was
+ *                         published with, so an app can show a chain rather than a hash.
+ */
+import { makeSession } from '../_core/session.js';
+const { authFetch } = makeSession('aimeat-datapackage.js');
+import { attach } from '../_core/namespace.js';
+
+/**
+ * Unwrap the node envelope and turn a refusal into a thrown Error carrying `.code` and `.issues`.
+ *
+ * THREE THINGS ABOUT `session.fetch` THAT THIS FUNCTION GOT WRONG ON THE FIRST PASS, all of them
+ * invisible to a server-side test and all three caught the moment a real browser loaded the page:
+ *   - it returns the PARSED envelope, not a `Response`. Calling `.json()` on it throws, and a
+ *     swallowed throw here made every call answer `null`.
+ *   - it does NOT throw on an error status — it hands back the envelope so a caller can look. So
+ *     the refusal has to be read here, from `ok`/`error`, or a 422 reads as success.
+ *   - it sets `Content-Type: application/json` itself. Passing our own duplicates the header and
+ *     the body arrives empty at the route.
+ */
+async function call(path, opts) {
+  const body = await authFetch(path, opts);
+  if (!body || body.ok === false || body.error) {
+    const err = (body && body.error) || { code: 'REQUEST_FAILED', message: 'The request did not answer.' };
+    /** @type {Error & { code?: string, issues?: any[] }} */
+    const e = new Error(err.message || 'Request failed');
+    e.code = err.code;
+    // The quality gate's coordinates, so a page can point at the cell rather than say "invalid".
+    e.issues = (err.details && err.details.issues) || [];
+    throw e;
+  }
+  return body.data !== undefined ? body.data : body;
+}
+
+/**
+ * A package under construction. Holds nothing but what you put in it — no rows are sent anywhere
+ * until you call validate() or publish().
+ */
+class DataPackageBuilder {
+  constructor(meta) {
+    this._meta = meta || {};
+    this._resources = [];
+    this._changes = '';
+    this._provenance = {};
+  }
+
+  /**
+   * Add one tabular resource.
+   *
+   * `opts.schema` omitted means INFER, and inference is a PROPOSAL: the published descriptor records
+   * `schemaSource: 'inferred'`, so a consumer can see that nobody confirmed the types. Call
+   * inferSchema() first, show the result to the person publishing, and pass the corrected schema
+   * here to publish as `declared`.
+   */
+  addResource(name, rows, opts) {
+    const o = opts || {};
+    this._resources.push({
+      name,
+      rows: rows || [],
+      ...(o.schema ? { schema: o.schema } : {}),
+      ...(o.title ? { title: o.title } : {}),
+      ...(o.description ? { description: o.description } : {}),
+    });
+    return this;
+  }
+
+  /** REQUIRED before publish: what moved against the previous version and why. */
+  changes(text) { this._changes = String(text || ''); return this; }
+
+  /** Origin, legal basis and licence. The owner is responsible for what they publish; this is where
+   *  they say where it came from and on what terms. */
+  provenance(block) { this._provenance = Object.assign({}, this._provenance, block || {}); return this; }
+
+  /** How many old versions to keep, by count or by months. */
+  retention(policy) { this._retentionPolicy = policy; return this; }
+
+  /** What the producer was asked for — the window, the keywords. Travels in the descriptor. */
+  parameters(params) { this._parameters = params; return this; }
+
+  /** Run the quality gate WITHOUT publishing. Answers `{ ok, issues, schemas }`; `issues` name the
+   *  resource, the row and the field, which is what lets a page highlight the cell. */
+  validate() {
+    return call('/v1/datapackages/validate', {
+      method: 'POST',
+      body: JSON.stringify({ resources: this._resources }),
+    });
+  }
+
+  /**
+   * Publish one version. THROWS when the gate refuses, with `.code === 'QUALITY_GATE'` and `.issues`
+   * carrying the coordinates — nothing was written, and the package stands on its previous version.
+   *
+   * `unchanged: true` in the answer means these exact bytes were already published: the address
+   * already holds them, and no new version was created. Say "no change" rather than "updated".
+   */
+  publish() {
+    return call('/v1/datapackages', {
+      method: 'POST',
+      body: JSON.stringify(Object.assign({}, this._meta, {
+        changes: this._changes,
+        resources: this._resources,
+        provenance: this._provenance,
+        ...(this._parameters ? { parameters: this._parameters } : {}),
+        ...(this._retentionPolicy ? { retentionPolicy: this._retentionPolicy } : {}),
+      })),
+    });
+  }
+}
+
+/** Drop a leading byte-order mark. A spreadsheet export usually carries one, and left in place it
+ *  becomes part of the FIRST COLUMN'S NAME — so the header a person sees and the key the rows carry
+ *  quietly stop matching. Written as a code point: a raw BOM in source is invisible. */
+const stripBom = (s) => (s.charCodeAt(0) === 0xFEFF ? s.slice(1) : s);
+
+/**
+ * Turn a pasted table into rows: CSV, TSV, semicolon-separated, or a JSON array of objects.
+ *
+ * THIS IS INPUT HANDLING, NOT THE CANONICAL READER, and the distinction is the whole reason it can
+ * live in the browser. It is deliberately lenient — it sniffs the delimiter, tolerates a BOM, CRLF
+ * and a ragged last line — because it is reading whatever a person pasted out of a spreadsheet. The
+ * canonical CSV reader is on the server and is deliberately exact, because it reads bytes this node
+ * itself wrote and hashed. Two parsers with two jobs; only one of them decides what a package IS.
+ *
+ * It lives here rather than in each app because otherwise every app rebuilds it, which is the exact
+ * duplication this library exists to prevent.
+ */
+function parseTable(text) {
+  const raw = stripBom(String(text || '')).trim();
+  if (!raw) return [];
+  if (raw[0] === '[' || raw[0] === '{') {
+    const parsed = JSON.parse(raw);
+    const rows = Array.isArray(parsed) ? parsed : [parsed];
+    if (!rows.every(r => r && typeof r === 'object' && !Array.isArray(r))) {
+      throw new Error('A JSON table must be an array of objects, one per row.');
+    }
+    return rows;
+  }
+  // Sniff the delimiter from the HEADER line only: a comma inside a quoted value further down
+  // must not outvote the separator the file actually uses.
+  const head = raw.split(/\r?\n/)[0];
+  /** @type {Array<{ ch: string, n: number }>} */
+  const counts = [{ ch: ',', n: 0 }, { ch: ';', n: 0 }, { ch: '\t', n: 0 }];
+  let q = false;
+  for (const ch of head) {
+    if (ch === '"') q = !q;
+    else if (!q) for (const c of counts) if (ch === c.ch) c.n++;
+  }
+  counts.sort((a, b) => b.n - a.n);
+  const delim = counts[0].n > 0 ? counts[0].ch : ',';
+
+  const records = [];
+  let field = '';
+  let record = [];
+  let inQuotes = false;
+  for (let i = 0; i < raw.length; i++) {
+    const ch = raw[i];
+    if (inQuotes) {
+      if (ch === '"') { if (raw[i + 1] === '"') { field += '"'; i++; } else inQuotes = false; }
+      else field += ch;
+      continue;
+    }
+    if (ch === '"') { inQuotes = true; continue; }
+    if (ch === delim) { record.push(field); field = ''; continue; }
+    if (ch === '\n' || ch === '\r') {
+      if (ch === '\r' && raw[i + 1] === '\n') i++;
+      record.push(field); field = ''; records.push(record); record = [];
+      continue;
+    }
+    field += ch;
+  }
+  if (field !== '' || record.length) { record.push(field); records.push(record); }
+  if (!records.length) return [];
+
+  const header = records[0].map((h, i) => (h.trim() || `column_${i + 1}`));
+  return records.slice(1)
+    .filter(r => r.length > 1 || (r[0] ?? '') !== '')
+    .map(r => {
+      const row = {};
+      // Values stay STRINGS here. Typing them is the server's job — a browser that eagerly turned
+      // "001000" into a number would destroy exactly the identifier the type inference protects.
+      for (let c = 0; c < header.length; c++) row[header[c]] = (r[c] ?? '') === '' ? null : r[c];
+      return row;
+    });
+}
+
+const datapackage = {
+  /** Start a package. `meta` is `{ name, title?, description? }`; the name is an address segment. */
+  create(meta) { return new DataPackageBuilder(meta); },
+
+  /** CSV / TSV / semicolon / JSON text → rows. See parseTable above for why it is lenient. */
+  parseTable(text) { return parseTable(text); },
+
+  /** The type proposal for a set of rows, without publishing anything. Show it to the publisher. */
+  inferSchema(rows) {
+    return call('/v1/datapackages/validate', {
+      method: 'POST',
+      body: JSON.stringify({ resources: [{ name: 'preview', rows: rows || [] }] }),
+    }).then(d => d.schemas.preview);
+  },
+
+  /** One-shot publish for a caller that has everything already. Same refusal behaviour as the builder. */
+  publish(input) {
+    return call('/v1/datapackages', {
+      method: 'POST', body: JSON.stringify(input || {}),
+    });
+  },
+
+  /** The caller's own packages, newest version each, with `lastError` when the last run failed. */
+  list() { return call('/v1/datapackages', { method: 'GET' }); },
+
+  /**
+   * Every version of one package, newest first: `{ contentHash, at, current, changes, rowCount,
+   * bytes, descriptorUrl, supersedes }`.
+   *
+   * `changes` is why this is worth showing rather than a list of hashes — it is the sentence the
+   * producer had to write to publish at all. Pin any of them by passing
+   * `pkg:owner/name@<contentHash>` to open() or rows().
+   */
+  versions(ref) {
+    const p = parseRef(ref);
+    if (!p) return Promise.reject(new Error('versions() needs a reference like "pkg:owner/name"'));
+    return call('/v1/datapackages/' + encodeURIComponent(p.owner) + '/' + encodeURIComponent(p.name) + '/versions',
+      { method: 'GET' });
+  },
+
+  /** A descriptor. `ref` is `pkg:owner/name`, optionally `@sha256:…` to pin a version. */
+  open(ref) {
+    const p = parseRef(ref);
+    if (!p) return Promise.reject(new Error('open() needs a reference like "pkg:owner/name" or "pkg:owner/name@sha256:…"'));
+    const q = p.version ? ('?version=' + encodeURIComponent(p.version)) : '';
+    return call('/v1/datapackages/' + encodeURIComponent(p.owner) + '/' + encodeURIComponent(p.name) + q, { method: 'GET' });
+  },
+
+  /** A window of rows, for a preview table. For the whole thing use the CSV address — it is
+   *  permanent, needs no session and answers byte ranges. */
+  rows(ref, resource, opts) {
+    const p = parseRef(ref);
+    if (!p) return Promise.reject(new Error('rows() needs a reference like "pkg:owner/name"'));
+    const o = opts || {};
+    const qs = [];
+    if (p.version) qs.push('version=' + encodeURIComponent(p.version));
+    if (o.offset != null) qs.push('offset=' + encodeURIComponent(o.offset));
+    if (o.limit != null) qs.push('limit=' + encodeURIComponent(o.limit));
+    if (o.select && o.select.length) qs.push('select=' + encodeURIComponent(o.select.join(',')));
+    const q = qs.length ? ('?' + qs.join('&')) : '';
+    return call('/v1/datapackages/' + encodeURIComponent(p.owner) + '/' + encodeURIComponent(p.name)
+      + '/rows/' + encodeURIComponent(resource) + q, { method: 'GET' });
+  },
+
+  /**
+   * The permanent, session-free address of one resource's CSV — what you hand to DuckDB, pandas,
+   * Google Sheets IMPORTDATA or a person with a download button.
+   *
+   * Derived from the descriptor rather than assembled from parts, because the descriptor's
+   * `resources[].path` is the authority on where a resource lives and a hand-built URL would be a
+   * second opinion about it.
+   */
+  urlFor(descriptorResponse, resource) {
+    const d = descriptorResponse && (descriptorResponse.descriptor || descriptorResponse);
+    if (!d || !d.resources) return null;
+    const r = d.resources.find(x => x.name === resource);
+    const base = descriptorResponse && descriptorResponse.descriptor_url;
+    if (!r || !base) return null;
+    return base.replace(/datapackage\.json$/, '') + r.path.split('/').map(encodeURIComponent).join('/');
+  },
+
+  /**
+   * Turn a resource into a file the person can keep. CSV is handed over as its permanent URL — no
+   * download, no copy, the address IS the file. JSON is derived in the browser from a row read.
+   *
+   * There is no XLSX here yet, and it is left out rather than half-done: a spreadsheet writer is a
+   * vendored dependency this node does not carry, and emitting a CSV named .xlsx would be exactly
+   * the covering fallback this whole format exists to avoid.
+   */
+  async exportAs(ref, resource, format) {
+    const fmt = String(format || 'csv').toLowerCase();
+    const opened = await this.open(ref);
+    if (fmt === 'csv') return { url: this.urlFor(opened, resource), format: 'csv' };
+    if (fmt === 'json') {
+      const all = [];
+      let offset = 0;
+      for (;;) {
+        const page = await this.rows(ref, resource, { offset, limit: 5000 });
+        all.push.apply(all, page.rows);
+        offset += page.rows.length;
+        if (offset >= page.total || page.rows.length === 0) break;
+      }
+      const blob = new Blob([JSON.stringify(all, null, 2)], { type: 'application/json' });
+      return { url: URL.createObjectURL(blob), format: 'json', rows: all.length };
+    }
+    throw new Error('exportAs supports "csv" (the permanent URL) and "json". '
+      + 'XLSX needs a spreadsheet writer this node does not vendor yet, and a CSV named .xlsx would be a lie.');
+  },
+};
+
+/** `pkg:owner/name` or `pkg:owner/name@sha256:…`. */
+function parseRef(ref) {
+  const m = /^pkg:([^/@]+)\/([^@]+)(?:@(sha256:[a-f0-9]{64}))?$/.exec(String(ref || '').trim());
+  return m ? { owner: m[1], name: m[2], version: m[3] || null } : null;
+}
+
+attach('datapackage', datapackage);