aimeat 3.2.0 → 3.3.0

package/dist/.env.example

@@ -296,6 +296,62 @@ AIMEAT_PORT=40050
 # AIMEAT_STORAGE_QUOTA_MB=100
 # AIMEAT_STORAGE_MAX_FILE_SIZE_MB=10
 # AIMEAT_STORAGE_MAX_CHUNKED_FILE_SIZE_GB=5
+# How many on-demand app screenshots one owner may ask for per hour (POST .../screenshot/capture,
+# and the aimeat_app_screenshot tool). Rendering is the most expensive thing this node does per
+# request, so this is a throttle rather than a preference.
+# AIMEAT_SCREENSHOT_ONDEMAND_PER_HOUR=20
+# ── The chat agent (a `goose acp` child process, ACP over stdio) ──
+# Empty (the default) disables the chat entirely, which is what every node does until an operator
+# installs goose. The node spawns it, speaks ACP over its stdin/stdout, and stops it on shutdown.
+#
+# Stdio rather than `goose serve` over HTTP, and that was measured rather than preferred: the HTTP
+# transport accepts requests and answers them, but never delivers a session/update notification, so
+# every turn is silent. The same prompt over stdio answers in seconds. Stdio also needs no port, no
+# shared secret and no loopback surface to protect.
+# How many chat conversations stay open before the oldest rolls into a per-month archive record.
+# A memory namespace holds 1000 keys, and one key per conversation forever would spend them.
+# AIMEAT_CHAT_MAX_LIVE_THREADS=50
+# AIMEAT_GOOSE_BIN=goose
+# Its own config and session store, away from any human's goose profile on the same machine.
+# AIMEAT_GOOSE_PATH_ROOT=
+# The provider key the agent calls with. Who may spend it is decided before a turn starts.
+# AIMEAT_GOOSE_PROVIDER_API_KEY=
+# ── This node's own AI key, and what one person may spend of it ──
+# Empty (the default) means the node pays for nothing and everyone brings their own key, which is
+# how every node behaved before this existed. Set it and a person who has not brought a key can
+# still do something on the day they arrive.
+#
+# The key is SHARED by everyone here, so the node meters each person itself rather than handing out
+# provider access: that is the shape OpenRouter's terms allow. Someone who wants unmetered use
+# brings their own key, which bypasses the allowance entirely and is the recommended path.
+# AIMEAT_OPENROUTER_INSTANCE_KEY=
+# Free starting allowance in USD, applied once per person. 0 grants nothing.
+# AIMEAT_CHAT_FREE_ALLOWANCE_USD=0
+# Model used when someone on the node's key has spent their allowance. Empty refuses instead of
+# degrading. A free model is a worse answer, not a wrong one, as long as the person is told — and
+# they are: the response says it was degraded.
+# AIMEAT_MODEL_FREE_FALLBACK=openrouter/free
+# ── Instance model defaults, one per role ──
+# Read only when the OWNER has not chosen a model of their own: owner setting, then this, then a
+# refusal that names what to set. Empty (the default) means the node states no preference and every
+# role resolves exactly as it did before these existed.
+#
+# These belong with an instance API key rather than beside it. A key alone does not let a new person
+# speak, read an image or make one, because every model role is an owner-level setting and an unset
+# one is an error rather than a fallback. Speech is the sharpest case: without AIMEAT_MODEL_DEFAULT_STT
+# a brand-new account cannot use the microphone at all until it finds a settings page it has no
+# reason to know about.
+# AIMEAT_MODEL_DEFAULT_CHAT=
+# AIMEAT_MODEL_DEFAULT_REASONING=
+# AIMEAT_MODEL_DEFAULT_EXECUTION=
+# AIMEAT_MODEL_DEFAULT_VISION=
+# AIMEAT_MODEL_DEFAULT_STT=
+# AIMEAT_MODEL_DEFAULT_IMAGE=
+# The image model is used by POST /v1/ai/image and aimeat_image_generate. Without one, on the
+# owner or here, that route refuses by name rather than handing the request to a chat model.
+# ISO-639-1 hint for speech-to-text. Empty lets the model detect it, which is what mixed-language
+# speech wants, so set this only where the node knows its audio is one language.
+# AIMEAT_STT_LANGUAGE_DEFAULT=
 # ── Speech-to-text (POST /v1/ai/transcribe, voice messages) ──
 # Largest audio file accepted for transcription. 25 MB is the provider-side multipart ceiling, so
 # raising this past it turns a clear local refusal into an opaque upstream one.
@@ -484,7 +540,8 @@ AIMEAT_PORT=40050
 
 # ── Crawlers / Content Signals / Web Bot Auth ──────────────────
 # AIMEAT_WEB_BOT_AUTH_SIGN=false           # Sign outbound HTTP (RFC 9421 Web Bot Auth, node Ed25519 key) so peers/CDNs can verify AIMEAT traffic against /.well-known/http-message-signatures-directory. OFF by default: stamps identifying Signature headers on every outbound request (linkability; rare strict endpoints may reject unknown headers). The key directory is always served.
-# AIMEAT_CONTENT_SIGNAL="search=yes, ai-input=yes, ai-train=no"   # robots.txt Content Signals Policy directive (contentsignals.org). Keep consistent with the per-bot rules in public/robots.txt; 'off' removes the directive.
+# AIMEAT_AI_TRAINING=deny                  # Allow the AI TRAINING crawlers (GPTBot, ClaudeBot, Google-Extended, Applebot-Extended, meta-externalagent) in robots.txt: 'allow' | 'deny'. Denied by default because a personal node holds one person's data, and a safe public default has to assume that case. Denying keeps the node out of what the models know without being pointed at it, and is a stated preference rather than an enforceable control. The SEARCH and RETRIEVAL bots (OAI-SearchBot, Claude-SearchBot, Claude-User, PerplexityBot, Googlebot, Bingbot, Applebot ...) are always allowed and are NOT affected by this: blocking those would make the node unfindable. aimeat.io runs 'allow'.
+# AIMEAT_CONTENT_SIGNAL=""                 # robots.txt Content Signals Policy directive (contentsignals.org), e.g. "search=yes, ai-input=yes, ai-train=no". Leave empty to pair it to AIMEAT_AI_TRAINING so the directive and the per-bot rules cannot contradict each other; set it to override both; 'off' removes the directive.
 
 # ── IndexNow (Bing/Yandex search indexing) ─────────────────────
 # Generate a key: openssl rand -hex 16

package/dist/build-stamp.json

@@ -1,10 +1,10 @@
 {
   "schema_version": 1,
-  "version": "3.2.0",
-  "commit": "7203892dd55a775494be52d44d6a18678aefe211",
+  "version": "3.3.0",
+  "commit": "ff14a2711f15567c13f31d005ac6e39cbe5cf346",
   "dirty": false,
-  "built_at": "2026-08-15T13:38:51.424Z",
-  "newest_source_mtime": 1786800873978.1787,
+  "built_at": "2026-08-16T11:14:52.462Z",
+  "newest_source_mtime": 1786878872198.984,
   "source_dirs": [
     "src",
     "bin",

package/dist/locales/en.json

@@ -687,6 +687,41 @@
     "openBtn": "Open App Catalog",
     "downloadBtn": "Download HTML"
   },
+  "chat.allowance": "{n} USD left of your allowance.",
+  "chat.backToChat": "Back to the conversation",
+  "chat.closeList": "Close",
+  "chat.delete": "Delete conversation",
+  "chat.disabledPlaceholder": "This node has no chat agent yet.",
+  "chat.heardNothing": "Nothing was heard in that recording.",
+  "chat.hearing": "Working out what you said…",
+  "chat.listen": "Listen",
+  "chat.loadFailed": "The chat could not be loaded.",
+  "chat.modelTitle": "The model that answered this turn",
+  "chat.new": "New conversation",
+  "chat.noThreads": "Nothing here yet. Say something and this is where it will be.",
+  "chat.openList": "Conversations",
+  "chat.ownKey": "Running on your own OpenRouter key.",
+  "chat.placeholder": "Ask for something, or describe what you want built.",
+  "chat.reset": "Reset session",
+  "chat.resetTitle": "Start a fresh agent session for this conversation. Needed after changing what the agent may do.",
+  "chat.retry": "Try again",
+  "chat.send": "Send",
+  "chat.signIn": "Sign in and your first agent is waiting here.",
+  "chat.stop": "Stop",
+  "chat.stopListening": "Stop",
+  "chat.title": "Chat",
+  "chat.transcribeFailed": "That recording could not be turned into text.",
+  "chat.turnCount": "{n} messages",
+  "chat.turnFailed": "The turn could not be completed.",
+  "chat.welcomeBody": "It works here the way your own AI tool would, with the same permissions and the same record of what it did. Ask it for something.",
+  "chat.welcomeTitle": "Your first agent",
+  "chat.work.completed": "done",
+  "chat.work.failed": "failed",
+  "chat.work.in_progress": "running",
+  "chat.work.pending": "starting",
+  "chat.work.title": "What was done",
+  "chat.work.untitled": "a tool call",
+  "chat.working": "Working…",
   "classic": {
     "nav": {
       "devView": "For Developers"
@@ -4053,6 +4088,7 @@
     "exchange": "EXCHANGE",
     "members": "Members"
   },
+  "nav.chat": "Chat",
   "nav.glossary": "Glossary",
   "nav.members": "Members",
   "notif": {
@@ -5730,6 +5766,9 @@
           },
           "operator": {
             "organism-repair": "Put an owner back on an organism this account does not own. Only works for a node operator: on any other account this permission does nothing. It is the way back when an organism's owner account can no longer be reached, and it hands that organism to whoever the agent names."
+          },
+          "packages": {
+            "write": "Install packages for you. That sets up the package's app, its extensions and any scheduled jobs it brings, under your name."
           }
         },
         "domainAi": "AI",
@@ -5748,7 +5787,8 @@
         "domainCapability": "Services you sell",
         "domainAccount": "Your account and how you sign in",
         "domainOperator": "Running this node",
-        "permInvoke": "Run"
+        "permInvoke": "Run",
+        "domainPackages": "Packages"
       },
       "deviceAuth": {
         "title": "Device Authorization",

package/dist/locales/es.json

@@ -687,6 +687,41 @@
     "openBtn": "Abrir el catálogo",
     "downloadBtn": "Descargar el HTML"
   },
+  "chat.allowance": "Te quedan {n} USD de tu saldo.",
+  "chat.backToChat": "Volver a la conversación",
+  "chat.closeList": "Cerrar",
+  "chat.delete": "Eliminar conversación",
+  "chat.disabledPlaceholder": "Este nodo todavía no tiene un agente de chat.",
+  "chat.heardNothing": "No se escuchó nada en esa grabación.",
+  "chat.hearing": "Descifrando lo que dijiste…",
+  "chat.listen": "Escuchar",
+  "chat.loadFailed": "No se pudo cargar el chat.",
+  "chat.modelTitle": "El modelo que respondió este turno",
+  "chat.new": "Nueva conversación",
+  "chat.noThreads": "Todavía no hay nada. Di algo y la conversación aparecerá aquí.",
+  "chat.openList": "Conversaciones",
+  "chat.ownKey": "Se está usando tu propia clave de OpenRouter.",
+  "chat.placeholder": "Pide algo o describe lo que quieres que se construya.",
+  "chat.reset": "Reiniciar sesión",
+  "chat.resetTitle": "Empieza una sesión nueva del agente para esta conversación. Se necesita después de cambiar lo que el agente puede hacer.",
+  "chat.retry": "Intentar de nuevo",
+  "chat.send": "Enviar",
+  "chat.signIn": "Inicia sesión y tu primer agente te está esperando aquí.",
+  "chat.stop": "Detener",
+  "chat.stopListening": "Detener",
+  "chat.title": "Chat",
+  "chat.transcribeFailed": "Esa grabación no se pudo convertir en texto.",
+  "chat.turnCount": "{n} mensajes",
+  "chat.turnFailed": "No se pudo completar el turno.",
+  "chat.welcomeBody": "Funciona aquí igual que tu propia herramienta de IA: con los mismos permisos y el mismo registro de lo que hizo. Pídele algo.",
+  "chat.welcomeTitle": "Tu primer agente",
+  "chat.work.completed": "listo",
+  "chat.work.failed": "falló",
+  "chat.work.in_progress": "en curso",
+  "chat.work.pending": "iniciando",
+  "chat.work.title": "Lo que se hizo",
+  "chat.work.untitled": "llamada a herramienta",
+  "chat.working": "Trabajando…",
   "classic": {
     "nav": {
       "devView": "Para desarrolladores"
@@ -4051,6 +4086,7 @@
     "learn": "Aprende",
     "exchange": "EXCHANGE"
   },
+  "nav.chat": "Chat",
   "nav.glossary": "Glosario",
   "nav.members": "Miembros",
   "notif": {
@@ -5723,6 +5759,9 @@
           },
           "operator": {
             "organism-repair": "Devuelve un propietario a un organismo que esta cuenta no posee. Solo funciona para el operador del nodo: en cualquier otra cuenta este permiso no hace nada. Es la vuelta atrás cuando ya no se alcanza la cuenta propietaria de un organismo, y entrega ese organismo a quien el agente nombre."
+          },
+          "packages": {
+            "write": "Instalar paquetes por ti. Eso pone en marcha la aplicación del paquete, sus extensiones y las tareas programadas que traiga, a tu nombre."
           }
         },
         "domainAi": "IA",
@@ -5741,7 +5780,8 @@
         "domainCapability": "Servicios que vendes",
         "domainAccount": "Tu cuenta y cómo entras",
         "domainOperator": "Administración de este nodo",
-        "permInvoke": "Ejecutar"
+        "permInvoke": "Ejecutar",
+        "domainPackages": "Paquetes"
       },
       "deviceAuth": {
         "title": "Autorización de dispositivo",

package/dist/locales/fi.json

@@ -687,6 +687,41 @@
     "openBtn": "Avaa sovelluskatalogi",
     "downloadBtn": "Lataa HTML"
   },
+  "chat.allowance": "Saldoa jäljellä {n} USD.",
+  "chat.backToChat": "Takaisin keskusteluun",
+  "chat.closeList": "Sulje",
+  "chat.delete": "Poista keskustelu",
+  "chat.disabledPlaceholder": "Tällä nodella ei ole vielä chat-agenttia.",
+  "chat.heardNothing": "Nauhoituksesta ei kuulunut mitään.",
+  "chat.hearing": "Selvitetään mitä sanoit…",
+  "chat.listen": "Kuuntele",
+  "chat.loadFailed": "Chatin lataaminen ei onnistunut.",
+  "chat.modelTitle": "Malli, joka vastasi tähän vuoroon",
+  "chat.new": "Uusi keskustelu",
+  "chat.noThreads": "Täällä ei ole vielä mitään. Sano jotain, niin keskustelu ilmestyy tähän.",
+  "chat.openList": "Keskustelut",
+  "chat.ownKey": "Käytössä on oma OpenRouter-avaimesi.",
+  "chat.placeholder": "Pyydä jotain tai kerro, mitä haluat rakennettavan.",
+  "chat.reset": "Nollaa sessio",
+  "chat.resetTitle": "Aloita tälle keskustelulle uusi agenttisessio. Sitä tarvitaan, kun olet muuttanut sitä, mitä agentti saa tehdä.",
+  "chat.retry": "Yritä uudelleen",
+  "chat.send": "Lähetä",
+  "chat.signIn": "Kirjaudu sisään, niin ensimmäinen agenttisi odottaa täällä.",
+  "chat.stop": "Pysäytä",
+  "chat.stopListening": "Pysäytä",
+  "chat.title": "Chat",
+  "chat.transcribeFailed": "Nauhoitusta ei saatu muutettua tekstiksi.",
+  "chat.turnCount": "{n} viestiä",
+  "chat.turnFailed": "Vuoroa ei saatu vietyä loppuun.",
+  "chat.welcomeBody": "Se toimii täällä samalla tavalla kuin oma tekoälytyökalusi: samat oikeudet ja sama kirjaus siitä, mitä se teki. Pyydä siltä jotain.",
+  "chat.welcomeTitle": "Ensimmäinen agenttisi",
+  "chat.work.completed": "valmis",
+  "chat.work.failed": "epäonnistui",
+  "chat.work.in_progress": "käynnissä",
+  "chat.work.pending": "alkaa",
+  "chat.work.title": "Mitä tehtiin",
+  "chat.work.untitled": "työkalukutsu",
+  "chat.working": "Työn alla…",
   "classic": {
     "nav": {
       "devView": "Kehittäjille"
@@ -4053,6 +4088,7 @@
     "exchange": "EXCHANGE",
     "members": "Jäsenet"
   },
+  "nav.chat": "Chat",
   "nav.glossary": "Sanasto",
   "nav.members": "Jäsenet",
   "notif": {
@@ -5730,6 +5766,9 @@
           },
           "operator": {
             "organism-repair": "Palauta omistaja organismiin jota tämä tili ei omista. Toimii vain noden operaattorilla: muulla tilillä tämä oikeus ei tee mitään. Tällä pääsee takaisin organismiin jonka omistajatiliin ei enää saa yhteyttä, ja se antaa organismin sille jonka agentti nimeää."
+          },
+          "packages": {
+            "write": "Asenna puolestasi paketteja. Se ottaa käyttöön paketin sovelluksen, laajennukset ja mahdolliset ajastetut työt sinun nimissäsi."
           }
         },
         "domainAi": "Tekoäly",
@@ -5748,7 +5787,8 @@
         "domainCapability": "Myymäsi palvelut",
         "domainAccount": "Tilisi ja kirjautuminen",
         "domainOperator": "Tämän noden ylläpito",
-        "permInvoke": "Aja"
+        "permInvoke": "Aja",
+        "domainPackages": "Paketit"
       },
       "deviceAuth": {
         "title": "Laitehyväksyntä",
@@ -6413,8 +6453,8 @@
             "telemetryEvents": "Telemetriatapahtumia tänään",
             "deliveryHealth": "Toimituksen tila",
             "connected": "Yhdistetty",
-            "mcpLabel": "MCP",
-            "notConfigured": "Ei määritetty"
+            "notConfigured": "Ei määritetty",
+            "mcpLabel": "MCP"
           },
           "notReported": "ei raportoitu",
           "deliveryPollingLine": "Toimitus: polling"

package/dist/public/changelog.json

@@ -1,6 +1,18 @@
 {
   "_format": "Node change log, newest entry FIRST. Served at /changelog.json, rendered by public/views/landing-changelog.js. Add an entry in the same change that ships the thing. Fields: date (YYYY-MM-DD), version (optional, the node version it shipped in), kind (feature|fix|security|notice), title and body. title/body are either a plain string (shown to everyone) or { en, fi } when the wording deserves both languages. Write what a person gets, not what the code does.",
   "entries": [
+    {
+      "date": "2026-08-16",
+      "kind": "feature",
+      "title": {
+        "en": "An AI that meets this node reads a page, not a manual",
+        "fi": "Tekoäly joka kohtaa tämän noden lukee sivun, ei käsikirjaa"
+      },
+      "body": {
+        "en": "The document an AI fetches first to find out what this node is was the whole builder's manual: 124 kB of SDK reference and endpoint examples, for a reader who only wanted to know what they had arrived at. Now /llms.txt is a one-page map that names what is here and where each thing leads, and the manual is at /llms-full.txt, which is the convention the rest of the web follows. Anything pointed at the old address is told in the first sentence where the manual went.\n\nThe map lists this node's human pages too, generated from the node's own page registry, so a person's question gets a person's page rather than the app builder's manual.\n\nTwo related fixes you may notice if you run your own node: each page now carries structured data describing that page, which had been silently skipped on every page since it was written, and a node that is not aimeat.io no longer tells search engines and AI readers that it is.",
+        "fi": "Dokumentti jonka tekoäly hakee ensimmäisenä saadakseen selville mikä tämä node on oli koko rakentajan käsikirja: 124 kt SDK-viitettä ja endpoint-esimerkkejä lukijalle joka halusi vain tietää minne oli tullut. Nyt /llms.txt on yhden sivun kartta joka kertoo mitä täällä on ja mihin kukin asia johtaa, ja käsikirja on osoitteessa /llms-full.txt, jota muukin verkko noudattaa. Vanhaan osoitteeseen ohjatulle kerrotaan heti ensimmäisessä lauseessa minne käsikirja siirtyi.\n\nKartta listaa myös tämän noden ihmisille tarkoitetut sivut, ja ne tulevat noden omasta sivurekisteristä, joten ihmisen kysymykseen vastaa ihmisen sivu eikä sovelluskehittäjän käsikirja.\n\nKaksi liittyvää korjausta jotka saatat huomata jos ylläpidät omaa nodea: jokainen sivu kantaa nyt rakenteista tietoa itsestään, mikä oli jäänyt hiljaisesti tekemättä joka sivulla siitä asti kun se kirjoitettiin, eikä muu kuin aimeat.io enää kerro hakukoneille ja tekoälylukijoille olevansa aimeat.io."
+      }
+    },
     {
       "date": "2026-08-12",
       "version": "2.8.0",