aimeat 3.2.0 → 3.3.0

package/dist/src/services/chat-agent.js

@@ -0,0 +1,123 @@
+/**
+ * @file chat-agent.ts
+ * @description The person's built-in chat agent: `chat#<owner>@<node>`, a real GAII principal like
+ *   any other, and the short-lived MCP token one chat session hands to goose.
+ *
+ *   It is a real agent on purpose. It appears in the owner's Agents tab beside the ones they
+ *   connected themselves, its scopes are edited in the same place, and every tool call it makes is
+ *   authorised against its own identity by the same MCP surface Claude Desktop talks to. A private
+ *   side-channel would have been less code and a second permission model.
+ *
+ *   The token is minted per chat session and kept out of storage. It is a bearer credential for the
+ *   whole of the person's tool surface, and it needs to live exactly as long as the goose session
+ *   that carries it — the session row makes it revocable, and deleting the agent ends it.
+ * @structure
+ *   - CHAT_AGENT_NAME — the one place the name lives
+ *   - ensureChatAgent() — find or create the agent, returning its GAII and granted scopes
+ *   - mintChatAgentToken() — a session-scoped MCP credential for it
+ * @usage
+ *   const agent = await ensureChatAgent(storage, config, ownerName);
+ *   const { token } = await mintChatAgentToken(storage, config, agent);
+ * @version-history
+ *   v1.0.1 — 2026-08-16 — Write every column the agents table requires. `morselBalance` and `mode`
+ *     were left off a partial record, which the sqlite schema refuses with a NOT NULL error, so
+ *     starting a conversation was a 500 on any node with the shipped schema. Found by the first E2E
+ *     run of the chat routes, not by the developer's own database.
+ *   v1.0.0 — 2026-08-16 — Initial.
+ */
+import { randomBytes } from 'node:crypto';
+import { buildGAII } from '../utils/gaii.js';
+import { generateKeyPair } from '../auth/keypair.js';
+import { issueJWT } from '../auth/jwt.js';
+import { scopesForProfile } from '../mcp/catalog/scopes.js';
+import { emitChange } from './event-bus.js';
+import { logger } from '../utils/logger.js';
+/** The agent's name component. One place, because it appears in a GAII, a UI and a log line. */
+export const CHAT_AGENT_NAME = 'chat';
+/**
+ * Find, or create, this owner's chat agent.
+ *
+ * The scopes come from the standard profile rather than from the owner's own roles. That is
+ * invariant 12: a role is granted, never inherited at mint time, and a mint that copied the owner's
+ * list would hand a scope-limited surface an unscoped credential. The owner can widen or narrow it
+ * afterwards in the Agents tab, which is the point of it being a real agent.
+ */
+export async function ensureChatAgent(storage, config, ownerName) {
+    const gaii = buildGAII(CHAT_AGENT_NAME, ownerName, config.nodeId);
+    const existing = await storage.getAgent(gaii);
+    if (existing) {
+        return {
+            gaii,
+            ownerName,
+            scopes: existing.defaultScopes ?? [],
+            created: false,
+        };
+    }
+    const scopes = capScopes(config, scopesForProfile('agent'));
+    const keyPair = await generateKeyPair();
+    const now = new Date().toISOString();
+    // Every field the agents table requires, in the same shape the device-authorization path writes.
+    // `morselBalance` is zero and stays zero: the human pays, and an agent's balance resolves to the
+    // owner's GHII everywhere it is spent.
+    const record = {
+        name: CHAT_AGENT_NAME,
+        owner: ownerName,
+        gaii,
+        displayName: 'Chat',
+        description: 'The built-in chat agent. Talks to you in the browser and works through this node.',
+        capabilities: ['memory', 'apps'],
+        publicKey: keyPair.publicKey,
+        defaultScopes: scopes,
+        trustScore: 50,
+        morselBalance: 0,
+        mode: 'interactive',
+        createdAt: now,
+        lastSeen: now,
+    };
+    await storage.createAgent(record);
+    emitChange('agents', `${ownerName}@${config.nodeId}`);
+    logger.info(`[chat] created ${gaii} with ${scopes.length} scope(s)`);
+    return { gaii, ownerName, scopes, created: true };
+}
+/**
+ * Never grant more than the node allows, whatever the profile says. The profile is a convenience;
+ * `maxAgentScopes` is the operator's ceiling and it wins.
+ */
+function capScopes(config, wanted) {
+    const max = config.maxAgentScopes;
+    if (!Array.isArray(max) || max.length === 0 || max.includes('*'))
+        return wanted;
+    return wanted.filter((s) => max.includes(s));
+}
+/**
+ * Mint an MCP credential for one chat session.
+ *
+ * The session row is what makes it revocable: requireAuth checks the token's `jti` against it, and a
+ * token whose session row never existed answers "not revoked" forever. That was a real hole on the
+ * device-authorization path once, and this is the same shape of credential.
+ *
+ * `mcp_client` marks where the session came from, which is what makes the chat show up in the
+ * owner's connected-clients list as itself rather than as an anonymous agent.
+ */
+export async function mintChatAgentToken(storage, config, agent) {
+    const sessionId = `chat-${randomBytes(16).toString('hex')}`;
+    const now = new Date().toISOString();
+    const expiresAt = new Date(Date.now() + config.agentJwtTtlSeconds * 1000).toISOString();
+    const token = await issueJWT({
+        sub: agent.gaii,
+        owner: agent.ownerName,
+        node: config.nodeId,
+        roles: ['agent'],
+        scopes: agent.scopes,
+        mcp_client: 'aimeat-chat',
+    }, config.agentJwtTtlSeconds, sessionId);
+    await storage.createSession({
+        sessionId,
+        gaii: agent.gaii,
+        owner: agent.ownerName,
+        issuedAt: now,
+        expiresAt,
+    });
+    return { token, sessionId, expiresAt };
+}
+//# sourceMappingURL=chat-agent.js.map

package/dist/src/services/chat-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-agent.js","sourceRoot":"","sources":["../../../src/services/chat-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,gGAAgG;AAChG,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAStC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,OAAgB,EAAE,MAAoB,EAAE,SAAiB;IAEzD,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACX,OAAO;YACH,IAAI;YACJ,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,aAAa,IAAI,EAAE;YACpC,OAAO,EAAE,KAAK;SACjB,CAAC;IACN,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,iGAAiG;IACjG,iGAAiG;IACjG,uCAAuC;IACvC,MAAM,MAAM,GAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,SAAS;QAChB,IAAI;QACJ,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,mFAAmF;QAChG,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,MAAM;QACrB,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,GAAG;KACD,CAAC;IACjB,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,UAAU,CAAC,QAAQ,EAAE,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,SAAS,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IAErE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,MAAoB,EAAE,MAAgB;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAQD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,OAAgB,EAAE,MAAoB,EAAE,KAAwB;IAEhE,MAAM,SAAS,GAAG,QAAQ,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAExF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;QACzB,GAAG,EAAE,KAAK,CAAC,IAAI;QACf,KAAK,EAAE,KAAK,CAAC,SAAS;QACtB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,aAAa;KACnB,EAAE,MAAM,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAElD,MAAM,OAAO,CAAC,aAAa,CAAC;QACxB,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,SAAS;QACtB,QAAQ,EAAE,GAAG;QACb,SAAS;KACZ,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC3C,CAAC"}

package/dist/src/services/chat-session.d.ts

@@ -0,0 +1,58 @@
+/**
+ * @file chat-session.ts
+ * @description One turn of the chat, end to end: the person's identity, the agent process, the
+ *   conversation record, and what came back.
+ *
+ *   The node runs ONE agent process and gives each conversation a session inside it. That is the
+ *   shape goose supports and the one that scales here: sessions are created on first use and each
+ *   carries its own MCP server list, so a session speaks to this node as the person who owns it and
+ *   the tool surface refuses everything they may not do. Fifty people with five talking at once is
+ *   one process, not fifty.
+ *
+ *   Session ids belong to a running process. When the agent restarts, every id it handed out means
+ *   nothing, so they are stamped with the generation that issued them and a stale one is silently
+ *   replaced rather than used. The conversation itself is unaffected: it lives in the person's
+ *   memory, and goose's own store is a cache.
+ * @structure
+ *   - chatEnabled() — whether this node has an agent at all
+ *   - runChatTurn() — the whole turn, yielding updates as they happen and persisting both sides
+ *   - shutdownChat() — stop the agent process
+ * @usage
+ *   for await (const u of runChatTurn({ storage, config }, ownerName, threadId, text)) { … }
+ * @version-history
+ *   v1.0.1 — 2026-08-16 — The work log keys tool calls by id rather than title. Only the opening
+ *     event carries a title, so every call stayed at "starting" no matter how it ended. Seen in a
+ *     browser against a real agent, where one completed call read as still running.
+ *   v1.0.0 — 2026-08-16 — Initial.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import { type SessionUpdate } from './goose-acp.js';
+export interface ChatDeps {
+    storage: Storage;
+    config: AimeatConfig;
+}
+/** Whether this node has a chat agent configured at all. */
+export declare function chatEnabled(config: AimeatConfig): boolean;
+/** Stop the agent. Called from the node's shutdown hook. */
+export declare function shutdownChat(): void;
+/**
+ * Run one turn.
+ *
+ * The person's own words are written down BEFORE the agent is asked anything: a turn that fails
+ * halfway should leave the conversation showing what was said, not an empty gap. The agent's side is
+ * written when the turn ends, with the tools it used and the model that answered — the model per
+ * turn, because a node that falls back to a free model when an allowance runs out has to be able to
+ * say which turn that was.
+ */
+export declare function runChatTurn(deps: ChatDeps, ownerName: string, threadId: string, text: string): AsyncGenerator<SessionUpdate>;
+/**
+ * Forget the goose session a conversation was on, so the next turn starts a fresh one.
+ *
+ * This is what a scope change needs: the session's MCP token carries the scopes it was minted with,
+ * so widening or narrowing them in the Agents tab has to reach the chat somehow. Dropping the
+ * session is that somehow, and it costs one handshake rather than a reconnect the person has to
+ * perform — which was the original complaint this whole feature answers.
+ */
+export declare function resetChatSession(deps: ChatDeps, gaii: string, threadId: string): Promise<void>;
+//# sourceMappingURL=chat-session.d.ts.map

package/dist/src/services/chat-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-session.d.ts","sourceRoot":"","sources":["../../../src/services/chat-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAMrF,MAAM,WAAW,QAAQ;IAAG,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE;AAOpE,4DAA4D;AAC5D,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAEzD;AAuBD,4DAA4D;AAC5D,wBAAgB,YAAY,IAAI,IAAI,CAGnC;AAsCD;;;;;;;;GAQG;AACH,wBAAuB,WAAW,CAC9B,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAClE,cAAc,CAAC,aAAa,CAAC,CAyD/B;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAClC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAC/C,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/src/services/chat-session.js

@@ -0,0 +1,151 @@
+import { GooseAcpClient, aimeatMcpServer } from './goose-acp.js';
+import { ensureChatAgent, mintChatAgentToken } from './chat-agent.js';
+import { appendTurn, readThread, setGooseSession } from './chat-threads.js';
+import { resolveGhii } from '../utils/ghii-resolver.js';
+import { logger } from '../utils/logger.js';
+/** The single agent process, and which generation it is. */
+let client = null;
+let generation = 0;
+let starting = null;
+/** Whether this node has a chat agent configured at all. */
+export function chatEnabled(config) {
+    return !!(config.gooseBin || '').trim();
+}
+/**
+ * The agent process, started on first use.
+ *
+ * Concurrent first turns share one start rather than racing into two processes, which is the same
+ * reason goose's own session manager holds a per-session creation lock.
+ */
+async function agent(config) {
+    if (client)
+        return client;
+    if (starting)
+        return starting;
+    starting = GooseAcpClient.start(config)
+        .then((c) => {
+        client = c;
+        generation++;
+        logger.info(`[chat] agent process started (generation ${generation})`);
+        return c;
+    })
+        .finally(() => { starting = null; });
+    return starting;
+}
+/** Stop the agent. Called from the node's shutdown hook. */
+export function shutdownChat() {
+    client?.close();
+    client = null;
+}
+/** A goose session id is only meaningful for the process that issued it. */
+function stamp(sessionId) {
+    return `${generation}:${sessionId}`;
+}
+function unstamp(stamped) {
+    if (!stamped)
+        return null;
+    const [gen, ...rest] = stamped.split(':');
+    return Number(gen) === generation ? rest.join(':') : null;
+}
+/**
+ * Get, or create, the goose session this conversation runs on.
+ *
+ * The MCP token is minted per session and never stored: it is a bearer credential for the whole of
+ * the person's tool surface, and it should live exactly as long as the session that carries it.
+ */
+async function sessionFor(deps, ownerName, gaii, threadId) {
+    const { storage, config } = deps;
+    const thread = await readThread(storage, gaii, threadId);
+    const existing = unstamp(thread?.gooseSessionId);
+    if (existing)
+        return existing;
+    const identity = await ensureChatAgent(storage, config, ownerName);
+    const { token } = await mintChatAgentToken(storage, config, identity);
+    const acp = await agent(config);
+    const sessionId = await acp.newSession({
+        mcpServers: [aimeatMcpServer(config.baseUrl, token)],
+    });
+    await setGooseSession(storage, gaii, threadId, stamp(sessionId));
+    logger.info(`[chat] ${identity.gaii} -> goose session ${sessionId} for thread ${threadId}`);
+    return sessionId;
+}
+/**
+ * Run one turn.
+ *
+ * The person's own words are written down BEFORE the agent is asked anything: a turn that fails
+ * halfway should leave the conversation showing what was said, not an empty gap. The agent's side is
+ * written when the turn ends, with the tools it used and the model that answered — the model per
+ * turn, because a node that falls back to a free model when an allowance runs out has to be able to
+ * say which turn that was.
+ */
+export async function* runChatTurn(deps, ownerName, threadId, text) {
+    const { storage, config } = deps;
+    if (!chatEnabled(config)) {
+        yield { kind: 'error', message: 'This node has no chat agent configured.' };
+        return;
+    }
+    const gaii = await resolveGhii(storage, ownerName, `${ownerName}@${config.nodeId}`);
+    const now = new Date().toISOString();
+    await appendTurn(storage, gaii, threadId, { role: 'user', text, at: now });
+    let sessionId;
+    try {
+        sessionId = await sessionFor(deps, ownerName, gaii, threadId);
+    }
+    catch (err) {
+        const message = err.message;
+        logger.warn(`[chat] could not open a session for ${ownerName}: ${message}`);
+        yield { kind: 'error', message };
+        return;
+    }
+    const acp = await agent(config);
+    // Keyed by the call's OWN id, not its title. A tool call arrives twice — once as it starts and
+    // once as it finishes — and only the first carries a title, so matching on the title leaves
+    // every call in the log reading "starting" forever, whatever actually happened to it.
+    const tools = new Map();
+    let answer = '';
+    try {
+        for await (const update of acp.prompt(sessionId, text)) {
+            if (update.kind === 'text')
+                answer += update.text;
+            if (update.kind === 'tool_call') {
+                const key = update.id || update.title;
+                const seen = tools.get(key);
+                if (seen) {
+                    seen.status = update.status;
+                    if (update.title)
+                        seen.title = update.title;
+                }
+                else {
+                    tools.set(key, { title: update.title, status: update.status });
+                }
+            }
+            yield update;
+        }
+    }
+    finally {
+        // Written even when the turn ended badly: half an answer and the tools that ran is a truer
+        // record than nothing, and it is what the person saw on screen.
+        const turn = {
+            role: 'agent',
+            text: answer,
+            at: new Date().toISOString(),
+            ...(tools.size ? { tools: [...tools.values()] } : {}),
+        };
+        await appendTurn(storage, gaii, threadId, turn).catch((e) => {
+            logger.warn(`[chat] could not save the agent turn: ${e.message}`);
+            return null;
+        });
+    }
+}
+/**
+ * Forget the goose session a conversation was on, so the next turn starts a fresh one.
+ *
+ * This is what a scope change needs: the session's MCP token carries the scopes it was minted with,
+ * so widening or narrowing them in the Agents tab has to reach the chat somehow. Dropping the
+ * session is that somehow, and it costs one handshake rather than a reconnect the person has to
+ * perform — which was the original complaint this whole feature answers.
+ */
+export async function resetChatSession(deps, gaii, threadId) {
+    await setGooseSession(deps.storage, gaii, threadId, undefined);
+}
+//# sourceMappingURL=chat-session.js.map

package/dist/src/services/chat-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-session.js","sourceRoot":"","sources":["../../../src/services/chat-session.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAsB,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAiB,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAI5C,4DAA4D;AAC5D,IAAI,MAAM,GAA0B,IAAI,CAAC;AACzC,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,IAAI,QAAQ,GAAmC,IAAI,CAAC;AAEpD,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,MAAoB;IAC5C,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,KAAK,CAAC,MAAoB;IACrC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACR,MAAM,GAAG,CAAC,CAAC;QACX,UAAU,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,4CAA4C,UAAU,GAAG,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC;IACb,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,YAAY;IACxB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,GAAG,IAAI,CAAC;AAClB,CAAC;AAED,4EAA4E;AAC5E,SAAS,KAAK,CAAC,SAAiB;IAC5B,OAAO,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC;AACxC,CAAC;AACD,SAAS,OAAO,CAAC,OAA2B;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CACrB,IAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,QAAgB;IAEjE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC;QACnC,UAAU,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;KACvD,CAAC,CAAC;IACH,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,MAAM,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,IAAI,qBAAqB,SAAS,eAAe,QAAQ,EAAE,CAAC,CAAC;IAC5F,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,WAAW,CAC9B,IAAc,EAAE,SAAiB,EAAE,QAAgB,EAAE,IAAY;IAEjE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;QAC5E,OAAO;IACX,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAE3E,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACD,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,OAAO,GAAI,GAAa,CAAC,OAAO,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,uCAAuC,SAAS,KAAK,OAAO,EAAE,CAAC,CAAC;QAC5E,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACjC,OAAO;IACX,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,+FAA+F;IAC/F,4FAA4F;IAC5F,sFAAsF;IACtF,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6C,CAAC;IACnE,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,IAAI,CAAC;QACD,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC;YAClD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC5B,IAAI,IAAI,EAAE,CAAC;oBACP,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;oBAC5B,IAAI,MAAM,CAAC,KAAK;wBAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;gBAChD,CAAC;qBAAM,CAAC;oBACJ,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACnE,CAAC;YACL,CAAC;YACD,MAAM,MAAM,CAAC;QACjB,CAAC;IACL,CAAC;YAAS,CAAC;QACP,2FAA2F;QAC3F,gEAAgE;QAChE,MAAM,IAAI,GAAa;YACnB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC;QACF,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE;YAC/D,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,IAAc,EAAE,IAAY,EAAE,QAAgB;IAE9C,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AACnE,CAAC"}

package/dist/src/services/chat-threads.d.ts

@@ -0,0 +1,61 @@
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+/** One thing said, by either side, with whatever the agent did while saying it. */
+export interface ChatTurn {
+    role: 'user' | 'agent';
+    text: string;
+    at: string;
+    /** Compact record of the tool calls this turn made, for the work log. */
+    tools?: Array<{
+        title: string;
+        status: string;
+    }>;
+    /** Which model answered. Shown per turn, so "quality may vary" is checkable. */
+    model?: string;
+}
+export interface ChatThread {
+    id: string;
+    title: string;
+    createdAt: string;
+    updatedAt: string;
+    /** goose's own session id, if one is currently attached. A cache: the turns are the truth. */
+    gooseSessionId?: string;
+    turns: ChatTurn[];
+}
+declare const LIVE_PREFIX = "chat.thread.";
+declare const ARCHIVE_PREFIX = "chat.archive.";
+/** How many conversations stay open before the oldest rolls into the month's archive. */
+declare const MAX_LIVE_THREADS = 50;
+/**
+ * How much of one conversation is kept. A memory value tops out at 1024 kB, and a thread that grew
+ * past it would fail to save — losing the newest turn, which is the one that mattered. Trimming the
+ * oldest turns keeps the record writable and the recent context intact; goose does its own
+ * compaction for what the model sees.
+ */
+declare const MAX_TURNS_PER_THREAD = 400;
+/** Start a conversation. The title is a placeholder until the first turn gives it a better one. */
+export declare function createThread(storage: Storage, config: AimeatConfig, gaii: string, title?: string): Promise<ChatThread>;
+export declare function readThread(storage: Storage, gaii: string, id: string): Promise<ChatThread | null>;
+/** Every live conversation, newest first. */
+export declare function listThreads(storage: Storage, gaii: string): Promise<ChatThread[]>;
+/** Attach (or forget) the goose session a conversation is currently running on. */
+export declare function setGooseSession(storage: Storage, gaii: string, id: string, gooseSessionId: string | undefined): Promise<void>;
+/**
+ * Add one turn. Returns the thread as stored.
+ *
+ * The first thing a person says becomes the title, because a list of conversations all called "New
+ * chat" is a list nobody can use.
+ */
+export declare function appendTurn(storage: Storage, gaii: string, id: string, turn: ChatTurn): Promise<ChatThread | null>;
+/** Throw a conversation away entirely. */
+export declare function deleteThread(storage: Storage, gaii: string, id: string): Promise<void>;
+/**
+ * Roll the oldest conversations into the month they belong to, once there are more open than the
+ * ceiling allows.
+ *
+ * Archived conversations stay readable — they are one record per month rather than one each — and
+ * the key count stops growing with use, which is the whole point.
+ */
+export declare function archiveOverflow(storage: Storage, config: AimeatConfig, gaii: string): Promise<number>;
+export { MAX_LIVE_THREADS, MAX_TURNS_PER_THREAD, LIVE_PREFIX, ARCHIVE_PREFIX };
+//# sourceMappingURL=chat-threads.d.ts.map

package/dist/src/services/chat-threads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-threads.d.ts","sourceRoot":"","sources":["../../../src/services/chat-threads.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD,mFAAmF;AACnF,MAAM,WAAW,QAAQ;IACrB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,yEAAyE;IACzE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,8FAA8F;IAC9F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACrB;AAED,QAAA,MAAM,WAAW,iBAAiB,CAAC;AACnC,QAAA,MAAM,cAAc,kBAAkB,CAAC;AAEvC,yFAAyF;AACzF,QAAA,MAAM,gBAAgB,KAAK,CAAC;AAC5B;;;;;GAKG;AACH,QAAA,MAAM,oBAAoB,MAAM,CAAC;AAoBjC,mGAAmG;AACnG,wBAAsB,YAAY,CAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAa,GACzE,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,wBAAsB,UAAU,CAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAC3C,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAG5B;AAED,6CAA6C;AAC7C,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAMvF;AAED,mFAAmF;AACnF,wBAAsB,eAAe,CACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,SAAS,GAC/E,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAC3D,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAiB5B;AAED,0CAA0C;AAC1C,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5F;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACjC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GACrD,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAED,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC"}

package/dist/src/services/chat-threads.js

@@ -0,0 +1,137 @@
+/**
+ * @file chat-threads.ts
+ * @description Where a chat conversation lives: the person's own memory, under `chat.`.
+ *
+ *   Goose keeps its own session store, and it is a cache. The conversation is the person's, so the
+ *   record here is the truth: if the agent process is replaced, restarted or swapped for a different
+ *   engine entirely, the conversation survives.
+ *
+ *   The shape is chosen against a ceiling that is easy to walk into. A memory namespace holds 1000
+ *   keys, and five conversations a day is 1825 keys a year, so one key per conversation forever is
+ *   the wrong shape. Live conversations get a key each, because a person opens one at a time and
+ *   expects to find it; older ones roll into one record per month. The same rule the node applies to
+ *   anything that writes on a schedule: if keys per day times 365 exceeds 1000, the shape is wrong.
+ * @structure
+ *   - ChatThread / ChatTurn — the record
+ *   - createThread() · appendTurn() · readThread() · listThreads() · archiveOverflow()
+ * @usage
+ *   const thread = await createThread(storage, config, gaii, 'Pong');
+ *   await appendTurn(storage, config, gaii, thread.id, { role: 'user', text: 'build me pong' });
+ * @version-history
+ *   v1.0.0 — 2026-08-16 — Initial.
+ */
+import { randomBytes } from 'node:crypto';
+import { logger } from '../utils/logger.js';
+const LIVE_PREFIX = 'chat.thread.';
+const ARCHIVE_PREFIX = 'chat.archive.';
+/** How many conversations stay open before the oldest rolls into the month's archive. */
+const MAX_LIVE_THREADS = 50;
+/**
+ * How much of one conversation is kept. A memory value tops out at 1024 kB, and a thread that grew
+ * past it would fail to save — losing the newest turn, which is the one that mattered. Trimming the
+ * oldest turns keeps the record writable and the recent context intact; goose does its own
+ * compaction for what the model sees.
+ */
+const MAX_TURNS_PER_THREAD = 400;
+const liveKey = (id) => `${LIVE_PREFIX}${id}`;
+const archiveKey = (month) => `${ARCHIVE_PREFIX}${month}`;
+const monthOf = (iso) => iso.slice(0, 7);
+async function writeRecord(storage, gaii, key, value, tags) {
+    const now = new Date().toISOString();
+    const existing = await storage.getMemory(gaii, key);
+    await storage.setMemory({
+        key, ownerGaii: gaii, value: value,
+        visibility: 'private', tags, ttlHours: null,
+        version: existing ? existing.version + 1 : 1,
+        createdAt: existing?.createdAt ?? now,
+        updatedAt: now,
+    });
+}
+/** Start a conversation. The title is a placeholder until the first turn gives it a better one. */
+export async function createThread(storage, config, gaii, title = 'New chat') {
+    const now = new Date().toISOString();
+    const thread = {
+        id: randomBytes(9).toString('base64url'),
+        title, createdAt: now, updatedAt: now, turns: [],
+    };
+    await writeRecord(storage, gaii, liveKey(thread.id), thread, ['chat', 'thread']);
+    await archiveOverflow(storage, config, gaii);
+    return thread;
+}
+export async function readThread(storage, gaii, id) {
+    const rec = await storage.getMemory(gaii, liveKey(id));
+    return rec?.value ?? null;
+}
+/** Every live conversation, newest first. */
+export async function listThreads(storage, gaii) {
+    const records = await storage.listMemory(gaii, { prefix: LIVE_PREFIX });
+    return records
+        .map((r) => r.value)
+        .filter((t) => !!t && typeof t.id === 'string')
+        .sort((a, b) => (b.updatedAt ?? '').localeCompare(a.updatedAt ?? ''));
+}
+/** Attach (or forget) the goose session a conversation is currently running on. */
+export async function setGooseSession(storage, gaii, id, gooseSessionId) {
+    const thread = await readThread(storage, gaii, id);
+    if (!thread)
+        return;
+    thread.gooseSessionId = gooseSessionId;
+    thread.updatedAt = new Date().toISOString();
+    await writeRecord(storage, gaii, liveKey(id), thread, ['chat', 'thread']);
+}
+/**
+ * Add one turn. Returns the thread as stored.
+ *
+ * The first thing a person says becomes the title, because a list of conversations all called "New
+ * chat" is a list nobody can use.
+ */
+export async function appendTurn(storage, gaii, id, turn) {
+    const thread = await readThread(storage, gaii, id);
+    if (!thread)
+        return null;
+    thread.turns.push(turn);
+    if (thread.turns.length > MAX_TURNS_PER_THREAD) {
+        const dropped = thread.turns.length - MAX_TURNS_PER_THREAD;
+        thread.turns = thread.turns.slice(dropped);
+        logger.info(`[chat] thread ${id}: dropped ${dropped} oldest turn(s) to stay under the value ceiling`);
+    }
+    if (thread.title === 'New chat' && turn.role === 'user' && turn.text.trim()) {
+        thread.title = turn.text.trim().slice(0, 60);
+    }
+    thread.updatedAt = turn.at;
+    await writeRecord(storage, gaii, liveKey(id), thread, ['chat', 'thread']);
+    return thread;
+}
+/** Throw a conversation away entirely. */
+export async function deleteThread(storage, gaii, id) {
+    await storage.deleteMemory(gaii, liveKey(id));
+}
+/**
+ * Roll the oldest conversations into the month they belong to, once there are more open than the
+ * ceiling allows.
+ *
+ * Archived conversations stay readable — they are one record per month rather than one each — and
+ * the key count stops growing with use, which is the whole point.
+ */
+export async function archiveOverflow(storage, config, gaii) {
+    const max = Math.max(1, config.chatMaxLiveThreads);
+    const threads = await listThreads(storage, gaii);
+    if (threads.length <= max)
+        return 0;
+    const overflow = threads.slice(max);
+    let archived = 0;
+    for (const thread of overflow) {
+        const month = monthOf(thread.updatedAt ?? thread.createdAt ?? new Date().toISOString());
+        const key = archiveKey(month);
+        const existing = (await storage.getMemory(gaii, key))?.value;
+        const bundle = { threads: [...(existing?.threads ?? []), thread] };
+        await writeRecord(storage, gaii, key, bundle, ['chat', 'archive']);
+        await storage.deleteMemory(gaii, liveKey(thread.id));
+        archived++;
+    }
+    if (archived > 0)
+        logger.info(`[chat] archived ${archived} conversation(s) for ${gaii}`);
+    return archived;
+}
+export { MAX_LIVE_THREADS, MAX_TURNS_PER_THREAD, LIVE_PREFIX, ARCHIVE_PREFIX };
+//# sourceMappingURL=chat-threads.js.map

package/dist/src/services/chat-threads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-threads.js","sourceRoot":"","sources":["../../../src/services/chat-threads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAuB5C,MAAM,WAAW,GAAG,cAAc,CAAC;AACnC,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,WAAW,GAAG,EAAE,EAAE,CAAC;AACtD,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,cAAc,GAAG,KAAK,EAAE,CAAC;AAClE,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEjD,KAAK,UAAU,WAAW,CACtB,OAAgB,EAAE,IAAY,EAAE,GAAW,EAAE,KAAc,EAAE,IAAc;IAE3E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,OAAO,CAAC,SAAS,CAAC;QACpB,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAgC;QAC7D,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI;QAC3C,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;QACrC,SAAS,EAAE,GAAG;KACjB,CAAC,CAAC;AACP,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,OAAgB,EAAE,MAAoB,EAAE,IAAY,EAAE,KAAK,GAAG,UAAU;IAExE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAe;QACvB,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACxC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;KACnD,CAAC;IACF,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,OAAgB,EAAE,IAAY,EAAE,EAAU;IAE1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,OAAQ,GAAG,EAAE,KAAgC,IAAI,IAAI,CAAC;AAC1D,CAAC;AAED,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,IAAY;IAC5D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxE,OAAO,OAAO;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAmB,CAAC;SACjC,MAAM,CAAC,CAAC,CAAC,EAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;SAC/D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,OAAgB,EAAE,IAAY,EAAE,EAAU,EAAE,cAAkC;IAE9E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,OAAgB,EAAE,IAAY,EAAE,EAAU,EAAE,IAAc;IAE1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,oBAAoB,CAAC;QAC3D,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,OAAO,iDAAiD,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1E,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC;IAE3B,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAgB,EAAE,IAAY,EAAE,EAAU;IACzE,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,OAAgB,EAAE,MAAoB,EAAE,IAAY;IAEpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,KAA+C,CAAC;QACvG,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QACnE,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,QAAQ,EAAE,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,QAAQ,wBAAwB,IAAI,EAAE,CAAC,CAAC;IACzF,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC"}

package/dist/src/services/config-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-schema.d.ts","sourceRoot":"","sources":["../../../src/services/config-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAIjD,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,GAAG,EAAE,MAAM,YAAY,CAAC;IACxB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC3D,0BAA0B;IAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IAClC,6CAA6C;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;CACpD;AAID,eAAO,MAAM,aAAa,EAAE,cAAc,EA4UzC,CAAC;AAIF,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAErE,6CAA6C;AAC7C,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAEjE,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,CAAC;AAE1D,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,CAAC;AAW1D,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAa5E;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG3D"}
+{"version":3,"file":"config-schema.d.ts","sourceRoot":"","sources":["../../../src/services/config-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAIjD,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,GAAG,EAAE,MAAM,YAAY,CAAC;IACxB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC3D,0BAA0B;IAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IAClC,6CAA6C;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;CACpD;AAID,eAAO,MAAM,aAAa,EAAE,cAAc,EA6UzC,CAAC;AAIF,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAErE,6CAA6C;AAC7C,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAEjE,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,CAAC;AAE1D,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,CAAC;AAW1D,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAa5E;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG3D"}

package/dist/src/services/config-schema.js

@@ -107,7 +107,8 @@ export const CONFIG_FIELDS = [
     { key: 'commerceEnabled', dotPath: 'commerce.enabled', envVar: 'AIMEAT_COMMERCE_ENABLED', type: 'boolean', validate: v => typeof v === 'boolean', immutable: false, description: 'Checkout sessions (/v1/commerce) enabled' },
     { key: 'commerceSessionTtlMinutes', dotPath: 'commerce.session_ttl_minutes', envVar: 'AIMEAT_COMMERCE_SESSION_TTL_MINUTES', type: 'number', validate: v => typeof v === 'number' && Number.isInteger(v) && v >= 5 && v <= 10080, immutable: false, description: 'Open checkout-session lifetime in minutes', range: '5-10080' },
     { key: 'mcpCardCommerceTools', dotPath: 'commerce.mcp_card_tools', envVar: 'AIMEAT_MCP_CARD_COMMERCE_TOOLS', type: 'string', validate: v => v === 'inline' || v === 'pointer', immutable: false, description: 'MCP Server Card commerce_tools mode: inline (embed priced app-tool catalog) or pointer (link /v1/commerce/tools)' },
-    { key: 'contentSignal', dotPath: 'site.content_signal', envVar: 'AIMEAT_CONTENT_SIGNAL', type: 'string', validate: v => typeof v === 'string' && /^(off|(search|ai-input|ai-train)=(yes|no)(\s*,\s*(search|ai-input|ai-train)=(yes|no)){0,2})$/i.test(v.trim()), immutable: false, description: 'robots.txt Content Signals Policy directive (contentsignals.org), e.g. "search=yes, ai-input=yes, ai-train=no"; "off" removes it' },
+    { key: 'contentSignal', dotPath: 'site.content_signal', envVar: 'AIMEAT_CONTENT_SIGNAL', type: 'string', validate: v => typeof v === 'string' && (v.trim() === '' || /^(off|(search|ai-input|ai-train)=(yes|no)(\s*,\s*(search|ai-input|ai-train)=(yes|no)){0,2})$/i.test(v.trim())), immutable: false, description: 'robots.txt Content Signals Policy directive (contentsignals.org), e.g. "search=yes, ai-input=yes, ai-train=no"; "off" removes it; empty pairs it to AIMEAT_AI_TRAINING' },
+    { key: 'aiTraining', dotPath: 'site.ai_training', envVar: 'AIMEAT_AI_TRAINING', type: 'string', validate: v => v === 'allow' || v === 'deny', immutable: false, description: 'Allow AI training crawlers in robots.txt ("allow" | "deny"). Search and retrieval bots are always allowed' },
     { key: 'webBotAuthSign', dotPath: 'federation.web_bot_auth_sign', envVar: 'AIMEAT_WEB_BOT_AUTH_SIGN', type: 'boolean', validate: v => typeof v === 'boolean', immutable: false, description: 'Sign outbound HTTP with the node Ed25519 key (RFC 9421 Web Bot Auth); the key directory is always served' },
     // ── Extensions (Phase 2.7, mutable) ──
     { key: 'extensionsEnabled', dotPath: 'extensions.enabled', envVar: 'AIMEAT_EXTENSIONS_ENABLED', type: 'boolean', validate: v => typeof v === 'boolean', immutable: false, description: 'Sandboxed extension system enabled' },