aimeat 3.2.0 → 3.3.1

package/dist/src/services/screenshot-capture.js

@@ -6,6 +6,12 @@ const FIRST_PASS_DELAY_MS = 30_000; // let the server settle (and be reachable a
 let running = false;
 let disabled = false;
 let timer = null;
+/**
+ * Owner GHII -> the moments they asked for an on-demand capture, newest last. In-process on purpose:
+ * this is throttling, not accounting, and a node restart handing out a fresh allowance costs a few
+ * seconds of rendering rather than money.
+ */
+const onDemandHistory = new Map();
 /**
  * Launch a headless browser WITHOUT a Playwright browser download: prefer the machine's installed
  * Edge/Chrome via `channel`, then a Playwright-installed Chromium. Returns null (and the caller
@@ -43,6 +49,75 @@ async function launchBrowser() {
         + '`npx playwright install --with-deps chromium`. Last error: ' + (lastErr?.message ?? 'unknown'));
     return null;
 }
+/**
+ * Render one app and store its thumbnail. The bytes come from storage and are served to the page by
+ * intercepting the main document, rather than navigating to the public URL: that URL 301-redirects
+ * to the app origin under H-2, which 404s on a node with no separate app host and would capture an
+ * error page. Sub-resources still load against the node and the page URL stays the node URL, so
+ * relative paths and API calls resolve.
+ *
+ * Throws on failure; each caller words its own answer.
+ */
+async function renderAndStore(ctx, config, storage, app) {
+    const base = config.baseUrl.replace(/\/+$/, '');
+    const page = await ctx.newPage();
+    try {
+        const full = await storage.getAppByOwnerName(app.ownerName, app.filename);
+        // storage returns `data` as a Uint8Array; a plain Uint8Array's .toString('utf8') comma-joins the
+        // byte values instead of decoding — wrap in Buffer.
+        const html = full?.data ? Buffer.from(full.data).toString('utf8') : null;
+        const url = `${base}/v1/apps/${encodeURIComponent(app.ownerName)}/${encodeURIComponent(app.filename)}?mode=inline`;
+        if (html) {
+            let fulfilled = false;
+            await page.route('**/*', (route) => {
+                if (!fulfilled && route.request().resourceType() === 'document') {
+                    fulfilled = true;
+                    route.fulfill({ status: 200, contentType: 'text/html', body: html });
+                }
+                else {
+                    route.continue();
+                }
+            });
+        }
+        // 'load' rather than networkidle: polling and SSE apps never go idle. The settle wait after it is
+        // what stops an app that fetches its data post-load from being captured blank.
+        await page.goto(url, { waitUntil: 'load', timeout: PAGE_TIMEOUT });
+        await page.waitForTimeout(Math.max(0, config.screenshotSettleMs));
+        const jpeg = await page.screenshot({ type: 'jpeg', quality: 80 });
+        await storage.createStorageFile({
+            key: `apps/screenshots/${app.filename}`,
+            ownerGaii: app.ownerGaii, // match the app row's bucket so the GET route finds it
+            visibility: 'public',
+            mimeType: 'image/jpeg',
+            size: jpeg.length,
+            data: jpeg,
+            createdAt: new Date().toISOString(),
+        });
+        return jpeg.length;
+    }
+    finally {
+        await page.close();
+    }
+}
+/** Launch, hand over a context, and always close. */
+async function withBrowser(fn) {
+    const browser = await launchBrowser();
+    if (!browser) {
+        disabled = true;
+        if (timer) {
+            clearInterval(timer);
+            timer = null;
+        }
+        return null;
+    }
+    try {
+        const ctx = await browser.newContext({ viewport: VIEWPORT, deviceScaleFactor: 1 });
+        return await fn(ctx);
+    }
+    finally {
+        await browser.close();
+    }
+}
 /**
  * One scan: capture + store a thumbnail for every published app that still has none. Returns the
  * number captured. Exported so a manual trigger / test can run a single pass on demand.
@@ -62,74 +137,20 @@ export async function runScreenshotCapturePass(config, storage) {
         }
         if (missing.length === 0)
             return 0;
-        const browser = await launchBrowser();
-        if (!browser) {
-            disabled = true;
-            if (timer) {
-                clearInterval(timer);
-                timer = null;
-            }
-            return 0;
-        }
-        try {
-            const ctx = await browser.newContext({ viewport: VIEWPORT, deviceScaleFactor: 1 });
-            const base = config.baseUrl.replace(/\/+$/, '');
+        await withBrowser(async (ctx) => {
             for (const app of missing) {
-                const page = await ctx.newPage();
                 try {
-                    // Render the app's STORED HTML directly (fulfill the main document) rather than navigating
-                    // to the public inline URL: that URL 301-redirects to the app origin under H-2, which 404s
-                    // on a node with no separate app host (e.g. local dev) and would capture an error page.
-                    // Sub-resources (libs, images, API) still load against the node and the page URL stays the
-                    // node URL so relative paths resolve. Opened anonymously; 'load' (not networkidle) since
-                    // polling/SSE apps never go idle.
-                    const full = await storage.getAppByOwnerName(app.ownerName, app.filename);
-                    // storage returns `data` as a Uint8Array (Prisma 6 Bytes); a plain Uint8Array's
-                    // .toString('utf8') comma-joins the byte values instead of decoding — wrap in Buffer.
-                    const html = full?.data ? Buffer.from(full.data).toString('utf8') : null;
-                    const url = `${base}/v1/apps/${encodeURIComponent(app.ownerName)}/${encodeURIComponent(app.filename)}?mode=inline`;
-                    if (html) {
-                        let fulfilled = false;
-                        await page.route('**/*', (route) => {
-                            if (!fulfilled && route.request().resourceType() === 'document') {
-                                fulfilled = true;
-                                route.fulfill({ status: 200, contentType: 'text/html', body: html });
-                            }
-                            else {
-                                route.continue();
-                            }
-                        });
-                    }
-                    await page.goto(url, { waitUntil: 'load', timeout: PAGE_TIMEOUT });
-                    // Settle wait: many apps fetch data / render after 'load', so capturing immediately yields a
-                    // blank page. Default 6s; tune with AIMEAT_SCREENSHOT_SETTLE_MS.
-                    await page.waitForTimeout(Math.max(0, config.screenshotSettleMs));
-                    const jpeg = await page.screenshot({ type: 'jpeg', quality: 80 });
-                    await storage.createStorageFile({
-                        key: `apps/screenshots/${app.filename}`,
-                        ownerGaii: app.ownerGaii, // match the app row's bucket so the GET route finds it
-                        visibility: 'public',
-                        mimeType: 'image/jpeg',
-                        size: jpeg.length,
-                        data: jpeg,
-                        createdAt: new Date().toISOString(),
-                    });
+                    await renderAndStore(ctx, config, storage, app);
                     captured++;
                 }
                 catch (e) {
                     logger.warn(`Screenshot auto-capture failed for ${app.ownerName}/${app.filename}: ${e.message}`);
                 }
-                finally {
-                    await page.close();
-                }
-            }
-            if (captured > 0) {
-                logger.info(`Screenshot auto-capture: ${captured}/${missing.length} app thumbnail(s) generated.`);
-                emitChange('apps');
             }
-        }
-        finally {
-            await browser.close();
+        });
+        if (captured > 0) {
+            logger.info(`Screenshot auto-capture: ${captured}/${missing.length} app thumbnail(s) generated.`);
+            emitChange('apps');
         }
     }
     catch (e) {
@@ -140,6 +161,67 @@ export async function runScreenshotCapturePass(config, storage) {
     }
     return captured;
 }
+/**
+ * Capture ONE app now, for a caller who asked.
+ *
+ * Separate from the batch on purpose. The batch may skip, retry next interval and answer with a
+ * count; someone who just published an app and wants to look at it needs either a picture or a
+ * reason. The batch's `running` flag is deliberately NOT consulted here: a scan in progress is no
+ * reason to refuse a person, and the two writing the same key is an upsert either way.
+ *
+ * Rendering is the most expensive thing this node does per request, so it is throttled per owner.
+ */
+export async function captureAppScreenshot(config, storage, app) {
+    if (disabled) {
+        return {
+            ok: false, status: 503, code: 'NO_BROWSER',
+            message: 'This node has no usable browser, so it cannot render app screenshots. An operator can '
+                + 'install one with `npx playwright install --with-deps chromium`.',
+        };
+    }
+    // The lookup lives here rather than at each door: it decides both "is there anything to render"
+    // and WHICH storage bucket the thumbnail belongs in, and a door that answered the first half for
+    // itself would be the second implementation of the same decision.
+    const live = await storage.getAppByOwnerName(app.ownerName, app.filename);
+    if (!live) {
+        return {
+            ok: false, status: 404, code: 'NOT_FOUND',
+            message: `No published app "${app.filename}" to render. Publish it first; a draft has no public `
+                + 'page to photograph.',
+        };
+    }
+    const ownerGaii = live.ownerGaii;
+    const perHour = Math.max(1, config.screenshotOnDemandPerHour);
+    const now = Date.now();
+    const recent = (onDemandHistory.get(ownerGaii) ?? []).filter((t) => now - t < 3_600_000);
+    if (recent.length >= perHour) {
+        const waitMin = Math.ceil((3_600_000 - (now - recent[0])) / 60_000);
+        return {
+            ok: false, status: 429, code: 'RATE_LIMITED',
+            message: `Screenshot limit reached (${perHour} per hour). Try again in about ${waitMin} minute(s).`,
+        };
+    }
+    recent.push(now);
+    onDemandHistory.set(ownerGaii, recent);
+    try {
+        const bytes = await withBrowser((ctx) => renderAndStore(ctx, config, storage, { ownerName: app.ownerName, ownerGaii, filename: app.filename }));
+        if (bytes === null) {
+            return {
+                ok: false, status: 503, code: 'NO_BROWSER',
+                message: 'This node has no usable browser, so it cannot render app screenshots.',
+            };
+        }
+        emitChange('apps');
+        logger.info(`Screenshot captured on demand: ${app.ownerName}/${app.filename} (${bytes} bytes)`);
+        return { ok: true, sizeBytes: bytes };
+    }
+    catch (e) {
+        return {
+            ok: false, status: 502, code: 'RENDER_FAILED',
+            message: `The page did not render: ${e.message}`,
+        };
+    }
+}
 /** Start the interval-driven auto-capture job (no-op unless config.screenshotAutoCapture is on). */
 export function startScreenshotAutoCapture(config, storage) {
     if (!config.screenshotAutoCapture)

package/dist/src/services/screenshot-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"screenshot-capture.js","sourceRoot":"","sources":["../../../src/services/screenshot-capture.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,mBAAmB,GAAG,MAAM,CAAC,CAAC,4DAA4D;AAEhG,IAAI,OAAO,GAAG,KAAK,CAAC;AACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,IAAI,KAAK,GAA0B,IAAI,CAAC;AAExC;;;;;GAKG;AACH,KAAK,UAAU,aAAa;IAC1B,IAAI,QAA+G,CAAC;IACpH,IAAI,CAAC;QACH,CAAC,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAA6C,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAA+C;QAC3D,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE;QAC3C,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE;QAC7C,EAAE,KAAK,EAAE,qBAAqB,EAAE;KACjC,CAAC;IACF,IAAI,OAAgB,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,CAAC,CAAC,0BAA0B;QAAC,CAAC;IACzD,CAAC;IACD,+FAA+F;IAC/F,uGAAuG;IACvG,MAAM,CAAC,IAAI,CAAC,0EAA0E;UAClF,6DAA6D,GAAG,CAAE,OAAiB,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC;IAChH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAoB,EAAE,OAAgB;IACnF,IAAI,OAAO,IAAI,QAAQ;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,GAAG,IAAI,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,MAAM,OAAO,GAAsE,EAAE,CAAC;QACtF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7F,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,KAAK,EAAE,CAAC;gBAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;YAAC,CAAC;YAClD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAQhF,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,2FAA2F;oBAC3F,2FAA2F;oBAC3F,wFAAwF;oBACxF,2FAA2F;oBAC3F,yFAAyF;oBACzF,kCAAkC;oBAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC1E,gFAAgF;oBAChF,sFAAsF;oBACtF,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBACzE,MAAM,GAAG,GAAG,GAAG,IAAI,YAAY,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;oBACnH,IAAI,IAAI,EAAE,CAAC;wBACT,IAAI,SAAS,GAAG,KAAK,CAAC;wBACtB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;4BACjC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,KAAK,UAAU,EAAE,CAAC;gCAChE,SAAS,GAAG,IAAI,CAAC;gCACjB,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;4BACvE,CAAC;iCAAM,CAAC;gCACN,KAAK,CAAC,QAAQ,EAAE,CAAC;4BACnB,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;oBACnE,6FAA6F;oBAC7F,iEAAiE;oBACjE,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;oBAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;oBAClE,MAAM,OAAO,CAAC,iBAAiB,CAAC;wBAC9B,GAAG,EAAE,oBAAoB,GAAG,CAAC,QAAQ,EAAE;wBACvC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAI,uDAAuD;wBACnF,UAAU,EAAE,QAAQ;wBACpB,QAAQ,EAAE,YAAY;wBACtB,IAAI,EAAE,IAAI,CAAC,MAAM;wBACjB,IAAI,EAAE,IAAI;wBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACpC,CAAC,CAAC;oBACH,QAAQ,EAAE,CAAC;gBACb,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,sCAAsC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9G,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,4BAA4B,QAAQ,IAAI,OAAO,CAAC,MAAM,8BAA8B,CAAC,CAAC;gBAClG,UAAU,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,uCAAwC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;YAAS,CAAC;QACT,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,0BAA0B,CAAC,MAAoB,EAAE,OAAgB;IAC/E,IAAI,CAAC,MAAM,CAAC,qBAAqB;QAAE,OAAO;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAChE,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC3F,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACpG,IAAI,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,8CAA8C;IAC9E,MAAM,CAAC,IAAI,CAAC,oDAAoD,OAAO,+CAA+C,CAAC,CAAC;AAC1H,CAAC"}
+{"version":3,"file":"screenshot-capture.js","sourceRoot":"","sources":["../../../src/services/screenshot-capture.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,mBAAmB,GAAG,MAAM,CAAC,CAAC,4DAA4D;AAEhG,IAAI,OAAO,GAAG,KAAK,CAAC;AACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,IAAI,KAAK,GAA0B,IAAI,CAAC;AAExC;;;;GAIG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAoB,CAAC;AAQpD;;;;;GAKG;AACH,KAAK,UAAU,aAAa;IAC1B,IAAI,QAA+G,CAAC;IACpH,IAAI,CAAC;QACH,CAAC,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAA6C,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAA+C;QAC3D,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE;QAC3C,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE;QAC7C,EAAE,KAAK,EAAE,qBAAqB,EAAE;KACjC,CAAC;IACF,IAAI,OAAgB,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,CAAC,CAAC,0BAA0B;QAAC,CAAC;IACzD,CAAC;IACD,+FAA+F;IAC/F,uGAAuG;IACvG,MAAM,CAAC,IAAI,CAAC,0EAA0E;UAClF,6DAA6D,GAAG,CAAE,OAAiB,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC;IAChH,OAAO,IAAI,CAAC;AACd,CAAC;AAeD;;;;;;;;GAQG;AACH,KAAK,UAAU,cAAc,CAC3B,GAAc,EAAE,MAAoB,EAAE,OAAgB,EAAE,GAAc;IAEtE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1E,iGAAiG;QACjG,oDAAoD;QACpD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,MAAM,GAAG,GAAG,GAAG,IAAI,YAAY,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnH,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,KAAK,UAAU,EAAE,CAAC;oBAChE,SAAS,GAAG,IAAI,CAAC;oBACjB,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvE,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,kGAAkG;QAClG,+EAA+E;QAC/E,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,CAAC,iBAAiB,CAAC;YAC9B,GAAG,EAAE,oBAAoB,GAAG,CAAC,QAAQ,EAAE;YACvC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAI,uDAAuD;YACnF,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,KAAK,UAAU,WAAW,CAAI,EAAkC;IAC9D,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,KAAK,EAAE,CAAC;YAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAc,CAAC;QAChG,OAAO,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAoB,EAAE,OAAgB;IACnF,IAAI,OAAO,IAAI,QAAQ;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,GAAG,IAAI,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7F,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEnC,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;oBAChD,QAAQ,EAAE,CAAC;gBACb,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,sCAAsC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,4BAA4B,QAAQ,IAAI,OAAO,CAAC,MAAM,8BAA8B,CAAC,CAAC;YAClG,UAAU,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,uCAAwC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;YAAS,CAAC;QACT,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAoB,EAAE,OAAgB,EAAE,GAA4C;IAEpF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY;YAC1C,OAAO,EAAE,wFAAwF;kBAC7F,iEAAiE;SACtE,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,iGAAiG;IACjG,kEAAkE;IAClE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW;YACzC,OAAO,EAAE,qBAAqB,GAAG,CAAC,QAAQ,uDAAuD;kBAC7F,qBAAqB;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACrE,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc;YAC5C,OAAO,EAAE,6BAA6B,OAAO,kCAAkC,OAAO,aAAa;SACpG,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAC1E,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO;gBACL,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY;gBAC1C,OAAO,EAAE,uEAAuE;aACjF,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,SAAS,CAAC,CAAC;QAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe;YAC7C,OAAO,EAAE,4BAA6B,CAAW,CAAC,OAAO,EAAE;SAC5D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,0BAA0B,CAAC,MAAoB,EAAE,OAAgB;IAC/E,IAAI,CAAC,MAAM,CAAC,qBAAqB;QAAE,OAAO;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAChE,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC3F,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACpG,IAAI,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,8CAA8C;IAC9E,MAAM,CAAC,IAAI,CAAC,oDAAoD,OAAO,+CAA+C,CAAC,CAAC;AAC1H,CAAC"}

package/dist/src/services/skill-bundle/generator.js

@@ -359,7 +359,7 @@ When the owner sends one of these slash-prefixed messages, treat it as a command
 When the owner assigns shared tags in the Data Access tab, use those tags as same-owner collaboration areas. Write shared project state, handoff notes, queues, and team context under \`agents.tag.<tag>.*\` with \`visibility: "owner"\` and \`tags: ["<tag>"]\`. Read the area with \`GET /v1/memory?owner_scope=true&prefix=agents.tag.<tag>.&tags=<tag>\` or the equivalent \`aimeat_memory_list\` parameters. Do not put private local secrets in shared tag memory.
 
 ### Publish Knowledge Artifacts
-If onboarding or later work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of writing an arbitrary \`research.*\` memory placeholder. Follow \`/llms.txt\` and use \`POST /v1/knowledge/import\` for a new package, \`aimeat_knowledge_contribute\` for entries in an existing package, and \`aimeat_storage_upload\` for large source files or attachments.
+If onboarding or later work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of writing an arbitrary \`research.*\` memory placeholder. Follow \`/llms-full.txt\` and use \`POST /v1/knowledge/import\` for a new package, \`aimeat_knowledge_contribute\` for entries in an existing package, and \`aimeat_storage_upload\` for large source files or attachments.
 
 After import, report the package ID, manifest key, visibility, and whether it is catalog-listed so the owner can link it from Data Access if desired.
 

package/dist/src/services/skill-bundle/generic-adapter.js

@@ -200,7 +200,7 @@ POST ${ctx.nodeUrl}/v1/memory
 If the owner assigns shared tags in the Data Access tab, those tags are collaboration labels for same-owner agents. Use \`agents.tag.<tag>.*\` keys for shared project state, handoff notes, queues, and team context. Write shared entries with \`visibility: "owner"\` and \`tags: ["<tag>"]\`, then list the area with \`owner_scope=true\`, \`prefix=agents.tag.<tag>.\`, and the same tag filter. Do not store private agent-local secrets in shared tag memory.
 
 ### Publish Knowledge Artifacts
-If setup or work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of a placeholder memory key. Follow \`/llms.txt\`: use \`POST /v1/knowledge/import\` for new packages, \`aimeat_knowledge_contribute\` for entries in existing packages, and \`aimeat_storage_upload\` for large source files or attachments. Report the package ID and manifest key to the owner.
+If setup or work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of a placeholder memory key. Follow \`/llms-full.txt\`: use \`POST /v1/knowledge/import\` for new packages, \`aimeat_knowledge_contribute\` for entries in existing packages, and \`aimeat_storage_upload\` for large source files or attachments. Report the package ID and manifest key to the owner.
 
 ## References
 - references/api-overview.md -- Endpoints, auth, response format

package/dist/src/services/skill-bundle/hermes-adapter.js

@@ -150,7 +150,7 @@ POST ${ctx.nodeUrl}/v1/memory
 If the owner assigns shared tags in the Data Access tab, those tags are collaboration labels for same-owner agents. Use \`agents.tag.<tag>.*\` keys for shared project state, handoff notes, queues, and team context. Write shared entries with \`visibility: "owner"\` and \`tags: ["<tag>"]\`, then list the area with \`owner_scope=true\`, \`prefix=agents.tag.<tag>.\`, and the same tag filter. Do not store private agent-local secrets in shared tag memory.
 
 ### Publish Knowledge Artifacts
-If setup or work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of a placeholder memory key. Follow \`/llms.txt\`: use \`POST /v1/knowledge/import\` for new packages, \`aimeat_knowledge_contribute\` for entries in existing packages, and \`aimeat_storage_upload\` for large source files or attachments. Report the package ID and manifest key to the owner.
+If setup or work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of a placeholder memory key. Follow \`/llms-full.txt\`: use \`POST /v1/knowledge/import\` for new packages, \`aimeat_knowledge_contribute\` for entries in existing packages, and \`aimeat_storage_upload\` for large source files or attachments. Report the package ID and manifest key to the owner.
 
 ## References
 See references/ directory for detailed API documentation:

package/dist/src/services/storage-file-write.d.ts

@@ -1,6 +1,6 @@
 /**
  * @file src/services/storage-file-write.ts
- * @description Storing one binary file, once, for every surface that can store one.
+ * @description Storing and removing one binary file, once, for every surface that can do either.
  *
  *   WHY THIS FILE EXISTS. `POST /v1/storage` and `aimeat_storage_upload` are the same capability, and
  *   the two copies had drifted in the way that costs money and access rather than tidiness:
@@ -28,12 +28,19 @@
  *   - StorageWriteDeps / StorageFileInput / StorageFileWriteResult — the contract
  *   - writeStorageFile() — the inline write, in order, with the fence first
  *   - mintStorageUploadUrl() — the presigned representation of the same write
+ *   - removeStorageFile() — the delete, sharing the same key fence and change events
  * @usage
  *   const out = await writeStorageFile({ storage, config, emitResourceUpdated }, gaii, input);
  *   if (!out.ok) return renderRefusal(out);   // each door renders its own way
  * @version-history
  *   v1.0.0 — 2026-08-11 — Initial (August 2026 audit step 8, unit storage-files). Collapses
  *     POST /v1/storage and aimeat_storage_upload onto one write.
+ *   v1.1.0 — 2026-08-15 — removeStorageFile(): the delete, which had one door (DELETE /v1/storage)
+ *     and no tool, so an agent could store a file over MCP and never take it back. Written here
+ *     rather than in the new tool because the anonymous key fence was already a hand-copied second
+ *     copy on that route, and because the route emitted only `files` while the upload emits `files`
+ *     and `memory` — a delete moves the byte budget the memory view renders exactly as an upload
+ *     does, and the two views disagreed about it.
  */
 import type { AimeatConfig } from '../config.js';
 import type { Storage, StorageFileRecord } from '../storage/interface.js';
@@ -78,6 +85,34 @@ export type StorageFileWriteResult = {
 } | StorageWriteRefusal;
 /** Store one file under `ownerGaii`, with every gate and side effect the capability carries. */
 export declare function writeStorageFile(deps: StorageWriteDeps, ownerGaii: string, input: StorageFileInput): Promise<StorageFileWriteResult>;
+export interface StorageDeleteRefusal {
+    ok: false;
+    status: number;
+    code: 'INVALID_INPUT' | 'FORBIDDEN' | 'NOT_FOUND' | 'ACCESS_DENIED';
+    message: string;
+}
+export type StorageFileDeleteResult = {
+    ok: true;
+    key: string;
+    size: number;
+    mimeType: string;
+    visibility: StorageFileRecord['visibility'];
+} | StorageDeleteRefusal;
+/**
+ * Remove one file from `ownerGaii`'s namespace. Irreversible: there is no version history behind a
+ * stored file the way there is behind a memory record, so what this deletes is gone.
+ *
+ * THE ORDER IS THE POINT. Fence, then read, then compare, then delete — a refusal must happen before
+ * anything is removed, which is the same rule the write follows for the quota. It also lets the
+ * caller be told WHAT it deleted (size, type), because those are read before the row goes.
+ *
+ * WHY NO CROSS-OWNER FORM. Reading has one, and it is the reason aimeat_storage_download takes a
+ * reference: a file is keyed by (owner, key) and an agent legitimately reads its owner's uploads.
+ * Deleting does not get the same door. `getStorageFile(ownerGaii, key)` is namespaced to the caller,
+ * so a file belonging to anyone else is simply absent here, and the ownership comparison below is a
+ * second lock on a door that is already shut rather than the lock that shuts it.
+ */
+export declare function removeStorageFile(deps: StorageWriteDeps, ownerGaii: string, key: string): Promise<StorageFileDeleteResult>;
 export interface StorageUploadUrlInput {
     key: string;
     mimeType?: string;

package/dist/src/services/storage-file-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-file-write.d.ts","sourceRoot":"","sources":["../../../src/services/storage-file-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAM1E;+EAC+E;AAC/E,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAEnD,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,uBAAuB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,GAAG,WAAW,GAAG,gBAAgB,CAAC;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,sBAAsB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7D,mBAAmB,CAAC;AAmB1B,gGAAgG;AAChG,wBAAsB,gBAAgB,CAClC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,gBAAgB,GACxB,OAAO,CAAC,sBAAsB,CAAC,CA2DjC;AAED,MAAM,WAAW,qBAAqB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,sBAAsB,GAC5B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;CAC5B,GACC,mBAAmB,CAAC;AAE1B;;;;GAIG;AACH,wBAAsB,oBAAoB,CACtC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAgCjC"}
+{"version":3,"file":"storage-file-write.d.ts","sourceRoot":"","sources":["../../../src/services/storage-file-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAM1E;+EAC+E;AAC/E,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAEnD,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,uBAAuB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,GAAG,WAAW,GAAG,gBAAgB,CAAC;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,sBAAsB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7D,mBAAmB,CAAC;AAgC1B,gGAAgG;AAChG,wBAAsB,gBAAgB,CAClC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,gBAAgB,GACxB,OAAO,CAAC,sBAAsB,CAAC,CA2DjC;AAED,MAAM,WAAW,oBAAoB;IACjC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,GAAG,WAAW,GAAG,WAAW,GAAG,eAAe,CAAC;IACpE,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,uBAAuB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAA;CAAE,GACtG,oBAAoB,CAAC;AAE3B;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACnC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACZ,OAAO,CAAC,uBAAuB,CAAC,CAmClC;AAED,MAAM,WAAW,qBAAqB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,sBAAsB,GAC5B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;CAC5B,GACC,mBAAmB,CAAC;AAE1B;;;;GAIG;AACH,wBAAsB,oBAAoB,CACtC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAgCjC"}

package/dist/src/services/storage-file-write.js

@@ -6,8 +6,9 @@ import { isAnonymousGaii } from '../routes/memory/shared.js';
  *  the token is signed with are the same value, so they cannot drift apart. */
 export const STORAGE_UPLOAD_URL_TTL_SECONDS = 3600;
 /**
- * May this principal write this key at all. Both representations of the upload run it, which is the
- * point: the fence is on the write, not on the shape the caller happens to ask for.
+ * May this principal touch this key at all. Every representation of the upload runs it, and so does
+ * the delete, which is the point: the fence is on the act, not on the shape the caller happens to
+ * ask for. The DELETE route carried its own copy of this until v1.1.0.
  */
 function checkKey(ownerGaii, key) {
     if (!key) {
@@ -16,7 +17,7 @@ function checkKey(ownerGaii, key) {
     if (isAnonymousGaii(ownerGaii) && !key.startsWith('anonymous/')) {
         return {
             ok: false, status: 403, code: 'FORBIDDEN',
-            message: 'Anonymous agents can only upload to keys prefixed with "anonymous/"',
+            message: 'Anonymous agents can only use keys prefixed with "anonymous/"',
         };
     }
     return null;
@@ -74,6 +75,51 @@ export async function writeStorageFile(deps, ownerGaii, input) {
     emitChange('memory');
     return { ok: true, file, overageMorsels: quota.overageMorsels };
 }
+/**
+ * Remove one file from `ownerGaii`'s namespace. Irreversible: there is no version history behind a
+ * stored file the way there is behind a memory record, so what this deletes is gone.
+ *
+ * THE ORDER IS THE POINT. Fence, then read, then compare, then delete — a refusal must happen before
+ * anything is removed, which is the same rule the write follows for the quota. It also lets the
+ * caller be told WHAT it deleted (size, type), because those are read before the row goes.
+ *
+ * WHY NO CROSS-OWNER FORM. Reading has one, and it is the reason aimeat_storage_download takes a
+ * reference: a file is keyed by (owner, key) and an agent legitimately reads its owner's uploads.
+ * Deleting does not get the same door. `getStorageFile(ownerGaii, key)` is namespaced to the caller,
+ * so a file belonging to anyone else is simply absent here, and the ownership comparison below is a
+ * second lock on a door that is already shut rather than the lock that shuts it.
+ */
+export async function removeStorageFile(deps, ownerGaii, key) {
+    const { storage } = deps;
+    const fenced = checkKey(ownerGaii, key);
+    if (fenced)
+        return fenced;
+    const existing = await storage.getStorageFile(ownerGaii, key);
+    if (!existing) {
+        return {
+            ok: false, status: 404, code: 'NOT_FOUND',
+            message: `File not found in your namespace: ${key}. This deletes only your own files — a file someone else owns is not reachable here, whatever you may be allowed to read.`,
+        };
+    }
+    if (existing.ownerGaii !== ownerGaii) {
+        return { ok: false, status: 403, code: 'ACCESS_DENIED', message: 'You can only delete your own files' };
+    }
+    const deleted = await storage.deleteStorageFile(ownerGaii, key);
+    if (!deleted) {
+        // The row was there a moment ago and is not now. Another door removed it in between, which
+        // is the caller's desired end state, but saying "deleted" would claim work we did not do.
+        return { ok: false, status: 404, code: 'NOT_FOUND', message: `File not found: ${key}` };
+    }
+    deps.emitResourceUpdated?.(ownerGaii, `aimeat://storage/${encodeURIComponent(key)}`);
+    deps.emitResourceListChanged?.(ownerGaii);
+    // Both views, for the same reason the write emits both: the file leaves the files list AND frees
+    // bytes in the budget the memory view renders. The route emitted only 'files'.
+    emitChange('files');
+    emitChange('memory');
+    return {
+        ok: true, key, size: existing.size, mimeType: existing.mimeType, visibility: existing.visibility,
+    };
+}
 /**
  * Mint a presigned URL for the same write. The options the caller states here ride in the SIGNED
  * token (PRESIGNED_META_KEYS.storage) and are applied by PUT /v1/upload/:token, so what was asked

package/dist/src/services/storage-file-write.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage-file-write.js","sourceRoot":"","sources":["../../../src/services/storage-file-write.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D;+EAC+E;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAwCnD;;;GAGG;AACH,SAAS,QAAQ,CAAC,SAAiB,EAAE,GAAW;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW;YACzC,OAAO,EAAE,qEAAqE;SACjF,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,IAAsB,EACtB,SAAiB,EACjB,KAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEjC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACjD,gGAAgG;IAChG,6CAA6C;IAC7C,IAAI,UAAU,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACpD,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe;YAC7C,OAAO,EAAE,+GAA+G;SAC3H,CAAC;IACN,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAChE,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU;YACjE,OAAO,EAAE,qBAAqB,MAAM,CAAC,oBAAoB,UAAU;SACtE,CAAC;IACN,CAAC;IAED,+FAA+F;IAC/F,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,MAAO,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;QACzC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS;QACT,UAAU;QACV,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC3D,YAAY,EAAE,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,0BAA0B;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI;QACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,wDAAwD;IACxD,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,oBAAoB,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,uBAAuB,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1C,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,UAAU,CAAC,QAAQ,CAAC,CAAC;IAErB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;AACpE,CAAC;AAsBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,IAAsB,EACtB,SAAiB,EACjB,KAA4B;IAE5B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,IAAI,0BAA0B,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;QACpC,GAAG,EAAE,SAAS;QACd,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,eAAe,CAAC,SAAS,EAAE;YAC7B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,WAAW;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;YACzC,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,cAAc,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS;SAClD,CAAC;QACF,QAAQ;QACR,WAAW;KACd,EAAE,8BAA8B,CAAC,CAAC;IAEnC,OAAO;QACH,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,GAAG,MAAM,CAAC,OAAO,cAAc,KAAK,EAAE;QACjD,WAAW;QACX,QAAQ;QACR,gBAAgB,EAAE,8BAA8B;KACnD,CAAC;AACN,CAAC"}
+{"version":3,"file":"storage-file-write.js","sourceRoot":"","sources":["../../../src/services/storage-file-write.ts"],"names":[],"mappings":"AA8CA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D;+EAC+E;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAoDnD;;;;GAIG;AACH,SAAS,QAAQ,CAAC,SAAiB,EAAE,GAAW;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW;YACzC,OAAO,EAAE,+DAA+D;SAC3E,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,IAAsB,EACtB,SAAiB,EACjB,KAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEjC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACjD,gGAAgG;IAChG,6CAA6C;IAC7C,IAAI,UAAU,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACpD,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe;YAC7C,OAAO,EAAE,+GAA+G;SAC3H,CAAC;IACN,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAChE,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU;YACjE,OAAO,EAAE,qBAAqB,MAAM,CAAC,oBAAoB,UAAU;SACtE,CAAC;IACN,CAAC;IAED,+FAA+F;IAC/F,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,MAAO,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;QACzC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS;QACT,UAAU;QACV,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC3D,YAAY,EAAE,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,0BAA0B;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI;QACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,wDAAwD;IACxD,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,oBAAoB,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,uBAAuB,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1C,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,UAAU,CAAC,QAAQ,CAAC,CAAC;IAErB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;AACpE,CAAC;AAaD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,IAAsB,EACtB,SAAiB,EACjB,GAAW;IAEX,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEzB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW;YACzC,OAAO,EAAE,qCAAqC,GAAG,2HAA2H;SAC/K,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC5G,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,2FAA2F;QAC3F,0FAA0F;QAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,GAAG,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,IAAI,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,oBAAoB,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,uBAAuB,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1C,iGAAiG;IACjG,+EAA+E;IAC/E,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,UAAU,CAAC,QAAQ,CAAC,CAAC;IAErB,OAAO;QACH,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU;KACnG,CAAC;AACN,CAAC;AAsBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,IAAsB,EACtB,SAAiB,EACjB,KAA4B;IAE5B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,IAAI,0BAA0B,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;QACpC,GAAG,EAAE,SAAS;QACd,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,eAAe,CAAC,SAAS,EAAE;YAC7B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,WAAW;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;YACzC,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,cAAc,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS;SAClD,CAAC;QACF,QAAQ;QACR,WAAW;KACd,EAAE,8BAA8B,CAAC,CAAC;IAEnC,OAAO;QACH,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,GAAG,MAAM,CAAC,OAAO,cAAc,KAAK,EAAE;QACjD,WAAW;QACX,QAAQ;QACR,gBAAgB,EAAE,8BAA8B;KACnD,CAAC;AACN,CAAC"}

package/dist/src/services/task-outcome.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @file src/services/task-outcome.ts
+ * @description What a finished task actually produced, in one place, for every door that reports a
+ *   task.
+ *
+ *   THE HOLE THIS CLOSES, and it was found by a crew rather than by us. A task-runner completed a
+ *   real job in 104 seconds, the task went to `done`, and the answer could not be read back from
+ *   anywhere: `aimeat_task_get` returns fifteen fields and not one of them is the output. The
+ *   completion MESSAGE — the agent's own sentence about what it did — is written to the 'completed'
+ *   event and nowhere else, and `deliverableKey` is on the record but was never returned. So the
+ *   caller saw `status: "done"` and had to already know that a second, differently-shaped endpoint
+ *   exists before it could find out what happened. A finished task whose result nobody can reach is
+ *   indistinguishable from one that produced nothing.
+ *
+ *   WHY NOT A NEW COLUMN. The two facts already exist: the sentence is on the terminal event, the
+ *   pointer is on the record. A `completionMessage` column would be a third copy of something
+ *   stored twice, on both providers, with a migration — to fix a READ. The read is what was broken.
+ *
+ *   The deliverable is returned as an ADDRESS, not as content. It is a memory key under the agent's
+ *   own namespace and may be any size; a task read that inlined it would make every listing as
+ *   expensive as its largest output.
+ * @structure taskOutcome() — the terminal event plus the deliverable pointer, or null while running
+ * @usage
+ *   import { taskOutcome } from '../services/task-outcome.js';
+ *   const outcome = await taskOutcome(storage, task);   // null unless done/failed
+ * @version-history
+ *   v1.0.0 — 2026-08-16 — Initial. Reported by crewaimeat-dev against aimeat-crewai 0.20.0: a
+ *     completed task-runner leaves its output where the caller cannot read it.
+ */
+import type { Storage, AgentTaskRecord } from '../storage/interface.js';
+/** What a finished task produced. Null while it is still running — an unfinished task has no
+ *  outcome, and reporting an empty one would read as "finished with nothing". */
+export interface TaskOutcome {
+    /** 'done' or 'failed' — the same word the terminal event carries. */
+    state: 'done' | 'failed';
+    /** The agent's own sentence about what it did, from the terminal event. */
+    message: string;
+    at: string;
+    /** Memory key under the AGENT's namespace where the deliverable was published, when one was
+     *  named. The pointer, never the content: an output may be megabytes. */
+    deliverable_key?: string;
+    /** A ready-to-follow address for that key, so a caller does not have to assemble one. */
+    deliverable_url?: string;
+}
+/**
+ * The outcome of a task, or null if it has not finished.
+ *
+ * Reads the events newest-first and takes the first terminal one, so a task that was completed,
+ * reopened and completed again reports the LATEST completion rather than the first — which is what
+ * "what happened" means to whoever is asking.
+ */
+export declare function taskOutcome(storage: Storage, task: AgentTaskRecord): Promise<TaskOutcome | null>;
+//# sourceMappingURL=task-outcome.d.ts.map

package/dist/src/services/task-outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-outcome.d.ts","sourceRoot":"","sources":["../../../src/services/task-outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAExE;iFACiF;AACjF,MAAM,WAAW,WAAW;IACxB,qEAAqE;IACrE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;IACzB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX;6EACyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAID;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAmBtG"}

package/dist/src/services/task-outcome.js

@@ -0,0 +1,28 @@
+const TERMINAL = new Set(['completed', 'failed']);
+/**
+ * The outcome of a task, or null if it has not finished.
+ *
+ * Reads the events newest-first and takes the first terminal one, so a task that was completed,
+ * reopened and completed again reports the LATEST completion rather than the first — which is what
+ * "what happened" means to whoever is asking.
+ */
+export async function taskOutcome(storage, task) {
+    if (task.status !== 'done' && task.status !== 'failed')
+        return null;
+    const { events } = await storage.listTaskEvents(task.id, { page: 1, perPage: 50 });
+    // listTaskEvents orders oldest-first; the terminal one is at the end.
+    const terminal = [...events].reverse().find(e => TERMINAL.has(e.type));
+    return {
+        state: task.status,
+        // A task can reach a terminal state without a terminal event — an owner-side cancel, an
+        // older record from before the event existed. Saying so beats an empty string that reads
+        // like an agent who had nothing to report.
+        message: terminal?.message ?? '(no completion message was recorded)',
+        at: terminal?.timestamp ?? task.completedAt ?? task.updatedAt,
+        ...(task.deliverableKey ? {
+            deliverable_key: task.deliverableKey,
+            deliverable_url: `/v1/memory/${encodeURIComponent(task.agentGaii)}/${encodeURIComponent(task.deliverableKey)}`,
+        } : {}),
+    };
+}
+//# sourceMappingURL=task-outcome.js.map

package/dist/src/services/task-outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-outcome.js","sourceRoot":"","sources":["../../../src/services/task-outcome.ts"],"names":[],"mappings":"AA8CA,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,IAAqB;IACrE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEpE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvE,OAAO;QACH,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,wFAAwF;QACxF,yFAAyF;QACzF,2CAA2C;QAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,sCAAsC;QACpE,EAAE,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS;QAC7D,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YACtB,eAAe,EAAE,IAAI,CAAC,cAAc;YACpC,eAAe,EAAE,cAAc,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;SACjH,CAAC,CAAC,CAAC,EAAE,CAAC;KACV,CAAC;AACN,CAAC"}

package/dist/src/services/workflow/engine-human.d.ts

@@ -6,6 +6,13 @@
  *   Extracted from engine.ts to satisfy max-file-lines.
  * @usage import { validateHumanAnswer, applyHumanAnswer } from './engine-human.js';
  * @version-history
+ *   v1.2.0 — 2026-08-15 — The upgrade requires a PERSON, which the paragraph guarding it always
+ *     said and the code never asked. An agent could call aimeat_workflow_answer on the step holding
+ *     its own draft and the node stamped that content 'editorial-control' with the note "reviewed
+ *     by <the agent>", turning the public disclosure label from "no human editorial review" into
+ *     the reviewed wording with nobody having read the bytes. `byIsHuman` is set by the door that
+ *     knows the principal class and absent everywhere else, so agents keep answering and stop
+ *     upgrading. E2E test-quality audit finding A18.
  *   v1.1.0 — 2026-08-01 — TARGET-058 Phase 4: a human-input step that names `reviews_key` re-stamps
  *     the reviewed content with humanInvolvement 'editorial-control'. This is the ONLY place in
  *     the engine that may upgrade that field, and a watchdog timeout default never does — nobody
@@ -20,6 +27,14 @@ export interface HumanAnswerValue {
     pick: string;
     other?: string;
     by: string;
+    /**
+     * Was the answerer a PERSON? Absent means no, deliberately: the upgrade below is the one thing in
+     * the engine that can turn "no human editorial review" into "reviewed by a person", so a caller
+     * has to say so on purpose. `by` alone cannot answer it — an agent's GAII and a human's GHII are
+     * both just strings here, and inferring humanness from their shape would break the moment a new
+     * principal class arrives.
+     */
+    byIsHuman?: boolean;
 }
 /**
  * Validate an incoming answer against the question PINNED at ask time (not the current def — a

package/dist/src/services/workflow/engine-human.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine-human.d.ts","sourceRoot":"","sources":["../../../../src/services/workflow/engine-human.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGpD,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAOxH;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GACjH,OAAO,CAAC,IAAI,CAAC,CAwDf"}
+{"version":3,"file":"engine-human.d.ts","sourceRoot":"","sources":["../../../../src/services/workflow/engine-human.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGpD,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAOxH;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GACjH,OAAO,CAAC,IAAI,CAAC,CAiEf"}