@cmdoss/memwal-sdk 0.6.0

package/dist/access/PermissionService.js

@@ -0,0 +1,445 @@
+/**
+ * PermissionService - OAuth-style access control management
+ *
+ * Manages permissions for cross-app data access, including:
+ * - OAuth-style consent requests and grants
+ * - Permission validation and enforcement
+ * - On-chain access control integration
+ * - Permission auditing and revocation
+ */
+// Use Web Crypto API (browser-compatible)
+const randomUUID = () => crypto.randomUUID();
+import { normalizeSuiAddress } from '@mysten/sui/utils';
+import { CrossContextPermissionService } from '../services/CrossContextPermissionService.js';
+/**
+ * PermissionService handles OAuth-style access control
+ */
+export class PermissionService {
+    constructor(config) {
+        this.pendingConsents = new Map();
+        this.suiClient = config.suiClient;
+        this.packageId = config.packageId;
+        this.contextWalletService = config.contextWalletService;
+        this.capabilityService = config.capabilityService;
+        this.consentRepository = config.consentRepository;
+        if (!config.accessRegistryId) {
+            throw new Error('PermissionService requires accessRegistryId for wallet-based permissions');
+        }
+        this.crossContextPermissions =
+            config.crossContextPermissionService ??
+                new CrossContextPermissionService({
+                    packageId: this.packageId,
+                    accessRegistryId: config.accessRegistryId,
+                }, this.suiClient);
+    }
+    /**
+     * Request user consent for accessing data
+     * @param options - Consent request options
+     * @returns Created consent request
+     */
+    async requestConsent(options) {
+        const requesterWallet = normalizeSuiAddress(options.requesterWallet);
+        const targetWallet = normalizeSuiAddress(options.targetWallet);
+        const now = Date.now();
+        const requestId = randomUUID();
+        const consentRequest = {
+            requesterWallet,
+            targetWallet,
+            targetScopes: options.scopes,
+            purpose: options.purpose,
+            expiresAt: options.expiresIn ? now + options.expiresIn : undefined,
+            requestId,
+            createdAt: now,
+            updatedAt: now,
+            status: 'pending',
+        };
+        await this.persistConsentRequest(consentRequest);
+        // TODO: Send consent request to backend for UI presentation
+        // For now, return the persisted record so callers can track status locally
+        return consentRequest;
+    }
+    /**
+     * Grant permissions to an app (user approval)
+     * @param userAddress - User granting permissions
+     * @param options - Grant options
+     * @returns Created access grant
+     */
+    async grantPermissions(userAddress, options) {
+        const requestingWallet = normalizeSuiAddress(options.requestingWallet);
+        const targetWallet = normalizeSuiAddress(options.targetWallet);
+        // Validate ownership - prefer capability-based validation
+        const hasAccess = await this.validateOwnership(userAddress, targetWallet, options.appId);
+        if (!hasAccess) {
+            throw new Error('User does not own the specified target wallet or capability');
+        }
+        let lastDigest;
+        if (options.signer) {
+            for (const scope of options.scopes) {
+                const accessLevel = scope.startsWith('write:') ? 'write' : 'read';
+                lastDigest = await this.crossContextPermissions.grantWalletAllowlistAccess({
+                    requestingWallet,
+                    targetWallet,
+                    scope,
+                    accessLevel,
+                    expiresAt: options.expiresAt ?? 0,
+                }, options.signer);
+            }
+        }
+        const permissions = await this.crossContextPermissions.queryWalletPermissions({
+            requestingWallet,
+            targetWallet,
+        });
+        const grantFromChain = this.buildGrantFromPermissions(requestingWallet, targetWallet, permissions);
+        const now = Date.now();
+        let grant = grantFromChain ?? {
+            id: `grant_${requestingWallet}_${targetWallet}_${now}`,
+            requestingWallet,
+            targetWallet,
+            scopes: options.scopes,
+            expiresAt: options.expiresAt,
+            grantedAt: now,
+        };
+        if (lastDigest) {
+            grant = {
+                ...grant,
+                transactionDigest: lastDigest,
+            };
+        }
+        await this.updateConsentStatus({
+            requesterWallet: requestingWallet,
+            targetWallet,
+            newStatus: 'approved',
+            updatedAt: now,
+        });
+        return grant;
+    }
+    /**
+     * Revoke permissions from an app
+     * @param userAddress - User revoking permissions
+     * @param options - Revoke options
+     * @returns Success status
+     */
+    async revokePermissions(userAddress, options) {
+        const requestingWallet = normalizeSuiAddress(options.requestingWallet);
+        const targetWallet = normalizeSuiAddress(options.targetWallet);
+        // Validate ownership - prefer capability-based validation
+        const hasAccess = await this.validateOwnership(userAddress, targetWallet, options.appId);
+        if (!hasAccess) {
+            throw new Error('User does not own the specified target wallet or capability');
+        }
+        if (options.signer) {
+            await this.crossContextPermissions.revokeWalletAllowlistAccess({
+                requestingWallet,
+                targetWallet,
+                scope: options.scope,
+            }, options.signer);
+        }
+        return true;
+    }
+    /**
+     * Determine if a requesting wallet currently has permission to access a target wallet
+     */
+    async hasWalletPermission(requestingWallet, targetWallet, scope) {
+        return await this.crossContextPermissions.hasWalletPermission({
+            requestingWallet: normalizeSuiAddress(requestingWallet),
+            targetWallet: normalizeSuiAddress(targetWallet),
+            scope,
+        });
+    }
+    /**
+     * Legacy compatibility method for app-scoped permission checks
+     * Interprets appId as requesting wallet address.
+     */
+    async checkPermission(appId, scope, userAddressOrTargetWallet) {
+        return await this.hasWalletPermission(appId, userAddressOrTargetWallet, scope);
+    }
+    /**
+     * Get all access grants by a user
+     * @param userAddress - User address
+     * @returns Array of access grants
+     */
+    async getGrantsByUser(userAddress) {
+        const normalized = normalizeSuiAddress(userAddress);
+        const permissions = await this.crossContextPermissions.listGrantsByTarget(normalized);
+        return this.convertPermissionsToGrants(permissions);
+    }
+    /**
+     * List all consent requests for a user
+     * @param userAddress - User address
+     * @returns Array of pending consent requests
+     */
+    async getPendingConsents(userAddress) {
+        const normalized = normalizeSuiAddress(userAddress);
+        if (this.consentRepository) {
+            return await this.consentRepository.listByTarget(normalized, 'pending');
+        }
+        return Array.from(this.pendingConsents.values())
+            .filter((request) => request.targetWallet === normalized && request.status === 'pending')
+            .map((request) => ({ ...request }));
+    }
+    /**
+     * Approve a consent request
+     * @param userAddress - User approving the request
+     * @param consentRequest - Consent request to approve
+     * @param contextId - Context ID to grant access to
+     * @returns Created access grant
+     */
+    async approveConsent(userAddress, consentRequest, _contextId) {
+        const grant = await this.grantPermissions(userAddress, {
+            requestingWallet: consentRequest.requesterWallet,
+            targetWallet: consentRequest.targetWallet,
+            scopes: consentRequest.targetScopes,
+            expiresAt: consentRequest.expiresAt
+        });
+        const updatedAt = Date.now();
+        if (consentRequest.requestId) {
+            await this.updateConsentStatus({
+                requesterWallet: consentRequest.requesterWallet,
+                targetWallet: consentRequest.targetWallet,
+                newStatus: 'approved',
+                updatedAt,
+                requestId: consentRequest.requestId,
+            });
+        }
+        return grant;
+    }
+    /**
+     * Deny a consent request
+     * @param userAddress - User denying the request
+     * @param consentRequest - Consent request to deny
+     * @returns Success status
+     */
+    async denyConsent(userAddress, consentRequest) {
+        const now = Date.now();
+        if (consentRequest.requestId) {
+            await this.updateConsentStatus({
+                requesterWallet: consentRequest.requesterWallet,
+                targetWallet: consentRequest.targetWallet,
+                newStatus: 'denied',
+                updatedAt: now,
+                requestId: consentRequest.requestId,
+            });
+        }
+        else {
+            const inferredRequestId = randomUUID();
+            await this.persistConsentRequest({
+                ...consentRequest,
+                requestId: inferredRequestId,
+                createdAt: now,
+                updatedAt: now,
+                status: 'denied',
+            });
+        }
+        return true;
+    }
+    /**
+     * Get permission audit log for a user
+     * @param userAddress - User address
+     * @returns Array of permission events
+     */
+    async getPermissionAudit(userAddress) {
+        const normalized = normalizeSuiAddress(userAddress);
+        const auditEntries = [];
+        const consentRecords = this.consentRepository
+            ? await this.consentRepository.listByTarget(normalized)
+            : Array.from(this.pendingConsents.values()).filter((request) => request.targetWallet === normalized);
+        for (const request of consentRecords) {
+            auditEntries.push({
+                timestamp: request.createdAt,
+                action: 'request',
+                requestingWallet: request.requesterWallet,
+                targetWallet: request.targetWallet,
+                scopes: request.targetScopes,
+            });
+            if (request.status === 'denied') {
+                auditEntries.push({
+                    timestamp: request.updatedAt,
+                    action: 'deny',
+                    requestingWallet: request.requesterWallet,
+                    targetWallet: request.targetWallet,
+                    scopes: request.targetScopes,
+                });
+            }
+        }
+        const history = await this.crossContextPermissions.getWalletAllowlistHistory({
+            targetWallet: normalized,
+        });
+        for (const event of history) {
+            auditEntries.push({
+                timestamp: event.timestamp,
+                action: event.action,
+                requestingWallet: event.requestingWallet,
+                targetWallet: event.targetWallet,
+                scopes: [this.toPermissionScope(event.scope)],
+            });
+        }
+        return auditEntries.sort((a, b) => a.timestamp - b.timestamp);
+    }
+    /**
+     * Validate OAuth-style permission for SEAL access control
+     * @param walletOwner - Owner of the wallet
+     * @param appId - Application requesting access
+     * @param requestedScope - Required permission scope
+     * @returns True if permission is valid
+     */
+    async validateOAuthPermission(walletOwner, appId, requestedScope) {
+        // This integrates with our existing SEAL access control
+        return await this.hasWalletPermission(appId, walletOwner, requestedScope);
+    }
+    /**
+     * Build seal_approve transaction for a requesting wallet
+     */
+    createApprovalTransaction(contentId, requestingWallet) {
+        return this.crossContextPermissions.buildSealApproveTransaction(contentId, normalizeSuiAddress(requestingWallet));
+    }
+    /**
+     * Get permission statistics for a user
+     * @param userAddress - User address
+     * @returns Permission usage statistics
+     */
+    async getPermissionStats(userAddress) {
+        const grants = await this.getGrantsByUser(userAddress);
+        const now = Date.now();
+        const activeGrants = grants.filter((g) => !g.expiresAt || g.expiresAt > now);
+        const uniqueApps = new Set(grants.map((g) => g.requestingWallet));
+        const uniqueScopes = new Set(grants.flatMap((g) => g.scopes));
+        const recentActivity = grants.length > 0 ? Math.max(...grants.map((g) => g.expiresAt || 0)) : 0;
+        return {
+            totalGrants: grants.length,
+            activeGrants: activeGrants.length,
+            totalApps: uniqueApps.size,
+            totalScopes: uniqueScopes.size,
+            recentActivity
+        };
+    }
+    /**
+     * Clean up expired permissions
+     * @param userAddress - User address
+     * @returns Number of permissions cleaned up
+     */
+    async cleanupExpiredPermissions(userAddress) {
+        const now = Date.now();
+        const grants = await this.getGrantsByUser(userAddress);
+        return grants.filter((grant) => {
+            if (!grant.expiresAt || grant.expiresAt === 0) {
+                return false;
+            }
+            return grant.expiresAt <= now;
+        }).length;
+    }
+    buildGrantFromPermissions(requestingWallet, targetWallet, permissions) {
+        const grants = this.convertPermissionsToGrants(permissions);
+        return grants.find((candidate) => candidate.requestingWallet === requestingWallet &&
+            candidate.targetWallet === targetWallet);
+    }
+    convertPermissionsToGrants(permissions) {
+        const grouped = new Map();
+        for (const permission of permissions) {
+            const key = `${permission.requestingWallet}-${permission.targetWallet}`;
+            const existing = grouped.get(key);
+            if (existing) {
+                existing.push(permission);
+            }
+            else {
+                grouped.set(key, [permission]);
+            }
+        }
+        const grants = [];
+        for (const entries of grouped.values()) {
+            if (entries.length === 0) {
+                continue;
+            }
+            const [first] = entries;
+            const scopes = new Set();
+            let earliestGrantedAt = entries[0].grantedAt;
+            let expiresAtCandidate = 0;
+            for (const entry of entries) {
+                scopes.add(this.toPermissionScope(entry.scope));
+                if (entry.grantedAt < earliestGrantedAt) {
+                    earliestGrantedAt = entry.grantedAt;
+                }
+                if (entry.expiresAt > expiresAtCandidate) {
+                    expiresAtCandidate = entry.expiresAt;
+                }
+            }
+            const grant = {
+                id: `grant_${first.requestingWallet}_${first.targetWallet}_${earliestGrantedAt}`,
+                requestingWallet: first.requestingWallet,
+                targetWallet: first.targetWallet,
+                scopes: Array.from(scopes),
+                grantedAt: earliestGrantedAt,
+            };
+            if (expiresAtCandidate > 0) {
+                grant.expiresAt = expiresAtCandidate;
+            }
+            grants.push(grant);
+        }
+        return grants;
+    }
+    toPermissionScope(scope) {
+        return scope;
+    }
+    async persistConsentRequest(record) {
+        if (this.consentRepository) {
+            await this.consentRepository.save(record);
+        }
+        else {
+            this.pendingConsents.set(record.requestId, { ...record });
+        }
+    }
+    /**
+     * Swap the consent persistence backend at runtime.
+     * Useful for applications that want to wire a custom repository after
+     * the service has been constructed (e.g., demos supplying a filesystem store).
+     */
+    setConsentRepository(repository) {
+        this.consentRepository = repository;
+    }
+    /**
+     * Validate user ownership of a target wallet or capability
+     * Prefers capability-based validation over legacy ContextWalletService
+     *
+     * @param userAddress - User's address
+     * @param targetWallet - Target wallet address
+     * @param appId - Optional app ID for capability lookup
+     * @returns True if user has ownership/access
+     */
+    async validateOwnership(userAddress, targetWallet, appId) {
+        // Prefer capability-based validation (new architecture)
+        if (this.capabilityService && appId) {
+            return await this.capabilityService.hasCapability(userAddress, appId);
+        }
+        // Fall back to legacy ContextWalletService validation
+        if (this.contextWalletService) {
+            return await this.contextWalletService.validateAccess(targetWallet, userAddress);
+        }
+        // If neither service is available, skip validation (trust caller)
+        return true;
+    }
+    async updateConsentStatus(params) {
+        const normalizedRequester = normalizeSuiAddress(params.requesterWallet);
+        const normalizedTarget = normalizeSuiAddress(params.targetWallet);
+        if (this.consentRepository) {
+            if (params.requestId) {
+                await this.consentRepository.updateStatus(params.requestId, params.newStatus, params.updatedAt);
+            }
+            else {
+                const pendingRecords = await this.consentRepository.listByTarget(normalizedTarget, 'pending');
+                await Promise.all(pendingRecords
+                    .filter((record) => record.requesterWallet === normalizedRequester)
+                    .map((record) => this.consentRepository.updateStatus(record.requestId, params.newStatus, params.updatedAt)));
+            }
+        }
+        for (const [requestId, record] of this.pendingConsents.entries()) {
+            if (record.requesterWallet === normalizedRequester && record.targetWallet === normalizedTarget) {
+                const updatedRecord = {
+                    ...record,
+                    status: params.newStatus,
+                    updatedAt: params.updatedAt,
+                };
+                this.pendingConsents.set(requestId, updatedRecord);
+            }
+        }
+    }
+}
+//# sourceMappingURL=PermissionService.js.map

package/dist/access/PermissionService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionService.js","sourceRoot":"","sources":["../../src/access/PermissionService.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,0CAA0C;AAC1C,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AAGrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAexD,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AA2B1F;;GAEG;AACH,MAAM,OAAO,iBAAiB;IAU5B,YAAY,MAA+B;QAHnC,oBAAe,GAAsC,IAAI,GAAG,EAAE,CAAC;QAIrE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,CAAC;QACxD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAClD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAElD,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,CAAC,uBAAuB;YAC1B,MAAM,CAAC,6BAA6B;gBACpC,IAAI,6BAA6B,CAC/B;oBACE,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,EACD,IAAI,CAAC,SAAS,CACf,CAAC;IACN,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAyB;YAC3C,eAAe;YACf,YAAY;YACZ,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAClE,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QAEjD,4DAA4D;QAC5D,2EAA2E;QAC3E,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,OAAsE;QAEtE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE/D,0DAA0D;QAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,UAA8B,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClE,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,0BAA0B,CACxE;oBACE,gBAAgB;oBAChB,YAAY;oBACZ,KAAK;oBACL,WAAW;oBACX,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC;iBAClC,EACD,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,sBAAsB,CAAC;YAC5E,gBAAgB;YAChB,YAAY;SACb,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,IAAI,CAAC,yBAAyB,CACnD,gBAAgB,EAChB,YAAY,EACZ,WAAW,CACZ,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,GACP,cAAc,IAAI;YAChB,EAAE,EAAE,SAAS,gBAAgB,IAAI,YAAY,IAAI,GAAG,EAAE;YACtD,gBAAgB;YAChB,YAAY;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,GAAG;SACf,CAAC;QAEJ,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,GAAG;gBACN,GAAG,KAAK;gBACR,iBAAiB,EAAE,UAAU;aAC9B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,mBAAmB,CAAC;YAC7B,eAAe,EAAE,gBAAgB;YACjC,YAAY;YACZ,SAAS,EAAE,UAAU;YACrB,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CACrB,WAAmB,EACnB,OAAuE;QAEvE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE/D,0DAA0D;QAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,uBAAuB,CAAC,2BAA2B,CAC5D;gBACE,gBAAgB;gBAChB,YAAY;gBACZ,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,EACD,OAAO,CAAC,MAAM,CACf,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,gBAAwB,EACxB,YAAoB,EACpB,KAAsB;QAEtB,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,mBAAmB,CAAC;YAC5D,gBAAgB,EAAE,mBAAmB,CAAC,gBAAgB,CAAC;YACvD,YAAY,EAAE,mBAAmB,CAAC,YAAY,CAAC;YAC/C,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,KAAa,EACb,KAAsB,EACtB,yBAAiC;QAEjC,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACjF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,WAAmB;QAC1C,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;aAC7C,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;aACxF,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,cAA8B,EAC9B,UAAkB;QAElB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrD,gBAAgB,EAAE,cAAc,CAAC,eAAe;YAChD,YAAY,EAAE,cAAc,CAAC,YAAY;YACzC,MAAM,EAAE,cAAc,CAAC,YAAY;YACnC,SAAS,EAAE,cAAc,CAAC,SAAS;SACpC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,cAAc,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,mBAAmB,CAAC;gBAC7B,eAAe,EAAE,cAAc,CAAC,eAAe;gBAC/C,YAAY,EAAE,cAAc,CAAC,YAAY;gBACzC,SAAS,EAAE,UAAU;gBACrB,SAAS;gBACT,SAAS,EAAE,cAAc,CAAC,SAAS;aACpC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,cAA8B;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,cAAc,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,mBAAmB,CAAC;gBAC7B,eAAe,EAAE,cAAc,CAAC,eAAe;gBAC/C,YAAY,EAAE,cAAc,CAAC,YAAY;gBACzC,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,cAAc,CAAC,SAAS;aACpC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,iBAAiB,GAAG,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,qBAAqB,CAAC;gBAC/B,GAAG,cAAc;gBACjB,SAAS,EAAE,iBAAiB;gBAC5B,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;gBACd,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,WAAmB;QAO1C,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,YAAY,GAMb,EAAE,CAAC;QAER,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB;YAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,UAAU,CAAC;YACvD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC;QAEvG,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,YAAY,CAAC,IAAI,CAAC;gBAChB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,SAAS;gBACjB,gBAAgB,EAAE,OAAO,CAAC,eAAe;gBACzC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,MAAM,EAAE,OAAO,CAAC,YAAY;aAC7B,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAChC,YAAY,CAAC,IAAI,CAAC;oBAChB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,MAAM;oBACd,gBAAgB,EAAE,OAAO,CAAC,eAAe;oBACzC,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,MAAM,EAAE,OAAO,CAAC,YAAY;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yBAAyB,CAAC;YAC3E,YAAY,EAAE,UAAU;SACzB,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,uBAAuB,CAC3B,WAAmB,EACnB,KAAa,EACb,cAAsB;QAEtB,wDAAwD;QACxD,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE,cAAiC,CAAC,CAAC;IAC/F,CAAC;IAED;;OAEG;IACH,yBAAyB,CACvB,SAAqB,EACrB,gBAAwB;QAExB,OAAO,IAAI,CAAC,uBAAuB,CAAC,2BAA2B,CAC7D,SAAS,EACT,mBAAmB,CAAC,gBAAgB,CAAC,CACtC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,WAAmB;QAO1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAE9D,MAAM,cAAc,GAClB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3E,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,YAAY,EAAE,YAAY,CAAC,MAAM;YACjC,SAAS,EAAE,UAAU,CAAC,IAAI;YAC1B,WAAW,EAAE,YAAY,CAAC,IAAI;YAC9B,cAAc;SACf,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,yBAAyB,CAAC,WAAmB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEvD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC;QAChC,CAAC,CAAC,CAAC,MAAM,CAAC;IACZ,CAAC;IAEO,yBAAyB,CAC/B,gBAAwB,EACxB,YAAoB,EACpB,WAAwC;QAExC,MAAM,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,gBAAgB,KAAK,gBAAgB;YAC/C,SAAS,CAAC,YAAY,KAAK,YAAY,CAC1C,CAAC;IACJ,CAAC;IAEO,0BAA0B,CAChC,WAAwC;QAExC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAC;QAE/D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,gBAAgB,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAkB,EAAE,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;YAC1C,IAAI,iBAAiB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7C,IAAI,kBAAkB,GAAG,CAAC,CAAC;YAE3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChD,IAAI,KAAK,CAAC,SAAS,GAAG,iBAAiB,EAAE,CAAC;oBACxC,iBAAiB,GAAG,KAAK,CAAC,SAAS,CAAC;gBACtC,CAAC;gBACD,IAAI,KAAK,CAAC,SAAS,GAAG,kBAAkB,EAAE,CAAC;oBACzC,kBAAkB,GAAG,KAAK,CAAC,SAAS,CAAC;gBACvC,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAgB;gBACzB,EAAE,EAAE,SAAS,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,YAAY,IAAI,iBAAiB,EAAE;gBAChF,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC1B,SAAS,EAAE,iBAAiB;aAC7B,CAAC;YAEF,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,SAAS,GAAG,kBAAkB,CAAC;YACvC,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,iBAAiB,CAAC,KAAa;QACrC,OAAO,KAAwB,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,MAA4B;QAC9D,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,UAA8B;QACjD,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC;IACtC,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,iBAAiB,CAC7B,WAAmB,EACnB,YAAoB,EACpB,KAAc;QAEd,wDAAwD;QACxD,IAAI,IAAI,CAAC,iBAAiB,IAAI,KAAK,EAAE,CAAC;YACpC,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;QAED,sDAAsD;QACtD,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACnF,CAAC;QAED,kEAAkE;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,MAMjC;QACC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACxE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAElE,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAClG,CAAC;iBAAM,CAAC;gBACN,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;gBAC9F,MAAM,OAAO,CAAC,GAAG,CACf,cAAc;qBACX,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,KAAK,mBAAmB,CAAC;qBAClE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACd,IAAI,CAAC,iBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAC3F,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YACjE,IAAI,MAAM,CAAC,eAAe,KAAK,mBAAmB,IAAI,MAAM,CAAC,YAAY,KAAK,gBAAgB,EAAE,CAAC;gBAC/F,MAAM,aAAa,GAAyB;oBAC1C,GAAG,MAAM;oBACT,MAAM,EAAE,MAAM,CAAC,SAAS;oBACxB,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC;gBACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/access/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Access Control Module
+ *
+ * OAuth-style permission management for cross-app data access.
+ */
+export { PermissionService } from './PermissionService';
+export type { PermissionServiceConfig } from './PermissionService';
+//# sourceMappingURL=index.d.ts.map

package/dist/access/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/access/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/access/index.js

@@ -0,0 +1,7 @@
+/**
+ * Access Control Module
+ *
+ * OAuth-style permission management for cross-app data access.
+ */
+export { PermissionService } from './PermissionService.js';
+//# sourceMappingURL=index.js.map

package/dist/access/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/access/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/aggregation/AggregationService.d.ts

@@ -0,0 +1,132 @@
+/**
+ * AggregationService - Cross-app data query with permission filtering
+ *
+ * Enables querying data across multiple app contexts while respecting
+ * OAuth-style permissions and access control policies.
+ */
+import { SuiClient } from '@mysten/sui/client';
+import { AggregatedQueryOptions, PermissionScope } from '../core/types/wallet.js';
+import { PermissionService } from '../access/PermissionService.js';
+import { CapabilityService } from '../services/CapabilityService.js';
+import { ContextWalletService } from '../wallet/ContextWalletService.js';
+/**
+ * Configuration for AggregationService
+ */
+export interface AggregationServiceConfig {
+    /** Sui client instance */
+    suiClient: SuiClient;
+    /** Package ID for Move contracts */
+    packageId: string;
+    /** Permission service for access validation */
+    permissionService: PermissionService;
+    /** Capability service for capability-based access (preferred) */
+    capabilityService?: CapabilityService;
+    /**
+     * @deprecated Use capabilityService and a ContextNamespace implementation instead
+     * Context wallet service for data access (legacy)
+     */
+    contextWalletService: ContextWalletService;
+}
+/**
+ * Result of an aggregated query
+ */
+export interface AggregatedQueryResult {
+    /** Query results organized by app context */
+    results: Array<{
+        contextId: string;
+        targetWallet: string;
+        appId: string;
+        data: Array<{
+            id: string;
+            content: string;
+            category?: string;
+            metadata?: Record<string, any>;
+            createdAt: number;
+        }>;
+        hasMore: boolean;
+    }>;
+    /** Total number of results across all contexts */
+    totalResults: number;
+    /** Contexts that were queried */
+    queriedContexts: string[];
+    /** Contexts that were skipped due to permissions */
+    skippedContexts: string[];
+    /** Query performance metrics */
+    metrics: {
+        queryTime: number;
+        contextsChecked: number;
+        permissionChecks: number;
+    };
+}
+/**
+ * AggregationService handles cross-app queries with permission filtering
+ */
+export declare class AggregationService {
+    private suiClient;
+    private packageId;
+    private permissionService;
+    private capabilityService?;
+    /** @deprecated Use capabilityService instead */
+    private contextWalletService;
+    constructor(config: AggregationServiceConfig);
+    /**
+     * Query data across multiple app contexts with permission enforcement
+     * @param options - Query options
+     * @returns Aggregated query results
+     */
+    query(options: AggregatedQueryOptions): Promise<AggregatedQueryResult>;
+    /**
+     * Query with scope-based filtering
+     * @param userAddress - User address
+     * @param query - Search query
+     * @param scopes - Required permission scopes
+     * @returns Filtered aggregated results
+     */
+    queryWithScopes(requestingWallet: string, userAddress: string, query: string, scopes: PermissionScope[]): Promise<AggregatedQueryResult>;
+    /**
+     * Get aggregated statistics across contexts
+     * @param userAddress - User address
+     * @param appIds - Apps to include in statistics
+     * @returns Aggregated statistics
+     */
+    getAggregatedStats(userAddress: string, targetWallets: string[]): Promise<{
+        totalContexts: number;
+        totalItems: number;
+        totalSize: number;
+        categoryCounts: Record<string, number>;
+        contextBreakdown: Record<string, {
+            items: number;
+            size: number;
+            lastActivity: number;
+        }>;
+        appBreakdown?: Record<string, {
+            items: number;
+            size: number;
+            lastActivity: number;
+        }>;
+    }>;
+    /**
+     * Search across contexts with permission validation
+     * @param userAddress - User address
+     * @param searchQuery - Search query
+     * @param options - Search options
+     * @returns Search results
+     */
+    search(requestingWallet: string, userAddress: string, searchQuery: string, options?: {
+        targetWallets?: string[];
+        categories?: string[];
+        limit?: number;
+        minPermissionScope?: PermissionScope;
+    }): Promise<AggregatedQueryResult>;
+    /**
+     * Filter data by search query
+     * @private
+     */
+    private filterDataByQuery;
+    /**
+     * Apply global result limit across contexts
+     * @private
+     */
+    private applyGlobalLimit;
+}
+//# sourceMappingURL=AggregationService.d.ts.map

package/dist/aggregation/AggregationService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AggregationService.d.ts","sourceRoot":"","sources":["../../src/aggregation/AggregationService.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,OAAO,EACL,sBAAsB,EACtB,eAAe,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,0BAA0B;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;OAGG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,6CAA6C;IAC7C,OAAO,EAAE,KAAK,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,KAAK,CAAC;YACV,EAAE,EAAE,MAAM,CAAC;YACX,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/B,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;IACH,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,oDAAoD;IACpD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gCAAgC;IAChC,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,gDAAgD;IAChD,OAAO,CAAC,oBAAoB,CAAuB;gBAEvC,MAAM,EAAE,wBAAwB;IAQ5C;;;;OAIG;IACG,KAAK,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAqF5E;;;;;;OAMG;IACG,eAAe,CACnB,gBAAgB,EAAE,MAAM,EACxB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,EAAE,GACxB,OAAO,CAAC,qBAAqB,CAAC;IAqCjC;;;;;OAKG;IACG,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC9E,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE;YAC/B,KAAK,EAAE,MAAM,CAAC;YACd,IAAI,EAAE,MAAM,CAAC;YACb,YAAY,EAAE,MAAM,CAAC;SACtB,CAAC,CAAC;QACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAC5B,KAAK,EAAE,MAAM,CAAC;YACd,IAAI,EAAE,MAAM,CAAC;YACb,YAAY,EAAE,MAAM,CAAC;SACtB,CAAC,CAAC;KACJ,CAAC;IAoDF;;;;;;OAMG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QACV,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,kBAAkB,CAAC,EAAE,eAAe,CAAC;KACtC,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAmBlC;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAuBzB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;CAuBzB"}