aimeat 1.4.7 → 1.5.0

package/dist/public/views/profile/access-tab.js

@@ -1,58 +1,160 @@
-/**
- * @file access-tab.js
- * @description Profile tab displaying session info, public key, owner key,
- *   and MCP endpoint details for the current user.
- * @version-history
- *   v1.0.0 — 2026-03-16 — Initial access tab
- *   v1.1.0 — 2026-03-17 — Replace inline styles with CSS classes
- */
-import { h } from 'preact';
-import { useState } from 'preact/hooks';
-import htm from 'htm';
-const html = htm.bind(h);
-import { t } from '/js/i18n.js';
-import { escHtml, copyToClipboard } from '/js/utils.js';
-import { getNodeUrl } from '/js/services/auth.js';
-
-export default function AccessTab({ session, showToast }) {
-  const NODE_URL = getNodeUrl();
-  const ownerKey = typeof localStorage !== 'undefined' ? localStorage.getItem('aimeat_owner_key') : null;
-  const [keyBlurred, setKeyBlurred] = useState(true);
-
-  return html`
-    <div class="section-title">${t('profile.access.title')}</div>
-    <div class="section-desc">${t('profile.access.desc')}</div>
-
-    <h3 class="card-h3">\u{1F4BB} ${t('profile.access.session')}</h3>
-    <div class="card">
-      <div class="mem-item"><span class="mem-key">${t('profile.access.owner')}</span><span>${escHtml(session.owner || '-')}</span></div>
-      <div class="mem-item"><span class="mem-key">${t('profile.access.ghii')}</span><span>${escHtml(session.ghii || '-')}</span></div>
-      <div class="mem-item"><span class="mem-key">${t('profile.access.agentGaii')}</span><span>${escHtml(session.gaii || '-')}</span></div>
-      <div class="mem-item"><span class="mem-key">${t('profile.access.node')}</span><span>${escHtml(NODE_URL)}</span></div>
-      <div class="mem-item"><span class="mem-key">${t('profile.access.jwtValid')}</span><span>${session.valid ? html`<span class="badge badge-success">${t('profile.access.yes')}</span>` : html`<span class="badge badge-danger">${t('profile.access.expired')}</span>`}</span></div>
-    </div>
-
-    <h3 class="card-h3 mt-section">\u{1F510} ${t('profile.access.publicKey')}</h3>
-    <div class="card"><div class="access-mono">${escHtml(session.publicKey || 'N/A')}</div></div>
-
-    ${ownerKey && html`
-      <h3 class="card-h3 mt-section">\u{1F5DD}\uFE0F ${t('profile.access.ownerKey')}</h3>
-      <div class="card access-card-warn" onClick=${() => copyToClipboard(ownerKey).then(() => showToast(t('profile.access.keyCopied')))}>
-        <div class="flex-between">
-          <div class="access-mono ${keyBlurred ? 'access-key-blur' : 'access-key-blur revealed'}"
-            onMouseEnter=${() => setKeyBlurred(false)} onMouseLeave=${() => setKeyBlurred(true)}>
-            ${escHtml(ownerKey)}
-          </div>
-          <span class="badge badge-warn">${t('profile.access.hoverReveal')}</span>
-        </div>
-        <div class="access-warn-text">\u26A0 ${t('profile.access.keepSafe')}</div>
-      </div>
-    `}
-
-    <h3 class="card-h3 mt-section">\u{1F517} ${t('profile.access.mcpEndpoint')}</h3>
-    <div class="card">
-      <div class="access-mcp-url">${escHtml(NODE_URL + '/v1/mcp')}</div>
-      <div class="access-mcp-desc">${t('profile.access.mcpDesc')}</div>
-    </div>
-  `;
-}
+/**
+ * @file access-tab.js
+ * @description Profile tab displaying session info, public key, owner key,
+ *   MCP endpoint details, and federation access management for the current user.
+ * @version-history
+ *   v1.0.0 — 2026-03-16 — Initial access tab
+ *   v1.1.0 — 2026-03-17 — Replace inline styles with CSS classes
+ *   v1.2.0 — 2026-05-21 — Add Federation Access section for auth consent management
+ */
+import { h } from 'preact';
+import { useState, useEffect } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import { escHtml, copyToClipboard } from '/js/utils.js';
+import { getNodeUrl } from '/js/services/auth.js';
+import { apiGet, apiPost, apiDelete } from '/js/api.js';
+
+export default function AccessTab({ session, showToast }) {
+  const NODE_URL = getNodeUrl();
+  const ownerKey = typeof localStorage !== 'undefined' ? localStorage.getItem('aimeat_owner_key') : null;
+  const [keyBlurred, setKeyBlurred] = useState(true);
+  const [authConsents, setAuthConsents] = useState([]);
+  const [newNodeId, setNewNodeId] = useState('');
+  const [fedLoading, setFedLoading] = useState(false);
+
+  // Load auth consents on mount
+  useEffect(() => {
+    apiGet('/v1/consent').then(data => {
+      const all = data.data?.consents || [];
+      setAuthConsents(all.filter(c => c.scope === 'auth' && c.status === 'active'));
+    }).catch(() => {});
+  }, []);
+
+  async function addAuthNode() {
+    if (!newNodeId.trim()) return;
+    setFedLoading(true);
+    try {
+      await apiPost('/v1/consent', {
+        data_pattern: '_identity',
+        recipient: 'node:' + newNodeId.trim(),
+        scope: 'auth',
+        purpose: 'federation_login',
+      });
+      setNewNodeId('');
+      const data = await apiGet('/v1/consent');
+      setAuthConsents((data.data?.consents || []).filter(c => c.scope === 'auth' && c.status === 'active'));
+      showToast(t('profile.access.fedGranted'));
+    } catch (e) {
+      showToast(e.message);
+    } finally {
+      setFedLoading(false);
+    }
+  }
+
+  async function removeAuthConsent(id) {
+    try {
+      await apiDelete('/v1/consent/' + id);
+      setAuthConsents(prev => prev.filter(c => c.id !== id));
+      showToast(t('profile.access.fedRevoked'));
+    } catch (e) {
+      showToast(e.message);
+    }
+  }
+
+  async function toggleAllowAll() {
+    const wildcard = authConsents.find(c => c.recipient === '*');
+    if (wildcard) {
+      await removeAuthConsent(wildcard.id);
+    } else {
+      try {
+        await apiPost('/v1/consent', {
+          data_pattern: '_identity',
+          recipient: '*',
+          scope: 'auth',
+          purpose: 'federation_login_all',
+        });
+        const data = await apiGet('/v1/consent');
+        setAuthConsents((data.data?.consents || []).filter(c => c.scope === 'auth' && c.status === 'active'));
+      } catch (e) {
+        showToast(e.message);
+      }
+    }
+  }
+
+  return html`
+    <div class="section-title">${t('profile.access.title')}</div>
+    <div class="section-desc">${t('profile.access.desc')}</div>
+
+    <h3 class="card-h3">\u{1F4BB} ${t('profile.access.session')}</h3>
+    <div class="card">
+      <div class="mem-item"><span class="mem-key">${t('profile.access.owner')}</span><span>${escHtml(session.owner || '-')}</span></div>
+      <div class="mem-item"><span class="mem-key">${t('profile.access.ghii')}</span><span>${escHtml(session.ghii || '-')}</span></div>
+      <div class="mem-item"><span class="mem-key">${t('profile.access.agentGaii')}</span><span>${escHtml(session.gaii || '-')}</span></div>
+      <div class="mem-item"><span class="mem-key">${t('profile.access.node')}</span><span>${escHtml(NODE_URL)}</span></div>
+      <div class="mem-item"><span class="mem-key">${t('profile.access.jwtValid')}</span><span>${session.valid ? html`<span class="badge badge-success">${t('profile.access.yes')}</span>` : html`<span class="badge badge-danger">${t('profile.access.expired')}</span>`}</span></div>
+    </div>
+
+    <h3 class="card-h3 mt-section">\u{1F510} ${t('profile.access.publicKey')}</h3>
+    <div class="card"><div class="access-mono">${escHtml(session.publicKey || 'N/A')}</div></div>
+
+    ${ownerKey && html`
+      <h3 class="card-h3 mt-section">\u{1F5DD}️ ${t('profile.access.ownerKey')}</h3>
+      <div class="card access-card-warn" onClick=${() => copyToClipboard(ownerKey).then(() => showToast(t('profile.access.keyCopied')))}>
+        <div class="flex-between">
+          <div class="access-mono ${keyBlurred ? 'access-key-blur' : 'access-key-blur revealed'}"
+            onMouseEnter=${() => setKeyBlurred(false)} onMouseLeave=${() => setKeyBlurred(true)}>
+            ${escHtml(ownerKey)}
+          </div>
+          <span class="badge badge-warn">${t('profile.access.hoverReveal')}</span>
+        </div>
+        <div class="access-warn-text">⚠ ${t('profile.access.keepSafe')}</div>
+      </div>
+    `}
+
+    <h3 class="card-h3 mt-section">\u{1F517} ${t('profile.access.mcpEndpoint')}</h3>
+    <div class="card">
+      <div class="access-mcp-url">${escHtml(NODE_URL + '/v1/mcp')}</div>
+      <div class="access-mcp-desc">${t('profile.access.mcpDesc')}</div>
+    </div>
+
+    <h3 class="card-h3 mt-section">\u{1F310} ${t('profile.access.fedTitle')}</h3>
+    <div class="section-desc">${t('profile.access.fedDesc')}</div>
+
+    <div class="card">
+      <div class="mem-item">
+        <label class="flex-row">
+          <input type="checkbox"
+            checked=${authConsents.some(c => c.recipient === '*')}
+            onChange=${toggleAllowAll} />
+          ${t('profile.access.fedAllowAll')}
+        </label>
+        ${authConsents.some(c => c.recipient === '*') && html`
+          <span class="badge badge-warn">${t('profile.access.fedAllowAllWarn')}</span>
+        `}
+      </div>
+
+      ${authConsents.filter(c => c.recipient !== '*').length === 0 && !authConsents.some(c => c.recipient === '*') && html`
+        <p class="adm-text-dim">${t('profile.access.fedNoConsents')}</p>
+      `}
+      ${authConsents.filter(c => c.recipient !== '*').map(c => html`
+        <div class="mem-item">
+          <span class="mem-key">${escHtml(c.recipient.replace('node:', ''))}</span>
+          <button class="btn-ghost btn-danger" onClick=${() => removeAuthConsent(c.id)}>
+            ${t('profile.access.fedRemove')}
+          </button>
+        </div>
+      `)}
+
+      <div class="mem-item access-fed-add">
+        <input type="text" class="input-field input-sm" placeholder=${t('profile.access.fedNodeId')}
+          value=${newNodeId} onInput=${e => setNewNodeId(e.target.value)}
+          onKeyDown=${e => e.key === 'Enter' && addAuthNode()} />
+        <button class="btn-primary" onClick=${addAuthNode} disabled=${fedLoading}>
+          ${t('profile.access.fedAddNode')}
+        </button>
+      </div>
+    </div>
+  `;
+}

package/dist/public/views/profile/agents-tab.js

@@ -14,7 +14,7 @@ const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { escHtml, timeAgo, copyToClipboard } from '/js/utils.js';
 import { Spinner } from './shared.js';
-import { apiGet, apiPost } from '/js/api.js';
+import { apiGet, apiPost, apiPatch } from '/js/api.js';
 import { listAgents, updateAgentScopes, deleteAgent } from '/js/services/agents.js';
 import { getNodeUrl } from '/js/services/auth.js';
 import { useConfirm } from '/components/Modal.js';
@@ -314,6 +314,13 @@ export default function AgentsTab({ session, showToast, onStats }) {
     } catch { /* ignore */ }
   }
 
+  async function toggleFederate(agent) {
+    try {
+      await apiPatch(`/v1/agents/${encodeURIComponent(agent.name)}/federate`, { federate: !agent.federate });
+      loadData();
+    } catch (e) { showToast(e.message || t('profile.unknownError'), true); }
+  }
+
   if (!agents) return html`<${Spinner} text=${t('profile.agents.loadingAgents')} />`;
 
   return html`
@@ -417,6 +424,11 @@ export default function AgentsTab({ session, showToast, onStats }) {
                 <div class="card-title">${escHtml(a.display_name || a.name)}</div>
               </div>
               <span class="badge badge-info">${escHtml(a.name)}</span>
+              <span class="${a.federate ? 'badge badge-success' : 'badge badge-muted'}"
+                onClick=${(e) => { e.stopPropagation(); toggleFederate(a); }}
+                title=${t('profile.federateTooltip')}>
+                ${a.federate ? t('profile.federated') : t('profile.notFederated')}
+              </span>
             </div>
             <div class="card-subtitle mt-xs">
               ${t('profile.agents.trust')}: ${a.trust_score ?? '-'} \u2502

package/dist/public/views/profile/boards-tab.js

@@ -118,6 +118,13 @@ export default function BoardsTab({ session, showToast }) {
     } catch (e) { showToast(e.message || t('profile.error'), true); }
   }
 
+  async function toggleBoardFederate(boardId, value) {
+    try {
+      await boardsService.updateBoardVisibility(boardId, undefined, value);
+      loadMyData();
+    } catch (e) { showToast(e.message || t('profile.error'), true); }
+  }
+
   async function handleDeleteBoard(boardId) {
     confirm(t('profile.boards.confirmDeleteBoard') || 'Delete this board and all its posts?', async () => {
       try {
@@ -230,6 +237,11 @@ export default function BoardsTab({ session, showToast }) {
                   title="${t('knowledge.visibility.' + vis)} \u2192 ${t('knowledge.visibility.' + nextVis)}"
                   style="background:${visBg[vis]};color:${visColor[vis]};border-color:${visColor[vis]}"
                 >${t('knowledge.visibility.' + vis)} \u25BE</button>
+                ${vis === 'public' && html`<span class="${b.federate ? 'badge badge-success' : 'badge badge-muted'}"
+                  onClick=${(e) => { e.stopPropagation(); toggleBoardFederate(bid, !b.federate); }}
+                  title=${t('profile.federateTooltip')}>
+                  ${b.federate ? t('profile.federated') : t('profile.notFederated')}
+                </span>`}
                 <button class="btn-danger-solid btn-sm" onClick=${(e) => { e.stopPropagation(); handleDeleteBoard(bid); }}>${t('profile.boards.deleteBoard')}</button>
               </div>
             </div>

package/dist/public/views/profile/data-wallet-tab.js

@@ -27,6 +27,7 @@ export default function DataWalletTab({ session, showToast }) {
   const [permSummary, setPermSummary] = useState(null);
   const [showConsentForm, setShowConsentForm] = useState(false);
   const [consentFilter, setConsentFilter] = useState('');
+  const [scopeFilter, setScopeFilter] = useState('all');
   const [selectedConsents, setSelectedConsents] = useState(new Set());
 
   useEffect(() => {
@@ -108,6 +109,10 @@ export default function DataWalletTab({ session, showToast }) {
   }
 
   const filteredConsents = consents?.filter(c => {
+    // Scope filter
+    if (scopeFilter === 'federation' && c.scope !== 'federation') return false;
+    if (scopeFilter === 'auth' && c.scope !== 'auth') return false;
+    // Text filter
     if (!consentFilter) return true;
     const q = consentFilter.toLowerCase();
     const recip = (c.recipient_gaii || c.recipient || '').toLowerCase();
@@ -218,11 +223,25 @@ export default function DataWalletTab({ session, showToast }) {
     `}
 
     ${consents && consents.length > 0 && html`
-      <div class="flex-row mb-half">
+      <div class="flex-row mb-half dw-filter-row">
         <input type="text" class="input-field dw-filter-input"
           placeholder=${t('permissions.filterPlaceholder')}
           value=${consentFilter}
           onInput=${(e) => { setConsentFilter(e.target.value); setSelectedConsents(new Set()); }} />
+        <div class="dw-scope-filters">
+          <button class="btn-sm ${scopeFilter === 'all' ? 'btn-primary' : 'btn-outline'}"
+            onClick=${() => { setScopeFilter('all'); setSelectedConsents(new Set()); }}>
+            ${t('wallet.consents.filterAll')}
+          </button>
+          <button class="btn-sm ${scopeFilter === 'federation' ? 'btn-primary' : 'btn-outline'}"
+            onClick=${() => { setScopeFilter('federation'); setSelectedConsents(new Set()); }}>
+            ${t('wallet.consents.filterFederation')}
+          </button>
+          <button class="btn-sm ${scopeFilter === 'auth' ? 'btn-primary' : 'btn-outline'}"
+            onClick=${() => { setScopeFilter('auth'); setSelectedConsents(new Set()); }}>
+            ${t('wallet.consents.filterAuth')}
+          </button>
+        </div>
         ${selectedConsents.size > 0 && html`
           <button class="btn-danger text-meta" onClick=${() => handleBulkRevoke(selectedConsents)}>
             ${t('permissions.revokeSelected')} (${selectedConsents.size})
@@ -266,7 +285,15 @@ export default function DataWalletTab({ session, showToast }) {
                 <td><span class="dw-code-accent">${escHtml(c.data_pattern || c.pattern || '-')}</span></td>
                 <td class="dw-recipient-cell">${recipientBadge(c.recipient_gaii || c.recipient)} <span class="text-meta">${escHtml(c.recipient_gaii || c.recipient || '-')}</span></td>
                 <td>${escHtml(c.purpose || '-')}</td>
-                <td>${isExpired ? html`<span class="badge badge-muted">expired</span>` : html`<span class="badge badge-success">active</span>`} ${escHtml(c.scope || '-')}</td>
+                <td>
+                  ${isExpired ? html`<span class="badge badge-muted">expired</span>` : html`<span class="badge badge-success">active</span>`}
+                  ${' '}
+                  ${c.scope === 'federation'
+                    ? html`<span class="badge badge-info">${t('wallet.consents.scopeFederation')}</span>`
+                    : c.scope === 'auth'
+                    ? html`<span class="badge badge-warn">${t('wallet.consents.scopeAuth')}</span>`
+                    : html`<span>${escHtml(c.scope || '-')}</span>`}
+                </td>
                 <td class="text-meta">${c.granted_at ? new Date(c.granted_at).toLocaleDateString() : '-'}</td>
                 <td class="text-meta">
                   ${expSoon && html`<span class="dw-expiring-icon" title=${t('permissions.expiringWarning')}>\u26A0\uFE0F</span>`}

package/dist/public/views/profile/knowledge-tab.js

@@ -25,7 +25,8 @@ import htm from 'htm';
 const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { escHtml } from '/js/utils.js';
-import { apiGet } from '/js/api.js';
+import { apiGet, apiPost, apiDelete } from '/js/api.js';
+import { listConsents, grantConsent, revokeConsent } from '/js/services/consent.js';
 import { Spinner } from './shared.js';
 import { useConfirm } from '/components/Modal.js';
 import * as knowledgeService from '/js/services/knowledge.js';
@@ -46,6 +47,10 @@ export default function KnowledgeTab({ session, showToast, onStats }) {
   const [deleting, setDeleting] = useState(null);
   const [savingSharing, setSavingSharing] = useState(null);
 
+  /* ── Federation consent state ── */
+  const [fedConsents, setFedConsents] = useState({});   // { packageName: consentId }
+  const [togglingFed, setTogglingFed] = useState(null);
+
   /* ── Discovery state ── */
   const [discovered, setDiscovered] = useState([]);
   const [discoverLoading, setDiscoverLoading] = useState(false);
@@ -77,11 +82,58 @@ export default function KnowledgeTab({ session, showToast, onStats }) {
 
   useEffect(() => { loadPackages(); }, [loadPackages]);
 
+  /* ── Load federation consents for knowledge packages ── */
+  const loadFedConsents = useCallback(async () => {
+    try {
+      const allConsents = await listConsents();
+      const map = {};
+      for (const c of allConsents) {
+        if (c.scope === 'federation' && (c.data_pattern || c.pattern || '').startsWith('packages/')) {
+          const pat = c.data_pattern || c.pattern || '';
+          // Extract package name from pattern like "packages/{name}/*"
+          const match = pat.match(/^packages\/([^/]+)\//);
+          if (match) {
+            map[match[1]] = c.id || c.consent_id;
+          }
+        }
+      }
+      setFedConsents(map);
+    } catch { /* ignore */ }
+  }, []);
+
+  useEffect(() => { loadFedConsents(); }, [loadFedConsents]);
+
+  /* ── Toggle federation consent for a package ── */
+  const toggleFederation = useCallback(async (pkg) => {
+    const manifest = pkg.value;
+    const packageId = manifest?.id || pkg.key.split('/')[1] || pkg.key;
+    setTogglingFed(pkg.key);
+    try {
+      if (fedConsents[packageId]) {
+        // Revoke existing federation consent
+        await revokeConsent(fedConsents[packageId]);
+        showToast(t('knowledge.unfederateSuccess'));
+      } else {
+        // Grant federation consent
+        await grantConsent({
+          data_pattern: `packages/${packageId}/*`,
+          recipient: '*',
+          scope: 'federation',
+          purpose: 'knowledge_sharing',
+        });
+        showToast(t('knowledge.federateSuccess'));
+      }
+      await loadFedConsents();
+    } catch (err) {
+      showToast(err.message || t('profile.error'), true);
+    } finally { setTogglingFed(null); }
+  }, [fedConsents, showToast, loadFedConsents]);
+
   // Live update listener
   const loadRef = useRef(loadPackages);
   loadRef.current = loadPackages;
   useEffect(() => {
-    const handler = () => loadRef.current();
+    const handler = () => { loadRef.current(); loadFedConsents(); };
     window.addEventListener('aimeat-live-update', handler);
     return () => window.removeEventListener('aimeat-live-update', handler);
   }, []);
@@ -581,6 +633,16 @@ export default function KnowledgeTab({ session, showToast, onStats }) {
                 <span class="kpkg-badge kpkg-badge-type">${t('knowledge.contentTypes.' + (manifest.content_type || 'document')) || (manifest.content_type || 'document').toUpperCase()}</span>
                 <span class="kpkg-badge kpkg-badge-synthesis">${t('knowledge.synthesis.' + (manifest.synthesis?.level || 'original'))}</span>
                 <span class="kpkg-badge kpkg-badge-${manifest.maturity || 'draft'}">${t('knowledge.maturity.' + (manifest.maturity || 'draft'))}</span>
+                ${(() => {
+                  const pkgId = manifest?.id || pkg.key.split('/')[1] || pkg.key;
+                  const isFed = !!fedConsents[pkgId];
+                  return html`<button
+                    class="badge ${isFed ? 'badge-success' : 'badge-muted'} kpkg-fed-toggle"
+                    title=${t('profile.federateTooltip')}
+                    disabled=${togglingFed === pkg.key}
+                    onClick=${(e) => { e.stopPropagation(); toggleFederation(pkg); }}
+                  >${togglingFed === pkg.key ? '...' : isFed ? t('knowledge.federated') : t('knowledge.notFederated')}</button>`;
+                })()}
               </div>
               <div class="kpkg-card-tags">
                 ${(manifest.tags || []).map(tag => html`<span class="kpkg-tag" key=${tag}>${escHtml(tag)}</span>`)}

package/dist/public/views/profile/landing-page.js

@@ -264,12 +264,15 @@ function ProfileCard({ tier, stats, session, onEditProfile, onChangePassword })
           </div>
           <div class="pf-lp-ghii">${escHtml(session.ghii || '')}</div>
           <div class="pf-lp-node">${t('profile.node')}: ${escHtml(NODE_URL)}</div>
-          ${isExperienced && typeof stats.nodes === 'number' && stats.nodes > 0 && html`
-            <div class="pf-federation-badge">
-              <span class="pf-fed-dot"></span>
-              ${t('profile.landing.federationBadge').replace('{count}', String(stats.nodes))}
-            </div>
-          `}
+          ${typeof stats.nodes === 'number' && stats.nodes > 0
+            ? html`<div class="pf-federation-badge">
+                <span class="pf-fed-dot"></span>
+                ${t('profile.federation.statusConnected').replace('{count}', String(stats.nodes))}
+              </div>`
+            : html`<div class="pf-federation-badge pf-federation-standalone">
+                ${t('profile.federation.statusStandalone')}
+              </div>`
+          }
         </div>
       </div>
       <div class="pf-lp-stats">

package/dist/public/views/profile/memory-tab.js

@@ -16,7 +16,7 @@ import { Spinner, recipientBadge, VisibilityPill } from './shared.js';
 import * as memoryService from '/js/services/memory.js';
 import AuthImage from '/js/components/auth-image.js';
 import { listAgents } from '/js/services/agents.js';
-import { getKeyPermissions } from '/js/services/consent.js';
+import { getKeyPermissions, listConsents, grantConsent, revokeConsent } from '/js/services/consent.js';
 import { getNodeUrl } from '/js/services/auth.js';
 import TagCloud from '/js/components/tag-cloud.js';
 import TagEditor from '/js/components/tag-editor.js';
@@ -38,18 +38,66 @@ export default function MemoryTab({ session, showToast, onStats }) {
   const [editingFileTags, setEditingFileTags] = useState(null);
   const [agents, setAgents] = useState([]);
   const [selectedAgent, setSelectedAgent] = useState('');
+  const [fedConsents, setFedConsents] = useState({});   // { memoryKey: consentId }
+  const [togglingFed, setTogglingFed] = useState(null);
 
   useEffect(() => {
-    if (session) { loadAgents(); loadMemories(); loadFiles(); }
+    if (session) { loadAgents(); loadMemories(); loadFiles(); loadFedConsents(); }
   }, [session]);
 
   useEffect(() => {
     if (session) { loadMemories(); }
   }, [selectedAgent]);
 
+  async function loadFedConsents() {
+    try {
+      const allConsents = await listConsents();
+      const map = {};
+      for (const c of allConsents) {
+        if (c.scope === 'federation') {
+          const pat = c.data_pattern || c.pattern || '';
+          // Direct key match (no wildcard) or exact pattern
+          if (pat && !pat.includes('*')) {
+            map[pat] = c.id || c.consent_id;
+          }
+        }
+      }
+      setFedConsents(map);
+    } catch { /* ignore */ }
+  }
+
+  async function handleShareToFederation(key) {
+    setTogglingFed(key);
+    try {
+      await grantConsent({
+        data_pattern: key,
+        recipient: '*',
+        scope: 'federation',
+        purpose: 'federation_sharing',
+      });
+      showToast(t('profile.memory.shareSuccess'));
+      await loadFedConsents();
+    } catch (e) {
+      showToast(e.message || t('profile.error'), true);
+    } finally { setTogglingFed(null); }
+  }
+
+  async function handleStopSharing(key) {
+    const consentId = fedConsents[key];
+    if (!consentId) return;
+    setTogglingFed(key);
+    try {
+      await revokeConsent(consentId);
+      showToast(t('profile.memory.unshareSuccess'));
+      await loadFedConsents();
+    } catch (e) {
+      showToast(e.message || t('profile.error'), true);
+    } finally { setTogglingFed(null); }
+  }
+
   // Live update listener — refresh both memories and files
-  const liveRef = useRef(() => { loadMemories(); loadFiles(); });
-  liveRef.current = () => { loadMemories(); loadFiles(); };
+  const liveRef = useRef(() => { loadMemories(); loadFiles(); loadFedConsents(); });
+  liveRef.current = () => { loadMemories(); loadFiles(); loadFedConsents(); };
   useEffect(() => {
     const handler = () => liveRef.current();
     window.addEventListener('aimeat-live-update', handler);
@@ -268,6 +316,7 @@ export default function MemoryTab({ session, showToast, onStats }) {
                 >${t('knowledge.visibility.' + vis)} ▾</button>`;
               })()}
               <span class="shield-icon" title=${t('permissions.sharingRules')} onClick=${(e) => { e.stopPropagation(); loadKeyPerms(m.key); }}>\u{1F6E1}\uFE0F</span>
+              ${fedConsents[m.key] && html`<span class="badge badge-success pf-fed-badge">${t('profile.memory.syncedToFederation')}</span>`}
             </div>
             ${expandedMem === m.key && html`
               <div class="mem-detail">
@@ -304,6 +353,24 @@ export default function MemoryTab({ session, showToast, onStats }) {
                 <div class="mem-actions">
                   <button class="btn-sm" onClick=${() => setEditModal({ key: m.key, value: typeof m.value === 'object' ? JSON.stringify(m.value, null, 2) : String(m.value || ''), visibility: m.visibility || 'private', version: m.version })}>${t('profile.memory.editBtn')}</button>
                   <button class="btn-danger" onClick=${() => handleDeleteMemory(m.key)}>${t('profile.memory.deleteBtn')}</button>
+                  ${fedConsents[m.key]
+                    ? html`<button class="btn-outline btn-sm" disabled=${togglingFed === m.key}
+                        onClick=${() => handleStopSharing(m.key)}>
+                        ${togglingFed === m.key ? '...' : t('profile.memory.stopSharing')}
+                      </button>`
+                    : html`<button class="btn-ghost btn-sm" disabled=${togglingFed === m.key}
+                        onClick=${() => handleShareToFederation(m.key)}>
+                        ${togglingFed === m.key ? '...' : t('profile.memory.shareToFederation')}
+                      </button>`
+                  }
+                  ${session.federated && html`
+                    <button class="btn-ghost" onClick=${() => doPull(m.key)} title=${t('profile.memory.pullFromHome')}>
+                      ↓ ${t('profile.memory.pullFromHome')}
+                    </button>
+                    <button class="btn-ghost" onClick=${() => doPush(m.key)} title=${t('profile.memory.pushToHome')}>
+                      ↑ ${t('profile.memory.pushToHome')}
+                    </button>
+                  `}
                 </div>
               </div>
             `}
@@ -392,10 +459,31 @@ export default function MemoryTab({ session, showToast, onStats }) {
       }`;
   };
 
+  async function doPull(key) {
+    try {
+      await memoryService.pullFromHome(key);
+      showToast(t('profile.memory.pullSuccess'));
+      loadMemories();
+    } catch (e) { showToast(e.message, true); }
+  }
+
+  async function doPush(key) {
+    try {
+      await memoryService.pushToHome(key);
+      showToast(t('profile.memory.pushSuccess'));
+    } catch (e) { showToast(e.message, true); }
+  }
+
   return html`
     <div class="section-title">${t('profile.memory.title')}</div>
     <div class="section-desc">${t('profile.memory.desc')}</div>
 
+    ${session.federated && html`
+      <div class="alert alert-info">
+        <span class="alert-msg">${t('profile.memory.federatedSession')}</span>
+      </div>
+    `}
+
     ${agents.length > 1 && html`
       <div class="agent-selector mb-half">
         <label class="text-meta pf-mr-half">${t('profile.memory.agent') || 'Agent'}:</label>

package/dist/src/auth/jwt.d.ts

@@ -11,6 +11,9 @@ export interface JWTPayload {
     roles: string[];
     scopes?: string[];
     mcp_client?: string;
+    federated?: boolean;
+    homeNode?: string;
+    homeUrl?: string;
 }
 /** Generate a unique session ID for JWT tracking. */
 export declare function generateSessionId(): string;
@@ -25,6 +28,9 @@ export interface VerifiedToken {
     anonymous?: boolean;
     sessionId?: string;
     mcp_client?: string;
+    federated?: boolean;
+    homeNode?: string;
+    homeUrl?: string;
 }
 export declare function verifyJWT(token: string): Promise<VerifiedToken | null>;
 /**

package/dist/src/auth/jwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../src/auth/jwt.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAQvD,wBAAgB,iBAAiB,IAAI;IAAE,UAAU,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAGnF;AAED,wBAAsB,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBnG;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qDAAqD;AACrD,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqB3G;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAoB5E;AAkBD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmB5D;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUjF;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAiB/D"}
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../src/auth/jwt.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAQvD,wBAAgB,iBAAiB,IAAI;IAAE,UAAU,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAGnF;AAED,wBAAsB,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBnG;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qDAAqD;AACrD,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB3G;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAuB5E;AAkBD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmB5D;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUjF;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAiB/D"}