aimeat 1.5.0 → 1.7.0

package/dist/.env.example

@@ -34,6 +34,21 @@ AIMEAT_PORT=40050
 # CORS: comma-separated list of allowed origins, or * for all (default: *)
 # AIMEAT_CORS_ALLOWED_ORIGINS=*
 # AIMEAT_CORS_ALLOWED_ORIGINS=https://portal.aimeat.fi,https://my-app.example.com
+# ── Security Limits ────────────────────────────────────────────
+# AIMEAT_LOGIN_RATE_LIMIT_MAX=15              # Max login attempts per window (default: 15)
+# AIMEAT_LOGIN_RATE_LIMIT_WINDOW_MS=60000     # Login rate limit window in ms (default: 60s)
+# AIMEAT_REGISTRATION_RATE_LIMIT_MAX=5        # Max registrations per window (default: 5)
+# AIMEAT_REGISTRATION_RATE_LIMIT_WINDOW_MS=60000
+# AIMEAT_ADMIN_AUTH_RATE_LIMIT_MAX=5          # Max admin auth attempts per window (default: 5)
+# AIMEAT_ADMIN_AUTH_RATE_LIMIT_WINDOW_MS=60000
+# AIMEAT_PASSWORD_LOCKOUT_ATTEMPTS=5          # Failed attempts before lockout (default: 5)
+# AIMEAT_PASSWORD_LOCKOUT_MINUTES=15          # Lockout duration in minutes (default: 15)
+# AIMEAT_JSON_BODY_LIMIT_MB=5                 # Default JSON body limit (default: 5MB)
+# AIMEAT_JSON_BODY_LIMIT_LARGE_MB=15          # Large body limit for apps/extensions (default: 15MB)
+# AIMEAT_EXT_MAX_DEBIT=100                    # Max morsels per extension wallet.consume() call
+# AIMEAT_FEDERATION_AUTH_POLICY=disabled       # disabled | all_peers | specific_peers
+# AIMEAT_FEDERATION_DEFAULT_SCOPES=memory:read,catalogue:read
+
 # ── Auth & Tokens ──────────────────────────────────────────────
 # AIMEAT_JWT_TTL=3600              # JWT lifetime in seconds (default: 1h)
 # AIMEAT_OTK_TTL_MS=300000        # OTK expiry in ms (default: 5min)

package/dist/locales/en.json

@@ -16,7 +16,8 @@
     "profile": "Profile",
     "logout": "Log Out",
     "loggedInAs": "logged in as",
-    "help": "Help"
+    "help": "Help",
+    "admin": "Admin"
   },
   "hero": {
     "title": "Your data is yours. Your AI works for you.",
@@ -256,6 +257,8 @@
       "connect": "Connect an Automation Agent",
       "connectDesc": "If you have OpenClaw or any other AI automation agent, give it this prompt to register an agent under your account:",
       "copyPrompt": "Copy Prompt",
+      "downloadInstructions": "Download Instructions",
+      "copyFullInstructions": "Copy Full Instructions",
       "copied": "Copied!",
       "copyGaii": "Copy GAII",
       "noAgent": "Don’t have an automation agent yet?",
@@ -352,6 +355,96 @@
         "credentials_warning": "Store the private key securely — it cannot be retrieved again.",
         "polling_note": "If your agent is polling automatically, it will receive these credentials within a few seconds.",
         "token_expiry_note": "The token expires in 24 hours. Your agent uses the private key to obtain a new token automatically."
+      },
+      "subtabs": {
+        "tasks": "Tasks",
+        "directives": "Directives",
+        "capabilities": "Capabilities",
+        "activity": "Activity",
+        "services": "Services",
+        "messages": "Messages"
+      },
+      "tasks": {
+        "title": "Task Queue",
+        "empty": "No tasks yet",
+        "newTask": "New Task",
+        "createTask": "Create Task",
+        "cancel": "Cancel",
+        "titleLabel": "Title",
+        "descLabel": "Description",
+        "statusLabel": "Status",
+        "draft": "Draft",
+        "queued": "Queued",
+        "active": "Active",
+        "done": "Done",
+        "failed": "Failed",
+        "stalled": "Stalled",
+        "events": "Events",
+        "noEvents": "No events",
+        "todoProgress": "TODO Progress",
+        "created": "Created",
+        "lastEvent": "Last Event",
+        "delete": "Delete",
+        "deleteConfirm": "Delete this task?"
+      },
+      "directives": {
+        "title": "Directives",
+        "purpose": "Purpose",
+        "rules": "Rules",
+        "memoryAreas": "Memory Areas",
+        "resources": "Resources",
+        "edit": "Edit",
+        "save": "Save",
+        "cancel": "Cancel",
+        "reset": "Reset to Defaults",
+        "resetConfirm": "Reset agent directives to defaults?",
+        "empty": "No directives configured",
+        "addRule": "Add Rule",
+        "system": "System",
+        "owner": "Owner",
+        "agent": "Agent"
+      },
+      "capabilities": {
+        "technical": "Technical Skills",
+        "domain": "Domain Knowledge",
+        "actionQueue": "Action Queue Support",
+        "verified": "verified",
+        "selfReported": "self-reported",
+        "empty": "No capabilities reported yet",
+        "canAccept": "Can accept work",
+        "canDeliver": "Can deliver work",
+        "languages": "Languages"
+      },
+      "activity": {
+        "tasksCompleted": "Tasks Completed",
+        "tokensUsed": "Tokens Used (30d)",
+        "successRate": "Success Rate",
+        "scheduledJobs": "Scheduled Jobs",
+        "recentLog": "Recent Log",
+        "viewFullLog": "View full log",
+        "noActivity": "No activity recorded yet",
+        "aimeatJob": "AIMEAT (system)",
+        "agentJob": "Agent environment"
+      },
+      "services": {
+        "title": "Published Services",
+        "empty": "No services published",
+        "info": "Other agents can call these services via the work exchange",
+        "calls": "calls",
+        "unpublish": "Unpublish"
+      },
+      "messages": {
+        "title": "Messages",
+        "empty": "No messages yet. Send a message to start a conversation.",
+        "send": "Send",
+        "placeholder": "Type a message...",
+        "online": "online",
+        "offline": "offline",
+        "threads": "Conversations",
+        "proposedTask": "Proposed task",
+        "createTask": "Create this task",
+        "adjustTask": "Let me adjust",
+        "tokensUsed": "tokens"
       }
     },
     "scopes": {
@@ -549,7 +642,9 @@
       "shareToFederation": "Share",
       "stopSharing": "Unshare",
       "shareSuccess": "Shared to federation",
-      "unshareSuccess": "Removed from federation"
+      "unshareSuccess": "Removed from federation",
+      "selectGroup": "Select group",
+      "noGroups": "No sharing groups. Create one in the Access tab."
     },
     "files": {
       "title": "Stored Files",
@@ -770,7 +865,92 @@
       "fedNoConsents": "No federation login access granted.",
       "fedRemove": "Remove",
       "fedGranted": "Auth access granted",
-      "fedRevoked": "Auth access revoked"
+      "fedRevoked": "Auth access revoked",
+      "sharingGroups": {
+        "title": "Sharing Groups",
+        "desc": "Create groups to share memory and files with specific users and agents",
+        "empty": "No sharing groups yet",
+        "newGroup": "New Group",
+        "create": "Create Group",
+        "cancel": "Cancel",
+        "name": "Group Name",
+        "description": "Description",
+        "members": "Members",
+        "entries": "Shared Entries",
+        "delete": "Delete Group",
+        "deleteConfirm": "Delete this sharing group?",
+        "addMember": "Add Member",
+        "removeMember": "Remove",
+        "identifier": "Identifier (GAII or GHII)",
+        "identifierType": "Type"
+      },
+      "agentDefaults": {
+        "title": "Agent Defaults",
+        "desc": "Default rules and settings applied to all your agents",
+        "rules": "Default Rules",
+        "tokenBudget": "Default Token Budget",
+        "empty": "No defaults configured",
+        "edit": "Edit",
+        "save": "Save",
+        "cancel": "Cancel"
+      },
+      "sgTitle": "Sharing Groups",
+      "sgDesc": "Define groups of identities to share memory entries with. Assign a sharing group to memory keys to control who can read or write.",
+      "sgEmpty": "No sharing groups yet.",
+      "sgLoading": "Loading...",
+      "sgCreate": "New Group",
+      "sgCreateTitle": "Create Sharing Group",
+      "sgCreateBtn": "Create",
+      "sgGroupName": "Group name",
+      "sgNamePlaceholder": "e.g. Team Alpha",
+      "sgDescription": "Description (optional)",
+      "sgDescPlaceholder": "What is this group for?",
+      "sgNameRequired": "Group name is required",
+      "sgCreated": "Sharing group created",
+      "sgCreateError": "Failed to create group",
+      "sgUpdated": "Group updated",
+      "sgUpdateError": "Failed to update group",
+      "sgConfirmDelete": "Delete group \"{name}\"? This cannot be undone.",
+      "sgDeleted": "Sharing group deleted",
+      "sgDeleteError": "Failed to delete group",
+      "sgEdit": "Edit",
+      "sgDelete": "Delete",
+      "sgSave": "Save",
+      "sgCancel": "Cancel",
+      "sgMembers": "members",
+      "sgMemberList": "Members",
+      "sgNoMembers": "No members yet",
+      "sgAddMember": "Add Member",
+      "sgMemberIdentifier": "Identifier (GHII or GAII)",
+      "sgMemberType": "Type",
+      "sgMemberRequired": "Identifier is required",
+      "sgMemberAdded": "Member added",
+      "sgMemberAddError": "Failed to add member",
+      "sgConfirmRemoveMember": "Remove \"{name}\" from this group?",
+      "sgMemberRemoved": "Member removed",
+      "sgMemberRemoveError": "Failed to remove member",
+      "sgDefaultPerms": "Default permissions",
+      "sgCreatedAt": "Created",
+      "sgRead": "Read",
+      "sgWrite": "Write",
+      "sgRemove": "Remove",
+      "adTitle": "Agent Defaults",
+      "adDesc": "Owner-level defaults that apply to all your agents unless overridden by per-agent directives.",
+      "adRules": "Default Rules",
+      "adEdit": "Edit",
+      "adEditTitle": "Edit Agent Defaults",
+      "adNoRules": "No default rules set.",
+      "adTokenBudget": "Token Budget",
+      "adUnlimited": "Unlimited",
+      "adBudgetPlaceholder": "Leave empty for unlimited",
+      "adRulePlaceholder": "Add a rule...",
+      "adAddRule": "Add",
+      "adRemoveRule": "Remove",
+      "adSave": "Save",
+      "adCancel": "Cancel",
+      "adInvalidBudget": "Token budget must be a non-negative number",
+      "adSaved": "Agent defaults saved",
+      "adSaveError": "Failed to save defaults"
     },
     "nodes": {
       "title": "Personal Nodes",
@@ -1694,7 +1874,8 @@
       "public": "Public",
       "private": "Private",
       "owner": "My Agents",
-      "protected": "Protected"
+      "protected": "Protected",
+      "group": "Group"
     },
     "knowledge": {
       "parseError": "Could not parse the pasted content as JSON",
@@ -2229,7 +2410,8 @@
     "errUserShort": "Username must be at least 3 characters",
     "errPassShort": "Password must be at least 4 characters",
     "errWrongPass": "Wrong password for that username.",
-    "errFederatedLogin": "Federated login is not yet supported. This node is {localNode}, but the identity belongs to {remoteNode}.",
+    "connectingHome": "Connecting to home node...",
+    "errFederatedLogin": "Could not reach home node {remoteNode} for federated login.",
     "loggedIn": "logged in",
     "logoutBtn": "Logout",
     "usernameLabel": "Username",
@@ -2795,7 +2977,7 @@
     "dailyActivity": "Daily Activity (30 days)",
     "weeklyComparison": "Weekly Comparison",
     "monthlyTrend": "Monthly Trend",
-    "statsExplain": "Lightweight usage counters. Resets on server restart.",
+    "statsExplain": "Usage counters persisted to database. Uptime and live gauges reset on restart.",
     "writes": "Writes",
     "reads": "Reads",
     "grants": "Grants",
@@ -2993,6 +3175,63 @@
     "pushUnsubscribeBtn": "Unsubscribe",
     "pushNoBrowserSupport": "This browser does not support push notifications",
 
+    "blocked": "Blocked",
+    "blockedCooldown": "Cooldown",
+    "blockedDisabled": "Disabled",
+    "blockedQuietHours": "Quiet Hours",
+    "breakdownFailed": "Failed",
+    "breakdownRetried": "Retried",
+    "breakdownSent": "Sent",
+    "breakdownType": "Type",
+    "channelEmail": "Email",
+    "channelPush": "Push",
+    "channels": "Channels",
+    "emailDelivery": "Email Delivery",
+    "emailType": {
+      "group_send": "Group Send",
+      "magic_link": "Magic Link",
+      "match_suggestion": "Match Suggestion",
+      "notification": "Notification",
+      "verification": "Verification"
+    },
+    "emailsFailed": "Emails Failed",
+    "emailsRetried": "Emails Retried",
+    "emailsSent": "Emails Sent",
+    "expiredSubs": "Expired Subs",
+    "live": "live",
+    "mailboxNotifBlocked": "Mailbox Blocked",
+    "mailboxNotifFailed": "Mailbox Failed",
+    "mailboxNotifSent": "Mailbox Sent",
+    "mailboxNotifications": "Mailbox Notifications",
+    "period30Days": "30 Days",
+    "period7Days": "7 Days",
+    "periodAll": "All",
+    "periodApply": "Apply",
+    "periodCustom": "Custom",
+    "periodFrom": "From",
+    "periodLabel": "Period",
+    "periodThisWeek": "This Week",
+    "periodTo": "To",
+    "periodToday": "Today",
+    "weekMon": "Mon",
+    "weekTue": "Tue",
+    "weekWed": "Wed",
+    "weekThu": "Thu",
+    "weekFri": "Fri",
+    "weekSat": "Sat",
+    "weekSun": "Sun",
+    "pushDelivery": "Push Notifications",
+    "pushFailed": "Push Failed",
+    "pushSent": "Push Sent",
+    "pushType": {
+      "board": "Board",
+      "federation": "Federation",
+      "general": "General",
+      "organism": "Organism",
+      "test": "Test",
+      "work": "Work"
+    },
+
     "totalEntries": "Total Entries",
     "cities": "Cities",
     "categories": "Categories",
@@ -3211,6 +3450,13 @@
     "fedShareCatalogue": "Share Catalogue",
     "fedReplicateMemory": "Replicate Memory",
     "fedAllowRouting": "Allow Routing",
+    "fedAllowAuth": "Allow Federated Login",
+    "fedAuthPolicyTitle": "Federation Auth Policy",
+    "fedAuthPolicyDesc": "Control whether users from other nodes can log in here and what they can do.",
+    "fedAuthDisabled": "Disabled (no federated logins)",
+    "fedAuthAllPeers": "All peers (any active peer's users can log in)",
+    "fedAuthSpecificPeers": "Specific peers (per-peer control)",
+    "fedDefaultScopes": "Default scopes for federated users:",
     "fedPeerMode": "Peer Mode",
     "fedPeerModeFederation": "Federation",
     "fedPeerModePrivate": "Private P2P",
@@ -3257,6 +3503,17 @@
     "cfgGroup_totp": "TOTP",
     "cfgGroup_matching": "Matching",
     "cfgGroup_extensions": "Extensions",
+    "cfgGroup_security": "Security",
+    "cfg_security_login_rate_limit_max": "Login rate limit (max per window)",
+    "cfg_security_login_rate_limit_window_ms": "Login rate limit window (ms)",
+    "cfg_security_registration_rate_limit_max": "Registration rate limit (max per window)",
+    "cfg_security_registration_rate_limit_window_ms": "Registration rate limit window (ms)",
+    "cfg_security_admin_auth_rate_limit_max": "Admin auth rate limit (max per window)",
+    "cfg_security_admin_auth_rate_limit_window_ms": "Admin auth rate limit window (ms)",
+    "cfg_security_password_lockout_attempts": "Password lockout after N failures",
+    "cfg_security_password_lockout_minutes": "Password lockout duration (minutes)",
+    "cfg_security_json_body_limit_mb": "JSON body size limit (MB)",
+    "cfg_security_json_body_limit_large_mb": "Large body size limit for apps/extensions (MB)",
     "cfgGroup_marketplace": "Marketplace",
     "cfgGroup_push": "Push",
     "cfgGroup_eudiw": "EUDIW",
@@ -3498,7 +3755,32 @@
     "memoryFilterPrefix": "Filter by key prefix",
     "memoryNoResults": "No memory keys found",
     "memoryDeleteConfirm": "Delete this memory key?",
-    "memoryDeleted": "Memory key deleted"
+    "memoryDeleted": "Memory key deleted",
+    "agentTasksTab": "Agent Tasks",
+    "agentTasksDesc": "Overview of all agent tasks across the node",
+    "agentTasksTotal": "Total Tasks",
+    "agentTasksEmpty": "No agent tasks found",
+    "agentTasksAgent": "Agent",
+    "agentTasksTitle": "Title",
+    "agentTasksStatus": "Status",
+    "agentTasksTodoProgress": "TODO Progress",
+    "agentTasksCreated": "Created",
+    "agentTasksLastEvent": "Last Event",
+    "agentTasksActiveTasks": "Active Agent Tasks",
+    "agentTasksFilterStatus": "Filter by status",
+    "agentTasksAllStatuses": "All statuses",
+    "sharingGroupsTab": "Sharing Groups",
+    "sharingGroupsDesc": "Overview of all sharing groups on the node",
+    "sharingGroupsTotal": "Total Groups",
+    "sharingGroupsEmpty": "No sharing groups found",
+    "sharingGroupsName": "Name",
+    "sharingGroupsOwner": "Owner",
+    "sharingGroupsMembers": "Members",
+    "sharingGroupsEntries": "Entries",
+    "sharingGroupsCreated": "Created",
+    "sharingGroupsTotalCount": "Sharing Groups",
+    "overviewActiveTasks": "Active Tasks",
+    "overviewSharingGroups": "Sharing Groups"
   },
   "launcher": {
     "title": "My Apps",
@@ -3887,7 +4169,8 @@
       "errUserShort": "Username must be at least 3 characters",
       "errPassShort": "Password must be at least 4 characters",
       "errWrongPass": "Wrong password for that username.",
-      "errFederatedLogin": "Federated login is not yet supported. This node is {localNode}, but the identity belongs to {remoteNode}.",
+      "connectingHome": "Connecting to home node...",
+      "errFederatedLogin": "Could not reach home node {remoteNode} for federated login.",
       "loggedIn": "logged in",
       "logoutBtn": "Logout",
       "whyTitle": "✨ What do you get?",