aimeat 1.5.0 → 1.7.0

package/dist/public/views/profile/agents-tasks-subtab.js

@@ -0,0 +1,254 @@
+/**
+ * @file agents-tasks-subtab.js
+ * @description Task queue sub-tab for agent detail view.
+ *   Shows queued, active, and completed tasks with inline creation form.
+ *   Listens for live updates to refresh task data automatically.
+ * @structure
+ *   - AgentTasksSubtab (default export) -- main component
+ *   - TaskItem -- individual task row with expand/collapse
+ *   - TaskCreateForm -- inline task creation form
+ * @version-history
+ *   v1.0.0 -- 2026-05-21 -- Initial creation for Agent Dashboard Phase 1
+ */
+import { h } from 'preact';
+import { useState, useEffect, useRef } from 'preact/hooks';
+import htm from 'htm';
+const html = htm.bind(h);
+import { t } from '/js/i18n.js';
+import { timeAgo } from '/js/utils.js';
+import { listTasks, createTask, deleteTask, listEvents } from '/js/services/agent-tasks.js';
+
+function statusLabel(status) {
+  const key = `profile.agents.tasks.status.${status}`;
+  const val = t(key);
+  // Fallback to capitalized status if translation key not found
+  return val !== key ? val : status.charAt(0).toUpperCase() + status.slice(1);
+}
+
+function TaskItem({ task, agentName, showToast }) {
+  const [expanded, setExpanded] = useState(false);
+  const [events, setEvents] = useState(null);
+  const [loadingEvents, setLoadingEvents] = useState(false);
+
+  async function handleExpand(e) {
+    e.stopPropagation();
+    if (expanded) {
+      setExpanded(false);
+      return;
+    }
+    setExpanded(true);
+    if (!events) {
+      setLoadingEvents(true);
+      try {
+        const resp = await listEvents(agentName, task.id);
+        setEvents(resp?.data?.events || []);
+      } catch {
+        setEvents([]);
+      }
+      setLoadingEvents(false);
+    }
+  }
+
+  async function handleDelete(e) {
+    e.stopPropagation();
+    try {
+      await deleteTask(agentName, task.id);
+      const msg = t('profile.agents.tasks.deleted');
+      showToast(msg !== 'profile.agents.tasks.deleted' ? msg : 'Task deleted');
+    } catch (err) {
+      showToast(err.message || 'Failed to delete task', true);
+    }
+  }
+
+  return html`
+    <div>
+      <div class="agd-task-item" onClick=${handleExpand}>
+        <span class="agd-task-title">${task.title || task.id}</span>
+        <div class="agd-task-meta">
+          ${task.created_at && html`<span class="agd-task-time">${timeAgo(task.created_at)}</span>`}
+          <span class="agd-status agd-status-${task.status || 'draft'}">${statusLabel(task.status || 'draft')}</span>
+        </div>
+      </div>
+      ${expanded && html`
+        <div class="agd-task-expanded">
+          ${task.description && html`<div class="agd-task-desc">${task.description}</div>`}
+          ${task.scope && html`
+            <div class="agd-task-desc">
+              <strong>${t('profile.agents.tasks.scope') !== 'profile.agents.tasks.scope' ? t('profile.agents.tasks.scope') : 'Scope'}:</strong> ${Array.isArray(task.scope) ? task.scope.join(', ') : task.scope}
+            </div>
+          `}
+          ${loadingEvents && html`<div class="agd-empty">${t('profile.loading')}</div>`}
+          ${events && events.length > 0 && html`
+            <div class="agd-event-log">
+              ${events.map(ev => html`
+                <div class="agd-event-item" key=${ev.id || ev.timestamp}>
+                  <span class="agd-event-time">${ev.timestamp ? timeAgo(ev.timestamp) : ''}</span>
+                  <span class="agd-event-type">${ev.type || ev.event || ''}</span>
+                  <span>${ev.message || ev.data || ''}</span>
+                </div>
+              `)}
+            </div>
+          `}
+          ${events && events.length === 0 && html`
+            <div class="agd-empty">${t('profile.agents.tasks.noEvents') !== 'profile.agents.tasks.noEvents' ? t('profile.agents.tasks.noEvents') : 'No events recorded'}</div>
+          `}
+          <div class="agd-task-actions">
+            <button class="btn-danger btn-sm" onClick=${handleDelete}>
+              ${t('profile.agents.tasks.delete') !== 'profile.agents.tasks.delete' ? t('profile.agents.tasks.delete') : 'Delete'}
+            </button>
+          </div>
+        </div>
+      `}
+    </div>
+  `;
+}
+
+function TaskCreateForm({ agentName, showToast, onCreated, onCancel }) {
+  const [title, setTitle] = useState('');
+  const [description, setDescription] = useState('');
+  const [status, setStatus] = useState('queued');
+  const [saving, setSaving] = useState(false);
+
+  async function handleSubmit(e) {
+    e.preventDefault();
+    if (!title.trim()) return;
+    setSaving(true);
+    try {
+      await createTask(agentName, {
+        title: title.trim(),
+        description: description.trim() || undefined,
+        status,
+      });
+      const msg = t('profile.agents.tasks.created');
+      showToast(msg !== 'profile.agents.tasks.created' ? msg : 'Task created');
+      onCreated();
+    } catch (err) {
+      showToast(err.message || 'Failed to create task', true);
+    }
+    setSaving(false);
+  }
+
+  return html`
+    <form class="agd-create-form" onSubmit=${handleSubmit}>
+      <div class="agd-form-field">
+        <label>${t('profile.agents.tasks.titleLabel') !== 'profile.agents.tasks.titleLabel' ? t('profile.agents.tasks.titleLabel') : 'Title'}</label>
+        <input type="text" value=${title} onInput=${(e) => setTitle(e.target.value)}
+               placeholder=${t('profile.agents.tasks.titlePlaceholder') !== 'profile.agents.tasks.titlePlaceholder' ? t('profile.agents.tasks.titlePlaceholder') : 'What should the agent do?'}
+               required />
+      </div>
+      <div class="agd-form-field">
+        <label>${t('profile.agents.tasks.descriptionLabel') !== 'profile.agents.tasks.descriptionLabel' ? t('profile.agents.tasks.descriptionLabel') : 'Description'}</label>
+        <textarea value=${description} onInput=${(e) => setDescription(e.target.value)}
+                  placeholder=${t('profile.agents.tasks.descriptionPlaceholder') !== 'profile.agents.tasks.descriptionPlaceholder' ? t('profile.agents.tasks.descriptionPlaceholder') : 'Detailed instructions (optional)'}></textarea>
+      </div>
+      <div class="agd-form-field">
+        <label>${t('profile.agents.tasks.initialStatus') !== 'profile.agents.tasks.initialStatus' ? t('profile.agents.tasks.initialStatus') : 'Initial status'}</label>
+        <select value=${status} onChange=${(e) => setStatus(e.target.value)}>
+          <option value="draft">${statusLabel('draft')}</option>
+          <option value="queued">${statusLabel('queued')}</option>
+        </select>
+      </div>
+      <div class="agd-form-actions">
+        <button type="submit" class="btn-primary btn-sm" disabled=${saving || !title.trim()}>
+          ${saving
+            ? (t('profile.agents.tasks.creating') !== 'profile.agents.tasks.creating' ? t('profile.agents.tasks.creating') : 'Creating...')
+            : (t('profile.agents.tasks.createBtn') !== 'profile.agents.tasks.createBtn' ? t('profile.agents.tasks.createBtn') : 'Create Task')}
+        </button>
+        <button type="button" class="btn-outline btn-sm" onClick=${onCancel}>
+          ${t('profile.agents.scopeUi.cancel')}
+        </button>
+      </div>
+    </form>
+  `;
+}
+
+export default function AgentTasksSubtab({ agentName, session, showToast }) {
+  const [tasks, setTasks] = useState(null);
+  const [showCreate, setShowCreate] = useState(false);
+  const [error, setError] = useState(null);
+
+  async function loadTasks() {
+    try {
+      const resp = await listTasks(agentName);
+      setTasks(resp?.data?.tasks || []);
+      setError(null);
+    } catch (err) {
+      setError(err.message);
+      setTasks([]);
+    }
+  }
+
+  useEffect(() => {
+    loadTasks();
+  }, [agentName]);
+
+  // Live update listener
+  const loadRef = useRef(loadTasks);
+  loadRef.current = loadTasks;
+  useEffect(() => {
+    const handler = () => loadRef.current();
+    window.addEventListener('aimeat-live-update', handler);
+    return () => window.removeEventListener('aimeat-live-update', handler);
+  }, []);
+
+  function handleCreated() {
+    setShowCreate(false);
+    loadTasks();
+  }
+
+  if (tasks === null) {
+    return html`<div class="agd-empty">${t('profile.loading')}</div>`;
+  }
+
+  // Group tasks by status category
+  const active = tasks.filter(t => t.status === 'active');
+  const queued = tasks.filter(t => t.status === 'queued' || t.status === 'draft');
+  const completed = tasks.filter(t => t.status === 'done' || t.status === 'failed' || t.status === 'stalled');
+
+  return html`
+    <div>
+      <div class="agd-section-header">
+        <span class="agd-section-title">
+          ${t('profile.agents.tasks.title') !== 'profile.agents.tasks.title' ? t('profile.agents.tasks.title') : 'Tasks'}
+          ${tasks.length > 0 && html` (${tasks.length})`}
+        </span>
+        <button class="btn-outline btn-sm" onClick=${(e) => { e.stopPropagation(); setShowCreate(!showCreate); }}>
+          ${showCreate ? '-' : '+'} ${t('profile.agents.tasks.newTask') !== 'profile.agents.tasks.newTask' ? t('profile.agents.tasks.newTask') : 'New Task'}
+        </button>
+      </div>
+
+      ${showCreate && html`
+        <${TaskCreateForm} agentName=${agentName} showToast=${showToast} onCreated=${handleCreated} onCancel=${() => setShowCreate(false)} />
+      `}
+
+      ${error && html`<div class="agd-empty">${error}</div>`}
+
+      ${active.length > 0 && html`
+        <div class="agd-section-title" style="margin-top:0.5rem;margin-bottom:0.25rem">
+          ${t('profile.agents.tasks.activeSection') !== 'profile.agents.tasks.activeSection' ? t('profile.agents.tasks.activeSection') : 'Active'}
+        </div>
+        ${active.map(task => html`<${TaskItem} key=${task.id} task=${task} agentName=${agentName} showToast=${showToast} />`)}
+      `}
+
+      ${queued.length > 0 && html`
+        <div class="agd-section-title" style="margin-top:0.5rem;margin-bottom:0.25rem">
+          ${t('profile.agents.tasks.queuedSection') !== 'profile.agents.tasks.queuedSection' ? t('profile.agents.tasks.queuedSection') : 'Queued'}
+        </div>
+        ${queued.map(task => html`<${TaskItem} key=${task.id} task=${task} agentName=${agentName} showToast=${showToast} />`)}
+      `}
+
+      ${completed.length > 0 && html`
+        <div class="agd-section-title" style="margin-top:0.5rem;margin-bottom:0.25rem">
+          ${t('profile.agents.tasks.completedSection') !== 'profile.agents.tasks.completedSection' ? t('profile.agents.tasks.completedSection') : 'Completed'}
+        </div>
+        ${completed.map(task => html`<${TaskItem} key=${task.id} task=${task} agentName=${agentName} showToast=${showToast} />`)}
+      `}
+
+      ${tasks.length === 0 && !showCreate && html`
+        <div class="agd-empty">
+          ${t('profile.agents.tasks.empty') !== 'profile.agents.tasks.empty' ? t('profile.agents.tasks.empty') : 'No tasks yet. Create one to get started.'}
+        </div>
+      `}
+    </div>
+  `;
+}

package/dist/public/views/profile/knowledge-tab.js

@@ -381,10 +381,10 @@ export default function KnowledgeTab({ session, showToast, onStats }) {
     finally { setLoadingEntries(null); }
   }, [expandedPkg, packages, entryData]);
 
-  /* ── Cycle visibility: private → owner → public → private ── */
-  const cycleVis = ['private', 'owner', 'public'];
-  const visColor = { private: '#c084fc', owner: '#60a5fa', public: '#4ade80' };
-  const visBg = { private: 'rgba(150,100,200,.2)', owner: 'rgba(100,150,255,.2)', public: 'rgba(0,200,100,.2)' };
+  /* ── Cycle visibility: private → owner → group → public → private ── */
+  const cycleVis = ['private', 'owner', 'group', 'public'];
+  const visColor = { private: '#c084fc', owner: '#60a5fa', group: '#10b981', public: '#4ade80' };
+  const visBg = { private: 'rgba(150,100,200,.2)', owner: 'rgba(100,150,255,.2)', group: 'rgba(16,185,129,.2)', public: 'rgba(0,200,100,.2)' };
 
   /* ── Scroll to entry by key (matches full or short key) ── */
   const scrollToEntry = useCallback((entryKey) => {
@@ -468,7 +468,7 @@ export default function KnowledgeTab({ session, showToast, onStats }) {
     const rawData = entryData[entry.key] ?? entry.value;
     const val = formatEntryValue(rawData);
     const vis = entry.visibility || 'private';
-    const nextVis = cycleVis[(cycleVis.indexOf(vis) + 1) % 3];
+    const nextVis = cycleVis[(cycleVis.indexOf(vis) + 1) % cycleVis.length];
     const entryKey = entry.key || '';
     return html`
       <div class="kpkg-detail-entry" key=${i} data-entry-key=${entryKey}>

package/dist/public/views/profile/memory-tab.js

@@ -18,6 +18,7 @@ import AuthImage from '/js/components/auth-image.js';
 import { listAgents } from '/js/services/agents.js';
 import { getKeyPermissions, listConsents, grantConsent, revokeConsent } from '/js/services/consent.js';
 import { getNodeUrl } from '/js/services/auth.js';
+import { listGroups } from '/js/services/sharing-groups.js';
 import TagCloud from '/js/components/tag-cloud.js';
 import TagEditor from '/js/components/tag-editor.js';
 import { useConfirm } from '/components/Modal.js';
@@ -40,9 +41,11 @@ export default function MemoryTab({ session, showToast, onStats }) {
   const [selectedAgent, setSelectedAgent] = useState('');
   const [fedConsents, setFedConsents] = useState({});   // { memoryKey: consentId }
   const [togglingFed, setTogglingFed] = useState(null);
+  const [groups, setGroups] = useState([]);
+  const [groupPickerFor, setGroupPickerFor] = useState(null); // key of the memory entry showing group picker
 
   useEffect(() => {
-    if (session) { loadAgents(); loadMemories(); loadFiles(); loadFedConsents(); }
+    if (session) { loadAgents(); loadMemories(); loadFiles(); loadFedConsents(); loadGroups(); }
   }, [session]);
 
   useEffect(() => {
@@ -111,6 +114,14 @@ export default function MemoryTab({ session, showToast, onStats }) {
     } catch { setAgents([]); }
   }
 
+  async function loadGroups() {
+    try {
+      const resp = await listGroups();
+      if (resp?.data?.groups) setGroups(resp.data.groups);
+      else if (Array.isArray(resp?.data)) setGroups(resp.data);
+    } catch { /* ignore */ }
+  }
+
   async function loadMemories() {
     try {
       const agentGaii = selectedAgent || undefined;
@@ -128,9 +139,9 @@ export default function MemoryTab({ session, showToast, onStats }) {
     } catch { setFiles([]); }
   }
 
-  async function handleCreateMemory(key, value, visibility, tags) {
+  async function handleCreateMemory(key, value, visibility, tags, groupId) {
     try {
-      await memoryService.createMemory(key, value, visibility, tags);
+      await memoryService.createMemory(key, value, visibility, tags, groupId);
       showToast(t('profile.memory.saved'));
       setShowMemForm(false);
       await loadMemories();
@@ -149,8 +160,10 @@ export default function MemoryTab({ session, showToast, onStats }) {
     }, { danger: true });
   }
 
-  async function handleSaveEdit(key, value, visibility, version) {
-    const resp = await memoryService.updateMemoryFull(key, { value, visibility, version });
+  async function handleSaveEdit(key, value, visibility, version, groupId) {
+    const body = { value, visibility, version };
+    if (visibility === 'group' && groupId) body.group_id = groupId;
+    const resp = await memoryService.updateMemoryFull(key, body);
     if (resp.ok === false) { showToast(resp.error?.message || t('profile.error'), true); return; }
     showToast(t('profile.memory.updated'));
     setEditModal(null);
@@ -229,15 +242,15 @@ export default function MemoryTab({ session, showToast, onStats }) {
     } catch { setKeyRulesPopover(null); }
   }
 
-  /* ── Cycle visibility: private → owner → public → private ── */
-  const cycleVis = ['private', 'owner', 'public'];
-  const visColor = { private: '#c084fc', owner: '#60a5fa', public: '#4ade80' };
-  const visBg = { private: 'rgba(150,100,200,.2)', owner: 'rgba(100,150,255,.2)', public: 'rgba(0,200,100,.2)' };
+  /* ── Cycle visibility: private → owner → group → public → private ── */
+  const cycleVis = ['private', 'owner', 'group', 'public'];
+  const visColor = { private: '#c084fc', owner: '#60a5fa', group: '#10b981', public: '#4ade80' };
+  const visBg = { private: 'rgba(150,100,200,.2)', owner: 'rgba(100,150,255,.2)', group: 'rgba(16,185,129,.2)', public: 'rgba(0,200,100,.2)' };
 
-  async function handleUpdateVisibility(key, newVis, version) {
+  async function handleUpdateVisibility(key, newVis, version, groupId) {
     // Optimistic update — change locally first, then persist
     setMemories(prev => prev.map(m => m.key === key ? { ...m, visibility: newVis, version: (m.version || 1) + 1 } : m));
-    const resp = await memoryService.updateMemoryVisibility(key, newVis, version);
+    const resp = await memoryService.updateMemoryVisibility(key, newVis, version, groupId);
     if (resp.ok === false) {
       showToast(resp.error?.message || t('profile.error'), true);
       loadMemories(); // Revert on error
@@ -299,7 +312,7 @@ export default function MemoryTab({ session, showToast, onStats }) {
         <button class="btn-primary" onClick=${() => setShowMemForm(!showMemForm)}>${t('profile.memory.newBtn')}</button>
       </div>
       <${TagCloud} tags=${[...allMemTags]} selected=${memTagFilter} onToggle=${toggleMemTag} onClear=${() => setMemTagFilter(new Set())} />
-      ${showMemForm && html`<${MemoryForm} onSave=${handleCreateMemory} onCancel=${() => setShowMemForm(false)} />`}
+      ${showMemForm && html`<${MemoryForm} onSave=${handleCreateMemory} onCancel=${() => setShowMemForm(false)} groups=${groups} />`}
       ${filtered.length === 0
         ? html`<div class="empty">${memories.length > 0 ? (t('tags.noMatch') || 'No items match selected tags') : t('profile.memory.empty')}</div>`
         : filtered.map(m => html`
@@ -308,9 +321,9 @@ export default function MemoryTab({ session, showToast, onStats }) {
               <span class="mem-key">${escHtml(m.key)}</span>
               ${(() => {
                 const vis = m.visibility || 'private';
-                const nextVis = cycleVis[(cycleVis.indexOf(vis) + 1) % 3];
+                const nextVis = cycleVis[(cycleVis.indexOf(vis) + 1) % cycleVis.length];
                 return html`<button class="kpkg-vis-pill"
-                  onClick=${(e) => { e.stopPropagation(); handleUpdateVisibility(m.key, nextVis, m.version); }}
+                  onClick=${(e) => { e.stopPropagation(); if (nextVis === 'group') { setGroupPickerFor(m.key); } else { handleUpdateVisibility(m.key, nextVis, m.version); } }}
                   title="${t('knowledge.visibility.' + vis)} → ${t('knowledge.visibility.' + nextVis)}"
                   style="background:${visBg[vis]};color:${visColor[vis]};border-color:${visColor[vis]}"
                 >${t('knowledge.visibility.' + vis)} ▾</button>`;
@@ -318,6 +331,21 @@ export default function MemoryTab({ session, showToast, onStats }) {
               <span class="shield-icon" title=${t('permissions.sharingRules')} onClick=${(e) => { e.stopPropagation(); loadKeyPerms(m.key); }}>\u{1F6E1}\uFE0F</span>
               ${fedConsents[m.key] && html`<span class="badge badge-success pf-fed-badge">${t('profile.memory.syncedToFederation')}</span>`}
             </div>
+            ${groupPickerFor === m.key && html`
+              <div class="agd-group-picker" onClick=${(e) => e.stopPropagation()}>
+                <div class="text-caption mb-xs">${t('profile.memory.selectGroup')}</div>
+                ${groups.length === 0
+                  ? html`<div class="text-meta-sm">${t('profile.memory.noGroups')}</div>`
+                  : groups.map(g => html`
+                    <button class="btn-ghost agd-group-option" onClick=${() => {
+                      handleUpdateVisibility(m.key, 'group', m.version, g.id);
+                      setGroupPickerFor(null);
+                    }}>${g.name} (${g.members?.length || 0} ${t('profile.access.sharingGroups.members')})</button>
+                  `)
+                }
+                <button class="btn-outline btn-sm mt-xs" onClick=${() => { setGroupPickerFor(null); }}>${t('profile.memory.cancelBtn')}</button>
+              </div>
+            `}
             ${expandedMem === m.key && html`
               <div class="mem-detail">
                 <pre>${typeof m.value === 'object' ? JSON.stringify(m.value, null, 2) : String(m.value || '')}</pre>
@@ -423,7 +451,7 @@ export default function MemoryTab({ session, showToast, onStats }) {
               const fKey = f.key || f.name;
               const isImage = f.mime_type?.startsWith('image');
               const vis = f.visibility || 'private';
-              const nextVis = cycleVis[(cycleVis.indexOf(vis) + 1) % 3];
+              const nextVis = cycleVis[(cycleVis.indexOf(vis) + 1) % cycleVis.length];
               return html`
                 <div class="file-card">
                   ${isImage
@@ -506,17 +534,19 @@ export default function MemoryTab({ session, showToast, onStats }) {
       initialValue=${editModal.value}
       initialVisibility=${editModal.visibility}
       initialVersion=${editModal.version}
-      onSave=${(v, vis, ver) => handleSaveEdit(editModal.key, v, vis, ver)}
+      groups=${groups}
+      onSave=${(v, vis, ver, gId) => handleSaveEdit(editModal.key, v, vis, ver, gId)}
       onCancel=${() => setEditModal(null)} />`}
     <${ConfirmUI} />
   `;
 }
 
-function MemoryForm({ onSave, onCancel }) {
+function MemoryForm({ onSave, onCancel, groups }) {
   const [key, setKey] = useState('');
   const [value, setValue] = useState('');
   const [vis, setVis] = useState('private');
   const [tags, setTags] = useState('');
+  const [groupId, setGroupId] = useState('');
   return html`
     <div class="create-form">
       <div class="form-row"><label>${t('profile.memory.keyLabel')}</label><input class="input-field" placeholder=${t('profile.memory.keyPlaceholder')} value=${key} onInput=${e => setKey(e.target.value)} /></div>
@@ -525,12 +555,21 @@ function MemoryForm({ onSave, onCancel }) {
         <select class="input-field" value=${vis} onChange=${e => setVis(e.target.value)}>
           <option value="private">${t('profile.memory.visPrivate')}</option>
           <option value="shared">${t('profile.memory.visShared')}</option>
+          <option value="group">Group</option>
           <option value="public">${t('profile.memory.visPublic')}</option>
         </select>
       </div>
+      ${vis === 'group' && html`
+        <div class="form-row"><label>${t('profile.memory.selectGroup')}</label>
+          <select class="input-field" value=${groupId} onChange=${e => setGroupId(e.target.value)}>
+            <option value="">-- ${t('profile.memory.selectGroup')} --</option>
+            ${(groups || []).map(g => html`<option value=${g.id}>${g.name}</option>`)}
+          </select>
+        </div>
+      `}
       <div class="form-row"><label>${t('profile.memory.tagsLabel')}</label><input class="input-field" placeholder=${t('profile.memory.tagsPlaceholder')} value=${tags} onInput=${e => setTags(e.target.value)} /></div>
       <div class="form-actions">
-        <button class="btn-primary" onClick=${() => { if (!key || !value) return; onSave(key, value, vis, tags); }}>${t('profile.memory.saveBtn')}</button>
+        <button class="btn-primary" onClick=${() => { if (!key || !value) return; onSave(key, value, vis, tags, vis === 'group' ? groupId : undefined); }}>${t('profile.memory.saveBtn')}</button>
         <button class="btn-outline" onClick=${onCancel}>${t('profile.memory.cancelBtn')}</button>
       </div>
     </div>`;
@@ -628,6 +667,7 @@ function FileUploadForm({ onUpload, onCancel }) {
         <select class="input-field" value=${vis} onChange=${e => setVis(e.target.value)}>
           <option value="private">${t('profile.files.visPrivate')}</option>
           <option value="owner">${t('profile.files.visOwner')}</option>
+          <option value="group">Group</option>
           <option value="public">${t('profile.files.visPublic')}</option>
         </select>
       </div>
@@ -658,13 +698,24 @@ function FileUploadForm({ onUpload, onCancel }) {
     </div>`;
 }
 
-function EditMemoryModal({ memKey, initialValue, initialVisibility, initialVersion, onSave, onCancel }) {
+function EditMemoryModal({ memKey, initialValue, initialVisibility, initialVersion, onSave, onCancel, groups }) {
   const [value, setValue] = useState(initialValue);
   const [vis, setVis] = useState(initialVisibility || 'private');
-  const cycleVis = ['private', 'owner', 'public'];
-  const visColor = { private: '#c084fc', owner: '#60a5fa', public: '#4ade80' };
-  const visBg = { private: 'rgba(150,100,200,.2)', owner: 'rgba(100,150,255,.2)', public: 'rgba(0,200,100,.2)' };
-  const nextVis = cycleVis[(cycleVis.indexOf(vis) + 1) % 3];
+  const [groupId, setGroupId] = useState('');
+  const [showGroupSelect, setShowGroupSelect] = useState(false);
+  const cycleVis = ['private', 'owner', 'group', 'public'];
+  const visColor = { private: '#c084fc', owner: '#60a5fa', group: '#10b981', public: '#4ade80' };
+  const visBg = { private: 'rgba(150,100,200,.2)', owner: 'rgba(100,150,255,.2)', group: 'rgba(16,185,129,.2)', public: 'rgba(0,200,100,.2)' };
+  const nextVis = cycleVis[(cycleVis.indexOf(vis) + 1) % cycleVis.length];
+  const handleVisCycle = () => {
+    if (nextVis === 'group') {
+      setShowGroupSelect(true);
+    } else {
+      setVis(nextVis);
+      setShowGroupSelect(false);
+      setGroupId('');
+    }
+  };
   return html`
     <div class="modal-overlay" onClick=${e => { if (e.target.className.includes('modal-overlay')) onCancel(); }}>
       <div class="modal">
@@ -672,14 +723,28 @@ function EditMemoryModal({ memKey, initialValue, initialVisibility, initialVersi
         <div class="form-row flex-row mb-half">
           <label class="pf-label-inline">${t('profile.memory.visLabel')}</label>
           <button class="kpkg-vis-pill"
-            onClick=${() => setVis(nextVis)}
+            onClick=${handleVisCycle}
             title="${t('knowledge.visibility.' + vis)} → ${t('knowledge.visibility.' + nextVis)}"
             style="background:${visBg[vis]};color:${visColor[vis]};border-color:${visColor[vis]}"
           >${t('knowledge.visibility.' + vis)} ▾</button>
         </div>
+        ${showGroupSelect && html`
+          <div class="form-row mb-half">
+            <label>${t('profile.memory.selectGroup')}</label>
+            <select class="input-field" value=${groupId} onChange=${e => {
+              setGroupId(e.target.value);
+              if (e.target.value) { setVis('group'); setShowGroupSelect(false); }
+            }}>
+              <option value="">-- ${t('profile.memory.selectGroup')} --</option>
+              ${(groups || []).map(g => html`<option value=${g.id}>${g.name}</option>`)}
+            </select>
+            ${(groups || []).length === 0 && html`<div class="text-meta-sm">${t('profile.memory.noGroups')}</div>`}
+            <button class="btn-outline btn-sm mt-xs" onClick=${() => setShowGroupSelect(false)}>${t('profile.memory.cancelBtn')}</button>
+          </div>
+        `}
         <textarea class="input-field" rows="6" value=${value} onInput=${e => setValue(e.target.value)}></textarea>
         <div class="form-actions mt-1">
-          <button class="btn-primary" onClick=${() => onSave(value, vis, initialVersion)}>${t('profile.save')}</button>
+          <button class="btn-primary" onClick=${() => onSave(value, vis, initialVersion, vis === 'group' ? groupId : undefined)}>${t('profile.save')}</button>
           <button class="btn-outline" onClick=${onCancel}>${t('profile.cancel')}</button>
         </div>
       </div>

package/dist/src/auth/node-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-keys.d.ts","sourceRoot":"","sources":["../../../src/auth/node-keys.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AA6GvD;;GAEG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB1F"}
+{"version":3,"file":"node-keys.d.ts","sourceRoot":"","sources":["../../../src/auth/node-keys.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAgHvD;;GAEG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB1F"}

package/dist/src/auth/node-keys.js

@@ -79,6 +79,9 @@ function persistNodeKey(kp) {
         else {
             // Backward compatible: write plaintext
             writeFileSync(keyPath, JSON.stringify({ publicKey: kp.publicKey, privateKey: kp.privateKey }, null, 2) + '\n', { mode: 0o600 });
+            if (process.platform === 'win32') {
+                logger.warn('Node key saved without encryption. Windows does not enforce 0o600 permissions. Set AIMEAT_KEY_PASSPHRASE.');
+            }
         }
     }
     catch (err) {

package/dist/src/auth/node-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-keys.js","sourceRoot":"","sources":["../../../src/auth/node-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,IAAI,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG7G,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAY5C,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CACrB,EAA6C,EAC7C,UAAkB;IAElB,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,4BAA4B;IAC9D,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEpC,OAAO;QACL,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,IAAsB,EACtB,UAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACjE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAErD,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAExD,kCAAkC;QAClC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACrD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAC;gBACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,EAA6C;IACnE,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACrD,IAAI,UAAU,EAAE,CAAC;YACf,2EAA2E;YAC3E,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACjD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,uCAAuC;YACvC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClI,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAoB,EAAE,OAAgB;IACzE,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,8DAA8D;YAC9D,OAAO,GAAG,oBAAoB,EAAE,CAAC;YACjC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBAC1C,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;gBACnC,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;gBACtD,OAAO,GAAG,EAAE,CAAC;gBACb,cAAc,CAAC,EAAE,CAAC,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,MAAM,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC;QACtD,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}
+{"version":3,"file":"node-keys.js","sourceRoot":"","sources":["../../../src/auth/node-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,IAAI,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG7G,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAY5C,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CACrB,EAA6C,EAC7C,UAAkB;IAElB,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,4BAA4B;IAC9D,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEpC,OAAO;QACL,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,IAAsB,EACtB,UAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACjE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAErD,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAExD,kCAAkC;QAClC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACrD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAC;gBACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,EAA6C;IACnE,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACrD,IAAI,UAAU,EAAE,CAAC;YACf,2EAA2E;YAC3E,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACjD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,uCAAuC;YACvC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChI,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,2GAA2G,CAAC,CAAC;YAC3H,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAoB,EAAE,OAAgB;IACzE,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,8DAA8D;YAC9D,OAAO,GAAG,oBAAoB,EAAE,CAAC;YACjC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBAC1C,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;gBACnC,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;gBACtD,OAAO,GAAG,EAAE,CAAC;gBACb,cAAc,CAAC,EAAE,CAAC,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,MAAM,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC;QACtD,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/src/config.d.ts

@@ -108,6 +108,18 @@ export interface AimeatConfig {
     rlAuthChallenge: number;
     federationRole: FederationRole;
     genesisUrl: string | null;
+    federationAuthPolicy: 'disabled' | 'all_peers' | 'specific_peers';
+    federationDefaultScopes: string[];
+    loginRateLimitMax: number;
+    loginRateLimitWindowMs: number;
+    registrationRateLimitMax: number;
+    registrationRateLimitWindowMs: number;
+    adminAuthRateLimitMax: number;
+    adminAuthRateLimitWindowMs: number;
+    passwordLockoutAttempts: number;
+    passwordLockoutMinutes: number;
+    jsonBodyLimitMb: number;
+    jsonBodyLimitLargeMb: number;
     consentEnabled: boolean;
     consentAuditRetentionDays: number;
     consentMaxPerUser: number;
@@ -215,6 +227,7 @@ export interface AimeatConfig {
     extensionMaxMemoryMb: number;
     extensionTimeoutMs: number;
     extensionMaxApiCalls: number;
+    extensionMaxDebitPerCall: number;
     extensionMaxCodeSizeKb: number;
     extensionMaxInstalled: number;
     maxExtensionsPerOwner: number;
@@ -244,6 +257,11 @@ export interface AimeatConfig {
     capabilityWebhooks: 'disabled' | 'allowlist_only' | 'open';
     capabilityWebhookDomainAllowlist: string[];
     capabilityLogRetentionDays: number;
+    taskStallThresholdMinutes: number;
+    agentSystemPrinciples: string[];
+    agentMaxTokensPerTask: number;
+    agentMandatoryLogging: boolean;
+    agentAimeatFirstEnabled: boolean;
     corsAllowedOrigins: string[];
     consulEnabled: boolean;
     consulUrl: string;