@agent-deck/backend 1.2.8 → 1.2.10

package/dist/lib/agent-deck-context.js

@@ -3,7 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AgentDeckContextError = void 0;
 exports.resolveAgentDeckId = resolveAgentDeckId;
 const shared_1 = require("@agent-deck/shared");
-const repo_deck_1 = require("../scope/repo-deck");
 class AgentDeckContextError extends Error {
     constructor(message) {
         super(message);
@@ -15,34 +14,16 @@ function headerValue(request, name) {
     const value = request.headers[name];
     return typeof value === 'string' && value.trim() ? value.trim() : undefined;
 }
-/** Resolve which deck an agent request is scoped to (workspace manifest or explicit deck id). */
+/** Resolve which deck an agent request is scoped to (session deck id header only). */
 async function resolveAgentDeckId(request, db) {
     const deckIdHeader = headerValue(request, shared_1.AGENT_DECK_DECK_ID_HEADER);
-    if (deckIdHeader) {
-        const deck = await db.getDeck(deckIdHeader);
-        if (!deck) {
-            throw new AgentDeckContextError(`Deck not found: ${deckIdHeader}`);
-        }
-        return deckIdHeader;
+    if (!deckIdHeader) {
+        throw new AgentDeckContextError('No bound deck — call bind_workspace with deckId (use get_decks to list decks) or switch_bound_deck');
     }
-    const workspaceRoot = headerValue(request, shared_1.AGENT_DECK_WORKSPACE_HEADER);
-    if (workspaceRoot) {
-        let manifest;
-        try {
-            manifest = await (0, repo_deck_1.loadRepoDeckManifest)(workspaceRoot);
-        }
-        catch (error) {
-            throw new AgentDeckContextError(error instanceof repo_deck_1.RepoDeckManifestError ? error.message : 'Failed to load repo deck manifest');
-        }
-        if (!manifest) {
-            throw new AgentDeckContextError(`No ${'.agent-deck/deck.yaml'} found in workspace: ${workspaceRoot}`);
-        }
-        const deck = await db.getDeck(manifest.deck_id);
-        if (!deck) {
-            throw new AgentDeckContextError(`deck_id in repo manifest not found in Agent Deck: ${manifest.deck_id}`);
-        }
-        return manifest.deck_id;
+    const deck = await db.getDeck(deckIdHeader);
+    if (!deck) {
+        throw new AgentDeckContextError(`Deck not found: ${deckIdHeader}`);
     }
-    throw new AgentDeckContextError('Agent deck context required: set x-agent-deck-workspace (with .agent-deck/deck.yaml) or x-agent-deck-deck-id');
+    return deckIdHeader;
 }
 //# sourceMappingURL=agent-deck-context.js.map

package/dist/lib/agent-deck-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-deck-context.js","sourceRoot":"","sources":["../../src/lib/agent-deck-context.ts"],"names":[],"mappings":";;;AAqBA,gDA2CC;AA/DD,+CAG4B;AAE5B,kDAAiF;AAEjF,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAED,SAAS,WAAW,CAAC,OAAuB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,iGAAiG;AAC1F,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,EAAmB;IAEnB,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,kCAAyB,CAAC,CAAC;IACrE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,EAAE,oCAA2B,CAAC,CAAC;IACxE,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAA,gCAAoB,EAAC,aAAa,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,qBAAqB,CAC7B,KAAK,YAAY,iCAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAC7F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,qBAAqB,CAC7B,MAAM,uBAAuB,wBAAwB,aAAa,EAAE,CACrE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,qBAAqB,CAC7B,qDAAqD,QAAQ,CAAC,OAAO,EAAE,CACxE,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,qBAAqB,CAC7B,8GAA8G,CAC/G,CAAC;AACJ,CAAC"}
+{"version":3,"file":"agent-deck-context.js","sourceRoot":"","sources":["../../src/lib/agent-deck-context.ts"],"names":[],"mappings":";;;AAiBA,gDAgBC;AAhCD,+CAA+D;AAG/D,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAED,SAAS,WAAW,CAAC,OAAuB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,sFAAsF;AAC/E,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,EAAmB;IAEnB,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,kCAAyB,CAAC,CAAC;IACrE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,qBAAqB,CAC7B,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/lib/client-scope.d.ts

@@ -6,6 +6,10 @@ export declare function sanitizeServiceForAgent(service: Service): Service;
 export declare function getClientScope(request: FastifyRequest): ClientScope;
 export declare function isDashboardClient(request: FastifyRequest): boolean;
 export declare function requireDashboardClient(request: FastifyRequest): void;
+export declare function requireAgentClient(request: FastifyRequest): void;
+export declare class AgentClientOnlyError extends Error {
+    constructor(message?: string);
+}
 export declare class DashboardOnlyError extends Error {
     constructor(message?: string);
 }

package/dist/lib/client-scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-scope.d.ts","sourceRoot":"","sources":["../../src/lib/client-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAGL,IAAI,EACJ,OAAO,EACR,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,OAAO,CAAC;AAchD,sEAAsE;AACtE,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAUjE;AASD,wBAAgB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,WAAW,CAMnE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAElE;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAIpE;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,SAA4D;CAIhF;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAC5B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,IAAI,CASN;AAED,qCAAqC;AACrC,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,IAAI,CAEN"}
+{"version":3,"file":"client-scope.d.ts","sourceRoot":"","sources":["../../src/lib/client-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAIL,IAAI,EACJ,OAAO,EACR,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,OAAO,CAAC;AAchD,sEAAsE;AACtE,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAUjE;AASD,wBAAgB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,WAAW,CAMnE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAElE;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAIpE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAKhE;AAED,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,SAAuD;CAI3E;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,SAA4D;CAIhF;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAC5B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,IAAI,CASN;AAED,qCAAqC;AACrC,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,WAAW,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,IAAI,CAEN"}

package/dist/lib/client-scope.js

@@ -1,10 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DashboardOnlyError = void 0;
+exports.DashboardOnlyError = exports.AgentClientOnlyError = void 0;
 exports.sanitizeServiceForAgent = sanitizeServiceForAgent;
 exports.getClientScope = getClientScope;
 exports.isDashboardClient = isDashboardClient;
 exports.requireDashboardClient = requireDashboardClient;
+exports.requireAgentClient = requireAgentClient;
 exports.applyDeckScope = applyDeckScope;
 exports.applyDeckCredentialScope = applyDeckCredentialScope;
 const shared_1 = require("@agent-deck/shared");
@@ -50,6 +51,19 @@ function requireDashboardClient(request) {
         throw new DashboardOnlyError();
     }
 }
+function requireAgentClient(request) {
+    const value = request.headers[shared_1.AGENT_DECK_CLIENT_HEADER];
+    if (typeof value !== 'string' || value.toLowerCase() !== shared_1.AGENT_DECK_AGENT_CLIENT) {
+        throw new AgentClientOnlyError();
+    }
+}
+class AgentClientOnlyError extends Error {
+    constructor(message = 'This operation requires an Agent Deck agent client') {
+        super(message);
+        this.name = 'AgentClientOnlyError';
+    }
+}
+exports.AgentClientOnlyError = AgentClientOnlyError;
 class DashboardOnlyError extends Error {
     constructor(message = 'This operation requires the Agent Deck dashboard client') {
         super(message);

package/dist/lib/client-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-scope.js","sourceRoot":"","sources":["../../src/lib/client-scope.ts"],"names":[],"mappings":";;;AAuBA,0DAUC;AASD,wCAMC;AAED,8CAEC;AAED,wDAIC;AAUD,wCAaC;AAGD,4DAMC;AAzFD,+CAK4B;AAI5B,SAAS,wBAAwB,CAC/B,OAAuC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC,aAAa,CAAC;IAC1B,OAAO,IAAI,CAAC,aAAa,CAAC;IAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,sEAAsE;AACtE,SAAgB,uBAAuB,CAAC,OAAgB;IACtD,OAAO;QACL,GAAG,OAAO;QACV,iBAAiB,EAAE,SAAS;QAC5B,gBAAgB,EAAE,SAAS;QAC3B,iBAAiB,EAAE,SAAS;QAC5B,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC;QAClD,QAAQ,EAAE,SAAS;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAU;IACtC,OAAO;QACL,GAAG,IAAI;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE;KAC5D,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAAC,OAAuB;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,iCAAwB,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,oCAA2B,EAAE,CAAC;QACrF,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,iBAAiB,CAAC,OAAuB;IACvD,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,WAAW,CAAC;AACjD,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAuB;IAC5D,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC;AAED,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAO,GAAG,yDAAyD;QAC7E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAED,oFAAoF;AACpF,SAAgB,cAAc,CAC5B,IAAU,EACV,KAAkB,EAClB,aAAsB;IAEtB,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,aAAa,IAAI,IAAI,CAAC,EAAE,KAAK,aAAa,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,qCAAqC;AACrC,SAAgB,wBAAwB,CACtC,IAAU,EACV,KAAkB,EAClB,aAAsB;IAEtB,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"client-scope.js","sourceRoot":"","sources":["../../src/lib/client-scope.ts"],"names":[],"mappings":";;;AAwBA,0DAUC;AASD,wCAMC;AAED,8CAEC;AAED,wDAIC;AAED,gDAKC;AAiBD,wCAaC;AAGD,4DAMC;AAxGD,+CAM4B;AAI5B,SAAS,wBAAwB,CAC/B,OAAuC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC,aAAa,CAAC;IAC1B,OAAO,IAAI,CAAC,aAAa,CAAC;IAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,sEAAsE;AACtE,SAAgB,uBAAuB,CAAC,OAAgB;IACtD,OAAO;QACL,GAAG,OAAO;QACV,iBAAiB,EAAE,SAAS;QAC5B,gBAAgB,EAAE,SAAS;QAC3B,iBAAiB,EAAE,SAAS;QAC5B,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC;QAClD,QAAQ,EAAE,SAAS;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAU;IACtC,OAAO;QACL,GAAG,IAAI;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE;KAC5D,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAAC,OAAuB;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,iCAAwB,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,oCAA2B,EAAE,CAAC;QACrF,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,iBAAiB,CAAC,OAAuB;IACvD,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,WAAW,CAAC;AACjD,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAuB;IAC5D,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAuB;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,iCAAwB,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,gCAAuB,EAAE,CAAC;QACjF,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAO,GAAG,oDAAoD;QACxE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AALD,oDAKC;AAED,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAO,GAAG,yDAAyD;QAC7E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAED,oFAAoF;AACpF,SAAgB,cAAc,CAC5B,IAAU,EACV,KAAkB,EAClB,aAAsB;IAEtB,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,aAAa,IAAI,IAAI,CAAC,EAAE,KAAK,aAAa,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,qCAAqC;AACrC,SAAgB,wBAAwB,CACtC,IAAU,EACV,KAAkB,EAClB,aAAsB;IAEtB,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AACpD,CAAC"}

package/dist/mcp-server.d.ts

@@ -9,6 +9,9 @@ export declare class AgentDeckMCPServer {
     /** Per-session workspace + optional deck override (see mcp-session-binding.ts). */
     private sessionBinding;
     private activeSessionId;
+    /** Session badge from the backend registry (POST /api/scope/live-display response). */
+    private badgeBySession;
+    private lastTouchAtMs;
     private get server();
     constructor(port?: number, backendUrl?: string);
     private createMcpServer;
@@ -16,7 +19,11 @@ export declare class AgentDeckMCPServer {
     private getAgentHeaders;
     private fetchDeck;
     private buildBindingPayload;
-    private writeBindingSidecar;
+    private registerLiveDisplay;
+    private static readonly TOUCH_DEBOUNCE_MS;
+    /** Fire-and-forget lastActivityAt bump; only for sessions the registry knows. */
+    private touchLiveDisplay;
+    private unregisterLiveDisplay;
     private callBackendAPI;
     private getBoundDeckId;
     private toolResult;

package/dist/mcp-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAUA,OAAO,OAA8B,MAAM,SAAS,CAAC;AA2BrD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAiC;IACjD,mFAAmF;IACnF,OAAO,CAAC,wBAAwB,CAAwB;IACxD,mFAAmF;IACnF,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,eAAe,CAAqB;IAE5C,OAAO,KAAK,MAAM,GAKjB;gBAEW,IAAI,GAAE,MAAa,EAAE,UAAU,GAAE,MAAgC;IAc7E,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;YAIT,SAAS;YAkBT,mBAAmB;YAYnB,mBAAmB;YAqBnB,cAAc;YAwCd,cAAc;IAQ5B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB,6EAA6E;IAC7E,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,UAAU;IAy2BlB,OAAO,CAAC,cAAc;IA8MtB,OAAO,CAAC,WAAW;IA2CnB,OAAO,CAAC,kBAAkB;YAKZ,aAAa;YAuDb,uBAAuB;IAiB/B,KAAK;IAmCL,IAAI;CAeX"}
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AASA,OAAO,OAA8B,MAAM,SAAS,CAAC;AAmBrD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAiC;IACjD,mFAAmF;IACnF,OAAO,CAAC,wBAAwB,CAAwB;IACxD,mFAAmF;IACnF,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,eAAe,CAAqB;IAC5C,uFAAuF;IACvF,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,aAAa,CAA6B;IAElD,OAAO,KAAK,MAAM,GAKjB;gBAEW,IAAI,GAAE,MAAa,EAAE,UAAU,GAAE,MAAgC;IAc7E,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;YAIT,SAAS;YAkBT,mBAAmB;YAgBnB,mBAAmB;IA+BjC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAElD,iFAAiF;IACjF,OAAO,CAAC,gBAAgB;YAmBV,qBAAqB;YAUrB,cAAc;YAwCd,cAAc;IAQ5B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB,6EAA6E;IAC7E,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,UAAU;IAkpBlB,OAAO,CAAC,cAAc;IA8MtB,OAAO,CAAC,WAAW;IA2CnB,OAAO,CAAC,kBAAkB;YAKZ,aAAa;YA2Db,uBAAuB;IAkB/B,KAAK;IAiCL,IAAI;CAeX"}

package/dist/mcp-server.js

@@ -10,13 +10,9 @@ const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
 const shared_1 = require("@agent-deck/shared");
 const express_1 = __importDefault(require("express"));
 const node_crypto_1 = require("node:crypto");
-const promises_1 = __importDefault(require("node:fs/promises"));
-const node_path_1 = __importDefault(require("node:path"));
 const zod_1 = require("zod");
-const repo_deck_1 = require("./scope/repo-deck");
 const version_1 = require("./lib/version");
 const mcp_session_binding_1 = require("./mcp-session-binding");
-const bindings_sidecar_1 = require("./scope/bindings-sidecar");
 const agentClientHeaders = {
     [shared_1.AGENT_DECK_CLIENT_HEADER]: shared_1.AGENT_DECK_AGENT_CLIENT,
     Accept: 'application/json',
@@ -31,6 +27,9 @@ class AgentDeckMCPServer {
     /** Per-session workspace + optional deck override (see mcp-session-binding.ts). */
     sessionBinding;
     activeSessionId;
+    /** Session badge from the backend registry (POST /api/scope/live-display response). */
+    badgeBySession = new Map();
+    lastTouchAtMs = new Map();
     get server() {
         if (!this.mcpServerForRegistration) {
             throw new Error('Internal: MCP server not in registration context');
@@ -78,18 +77,22 @@ class AgentDeckMCPServer {
         }
         return body.data;
     }
-    async buildBindingPayload(sessionId, manifestDeckId) {
+    async buildBindingPayload(sessionId) {
         const snapshot = this.sessionBinding.getBinding(sessionId);
         const deck = await this.callBackendAPI('/api/scope/deck');
+        const badge = this.badgeBySession.get(sessionId);
+        const cardCounts = deck ? (0, shared_1.countDeckCards)(deck) : { mcp: 0, credentials: 0, playbooks: 0 };
         return {
             workspaceRoot: snapshot.workspaceRoot,
             deck_id: deck?.id,
             deck_name: deck?.name,
-            deck_source: (0, mcp_session_binding_1.resolveDeckBindingSource)(snapshot, manifestDeckId),
+            deck_source: (0, mcp_session_binding_1.resolveDeckBindingSource)(snapshot),
             session_deck_override: this.sessionBinding.hasSessionDeckOverride(sessionId),
+            badge,
+            display_summary: (0, shared_1.formatDisplayLine)(deck?.name ?? null, cardCounts, { badge }),
         };
     }
-    async writeBindingSidecar(sessionId, manifestDeckId) {
+    async registerLiveDisplay(sessionId) {
         const snapshot = this.sessionBinding.getBinding(sessionId);
         if (!snapshot.workspaceRoot) {
             return;
@@ -98,14 +101,51 @@ class AgentDeckMCPServer {
         if (!deck?.id || !deck?.name) {
             return;
         }
-        await (0, bindings_sidecar_1.upsertBindingForSession)(sessionId, {
-            deckId: deck.id,
-            deckName: deck.name,
-            source: (0, mcp_session_binding_1.resolveDeckBindingSource)(snapshot, manifestDeckId),
-            updatedAt: new Date().toISOString(),
-            cardCounts: (0, shared_1.countDeckCards)(deck),
-            workspaceRoot: snapshot.workspaceRoot,
+        const clientName = this.sessions.get(sessionId)?.server.server.getClientVersion()?.name;
+        const result = await this.callBackendAPI('/api/scope/live-display', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                mcpSessionId: sessionId,
+                workspaceRoot: snapshot.workspaceRoot,
+                deckId: deck.id,
+                deckName: deck.name,
+                source: (0, mcp_session_binding_1.resolveDeckBindingSource)(snapshot),
+                clientName,
+                cardCounts: (0, shared_1.countDeckCards)(deck),
+                updatedAt: new Date().toISOString(),
+            }),
         });
+        if (result && typeof result.badge === 'string') {
+            this.badgeBySession.set(sessionId, result.badge);
+        }
+    }
+    static TOUCH_DEBOUNCE_MS = 5_000;
+    /** Fire-and-forget lastActivityAt bump; only for sessions the registry knows. */
+    touchLiveDisplay(sessionId) {
+        if (!this.badgeBySession.has(sessionId)) {
+            return;
+        }
+        const now = Date.now();
+        if (now - (this.lastTouchAtMs.get(sessionId) ?? 0) < AgentDeckMCPServer.TOUCH_DEBOUNCE_MS) {
+            return;
+        }
+        this.lastTouchAtMs.set(sessionId, now);
+        void this.callBackendAPI(`/api/scope/live-display/${encodeURIComponent(sessionId)}/touch`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ at: new Date().toISOString() }),
+        }).catch(() => { });
+    }
+    async unregisterLiveDisplay(sessionId) {
+        try {
+            await this.callBackendAPI(`/api/scope/live-display/${encodeURIComponent(sessionId)}`, {
+                method: 'DELETE',
+            });
+        }
+        catch {
+            // Best effort when MCP session closes.
+        }
     }
     async callBackendAPI(endpoint, init = {}) {
         try {
@@ -168,84 +208,52 @@ class AgentDeckMCPServer {
     setupTools() {
         this.registerTool("bind_workspace", {
             title: "Bind Workspace",
-            description: "Bind this MCP session to a workspace root. Pass deckId for a session-only deck override (same path, different concurrent agents). Without deckId, uses .agent-deck/deck.yaml when present.",
+            description: "Bind this MCP session to a workspace root and deck. Use get_decks to list deck ids.",
             inputSchema: {
                 workspaceRoot: zod_1.z.string(),
-                deckId: zod_1.z.string().uuid().optional(),
+                deckId: zod_1.z.string().uuid(),
             },
         }, async ({ workspaceRoot, deckId }) => {
             try {
                 const sessionId = this.getSessionId();
                 this.sessionBinding.setWorkspace(sessionId, workspaceRoot);
-                if (deckId) {
-                    const deck = await this.fetchDeck(deckId);
-                    this.sessionBinding.setDeckId(sessionId, deckId);
-                    const payload = await this.buildBindingPayload(sessionId);
-                    await this.writeBindingSidecar(sessionId);
-                    return {
-                        content: [{
-                                type: "text",
-                                text: JSON.stringify({
-                                    ...payload,
-                                    deck_name: deck.name,
-                                    message: 'Session bound with deck override. .agent-deck/deck.yaml is unchanged; other MCP sessions can use a different deck at the same path.',
-                                }, null, 2),
-                            }],
-                    };
-                }
-                this.sessionBinding.clearDeckId(sessionId);
-                const resolved = await fetch(`${this.backendUrl}/api/scope/resolve`, {
-                    method: 'POST',
-                    headers: { ...agentClientHeaders, 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ workspaceRoot }),
-                });
-                const body = (await resolved.json());
-                if (!body.success || !body.data) {
-                    throw new Error(body.error ??
-                        'Failed to resolve workspace deck. Pass deckId to bind without deck.yaml, or call setup_repo_deck.');
-                }
-                const { data } = body;
-                const payload = await this.buildBindingPayload(sessionId, data.manifest.deck_id);
-                await this.writeBindingSidecar(sessionId, data.manifest.deck_id);
+                const deck = await this.fetchDeck(deckId);
+                this.sessionBinding.setDeckId(sessionId, deckId);
+                await this.registerLiveDisplay(sessionId);
+                const payload = await this.buildBindingPayload(sessionId);
                 return {
                     content: [{
                             type: "text",
                             text: JSON.stringify({
                                 ...payload,
-                                manifestPath: data.manifestPath,
-                                message: 'Session bound via .agent-deck/deck.yaml.',
+                                deck_name: deck.name,
+                                message: 'Session bound to deck.',
                             }, null, 2),
                         }],
                 };
             }
             catch (error) {
-                const message = String(error);
-                const hint = message.includes('deck.yaml') || message.includes('No .agent-deck')
-                    ? ' Pass deckId on bind_workspace, call setup_repo_deck, or get_repo_deck_status to diagnose.'
-                    : '';
-                return {
-                    content: [{ type: "text", text: JSON.stringify({ error: message + hint }, null, 2) }],
-                };
+                return this.toolError(error);
             }
         });
         this.registerTool("switch_bound_deck", {
             title: "Switch Bound Deck",
-            description: "Switch the deck for this MCP session only. Does not modify .agent-deck/deck.yaml. Use when multiple agent sessions share the same workspace path.",
+            description: "Switch the deck for this MCP session only. Use when multiple agent sessions share the same workspace path.",
             inputSchema: { deckId: zod_1.z.string().uuid() },
         }, async ({ deckId }) => {
             try {
                 const sessionId = this.getSessionId();
                 const deck = await this.fetchDeck(deckId);
                 this.sessionBinding.setDeckId(sessionId, deckId);
+                await this.registerLiveDisplay(sessionId);
                 const payload = await this.buildBindingPayload(sessionId);
-                await this.writeBindingSidecar(sessionId);
                 return {
                     content: [{
                             type: "text",
                             text: JSON.stringify({
                                 ...payload,
                                 deck_name: deck.name,
-                                message: 'Session deck switched. Other sessions and deck.yaml are unchanged.',
+                                message: 'Session deck switched. Other sessions are unchanged.',
                             }, null, 2),
                         }],
                 };
@@ -256,31 +264,27 @@ class AgentDeckMCPServer {
         });
         this.registerTool("get_session_binding", {
             title: "Get Session Binding",
-            description: "Show workspace and effective deck for this MCP session, including whether the deck comes from a session override or repo deck.yaml.",
+            description: "Show workspace and effective deck for this MCP session (session override or env default).",
             inputSchema: {},
         }, async () => {
             try {
                 const sessionId = this.getSessionId();
                 const snapshot = this.sessionBinding.getBinding(sessionId);
-                let manifestDeckId;
-                if (snapshot.workspaceRoot && !snapshot.deckSource) {
-                    const manifest = await (0, repo_deck_1.loadRepoDeckManifest)(snapshot.workspaceRoot);
-                    manifestDeckId = manifest?.deck_id;
-                }
                 const deck = await this.callBackendAPI('/api/scope/deck');
+                const badge = this.badgeBySession.get(sessionId);
                 const cardCounts = deck ? (0, shared_1.countDeckCards)(deck) : { mcp: 0, credentials: 0, playbooks: 0 };
-                const displaySummary = (0, shared_1.formatDisplayLine)(deck?.name ?? null, cardCounts);
+                const displaySummary = (0, shared_1.formatDisplayLine)(deck?.name ?? null, cardCounts, { badge });
                 return {
                     content: [{
                             type: "text",
                             text: JSON.stringify({
                                 workspaceRoot: snapshot.workspaceRoot,
-                                session_deck_override: snapshot.deckId,
+                                session_deck_id: snapshot.deckId,
                                 session_deck_source: snapshot.deckSource,
-                                repo_manifest_deck_id: manifestDeckId,
                                 effective_deck_id: deck?.id,
                                 effective_deck_name: deck?.name,
-                                effective_deck_source: (0, mcp_session_binding_1.resolveDeckBindingSource)(snapshot, manifestDeckId),
+                                effective_deck_source: (0, mcp_session_binding_1.resolveDeckBindingSource)(snapshot),
+                                badge,
                                 display_summary: displaySummary,
                             }, null, 2),
                         }],
@@ -290,147 +294,6 @@ class AgentDeckMCPServer {
                 return this.toolError(error);
             }
         });
-        this.registerTool("get_repo_deck_status", {
-            title: "Get Repo Deck Status",
-            description: "Check whether .agent-deck/deck.yaml exists in a workspace and whether it links to a valid deck",
-            inputSchema: { workspaceRoot: zod_1.z.string() },
-        }, async ({ workspaceRoot }) => {
-            try {
-                const filePath = (0, repo_deck_1.repoDeckManifestFilePath)(workspaceRoot);
-                const manifest = await (0, repo_deck_1.loadRepoDeckManifest)(workspaceRoot);
-                if (!manifest) {
-                    const decks = await this.callBackendAPI('/api/decks');
-                    return {
-                        content: [{
-                                type: "text",
-                                text: JSON.stringify({
-                                    status: 'missing',
-                                    workspaceRoot,
-                                    expectedPath: shared_1.REPO_DECK_MANIFEST_PATH,
-                                    message: 'No .agent-deck/deck.yaml found. Use setup_repo_deck to create one.',
-                                    availableDecks: Array.isArray(decks)
-                                        ? decks.map((d) => ({ id: d.id, name: d.name }))
-                                        : decks,
-                                }, null, 2),
-                            }],
-                    };
-                }
-                const resolved = await fetch(`${this.backendUrl}/api/scope/resolve`, {
-                    method: 'POST',
-                    headers: { ...agentClientHeaders, 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ workspaceRoot }),
-                });
-                const body = (await resolved.json());
-                return {
-                    content: [{
-                            type: "text",
-                            text: JSON.stringify({
-                                status: body.success ? 'ok' : 'invalid',
-                                workspaceRoot,
-                                filePath,
-                                manifest,
-                                deck: body.data?.deck,
-                                error: body.success ? undefined : body.error,
-                            }, null, 2),
-                        }],
-                };
-            }
-            catch (error) {
-                return {
-                    content: [{ type: "text", text: JSON.stringify({ error: String(error) }, null, 2) }],
-                };
-            }
-        });
-        this.registerTool("setup_repo_deck", {
-            title: "Setup Repo Deck",
-            description: "Create or verify .agent-deck/deck.yaml in a repo. Links the workspace to an Agent Deck by deck_id. Optionally writes the file.",
-            inputSchema: {
-                workspaceRoot: zod_1.z.string(),
-                deckId: zod_1.z.string().uuid().optional(),
-                deckName: zod_1.z.string().optional(),
-                writeFile: zod_1.z.boolean().optional(),
-            },
-        }, async ({ workspaceRoot, deckId, deckName, writeFile = true }) => {
-            try {
-                const sessionId = this.getSessionId();
-                const existing = await (0, repo_deck_1.loadRepoDeckManifest)(workspaceRoot);
-                if (existing) {
-                    this.sessionBinding.setWorkspace(sessionId, workspaceRoot);
-                    const resolved = await fetch(`${this.backendUrl}/api/scope/resolve`, {
-                        method: 'POST',
-                        headers: { ...agentClientHeaders, 'Content-Type': 'application/json' },
-                        body: JSON.stringify({ workspaceRoot }),
-                    });
-                    const body = (await resolved.json());
-                    if (!body.success || !body.data) {
-                        throw new Error(body.error ?? 'Existing manifest is invalid');
-                    }
-                    return {
-                        content: [{
-                                type: "text",
-                                text: JSON.stringify({
-                                    status: 'existing',
-                                    workspaceRoot,
-                                    manifestPath: body.data.manifestPath,
-                                    deck_id: body.data.manifest.deck_id,
-                                    deck_name: body.data.deck.name,
-                                    message: 'Workspace already linked. Session bound to this deck.',
-                                }, null, 2),
-                            }],
-                    };
-                }
-                if (!deckId) {
-                    const decks = await this.callBackendAPI('/api/decks');
-                    return {
-                        content: [{
-                                type: "text",
-                                text: JSON.stringify({
-                                    status: 'needs_deck_id',
-                                    workspaceRoot,
-                                    expectedPath: shared_1.REPO_DECK_MANIFEST_PATH,
-                                    message: 'Pick a deck id from the dashboard (My Decks → copy icon) and call setup_repo_deck again with deckId.',
-                                    availableDecks: Array.isArray(decks)
-                                        ? decks.map((d) => ({ id: d.id, name: d.name }))
-                                        : decks,
-                                }, null, 2),
-                            }],
-                    };
-                }
-                const deck = await this.callBackendAPI(`/api/decks/${deckId}`);
-                if (!deck?.id) {
-                    throw new Error(`Deck not found: ${deckId}`);
-                }
-                const content = (0, repo_deck_1.formatRepoDeckManifest)(deckId, deckName ?? deck.name);
-                const dirPath = node_path_1.default.join(node_path_1.default.resolve(workspaceRoot), '.agent-deck');
-                const filePath = (0, repo_deck_1.repoDeckManifestFilePath)(workspaceRoot);
-                if (writeFile) {
-                    await promises_1.default.mkdir(dirPath, { recursive: true });
-                    await promises_1.default.writeFile(filePath, content, 'utf8');
-                }
-                this.sessionBinding.setWorkspace(sessionId, workspaceRoot);
-                return {
-                    content: [{
-                            type: "text",
-                            text: JSON.stringify({
-                                status: writeFile ? 'created' : 'preview',
-                                workspaceRoot,
-                                filePath,
-                                deck_id: deckId,
-                                deck_name: deck.name,
-                                manifestContent: content,
-                                message: writeFile
-                                    ? 'Created .agent-deck/deck.yaml and bound this session to the deck.'
-                                    : 'Preview only — set writeFile true to write the file.',
-                            }, null, 2),
-                        }],
-                };
-            }
-            catch (error) {
-                return {
-                    content: [{ type: "text", text: JSON.stringify({ error: String(error) }, null, 2) }],
-                };
-            }
-        });
         // Get all decks (metadata only; credentials stripped unless bound)
         this.registerTool("get_decks", {
             title: "Get Decks",
@@ -451,7 +314,7 @@ class AgentDeckMCPServer {
         });
         this.registerTool("get_bound_deck", {
             title: "Get Bound Deck",
-            description: "Get the deck bound to this session (session deckId override, env, or .agent-deck/deck.yaml)",
+            description: "Get the deck bound to this session (session deckId or env AGENT_DECK_DECK_ID)",
             inputSchema: {},
         }, async () => {
             try {
@@ -1111,7 +974,7 @@ class AgentDeckMCPServer {
             }
         });
         this.server.resource("bound_deck", "agent-deck://bound-deck", {
-            description: "Deck bound via .agent-deck/deck.yaml in the workspace",
+            description: "Deck bound to this MCP session",
             mimeType: "application/json"
         }, async () => {
             try {
@@ -1230,8 +1093,9 @@ class AgentDeckMCPServer {
     async handleMcpPost(req, res) {
         const sessionIdHeader = this.getSessionIdHeader(req);
         const existing = sessionIdHeader ? this.sessions.get(sessionIdHeader) : undefined;
-        if (existing) {
+        if (existing && sessionIdHeader) {
             this.activeSessionId = sessionIdHeader;
+            this.touchLiveDisplay(sessionIdHeader);
             await existing.transport.handleRequest(req, res, req.body);
             return;
         }
@@ -1263,6 +1127,9 @@ class AgentDeckMCPServer {
             if (sessionId) {
                 this.sessions.delete(sessionId);
                 this.sessionBinding.clearSession(sessionId);
+                this.badgeBySession.delete(sessionId);
+                this.lastTouchAtMs.delete(sessionId);
+                void this.unregisterLiveDisplay(sessionId);
             }
         };
         await server.connect(transport);
@@ -1284,6 +1151,7 @@ class AgentDeckMCPServer {
             return;
         }
         this.activeSessionId = sessionId;
+        this.touchLiveDisplay(sessionId);
         await session.transport.handleRequest(req, res);
     }
     async start() {
@@ -1293,12 +1161,10 @@ class AgentDeckMCPServer {
             this.app.listen(this.port, () => {
                 console.log(`✅ Agent Deck MCP Server is ready to accept connections`);
                 console.log(`📋 Available tools:`);
-                console.log(`   - bind_workspace: Bind session to workspace; optional deckId override`);
+                console.log(`   - bind_workspace: Bind session to workspace + deck (deckId required)`);
                 console.log(`   - switch_bound_deck: Switch deck for this session only`);
                 console.log(`   - get_session_binding: Show session workspace + effective deck`);
-                console.log(`   - get_repo_deck_status: Check repo deck manifest`);
-                console.log(`   - setup_repo_deck: Create .agent-deck/deck.yaml for a repo`);
-                console.log(`   - get_bound_deck: Get workspace-bound deck`);
+                console.log(`   - get_bound_deck: Get session-bound deck`);
                 console.log(`   - list_service_tools: List tools for a specific service`);
                 console.log(`   - call_service_tool: Call a tool on a service`);
                 console.log(`📋 Available resources:`);