@agent-deck/backend 1.6.2 → 1.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (162) hide show
  1. package/dist/.tsbuildinfo +1 -1
  2. package/dist/export-import/sanitize-for-export.d.ts +9 -0
  3. package/dist/export-import/sanitize-for-export.d.ts.map +1 -1
  4. package/dist/export-import/sanitize-for-export.js +21 -0
  5. package/dist/export-import/sanitize-for-export.js.map +1 -1
  6. package/dist/lib/agent-deck-context.d.ts +4 -2
  7. package/dist/lib/agent-deck-context.d.ts.map +1 -1
  8. package/dist/lib/agent-deck-context.js +35 -8
  9. package/dist/lib/agent-deck-context.js.map +1 -1
  10. package/dist/lib/backend-api-error.d.ts +8 -0
  11. package/dist/lib/backend-api-error.d.ts.map +1 -0
  12. package/dist/lib/backend-api-error.js +35 -0
  13. package/dist/lib/backend-api-error.js.map +1 -0
  14. package/dist/lib/bound-deck-scope.d.ts +6 -1
  15. package/dist/lib/bound-deck-scope.d.ts.map +1 -1
  16. package/dist/lib/bound-deck-scope.js +21 -2
  17. package/dist/lib/bound-deck-scope.js.map +1 -1
  18. package/dist/lib/client-scope.d.ts.map +1 -1
  19. package/dist/lib/client-scope.js +6 -23
  20. package/dist/lib/client-scope.js.map +1 -1
  21. package/dist/lib/dashboard-auth.d.ts +7 -0
  22. package/dist/lib/dashboard-auth.d.ts.map +1 -0
  23. package/dist/lib/dashboard-auth.js +38 -0
  24. package/dist/lib/dashboard-auth.js.map +1 -0
  25. package/dist/lib/http-auth.d.ts +5 -0
  26. package/dist/lib/http-auth.d.ts.map +1 -0
  27. package/dist/lib/http-auth.js +11 -0
  28. package/dist/lib/http-auth.js.map +1 -0
  29. package/dist/lib/route-policy.d.ts +13 -0
  30. package/dist/lib/route-policy.d.ts.map +1 -0
  31. package/dist/lib/route-policy.js +50 -0
  32. package/dist/lib/route-policy.js.map +1 -0
  33. package/dist/mcp-server.d.ts +7 -0
  34. package/dist/mcp-server.d.ts.map +1 -1
  35. package/dist/mcp-server.js +101 -23
  36. package/dist/mcp-server.js.map +1 -1
  37. package/dist/mcp-session-binding.d.ts +16 -3
  38. package/dist/mcp-session-binding.d.ts.map +1 -1
  39. package/dist/mcp-session-binding.js +40 -5
  40. package/dist/mcp-session-binding.js.map +1 -1
  41. package/dist/mcp-tools/policy.d.ts +20 -0
  42. package/dist/mcp-tools/policy.d.ts.map +1 -0
  43. package/dist/mcp-tools/policy.js +61 -0
  44. package/dist/mcp-tools/policy.js.map +1 -0
  45. package/dist/mcp-tools/profile.d.ts +2 -2
  46. package/dist/mcp-tools/register.d.ts +13 -0
  47. package/dist/mcp-tools/register.d.ts.map +1 -1
  48. package/dist/mcp-tools/register.js +154 -89
  49. package/dist/mcp-tools/register.js.map +1 -1
  50. package/dist/mcp-tools/test-harness.d.ts +7 -2
  51. package/dist/mcp-tools/test-harness.d.ts.map +1 -1
  52. package/dist/mcp-tools/test-harness.js +37 -9
  53. package/dist/mcp-tools/test-harness.js.map +1 -1
  54. package/dist/models/database.d.ts +2 -0
  55. package/dist/models/database.d.ts.map +1 -1
  56. package/dist/models/database.js +3 -0
  57. package/dist/models/database.js.map +1 -1
  58. package/dist/routes/credentials.d.ts.map +1 -1
  59. package/dist/routes/credentials.js +25 -23
  60. package/dist/routes/credentials.js.map +1 -1
  61. package/dist/routes/decks.d.ts.map +1 -1
  62. package/dist/routes/decks.js +75 -33
  63. package/dist/routes/decks.js.map +1 -1
  64. package/dist/routes/oauth.d.ts.map +1 -1
  65. package/dist/routes/oauth.js +16 -5
  66. package/dist/routes/oauth.js.map +1 -1
  67. package/dist/routes/playbooks.d.ts +0 -2
  68. package/dist/routes/playbooks.d.ts.map +1 -1
  69. package/dist/routes/playbooks.js +58 -117
  70. package/dist/routes/playbooks.js.map +1 -1
  71. package/dist/routes/scope.d.ts.map +1 -1
  72. package/dist/routes/scope.js +6 -2
  73. package/dist/routes/scope.js.map +1 -1
  74. package/dist/routes/services.d.ts.map +1 -1
  75. package/dist/routes/services.js +65 -16
  76. package/dist/routes/services.js.map +1 -1
  77. package/dist/routes/trusted-session.d.ts +10 -0
  78. package/dist/routes/trusted-session.d.ts.map +1 -0
  79. package/dist/routes/trusted-session.js +383 -0
  80. package/dist/routes/trusted-session.js.map +1 -0
  81. package/dist/scope/live-display-registry.d.ts +2 -1
  82. package/dist/scope/live-display-registry.d.ts.map +1 -1
  83. package/dist/scope/live-display-registry.js +3 -1
  84. package/dist/scope/live-display-registry.js.map +1 -1
  85. package/dist/server/index.d.ts +4 -1
  86. package/dist/server/index.d.ts.map +1 -1
  87. package/dist/server/index.js +28 -3
  88. package/dist/server/index.js.map +1 -1
  89. package/dist/services/collection-warning-service.d.ts +3 -0
  90. package/dist/services/collection-warning-service.d.ts.map +1 -1
  91. package/dist/services/collection-warning-service.js +24 -1
  92. package/dist/services/collection-warning-service.js.map +1 -1
  93. package/dist/services/oauth-manager.d.ts +2 -0
  94. package/dist/services/oauth-manager.d.ts.map +1 -1
  95. package/dist/services/oauth-manager.js +12 -0
  96. package/dist/services/oauth-manager.js.map +1 -1
  97. package/dist/services/service-manager.d.ts +21 -1
  98. package/dist/services/service-manager.d.ts.map +1 -1
  99. package/dist/services/service-manager.js +95 -10
  100. package/dist/services/service-manager.js.map +1 -1
  101. package/dist/test/auth-fixtures.d.ts +4 -0
  102. package/dist/test/auth-fixtures.d.ts.map +1 -0
  103. package/dist/test/auth-fixtures.js +28 -0
  104. package/dist/test/auth-fixtures.js.map +1 -0
  105. package/dist/trusted-session/admin-secret.d.ts +6 -0
  106. package/dist/trusted-session/admin-secret.d.ts.map +1 -0
  107. package/dist/trusted-session/admin-secret.js +63 -0
  108. package/dist/trusted-session/admin-secret.js.map +1 -0
  109. package/dist/trusted-session/auth.d.ts +29 -0
  110. package/dist/trusted-session/auth.d.ts.map +1 -0
  111. package/dist/trusted-session/auth.js +176 -0
  112. package/dist/trusted-session/auth.js.map +1 -0
  113. package/dist/trusted-session/policy-hook.d.ts +12 -0
  114. package/dist/trusted-session/policy-hook.d.ts.map +1 -0
  115. package/dist/trusted-session/policy-hook.js +71 -0
  116. package/dist/trusted-session/policy-hook.js.map +1 -0
  117. package/dist/trusted-session/route-policy-registry.d.ts +20 -0
  118. package/dist/trusted-session/route-policy-registry.d.ts.map +1 -0
  119. package/dist/trusted-session/route-policy-registry.js +165 -0
  120. package/dist/trusted-session/route-policy-registry.js.map +1 -0
  121. package/dist/trusted-session/store.d.ts +93 -0
  122. package/dist/trusted-session/store.d.ts.map +1 -0
  123. package/dist/trusted-session/store.js +451 -0
  124. package/dist/trusted-session/store.js.map +1 -0
  125. package/dist/vault/index.d.ts +1 -0
  126. package/dist/vault/index.d.ts.map +1 -1
  127. package/dist/vault/index.js +1 -0
  128. package/dist/vault/index.js.map +1 -1
  129. package/dist/vault/service-header-vault.d.ts +16 -0
  130. package/dist/vault/service-header-vault.d.ts.map +1 -0
  131. package/dist/vault/service-header-vault.js +54 -0
  132. package/dist/vault/service-header-vault.js.map +1 -0
  133. package/package.json +5 -5
  134. package/static-ui/assets/index-DUyowkPn.js +499 -0
  135. package/static-ui/assets/index-cJDgESGn.css +1 -0
  136. package/static-ui/index.html +2 -2
  137. package/dist/mcp-stdio.d.ts +0 -2
  138. package/dist/mcp-stdio.d.ts.map +0 -1
  139. package/dist/mcp-stdio.js.map +0 -1
  140. package/dist/playbooks/playbook-parser.d.ts +0 -8
  141. package/dist/playbooks/playbook-parser.d.ts.map +0 -1
  142. package/dist/playbooks/playbook-parser.js +0 -76
  143. package/dist/playbooks/playbook-parser.js.map +0 -1
  144. package/dist/playbooks/playbook-service.d.ts +0 -9
  145. package/dist/playbooks/playbook-service.d.ts.map +0 -1
  146. package/dist/playbooks/playbook-service.js +0 -107
  147. package/dist/playbooks/playbook-service.js.map +0 -1
  148. package/dist/scope/bindings-sidecar.d.ts +0 -9
  149. package/dist/scope/bindings-sidecar.d.ts.map +0 -1
  150. package/dist/scope/bindings-sidecar.js +0 -57
  151. package/dist/scope/bindings-sidecar.js.map +0 -1
  152. package/dist/scope/repo-deck.d.ts +0 -10
  153. package/dist/scope/repo-deck.d.ts.map +0 -1
  154. package/dist/scope/repo-deck.js +0 -63
  155. package/dist/scope/repo-deck.js.map +0 -1
  156. package/dist/test-local-mcp-e2e.d.ts +0 -3
  157. package/dist/test-local-mcp-e2e.d.ts.map +0 -1
  158. package/dist/test-local-mcp-e2e.js +0 -104
  159. package/dist/test-local-mcp-e2e.js.map +0 -1
  160. package/static-ui/assets/index-C5IxoxXU.js +0 -485
  161. package/static-ui/assets/index-D2xN_rHi.css +0 -1
  162. package/static-ui/favicon.png +0 -0
@@ -1 +1 @@
1
- {"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/routes/services.ts"],"names":[],"mappings":";;;;;AAsDA,sDA+TC;AApXD,gEAAkC;AAClC,6DAA+D;AAC/D,+CAQ4B;AAC5B,sDAE6B;AAC7B,8DAGiC;AAEjC,IAAI,2BAA2B,GAAG,CAAC,CAAC;AACpC,MAAM,mCAAmC,GAAG,MAAM,CAAC;AAoBnD,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzF,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAAC,OAAwB;IAClE,iBAAiB;IACjB,OAAO,CAAC,IAAI,CAAuB,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAEzE,MAAM,QAAQ,GAAyB;gBACrC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,OAAO;aACd,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mBAAmB;IACnB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;YAE/D,IAAI,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,IAAI,GAAG,GAAG,2BAA2B,IAAI,mCAAmC,EAAE,CAAC;oBAC7E,2BAA2B,GAAG,GAAG,CAAC;oBAClC,KAAK,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC,MAAM,EAAE,EAAE;wBACjE,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;oBACzC,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAA2B;gBACvC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ;aACf,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,OAAO,CAAC,GAAG,CAAmB,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAClE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,kCAAkB,EAAC,SAAS,CAAC,CAAC;QAE/C,MAAM,QAAQ,GAAG,KAAK,IAAsB,EAAE;YAC5C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1D,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,MAAM,QAAQ,EAAE,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACnF,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,MAAM,QAAQ,EAAE,EAAE,CAAC;gBACrB,OAAO;YACT,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC5B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gBAAgB;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,OAAO,CAAC,IAAI,CAAmB,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAEnF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAgB;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;gBACF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,QAAQ,GAAyB;gBACrC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,OAAO;aACd,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,OAAO,CAAC,GAAG,CAAmB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAE3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAgB;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;gBAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,QAAQ,GAAyB;gBACrC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,OAAO;aACd,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iBAAiB;IACjB,OAAO,CAAC,GAAG,CAAuB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAE5F,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAgB;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;gBAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,QAAQ,GAAyB;gBACrC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,OAAO;aACd,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iBAAiB;IACjB,OAAO,CAAC,MAAM,CAAmB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAE9E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAgB;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;gBAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,8BAA8B;aACxC,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACvE,MAAM,eAAe,GAAG,KAAwE,CAAC;gBACjG,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,eAAe,CAAC,OAAO;oBAC9B,IAAI,EAAE,eAAe,CAAC,UAAU;iBACX,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAAmB,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE;gBACjF,QAAQ;aACT,CAAC,CAAC;YAEH,IAAI,SAAS,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAA+B;gBAC3C,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,KAAsB;aAC7B,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAmB,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,IAAA,4CAAyB,EAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAExE,MAAM,KAAK,GAAG,wCAA+B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAE1F,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBACL,CAAC,CAAC;YAC3B,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,OAAO;aACiB,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAA,yCAAsB,EAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;gBACtC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,OAAO;aACA,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,OAAO,CAAC,IAAI,CAAqB,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC;gBAC1D,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC5B,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;gBAC/B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;aAClC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,MAAM;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uBAAuB;IACvB,OAAO,CAAC,GAAG,CAAmB,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACpE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAElF,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,MAAM;aACb,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
1
+ {"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/routes/services.ts"],"names":[],"mappings":";;;;;AA+DA,sDAiXC;AA/aD,gEAAkC;AAClC,6DAA+D;AAC/D,+CAQ4B;AAC5B,sDAK6B;AAC7B,8DAGiC;AACjC,sDAI6B;AAC7B,kEAA+D;AAE/D,IAAI,2BAA2B,GAAG,CAAC,CAAC;AACpC,MAAM,mCAAmC,GAAG,MAAM,CAAC;AAoBnD,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzF,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAAC,OAAwB;IAClE,iBAAiB;IACjB,OAAO,CAAC,IAAI,CAAuB,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,IAAA,+BAAgB,EAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAEzE,MAAM,QAAQ,GAAyB;gBACrC,OAAO,EAAE,IAAI;gBACb,yEAAyE;gBACzE,IAAI,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,sCAAuB,EAAC,OAAO,CAAC;aAC9E,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,+BAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,mCAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mBAAmB;IACnB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC;YAE7C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,MAAM,IAAA,uCAAkB,EAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC7D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC,IAAI,CAAC;oBAChB,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,sCAAuB,CAAC;iBACX,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;YAE/D,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,IAAI,GAAG,GAAG,2BAA2B,IAAI,mCAAmC,EAAE,CAAC;oBAC7E,2BAA2B,GAAG,GAAG,CAAC;oBAClC,KAAK,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC,MAAM,EAAE,EAAE;wBACjE,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;oBACzC,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAA2B;gBACvC,OAAO,EAAE,IAAI;gBACb,8EAA8E;gBAC9E,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,sCAAuB,CAAC;aACnE,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,OAAO,CAAC,GAAG,CAAmB,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAClE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,kCAAkB,EAAC,SAAS,CAAC,CAAC;QAE/C,MAAM,QAAQ,GAAG,KAAK,IAAsB,EAAE;YAC5C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1D,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,MAAM,QAAQ,EAAE,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACnF,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,MAAM,QAAQ,EAAE,EAAE,CAAC;gBACrB,OAAO;YACT,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC5B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gBAAgB;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,OAAO,CAAC,IAAI,CAAmB,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAEnF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAgB;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;gBACF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,QAAQ,GAAyB;gBACrC,OAAO,EAAE,IAAI;gBACb,0EAA0E;gBAC1E,IAAI,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,sCAAuB,EAAC,OAAO,CAAC;aAC9E,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,OAAO,CAAC,GAAG,CAAmB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,IAAI,CAAC,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAA,4CAAyB,EAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAE3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAgB;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;gBAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,QAAQ,GAAyB;gBACrC,OAAO,EAAE,IAAI;gBACb,8EAA8E;gBAC9E,IAAI,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,sCAAuB,EAAC,OAAO,CAAC;aAC9E,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAA,yCAAsB,EAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;oBACtC,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,OAAO;oBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;iBACR,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iBAAiB;IACjB,OAAO,CAAC,GAAG,CAAuB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjE,IAAI,CAAC;YACH,IAAA,+BAAgB,EAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAE5F,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAgB;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;gBAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,QAAQ,GAAyB;gBACrC,OAAO,EAAE,IAAI;gBACb,0EAA0E;gBAC1E,IAAI,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,sCAAuB,EAAC,OAAO,CAAC;aAC9E,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,+BAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,mCAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iBAAiB;IACjB,OAAO,CAAC,MAAM,CAAmB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,IAAA,+BAAgB,EAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAE9E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAgB;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;gBAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,8BAA8B;aACxC,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACvE,MAAM,eAAe,GAAG,KAAwE,CAAC;gBACjG,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,eAAe,CAAC,OAAO;oBAC9B,IAAI,EAAE,eAAe,CAAC,UAAU;iBACX,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAAmB,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,IAAI,CAAC,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAA,4CAAyB,EAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE;gBACjF,QAAQ;aACT,CAAC,CAAC;YAEH,IAAI,SAAS,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAA+B;gBAC3C,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,KAAsB;aAC7B,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAA,yCAAsB,EAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;gBACtC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;aACR,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAmB,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,IAAA,qCAAsB,EAAC,OAAO,CAAC,CAAC;YAEhC,MAAM,KAAK,GAAG,wCAA+B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAE1F,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB;iBACL,CAAC,CAAC;YAC3B,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,OAAO;aACiB,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iCAAkB,EAAE,CAAC;gBACxC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,KAAK,CAAC,OAAO;iBACC,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,yCAAsB,EAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;gBACtC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,OAAO;aACA,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,OAAO,CAAC,IAAI,CAAqB,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrE,IAAI,CAAC;YACH,MAAM,IAAA,4CAAyB,EAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAExE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC;gBAC1D,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC5B,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;gBAC/B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;aAClC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,MAAM;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAA,yCAAsB,EAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;gBACtC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;aACR,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uBAAuB;IACvB,OAAO,CAAC,GAAG,CAAmB,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACpE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAElF,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,MAAM;aACb,CAAC;YAEF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAgB;gBAC5B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;YAEF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,10 @@
1
+ import type { FastifyInstance } from 'fastify';
2
+ import type { TrustedSessionStore } from '../trusted-session/store';
3
+ export declare function registerTrustedSessionRoutes(fastify: FastifyInstance): Promise<void>;
4
+ export declare function registerDashboardAuthRoutes(fastify: FastifyInstance): Promise<void>;
5
+ declare module 'fastify' {
6
+ interface FastifyInstance {
7
+ trustedSessionStore: TrustedSessionStore;
8
+ }
9
+ }
10
+ //# sourceMappingURL=trusted-session.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"trusted-session.d.ts","sourceRoot":"","sources":["../../src/routes/trusted-session.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAkB,MAAM,SAAS,CAAC;AAkB/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAsDpE,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,eAAe,iBA6W1E;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,eAAe,iBAmCzE;AAED,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,mBAAmB,EAAE,mBAAmB,CAAC;KAC1C;CACF"}
@@ -0,0 +1,383 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.registerTrustedSessionRoutes = registerTrustedSessionRoutes;
4
+ exports.registerDashboardAuthRoutes = registerDashboardAuthRoutes;
5
+ const node_crypto_1 = require("node:crypto");
6
+ const shared_1 = require("@agent-deck/shared");
7
+ const http_auth_1 = require("../lib/http-auth");
8
+ const auth_1 = require("../trusted-session/auth");
9
+ const dashboard_auth_1 = require("../lib/dashboard-auth");
10
+ const store_1 = require("../trusted-session/store");
11
+ const admin_secret_1 = require("../trusted-session/admin-secret");
12
+ /** Caller must own the runtime session (session header matches body id). */
13
+ function requireRuntimeSessionOwnership(request, runtimeSessionId) {
14
+ const header = request.headers[shared_1.AGENT_DECK_SESSION_HEADER];
15
+ const sessionHeader = typeof header === 'string' ? header.trim() : '';
16
+ if (!sessionHeader || sessionHeader !== runtimeSessionId.trim()) {
17
+ throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'Runtime session ownership required');
18
+ }
19
+ }
20
+ function assertWorkspaceScope(store, workspaceKeyId, workspaceRoot) {
21
+ const key = store.getWorkspaceKeyById(workspaceKeyId);
22
+ if (!key) {
23
+ throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
24
+ }
25
+ const digest = (0, shared_1.digestCanonicalWorkspacePath)((0, shared_1.canonicalizeWorkspacePath)(workspaceRoot));
26
+ if (key.path_digest !== digest) {
27
+ throw new auth_1.TrustedAuthError('WORKSPACE_SCOPE_MISMATCH', 'Request targets a different workspace; elevation cannot override it');
28
+ }
29
+ }
30
+ function resolveRuntimeSessionFromHeader(request, store) {
31
+ const sessionHeader = request.headers[shared_1.AGENT_DECK_SESSION_HEADER];
32
+ const sessionId = typeof sessionHeader === 'string' ? sessionHeader.trim() : '';
33
+ if (!sessionId) {
34
+ throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
35
+ }
36
+ const row = store.getRuntimeSessionRow(sessionId);
37
+ if (!row || row.revoked_at) {
38
+ throw new auth_1.TrustedAuthError('SESSION_REVOKED', 'Grant rotation or explicit revocation ended the session');
39
+ }
40
+ if (Date.parse(row.expires_at) <= Date.now()) {
41
+ throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
42
+ }
43
+ const session = store.touchRuntimeSession(sessionId);
44
+ if (!session) {
45
+ throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
46
+ }
47
+ return session;
48
+ }
49
+ async function registerTrustedSessionRoutes(fastify) {
50
+ const store = fastify.trustedSessionStore;
51
+ fastify.post('/workspace-grants/issue', async (request, reply) => {
52
+ try {
53
+ await (0, auth_1.requireTrustedWriterBearer)(request);
54
+ const { workspaceRoot, deckId } = request.body;
55
+ if (!workspaceRoot?.trim() || !deckId?.trim()) {
56
+ return reply.status(400).send({ success: false, error: 'workspaceRoot and deckId required' });
57
+ }
58
+ const deck = await fastify.db.getDeck(deckId);
59
+ if (!deck) {
60
+ return reply.status(404).send({ success: false, error: 'Deck not found' });
61
+ }
62
+ const canonical = (0, shared_1.canonicalizeWorkspacePath)(workspaceRoot);
63
+ const digest = (0, shared_1.digestCanonicalWorkspacePath)(canonical);
64
+ const workspaceKey = store.getOrCreateWorkspaceKey(digest);
65
+ const secret = (0, store_1.generateGrantSecret)();
66
+ const pending = store.createPendingGrant(workspaceKey.id, deckId, secret);
67
+ return reply.send({
68
+ success: true,
69
+ data: {
70
+ workspaceKey: workspaceKey.id,
71
+ grantId: pending.id,
72
+ deckId,
73
+ deckName: deck.name,
74
+ secret,
75
+ status: 'pending',
76
+ },
77
+ });
78
+ }
79
+ catch (error) {
80
+ if (error instanceof auth_1.TrustedAuthError) {
81
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
82
+ }
83
+ throw error;
84
+ }
85
+ });
86
+ fastify.post('/workspace-grants/:grantId/revoke-pending', async (request, reply) => {
87
+ try {
88
+ await (0, auth_1.requireTrustedWriterBearer)(request);
89
+ store.revokePendingGrant(request.params.grantId);
90
+ return reply.send({ success: true });
91
+ }
92
+ catch (error) {
93
+ if (error instanceof auth_1.TrustedAuthError) {
94
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
95
+ }
96
+ throw error;
97
+ }
98
+ });
99
+ fastify.post('/workspace-grants/:grantId/activate', async (request, reply) => {
100
+ try {
101
+ await (0, auth_1.requireTrustedWriterBearer)(request);
102
+ const { grantId } = request.params;
103
+ const activated = store.activateGrant(grantId);
104
+ if (!activated) {
105
+ return reply.status(409).send({
106
+ success: false,
107
+ error: 'Grant not pending or not found',
108
+ });
109
+ }
110
+ const deck = await fastify.db.getDeck(activated.deck_id);
111
+ return reply.send({
112
+ success: true,
113
+ data: {
114
+ grantId: activated.id,
115
+ deckId: activated.deck_id,
116
+ deckName: deck?.name,
117
+ status: activated.status,
118
+ },
119
+ });
120
+ }
121
+ catch (error) {
122
+ if (error instanceof auth_1.TrustedAuthError) {
123
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
124
+ }
125
+ throw error;
126
+ }
127
+ });
128
+ fastify.get('/runtime-session', async (request, reply) => {
129
+ try {
130
+ const sessionHeader = request.headers[shared_1.AGENT_DECK_SESSION_HEADER];
131
+ const sessionId = typeof sessionHeader === 'string' ? sessionHeader.trim() : '';
132
+ if (!sessionId) {
133
+ throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
134
+ }
135
+ const row = store.getRuntimeSessionRow(sessionId);
136
+ if (!row || row.revoked_at) {
137
+ throw new auth_1.TrustedAuthError('SESSION_REVOKED', 'Grant rotation or explicit revocation ended the session');
138
+ }
139
+ if (Date.parse(row.expires_at) <= Date.now()) {
140
+ throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
141
+ }
142
+ const session = store.touchRuntimeSession(sessionId);
143
+ if (!session) {
144
+ throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
145
+ }
146
+ const deck = await fastify.db.getDeck(session.deckId);
147
+ return reply.send({
148
+ success: true,
149
+ data: {
150
+ sessionId: session.sessionId,
151
+ deckId: session.deckId,
152
+ deckName: deck?.name,
153
+ mode: session.mode,
154
+ expiresAt: session.expiresAt,
155
+ adminExpiresAt: session.adminExpiresAt,
156
+ },
157
+ });
158
+ }
159
+ catch (error) {
160
+ if (error instanceof auth_1.TrustedAuthError) {
161
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
162
+ }
163
+ throw error;
164
+ }
165
+ });
166
+ fastify.post('/bind-workspace', async (request, reply) => {
167
+ try {
168
+ const { workspaceRoot, deckId } = request.body;
169
+ if (!workspaceRoot?.trim() || !deckId?.trim()) {
170
+ return reply.status(400).send({ success: false, error: 'workspaceRoot and deckId required' });
171
+ }
172
+ const session = resolveRuntimeSessionFromHeader(request, store);
173
+ assertWorkspaceScope(store, session.workspaceKey, workspaceRoot);
174
+ const deck = await fastify.db.getDeck(deckId);
175
+ if (!deck) {
176
+ return reply.status(404).send({ success: false, error: 'Deck not found' });
177
+ }
178
+ if (session.deckId === deckId) {
179
+ return reply.send({
180
+ success: true,
181
+ data: {
182
+ deckId: session.deckId,
183
+ deckName: deck.name,
184
+ mode: session.mode,
185
+ grantRotated: false,
186
+ peersRevoked: 0,
187
+ },
188
+ });
189
+ }
190
+ if (session.mode !== 'agent-admin') {
191
+ throw new auth_1.TrustedAuthError('ADMIN_REQUIRED', 'Deck-admin elevation is required');
192
+ }
193
+ const workspaceCount = store.countWorkspacesForDeck(session.deckId);
194
+ const rotated = store.rotateGrantForElevatedSession(session.sessionId, deckId);
195
+ if (!rotated) {
196
+ throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
197
+ }
198
+ const newDeck = await fastify.db.getDeck(rotated.session.deckId);
199
+ return reply.send({
200
+ success: true,
201
+ data: {
202
+ deckId: rotated.session.deckId,
203
+ deckName: newDeck?.name ?? deck.name,
204
+ mode: rotated.session.mode,
205
+ grantRotated: true,
206
+ peersRevoked: rotated.peersRevoked,
207
+ previousDeckWorkspaceCount: workspaceCount,
208
+ grantRefreshNote: 'Run `agent-deck use <deck>` in this workspace to refresh the local grant file before the next MCP reconnect.',
209
+ },
210
+ });
211
+ }
212
+ catch (error) {
213
+ if (error instanceof auth_1.TrustedAuthError) {
214
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
215
+ }
216
+ throw error;
217
+ }
218
+ });
219
+ fastify.get('/admin/challenges', async (_request, reply) => {
220
+ const pending = store.listPendingAdminChallenges();
221
+ const data = await Promise.all(pending.map(async (row) => {
222
+ const deck = await fastify.db.getDeck(row.deckId);
223
+ const approvalPath = `/admin/approve?challenge=${encodeURIComponent(row.challengeId)}&session=${encodeURIComponent(row.runtimeSessionId)}`;
224
+ return {
225
+ challengeId: row.challengeId,
226
+ runtimeSessionId: row.runtimeSessionId,
227
+ deckId: row.deckId,
228
+ deckName: deck?.name,
229
+ expiresAt: row.expiresAt,
230
+ approvalPath,
231
+ };
232
+ }));
233
+ return reply.send({ success: true, data });
234
+ });
235
+ fastify.post('/admin/request-elevation', async (request, reply) => {
236
+ try {
237
+ const { runtimeSessionId } = request.body;
238
+ if (!runtimeSessionId?.trim()) {
239
+ return reply.status(400).send({ success: false, error: 'runtimeSessionId required' });
240
+ }
241
+ requireRuntimeSessionOwnership(request, runtimeSessionId);
242
+ const row = store.getRuntimeSessionRow(runtimeSessionId);
243
+ if (!row || row.revoked_at) {
244
+ throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
245
+ }
246
+ const challenge = store.createAdminChallenge(runtimeSessionId);
247
+ const approvalUrl = `/admin/approve?challenge=${encodeURIComponent(challenge.id)}&session=${encodeURIComponent(runtimeSessionId)}`;
248
+ return reply.send({
249
+ success: true,
250
+ data: {
251
+ challengeId: challenge.id,
252
+ expiresAt: challenge.expires_at,
253
+ approvalUrl,
254
+ },
255
+ });
256
+ }
257
+ catch (error) {
258
+ if (error instanceof auth_1.TrustedAuthError) {
259
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
260
+ }
261
+ throw error;
262
+ }
263
+ });
264
+ fastify.post('/admin/approve', async (request, reply) => {
265
+ try {
266
+ const bearer = (0, http_auth_1.parseBearerToken)(request);
267
+ const expected = await (0, admin_secret_1.readAdminSecretFromEnvOrFile)();
268
+ if (!bearer || !expected || !(0, admin_secret_1.verifyAdminSecret)(bearer, expected)) {
269
+ const token = (0, dashboard_auth_1.parseDashboardCookie)(request);
270
+ if (!token || !(0, dashboard_auth_1.validateDashboardSessionToken)(token)) {
271
+ throw new auth_1.TrustedAuthError('DASHBOARD_REQUIRED', 'Dashboard authentication required');
272
+ }
273
+ }
274
+ const { challengeId, runtimeSessionId } = request.body;
275
+ const consumed = store.consumeAdminChallenge(challengeId, runtimeSessionId);
276
+ if (!consumed) {
277
+ throw new auth_1.TrustedAuthError('ADMIN_CHALLENGE_EXPIRED', 'Approval challenge expired or was already consumed');
278
+ }
279
+ const elevated = store.elevateSessionToAdmin(runtimeSessionId);
280
+ if (!elevated) {
281
+ throw new auth_1.TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
282
+ }
283
+ return reply.send({ success: true, data: { session: elevated } });
284
+ }
285
+ catch (error) {
286
+ if (error instanceof auth_1.TrustedAuthError) {
287
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
288
+ }
289
+ throw error;
290
+ }
291
+ });
292
+ fastify.post('/admin/exit', async (request, reply) => {
293
+ try {
294
+ const { runtimeSessionId } = request.body;
295
+ if (!runtimeSessionId?.trim()) {
296
+ return reply.status(400).send({ success: false, error: 'runtimeSessionId required' });
297
+ }
298
+ requireRuntimeSessionOwnership(request, runtimeSessionId);
299
+ const downgraded = store.downgradeSessionToNormal(runtimeSessionId);
300
+ if (!downgraded) {
301
+ return reply.status(404).send({ success: false, error: 'Session not found' });
302
+ }
303
+ return reply.send({ success: true, data: { session: downgraded } });
304
+ }
305
+ catch (error) {
306
+ if (error instanceof auth_1.TrustedAuthError) {
307
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
308
+ }
309
+ throw error;
310
+ }
311
+ });
312
+ fastify.post('/mcp/connect', async (request, reply) => {
313
+ try {
314
+ const { grantSecret, mcpSessionId } = request.body;
315
+ if (!grantSecret?.trim()) {
316
+ throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
317
+ }
318
+ const grant = store.findActiveGrantBySecret(grantSecret);
319
+ if (!grant) {
320
+ throw new auth_1.TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
321
+ }
322
+ let session;
323
+ if (mcpSessionId?.trim()) {
324
+ session = store.findActiveRuntimeSessionForMcp(mcpSessionId.trim(), grant.id);
325
+ }
326
+ if (!session) {
327
+ session = store.createRuntimeSession({
328
+ workspaceKeyId: grant.workspace_key_id,
329
+ workspaceGrantId: grant.id,
330
+ deckId: grant.deck_id,
331
+ mcpSessionId: mcpSessionId?.trim(),
332
+ });
333
+ }
334
+ const deck = await fastify.db.getDeck(session.deckId);
335
+ return reply.send({
336
+ success: true,
337
+ data: {
338
+ sessionId: session.sessionId,
339
+ workspaceKey: session.workspaceKey,
340
+ deckId: session.deckId,
341
+ deckName: deck?.name,
342
+ mode: session.mode,
343
+ expiresAt: session.expiresAt,
344
+ },
345
+ });
346
+ }
347
+ catch (error) {
348
+ if (error instanceof auth_1.TrustedAuthError) {
349
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
350
+ }
351
+ throw error;
352
+ }
353
+ });
354
+ }
355
+ async function registerDashboardAuthRoutes(fastify) {
356
+ const store = fastify.trustedSessionStore;
357
+ fastify.post('/bootstrap/nonce', async (request, reply) => {
358
+ try {
359
+ await (0, auth_1.requireTrustedWriterBearer)(request);
360
+ const nonce = (0, node_crypto_1.randomBytes)(24).toString('base64url');
361
+ const expiresAt = new Date(Date.now() + shared_1.DASHBOARD_NONCE_TTL_MS).toISOString();
362
+ store.createDashboardNonce(nonce, expiresAt);
363
+ return reply.send({ success: true, data: { nonce, expiresInMs: shared_1.DASHBOARD_NONCE_TTL_MS } });
364
+ }
365
+ catch (error) {
366
+ if (error instanceof auth_1.TrustedAuthError) {
367
+ return (0, auth_1.sendTrustedAuthError)(reply, error);
368
+ }
369
+ throw error;
370
+ }
371
+ });
372
+ fastify.post('/bootstrap/session', async (request, reply) => {
373
+ const { nonce } = request.body;
374
+ if (!store.consumeDashboardNonce(nonce)) {
375
+ return reply.status(410).send({ success: false, error: 'Bootstrap nonce expired or invalid' });
376
+ }
377
+ const token = (0, auth_1.createDashboardSessionToken)();
378
+ // Secure omitted intentionally — dashboard is localhost-http in v1.
379
+ reply.header('Set-Cookie', `${shared_1.AGENT_DECK_DASHBOARD_COOKIE}=${encodeURIComponent(token)}; HttpOnly; SameSite=Strict; Path=/`);
380
+ return reply.send({ success: true, data: { authenticated: true } });
381
+ });
382
+ }
383
+ //# sourceMappingURL=trusted-session.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"trusted-session.js","sourceRoot":"","sources":["../../src/routes/trusted-session.ts"],"names":[],"mappings":";;AA0EA,oEA6WC;AAED,kEAmCC;AA5dD,6CAA0C;AAI1C,+CAM4B;AAE5B,gDAAoD;AACpD,kDAKiC;AACjC,0DAA4F;AAE5F,oDAA+D;AAC/D,kEAAkG;AAElG,4EAA4E;AAC5E,SAAS,8BAA8B,CAAC,OAAuB,EAAE,gBAAwB;IACvF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAA0B,EAC1B,cAAsB,EACtB,aAAqB;IAErB,MAAM,GAAG,GAAG,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,qCAA4B,EAAC,IAAA,kCAAyB,EAAC,aAAa,CAAC,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,uBAAgB,CACxB,0BAA0B,EAC1B,qEAAqE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,OAAuB,EACvB,KAA0B;IAE1B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAAC,OAAwB;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAE1C,OAAO,CAAC,IAAI,CACV,yBAAyB,EACzB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAC/C,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YAChG,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,MAAM,SAAS,GAAG,IAAA,kCAAyB,EAAC,aAAa,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAA,qCAA4B,EAAC,SAAS,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAA,2BAAmB,GAAE,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAE1E,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,YAAY,EAAE,YAAY,CAAC,EAAE;oBAC7B,OAAO,EAAE,OAAO,CAAC,EAAE;oBACnB,MAAM;oBACN,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM;oBACN,MAAM,EAAE,SAAkB;iBAC3B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,2CAA2C,EAC3C,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;YAC1C,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,qCAAqC,EACrC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YACnC,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,gCAAgC;iBACxC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEzD,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,OAAO,EAAE,SAAS,CAAC,EAAE;oBACrB,MAAM,EAAE,SAAS,CAAC,OAAO;oBACzB,QAAQ,EAAE,IAAI,EAAE,IAAI;oBACpB,MAAM,EAAE,SAAS,CAAC,MAAM;iBACzB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAC;YAC3G,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC7C,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEtD,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,IAAI,EAAE,IAAI;oBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CACV,iBAAiB,EACjB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAC/C,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YAChG,CAAC;YAED,MAAM,OAAO,GAAG,+BAA+B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChE,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAEjE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,IAAI,CAAC;oBAChB,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE;wBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,YAAY,EAAE,KAAK;wBACnB,YAAY,EAAE,CAAC;qBAChB;iBACF,CAAC,CAAC;YACL,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,KAAK,CAAC,6BAA6B,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEjE,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;oBAC9B,QAAQ,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI;oBACpC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;oBAC1B,YAAY,EAAE,IAAI;oBAClB,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,0BAA0B,EAAE,cAAc;oBAC1C,gBAAgB,EACd,8GAA8G;iBACjH;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,4BAA4B,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3I,OAAO;gBACL,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,IAAI,EAAE,IAAI;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,YAAY;aACb,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CACV,0BAA0B,EAC1B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1C,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACxF,CAAC;YAED,8BAA8B,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAE1D,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YACzD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAC/D,MAAM,WAAW,GAAG,4BAA4B,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAEnI,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,WAAW,EAAE,SAAS,CAAC,EAAE;oBACzB,SAAS,EAAE,SAAS,CAAC,UAAU;oBAC/B,WAAW;iBACZ;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,gBAAgB,EAChB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,IAAA,2CAA4B,GAAE,CAAC;YACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAA,gCAAiB,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACjE,MAAM,KAAK,GAAG,IAAA,qCAAoB,EAAC,OAAO,CAAC,CAAC;gBAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAA,8CAA6B,EAAC,KAAK,CAAC,EAAE,CAAC;oBACpD,MAAM,IAAI,uBAAgB,CAAC,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;gBACxF,CAAC;YACH,CAAC;YAED,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,qBAAqB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,uBAAgB,CAAC,yBAAyB,EAAE,oDAAoD,CAAC,CAAC;YAC9G,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;YAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,uBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACrF,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,aAAa,EACb,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1C,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACxF,CAAC;YAED,8BAA8B,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAE1D,MAAM,UAAU,GAAG,KAAK,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;YACpE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChF,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,IAAI,CACV,cAAc,EACd,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YACnD,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,OAAO,CAAC;YACZ,IAAI,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;gBACzB,OAAO,GAAG,KAAK,CAAC,8BAA8B,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC,oBAAoB,CAAC;oBACnC,cAAc,EAAE,KAAK,CAAC,gBAAgB;oBACtC,gBAAgB,EAAE,KAAK,CAAC,EAAE;oBAC1B,MAAM,EAAE,KAAK,CAAC,OAAO;oBACrB,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEtD,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,IAAI,EAAE,IAAI;oBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,2BAA2B,CAAC,OAAwB;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAE1C,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,+BAAsB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9E,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAE7C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,+BAAsB,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CAA8B,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvF,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,kCAA2B,GAAE,CAAC;QAC5C,oEAAoE;QACpE,KAAK,CAAC,MAAM,CACV,YAAY,EACZ,GAAG,oCAA2B,IAAI,kBAAkB,CAAC,KAAK,CAAC,qCAAqC,CACjG,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC"}
@@ -1,7 +1,8 @@
1
1
  import { DeckCardCounts, DeckDisplaySource } from '@agent-deck/shared';
2
2
  export type LiveDisplayEntry = {
3
3
  mcpSessionId: string;
4
- workspaceRoot: string;
4
+ /** Absent for header/auto-bound sessions (deck without a known folder). */
5
+ workspaceRoot?: string;
5
6
  deckId: string;
6
7
  deckName: string;
7
8
  source: Exclude<DeckDisplaySource, 'unbound'>;
@@ -1 +1 @@
1
- {"version":3,"file":"live-display-registry.d.ts","sourceRoot":"","sources":["../../src/scope/live-display-registry.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,iBAAiB,EAElB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAC9C,UAAU,EAAE,cAAc,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,EAAE,OAAO,GAAG,gBAAgB,CAAC,CAAC;AAEnF,qFAAqF;AACrF,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,WAAW,CAAuC;IAE1D,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,gBAAgB;IAelD,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAIlC,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI;IAO7C,IAAI,IAAI,gBAAgB,EAAE;IAM1B,+EAA+E;IAC/E,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;CAwBjE"}
1
+ {"version":3,"file":"live-display-registry.d.ts","sourceRoot":"","sources":["../../src/scope/live-display-registry.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,iBAAiB,EAElB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAC9C,UAAU,EAAE,cAAc,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,EAAE,OAAO,GAAG,gBAAgB,CAAC,CAAC;AAEnF,qFAAqF;AACrF,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,WAAW,CAAuC;IAE1D,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,gBAAgB;IAelD,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAIlC,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI;IAO7C,IAAI,IAAI,gBAAgB,EAAE;IAM1B,+EAA+E;IAC/E,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;CA0BjE"}
@@ -41,7 +41,9 @@ class LiveDisplayRegistry {
41
41
  while (true) {
42
42
  let best = null;
43
43
  for (const entry of this.bySessionId.values()) {
44
- if ((0, shared_1.normalizeWorkspaceRoot)(entry.workspaceRoot) !== current) {
44
+ // Header/auto-bound sessions have no folder — they never match a workspace,
45
+ // so they only appear in the dashboard list, never the per-folder statusline.
46
+ if (!entry.workspaceRoot || (0, shared_1.normalizeWorkspaceRoot)(entry.workspaceRoot) !== current) {
45
47
  continue;
46
48
  }
47
49
  if (!best || entry.updatedAt > best.updatedAt) {
@@ -1 +1 @@
1
- {"version":3,"file":"live-display-registry.js","sourceRoot":"","sources":["../../src/scope/live-display-registry.ts"],"names":[],"mappings":";;;;;;AAAA,0DAA6B;AAC7B,+CAI4B;AAC5B,mCAAsC;AAiBtC,qFAAqF;AACrF,MAAa,mBAAmB;IACtB,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE1D,MAAM,CAAC,KAAwB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,KAAK,GACT,QAAQ,EAAE,KAAK;YACf,IAAA,mBAAW,EAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAqB;YAC9B,GAAG,KAAK;YACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,EAAE,UAAU;YACpD,KAAK;YACL,cAAc,EAAE,KAAK,CAAC,SAAS;SAChC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,YAAoB;QACzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,YAAoB,EAAE,EAAU;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjD,IAAI,KAAK,IAAI,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;YACvC,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClD,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvF,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,gBAAgB,CAAC,aAAqB;QACpC,IAAI,OAAO,GAAG,IAAA,+BAAsB,EAAC,aAAa,CAAC,CAAC;QACpD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,IAAI,GAA4B,IAAI,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9C,IAAI,IAAA,+BAAsB,EAAC,KAAK,CAAC,aAAa,CAAC,KAAK,OAAO,EAAE,CAAC;oBAC5D,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC9C,IAAI,GAAG,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM;YACR,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA5DD,kDA4DC"}
1
+ {"version":3,"file":"live-display-registry.js","sourceRoot":"","sources":["../../src/scope/live-display-registry.ts"],"names":[],"mappings":";;;;;;AAAA,0DAA6B;AAC7B,+CAI4B;AAC5B,mCAAsC;AAkBtC,qFAAqF;AACrF,MAAa,mBAAmB;IACtB,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE1D,MAAM,CAAC,KAAwB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,KAAK,GACT,QAAQ,EAAE,KAAK;YACf,IAAA,mBAAW,EAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAqB;YAC9B,GAAG,KAAK;YACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,EAAE,UAAU;YACpD,KAAK;YACL,cAAc,EAAE,KAAK,CAAC,SAAS;SAChC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,YAAoB;QACzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,YAAoB,EAAE,EAAU;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjD,IAAI,KAAK,IAAI,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;YACvC,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClD,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvF,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,gBAAgB,CAAC,aAAqB;QACpC,IAAI,OAAO,GAAG,IAAA,+BAAsB,EAAC,aAAa,CAAC,CAAC;QACpD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,IAAI,GAA4B,IAAI,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9C,4EAA4E;gBAC5E,8EAA8E;gBAC9E,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,IAAA,+BAAsB,EAAC,KAAK,CAAC,aAAa,CAAC,KAAK,OAAO,EAAE,CAAC;oBACpF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC9C,IAAI,GAAG,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM;YACR,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA9DD,kDA8DC"}
@@ -3,20 +3,23 @@ import { ServiceManager } from '../services/service-manager';
3
3
  import { MCPClientManager } from '../services/mcp-client-manager';
4
4
  import { OAuthManager } from '../services/oauth-manager';
5
5
  import { ServiceStatusUpdate, DeckUpdate, WebSocketMessage } from '@agent-deck/shared';
6
- import { CredentialManager, OAuthClientSecretVault, OAuthTokenVault } from '../vault';
6
+ import { CredentialManager, OAuthClientSecretVault, OAuthTokenVault, ServiceHeaderVault } from '../vault';
7
7
  import { CollectionWarningService } from '../services/collection-warning-service';
8
8
  import { PlaybookManager } from '../playbooks/playbook-manager';
9
9
  import { PatchManager } from '../playbooks/patch-manager';
10
10
  import { LiveDisplayRegistry } from '../scope/live-display-registry';
11
+ import { TrustedSessionStore } from '../trusted-session/store';
11
12
  export declare function createServer(): Promise<import("fastify").FastifyInstance<import("http").Server<typeof import("http").IncomingMessage, typeof import("http").ServerResponse>, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, import("fastify").FastifyBaseLogger, import("fastify").FastifyTypeProviderDefault>>;
12
13
  declare module 'fastify' {
13
14
  interface FastifyInstance {
14
15
  db: DatabaseManager;
16
+ trustedSessionStore: TrustedSessionStore;
15
17
  serviceManager: ServiceManager;
16
18
  mcpClient: MCPClientManager;
17
19
  oauthManager: OAuthManager;
18
20
  oauthClientSecretVault: OAuthClientSecretVault;
19
21
  oauthTokenVault: OAuthTokenVault;
22
+ serviceHeaderVault: ServiceHeaderVault;
20
23
  credentialManager: CredentialManager;
21
24
  playbookManager: PlaybookManager;
22
25
  patchManager: PatchManager;
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAUzD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAqB,iBAAiB,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAGlF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAIrE,wBAAsB,YAAY,qUA+IjC;AAGD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,EAAE,EAAE,eAAe,CAAC;QACpB,cAAc,EAAE,cAAc,CAAC;QAC/B,SAAS,EAAE,gBAAgB,CAAC;QAC5B,YAAY,EAAE,YAAY,CAAC;QAC3B,sBAAsB,EAAE,sBAAsB,CAAC;QAC/C,eAAe,EAAE,eAAe,CAAC;QACjC,iBAAiB,EAAE,iBAAiB,CAAC;QACrC,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;QAC3B,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,sBAAsB,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAC9D,mBAAmB,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;QAClD,cAAc,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;KACrD;CACF"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAUzD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAqB,iBAAiB,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE7H,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAIlF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAGrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAI/D,wBAAsB,YAAY,qUAsKjC;AAGD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,EAAE,EAAE,eAAe,CAAC;QACpB,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,cAAc,EAAE,cAAc,CAAC;QAC/B,SAAS,EAAE,gBAAgB,CAAC;QAC5B,YAAY,EAAE,YAAY,CAAC;QAC3B,sBAAsB,EAAE,sBAAsB,CAAC;QAC/C,eAAe,EAAE,eAAe,CAAC;QACjC,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,iBAAiB,EAAE,iBAAiB,CAAC;QACrC,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;QAC3B,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,sBAAsB,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAC9D,mBAAmB,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;QAClD,cAAc,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;KACrD;CACF"}
@@ -28,6 +28,7 @@ const paths_1 = require("../lib/paths");
28
28
  const collection_warning_service_1 = require("../services/collection-warning-service");
29
29
  const collection_1 = require("../routes/collection");
30
30
  const export_import_1 = require("../routes/export-import");
31
+ const trusted_session_1 = require("../routes/trusted-session");
31
32
  const playbook_manager_1 = require("../playbooks/playbook-manager");
32
33
  const patch_manager_1 = require("../playbooks/patch-manager");
33
34
  const playbook_patches_1 = require("../routes/playbook-patches");
@@ -37,6 +38,9 @@ const seed_default_services_1 = require("../data/seed-default-services");
37
38
  const live_display_registry_1 = require("../scope/live-display-registry");
38
39
  const writer_1 = require("../store/writer");
39
40
  const startup_1 = require("../store/startup");
41
+ const store_1 = require("../trusted-session/store");
42
+ const admin_secret_1 = require("../trusted-session/admin-secret");
43
+ const policy_hook_1 = require("../trusted-session/policy-hook");
40
44
  async function createServer() {
41
45
  const fastify = (0, fastify_1.default)({
42
46
  logger: {
@@ -78,18 +82,37 @@ async function createServer() {
78
82
  }
79
83
  await (0, startup_1.ensureStoreReady)(db);
80
84
  const secretStore = (0, vault_1.createSecretStore)();
85
+ const trustedSessionStore = new store_1.TrustedSessionStore(db.getSqliteDatabase());
86
+ await (0, admin_secret_1.ensureAdminSecret)();
81
87
  const oauthClientSecretVault = new vault_1.OAuthClientSecretVault(secretStore, db);
82
88
  const oauthTokenVault = new vault_1.OAuthTokenVault(secretStore, db);
89
+ const serviceHeaderVault = new vault_1.ServiceHeaderVault(secretStore);
83
90
  const oauthManager = new oauth_manager_1.OAuthManager(db, oauthClientSecretVault, oauthTokenVault);
84
91
  const storeWriter = new writer_1.FileStoreWriter();
85
92
  const credentialManager = new vault_1.CredentialManager(db, secretStore, undefined, storeWriter);
86
93
  const mcpClient = new mcp_client_manager_1.MCPClientManager((serviceId) => oauthManager.getValidAccessToken(serviceId));
87
- const serviceManager = new service_manager_1.ServiceManager(db, mcpClient, oauthManager, oauthClientSecretVault, credentialManager, storeWriter);
94
+ const serviceManager = new service_manager_1.ServiceManager(db, mcpClient, oauthManager, oauthClientSecretVault, credentialManager, storeWriter, serviceHeaderVault);
88
95
  void serviceManager.backfillMissingIcons();
96
+ void serviceManager.migrateSecretHeadersToVault();
89
97
  const playbookManager = new playbook_manager_1.PlaybookManager(db, storeWriter);
90
98
  const patchManager = new patch_manager_1.PatchManager(db, playbookManager);
91
- const collectionWarningService = new collection_warning_service_1.CollectionWarningService();
99
+ const collectionWarningService = new collection_warning_service_1.CollectionWarningService(oauthManager);
92
100
  const liveDisplayRegistry = new live_display_registry_1.LiveDisplayRegistry();
101
+ fastify.decorate('db', db);
102
+ fastify.decorate('trustedSessionStore', trustedSessionStore);
103
+ (0, policy_hook_1.registerHttpPolicyHook)(fastify);
104
+ const sweepStaleSessions = () => {
105
+ try {
106
+ trustedSessionStore.expireStaleSessions();
107
+ trustedSessionStore.expireDashboardNonces();
108
+ }
109
+ catch (error) {
110
+ fastify.log.warn({ err: error }, 'trusted-session stale sweep failed');
111
+ }
112
+ };
113
+ sweepStaleSessions();
114
+ const staleSessionTimer = setInterval(sweepStaleSessions, 60_000);
115
+ staleSessionTimer.unref?.();
93
116
  // Register routes
94
117
  await fastify.register(websocket_2.registerWebSocketRoutes, { prefix: '/api/ws' });
95
118
  await fastify.register(services_1.registerServiceRoutes, { prefix: '/api/services' });
@@ -104,6 +127,8 @@ async function createServer() {
104
127
  await fastify.register(oauth_1.registerOAuthRoutes, { prefix: '/api/oauth' });
105
128
  await fastify.register(mcp_1.default, { prefix: '/api/mcp' });
106
129
  await fastify.register(local_mcp_1.registerLocalMCPRoutes, { prefix: '/api/local-mcp' });
130
+ await fastify.register(trusted_session_1.registerTrustedSessionRoutes, { prefix: '/api/trusted-session' });
131
+ await fastify.register(trusted_session_1.registerDashboardAuthRoutes, { prefix: '/api/dashboard-auth' });
107
132
  // Health check endpoint
108
133
  fastify.get('/health', async (request, reply) => {
109
134
  return {
@@ -135,12 +160,12 @@ async function createServer() {
135
160
  }));
136
161
  }
137
162
  // Add services to request context
138
- fastify.decorate('db', db);
139
163
  fastify.decorate('serviceManager', serviceManager);
140
164
  fastify.decorate('mcpClient', mcpClient);
141
165
  fastify.decorate('oauthManager', oauthManager);
142
166
  fastify.decorate('oauthClientSecretVault', oauthClientSecretVault);
143
167
  fastify.decorate('oauthTokenVault', oauthTokenVault);
168
+ fastify.decorate('serviceHeaderVault', serviceHeaderVault);
144
169
  fastify.decorate('credentialManager', credentialManager);
145
170
  fastify.decorate('playbookManager', playbookManager);
146
171
  fastify.decorate('patchManager', patchManager);