@agent-deck/backend 1.6.4 → 1.7.1

package/dist/trusted-session/store.js

@@ -0,0 +1,451 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TrustedSessionStore = void 0;
+exports.hashGrantSecret = hashGrantSecret;
+exports.generateGrantSecret = generateGrantSecret;
+exports.verifyGrantSecret = verifyGrantSecret;
+const node_crypto_1 = require("node:crypto");
+const shared_1 = require("@agent-deck/shared");
+function hashGrantSecret(secret) {
+    return (0, node_crypto_1.createHash)('sha256').update(secret, 'utf8').digest('hex');
+}
+function generateGrantSecret() {
+    return (0, node_crypto_1.randomBytes)(32).toString('base64url');
+}
+function verifyGrantSecret(secret, secretHash) {
+    const digest = Buffer.from(hashGrantSecret(secret), 'hex');
+    const expected = Buffer.from(secretHash, 'hex');
+    if (digest.length !== expected.length) {
+        return false;
+    }
+    return (0, node_crypto_1.timingSafeEqual)(digest, expected);
+}
+function nowIso() {
+    return new Date().toISOString();
+}
+function addMs(iso, ms) {
+    return new Date(Date.parse(iso) + ms).toISOString();
+}
+class TrustedSessionStore {
+    db;
+    constructor(db) {
+        this.db = db;
+        this.ensureTables();
+    }
+    ensureTables() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS workspace_keys (
+        id TEXT PRIMARY KEY,
+        path_digest TEXT NOT NULL UNIQUE,
+        created_at TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS workspace_grants (
+        id TEXT PRIMARY KEY,
+        workspace_key_id TEXT NOT NULL,
+        deck_id TEXT NOT NULL,
+        secret_hash TEXT NOT NULL,
+        status TEXT NOT NULL CHECK (status IN ('pending', 'active', 'revoked')),
+        created_at TEXT NOT NULL,
+        activated_at TEXT,
+        revoked_at TEXT,
+        FOREIGN KEY (workspace_key_id) REFERENCES workspace_keys (id)
+      );
+
+      CREATE UNIQUE INDEX IF NOT EXISTS workspace_grants_one_active
+        ON workspace_grants (workspace_key_id)
+        WHERE status = 'active';
+
+      CREATE TABLE IF NOT EXISTS runtime_sessions (
+        id TEXT PRIMARY KEY,
+        mcp_session_id TEXT,
+        workspace_key_id TEXT NOT NULL,
+        workspace_grant_id TEXT NOT NULL,
+        deck_id TEXT NOT NULL,
+        mode TEXT NOT NULL CHECK (mode IN ('normal', 'agent-admin')),
+        last_seen_at TEXT NOT NULL,
+        expires_at TEXT NOT NULL,
+        admin_expires_at TEXT,
+        revoked_at TEXT,
+        FOREIGN KEY (workspace_key_id) REFERENCES workspace_keys (id),
+        FOREIGN KEY (workspace_grant_id) REFERENCES workspace_grants (id)
+      );
+
+      CREATE INDEX IF NOT EXISTS runtime_sessions_grant_idx
+        ON runtime_sessions (workspace_grant_id);
+
+      CREATE TABLE IF NOT EXISTS admin_challenges (
+        id TEXT PRIMARY KEY,
+        runtime_session_id TEXT NOT NULL,
+        consumed_at TEXT,
+        expires_at TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        FOREIGN KEY (runtime_session_id) REFERENCES runtime_sessions (id)
+      );
+
+      CREATE TABLE IF NOT EXISTS dashboard_nonces (
+        nonce TEXT PRIMARY KEY,
+        expires_at TEXT NOT NULL,
+        consumed_at TEXT,
+        created_at TEXT NOT NULL
+      );
+    `);
+    }
+    getOrCreateWorkspaceKey(pathDigest) {
+        const existing = this.db
+            .prepare('SELECT id, path_digest, created_at FROM workspace_keys WHERE path_digest = ?')
+            .get(pathDigest);
+        if (existing) {
+            return existing;
+        }
+        const id = (0, shared_1.prefixTrustedId)('wsp', (0, node_crypto_1.randomUUID)());
+        const createdAt = nowIso();
+        this.db
+            .prepare('INSERT INTO workspace_keys (id, path_digest, created_at) VALUES (?, ?, ?)')
+            .run(id, pathDigest, createdAt);
+        return { id, path_digest: pathDigest, created_at: createdAt };
+    }
+    getWorkspaceKeyById(id) {
+        return (this.db
+            .prepare('SELECT id, path_digest, created_at FROM workspace_keys WHERE id = ?')
+            .get(id) ?? null);
+    }
+    getActiveGrantForWorkspace(workspaceKeyId) {
+        return (this.db
+            .prepare(`SELECT id, workspace_key_id, deck_id, secret_hash, status, created_at, activated_at, revoked_at
+           FROM workspace_grants
+           WHERE workspace_key_id = ? AND status = 'active'`)
+            .get(workspaceKeyId) ?? null);
+    }
+    getGrantById(grantId) {
+        return (this.db
+            .prepare(`SELECT id, workspace_key_id, deck_id, secret_hash, status, created_at, activated_at, revoked_at
+           FROM workspace_grants WHERE id = ?`)
+            .get(grantId) ?? null);
+    }
+    findActiveGrantBySecret(secret) {
+        const hash = hashGrantSecret(secret);
+        return (this.db
+            .prepare(`SELECT id, workspace_key_id, deck_id, secret_hash, status, created_at, activated_at, revoked_at
+           FROM workspace_grants WHERE secret_hash = ? AND status = 'active'`)
+            .get(hash) ?? null);
+    }
+    createPendingGrant(workspaceKeyId, deckId, secret) {
+        const id = (0, shared_1.prefixTrustedId)('wgr', (0, node_crypto_1.randomUUID)());
+        const createdAt = nowIso();
+        const secretHash = hashGrantSecret(secret);
+        this.db
+            .prepare(`INSERT INTO workspace_grants
+         (id, workspace_key_id, deck_id, secret_hash, status, created_at)
+         VALUES (?, ?, ?, ?, 'pending', ?)`)
+            .run(id, workspaceKeyId, deckId, secretHash, createdAt);
+        return {
+            id,
+            workspace_key_id: workspaceKeyId,
+            deck_id: deckId,
+            secret_hash: secretHash,
+            status: 'pending',
+            created_at: createdAt,
+            activated_at: null,
+            revoked_at: null,
+        };
+    }
+    activateGrant(grantId) {
+        const grant = this.getGrantById(grantId);
+        if (!grant || grant.status !== 'pending') {
+            return null;
+        }
+        const activatedAt = nowIso();
+        const revokeActive = this.db.prepare(`UPDATE workspace_grants
+       SET status = 'revoked', revoked_at = ?
+       WHERE workspace_key_id = ? AND status = 'active'`);
+        const activate = this.db.prepare(`UPDATE workspace_grants
+       SET status = 'active', activated_at = ?
+       WHERE id = ? AND status = 'pending'`);
+        const tx = this.db.transaction(() => {
+            revokeActive.run(activatedAt, grant.workspace_key_id);
+            activate.run(activatedAt, grantId);
+        });
+        tx();
+        return this.getGrantById(grantId);
+    }
+    revokeGrant(grantId) {
+        const revokedAt = nowIso();
+        this.db
+            .prepare(`UPDATE workspace_grants SET status = 'revoked', revoked_at = ? WHERE id = ? AND status != 'revoked'`)
+            .run(revokedAt, grantId);
+        this.revokeSessionsForGrant(grantId, revokedAt);
+    }
+    revokeSessionsForGrant(grantId, revokedAt = nowIso()) {
+        const result = this.db
+            .prepare(`UPDATE runtime_sessions SET revoked_at = ? WHERE workspace_grant_id = ? AND revoked_at IS NULL`)
+            .run(revokedAt, grantId);
+        return result.changes;
+    }
+    createRuntimeSession(input) {
+        const id = (0, shared_1.prefixTrustedId)('ses', (0, node_crypto_1.randomUUID)());
+        const lastSeenAt = nowIso();
+        const expiresAt = addMs(lastSeenAt, shared_1.RUNTIME_SESSION_LEASE_MS);
+        this.db
+            .prepare(`INSERT INTO runtime_sessions
+         (id, mcp_session_id, workspace_key_id, workspace_grant_id, deck_id, mode,
+          last_seen_at, expires_at, admin_expires_at)
+         VALUES (?, ?, ?, ?, ?, 'normal', ?, ?, NULL)`)
+            .run(id, input.mcpSessionId ?? null, input.workspaceKeyId, input.workspaceGrantId, input.deckId, lastSeenAt, expiresAt);
+        return this.toRuntimeSession(this.getRuntimeSessionRow(id));
+    }
+    findActiveRuntimeSessionForMcp(mcpSessionId, grantId) {
+        const now = nowIso();
+        const row = this.db
+            .prepare(`SELECT id, mcp_session_id, workspace_key_id, workspace_grant_id, deck_id, mode,
+                last_seen_at, expires_at, admin_expires_at, revoked_at
+         FROM runtime_sessions
+         WHERE mcp_session_id = ? AND workspace_grant_id = ?
+           AND revoked_at IS NULL AND expires_at > ?`)
+            .get(mcpSessionId, grantId, now);
+        if (!row) {
+            return null;
+        }
+        const touched = this.touchRuntimeSession(row.id);
+        return touched;
+    }
+    getRuntimeSessionModeByMcpSessionId(mcpSessionId) {
+        return this.getRuntimeSessionModesByMcpSessionIds([mcpSessionId]).get(mcpSessionId) ?? null;
+    }
+    getRuntimeSessionModesByMcpSessionIds(mcpSessionIds) {
+        const uniqueIds = [...new Set(mcpSessionIds.filter(Boolean))];
+        if (uniqueIds.length === 0) {
+            return new Map();
+        }
+        const now = nowIso();
+        const placeholders = uniqueIds.map(() => '?').join(', ');
+        const rows = this.db
+            .prepare(`SELECT mcp_session_id, mode FROM runtime_sessions
+         WHERE mcp_session_id IN (${placeholders}) AND revoked_at IS NULL AND expires_at > ?`)
+            .all(...uniqueIds, now);
+        return new Map(rows.map((row) => [row.mcp_session_id, row.mode]));
+    }
+    revokePendingGrant(grantId) {
+        const revokedAt = nowIso();
+        this.db
+            .prepare(`UPDATE workspace_grants SET status = 'revoked', revoked_at = ?
+         WHERE id = ? AND status = 'pending'`)
+            .run(revokedAt, grantId);
+    }
+    createDashboardNonce(nonce, expiresAtIso) {
+        this.db
+            .prepare(`INSERT INTO dashboard_nonces (nonce, expires_at, created_at) VALUES (?, ?, ?)`)
+            .run(nonce, expiresAtIso, nowIso());
+    }
+    consumeDashboardNonce(nonce) {
+        const row = this.db
+            .prepare(`SELECT nonce, expires_at, consumed_at FROM dashboard_nonces WHERE nonce = ?`)
+            .get(nonce);
+        if (!row || row.consumed_at || Date.parse(row.expires_at) <= Date.now()) {
+            return false;
+        }
+        this.db
+            .prepare(`UPDATE dashboard_nonces SET consumed_at = ? WHERE nonce = ?`)
+            .run(nowIso(), nonce);
+        return true;
+    }
+    expireDashboardNonces() {
+        const now = nowIso();
+        const result = this.db
+            .prepare(`DELETE FROM dashboard_nonces WHERE expires_at <= ? OR consumed_at IS NOT NULL`)
+            .run(now);
+        return result.changes;
+    }
+    getRuntimeSessionRow(sessionId) {
+        return (this.db
+            .prepare(`SELECT id, mcp_session_id, workspace_key_id, workspace_grant_id, deck_id, mode,
+                  last_seen_at, expires_at, admin_expires_at, revoked_at
+           FROM runtime_sessions WHERE id = ?`)
+            .get(sessionId) ?? null);
+    }
+    touchRuntimeSession(sessionId) {
+        const row = this.getRuntimeSessionRow(sessionId);
+        if (!row || row.revoked_at) {
+            return null;
+        }
+        const now = nowIso();
+        if (Date.parse(row.expires_at) <= Date.now()) {
+            return null;
+        }
+        let mode = row.mode;
+        let adminExpiresAt = row.admin_expires_at;
+        if (mode === 'agent-admin' && adminExpiresAt && Date.parse(adminExpiresAt) <= Date.now()) {
+            mode = 'normal';
+            adminExpiresAt = null;
+        }
+        const expiresAt = addMs(now, shared_1.RUNTIME_SESSION_LEASE_MS);
+        const nextAdminExpiresAt = mode === 'agent-admin' ? addMs(now, shared_1.ADMIN_MODE_LEASE_MS) : null;
+        this.db
+            .prepare(`UPDATE runtime_sessions
+         SET last_seen_at = ?, expires_at = ?, mode = ?, admin_expires_at = ?
+         WHERE id = ?`)
+            .run(now, expiresAt, mode, nextAdminExpiresAt, sessionId);
+        return this.toRuntimeSession(this.getRuntimeSessionRow(sessionId));
+    }
+    elevateSessionToAdmin(sessionId) {
+        const row = this.getRuntimeSessionRow(sessionId);
+        if (!row || row.revoked_at || Date.parse(row.expires_at) <= Date.now()) {
+            return null;
+        }
+        const now = nowIso();
+        this.db
+            .prepare(`UPDATE runtime_sessions
+         SET mode = 'agent-admin', admin_expires_at = ?, last_seen_at = ?, expires_at = ?
+         WHERE id = ?`)
+            .run(addMs(now, shared_1.ADMIN_MODE_LEASE_MS), now, addMs(now, shared_1.RUNTIME_SESSION_LEASE_MS), sessionId);
+        return this.toRuntimeSession(this.getRuntimeSessionRow(sessionId));
+    }
+    downgradeSessionToNormal(sessionId) {
+        const row = this.getRuntimeSessionRow(sessionId);
+        if (!row || row.revoked_at) {
+            return null;
+        }
+        const now = nowIso();
+        this.db
+            .prepare(`UPDATE runtime_sessions
+         SET mode = 'normal', admin_expires_at = NULL, last_seen_at = ?, expires_at = ?
+         WHERE id = ?`)
+            .run(now, addMs(now, shared_1.RUNTIME_SESSION_LEASE_MS), sessionId);
+        return this.toRuntimeSession(this.getRuntimeSessionRow(sessionId));
+    }
+    revokeRuntimeSession(sessionId) {
+        this.db
+            .prepare(`UPDATE runtime_sessions SET revoked_at = ? WHERE id = ? AND revoked_at IS NULL`)
+            .run(nowIso(), sessionId);
+    }
+    createAdminChallenge(runtimeSessionId) {
+        const id = (0, shared_1.prefixTrustedId)('adm', (0, node_crypto_1.randomUUID)());
+        const createdAt = nowIso();
+        const expiresAt = addMs(createdAt, shared_1.ADMIN_CHALLENGE_TTL_MS);
+        this.db
+            .prepare(`INSERT INTO admin_challenges (id, runtime_session_id, expires_at, created_at)
+         VALUES (?, ?, ?, ?)`)
+            .run(id, runtimeSessionId, expiresAt, createdAt);
+        return {
+            id,
+            runtime_session_id: runtimeSessionId,
+            consumed_at: null,
+            expires_at: expiresAt,
+            created_at: createdAt,
+        };
+    }
+    consumeAdminChallenge(challengeId, runtimeSessionId) {
+        const row = this.db
+            .prepare(`SELECT id, runtime_session_id, consumed_at, expires_at, created_at
+         FROM admin_challenges WHERE id = ?`)
+            .get(challengeId);
+        if (!row || row.runtime_session_id !== runtimeSessionId) {
+            return false;
+        }
+        if (row.consumed_at || Date.parse(row.expires_at) <= Date.now()) {
+            return false;
+        }
+        this.db
+            .prepare(`UPDATE admin_challenges SET consumed_at = ? WHERE id = ?`)
+            .run(nowIso(), challengeId);
+        return true;
+    }
+    listPendingAdminChallenges() {
+        const now = nowIso();
+        const rows = this.db
+            .prepare(`SELECT ac.id, ac.runtime_session_id, ac.expires_at, ac.created_at, rs.deck_id
+         FROM admin_challenges ac
+         INNER JOIN runtime_sessions rs ON rs.id = ac.runtime_session_id
+         WHERE ac.consumed_at IS NULL
+           AND ac.expires_at > ?
+           AND rs.revoked_at IS NULL`)
+            .all(now);
+        return rows.map((row) => ({
+            challengeId: row.id,
+            runtimeSessionId: row.runtime_session_id,
+            deckId: row.deck_id,
+            expiresAt: row.expires_at,
+            createdAt: row.created_at,
+        }));
+    }
+    countWorkspacesForDeck(deckId) {
+        const row = this.db
+            .prepare(`SELECT COUNT(DISTINCT workspace_key_id) AS count
+         FROM workspace_grants
+         WHERE deck_id = ? AND status = 'active'`)
+            .get(deckId);
+        return row.count;
+    }
+    /**
+     * C8: elevated-agent deck change — rotate grant, rebind approving session, revoke peers.
+     * Plaintext grant secret is stored hashed only; caller must run `agent-deck use` to refresh local grant file.
+     */
+    rotateGrantForElevatedSession(runtimeSessionId, newDeckId) {
+        const row = this.getRuntimeSessionRow(runtimeSessionId);
+        if (!row || row.revoked_at || Date.parse(row.expires_at) <= Date.now()) {
+            return null;
+        }
+        if (row.mode !== 'agent-admin') {
+            return null;
+        }
+        if (row.deck_id === newDeckId) {
+            const session = this.touchRuntimeSession(runtimeSessionId);
+            return session
+                ? { session, peersRevoked: 0, grantId: row.workspace_grant_id }
+                : null;
+        }
+        const oldGrantId = row.workspace_grant_id;
+        const secret = generateGrantSecret();
+        const pending = this.createPendingGrant(row.workspace_key_id, newDeckId, secret);
+        const activated = this.activateGrant(pending.id);
+        if (!activated) {
+            this.revokePendingGrant(pending.id);
+            return null;
+        }
+        const revokedAt = nowIso();
+        const peersRevoked = this.db
+            .prepare(`UPDATE runtime_sessions SET revoked_at = ?
+         WHERE workspace_grant_id = ? AND id != ? AND revoked_at IS NULL`)
+            .run(revokedAt, oldGrantId, runtimeSessionId).changes;
+        const now = nowIso();
+        const adminExpiresAt = row.admin_expires_at;
+        this.db
+            .prepare(`UPDATE runtime_sessions
+         SET workspace_grant_id = ?, deck_id = ?, last_seen_at = ?, expires_at = ?
+         WHERE id = ?`)
+            .run(activated.id, newDeckId, now, addMs(now, shared_1.RUNTIME_SESSION_LEASE_MS), runtimeSessionId);
+        const session = this.toRuntimeSession(this.getRuntimeSessionRow(runtimeSessionId));
+        return { session, peersRevoked, grantId: activated.id };
+    }
+    expireStaleSessions() {
+        const now = nowIso();
+        const downgrade = this.db.prepare(`UPDATE runtime_sessions
+       SET mode = 'normal', admin_expires_at = NULL
+       WHERE mode = 'agent-admin' AND admin_expires_at IS NOT NULL AND admin_expires_at <= ?`);
+        const expire = this.db.prepare(`UPDATE runtime_sessions SET revoked_at = ?
+       WHERE revoked_at IS NULL AND expires_at <= ?`);
+        let expiredCount = 0;
+        const tx = this.db.transaction(() => {
+            downgrade.run(now);
+            const result = expire.run(now, now);
+            expiredCount = result.changes;
+        });
+        tx();
+        return expiredCount;
+    }
+    toRuntimeSession(row) {
+        return {
+            sessionId: row.id,
+            mcpSessionId: row.mcp_session_id ?? undefined,
+            workspaceKey: row.workspace_key_id,
+            workspaceGrantId: row.workspace_grant_id,
+            deckId: row.deck_id,
+            mode: row.mode,
+            lastSeenAt: row.last_seen_at,
+            expiresAt: row.expires_at,
+            adminExpiresAt: row.admin_expires_at,
+        };
+    }
+}
+exports.TrustedSessionStore = TrustedSessionStore;
+//# sourceMappingURL=store.js.map

package/dist/trusted-session/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/trusted-session/store.ts"],"names":[],"mappings":";;;AAmDA,0CAEC;AAED,kDAEC;AAED,8CAOC;AAlED,6CAAmF;AAEnF,+CAQ4B;AAyC5B,SAAgB,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAgB,mBAAmB;IACjC,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAc,EAAE,UAAkB;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAA,6BAAe,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,MAAM;IACb,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,EAAU;IACpC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,MAAa,mBAAmB;IACD;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;QAChD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwDZ,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB,CAAC,UAAkB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,OAAO,CAAC,8EAA8E,CAAC;aACvF,GAAG,CAAC,UAAU,CAAgC,CAAC;QAElD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,2EAA2E,CAAC;aACpF,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAElC,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,mBAAmB,CAAC,EAAU;QAC5B,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CAAC,qEAAqE,CAAC;aAC9E,GAAG,CAAC,EAAE,CAAiC,IAAI,IAAI,CACnD,CAAC;IACJ,CAAC;IAED,0BAA0B,CAAC,cAAsB;QAC/C,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CACN;;4DAEkD,CACnD;aACA,GAAG,CAAC,cAAc,CAAmC,IAAI,IAAI,CACjE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,OAAe;QAC1B,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CACN;8CACoC,CACrC;aACA,GAAG,CAAC,OAAO,CAAmC,IAAI,IAAI,CAC1D,CAAC;IACJ,CAAC;IAED,uBAAuB,CAAC,MAAc;QACpC,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CACN;6EACmE,CACpE;aACA,GAAG,CAAC,IAAI,CAAmC,IAAI,IAAI,CACvD,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,cAAsB,EAAE,MAAc,EAAE,MAAc;QACvE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAE3C,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;2CAEmC,CACpC;aACA,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAE1D,OAAO;YACL,EAAE;YACF,gBAAgB,EAAE,cAAc;YAChC,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAClC;;wDAEkD,CACnD,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B;;2CAEqC,CACtC,CAAC;QAEF,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACtD,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;QAEL,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,qGAAqG,CACtG;aACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;IAED,sBAAsB,CAAC,OAAe,EAAE,YAAoB,MAAM,EAAE;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN,gGAAgG,CACjG;aACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,oBAAoB,CAAC,KAKpB;QACC,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,EAAE,iCAAwB,CAAC,CAAC;QAE9D,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;sDAG8C,CAC/C;aACA,GAAG,CACF,EAAE,EACF,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,MAAM,EACZ,UAAU,EACV,SAAS,CACV,CAAC;QAEJ,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAE,CAAC,CAAC;IAC/D,CAAC;IAED,8BAA8B,CAAC,YAAoB,EAAE,OAAe;QAClE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;qDAI6C,CAC9C;aACA,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,CAAkC,CAAC;QAEpE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mCAAmC,CAAC,YAAoB;QACtD,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;IAC9F,CAAC;IAED,qCAAqC,CAAC,aAAuB;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;oCAC4B,YAAY,6CAA6C,CACtF;aACA,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,CAA8D,CAAC;QAEvF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,kBAAkB,CAAC,OAAe;QAChC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;6CACqC,CACtC;aACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,oBAAoB,CAAC,KAAa,EAAE,YAAoB;QACtD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,+EAA+E,CAChF;aACA,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,qBAAqB,CAAC,KAAa;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,6EAA6E,CAC9E;aACA,GAAG,CAAC,KAAK,CAAkF,CAAC;QAE/F,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,6DAA6D,CAAC;aACtE,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;QACnB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,+EAA+E,CAAC;aACxF,GAAG,CAAC,GAAG,CAAC,CAAC;QACZ,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CACN;;8CAEoC,CACrC;aACA,GAAG,CAAC,SAAS,CAAmC,IAAI,IAAI,CAC5D,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,SAAiB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACpB,IAAI,cAAc,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAE1C,IAAI,IAAI,KAAK,aAAa,IAAI,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzF,IAAI,GAAG,QAAQ,CAAC;YAChB,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,CAAC;QACvD,MAAM,kBAAkB,GACtB,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,4BAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAElE,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,qBAAqB,CAAC,SAAiB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,4BAAmB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAE9F,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,wBAAwB,CAAC,SAAiB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,gFAAgF,CAAC;aACzF,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,oBAAoB,CAAC,gBAAwB;QAC3C,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,+BAAsB,CAAC,CAAC;QAE3D,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;6BACqB,CACtB;aACA,GAAG,CAAC,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAEnD,OAAO;YACL,EAAE;YACF,kBAAkB,EAAE,gBAAgB;YACpC,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;SACtB,CAAC;IACJ,CAAC;IAED,qBAAqB,CAAC,WAAmB,EAAE,gBAAwB;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;4CACoC,CACrC;aACA,GAAG,CAAC,WAAW,CAAkC,CAAC;QAErD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,kBAAkB,KAAK,gBAAgB,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0BAA0B;QAOxB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;;;;qCAK6B,CAC9B;aACA,GAAG,CAAC,GAAG,CAMR,CAAC;QAEH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,WAAW,EAAE,GAAG,CAAC,EAAE;YACnB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,sBAAsB,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;iDAEyC,CAC1C;aACA,GAAG,CAAC,MAAM,CAAsB,CAAC;QACpC,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,6BAA6B,CAC3B,gBAAwB,EACxB,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAC3D,OAAO,OAAO;gBACZ,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,kBAAkB,EAAE;gBAC/D,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,kBAAkB,CAAC;QAC1C,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE;aACzB,OAAO,CACN;yEACiE,CAClE;aACA,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC;QAExD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,cAAc,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAC5C,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CACF,SAAS,CAAC,EAAE,EACZ,SAAS,EACT,GAAG,EACH,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,EACpC,gBAAgB,CACjB,CAAC;QAEJ,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAE,CAAC,CAAC;QACpF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,mBAAmB;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/B;;6FAEuF,CACxF,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B;oDAC8C,CAC/C,CAAC;QAEF,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;QAEL,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,gBAAgB,CAAC,GAAsB;QAC7C,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,YAAY,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;YAC7C,YAAY,EAAE,GAAG,CAAC,gBAAgB;YAClC,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,YAAY;YAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,cAAc,EAAE,GAAG,CAAC,gBAAgB;SACrC,CAAC;IACJ,CAAC;CACF;AAtkBD,kDAskBC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-deck/backend",
-  "version": "1.6.4",
+  "version": "1.7.1",
   "description": "Agent Deck backend API, MCP server, and vault",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -46,7 +46,7 @@
     "prepublishOnly": "node ../../scripts/pre-publish-check.mjs && npm run build"
   },
   "dependencies": {
-    "@agent-deck/shared": "^1.6.4",
+    "@agent-deck/shared": "^1.7.1",
     "@fastify/cors": "^10.0.0",
     "@fastify/static": "^8.0.0",
     "@fastify/websocket": "^11.2.0",
@@ -56,7 +56,7 @@
     "express": "^4.19.2",
     "fastify": "^5.11.0",
     "gray-matter": "^4.0.3",
-    "openid-client": "^6.6.4",
+    "openid-client": "^6.8.5",
     "use-mcp": "^0.0.21",
     "yaml": "^2.9.0",
     "zod": "^3.22.4"