@agent-deck/backend 1.7.7 → 1.8.0

package/dist/lib/execution-authority-http.d.ts

@@ -0,0 +1,23 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import type { ContractError } from '../execution-authority/types';
+import type { ExecutionAuthorityStore } from '../execution-authority/store';
+export declare function isExecutionAuthorityHttpAllowed(method: string, pathname: string): boolean;
+/** Contract-shaped auth/containment failure for execution-authority principals. */
+export declare class AuthorityContractAuthError extends Error {
+    readonly contract: ContractError;
+    constructor(contract: ContractError);
+}
+export declare function statusForContract(error: ContractError): number;
+export declare function sendContractError(reply: FastifyReply, error: ContractError, status?: number): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
+/**
+ * Authorize one service tool call via the ledger (audience + audit).
+ * No-op for non-authority principals.
+ */
+export declare function authorizeAuthorityServiceCall(request: FastifyRequest, store: ExecutionAuthorityStore, serviceId: string, toolName: string): void;
+/** Filter discovered tools to the minted authority snapshot. */
+export declare function filterToolsForAuthority(request: FastifyRequest, serviceId: string, tools: Array<{
+    name: string;
+}>): Array<{
+    name: string;
+}>;
+//# sourceMappingURL=execution-authority-http.d.ts.map

package/dist/lib/execution-authority-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-authority-http.d.ts","sourceRoot":"","sources":["../../src/lib/execution-authority-http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAI5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAqB5E,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGzF;AAED,mFAAmF;AACnF,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,QAAQ,EAAE,aAAa;gBAAvB,QAAQ,EAAE,aAAa;CAIpD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAa9D;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,aAAa,EACpB,MAAM,SAA2B,6RAGlC;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,uBAAuB,EAC9B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,IAAI,CA2BN;AAED,gEAAgE;AAChE,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7B,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAWzB"}

package/dist/lib/execution-authority-http.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorityContractAuthError = void 0;
+exports.isExecutionAuthorityHttpAllowed = isExecutionAuthorityHttpAllowed;
+exports.statusForContract = statusForContract;
+exports.sendContractError = sendContractError;
+exports.authorizeAuthorityServiceCall = authorizeAuthorityServiceCall;
+exports.filterToolsForAuthority = filterToolsForAuthority;
+const http_auth_1 = require("./http-auth");
+const bearer_1 = require("../execution-authority/bearer");
+/**
+ * HTTP routes an execution-authority principal may use (worker-facing reads + tool call).
+ * Live-display is intentionally excluded — unattended workers must not mutate global
+ * session display state (NOT-86 containment).
+ * Everything else is control-plane / out of containment → INTERACTION_REQUIRED.
+ */
+const ALLOWED = [
+    { methods: ['GET'], pattern: /^\/api\/scope\/deck$/ },
+    { methods: ['GET'], pattern: /^\/api\/decks\/[^/]+$/ },
+    { methods: ['GET'], pattern: /^\/api\/decks\/[^/]+\/services$/ },
+    { methods: ['GET'], pattern: /^\/api\/services\/[^/]+$/ },
+    { methods: ['GET'], pattern: /^\/api\/services\/[^/]+\/tools$/ },
+    { methods: ['POST'], pattern: /^\/api\/services\/[^/]+\/call$/ },
+    { methods: ['GET'], pattern: /^\/api\/playbooks\/[^/]+$/ },
+    { methods: ['GET'], pattern: /^\/api\/playbooks$/ },
+    { methods: ['GET'], pattern: /^\/api\/playbooks\/summaries$/ },
+    { methods: ['GET'], pattern: /^\/api\/credentials\/[^/]+$/ },
+];
+function isExecutionAuthorityHttpAllowed(method, pathname) {
+    const m = method.toUpperCase();
+    return ALLOWED.some((rule) => rule.methods.includes(m) && rule.pattern.test(pathname));
+}
+/** Contract-shaped auth/containment failure for execution-authority principals. */
+class AuthorityContractAuthError extends Error {
+    contract;
+    constructor(contract) {
+        super(contract.message);
+        this.contract = contract;
+        this.name = 'AuthorityContractAuthError';
+    }
+}
+exports.AuthorityContractAuthError = AuthorityContractAuthError;
+function statusForContract(error) {
+    switch (error.error_code) {
+        case 'COORDINATOR_NOT_ENROLLED':
+        case 'AUTHORITY_UNKNOWN':
+            return 404;
+        case 'INVALID_MINT_REQUEST':
+        case 'IDEMPOTENCY_KEY_CONFLICT':
+            return 400;
+        case 'AUTHORITY_SECRET_INVALID':
+            return 401;
+        default:
+            return 403;
+    }
+}
+function sendContractError(reply, error, status = statusForContract(error)) {
+    return reply.status(status).send(error);
+}
+/**
+ * Authorize one service tool call via the ledger (audience + audit).
+ * No-op for non-authority principals.
+ */
+function authorizeAuthorityServiceCall(request, store, serviceId, toolName) {
+    const principal = request.requestPrincipal;
+    if (principal?.kind !== 'execution-authority') {
+        return;
+    }
+    const bearer = (0, http_auth_1.parseBearerToken)(request);
+    const creds = bearer ? (0, bearer_1.parseAuthorityBearer)(bearer) : null;
+    if (!creds) {
+        throw new AuthorityContractAuthError({
+            ok: false,
+            error_code: 'AUTHORITY_SECRET_INVALID',
+            message: 'Invalid authority secret',
+            correlation: { authorityId: principal.authority.authorityId },
+        });
+    }
+    const result = store.invokeAuthorizedCall({
+        authorityId: creds.authorityId,
+        authoritySecret: creds.secret,
+        audience: principal.authority.audience,
+        serviceId,
+        toolName,
+    });
+    if (!result.ok) {
+        throw new AuthorityContractAuthError(result);
+    }
+}
+/** Filter discovered tools to the minted authority snapshot. */
+function filterToolsForAuthority(request, serviceId, tools) {
+    const principal = request.requestPrincipal;
+    if (principal?.kind !== 'execution-authority') {
+        return tools;
+    }
+    const allowed = new Set(principal.authority.allowedTools
+        .filter((t) => t.serviceId === serviceId)
+        .map((t) => t.toolName));
+    return tools.filter((t) => allowed.has(t.name));
+}
+//# sourceMappingURL=execution-authority-http.js.map

package/dist/lib/execution-authority-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-authority-http.js","sourceRoot":"","sources":["../../src/lib/execution-authority-http.ts"],"names":[],"mappings":";;;AA0BA,0EAGC;AAUD,8CAaC;AAED,8CAMC;AAMD,sEAgCC;AAGD,0DAeC;AAlHD,2CAA+C;AAC/C,0DAAqE;AAIrE;;;;;GAKG;AACH,MAAM,OAAO,GAAkD;IAC7D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACrD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE;IACtD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACzD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC1D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE;IACnD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE;IAC9D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE;CAC7D,CAAC;AAEF,SAAgB,+BAA+B,CAAC,MAAc,EAAE,QAAgB;IAC9E,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,mFAAmF;AACnF,MAAa,0BAA2B,SAAQ,KAAK;IACvB;IAA5B,YAA4B,QAAuB;QACjD,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QADE,aAAQ,GAAR,QAAQ,CAAe;QAEjD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAED,SAAgB,iBAAiB,CAAC,KAAoB;IACpD,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,0BAA0B,CAAC;QAChC,KAAK,mBAAmB;YACtB,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB,CAAC;QAC5B,KAAK,0BAA0B;YAC7B,OAAO,GAAG,CAAC;QACb,KAAK,0BAA0B;YAC7B,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAmB,EACnB,KAAoB,EACpB,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC;IAEjC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,SAAgB,6BAA6B,CAC3C,OAAuB,EACvB,KAA8B,EAC9B,SAAiB,EACjB,QAAgB;IAEhB,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAA,6BAAoB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,0BAA0B,CAAC;YACnC,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,0BAA0B;YACtC,OAAO,EAAE,0BAA0B;YACnC,WAAW,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,CAAC;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,MAAM;QAC7B,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ;QACtC,SAAS;QACT,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,SAAgB,uBAAuB,CACrC,OAAuB,EACvB,SAAiB,EACjB,KAA8B;IAE9B,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,SAAS,CAAC,SAAS,CAAC,YAAY;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC1B,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/mcp-server.d.ts

@@ -11,21 +11,25 @@ export declare class AgentDeckMCPServer {
     private mcpServerForRegistration;
     /** Per-session workspace + optional deck override (see mcp-session-binding.ts). */
     private sessionBinding;
-    private activeSessionId;
     /** Session badge from the backend registry (POST /api/scope/live-display response). */
     private badgeBySession;
     private lastTouchAtMs;
     private get server();
     constructor(port?: number, backendUrl?: string, toolProfile?: McpToolProfile, host?: string);
+    /**
+     * One McpServer per transport session. Tools/resources close over `sessionId`
+     * so concurrent requests cannot steal another session's backend authority.
+     */
     private createMcpServer;
-    private getSessionId;
-    private getAgentHeaders;
     private fetchDeck;
     private buildBindingPayload;
     private registerLiveDisplay;
     private static readonly TOUCH_DEBOUNCE_MS;
     /** Fire-and-forget lastActivityAt bump; only for sessions the registry knows. */
     private touchLiveDisplay;
+    private static readonly UNREGISTER_TIMEOUT_MS;
+    /** Override via AGENT_DECK_MCP_UNREGISTER_TIMEOUT_MS (tests use a short value). */
+    private static unregisterTimeoutMs;
     private unregisterLiveDisplay;
     private callBackendAPI;
     private getBoundDeckId;
@@ -40,11 +44,14 @@ export declare class AgentDeckMCPServer {
     private getSessionIdHeader;
     private refreshRuntimeSession;
     private parseGrantBearer;
+    private parseAuthorityBearerCreds;
     private sendGrantRequired;
+    private sendAuthorityError;
+    private authenticateExecutionAuthority;
     private authenticateTrustedSession;
     private disconnectTrustedSession;
     /**
-     * Re-validate workspace grant on every follow-up MCP HTTP request.
+     * Re-validate workspace grant or execution authority on every follow-up MCP HTTP request.
      * Fail closed with 401 — do not destroy the transport session so a correct
      * Bearer on the next attempt can succeed.
      * AGENT_DECK_MCP_SKIP_GRANT_AUTH=1 only relaxes *missing* Bearer (unit tests).

package/dist/mcp-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAUA,OAAO,OAA8B,MAAM,SAAS,CAAC;AAYrD,OAAO,EAAE,cAAc,EAAyB,MAAM,qBAAqB,CAAC;AA0B5E,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAiC;IACjD,mFAAmF;IACnF,OAAO,CAAC,wBAAwB,CAAwB;IACxD,mFAAmF;IACnF,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,eAAe,CAAqB;IAC5C,uFAAuF;IACvF,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,aAAa,CAA6B;IAElD,OAAO,KAAK,MAAM,GAKjB;gBAGC,IAAI,GAAE,MAAa,EACnB,UAAU,GAAE,MAAgC,EAC5C,WAAW,CAAC,EAAE,cAAc,EAC5B,IAAI,GAAE,MAAoB;IAiB5B,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;YAIT,SAAS;YAkBT,mBAAmB;YAoBnB,mBAAmB;IAiCjC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAElD,iFAAiF;IACjF,OAAO,CAAC,gBAAgB;YAmBV,qBAAqB;YAUrB,cAAc;YA+Cd,cAAc;IAQ5B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB,6EAA6E;IAC7E,OAAO,CAAC,YAAY;YAYN,mBAAmB;IAyBjC,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,cAAc;IA8MtB,OAAO,CAAC,WAAW;IA4CnB,OAAO,CAAC,kBAAkB;YAKZ,qBAAqB;IAqBnC,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,iBAAiB;YAQX,0BAA0B;YA8C1B,wBAAwB;IAgBtC;;;;;OAKG;YACW,oBAAoB;IAuBlC;;OAEG;IACH,OAAO,CAAC,kBAAkB;YAIZ,aAAa;YA8Gb,uBAAuB;IAsB/B,KAAK;IAiCL,IAAI;CAeX"}
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAQA,OAAO,OAA8B,MAAM,SAAS,CAAC;AAarD,OAAO,EAAE,cAAc,EAAyB,MAAM,qBAAqB,CAAC;AAqB5E,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAiC;IACjD,mFAAmF;IACnF,OAAO,CAAC,wBAAwB,CAAwB;IACxD,mFAAmF;IACnF,OAAO,CAAC,cAAc,CAAyB;IAC/C,uFAAuF;IACvF,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,aAAa,CAA6B;IAElD,OAAO,KAAK,MAAM,GAKjB;gBAGC,IAAI,GAAE,MAAa,EACnB,UAAU,GAAE,MAAgC,EAC5C,WAAW,CAAC,EAAE,cAAc,EAC5B,IAAI,GAAE,MAAoB;IAiB5B;;;OAGG;IACH,OAAO,CAAC,eAAe;YAYT,SAAS;YAsBT,mBAAmB;YAoBnB,mBAAmB;IAqCjC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAElD,iFAAiF;IACjF,OAAO,CAAC,gBAAgB;IAuBxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAEtD,mFAAmF;IACnF,OAAO,CAAC,MAAM,CAAC,mBAAmB;YAWpB,qBAAqB;YAsBrB,cAAc;YA4Cd,cAAc;IAQ5B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB,6EAA6E;IAC7E,OAAO,CAAC,YAAY;YAYN,mBAAmB;IAkCjC,OAAO,CAAC,UAAU;IAwBlB,OAAO,CAAC,cAAc;IA8MtB,OAAO,CAAC,WAAW;IA4CnB,OAAO,CAAC,kBAAkB;YAKZ,qBAAqB;IAuBnC,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,kBAAkB;YAQZ,8BAA8B;YAiD9B,0BAA0B;YA8C1B,wBAAwB;IAgBtC;;;;;OAKG;YACW,oBAAoB;IAyClC;;OAEG;IACH,OAAO,CAAC,kBAAkB;YAIZ,aAAa;YA8Hb,uBAAuB;IAqB/B,KAAK;IAiCL,IAAI;CAeX"}