@agent-deck/backend 1.8.0 → 1.8.2

package/dist/trusted-session/store.d.ts

@@ -1,25 +1,8 @@
-import { type AgentSessionMode, type RuntimeSession, type WorkspaceGrantStatus } from '@agent-deck/shared';
+import { type AgentSessionMode, type RuntimeSession } from '@agent-deck/shared';
 import type Database from 'better-sqlite3';
-export type WorkspaceKeyRow = {
-    id: string;
-    path_digest: string;
-    created_at: string;
-};
-export type WorkspaceGrantRow = {
-    id: string;
-    workspace_key_id: string;
-    deck_id: string;
-    secret_hash: string;
-    status: WorkspaceGrantStatus;
-    created_at: string;
-    activated_at: string | null;
-    revoked_at: string | null;
-};
 export type RuntimeSessionRow = {
     id: string;
     mcp_session_id: string | null;
-    workspace_key_id: string;
-    workspace_grant_id: string;
     deck_id: string;
     mode: AgentSessionMode;
     last_seen_at: string;
@@ -40,39 +23,31 @@ export type DashboardSessionRow = {
     last_seen_at: string;
     expires_at: string;
 };
-export declare function hashGrantSecret(secret: string): string;
 export declare function hashDashboardSessionToken(token: string): string;
-export declare function generateGrantSecret(): string;
-export declare function verifyGrantSecret(secret: string, secretHash: string): boolean;
 export declare class TrustedSessionStore {
     private readonly db;
     constructor(db: Database.Database);
     private ensureTables;
-    getOrCreateWorkspaceKey(pathDigest: string): WorkspaceKeyRow;
-    getWorkspaceKeyById(id: string): WorkspaceKeyRow | null;
-    getActiveGrantForWorkspace(workspaceKeyId: string): WorkspaceGrantRow | null;
-    getGrantById(grantId: string): WorkspaceGrantRow | null;
-    findActiveGrantBySecret(secret: string): WorkspaceGrantRow | null;
-    createPendingGrant(workspaceKeyId: string, deckId: string, secret: string): WorkspaceGrantRow;
-    activateGrant(grantId: string): WorkspaceGrantRow | null;
-    revokeGrant(grantId: string): void;
-    revokeSessionsForGrant(grantId: string, revokedAt?: string): number;
+    /**
+     * NOT-108 PR2: drop grant ledger and rebuild runtime_sessions without
+     * workspace_key_id / workspace_grant_id (same drop-and-recreate pattern as NOT-105).
+     * Literals below are intentional — this is the only place that may still name the
+     * legacy tables so upgrades can DROP them.
+     */
+    private maybeShedGrantSchema;
     createRuntimeSession(input: {
-        workspaceKeyId: string;
-        workspaceGrantId: string;
         deckId: string;
         mcpSessionId?: string;
     }): RuntimeSession;
     /**
      * Latest runtime row for an MCP transport id, including expired/revoked.
-     * Used to keep transport→grant ownership immutable after the active lease ends.
+     * Used to keep transport→deck ownership immutable after the active lease ends.
      */
     findLatestRuntimeSessionByMcpSessionId(mcpSessionId: string): RuntimeSession | null;
     findActiveRuntimeSessionByMcpSessionId(mcpSessionId: string): RuntimeSession | null;
-    findActiveRuntimeSessionForMcp(mcpSessionId: string, grantId: string): RuntimeSession | null;
+    findActiveLaunchSessionForMcp(mcpSessionId: string, deckId: string): RuntimeSession | null;
     getRuntimeSessionModeByMcpSessionId(mcpSessionId: string): AgentSessionMode | null;
     getRuntimeSessionModesByMcpSessionIds(mcpSessionIds: string[]): Map<string, AgentSessionMode>;
-    revokePendingGrant(grantId: string): void;
     createDashboardNonce(nonce: string, expiresAtIso: string): void;
     consumeDashboardNonce(nonce: string): boolean;
     expireDashboardNonces(): number;
@@ -82,6 +57,8 @@ export declare class TrustedSessionStore {
     getRuntimeSessionRow(sessionId: string): RuntimeSessionRow | null;
     touchRuntimeSession(sessionId: string): RuntimeSession | null;
     elevateSessionToAdmin(sessionId: string): RuntimeSession | null;
+    /** Launch-session deck switch after elevated assignment update (NOT-108). */
+    setRuntimeSessionDeck(sessionId: string, deckId: string): RuntimeSession | null;
     downgradeSessionToNormal(sessionId: string): RuntimeSession | null;
     revokeRuntimeSession(sessionId: string): void;
     createAdminChallenge(runtimeSessionId: string): AdminChallengeRow;
@@ -93,16 +70,6 @@ export declare class TrustedSessionStore {
         expiresAt: string;
         createdAt: string;
     }>;
-    countWorkspacesForDeck(deckId: string): number;
-    /**
-     * C8: elevated-agent deck change — rotate grant, rebind approving session, revoke peers.
-     * Plaintext grant secret is stored hashed only; caller must run `agent-deck use` to refresh local grant file.
-     */
-    rotateGrantForElevatedSession(runtimeSessionId: string, newDeckId: string): {
-        session: RuntimeSession;
-        peersRevoked: number;
-        grantId: string;
-    } | null;
     expireStaleSessions(): number;
     private toRuntimeSession;
 }

package/dist/trusted-session/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/trusted-session/store.ts"],"names":[],"mappings":"AAEA,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAQF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO7E;AAUD,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIlD,OAAO,CAAC,YAAY;IAsEpB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe;IAkB5D,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAQvD,0BAA0B,CAAC,cAAc,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAY5E,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAWvD,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAYjE,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB;IAyB7F,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IA2BxD,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAUlC,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,GAAE,MAAiB,GAAG,MAAM;IAS7E,oBAAoB,CAAC,KAAK,EAAE;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,cAAc;IAyBlB;;;OAGG;IACH,sCAAsC,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAenF,sCAAsC,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAiBnF,8BAA8B,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAoB5F,mCAAmC,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAIlF,qCAAqC,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAkB7F,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAUzC,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAQ/D,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAiB7C,qBAAqB,IAAI,MAAM;IAQ/B,sBAAsB,IAAI,MAAM;IAYhC,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IA4BxD,uBAAuB,IAAI,MAAM;IAOjC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAYjE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkC7D,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkB/D,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkBlE,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAM7C,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,GAAG,iBAAiB;IAqBjE,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO;IAqB7E,0BAA0B,IAAI,KAAK,CAAC;QAClC,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IA4BF,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAW9C;;;OAGG;IACH,6BAA6B,CAC3B,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,GAChB;QAAE,OAAO,EAAE,cAAc,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAoD5E,mBAAmB,IAAI,MAAM;IAuB7B,OAAO,CAAC,gBAAgB;CAazB"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/trusted-session/store.ts"],"names":[],"mappings":"AAEA,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAQF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAUD,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIlD,OAAO,CAAC,YAAY;IAgDpB;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAoC5B,oBAAoB,CAAC,KAAK,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,cAAc;IAgBlB;;;OAGG;IACH,sCAAsC,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAenF,sCAAsC,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAiBnF,6BAA6B,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAmB1F,mCAAmC,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAIlF,qCAAqC,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAkB7F,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAQ/D,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAiB7C,qBAAqB,IAAI,MAAM;IAQ/B,sBAAsB,IAAI,MAAM;IAYhC,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IA4BxD,uBAAuB,IAAI,MAAM;IAOjC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAYjE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkC7D,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkB/D,6EAA6E;IAC7E,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAqB/E,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkBlE,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAM7C,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,GAAG,iBAAiB;IAqBjE,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO;IAqB7E,0BAA0B,IAAI,KAAK,CAAC;QAClC,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IA4BF,mBAAmB,IAAI,MAAM;IAuB7B,OAAO,CAAC,gBAAgB;CAWzB"}

package/dist/trusted-session/store.js

@@ -1,34 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TrustedSessionStore = void 0;
-exports.hashGrantSecret = hashGrantSecret;
 exports.hashDashboardSessionToken = hashDashboardSessionToken;
-exports.generateGrantSecret = generateGrantSecret;
-exports.verifyGrantSecret = verifyGrantSecret;
 const node_crypto_1 = require("node:crypto");
 const shared_1 = require("@agent-deck/shared");
-const http_auth_1 = require("../lib/http-auth");
 const DASHBOARD_SESSION_TOUCH_INTERVAL_MS = 60 * 1000;
 function hashSecret(secret) {
     return (0, node_crypto_1.createHash)('sha256').update(secret, 'utf8').digest('hex');
 }
-function hashGrantSecret(secret) {
-    return hashSecret(secret);
-}
 function hashDashboardSessionToken(token) {
     return hashSecret(token);
 }
-function generateGrantSecret() {
-    return (0, node_crypto_1.randomBytes)(32).toString('base64url');
-}
-function verifyGrantSecret(secret, secretHash) {
-    const digest = Buffer.from(hashGrantSecret(secret), 'hex');
-    const expected = Buffer.from(secretHash, 'hex');
-    if (digest.length !== expected.length) {
-        return false;
-    }
-    return (0, node_crypto_1.timingSafeEqual)(digest, expected);
-}
 function nowIso() {
     return new Date().toISOString();
 }
@@ -42,47 +24,25 @@ class TrustedSessionStore {
         this.ensureTables();
     }
     ensureTables() {
+        this.maybeShedGrantSchema();
+        // NOT-107: shed legacy issuer tables (created by the deleted SQLite store).
+        this.db.exec(`
+      DROP TABLE IF EXISTS ea_audit_events;
+      DROP TABLE IF EXISTS ea_authorities;
+      DROP TABLE IF EXISTS ea_enrollments;
+    `);
         this.db.exec(`
-      CREATE TABLE IF NOT EXISTS workspace_keys (
-        id TEXT PRIMARY KEY,
-        path_digest TEXT NOT NULL UNIQUE,
-        created_at TEXT NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS workspace_grants (
-        id TEXT PRIMARY KEY,
-        workspace_key_id TEXT NOT NULL,
-        deck_id TEXT NOT NULL,
-        secret_hash TEXT NOT NULL,
-        status TEXT NOT NULL CHECK (status IN ('pending', 'active', 'revoked')),
-        created_at TEXT NOT NULL,
-        activated_at TEXT,
-        revoked_at TEXT,
-        FOREIGN KEY (workspace_key_id) REFERENCES workspace_keys (id)
-      );
-
-      CREATE UNIQUE INDEX IF NOT EXISTS workspace_grants_one_active
-        ON workspace_grants (workspace_key_id)
-        WHERE status = 'active';
-
       CREATE TABLE IF NOT EXISTS runtime_sessions (
         id TEXT PRIMARY KEY,
         mcp_session_id TEXT,
-        workspace_key_id TEXT NOT NULL,
-        workspace_grant_id TEXT NOT NULL,
         deck_id TEXT NOT NULL,
         mode TEXT NOT NULL CHECK (mode IN ('normal', 'agent-admin')),
         last_seen_at TEXT NOT NULL,
         expires_at TEXT NOT NULL,
         admin_expires_at TEXT,
-        revoked_at TEXT,
-        FOREIGN KEY (workspace_key_id) REFERENCES workspace_keys (id),
-        FOREIGN KEY (workspace_grant_id) REFERENCES workspace_grants (id)
+        revoked_at TEXT
       );
 
-      CREATE INDEX IF NOT EXISTS runtime_sessions_grant_idx
-        ON runtime_sessions (workspace_grant_id);
-
       CREATE TABLE IF NOT EXISTS admin_challenges (
         id TEXT PRIMARY KEY,
         runtime_session_id TEXT NOT NULL,
@@ -110,96 +70,37 @@ class TrustedSessionStore {
         ON dashboard_sessions (expires_at);
     `);
     }
-    getOrCreateWorkspaceKey(pathDigest) {
-        const existing = this.db
-            .prepare('SELECT id, path_digest, created_at FROM workspace_keys WHERE path_digest = ?')
-            .get(pathDigest);
-        if (existing) {
-            return existing;
+    /**
+     * NOT-108 PR2: drop grant ledger and rebuild runtime_sessions without
+     * workspace_key_id / workspace_grant_id (same drop-and-recreate pattern as NOT-105).
+     * Literals below are intentional — this is the only place that may still name the
+     * legacy tables so upgrades can DROP them.
+     */
+    maybeShedGrantSchema() {
+        const cols = this.db.pragma('table_info(runtime_sessions)');
+        const hasGrantColumn = cols.length > 0 && cols.some((col) => col.name === 'workspace_grant_id' || col.name === 'workspace_key_id');
+        const grantsExist = this.db.pragma('table_info(workspace_grants)').length > 0;
+        const keysExist = this.db.pragma('table_info(workspace_keys)').length > 0;
+        if (!hasGrantColumn && !grantsExist && !keysExist) {
+            return;
         }
-        const id = (0, shared_1.prefixTrustedId)('wsp', (0, node_crypto_1.randomUUID)());
-        const createdAt = nowIso();
-        this.db
-            .prepare('INSERT INTO workspace_keys (id, path_digest, created_at) VALUES (?, ?, ?)')
-            .run(id, pathDigest, createdAt);
-        return { id, path_digest: pathDigest, created_at: createdAt };
-    }
-    getWorkspaceKeyById(id) {
-        return (this.db
-            .prepare('SELECT id, path_digest, created_at FROM workspace_keys WHERE id = ?')
-            .get(id) ?? null);
-    }
-    getActiveGrantForWorkspace(workspaceKeyId) {
-        return (this.db
-            .prepare(`SELECT id, workspace_key_id, deck_id, secret_hash, status, created_at, activated_at, revoked_at
-           FROM workspace_grants
-           WHERE workspace_key_id = ? AND status = 'active'`)
-            .get(workspaceKeyId) ?? null);
-    }
-    getGrantById(grantId) {
-        return (this.db
-            .prepare(`SELECT id, workspace_key_id, deck_id, secret_hash, status, created_at, activated_at, revoked_at
-           FROM workspace_grants WHERE id = ?`)
-            .get(grantId) ?? null);
-    }
-    findActiveGrantBySecret(secret) {
-        const hash = hashGrantSecret((0, http_auth_1.normalizeWorkspaceGrantSecret)(secret));
-        return (this.db
-            .prepare(`SELECT id, workspace_key_id, deck_id, secret_hash, status, created_at, activated_at, revoked_at
-           FROM workspace_grants WHERE secret_hash = ? AND status = 'active'`)
-            .get(hash) ?? null);
-    }
-    createPendingGrant(workspaceKeyId, deckId, secret) {
-        const id = (0, shared_1.prefixTrustedId)('wgr', (0, node_crypto_1.randomUUID)());
-        const createdAt = nowIso();
-        const secretHash = hashGrantSecret(secret);
-        this.db
-            .prepare(`INSERT INTO workspace_grants
-         (id, workspace_key_id, deck_id, secret_hash, status, created_at)
-         VALUES (?, ?, ?, ?, 'pending', ?)`)
-            .run(id, workspaceKeyId, deckId, secretHash, createdAt);
-        return {
-            id,
-            workspace_key_id: workspaceKeyId,
-            deck_id: deckId,
-            secret_hash: secretHash,
-            status: 'pending',
-            created_at: createdAt,
-            activated_at: null,
-            revoked_at: null,
-        };
-    }
-    activateGrant(grantId) {
-        const grant = this.getGrantById(grantId);
-        if (!grant || grant.status !== 'pending') {
-            return null;
+        const foreignKeysEnabled = Number(this.db.pragma('foreign_keys', { simple: true })) === 1;
+        if (foreignKeysEnabled) {
+            this.db.pragma('foreign_keys = OFF');
+        }
+        try {
+            this.db.exec(`
+        DROP TABLE IF EXISTS admin_challenges;
+        DROP TABLE IF EXISTS runtime_sessions;
+        DROP TABLE IF EXISTS workspace_grants;
+        DROP TABLE IF EXISTS workspace_keys;
+      `);
+        }
+        finally {
+            if (foreignKeysEnabled) {
+                this.db.pragma('foreign_keys = ON');
+            }
         }
-        const activatedAt = nowIso();
-        const revokeActive = this.db.prepare(`UPDATE workspace_grants
-       SET status = 'revoked', revoked_at = ?
-       WHERE workspace_key_id = ? AND status = 'active'`);
-        const activate = this.db.prepare(`UPDATE workspace_grants
-       SET status = 'active', activated_at = ?
-       WHERE id = ? AND status = 'pending'`);
-        const tx = this.db.transaction(() => {
-            revokeActive.run(activatedAt, grant.workspace_key_id);
-            activate.run(activatedAt, grantId);
-        });
-        tx();
-        return this.getGrantById(grantId);
-    }
-    revokeGrant(grantId) {
-        const revokedAt = nowIso();
-        this.db
-            .prepare(`UPDATE workspace_grants SET status = 'revoked', revoked_at = ? WHERE id = ? AND status != 'revoked'`)
-            .run(revokedAt, grantId);
-        this.revokeSessionsForGrant(grantId, revokedAt);
-    }
-    revokeSessionsForGrant(grantId, revokedAt = nowIso()) {
-        const result = this.db
-            .prepare(`UPDATE runtime_sessions SET revoked_at = ? WHERE workspace_grant_id = ? AND revoked_at IS NULL`)
-            .run(revokedAt, grantId);
-        return result.changes;
     }
     createRuntimeSession(input) {
         const id = (0, shared_1.prefixTrustedId)('ses', (0, node_crypto_1.randomUUID)());
@@ -207,19 +108,18 @@ class TrustedSessionStore {
         const expiresAt = addMs(lastSeenAt, shared_1.RUNTIME_SESSION_LEASE_MS);
         this.db
             .prepare(`INSERT INTO runtime_sessions
-         (id, mcp_session_id, workspace_key_id, workspace_grant_id, deck_id, mode,
-          last_seen_at, expires_at, admin_expires_at)
-         VALUES (?, ?, ?, ?, ?, 'normal', ?, ?, NULL)`)
-            .run(id, input.mcpSessionId ?? null, input.workspaceKeyId, input.workspaceGrantId, input.deckId, lastSeenAt, expiresAt);
+         (id, mcp_session_id, deck_id, mode, last_seen_at, expires_at, admin_expires_at)
+         VALUES (?, ?, ?, 'normal', ?, ?, NULL)`)
+            .run(id, input.mcpSessionId ?? null, input.deckId, lastSeenAt, expiresAt);
         return this.toRuntimeSession(this.getRuntimeSessionRow(id));
     }
     /**
      * Latest runtime row for an MCP transport id, including expired/revoked.
-     * Used to keep transport→grant ownership immutable after the active lease ends.
+     * Used to keep transport→deck ownership immutable after the active lease ends.
      */
     findLatestRuntimeSessionByMcpSessionId(mcpSessionId) {
         const row = this.db
-            .prepare(`SELECT id, mcp_session_id, workspace_key_id, workspace_grant_id, deck_id, mode,
+            .prepare(`SELECT id, mcp_session_id, deck_id, mode,
                 last_seen_at, expires_at, admin_expires_at, revoked_at
          FROM runtime_sessions
          WHERE mcp_session_id = ?
@@ -231,7 +131,7 @@ class TrustedSessionStore {
     findActiveRuntimeSessionByMcpSessionId(mcpSessionId) {
         const now = nowIso();
         const row = this.db
-            .prepare(`SELECT id, mcp_session_id, workspace_key_id, workspace_grant_id, deck_id, mode,
+            .prepare(`SELECT id, mcp_session_id, deck_id, mode,
                 last_seen_at, expires_at, admin_expires_at, revoked_at
          FROM runtime_sessions
          WHERE mcp_session_id = ?
@@ -241,20 +141,19 @@ class TrustedSessionStore {
             .get(mcpSessionId, now);
         return row ? this.toRuntimeSession(row) : null;
     }
-    findActiveRuntimeSessionForMcp(mcpSessionId, grantId) {
+    findActiveLaunchSessionForMcp(mcpSessionId, deckId) {
         const now = nowIso();
         const row = this.db
-            .prepare(`SELECT id, mcp_session_id, workspace_key_id, workspace_grant_id, deck_id, mode,
+            .prepare(`SELECT id, mcp_session_id, deck_id, mode,
                 last_seen_at, expires_at, admin_expires_at, revoked_at
          FROM runtime_sessions
-         WHERE mcp_session_id = ? AND workspace_grant_id = ?
+         WHERE mcp_session_id = ? AND deck_id = ?
            AND revoked_at IS NULL AND expires_at > ?`)
-            .get(mcpSessionId, grantId, now);
+            .get(mcpSessionId, deckId, now);
         if (!row) {
             return null;
         }
-        const touched = this.touchRuntimeSession(row.id);
-        return touched;
+        return this.touchRuntimeSession(row.id);
     }
     getRuntimeSessionModeByMcpSessionId(mcpSessionId) {
         return this.getRuntimeSessionModesByMcpSessionIds([mcpSessionId]).get(mcpSessionId) ?? null;
@@ -272,13 +171,6 @@ class TrustedSessionStore {
             .all(...uniqueIds, now);
         return new Map(rows.map((row) => [row.mcp_session_id, row.mode]));
     }
-    revokePendingGrant(grantId) {
-        const revokedAt = nowIso();
-        this.db
-            .prepare(`UPDATE workspace_grants SET status = 'revoked', revoked_at = ?
-         WHERE id = ? AND status = 'pending'`)
-            .run(revokedAt, grantId);
-    }
     createDashboardNonce(nonce, expiresAtIso) {
         this.db
             .prepare(`INSERT INTO dashboard_nonces (nonce, expires_at, created_at) VALUES (?, ?, ?)`)
@@ -341,7 +233,7 @@ class TrustedSessionStore {
     }
     getRuntimeSessionRow(sessionId) {
         return (this.db
-            .prepare(`SELECT id, mcp_session_id, workspace_key_id, workspace_grant_id, deck_id, mode,
+            .prepare(`SELECT id, mcp_session_id, deck_id, mode,
                   last_seen_at, expires_at, admin_expires_at, revoked_at
            FROM runtime_sessions WHERE id = ?`)
             .get(sessionId) ?? null);
@@ -383,6 +275,23 @@ class TrustedSessionStore {
             .run(addMs(now, shared_1.ADMIN_MODE_LEASE_MS), now, addMs(now, shared_1.RUNTIME_SESSION_LEASE_MS), sessionId);
         return this.toRuntimeSession(this.getRuntimeSessionRow(sessionId));
     }
+    /** Launch-session deck switch after elevated assignment update (NOT-108). */
+    setRuntimeSessionDeck(sessionId, deckId) {
+        const row = this.getRuntimeSessionRow(sessionId);
+        if (!row || row.revoked_at || Date.parse(row.expires_at) <= Date.now()) {
+            return null;
+        }
+        if (row.mode !== 'agent-admin') {
+            return null;
+        }
+        const now = nowIso();
+        this.db
+            .prepare(`UPDATE runtime_sessions
+         SET deck_id = ?, last_seen_at = ?, expires_at = ?
+         WHERE id = ?`)
+            .run(deckId, now, addMs(now, shared_1.RUNTIME_SESSION_LEASE_MS), sessionId);
+        return this.toRuntimeSession(this.getRuntimeSessionRow(sessionId));
+    }
     downgradeSessionToNormal(sessionId) {
         const row = this.getRuntimeSessionRow(sessionId);
         if (!row || row.revoked_at) {
@@ -451,55 +360,6 @@ class TrustedSessionStore {
             createdAt: row.created_at,
         }));
     }
-    countWorkspacesForDeck(deckId) {
-        const row = this.db
-            .prepare(`SELECT COUNT(DISTINCT workspace_key_id) AS count
-         FROM workspace_grants
-         WHERE deck_id = ? AND status = 'active'`)
-            .get(deckId);
-        return row.count;
-    }
-    /**
-     * C8: elevated-agent deck change — rotate grant, rebind approving session, revoke peers.
-     * Plaintext grant secret is stored hashed only; caller must run `agent-deck use` to refresh local grant file.
-     */
-    rotateGrantForElevatedSession(runtimeSessionId, newDeckId) {
-        const row = this.getRuntimeSessionRow(runtimeSessionId);
-        if (!row || row.revoked_at || Date.parse(row.expires_at) <= Date.now()) {
-            return null;
-        }
-        if (row.mode !== 'agent-admin') {
-            return null;
-        }
-        if (row.deck_id === newDeckId) {
-            const session = this.touchRuntimeSession(runtimeSessionId);
-            return session
-                ? { session, peersRevoked: 0, grantId: row.workspace_grant_id }
-                : null;
-        }
-        const oldGrantId = row.workspace_grant_id;
-        const secret = generateGrantSecret();
-        const pending = this.createPendingGrant(row.workspace_key_id, newDeckId, secret);
-        const activated = this.activateGrant(pending.id);
-        if (!activated) {
-            this.revokePendingGrant(pending.id);
-            return null;
-        }
-        const revokedAt = nowIso();
-        const peersRevoked = this.db
-            .prepare(`UPDATE runtime_sessions SET revoked_at = ?
-         WHERE workspace_grant_id = ? AND id != ? AND revoked_at IS NULL`)
-            .run(revokedAt, oldGrantId, runtimeSessionId).changes;
-        const now = nowIso();
-        const adminExpiresAt = row.admin_expires_at;
-        this.db
-            .prepare(`UPDATE runtime_sessions
-         SET workspace_grant_id = ?, deck_id = ?, last_seen_at = ?, expires_at = ?
-         WHERE id = ?`)
-            .run(activated.id, newDeckId, now, addMs(now, shared_1.RUNTIME_SESSION_LEASE_MS), runtimeSessionId);
-        const session = this.toRuntimeSession(this.getRuntimeSessionRow(runtimeSessionId));
-        return { session, peersRevoked, grantId: activated.id };
-    }
     expireStaleSessions() {
         const now = nowIso();
         const downgrade = this.db.prepare(`UPDATE runtime_sessions
@@ -520,8 +380,6 @@ class TrustedSessionStore {
         return {
             sessionId: row.id,
             mcpSessionId: row.mcp_session_id ?? undefined,
-            workspaceKey: row.workspace_key_id,
-            workspaceGrantId: row.workspace_grant_id,
             deckId: row.deck_id,
             mode: row.mode,
             lastSeenAt: row.last_seen_at,

package/dist/trusted-session/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/trusted-session/store.ts"],"names":[],"mappings":";;;AAmEA,0CAEC;AAED,8DAEC;AAED,kDAEC;AAED,8CAOC;AAtFD,6CAAmF;AAEnF,+CAS4B;AAG5B,gDAAiE;AA+CjE,MAAM,mCAAmC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAgB,eAAe,CAAC,MAAc;IAC5C,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAgB,yBAAyB,CAAC,KAAa;IACrD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,mBAAmB;IACjC,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAc,EAAE,UAAkB;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAA,6BAAe,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,MAAM;IACb,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,EAAU;IACpC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,MAAa,mBAAmB;IACD;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;QAChD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAkEZ,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB,CAAC,UAAkB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,OAAO,CAAC,8EAA8E,CAAC;aACvF,GAAG,CAAC,UAAU,CAAgC,CAAC;QAElD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,2EAA2E,CAAC;aACpF,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAElC,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,mBAAmB,CAAC,EAAU;QAC5B,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CAAC,qEAAqE,CAAC;aAC9E,GAAG,CAAC,EAAE,CAAiC,IAAI,IAAI,CACnD,CAAC;IACJ,CAAC;IAED,0BAA0B,CAAC,cAAsB;QAC/C,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CACN;;4DAEkD,CACnD;aACA,GAAG,CAAC,cAAc,CAAmC,IAAI,IAAI,CACjE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,OAAe;QAC1B,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CACN;8CACoC,CACrC;aACA,GAAG,CAAC,OAAO,CAAmC,IAAI,IAAI,CAC1D,CAAC;IACJ,CAAC;IAED,uBAAuB,CAAC,MAAc;QACpC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAA,yCAA6B,EAAC,MAAM,CAAC,CAAC,CAAC;QACpE,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CACN;6EACmE,CACpE;aACA,GAAG,CAAC,IAAI,CAAmC,IAAI,IAAI,CACvD,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,cAAsB,EAAE,MAAc,EAAE,MAAc;QACvE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAE3C,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;2CAEmC,CACpC;aACA,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAE1D,OAAO;YACL,EAAE;YACF,gBAAgB,EAAE,cAAc;YAChC,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAClC;;wDAEkD,CACnD,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B;;2CAEqC,CACtC,CAAC;QAEF,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACtD,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;QAEL,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,qGAAqG,CACtG;aACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;IAED,sBAAsB,CAAC,OAAe,EAAE,YAAoB,MAAM,EAAE;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN,gGAAgG,CACjG;aACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,oBAAoB,CAAC,KAKpB;QACC,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,EAAE,iCAAwB,CAAC,CAAC;QAE9D,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;sDAG8C,CAC/C;aACA,GAAG,CACF,EAAE,EACF,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,MAAM,EACZ,UAAU,EACV,SAAS,CACV,CAAC;QAEJ,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,sCAAsC,CAAC,YAAoB;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;;iBAKS,CACV;aACA,GAAG,CAAC,YAAY,CAAkC,CAAC;QAEtD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAED,sCAAsC,CAAC,YAAoB;QACzD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;;;iBAMS,CACV;aACA,GAAG,CAAC,YAAY,EAAE,GAAG,CAAkC,CAAC;QAE3D,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAED,8BAA8B,CAAC,YAAoB,EAAE,OAAe;QAClE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;qDAI6C,CAC9C;aACA,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,CAAkC,CAAC;QAEpE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mCAAmC,CAAC,YAAoB;QACtD,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;IAC9F,CAAC;IAED,qCAAqC,CAAC,aAAuB;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;oCAC4B,YAAY,6CAA6C,CACtF;aACA,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,CAA8D,CAAC;QAEvF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,kBAAkB,CAAC,OAAe;QAChC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;6CACqC,CACtC;aACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,oBAAoB,CAAC,KAAa,EAAE,YAAoB;QACtD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,+EAA+E,CAChF;aACA,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,qBAAqB,CAAC,KAAa;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,6EAA6E,CAC9E;aACA,GAAG,CAAC,KAAK,CAAkF,CAAC;QAE/F,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,6DAA6D,CAAC;aACtE,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;QACnB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,+EAA+E,CAAC;aACxF,GAAG,CAAC,GAAG,CAAC,CAAC;QACZ,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,sBAAsB;QACpB,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;6BACqB,CACtB;aACA,GAAG,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,mCAA0B,CAAC,CAAC,CAAC;QAC3F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gCAAgC,CAAC,KAAa;QAC5C,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;sDAC8C,CAC/C;aACA,GAAG,CAAC,SAAS,CAAoC,CAAC;QAErD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC;YAChD,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,GAAG,mCAAmC,EAAE,CAAC;YAChF,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN,qFAAqF,CACtF;iBACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,mCAA0B,CAAC,EAAE,SAAS,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uBAAuB;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,sDAAsD,CAAC;aAC/D,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjB,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CACN;;8CAEoC,CACrC;aACA,GAAG,CAAC,SAAS,CAAmC,IAAI,IAAI,CAC5D,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,SAAiB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACpB,IAAI,cAAc,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAE1C,IAAI,IAAI,KAAK,aAAa,IAAI,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzF,IAAI,GAAG,QAAQ,CAAC;YAChB,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,CAAC;QACvD,MAAM,kBAAkB,GACtB,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,4BAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAElE,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,qBAAqB,CAAC,SAAiB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,4BAAmB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAE9F,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,wBAAwB,CAAC,SAAiB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,gFAAgF,CAAC;aACzF,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,oBAAoB,CAAC,gBAAwB;QAC3C,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,+BAAsB,CAAC,CAAC;QAE3D,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;6BACqB,CACtB;aACA,GAAG,CAAC,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAEnD,OAAO;YACL,EAAE;YACF,kBAAkB,EAAE,gBAAgB;YACpC,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;SACtB,CAAC;IACJ,CAAC;IAED,qBAAqB,CAAC,WAAmB,EAAE,gBAAwB;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;4CACoC,CACrC;aACA,GAAG,CAAC,WAAW,CAAkC,CAAC;QAErD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,kBAAkB,KAAK,gBAAgB,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0BAA0B;QAOxB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;;;;qCAK6B,CAC9B;aACA,GAAG,CAAC,GAAG,CAMR,CAAC;QAEH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,WAAW,EAAE,GAAG,CAAC,EAAE;YACnB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,sBAAsB,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;iDAEyC,CAC1C;aACA,GAAG,CAAC,MAAM,CAAsB,CAAC;QACpC,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,6BAA6B,CAC3B,gBAAwB,EACxB,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAC3D,OAAO,OAAO;gBACZ,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,kBAAkB,EAAE;gBAC/D,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,kBAAkB,CAAC;QAC1C,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE;aACzB,OAAO,CACN;yEACiE,CAClE;aACA,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC;QAExD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,cAAc,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAC5C,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CACF,SAAS,CAAC,EAAE,EACZ,SAAS,EACT,GAAG,EACH,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,EACpC,gBAAgB,CACjB,CAAC;QAEJ,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAE,CAAC,CAAC;QACpF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,mBAAmB;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/B;;6FAEuF,CACxF,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B;oDAC8C,CAC/C,CAAC;QAEF,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;QAEL,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,gBAAgB,CAAC,GAAsB;QAC7C,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,YAAY,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;YAC7C,YAAY,EAAE,GAAG,CAAC,gBAAgB;YAClC,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,YAAY;YAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,cAAc,EAAE,GAAG,CAAC,gBAAgB;SACrC,CAAC;IACJ,CAAC;CACF;AAnqBD,kDAmqBC"}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/trusted-session/store.ts"],"names":[],"mappings":";;;AA6CA,8DAEC;AA/CD,6CAAkE;AAElE,+CAQ4B;AA6B5B,MAAM,mCAAmC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAgB,yBAAyB,CAAC,KAAa;IACrD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,MAAM;IACb,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,EAAU;IACpC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,MAAa,mBAAmB;IACD;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;QAChD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,4EAA4E;QAC5E,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;KAIZ,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAqCZ,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,oBAAoB;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAExD,CAAC;QACH,MAAM,cAAc,GAClB,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,oBAAoB,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QAC9G,MAAM,WAAW,GACf,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAC9C,CAAC,MAAM,GAAG,CAAC,CAAC;QACb,MAAM,SAAS,GACb,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAC5C,CAAC,MAAM,GAAG,CAAC,CAAC;QAEb,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAClD,OAAO;QACT,CAAC;QAED,MAAM,kBAAkB,GACtB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;OAKZ,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,kBAAkB,EAAE,CAAC;gBACvB,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,KAGpB;QACC,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,EAAE,iCAAwB,CAAC,CAAC;QAE9D,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;gDAEwC,CACzC;aACA,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAE5E,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,sCAAsC,CAAC,YAAoB;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;;iBAKS,CACV;aACA,GAAG,CAAC,YAAY,CAAkC,CAAC;QAEtD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAED,sCAAsC,CAAC,YAAoB;QACzD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;;;iBAMS,CACV;aACA,GAAG,CAAC,YAAY,EAAE,GAAG,CAAkC,CAAC;QAE3D,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAED,6BAA6B,CAAC,YAAoB,EAAE,MAAc;QAChE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;qDAI6C,CAC9C;aACA,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,CAAkC,CAAC;QAEnE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,mCAAmC,CAAC,YAAoB;QACtD,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;IAC9F,CAAC;IAED,qCAAqC,CAAC,aAAuB;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;oCAC4B,YAAY,6CAA6C,CACtF;aACA,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,CAA8D,CAAC;QAEvF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,oBAAoB,CAAC,KAAa,EAAE,YAAoB;QACtD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,+EAA+E,CAChF;aACA,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,qBAAqB,CAAC,KAAa;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,6EAA6E,CAC9E;aACA,GAAG,CAAC,KAAK,CAAkF,CAAC;QAE/F,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,6DAA6D,CAAC;aACtE,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;QACnB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,+EAA+E,CAAC;aACxF,GAAG,CAAC,GAAG,CAAC,CAAC;QACZ,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,sBAAsB;QACpB,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;6BACqB,CACtB;aACA,GAAG,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,mCAA0B,CAAC,CAAC,CAAC;QAC3F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gCAAgC,CAAC,KAAa;QAC5C,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;sDAC8C,CAC/C;aACA,GAAG,CAAC,SAAS,CAAoC,CAAC;QAErD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC;YAChD,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,GAAG,mCAAmC,EAAE,CAAC;YAChF,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN,qFAAqF,CACtF;iBACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,mCAA0B,CAAC,EAAE,SAAS,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uBAAuB;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,sDAAsD,CAAC;aAC/D,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjB,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CACN;;8CAEoC,CACrC;aACA,GAAG,CAAC,SAAS,CAAmC,IAAI,IAAI,CAC5D,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,SAAiB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACpB,IAAI,cAAc,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAE1C,IAAI,IAAI,KAAK,aAAa,IAAI,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzF,IAAI,GAAG,QAAQ,CAAC;YAChB,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,CAAC;QACvD,MAAM,kBAAkB,GACtB,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,4BAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAElE,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,qBAAqB,CAAC,SAAiB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,4BAAmB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAE9F,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,6EAA6E;IAC7E,qBAAqB,CAAC,SAAiB,EAAE,MAAc;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,wBAAwB,CAAC,SAAiB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;sBAEc,CACf;aACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,iCAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAE,CAAC,CAAC;IACtE,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,gFAAgF,CAAC;aACzF,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,oBAAoB,CAAC,gBAAwB;QAC3C,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,+BAAsB,CAAC,CAAC;QAE3D,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;6BACqB,CACtB;aACA,GAAG,CAAC,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAEnD,OAAO;YACL,EAAE;YACF,kBAAkB,EAAE,gBAAgB;YACpC,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;SACtB,CAAC;IACJ,CAAC;IAED,qBAAqB,CAAC,WAAmB,EAAE,gBAAwB;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;4CACoC,CACrC;aACA,GAAG,CAAC,WAAW,CAAkC,CAAC;QAErD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,kBAAkB,KAAK,gBAAgB,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0BAA0B;QAOxB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;;;;qCAK6B,CAC9B;aACA,GAAG,CAAC,GAAG,CAMR,CAAC;QAEH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,WAAW,EAAE,GAAG,CAAC,EAAE;YACnB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,mBAAmB;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/B;;6FAEuF,CACxF,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B;oDAC8C,CAC/C,CAAC;QAEF,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;QAEL,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,gBAAgB,CAAC,GAAsB;QAC7C,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,YAAY,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;YAC7C,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,YAAY;YAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,cAAc,EAAE,GAAG,CAAC,gBAAgB;SACrC,CAAC;IACJ,CAAC;CACF;AA3eD,kDA2eC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-deck/backend",
-  "version": "1.8.0",
+  "version": "1.8.2",
   "description": "Agent Deck backend API, MCP server, and vault",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -46,7 +46,7 @@
     "prepublishOnly": "node ../../scripts/pre-publish-check.mjs && npm run build"
   },
   "dependencies": {
-    "@agent-deck/shared": "^1.8.0",
+    "@agent-deck/shared": "^1.8.2",
     "@fastify/cors": "^10.0.0",
     "@fastify/static": "^8.0.0",
     "@fastify/websocket": "^11.2.0",