@agent-deck/backend 1.8.1 → 1.9.0

package/dist/trusted-session/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/trusted-session/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE5D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAG7B,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAG5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,MAAM,UAAU,GAClB,aAAa,GACb,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,GACD;IACE,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,EAAE,kBAAkB,CAAC;CAC/B,CAAC;AAEN,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,uBAAuB;gBAA7B,IAAI,EAAE,uBAAuB,EAC7C,OAAO,EAAE,MAAM;CAKlB;AAkED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,mBAAmB,EAC1B,uBAAuB,CAAC,EAAE,uBAAuB,GAChD,OAAO,CAAC,gBAAgB,CAAC,CA4C3B;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAwCnF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAGvF;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAIzE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEzE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEjE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/trusted-session/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE5D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAG7B,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,MAAM,UAAU,GAClB,aAAa,GACb,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,uBAAuB;gBAA7B,IAAI,EAAE,uBAAuB,EAC7C,OAAO,EAAE,MAAM;CAKlB;AAoDD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAiB3B;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,GAAG,IAAI,CA0BnF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAGvF;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAGzE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEzE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEjE"}

package/dist/trusted-session/auth.js

@@ -11,8 +11,6 @@ exports.isAgentAdmin = isAgentAdmin;
 const shared_1 = require("@agent-deck/shared");
 const http_auth_1 = require("../lib/http-auth");
 const dashboard_auth_1 = require("../lib/dashboard-auth");
-const bearer_1 = require("../execution-authority/bearer");
-const execution_authority_http_1 = require("../lib/execution-authority-http");
 const admin_secret_1 = require("./admin-secret");
 class TrustedAuthError extends Error {
     code;
@@ -23,6 +21,7 @@ class TrustedAuthError extends Error {
     }
 }
 exports.TrustedAuthError = TrustedAuthError;
+const GRANT_REQUIRED_MESSAGE = 'No deck selected for this connection';
 async function resolveDashboardPrincipal(request, store) {
     const dashboardToken = (0, dashboard_auth_1.parseDashboardCookie)(request);
     if (dashboardToken && store.validateAndTouchDashboardSession(dashboardToken)) {
@@ -48,7 +47,7 @@ function resolveAgentFromSessionHeader(request, store) {
         throw new TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
     }
     if (row.revoked_at) {
-        throw new TrustedAuthError('SESSION_REVOKED', 'Grant rotation or explicit revocation ended the session');
+        throw new TrustedAuthError('SESSION_REVOKED', 'Session was revoked');
     }
     if (Date.parse(row.expires_at) <= Date.now()) {
         throw new TrustedAuthError('SESSION_INVALID', 'Runtime session absent or expired');
@@ -59,18 +58,7 @@ function resolveAgentFromSessionHeader(request, store) {
     }
     return session;
 }
-function resolveAgentFromGrantSecret(grantSecret, store) {
-    const grant = store.findActiveGrantBySecret(grantSecret);
-    if (!grant) {
-        throw new TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
-    }
-    return store.createRuntimeSession({
-        workspaceKeyId: grant.workspace_key_id,
-        workspaceGrantId: grant.id,
-        deckId: grant.deck_id,
-    });
-}
-async function resolveRequestPrincipal(request, store, executionAuthorityStore) {
+async function resolveRequestPrincipal(request, store) {
     const dashboard = await resolveDashboardPrincipal(request, store);
     if (dashboard) {
         return dashboard;
@@ -82,31 +70,9 @@ async function resolveRequestPrincipal(request, store, executionAuthorityStore)
             session: sessionFromHeader,
             mode: sessionFromHeader.mode,
             deckId: sessionFromHeader.deckId,
-            workspaceKey: sessionFromHeader.workspaceKey,
         };
     }
-    const bearer = (0, http_auth_1.parseBearerToken)(request);
-    if (bearer && executionAuthorityStore) {
-        const authorityCreds = (0, bearer_1.parseAuthorityBearer)(bearer);
-        if (authorityCreds) {
-            const auth = executionAuthorityStore.authenticateAuthority(authorityCreds.authorityId, authorityCreds.secret);
-            if (!auth.ok) {
-                throw new execution_authority_http_1.AuthorityContractAuthError(auth);
-            }
-            return { kind: 'execution-authority', authority: auth.data };
-        }
-    }
-    if (bearer) {
-        const session = resolveAgentFromGrantSecret(bearer, store);
-        return {
-            kind: 'agent',
-            session,
-            mode: session.mode,
-            deckId: session.deckId,
-            workspaceKey: session.workspaceKey,
-        };
-    }
-    throw new TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
+    throw new TrustedAuthError('GRANT_REQUIRED', GRANT_REQUIRED_MESSAGE);
 }
 async function requireTrustedWriterBearer(request) {
     const bearer = (0, http_auth_1.parseBearerToken)(request);
@@ -126,24 +92,13 @@ function enforcePolicy(policy, principal) {
         return;
     }
     if (policy === 'requireAgentOrDashboard') {
-        if (principal.kind === 'dashboard' ||
-            principal.kind === 'agent' ||
-            principal.kind === 'execution-authority') {
-            return;
-        }
-        throw new TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
-    }
-    if (principal.kind === 'execution-authority') {
-        if (policy === 'requireDeckAdmin') {
-            throw new TrustedAuthError('ADMIN_REQUIRED', 'Deck-admin elevation is required');
-        }
-        if (policy === 'requireAgentResource') {
+        if (principal.kind === 'dashboard' || principal.kind === 'agent') {
             return;
         }
-        throw new TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
+        throw new TrustedAuthError('GRANT_REQUIRED', GRANT_REQUIRED_MESSAGE);
     }
     if (principal.kind !== 'agent') {
-        throw new TrustedAuthError('GRANT_REQUIRED', 'No valid workspace grant');
+        throw new TrustedAuthError('GRANT_REQUIRED', GRANT_REQUIRED_MESSAGE);
     }
     if (policy === 'requireDeckAdmin' && principal.mode !== 'agent-admin') {
         throw new TrustedAuthError('ADMIN_REQUIRED', 'Deck-admin elevation is required');
@@ -156,8 +111,6 @@ function sendTrustedAuthError(reply, error) {
 function getAgentDeckId(principal) {
     if (principal.kind === 'agent')
         return principal.deckId;
-    if (principal.kind === 'execution-authority')
-        return principal.authority.deckId;
     return null;
 }
 function isDashboardPrincipal(principal) {

package/dist/trusted-session/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/trusted-session/auth.ts"],"names":[],"mappings":";;;AAqHA,0DAgDC;AAED,gEAMC;AAED,sCAwCC;AAED,oDAGC;AAED,wCAIC;AAED,oDAEC;AAED,oCAEC;AAxOD,+CAO4B;AAE5B,gDAAoD;AACpD,0DAA6D;AAC7D,0DAAqE;AAGrE,8EAA6E;AAC7E,iDAAiF;AA0BjF,MAAa,gBAAiB,SAAQ,KAAK;IAEvB;IADlB,YACkB,IAA6B,EAC7C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAyB;QAI7C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AARD,4CAQC;AAED,KAAK,UAAU,yBAAyB,CACtC,OAAuB,EACvB,KAA0B;IAE1B,MAAM,cAAc,GAAG,IAAA,qCAAoB,EAAC,OAAO,CAAC,CAAC;IACrD,IAAI,cAAc,IAAI,KAAK,CAAC,gCAAgC,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,IAAA,2CAA4B,GAAE,CAAC;QACtD,IAAI,QAAQ,IAAI,IAAA,gCAAiB,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,6BAA6B,CACpC,OAAuB,EACvB,KAA0B;IAE1B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAClC,WAAmB,EACnB,KAA0B;IAE1B,MAAM,KAAK,GAAG,KAAK,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,KAAK,CAAC,oBAAoB,CAAC;QAChC,cAAc,EAAE,KAAK,CAAC,gBAAgB;QACtC,gBAAgB,EAAE,KAAK,CAAC,EAAE;QAC1B,MAAM,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,OAAuB,EACvB,KAA0B,EAC1B,uBAAiD;IAEjD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,iBAAiB;YAC1B,IAAI,EAAE,iBAAiB,CAAC,IAAI;YAC5B,MAAM,EAAE,iBAAiB,CAAC,MAAM;YAChC,YAAY,EAAE,iBAAiB,CAAC,YAAY;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,IAAA,6BAAoB,EAAC,MAAM,CAAC,CAAC;QACpD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,uBAAuB,CAAC,qBAAqB,CACxD,cAAc,CAAC,WAAW,EAC1B,cAAc,CAAC,MAAM,CACtB,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,qDAA0B,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,2BAA2B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;AAC3E,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,OAAuB;IACtE,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,IAAA,2CAA4B,GAAE,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAA,gCAAiB,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,wCAAwC,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,MAAkB,EAAE,SAA2B;IAC3E,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,IACE,SAAS,CAAC,IAAI,KAAK,WAAW;YAC9B,SAAS,CAAC,IAAI,KAAK,OAAO;YAC1B,SAAS,CAAC,IAAI,KAAK,qBAAqB,EACxC,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC7C,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAClC,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,MAAM,KAAK,kBAAkB,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACtE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAmB,EAAE,KAAuB;IAC/E,MAAM,IAAI,GAAG,IAAA,4BAAmB,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,KAAK,CAAC,MAAM,CAAC,IAAA,kCAAyB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,cAAc,CAAC,SAA2B;IACxD,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IACxD,IAAI,SAAS,CAAC,IAAI,KAAK,qBAAqB;QAAE,OAAO,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,oBAAoB,CAAC,SAA2B;IAC9D,OAAO,SAAS,CAAC,IAAI,KAAK,WAAW,CAAC;AACxC,CAAC;AAED,SAAgB,YAAY,CAAC,SAA2B;IACtD,OAAO,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,CAAC;AACxE,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/trusted-session/auth.ts"],"names":[],"mappings":";;;AA8FA,0DAoBC;AAED,gEAMC;AAED,sCA0BC;AAED,oDAGC;AAED,wCAGC;AAED,oDAEC;AAED,oCAEC;AAtKD,+CAO4B;AAE5B,gDAAoD;AACpD,0DAA6D;AAC7D,iDAAiF;AAqBjF,MAAa,gBAAiB,SAAQ,KAAK;IAEvB;IADlB,YACkB,IAA6B,EAC7C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAyB;QAI7C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AARD,4CAQC;AAED,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAEtE,KAAK,UAAU,yBAAyB,CACtC,OAAuB,EACvB,KAA0B;IAE1B,MAAM,cAAc,GAAG,IAAA,qCAAoB,EAAC,OAAO,CAAC,CAAC;IACrD,IAAI,cAAc,IAAI,KAAK,CAAC,gCAAgC,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,IAAA,2CAA4B,GAAE,CAAC;QACtD,IAAI,QAAQ,IAAI,IAAA,gCAAiB,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,6BAA6B,CACpC,OAAuB,EACvB,KAA0B;IAE1B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,OAAuB,EACvB,KAA0B;IAE1B,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,iBAAiB;YAC1B,IAAI,EAAE,iBAAiB,CAAC,IAAI;YAC5B,MAAM,EAAE,iBAAiB,CAAC,MAAM;SACjC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;AACvE,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,OAAuB;IACtE,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,IAAA,2CAA4B,GAAE,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAA,gCAAiB,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,wCAAwC,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,MAAkB,EAAE,SAA2B;IAC3E,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,MAAM,KAAK,kBAAkB,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACtE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAmB,EAAE,KAAuB;IAC/E,MAAM,IAAI,GAAG,IAAA,4BAAmB,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,KAAK,CAAC,MAAM,CAAC,IAAA,kCAAyB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,cAAc,CAAC,SAA2B;IACxD,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,oBAAoB,CAAC,SAA2B;IAC9D,OAAO,SAAS,CAAC,IAAI,KAAK,WAAW,CAAC;AACxC,CAAC;AAED,SAAgB,YAAY,CAAC,SAA2B;IACtD,OAAO,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa,CAAC;AACxE,CAAC"}

package/dist/trusted-session/policy-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-hook.d.ts","sourceRoot":"","sources":["../../src/trusted-session/policy-hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAS7E,OAAO,EAML,KAAK,gBAAgB,EACtB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;KACrC;CACF;AAED,eAAO,MAAM,oBAAoB,EAAE,eAAe,EAAO,CAAC;AAe1D,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CA6GrE;AAED,wBAAgB,2BAA2B,CAAC,MAAM,GAAE,eAAe,EAAyB,GAAG,IAAI,CAMlG"}
+{"version":3,"file":"policy-hook.d.ts","sourceRoot":"","sources":["../../src/trusted-session/policy-hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAE7E,OAAO,EAML,KAAK,gBAAgB,EACtB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;KACrC;CACF;AAED,eAAO,MAAM,oBAAoB,EAAE,eAAe,EAAO,CAAC;AAE1D,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CA6DrE;AAED,wBAAgB,2BAA2B,CAAC,MAAM,GAAE,eAAe,EAAyB,GAAG,IAAI,CAMlG"}

package/dist/trusted-session/policy-hook.js

@@ -3,21 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registeredHttpRoutes = void 0;
 exports.registerHttpPolicyHook = registerHttpPolicyHook;
 exports.assertAllRoutesHavePolicies = assertAllRoutesHavePolicies;
-const bearer_1 = require("../execution-authority/bearer");
-const http_auth_1 = require("../lib/http-auth");
-const execution_authority_http_1 = require("../lib/execution-authority-http");
 const auth_1 = require("./auth");
 const route_policy_registry_1 = require("./route-policy-registry");
 exports.registeredHttpRoutes = [];
-function tryParseAuthorityBearer(request) {
-    const bearer = (0, http_auth_1.parseBearerToken)(request);
-    return bearer ? (0, bearer_1.parseAuthorityBearer)(bearer) : null;
-}
-/** Worker bootstrap only — coordinator issuer routes stay off-limits to authority bearers. */
-function isExecutionAuthorityWorkerBootstrap(pathname) {
-    return (pathname === '/api/execution-authority/mcp/connect' ||
-        pathname === '/api/execution-authority/authorize-call');
-}
 function registerHttpPolicyHook(fastify) {
     exports.registeredHttpRoutes.length = 0;
     fastify.addHook('onRoute', (routeOptions) => {
@@ -39,41 +27,6 @@ function registerHttpPolicyHook(fastify) {
         if (request.method === 'HEAD') {
             return;
         }
-        // NOT-86: detect authority bearer before any generic policy rejection
-        // (DASHBOARD_REQUIRED / GRANT_REQUIRED / unmatched route / trusted-writer).
-        const authorityCreds = tryParseAuthorityBearer(request);
-        if (authorityCreds && fastify.executionAuthorityStore) {
-            const auth = fastify.executionAuthorityStore.authenticateAuthority(authorityCreds.authorityId, authorityCreds.secret);
-            if (!auth.ok) {
-                return (0, execution_authority_http_1.sendContractError)(reply, auth);
-            }
-            request.requestPrincipal = { kind: 'execution-authority', authority: auth.data };
-            const policy = (0, route_policy_registry_1.resolveRoutePolicy)(request.method, pathname);
-            if (policy === 'allowPublic') {
-                if (isExecutionAuthorityWorkerBootstrap(pathname)) {
-                    // connect / authorize-call authenticate again in-handler.
-                    return;
-                }
-                if (pathname.startsWith('/api/execution-authority/')) {
-                    return (0, execution_authority_http_1.sendContractError)(reply, {
-                        ok: false,
-                        error_code: 'INTERACTION_REQUIRED',
-                        message: 'Control-plane decision required; do not hold the worker',
-                        correlation: { authorityId: auth.data.authorityId },
-                    });
-                }
-                return;
-            }
-            if (!policy || !(0, execution_authority_http_1.isExecutionAuthorityHttpAllowed)(request.method, pathname)) {
-                return (0, execution_authority_http_1.sendContractError)(reply, {
-                    ok: false,
-                    error_code: 'INTERACTION_REQUIRED',
-                    message: 'Control-plane decision required; do not hold the worker',
-                    correlation: { authorityId: auth.data.authorityId },
-                });
-            }
-            return;
-        }
         const policy = (0, route_policy_registry_1.resolveRoutePolicy)(request.method, pathname);
         if (!policy) {
             return (0, auth_1.sendTrustedAuthError)(reply, new auth_1.TrustedAuthError('DASHBOARD_REQUIRED', `No authorization policy for ${request.method} ${pathname}`));
@@ -96,14 +49,11 @@ function registerHttpPolicyHook(fastify) {
             return;
         }
         try {
-            const principal = await (0, auth_1.resolveRequestPrincipal)(request, fastify.trustedSessionStore, fastify.executionAuthorityStore);
+            const principal = await (0, auth_1.resolveRequestPrincipal)(request, fastify.trustedSessionStore);
             (0, auth_1.enforcePolicy)(policy, principal);
             request.requestPrincipal = principal;
         }
         catch (error) {
-            if (error instanceof execution_authority_http_1.AuthorityContractAuthError) {
-                return (0, execution_authority_http_1.sendContractError)(reply, error.contract);
-            }
             if (error instanceof auth_1.TrustedAuthError) {
                 return (0, auth_1.sendTrustedAuthError)(reply, error);
             }

package/dist/trusted-session/policy-hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-hook.js","sourceRoot":"","sources":["../../src/trusted-session/policy-hook.ts"],"names":[],"mappings":";;;AA6CA,wDA6GC;AAED,kEAMC;AAhKD,0DAAqE;AACrE,gDAAoD;AACpD,8EAIyC;AACzC,iCAOgB;AAChB,mEAKiC;AAQpB,QAAA,oBAAoB,GAAsB,EAAE,CAAC;AAE1D,SAAS,uBAAuB,CAAC,OAAuB;IACtD,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAA,6BAAoB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,8FAA8F;AAC9F,SAAS,mCAAmC,CAAC,QAAgB;IAC3D,OAAO,CACL,QAAQ,KAAK,sCAAsC;QACnD,QAAQ,KAAK,yCAAyC,CACvD,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAwB;IAC7D,4BAAoB,CAAC,MAAM,GAAG,CAAC,CAAC;IAEhC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;YAChD,CAAC,CAAC,YAAY,CAAC,MAAM;YACrB,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,4BAAoB,CAAC,IAAI,CAAC;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;gBACpC,GAAG,EAAE,YAAY,CAAC,GAAG;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAA,6CAAqB,EAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,4EAA4E;QAC5E,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,cAAc,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,OAAO,CAAC,uBAAuB,CAAC,qBAAqB,CAChE,cAAc,CAAC,WAAW,EAC1B,cAAc,CAAC,MAAM,CACtB,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,IAAA,4CAAiB,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,CAAC,gBAAgB,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAEjF,MAAM,MAAM,GAAG,IAAA,0CAAkB,EAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC5D,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC7B,IAAI,mCAAmC,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClD,0DAA0D;oBAC1D,OAAO;gBACT,CAAC;gBACD,IAAI,QAAQ,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACrD,OAAO,IAAA,4CAAiB,EAAC,KAAK,EAAE;wBAC9B,EAAE,EAAE,KAAK;wBACT,UAAU,EAAE,sBAAsB;wBAClC,OAAO,EAAE,yDAAyD;wBAClE,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;qBACpD,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,IAAI,CAAC,IAAA,0DAA+B,EAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC1E,OAAO,IAAA,4CAAiB,EAAC,KAAK,EAAE;oBAC9B,EAAE,EAAE,KAAK;oBACT,UAAU,EAAE,sBAAsB;oBAClC,OAAO,EAAE,yDAAyD;oBAClE,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;iBACpD,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,0CAAkB,EAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAA,2BAAoB,EACzB,KAAK,EACL,IAAI,uBAAgB,CAAC,oBAAoB,EAAE,+BAA+B,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,CACxG,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,OAAO,CAAC,gBAAgB,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;gBAC1C,OAAO,CAAC,gBAAgB,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;oBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAA,8BAAuB,EAC7C,OAAO,EACP,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,uBAAuB,CAChC,CAAC;YACF,IAAA,oBAAa,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACjC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qDAA0B,EAAE,CAAC;gBAChD,OAAO,IAAA,4CAAiB,EAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,2BAA2B,CAAC,SAA4B,4BAAoB;IAC1F,MAAM,SAAS,GAAG,IAAA,2CAAmB,EAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}
+{"version":3,"file":"policy-hook.js","sourceRoot":"","sources":["../../src/trusted-session/policy-hook.ts"],"names":[],"mappings":";;;AAyBA,wDA6DC;AAED,kEAMC;AA5FD,iCAOgB;AAChB,mEAKiC;AAQpB,QAAA,oBAAoB,GAAsB,EAAE,CAAC;AAE1D,SAAgB,sBAAsB,CAAC,OAAwB;IAC7D,4BAAoB,CAAC,MAAM,GAAG,CAAC,CAAC;IAEhC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;YAChD,CAAC,CAAC,YAAY,CAAC,MAAM;YACrB,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,4BAAoB,CAAC,IAAI,CAAC;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;gBACpC,GAAG,EAAE,YAAY,CAAC,GAAG;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAA,6CAAqB,EAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,0CAAkB,EAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAA,2BAAoB,EACzB,KAAK,EACL,IAAI,uBAAgB,CAAC,oBAAoB,EAAE,+BAA+B,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,CACxG,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,OAAO,CAAC,gBAAgB,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,IAAA,iCAA0B,EAAC,OAAO,CAAC,CAAC;gBAC1C,OAAO,CAAC,gBAAgB,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;oBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAA,8BAAuB,EAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACtF,IAAA,oBAAa,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACjC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAgB,EAAE,CAAC;gBACtC,OAAO,IAAA,2BAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,2BAA2B,CAAC,SAA4B,4BAAoB;IAC1F,MAAM,SAAS,GAAG,IAAA,2CAAmB,EAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/trusted-session/route-policy-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-policy-registry.d.ts","sourceRoot":"","sources":["../../src/trusted-session/route-policy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEzC,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,eAAe,EAuKhD,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK/D;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAQtF;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAmBhF"}
+{"version":3,"file":"route-policy-registry.d.ts","sourceRoot":"","sources":["../../src/trusted-session/route-policy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEzC,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,eAAe,EAmHhD,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK/D;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAQtF;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAmBhF"}

package/dist/trusted-session/route-policy-registry.js

@@ -19,65 +19,14 @@ exports.HTTP_ROUTE_POLICIES = [
     { methods: ['GET'], pattern: /^\/api\/scope\/display$/, policy: 'allowPublic' },
     { methods: ['GET'], pattern: /^\/api\/scope\/bindings$/, policy: 'allowPublic' },
     { methods: ['GET'], pattern: /^\/api\/trusted-session\/admin\/challenges$/, policy: 'allowPublic' },
-    { methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/connect$/, policy: 'allowPublic' },
-    { methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/disconnect$/, policy: 'allowPublic' },
-    { methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/disconnect$/, policy: 'allowPublic' },
+    { methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/connect-deck$/, policy: 'allowPublic' },
+    { methods: ['POST'], pattern: /^\/api\/trusted-session\/mcp\/disconnect-deck$/, policy: 'allowPublic' },
     { methods: ['POST'], pattern: /^\/api\/dashboard-auth\/bootstrap\/session$/, policy: 'allowPublic' },
+    { methods: ['GET'], pattern: /^\/api\/launch\/decks$/, policy: 'allowPublic' },
+    { methods: ['GET'], pattern: /^\/api\/launch\/decks\/[^/]+\/playbooks$/, policy: 'allowPublic' },
     // Trusted writer (admin secret bearer only — enforced in policy hook)
-    { methods: ['POST'], pattern: /^\/api\/trusted-session\/workspace-grants\/issue$/, policy: 'requireTrustedWriter' },
-    {
-        methods: ['POST'],
-        pattern: /^\/api\/trusted-session\/workspace-grants\/[^/]+\/revoke-pending$/,
-        policy: 'requireTrustedWriter',
-    },
-    {
-        methods: ['POST'],
-        pattern: /^\/api\/trusted-session\/workspace-grants\/[^/]+\/activate$/,
-        policy: 'requireTrustedWriter',
-    },
     { methods: ['POST'], pattern: /^\/api\/dashboard-auth\/bootstrap\/nonce$/, policy: 'requireTrustedWriter' },
-    // Execution authority (NOT-86) — enroll via trusted writer; coordinator/worker auth in handlers
-    {
-        methods: ['POST'],
-        pattern: /^\/api\/execution-authority\/enrollments$/,
-        policy: 'requireTrustedWriter',
-    },
-    {
-        methods: ['GET'],
-        pattern: /^\/api\/execution-authority\/enrollments\/[^/]+$/,
-        policy: 'requireTrustedWriter',
-    },
-    {
-        methods: ['POST'],
-        pattern: /^\/api\/execution-authority\/enrollments\/[^/]+\/revoke$/,
-        policy: 'requireTrustedWriter',
-    },
-    { methods: ['GET'], pattern: /^\/api\/execution-authority\/decks$/, policy: 'allowPublic' },
-    {
-        methods: ['GET'],
-        // [^/]+ matches one raw path segment (including %2F). Handler rejects decoded "/" in deckId.
-        pattern: /^\/api\/execution-authority\/decks\/[^/]+\/playbooks$/,
-        policy: 'allowPublic',
-    },
-    { methods: ['POST'], pattern: /^\/api\/execution-authority\/authorities$/, policy: 'allowPublic' },
-    {
-        methods: ['GET'],
-        pattern: /^\/api\/execution-authority\/authorities\/[^/]+$/,
-        policy: 'allowPublic',
-    },
-    {
-        methods: ['POST'],
-        pattern: /^\/api\/execution-authority\/authorities\/[^/]+\/revoke$/,
-        policy: 'allowPublic',
-    },
-    { methods: ['GET'], pattern: /^\/api\/execution-authority\/audit$/, policy: 'allowPublic' },
-    { methods: ['POST'], pattern: /^\/api\/execution-authority\/mcp\/connect$/, policy: 'allowPublic' },
-    {
-        methods: ['POST'],
-        pattern: /^\/api\/execution-authority\/authorize-call$/,
-        policy: 'allowPublic',
-    },
-    // Agent resource (runtime session or grant bearer)
+    // Agent resource (runtime session)
     { methods: ['GET'], pattern: /^\/api\/trusted-session\/runtime-session$/, policy: 'requireAgentResource' },
     {
         methods: ['POST'],

package/dist/trusted-session/route-policy-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-policy-registry.js","sourceRoot":"","sources":["../../src/trusted-session/route-policy-registry.ts"],"names":[],"mappings":";;;AAsLA,sDAKC;AAED,gDAQC;AAID,kDAmBC;AAnND;;;GAGG;AACU,QAAA,mBAAmB,GAAsB;IACpD,SAAS;IACT,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE;IAClE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE;IAC5D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,aAAa,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,aAAa,EAAE;IACvF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,aAAa,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,aAAa,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE;IAC/E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,aAAa,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,aAAa,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,aAAa,EAAE;IAClG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,aAAa,EAAE;IAClG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IAEpG,sEAAsE;IACtE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mDAAmD,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACnH;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,mEAAmE;QAC5E,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,6DAA6D;QACtE,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAE3G,gGAAgG;IAChG;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,0DAA0D;QACnE,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,aAAa,EAAE;IAC3F;QACE,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,6FAA6F;QAC7F,OAAO,EAAE,uDAAuD;QAChE,MAAM,EAAE,aAAa;KACtB;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,aAAa,EAAE;IAClG;QACE,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,aAAa;KACtB;IACD;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,0DAA0D;QACnE,MAAM,EAAE,aAAa;KACtB;IACD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,aAAa,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,MAAM,EAAE,aAAa,EAAE;IACnG;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,8CAA8C;QACvD,MAAM,EAAE,aAAa;KACtB;IAED,mDAAmD;IACnD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC1G;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,oDAAoD;QAC7D,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC1G,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACvG;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAEhG,gCAAgC;IAChC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAE5E,iBAAiB;IACjB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACnF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACjG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAChG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC1F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7E,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC1F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAEtG,6EAA6E;IAC7E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC5G,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC7G,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACzG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACrG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACjG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,yBAAyB,EAAE;CAC/F,CAAC;AAEF,SAAgB,qBAAqB,CAAC,QAAgB;IACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAc,EAAE,QAAgB;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,2BAAmB,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,SAAgB,mBAAmB,CAAC,MAAyB;IAC3D,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACjD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO;aACpB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC;aACrC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"route-policy-registry.js","sourceRoot":"","sources":["../../src/trusted-session/route-policy-registry.ts"],"names":[],"mappings":";;;AAkIA,sDAKC;AAED,gDAQC;AAID,kDAmBC;AA/JD;;;GAGG;AACU,QAAA,mBAAmB,GAAsB;IACpD,SAAS;IACT,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE;IAClE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE;IAC5D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,aAAa,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,aAAa,EAAE;IACvF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,aAAa,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,aAAa,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE;IAC/E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,aAAa,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,MAAM,EAAE,aAAa,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,aAAa,EAAE;IAC9E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,aAAa,EAAE;IAEhG,sEAAsE;IACtE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAE3G,mCAAmC;IACnC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC1G;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,oDAAoD;QAC7D,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC1G,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACvG;QACE,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAEhG,gCAAgC;IAChC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAE5E,iBAAiB;IACjB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACnF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACjG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC3F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAClG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAChF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAChG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC1F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7E,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC1F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC9F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAEtG,6EAA6E;IAC7E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAClF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACzF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACpG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACtG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC5G,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC7G,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACzG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACrG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACvG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACrF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC5F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACxF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC/F,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACjG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACtF,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAC7F,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,yBAAyB,EAAE;CAC/F,CAAC;AAEF,SAAgB,qBAAqB,CAAC,QAAgB;IACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAc,EAAE,QAAgB;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,2BAAmB,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,SAAgB,mBAAmB,CAAC,MAAyB;IAC3D,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACjD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO;aACpB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC;aACrC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/trusted-session/store.d.ts

@@ -1,25 +1,8 @@
-import { type AgentSessionMode, type RuntimeSession, type WorkspaceGrantStatus } from '@agent-deck/shared';
+import { type AgentSessionMode, type RuntimeSession } from '@agent-deck/shared';
 import type Database from 'better-sqlite3';
-export type WorkspaceKeyRow = {
-    id: string;
-    path_digest: string;
-    created_at: string;
-};
-export type WorkspaceGrantRow = {
-    id: string;
-    workspace_key_id: string;
-    deck_id: string;
-    secret_hash: string;
-    status: WorkspaceGrantStatus;
-    created_at: string;
-    activated_at: string | null;
-    revoked_at: string | null;
-};
 export type RuntimeSessionRow = {
     id: string;
     mcp_session_id: string | null;
-    workspace_key_id: string;
-    workspace_grant_id: string;
     deck_id: string;
     mode: AgentSessionMode;
     last_seen_at: string;
@@ -40,39 +23,31 @@ export type DashboardSessionRow = {
     last_seen_at: string;
     expires_at: string;
 };
-export declare function hashGrantSecret(secret: string): string;
 export declare function hashDashboardSessionToken(token: string): string;
-export declare function generateGrantSecret(): string;
-export declare function verifyGrantSecret(secret: string, secretHash: string): boolean;
 export declare class TrustedSessionStore {
     private readonly db;
     constructor(db: Database.Database);
     private ensureTables;
-    getOrCreateWorkspaceKey(pathDigest: string): WorkspaceKeyRow;
-    getWorkspaceKeyById(id: string): WorkspaceKeyRow | null;
-    getActiveGrantForWorkspace(workspaceKeyId: string): WorkspaceGrantRow | null;
-    getGrantById(grantId: string): WorkspaceGrantRow | null;
-    findActiveGrantBySecret(secret: string): WorkspaceGrantRow | null;
-    createPendingGrant(workspaceKeyId: string, deckId: string, secret: string): WorkspaceGrantRow;
-    activateGrant(grantId: string): WorkspaceGrantRow | null;
-    revokeGrant(grantId: string): void;
-    revokeSessionsForGrant(grantId: string, revokedAt?: string): number;
+    /**
+     * NOT-108 PR2: drop grant ledger and rebuild runtime_sessions without
+     * workspace_key_id / workspace_grant_id (same drop-and-recreate pattern as NOT-105).
+     * Literals below are intentional — this is the only place that may still name the
+     * legacy tables so upgrades can DROP them.
+     */
+    private maybeShedGrantSchema;
     createRuntimeSession(input: {
-        workspaceKeyId: string;
-        workspaceGrantId: string;
         deckId: string;
         mcpSessionId?: string;
     }): RuntimeSession;
     /**
      * Latest runtime row for an MCP transport id, including expired/revoked.
-     * Used to keep transport→grant ownership immutable after the active lease ends.
+     * Used to keep transport→deck ownership immutable after the active lease ends.
      */
     findLatestRuntimeSessionByMcpSessionId(mcpSessionId: string): RuntimeSession | null;
     findActiveRuntimeSessionByMcpSessionId(mcpSessionId: string): RuntimeSession | null;
-    findActiveRuntimeSessionForMcp(mcpSessionId: string, grantId: string): RuntimeSession | null;
+    findActiveLaunchSessionForMcp(mcpSessionId: string, deckId: string): RuntimeSession | null;
     getRuntimeSessionModeByMcpSessionId(mcpSessionId: string): AgentSessionMode | null;
     getRuntimeSessionModesByMcpSessionIds(mcpSessionIds: string[]): Map<string, AgentSessionMode>;
-    revokePendingGrant(grantId: string): void;
     createDashboardNonce(nonce: string, expiresAtIso: string): void;
     consumeDashboardNonce(nonce: string): boolean;
     expireDashboardNonces(): number;
@@ -82,6 +57,8 @@ export declare class TrustedSessionStore {
     getRuntimeSessionRow(sessionId: string): RuntimeSessionRow | null;
     touchRuntimeSession(sessionId: string): RuntimeSession | null;
     elevateSessionToAdmin(sessionId: string): RuntimeSession | null;
+    /** Launch-session deck switch after elevated assignment update (NOT-108). */
+    setRuntimeSessionDeck(sessionId: string, deckId: string): RuntimeSession | null;
     downgradeSessionToNormal(sessionId: string): RuntimeSession | null;
     revokeRuntimeSession(sessionId: string): void;
     createAdminChallenge(runtimeSessionId: string): AdminChallengeRow;
@@ -93,16 +70,6 @@ export declare class TrustedSessionStore {
         expiresAt: string;
         createdAt: string;
     }>;
-    countWorkspacesForDeck(deckId: string): number;
-    /**
-     * C8: elevated-agent deck change — rotate grant, rebind approving session, revoke peers.
-     * Plaintext grant secret is stored hashed only; caller must run `agent-deck use` to refresh local grant file.
-     */
-    rotateGrantForElevatedSession(runtimeSessionId: string, newDeckId: string): {
-        session: RuntimeSession;
-        peersRevoked: number;
-        grantId: string;
-    } | null;
     expireStaleSessions(): number;
     private toRuntimeSession;
 }

package/dist/trusted-session/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/trusted-session/store.ts"],"names":[],"mappings":"AAEA,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAQF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO7E;AAUD,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIlD,OAAO,CAAC,YAAY;IAsEpB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe;IAkB5D,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAQvD,0BAA0B,CAAC,cAAc,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAY5E,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAWvD,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAYjE,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB;IAyB7F,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IA2BxD,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAUlC,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,GAAE,MAAiB,GAAG,MAAM;IAS7E,oBAAoB,CAAC,KAAK,EAAE;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,cAAc;IAyBlB;;;OAGG;IACH,sCAAsC,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAenF,sCAAsC,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAiBnF,8BAA8B,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAoB5F,mCAAmC,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAIlF,qCAAqC,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAkB7F,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAUzC,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAQ/D,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAiB7C,qBAAqB,IAAI,MAAM;IAQ/B,sBAAsB,IAAI,MAAM;IAYhC,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IA4BxD,uBAAuB,IAAI,MAAM;IAOjC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAYjE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkC7D,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkB/D,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkBlE,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAM7C,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,GAAG,iBAAiB;IAqBjE,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO;IAqB7E,0BAA0B,IAAI,KAAK,CAAC;QAClC,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IA4BF,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAW9C;;;OAGG;IACH,6BAA6B,CAC3B,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,GAChB;QAAE,OAAO,EAAE,cAAc,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAoD5E,mBAAmB,IAAI,MAAM;IAuB7B,OAAO,CAAC,gBAAgB;CAazB"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/trusted-session/store.ts"],"names":[],"mappings":"AAEA,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAQF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAUD,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIlD,OAAO,CAAC,YAAY;IAgDpB;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAoC5B,oBAAoB,CAAC,KAAK,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,cAAc;IAgBlB;;;OAGG;IACH,sCAAsC,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAenF,sCAAsC,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAiBnF,6BAA6B,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAmB1F,mCAAmC,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAIlF,qCAAqC,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAkB7F,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAQ/D,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAiB7C,qBAAqB,IAAI,MAAM;IAQ/B,sBAAsB,IAAI,MAAM;IAYhC,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IA4BxD,uBAAuB,IAAI,MAAM;IAOjC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAYjE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkC7D,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkB/D,6EAA6E;IAC7E,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAqB/E,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAkBlE,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAM7C,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,GAAG,iBAAiB;IAqBjE,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO;IAqB7E,0BAA0B,IAAI,KAAK,CAAC;QAClC,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IA4BF,mBAAmB,IAAI,MAAM;IAuB7B,OAAO,CAAC,gBAAgB;CAWzB"}