@agent-deck/backend 1.8.2 → 1.10.0

package/dist/execution-authority/store.js

@@ -1,256 +0,0 @@
-"use strict";
-/**
- * Durable SQLite-backed execution-authority store (NOT-86).
- * Logic lives in ExecutionAuthorityLedger; this module hydrates/persists snapshots.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ExecutionAuthorityStore = void 0;
-const ledger_1 = require("./ledger");
-class ExecutionAuthorityStore {
-    db;
-    ledger;
-    constructor(db, options = {}) {
-        this.db = db;
-        this.ensureTables();
-        this.ledger = new ledger_1.ExecutionAuthorityLedger({ now: options.now });
-        this.hydrate();
-    }
-    /** Test helper: replace clock without losing durable state. */
-    withNow(now) {
-        const next = new ExecutionAuthorityStore(this.db, { now });
-        return next;
-    }
-    ensureTables() {
-        this.db.exec(`
-      CREATE TABLE IF NOT EXISTS ea_enrollments (
-        enrollment_id TEXT PRIMARY KEY,
-        coordinator_id TEXT NOT NULL,
-        status TEXT NOT NULL CHECK (status IN ('active', 'revoked')),
-        allowed_deck_ids TEXT NOT NULL,
-        created_at TEXT NOT NULL,
-        revoked_at TEXT,
-        secret_hash TEXT NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS ea_authorities (
-        authority_id TEXT PRIMARY KEY,
-        enrollment_id TEXT NOT NULL,
-        run_id TEXT NOT NULL,
-        attempt_id TEXT NOT NULL,
-        deck_id TEXT NOT NULL,
-        audience TEXT NOT NULL,
-        allowed_services TEXT NOT NULL,
-        allowed_tools TEXT NOT NULL,
-        issued_at TEXT NOT NULL,
-        expires_at TEXT NOT NULL,
-        status TEXT NOT NULL CHECK (status IN ('live', 'expired', 'revoked')),
-        idempotency_key TEXT NOT NULL,
-        secret_hash TEXT NOT NULL,
-        FOREIGN KEY (enrollment_id) REFERENCES ea_enrollments (enrollment_id)
-      );
-
-      CREATE UNIQUE INDEX IF NOT EXISTS ea_authorities_mint_idempotency
-        ON ea_authorities (enrollment_id, idempotency_key);
-
-      CREATE TABLE IF NOT EXISTS ea_audit_events (
-        event_id TEXT PRIMARY KEY,
-        at TEXT NOT NULL,
-        kind TEXT NOT NULL,
-        correlation_json TEXT NOT NULL,
-        detail_json TEXT
-      );
-    `);
-    }
-    hydrate() {
-        const enrollments = this.db
-            .prepare(`SELECT enrollment_id, coordinator_id, status, allowed_deck_ids, created_at, revoked_at, secret_hash
-         FROM ea_enrollments`)
-            .all();
-        const authorities = this.db
-            .prepare(`SELECT authority_id, enrollment_id, run_id, attempt_id, deck_id, audience,
-                allowed_services, allowed_tools, issued_at, expires_at, status, idempotency_key, secret_hash
-         FROM ea_authorities`)
-            .all();
-        const audit = this.db
-            .prepare(`SELECT event_id, at, kind, correlation_json, detail_json FROM ea_audit_events ORDER BY at ASC, event_id ASC`)
-            .all();
-        const state = {
-            enrollments: enrollments.map((row) => ({
-                enrollmentId: row.enrollment_id,
-                coordinatorId: row.coordinator_id,
-                status: row.status,
-                allowedDeckIds: JSON.parse(row.allowed_deck_ids),
-                createdAt: row.created_at,
-                revokedAt: row.revoked_at,
-            })),
-            enrollmentSecretHashes: enrollments.map((row) => ({
-                enrollmentId: row.enrollment_id,
-                secretHash: row.secret_hash,
-            })),
-            authorities: authorities.map((row) => ({
-                authorityId: row.authority_id,
-                enrollmentId: row.enrollment_id,
-                runId: row.run_id,
-                attemptId: row.attempt_id,
-                deckId: row.deck_id,
-                audience: row.audience,
-                allowedServices: JSON.parse(row.allowed_services),
-                allowedTools: JSON.parse(row.allowed_tools),
-                issuedAt: row.issued_at,
-                expiresAt: row.expires_at,
-                status: row.status,
-                idempotencyKey: row.idempotency_key,
-            })),
-            secretHashes: authorities.map((row) => ({
-                authorityId: row.authority_id,
-                secretHash: row.secret_hash,
-            })),
-            mintIndex: authorities.map((row) => ({
-                enrollmentId: row.enrollment_id,
-                idempotencyKey: row.idempotency_key,
-                authorityId: row.authority_id,
-            })),
-            audit: audit.map((row) => ({
-                eventId: row.event_id,
-                at: row.at,
-                kind: row.kind,
-                correlation: JSON.parse(row.correlation_json),
-                detail: row.detail_json
-                    ? JSON.parse(row.detail_json)
-                    : undefined,
-            })),
-        };
-        this.ledger.replaceState(state);
-    }
-    persist() {
-        const state = this.ledger.exportState();
-        const tx = this.db.transaction(() => {
-            this.db.exec(`
-        DELETE FROM ea_audit_events;
-        DELETE FROM ea_authorities;
-        DELETE FROM ea_enrollments;
-      `);
-            const insertEnrollment = this.db.prepare(`INSERT INTO ea_enrollments
-           (enrollment_id, coordinator_id, status, allowed_deck_ids, created_at, revoked_at, secret_hash)
-         VALUES (?, ?, ?, ?, ?, ?, ?)`);
-            const hashByEnrollment = new Map(state.enrollmentSecretHashes.map((r) => [r.enrollmentId, r.secretHash]));
-            for (const enrollment of state.enrollments) {
-                const secretHash = hashByEnrollment.get(enrollment.enrollmentId);
-                if (!secretHash) {
-                    throw new Error(`Missing enrollment secret hash for ${enrollment.enrollmentId}`);
-                }
-                insertEnrollment.run(enrollment.enrollmentId, enrollment.coordinatorId, enrollment.status, JSON.stringify(enrollment.allowedDeckIds), enrollment.createdAt, enrollment.revokedAt, secretHash);
-            }
-            const insertAuthority = this.db.prepare(`INSERT INTO ea_authorities
-           (authority_id, enrollment_id, run_id, attempt_id, deck_id, audience,
-            allowed_services, allowed_tools, issued_at, expires_at, status, idempotency_key, secret_hash)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);
-            const hashByAuthority = new Map(state.secretHashes.map((r) => [r.authorityId, r.secretHash]));
-            for (const authority of state.authorities) {
-                const secretHash = hashByAuthority.get(authority.authorityId);
-                if (!secretHash) {
-                    throw new Error(`Missing authority secret hash for ${authority.authorityId}`);
-                }
-                insertAuthority.run(authority.authorityId, authority.enrollmentId, authority.runId, authority.attemptId, authority.deckId, authority.audience, JSON.stringify(authority.allowedServices), JSON.stringify(authority.allowedTools), authority.issuedAt, authority.expiresAt, authority.status, authority.idempotencyKey, secretHash);
-            }
-            const insertAudit = this.db.prepare(`INSERT INTO ea_audit_events (event_id, at, kind, correlation_json, detail_json)
-         VALUES (?, ?, ?, ?, ?)`);
-            for (const event of state.audit) {
-                insertAudit.run(event.eventId, event.at, event.kind, JSON.stringify(event.correlation), event.detail ? JSON.stringify(event.detail) : null);
-            }
-        });
-        tx();
-    }
-    runMutating(fn) {
-        const result = fn();
-        this.persist();
-        return result;
-    }
-    enrollCoordinator(input) {
-        return this.runMutating(() => this.ledger.enrollCoordinator(input));
-    }
-    revokeEnrollment(enrollmentId) {
-        return this.runMutating(() => this.ledger.revokeEnrollment(enrollmentId));
-    }
-    mintAuthority(input) {
-        return this.runMutating(() => this.ledger.mintAuthority(input));
-    }
-    /** Non-auditing existence/ownership lookup (see ledger.peekAuthority). */
-    peekAuthority(authorityId) {
-        return this.ledger.peekAuthority(authorityId);
-    }
-    inspectAuthority(authorityId) {
-        return this.runMutating(() => this.ledger.inspectAuthority(authorityId));
-    }
-    revokeAuthority(authorityId) {
-        return this.runMutating(() => this.ledger.revokeAuthority(authorityId));
-    }
-    invokeAuthorizedCall(input) {
-        return this.runMutating(() => this.ledger.invokeAuthorizedCall(input));
-    }
-    listAuditEvents(filter = {}) {
-        return this.ledger.listAuditEvents(filter);
-    }
-    getEnrollment(enrollmentId) {
-        return this.ledger.getEnrollment(enrollmentId);
-    }
-    listEnrollments() {
-        return this.ledger.listEnrollments();
-    }
-    verifyEnrollmentSecret(enrollmentId, secret) {
-        return this.ledger.verifyEnrollmentSecret(enrollmentId, secret);
-    }
-    verifyAuthoritySecret(authorityId, secret) {
-        return this.ledger.verifyAuthoritySecret(authorityId, secret);
-    }
-    /**
-     * Validate authority id+secret and return current authority (may transition to expired).
-     */
-    authenticateAuthority(authorityId, authoritySecret) {
-        const inspected = this.ledger.inspectAuthority(authorityId);
-        this.persist();
-        if (!inspected.ok) {
-            return inspected;
-        }
-        if (!this.ledger.verifyAuthoritySecret(authorityId, authoritySecret)) {
-            return {
-                ok: false,
-                error_code: 'AUTHORITY_SECRET_INVALID',
-                message: 'Invalid authority secret',
-                correlation: { authorityId },
-            };
-        }
-        if (inspected.data.status === 'expired') {
-            return {
-                ok: false,
-                error_code: 'AUTHORITY_EXPIRED',
-                message: 'Authority expired',
-                correlation: {
-                    authorityId,
-                    enrollmentId: inspected.data.enrollmentId,
-                    runId: inspected.data.runId,
-                    attemptId: inspected.data.attemptId,
-                    deckId: inspected.data.deckId,
-                },
-            };
-        }
-        if (inspected.data.status === 'revoked') {
-            return {
-                ok: false,
-                error_code: 'AUTHORITY_REVOKED',
-                message: 'Authority revoked',
-                reason: 'explicit_revoke',
-                correlation: {
-                    authorityId,
-                    enrollmentId: inspected.data.enrollmentId,
-                    runId: inspected.data.runId,
-                    attemptId: inspected.data.attemptId,
-                    deckId: inspected.data.deckId,
-                },
-            };
-        }
-        return inspected;
-    }
-}
-exports.ExecutionAuthorityStore = ExecutionAuthorityStore;
-//# sourceMappingURL=store.js.map

package/dist/execution-authority/store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/execution-authority/store.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAIH,qCAAsE;AAgBtE,MAAa,uBAAuB;IAIf;IAHF,MAAM,CAA2B;IAElD,YACmB,EAAqB,EACtC,UAA0C,EAAE;QAD3B,OAAE,GAAF,EAAE,CAAmB;QAGtC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,iCAAwB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,+DAA+D;IAC/D,OAAO,CAAC,GAAe;QACrB,MAAM,IAAI,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsCZ,CAAC,CAAC;IACL,CAAC;IAEO,OAAO;QACb,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;aACxB,OAAO,CACN;6BACqB,CACtB;aACA,GAAG,EAQJ,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;aACxB,OAAO,CACN;;6BAEqB,CACtB;aACA,GAAG,EAcJ,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CAAC,6GAA6G,CAAC;aACtH,GAAG,EAMJ,CAAC;QAEH,MAAM,KAAK,GAAgB;YACzB,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrC,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,aAAa,EAAE,GAAG,CAAC,cAAc;gBACjC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAa;gBAC5D,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,SAAS,EAAE,GAAG,CAAC,UAAU;aAC1B,CAAC,CAAC;YACH,sBAAsB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChD,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;aAC5B,CAAC,CAAC;YACH,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrC,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,KAAK,EAAE,GAAG,CAAC,MAAM;gBACjB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAa;gBAC7D,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAuC;gBACjF,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,CAAC,eAAe;aACpC,CAAC,CAAC;YACH,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACtC,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;aAC5B,CAAC,CAAC;YACH,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnC,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,cAAc,EAAE,GAAG,CAAC,eAAe;gBACnC,WAAW,EAAE,GAAG,CAAC,YAAY;aAC9B,CAAC,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA8B;gBAC1E,MAAM,EAAE,GAAG,CAAC,WAAW;oBACrB,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA6B;oBAC1D,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;SACJ,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,OAAO;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;OAIZ,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACtC;;sCAE8B,CAC/B,CAAC;YACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CACxE,CAAC;YACF,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACjE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;gBACnF,CAAC;gBACD,gBAAgB,CAAC,GAAG,CAClB,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,MAAM,EACjB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,EACzC,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,SAAS,EACpB,UAAU,CACX,CAAC;YACJ,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACrC;;;wDAGgD,CACjD,CAAC;YACF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9F,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;gBAChF,CAAC;gBACD,eAAe,CAAC,GAAG,CACjB,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,YAAY,EACtB,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,QAAQ,EAClB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,EACzC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,EACtC,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,cAAc,EACxB,UAAU,CACX,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACjC;gCACwB,CACzB,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChC,WAAW,CAAC,GAAG,CACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EACjC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CACnD,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;IAEO,WAAW,CAAI,EAA+B;QACpD,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB,CAAC,KAGjB;QACC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAA4C,CAAC;IACjH,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAEtE,CAAC;IACL,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAwC,CAAC;IACzG,CAAC;IAED,0EAA0E;IAC1E,aAAa,CAAC,WAAmB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAuC,CAAC;IACjH,CAAC;IAED,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAEpE,CAAC;IACL,CAAC;IAED,oBAAoB,CAClB,KAA0B;QAE1B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAInE,CAAC;IACL,CAAC;IAED,eAAe,CAAC,SAMZ,EAAE;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,aAAa,CAAC,YAAoB;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;IACvC,CAAC;IAED,sBAAsB,CAAC,YAAoB,EAAE,MAAc;QACzD,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,qBAAqB,CAAC,WAAmB,EAAE,MAAc;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,WAAmB,EACnB,eAAuB;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,0BAA0B;gBACtC,OAAO,EAAE,0BAA0B;gBACnC,WAAW,EAAE,EAAE,WAAW,EAAE;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW,EAAE;oBACX,WAAW;oBACX,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY;oBACzC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;oBAC3B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS;oBACnC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;iBAC9B;aACF,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,MAAM,EAAE,iBAAiB;gBACzB,WAAW,EAAE;oBACX,WAAW;oBACX,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY;oBACzC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;oBAC3B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS;oBACnC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;iBAC9B;aACF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAzWD,0DAyWC"}

package/dist/execution-authority/types.d.ts

@@ -1,119 +0,0 @@
-/**
- * Trusted unattended execution contract types (NOT-85).
- * Authoritative design: docs/superpowers/specs/2026-09-12-trusted-unattended-execution-contract-design.md
- *
- * Interactive workspace grants remain separate (PRD_TRUSTED_AGENT_SESSIONS).
- */
-export type EnrollmentStatus = 'active' | 'revoked';
-export type AuthorityStatus = 'live' | 'expired' | 'revoked';
-export type AuthorityAudience = 'dealer-worker';
-export type ContractErrorCode = 'GRANT_REQUIRED' | 'AUTHORITY_EXPIRED' | 'AUTHORITY_REVOKED' | 'AUTHORITY_UNKNOWN' | 'AUTHORITY_SECRET_INVALID' | 'RESOURCE_OUT_OF_SCOPE' | 'INTERACTION_REQUIRED' | 'ENROLLMENT_REVOKED' | 'COORDINATOR_NOT_ENROLLED' | 'IDEMPOTENCY_KEY_CONFLICT' | 'INVALID_MINT_REQUEST' | 'AUDIENCE_MISMATCH';
-/** Fine-grained cause when one error_code covers multiple recovery paths. */
-export type ContractErrorReason = 'deck_not_permitted' | 'deck_not_found' | 'tool_not_in_snapshot' | 'enrollment_revoked' | 'explicit_revoke' | 'params_mismatch' | 'ttl_non_positive';
-export type AuditEventKind = 'enrollment_created' | 'enrollment_revoked' | 'authority_minted' | 'authority_inspected' | 'authority_revoked' | 'authority_expired' | 'call_allowed' | 'call_denied';
-export interface AllowedTool {
-    serviceId: string;
-    toolName: string;
-}
-export interface CoordinatorEnrollment {
-    enrollmentId: string;
-    coordinatorId: string;
-    status: EnrollmentStatus;
-    allowedDeckIds: string[];
-    createdAt: string;
-    revokedAt: string | null;
-}
-export interface ExecutionAuthority {
-    authorityId: string;
-    enrollmentId: string;
-    runId: string;
-    attemptId: string;
-    deckId: string;
-    audience: AuthorityAudience;
-    allowedServices: string[];
-    allowedTools: AllowedTool[];
-    issuedAt: string;
-    expiresAt: string;
-    status: AuthorityStatus;
-    idempotencyKey: string;
-}
-export interface AuditCorrelation {
-    enrollmentId?: string;
-    authorityId?: string;
-    runId?: string;
-    attemptId?: string;
-    deckId?: string;
-    requestId?: string;
-}
-export interface AuditEvent {
-    eventId: string;
-    at: string;
-    kind: AuditEventKind;
-    correlation: AuditCorrelation;
-    detail?: Record<string, unknown>;
-}
-export interface ContractError {
-    ok: false;
-    error_code: ContractErrorCode;
-    message: string;
-    reason?: ContractErrorReason;
-    correlation?: AuditCorrelation;
-}
-export interface ContractSuccess<T> {
-    ok: true;
-    data: T;
-}
-export type ContractResult<T> = ContractSuccess<T> | ContractError;
-export interface EnrollCoordinatorResult {
-    enrollment: CoordinatorEnrollment;
-    /** One-time secret for coordinator mint/metadata auth (`enrs_…`). */
-    enrollmentSecret: string;
-}
-export interface MintAuthorityInput {
-    enrollmentId: string;
-    runId: string;
-    attemptId: string;
-    deckId: string;
-    audience: AuthorityAudience;
-    idempotencyKey: string;
-    /**
-     * Pre-materialized Deck policy snapshot.
-     * HTTP mint authors these from deck policy; optional toolScopeHint may only narrow.
-     */
-    allowedServices: string[];
-    allowedTools: AllowedTool[];
-    /** TTL in milliseconds from mint time; must be > 0. */
-    ttlMs: number;
-}
-/** Coordinator-supplied mint body before Deck authors the tool snapshot. */
-export interface MintAuthorityRequest {
-    enrollmentId: string;
-    runId: string;
-    attemptId: string;
-    deckId: string;
-    audience: AuthorityAudience;
-    idempotencyKey: string;
-    ttlMs: number;
-    /** Optional narrowing hint; Deck intersects with current deck policy. */
-    toolScopeHint?: AllowedTool[];
-}
-export interface MintAuthorityResult {
-    authority: ExecutionAuthority;
-    /**
-     * One-time secret when `secretIssued` is true.
-     * Null on idempotent remint — Dealer must retain the launcher handle from first mint.
-     */
-    authoritySecret: string | null;
-    secretIssued: boolean;
-}
-export interface AuthorizedCallInput {
-    authorityId: string;
-    authoritySecret: string;
-    /** Must match the authority's audience (stolen-authority binding). */
-    audience: string;
-    serviceId: string;
-    toolName: string;
-    /** When true, Deck returns INTERACTION_REQUIRED instead of executing. */
-    requiresInteraction?: boolean;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/execution-authority/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/execution-authority/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAC;AACpD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAC7D,MAAM,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAEhD,MAAM,MAAM,iBAAiB,GACzB,gBAAgB,GAChB,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,0BAA0B,GAC1B,uBAAuB,GACvB,sBAAsB,GACtB,oBAAoB,GACpB,0BAA0B,GAC1B,0BAA0B,GAC1B,sBAAsB,GACtB,mBAAmB,CAAC;AAExB,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAC3B,oBAAoB,GACpB,gBAAgB,GAChB,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,KAAK,CAAC;IACV,UAAU,EAAE,iBAAiB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,WAAW,CAAC,EAAE,gBAAgB,CAAC;CAChC;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,qBAAqB,CAAC;IAClC,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,kBAAkB,CAAC;IAC9B;;;OAGG;IACH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B"}

package/dist/execution-authority/types.js

@@ -1,9 +0,0 @@
-"use strict";
-/**
- * Trusted unattended execution contract types (NOT-85).
- * Authoritative design: docs/superpowers/specs/2026-09-12-trusted-unattended-execution-contract-design.md
- *
- * Interactive workspace grants remain separate (PRD_TRUSTED_AGENT_SESSIONS).
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=types.js.map

package/dist/execution-authority/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/execution-authority/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/lib/execution-authority-http.d.ts

@@ -1,23 +0,0 @@
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import type { ContractError } from '../execution-authority/types';
-import type { ExecutionAuthorityStore } from '../execution-authority/store';
-export declare function isExecutionAuthorityHttpAllowed(method: string, pathname: string): boolean;
-/** Contract-shaped auth/containment failure for execution-authority principals. */
-export declare class AuthorityContractAuthError extends Error {
-    readonly contract: ContractError;
-    constructor(contract: ContractError);
-}
-export declare function statusForContract(error: ContractError): number;
-export declare function sendContractError(reply: FastifyReply, error: ContractError, status?: number): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
-/**
- * Authorize one service tool call via the ledger (audience + audit).
- * No-op for non-authority principals.
- */
-export declare function authorizeAuthorityServiceCall(request: FastifyRequest, store: ExecutionAuthorityStore, serviceId: string, toolName: string): void;
-/** Filter discovered tools to the minted authority snapshot. */
-export declare function filterToolsForAuthority(request: FastifyRequest, serviceId: string, tools: Array<{
-    name: string;
-}>): Array<{
-    name: string;
-}>;
-//# sourceMappingURL=execution-authority-http.d.ts.map

package/dist/lib/execution-authority-http.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution-authority-http.d.ts","sourceRoot":"","sources":["../../src/lib/execution-authority-http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAI5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAqB5E,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGzF;AAED,mFAAmF;AACnF,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,QAAQ,EAAE,aAAa;gBAAvB,QAAQ,EAAE,aAAa;CAIpD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAa9D;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,aAAa,EACpB,MAAM,SAA2B,6RAGlC;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,uBAAuB,EAC9B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,IAAI,CA2BN;AAED,gEAAgE;AAChE,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7B,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAWzB"}

package/dist/lib/execution-authority-http.js

@@ -1,101 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorityContractAuthError = void 0;
-exports.isExecutionAuthorityHttpAllowed = isExecutionAuthorityHttpAllowed;
-exports.statusForContract = statusForContract;
-exports.sendContractError = sendContractError;
-exports.authorizeAuthorityServiceCall = authorizeAuthorityServiceCall;
-exports.filterToolsForAuthority = filterToolsForAuthority;
-const http_auth_1 = require("./http-auth");
-const bearer_1 = require("../execution-authority/bearer");
-/**
- * HTTP routes an execution-authority principal may use (worker-facing reads + tool call).
- * Live-display is intentionally excluded — unattended workers must not mutate global
- * session display state (NOT-86 containment).
- * Everything else is control-plane / out of containment → INTERACTION_REQUIRED.
- */
-const ALLOWED = [
-    { methods: ['GET'], pattern: /^\/api\/scope\/deck$/ },
-    { methods: ['GET'], pattern: /^\/api\/decks\/[^/]+$/ },
-    { methods: ['GET'], pattern: /^\/api\/decks\/[^/]+\/services$/ },
-    { methods: ['GET'], pattern: /^\/api\/services\/[^/]+$/ },
-    { methods: ['GET'], pattern: /^\/api\/services\/[^/]+\/tools$/ },
-    { methods: ['POST'], pattern: /^\/api\/services\/[^/]+\/call$/ },
-    { methods: ['GET'], pattern: /^\/api\/playbooks\/[^/]+$/ },
-    { methods: ['GET'], pattern: /^\/api\/playbooks$/ },
-    { methods: ['GET'], pattern: /^\/api\/playbooks\/summaries$/ },
-    { methods: ['GET'], pattern: /^\/api\/credentials\/[^/]+$/ },
-];
-function isExecutionAuthorityHttpAllowed(method, pathname) {
-    const m = method.toUpperCase();
-    return ALLOWED.some((rule) => rule.methods.includes(m) && rule.pattern.test(pathname));
-}
-/** Contract-shaped auth/containment failure for execution-authority principals. */
-class AuthorityContractAuthError extends Error {
-    contract;
-    constructor(contract) {
-        super(contract.message);
-        this.contract = contract;
-        this.name = 'AuthorityContractAuthError';
-    }
-}
-exports.AuthorityContractAuthError = AuthorityContractAuthError;
-function statusForContract(error) {
-    switch (error.error_code) {
-        case 'COORDINATOR_NOT_ENROLLED':
-        case 'AUTHORITY_UNKNOWN':
-            return 404;
-        case 'INVALID_MINT_REQUEST':
-        case 'IDEMPOTENCY_KEY_CONFLICT':
-            return 400;
-        case 'AUTHORITY_SECRET_INVALID':
-            return 401;
-        default:
-            return 403;
-    }
-}
-function sendContractError(reply, error, status = statusForContract(error)) {
-    return reply.status(status).send(error);
-}
-/**
- * Authorize one service tool call via the ledger (audience + audit).
- * No-op for non-authority principals.
- */
-function authorizeAuthorityServiceCall(request, store, serviceId, toolName) {
-    const principal = request.requestPrincipal;
-    if (principal?.kind !== 'execution-authority') {
-        return;
-    }
-    const bearer = (0, http_auth_1.parseBearerToken)(request);
-    const creds = bearer ? (0, bearer_1.parseAuthorityBearer)(bearer) : null;
-    if (!creds) {
-        throw new AuthorityContractAuthError({
-            ok: false,
-            error_code: 'AUTHORITY_SECRET_INVALID',
-            message: 'Invalid authority secret',
-            correlation: { authorityId: principal.authority.authorityId },
-        });
-    }
-    const result = store.invokeAuthorizedCall({
-        authorityId: creds.authorityId,
-        authoritySecret: creds.secret,
-        audience: principal.authority.audience,
-        serviceId,
-        toolName,
-    });
-    if (!result.ok) {
-        throw new AuthorityContractAuthError(result);
-    }
-}
-/** Filter discovered tools to the minted authority snapshot. */
-function filterToolsForAuthority(request, serviceId, tools) {
-    const principal = request.requestPrincipal;
-    if (principal?.kind !== 'execution-authority') {
-        return tools;
-    }
-    const allowed = new Set(principal.authority.allowedTools
-        .filter((t) => t.serviceId === serviceId)
-        .map((t) => t.toolName));
-    return tools.filter((t) => allowed.has(t.name));
-}
-//# sourceMappingURL=execution-authority-http.js.map

package/dist/lib/execution-authority-http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution-authority-http.js","sourceRoot":"","sources":["../../src/lib/execution-authority-http.ts"],"names":[],"mappings":";;;AA0BA,0EAGC;AAUD,8CAaC;AAED,8CAMC;AAMD,sEAgCC;AAGD,0DAeC;AAlHD,2CAA+C;AAC/C,0DAAqE;AAIrE;;;;;GAKG;AACH,MAAM,OAAO,GAAkD;IAC7D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACrD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE;IACtD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACzD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC1D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE;IACnD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE;IAC9D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE;CAC7D,CAAC;AAEF,SAAgB,+BAA+B,CAAC,MAAc,EAAE,QAAgB;IAC9E,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,mFAAmF;AACnF,MAAa,0BAA2B,SAAQ,KAAK;IACvB;IAA5B,YAA4B,QAAuB;QACjD,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QADE,aAAQ,GAAR,QAAQ,CAAe;QAEjD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAED,SAAgB,iBAAiB,CAAC,KAAoB;IACpD,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,0BAA0B,CAAC;QAChC,KAAK,mBAAmB;YACtB,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB,CAAC;QAC5B,KAAK,0BAA0B;YAC7B,OAAO,GAAG,CAAC;QACb,KAAK,0BAA0B;YAC7B,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAmB,EACnB,KAAoB,EACpB,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC;IAEjC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,SAAgB,6BAA6B,CAC3C,OAAuB,EACvB,KAA8B,EAC9B,SAAiB,EACjB,QAAgB;IAEhB,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAA,6BAAoB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,0BAA0B,CAAC;YACnC,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,0BAA0B;YACtC,OAAO,EAAE,0BAA0B;YACnC,WAAW,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,CAAC;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,MAAM;QAC7B,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ;QACtC,SAAS;QACT,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,SAAgB,uBAAuB,CACrC,OAAuB,EACvB,SAAiB,EACjB,KAA8B;IAE9B,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,SAAS,CAAC,SAAS,CAAC,YAAY;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC1B,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/mcp-stdio.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=mcp-stdio.d.ts.map

package/dist/mcp-stdio.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-stdio.d.ts","sourceRoot":"","sources":["../src/mcp-stdio.ts"],"names":[],"mappings":""}

package/dist/mcp-stdio.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-stdio.js","sourceRoot":"","sources":["../src/mcp-stdio.ts"],"names":[],"mappings":";;AAAA,wEAAiF;AACjF,mDAAqD;AAErD;;;GAGG;AACH,KAAK,UAAU,mBAAmB;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,uBAAuB,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,kCAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACpC,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/playbooks/playbook-parser.d.ts

@@ -1,8 +0,0 @@
-import { Playbook } from '@agent-deck/shared';
-export declare class PlaybookParseError extends Error {
-    constructor(message: string);
-}
-/** Parse a minimal YAML-like frontmatter block (no external YAML dependency). */
-export declare function parseSimpleFrontmatter(block: string): Record<string, string | string[]>;
-export declare function parsePlaybookFile(content: string, filePath: string): Playbook;
-//# sourceMappingURL=playbook-parser.d.ts.map

package/dist/playbooks/playbook-parser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"playbook-parser.d.ts","sourceRoot":"","sources":["../../src/playbooks/playbook-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EAGT,MAAM,oBAAoB,CAAC;AAE5B,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAsCvF;AAMD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,CA4B7E"}

package/dist/playbooks/playbook-parser.js

@@ -1,76 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PlaybookParseError = void 0;
-exports.parseSimpleFrontmatter = parseSimpleFrontmatter;
-exports.parsePlaybookFile = parsePlaybookFile;
-const shared_1 = require("@agent-deck/shared");
-class PlaybookParseError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'PlaybookParseError';
-    }
-}
-exports.PlaybookParseError = PlaybookParseError;
-/** Parse a minimal YAML-like frontmatter block (no external YAML dependency). */
-function parseSimpleFrontmatter(block) {
-    const result = {};
-    let currentListKey = null;
-    for (const rawLine of block.split('\n')) {
-        const line = rawLine.trimEnd();
-        if (!line.trim()) {
-            continue;
-        }
-        const listMatch = line.match(/^\s+-\s+(.+)$/);
-        if (listMatch && currentListKey) {
-            const list = result[currentListKey];
-            if (Array.isArray(list)) {
-                list.push(stripQuotes(listMatch[1].trim()));
-            }
-            continue;
-        }
-        const kvMatch = line.match(/^([\w-]+):\s*(.*)$/);
-        if (!kvMatch) {
-            continue;
-        }
-        const [, key, rawValue] = kvMatch;
-        const value = rawValue.trim();
-        if (!value) {
-            currentListKey = key;
-            result[key] = [];
-            continue;
-        }
-        currentListKey = null;
-        result[key] = stripQuotes(value);
-    }
-    return result;
-}
-function stripQuotes(value) {
-    return value.replace(/^["']|["']$/g, '');
-}
-function parsePlaybookFile(content, filePath) {
-    const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/);
-    if (!match) {
-        throw new PlaybookParseError(`Missing YAML frontmatter in ${filePath}`);
-    }
-    const [, frontmatterBlock, body] = match;
-    const raw = parseSimpleFrontmatter(frontmatterBlock);
-    const frontmatter = shared_1.PlaybookFrontmatterSchema.parse({
-        id: raw.id,
-        triggers: Array.isArray(raw.triggers) ? raw.triggers : [],
-        connections: Array.isArray(raw.connections) ? raw.connections : [],
-        exec: typeof raw.exec === 'string' ? raw.exec : undefined,
-        skill: typeof raw.skill === 'string' ? raw.skill : undefined,
-    });
-    const source = filePath.includes('.agent-deck/playbooks')
-        ? 'repo'
-        : 'global';
-    return {
-        id: frontmatter.id,
-        path: filePath,
-        triggers: frontmatter.triggers,
-        source,
-        frontmatter,
-        body: body.trim(),
-    };
-}
-//# sourceMappingURL=playbook-parser.js.map

package/dist/playbooks/playbook-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"playbook-parser.js","sourceRoot":"","sources":["../../src/playbooks/playbook-parser.ts"],"names":[],"mappings":";;;AAcA,wDAsCC;AAMD,8CA4BC;AAtFD,+CAI4B;AAE5B,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAED,iFAAiF;AACjF,SAAgB,sBAAsB,CAAC,KAAa;IAClD,MAAM,MAAM,GAAsC,EAAE,CAAC;IACrD,IAAI,cAAc,GAAkB,IAAI,CAAC;IAEzC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9C,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9C,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,cAAc,GAAG,GAAG,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QAED,cAAc,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,iBAAiB,CAAC,OAAe,EAAE,QAAgB;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,kCAAyB,CAAC,KAAK,CAAC;QAClD,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QACzD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QAClE,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACzD,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAC,CAAC;IAEH,MAAM,MAAM,GAA8B,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAClF,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,QAAQ,CAAC;IAEb,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,EAAE;QAClB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,MAAM;QACN,WAAW;QACX,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;KAClB,CAAC;AACJ,CAAC"}