run402-mcp 3.0.0 → 3.2.0

package/core/dist/control-plane-session.d.ts

@@ -1,11 +1,14 @@
 /**
- * A cached **control-plane session** — the human principal's *write-capable*
- * bearer, minted by the loopback-PKCE flow (`run402 operator login --loopback`).
- * Distinct from the device-flow {@link OperatorSession} (read-only): this one
- * carries `provenance` (`loopback_pkce`) and `amr`, and is accepted everywhere a
- * SIWX wallet is. Cached at the BASE config dir (email/principal-scoped, shared
- * across local named wallets), mode 0600 — the token is as sensitive as the
- * allowance key.
+ * A cached **control-plane session** — the human principal's bearer, minted by
+ * the loopback-PKCE flow (`run402 operator login --loopback`). Distinct from the
+ * device-flow {@link OperatorSession} (read-only): this one carries `provenance`
+ * (`loopback_pkce`) and `amr`. It authorizes most control-plane operations, but
+ * since gateway v1.85/v1.87 it is NOT sufficient on its own for the high-stakes
+ * writes `provision` / `deploy` / secrets — those additionally require a
+ * passkey-fresh **operator approval** (`X-Run402-Write-Auth`, minted by
+ * `run402 operator approve`; see {@link WriteAuthApproval}). Cached at the BASE
+ * config dir (email/principal-scoped, shared across local named wallets), mode
+ * 0600 — the token is as sensitive as the allowance key.
  *
  * Stored shape vs the gateway payload: the gateway returns a relative
  * `expires_in` (seconds); we persist the absolute `expires_at` (epoch ms) so a

package/core/dist/control-plane-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane-session.d.ts","sourceRoot":"","sources":["../src/control-plane-session.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,wBAAwB;IACvC,2BAA2B,EAAE,MAAM,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,gCAAgC;IAC/C,2BAA2B,EAAE,MAAM,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAKnD;AAkBD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CA2CtF;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAQ3F;AAED,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAO5D;AAED,mFAAmF;AACnF,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,wBAAwB,EACjC,KAAK,GAAE,MAAmB,EAC1B,MAAM,SAAS,GACd,OAAO,CAET;AAED,+FAA+F;AAC/F,wBAAgB,2BAA2B,CACzC,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,GAAE,MAAmB,GACzB,wBAAwB,GAAG,IAAI,CAIjC;AAED,yGAAyG;AACzG,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,gCAAgC,EACtC,KAAK,GAAE,MAAmB,GACzB,wBAAwB,CAS1B"}
+{"version":3,"file":"control-plane-session.d.ts","sourceRoot":"","sources":["../src/control-plane-session.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,wBAAwB;IACvC,2BAA2B,EAAE,MAAM,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,gCAAgC;IAC/C,2BAA2B,EAAE,MAAM,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAKnD;AAkBD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CA2CtF;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAQ3F;AAED,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAO5D;AAED,mFAAmF;AACnF,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,wBAAwB,EACjC,KAAK,GAAE,MAAmB,EAC1B,MAAM,SAAS,GACd,OAAO,CAET;AAED,+FAA+F;AAC/F,wBAAgB,2BAA2B,CACzC,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,GAAE,MAAmB,GACzB,wBAAwB,GAAG,IAAI,CAIjC;AAED,yGAAyG;AACzG,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,gCAAgC,EACtC,KAAK,GAAE,MAAmB,GACzB,wBAAwB,CAS1B"}

package/core/dist/control-plane-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane-session.js","sourceRoot":"","sources":["../src/control-plane-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAmC/C;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,iCAAiC;QAC7C,IAAI,CAAC,gBAAgB,EAAE,EAAE,4BAA4B,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAA0C,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAa;IACnD,MAAM,CAAC,GAAG,IAAI,IAAI,0BAA0B,EAAE,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAA2C,CAAC;IACzD,IACE,OAAO,IAAI,CAAC,2BAA2B,KAAK,QAAQ;QACpD,IAAI,CAAC,2BAA2B,CAAC,MAAM,KAAK,CAAC,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IACD,OAAO;QACL,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;QAC5E,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe;QACnF,YAAY,EAAE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;QAC5E,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9F,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,IAA8B,EAAE,IAAa;IACnF,MAAM,CAAC,GAAG,IAAI,IAAI,0BAA0B,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,0BAA0B,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtF,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,IAAa;IACpD,MAAM,CAAC,GAAG,IAAI,IAAI,0BAA0B,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,4BAA4B,CAC1C,OAAiC,EACjC,QAAgB,IAAI,CAAC,GAAG,EAAE,EAC1B,MAAM,GAAG,MAAM;IAEf,OAAO,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;AAC9C,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,2BAA2B,CACzC,IAAa,EACb,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,4BAA4B,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,oCAAoC,CAClD,IAAsC,EACtC,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,OAAO;QACL,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;QACvC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,eAAe;QAC9C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;QACrC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9F,UAAU,EAAE,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;KACvF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"control-plane-session.js","sourceRoot":"","sources":["../src/control-plane-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAsC/C;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,iCAAiC;QAC7C,IAAI,CAAC,gBAAgB,EAAE,EAAE,4BAA4B,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAA0C,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAa;IACnD,MAAM,CAAC,GAAG,IAAI,IAAI,0BAA0B,EAAE,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAA2C,CAAC;IACzD,IACE,OAAO,IAAI,CAAC,2BAA2B,KAAK,QAAQ;QACpD,IAAI,CAAC,2BAA2B,CAAC,MAAM,KAAK,CAAC,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IACD,OAAO;QACL,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;QAC5E,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe;QACnF,YAAY,EAAE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;QAC5E,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9F,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,IAA8B,EAAE,IAAa;IACnF,MAAM,CAAC,GAAG,IAAI,IAAI,0BAA0B,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,0BAA0B,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtF,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,IAAa;IACpD,MAAM,CAAC,GAAG,IAAI,IAAI,0BAA0B,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,4BAA4B,CAC1C,OAAiC,EACjC,QAAgB,IAAI,CAAC,GAAG,EAAE,EAC1B,MAAM,GAAG,MAAM;IAEf,OAAO,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;AAC9C,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,2BAA2B,CACzC,IAAa,EACb,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,4BAA4B,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,oCAAoC,CAClD,IAAsC,EACtC,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,OAAO;QACL,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;QACvC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,eAAe;QAC9C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;QACrC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9F,UAAU,EAAE,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;KACvF,CAAC;AACJ,CAAC"}

package/core/dist/write-auth-session.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Cache of **operator-approval** tokens — the passkey-fresh write-auth tokens a
+ * wallet-less human mints to provision/deploy (gateway v1.85/v1.87). Distinct
+ * from the control-plane session ({@link ControlPlaneSessionCache}) it pairs
+ * with: the gateway scopes each token to one `(action, target)`, so this is a
+ * **multi-entry** cache keyed by `(api_origin, control_plane_session_hash,
+ * action, target)`. An `org.project.create` approval for org Y and a
+ * `project.deploy` approval for project X coexist.
+ *
+ * Stored at the BASE config dir (principal-scoped), mode 0600 — as sensitive as
+ * the allowance key. The token dies with its control-plane session; the
+ * `control_plane_session_hash` binding lets the client drop a stale approval
+ * locally rather than replay it into a `WRITE_AUTH_BINDING_MISMATCH`.
+ */
+export interface WriteAuthApproval {
+    write_auth_token: string;
+    token_type: string;
+    header: string;
+    /** Gateway capability: `org.project.create` | `project.deploy` | `project.secret.write`. */
+    action: string;
+    org_id?: string;
+    project_id?: string;
+    /** Epoch ms when the approval expires (derived from the gateway-returned session). */
+    expires_at: number;
+    /** Short hash of the control-plane session this approval is bound to. */
+    control_plane_session_hash: string;
+    control_plane_principal_id: string;
+    /** API origin (e.g. `https://api.run402.com`) the token was minted against. */
+    api_origin: string;
+    amr?: string[];
+    minted_at: number;
+}
+/** The token payload from `POST /agent/v1/control-plane/write-auth/cli/token`. */
+export interface WriteAuthTokenResponse {
+    write_auth_token: string;
+    token_type?: string;
+    header?: string;
+    /** The write-auth session; its expiry is the token's expiry. */
+    session?: {
+        expires_at?: string | number;
+        absolute_expires_at?: string | number;
+        amr?: string[];
+        [k: string]: unknown;
+    } | null;
+    [k: string]: unknown;
+}
+/** A capability target — exactly one of these is set per approval. */
+export interface WriteAuthTargetKey {
+    org_id?: string;
+    project_id?: string;
+}
+/**
+ * Path to the approval cache: `{base}/write-auth-session.json`.
+ * `RUN402_WRITE_AUTH_SESSION_PATH` overrides for testing.
+ */
+export declare function getWriteAuthSessionPath(): string;
+/** Stable short hash binding an approval to a control-plane session token. */
+export declare function hashControlPlaneSession(token: string): string;
+/**
+ * Read all cached approvals. Returns `[]` for the "no cache" cases (absent,
+ * unreadable, unparseable). Throws when the file parses as JSON but the shape
+ * is wrong, so a corrupted cache surfaces a clear fix-it.
+ */
+export declare function readApprovals(path?: string): WriteAuthApproval[];
+/**
+ * Persist an approval. Replaces any existing entry with the same
+ * `(api_origin, control_plane_session_hash, action, target)` key and leaves
+ * every other entry intact (multi-entry, non-thrashing). Atomic, mode 0600.
+ */
+export declare function saveApproval(approval: WriteAuthApproval, path?: string): void;
+/** Delete the whole approval cache — local half of `operator logout`. Idempotent. */
+export declare function clearApprovals(path?: string): void;
+/** Whether an approval is past its usable life (with a small skew buffer). */
+export declare function isApprovalExpired(approval: WriteAuthApproval, nowMs?: number, skewMs?: number): boolean;
+/**
+ * Return the cached approval matching ALL of `(apiOrigin, cpSessionHash,
+ * capability, target)` and still live, or `null` if none matches or it is
+ * expired. This is the exact-match the gateway's target gate requires — a
+ * non-match (wrong action/target/origin/session) fails closed.
+ */
+export declare function loadLiveApproval(q: {
+    apiOrigin: string;
+    cpSessionHash: string;
+    capability: string;
+    target: WriteAuthTargetKey;
+}, path?: string, nowMs?: number): WriteAuthApproval | null;
+/**
+ * Build a cache entry from the gateway token response + the binding context
+ * (the cp-session it was minted under, the API origin, and the `(action,
+ * target)` it covers). Expiry is taken from the returned `session`.
+ */
+export declare function approvalFromTokenResponse(resp: WriteAuthTokenResponse, binding: {
+    action: string;
+    target: WriteAuthTargetKey;
+    apiOrigin: string;
+    controlPlaneSessionHash: string;
+    controlPlanePrincipalId: string;
+}, nowMs?: number): WriteAuthApproval;
+//# sourceMappingURL=write-auth-session.d.ts.map

package/core/dist/write-auth-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-auth-session.d.ts","sourceRoot":"","sources":["../src/write-auth-session.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,kFAAkF;AAClF,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/H,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAKhD;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D;AAgCD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,iBAAiB,EAAE,CA4BhE;AAyBD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAI7E;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAOlD;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,GAAE,MAAmB,EAC1B,MAAM,SAAS,GACd,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,CAAC,EAAE;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,kBAAkB,CAAC;CAC5B,EACD,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,GAAE,MAAmB,GACzB,iBAAiB,GAAG,IAAI,CAa1B;AAgBD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE;IACP,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;CACjC,EACD,KAAK,GAAE,MAAmB,GACzB,iBAAiB,CAkBnB"}

package/core/dist/write-auth-session.js

@@ -0,0 +1,174 @@
+import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync, rmSync, } from "node:fs";
+import { dirname, join } from "node:path";
+import { randomBytes, createHash } from "node:crypto";
+import { getConfigBaseDir } from "./config.js";
+const DEFAULT_TTL_MS = 30 * 60 * 1000;
+/**
+ * Path to the approval cache: `{base}/write-auth-session.json`.
+ * `RUN402_WRITE_AUTH_SESSION_PATH` overrides for testing.
+ */
+export function getWriteAuthSessionPath() {
+    return (process.env.RUN402_WRITE_AUTH_SESSION_PATH ||
+        join(getConfigBaseDir(), "write-auth-session.json"));
+}
+/** Stable short hash binding an approval to a control-plane session token. */
+export function hashControlPlaneSession(token) {
+    return createHash("sha256").update(token).digest("hex").slice(0, 32);
+}
+/** Tighten 0600 if group/other-readable, warning once. Best-effort, POSIX-only. */
+function selfHealPermissions(p) {
+    if (process.platform === "win32")
+        return;
+    try {
+        const mode = statSync(p).mode & 0o777;
+        if ((mode & 0o077) !== 0) {
+            chmodSync(p, 0o600);
+            process.stderr.write(`warning: tightened permissions on ${p} from ${mode.toString(8)} to 600 (was readable by other users).\n`);
+        }
+    }
+    catch {
+        // Best-effort; never block a read on a chmod/stat failure.
+    }
+}
+function isApproval(x) {
+    if (!x || typeof x !== "object")
+        return false;
+    const a = x;
+    return (typeof a.write_auth_token === "string" &&
+        a.write_auth_token.length > 0 &&
+        typeof a.action === "string" &&
+        typeof a.api_origin === "string" &&
+        typeof a.control_plane_session_hash === "string" &&
+        typeof a.expires_at === "number" &&
+        Number.isFinite(a.expires_at));
+}
+/**
+ * Read all cached approvals. Returns `[]` for the "no cache" cases (absent,
+ * unreadable, unparseable). Throws when the file parses as JSON but the shape
+ * is wrong, so a corrupted cache surfaces a clear fix-it.
+ */
+export function readApprovals(path) {
+    const p = path ?? getWriteAuthSessionPath();
+    if (!existsSync(p))
+        return [];
+    selfHealPermissions(p);
+    let raw;
+    try {
+        raw = readFileSync(p, "utf-8");
+    }
+    catch {
+        return [];
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return [];
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error("write-auth-session.json must contain a JSON object. Delete it and re-run 'run402 operator approve' to recreate it.");
+    }
+    const approvals = parsed.approvals;
+    if (!Array.isArray(approvals)) {
+        throw new Error("write-auth-session.json missing an 'approvals' array. Delete it and re-run 'run402 operator approve'.");
+    }
+    return approvals.filter(isApproval);
+}
+function writeApprovals(approvals, path) {
+    const p = path ?? getWriteAuthSessionPath();
+    const dir = dirname(p);
+    mkdirSync(dir, { recursive: true });
+    const tmp = join(dir, `.write-auth-session.${randomBytes(4).toString("hex")}.tmp`);
+    writeFileSync(tmp, JSON.stringify({ approvals }, null, 2), { mode: 0o600 });
+    renameSync(tmp, p);
+    chmodSync(p, 0o600);
+}
+function sameTarget(a, b) {
+    return (a.org_id ?? null) === (b.org_id ?? null) && (a.project_id ?? null) === (b.project_id ?? null);
+}
+function sameKey(a, b) {
+    return (a.api_origin === b.api_origin &&
+        a.control_plane_session_hash === b.control_plane_session_hash &&
+        a.action === b.action &&
+        sameTarget(a, b));
+}
+/**
+ * Persist an approval. Replaces any existing entry with the same
+ * `(api_origin, control_plane_session_hash, action, target)` key and leaves
+ * every other entry intact (multi-entry, non-thrashing). Atomic, mode 0600.
+ */
+export function saveApproval(approval, path) {
+    const existing = readApprovals(path).filter((a) => !sameKey(a, approval));
+    existing.push(approval);
+    writeApprovals(existing, path);
+}
+/** Delete the whole approval cache — local half of `operator logout`. Idempotent. */
+export function clearApprovals(path) {
+    const p = path ?? getWriteAuthSessionPath();
+    try {
+        rmSync(p, { force: true });
+    }
+    catch {
+        // Best-effort: a failed unlink should never crash logout.
+    }
+}
+/** Whether an approval is past its usable life (with a small skew buffer). */
+export function isApprovalExpired(approval, nowMs = Date.now(), skewMs = 10_000) {
+    return nowMs + skewMs >= approval.expires_at;
+}
+/**
+ * Return the cached approval matching ALL of `(apiOrigin, cpSessionHash,
+ * capability, target)` and still live, or `null` if none matches or it is
+ * expired. This is the exact-match the gateway's target gate requires — a
+ * non-match (wrong action/target/origin/session) fails closed.
+ */
+export function loadLiveApproval(q, path, nowMs = Date.now()) {
+    for (const a of readApprovals(path)) {
+        if (a.api_origin === q.apiOrigin &&
+            a.control_plane_session_hash === q.cpSessionHash &&
+            a.action === q.capability &&
+            sameTarget(a, q.target) &&
+            !isApprovalExpired(a, nowMs)) {
+            return a;
+        }
+    }
+    return null;
+}
+/** Parse a gateway-returned session expiry (ISO string or epoch) to epoch ms. */
+function sessionExpiryMs(session, nowMs) {
+    const raw = session?.expires_at ?? session?.absolute_expires_at;
+    if (typeof raw === "number" && Number.isFinite(raw))
+        return raw > 1e12 ? raw : raw * 1000;
+    if (typeof raw === "string") {
+        const ms = Date.parse(raw);
+        if (Number.isFinite(ms))
+            return ms;
+    }
+    return nowMs + DEFAULT_TTL_MS;
+}
+/**
+ * Build a cache entry from the gateway token response + the binding context
+ * (the cp-session it was minted under, the API origin, and the `(action,
+ * target)` it covers). Expiry is taken from the returned `session`.
+ */
+export function approvalFromTokenResponse(resp, binding, nowMs = Date.now()) {
+    const amr = Array.isArray(resp.session?.amr)
+        ? resp.session.amr.filter((a) => typeof a === "string")
+        : undefined;
+    return {
+        write_auth_token: resp.write_auth_token,
+        token_type: typeof resp.token_type === "string" ? resp.token_type : "write_auth",
+        header: typeof resp.header === "string" ? resp.header : "X-Run402-Write-Auth",
+        action: binding.action,
+        ...(binding.target.org_id ? { org_id: binding.target.org_id } : {}),
+        ...(binding.target.project_id ? { project_id: binding.target.project_id } : {}),
+        expires_at: sessionExpiryMs(resp.session, nowMs),
+        control_plane_session_hash: binding.controlPlaneSessionHash,
+        control_plane_principal_id: binding.controlPlanePrincipalId,
+        api_origin: binding.apiOrigin,
+        ...(amr ? { amr } : {}),
+        minted_at: nowMs,
+    };
+}
+//# sourceMappingURL=write-auth-session.js.map

package/core/dist/write-auth-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-auth-session.js","sourceRoot":"","sources":["../src/write-auth-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAmD/C,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,8BAA8B;QAC1C,IAAI,CAAC,gBAAgB,EAAE,EAAE,yBAAyB,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,mFAAmF;AACnF,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAA0C,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA+B,CAAC;IAC1C,OAAO,CACL,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ;QACtC,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC7B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,0BAA0B,KAAK,QAAQ;QAChD,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,MAAM,CAAC,GAAG,IAAI,IAAI,uBAAuB,EAAE,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAI,MAAkC,CAAC,SAAS,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,SAA8B,EAAE,IAAa;IACnE,MAAM,CAAC,GAAG,IAAI,IAAI,uBAAuB,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnF,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,CAA2C,EAAE,CAAqB;IACpF,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,OAAO,CAAC,CAAoB,EAAE,CAAoB;IACzD,OAAO,CACL,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAC7B,CAAC,CAAC,0BAA0B,KAAK,CAAC,CAAC,0BAA0B;QAC7D,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QACrB,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CACjB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAA2B,EAAE,IAAa;IACrE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1E,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,MAAM,CAAC,GAAG,IAAI,IAAI,uBAAuB,EAAE,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAC/B,QAA2B,EAC3B,QAAgB,IAAI,CAAC,GAAG,EAAE,EAC1B,MAAM,GAAG,MAAM;IAEf,OAAO,KAAK,GAAG,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,CAKC,EACD,IAAa,EACb,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IACE,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,SAAS;YAC5B,CAAC,CAAC,0BAA0B,KAAK,CAAC,CAAC,aAAa;YAChD,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU;YACzB,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;YACvB,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,EAC5B,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,SAAS,eAAe,CACtB,OAA0C,EAC1C,KAAa;IAEb,MAAM,GAAG,GAAG,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,mBAAmB,CAAC;IAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC;IAC1F,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,GAAG,cAAc,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA4B,EAC5B,OAMC,EACD,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;QAC1C,CAAC,CAAE,IAAI,CAAC,OAAQ,CAAC,GAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACpF,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;QAChF,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB;QAC7E,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;QAChD,0BAA0B,EAAE,OAAO,CAAC,uBAAuB;QAC3D,0BAA0B,EAAE,OAAO,CAAC,uBAAuB;QAC3D,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,SAAS,EAAE,KAAK;KACjB,CAAC;AACJ,CAAC"}

package/dist/sdk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAIrF,wBAAgB,MAAM,IAAI,UAAU,CAGnC;AAED,gDAAgD;AAChD,wBAAgB,SAAS,IAAI,IAAI,CAEhC"}
+{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAIrF,wBAAgB,MAAM,IAAI,UAAU,CAKnC;AAED,gDAAgD;AAChD,wBAAgB,SAAS,IAAI,IAAI,CAEhC"}

package/dist/sdk.js

@@ -10,8 +10,10 @@
 import { run402 as createNodeSdk } from "../sdk/dist/node/index.js";
 let cached = null;
 export function getSdk() {
+    // surface: "mcp" keeps credential resolution wallet-only — an agent tool call
+    // never spends the human's cached operator approval (no ambient authority).
     if (!cached)
-        cached = createNodeSdk();
+        cached = createNodeSdk({ surface: "mcp" });
     return cached;
 }
 /** Reset the cached SDK instance. Test-only. */

package/dist/sdk.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,IAAI,aAAa,EAAmB,MAAM,2BAA2B,CAAC;AAErF,IAAI,MAAM,GAAsB,IAAI,CAAC;AAErC,MAAM,UAAU,MAAM;IACpB,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,aAAa,EAAE,CAAC;IACtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,IAAI,aAAa,EAAmB,MAAM,2BAA2B,CAAC;AAErF,IAAI,MAAM,GAAsB,IAAI,CAAC;AAErC,MAAM,UAAU,MAAM;IACpB,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402-mcp",
-  "version": "3.0.0",
+  "version": "3.2.0",
   "description": "MCP server for Run402 — AI-native Postgres databases with REST API, auth, storage, and row-level security. Pay with x402 USDC micropayments.",
   "type": "module",
   "main": "dist/index.js",

package/sdk/core-dist/control-plane-session.d.ts

@@ -1,11 +1,14 @@
 /**
- * A cached **control-plane session** — the human principal's *write-capable*
- * bearer, minted by the loopback-PKCE flow (`run402 operator login --loopback`).
- * Distinct from the device-flow {@link OperatorSession} (read-only): this one
- * carries `provenance` (`loopback_pkce`) and `amr`, and is accepted everywhere a
- * SIWX wallet is. Cached at the BASE config dir (email/principal-scoped, shared
- * across local named wallets), mode 0600 — the token is as sensitive as the
- * allowance key.
+ * A cached **control-plane session** — the human principal's bearer, minted by
+ * the loopback-PKCE flow (`run402 operator login --loopback`). Distinct from the
+ * device-flow {@link OperatorSession} (read-only): this one carries `provenance`
+ * (`loopback_pkce`) and `amr`. It authorizes most control-plane operations, but
+ * since gateway v1.85/v1.87 it is NOT sufficient on its own for the high-stakes
+ * writes `provision` / `deploy` / secrets — those additionally require a
+ * passkey-fresh **operator approval** (`X-Run402-Write-Auth`, minted by
+ * `run402 operator approve`; see {@link WriteAuthApproval}). Cached at the BASE
+ * config dir (email/principal-scoped, shared across local named wallets), mode
+ * 0600 — the token is as sensitive as the allowance key.
  *
  * Stored shape vs the gateway payload: the gateway returns a relative
  * `expires_in` (seconds); we persist the absolute `expires_at` (epoch ms) so a

package/sdk/core-dist/write-auth-session.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Cache of **operator-approval** tokens — the passkey-fresh write-auth tokens a
+ * wallet-less human mints to provision/deploy (gateway v1.85/v1.87). Distinct
+ * from the control-plane session ({@link ControlPlaneSessionCache}) it pairs
+ * with: the gateway scopes each token to one `(action, target)`, so this is a
+ * **multi-entry** cache keyed by `(api_origin, control_plane_session_hash,
+ * action, target)`. An `org.project.create` approval for org Y and a
+ * `project.deploy` approval for project X coexist.
+ *
+ * Stored at the BASE config dir (principal-scoped), mode 0600 — as sensitive as
+ * the allowance key. The token dies with its control-plane session; the
+ * `control_plane_session_hash` binding lets the client drop a stale approval
+ * locally rather than replay it into a `WRITE_AUTH_BINDING_MISMATCH`.
+ */
+export interface WriteAuthApproval {
+    write_auth_token: string;
+    token_type: string;
+    header: string;
+    /** Gateway capability: `org.project.create` | `project.deploy` | `project.secret.write`. */
+    action: string;
+    org_id?: string;
+    project_id?: string;
+    /** Epoch ms when the approval expires (derived from the gateway-returned session). */
+    expires_at: number;
+    /** Short hash of the control-plane session this approval is bound to. */
+    control_plane_session_hash: string;
+    control_plane_principal_id: string;
+    /** API origin (e.g. `https://api.run402.com`) the token was minted against. */
+    api_origin: string;
+    amr?: string[];
+    minted_at: number;
+}
+/** The token payload from `POST /agent/v1/control-plane/write-auth/cli/token`. */
+export interface WriteAuthTokenResponse {
+    write_auth_token: string;
+    token_type?: string;
+    header?: string;
+    /** The write-auth session; its expiry is the token's expiry. */
+    session?: {
+        expires_at?: string | number;
+        absolute_expires_at?: string | number;
+        amr?: string[];
+        [k: string]: unknown;
+    } | null;
+    [k: string]: unknown;
+}
+/** A capability target — exactly one of these is set per approval. */
+export interface WriteAuthTargetKey {
+    org_id?: string;
+    project_id?: string;
+}
+/**
+ * Path to the approval cache: `{base}/write-auth-session.json`.
+ * `RUN402_WRITE_AUTH_SESSION_PATH` overrides for testing.
+ */
+export declare function getWriteAuthSessionPath(): string;
+/** Stable short hash binding an approval to a control-plane session token. */
+export declare function hashControlPlaneSession(token: string): string;
+/**
+ * Read all cached approvals. Returns `[]` for the "no cache" cases (absent,
+ * unreadable, unparseable). Throws when the file parses as JSON but the shape
+ * is wrong, so a corrupted cache surfaces a clear fix-it.
+ */
+export declare function readApprovals(path?: string): WriteAuthApproval[];
+/**
+ * Persist an approval. Replaces any existing entry with the same
+ * `(api_origin, control_plane_session_hash, action, target)` key and leaves
+ * every other entry intact (multi-entry, non-thrashing). Atomic, mode 0600.
+ */
+export declare function saveApproval(approval: WriteAuthApproval, path?: string): void;
+/** Delete the whole approval cache — local half of `operator logout`. Idempotent. */
+export declare function clearApprovals(path?: string): void;
+/** Whether an approval is past its usable life (with a small skew buffer). */
+export declare function isApprovalExpired(approval: WriteAuthApproval, nowMs?: number, skewMs?: number): boolean;
+/**
+ * Return the cached approval matching ALL of `(apiOrigin, cpSessionHash,
+ * capability, target)` and still live, or `null` if none matches or it is
+ * expired. This is the exact-match the gateway's target gate requires — a
+ * non-match (wrong action/target/origin/session) fails closed.
+ */
+export declare function loadLiveApproval(q: {
+    apiOrigin: string;
+    cpSessionHash: string;
+    capability: string;
+    target: WriteAuthTargetKey;
+}, path?: string, nowMs?: number): WriteAuthApproval | null;
+/**
+ * Build a cache entry from the gateway token response + the binding context
+ * (the cp-session it was minted under, the API origin, and the `(action,
+ * target)` it covers). Expiry is taken from the returned `session`.
+ */
+export declare function approvalFromTokenResponse(resp: WriteAuthTokenResponse, binding: {
+    action: string;
+    target: WriteAuthTargetKey;
+    apiOrigin: string;
+    controlPlaneSessionHash: string;
+    controlPlanePrincipalId: string;
+}, nowMs?: number): WriteAuthApproval;
+//# sourceMappingURL=write-auth-session.d.ts.map