From 2854dcf61b51978666ca2f317662efb01e5ab804 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Mon, 13 Jul 2026 08:17:59 -0700
Subject: [PATCH] fix(gateway): restore revokeAttachGrantsForSession used by
 cloud-workers

#106332 landed using revokeAttachGrantsForSession after #106038 removed it
as dead, breaking prod-types compile on every PR merge ref. Restores the
helper verbatim from 2deb696ef49 with a doc comment.
---
 src/gateway/mcp-grant-store.ts | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/src/gateway/mcp-grant-store.ts b/src/gateway/mcp-grant-store.ts
index 12ed42929de4..e66feb9ffd52 100644
--- a/src/gateway/mcp-grant-store.ts
+++ b/src/gateway/mcp-grant-store.ts
@@ -122,6 +122,19 @@ export function revokeAttachGrant(token: string): boolean {
   return grantsByToken.delete(token);
 }
 
+/** Revokes every attach grant minted for one session. Returns the count removed. */
+export function revokeAttachGrantsForSession(sessionKey: string): number {
+  const key = sessionKey.trim();
+  let removed = 0;
+  for (const [token, grant] of grantsByToken) {
+    if (grant.sessionKey === key) {
+      grantsByToken.delete(token);
+      removed += 1;
+    }
+  }
+  return removed;
+}
+
 function sweepExpiredAttachGrants(nowMs: number = Date.now()): number {
   let removed = 0;
   for (const [token, grant] of grantsByToken) {