feat(governance): standing-grant revocation dashboard (#620)

coworker/conversations.py

@@ -485,6 +485,7 @@ def list(self, *, workspace: Optional[str] = None) -> list[SessionRecord]:
                 archived=bool(r["archived"]),
                 origin=r["origin"],
                 origin_label=r["origin_label"],
+                grants=_load_grants(r["grants"] if "grants" in r.keys() else None),
                 team=_load_grants(r["team"] if "team" in r.keys() else None),
             )
             for r in rows

coworker/overrides.py

@@ -150,11 +150,13 @@ def set_trust(self, pattern: str) -> None:
             self._trust.append(pattern)
             self.save()
 
-    def revoke_trust(self, pattern: str) -> None:
+    def revoke_trust(self, pattern: str) -> bool:
         before = len(self._trust)
         self._trust = [p for p in self._trust if p != pattern]
         if len(self._trust) != before:
             self.save()
+            return True
+        return False
 
     def trust_patterns(self) -> list[str]:
         return list(self._trust)

coworker/permissions.py

@@ -559,6 +559,33 @@ def allow_domain_for_session(self, url_or_domain: str) -> None:
         if host:
             self.session_allow_domains.add(host)
 
+    def revoke_tool_for_session(self, tool_name: str) -> bool:
+        if tool_name in self.session_allow_tools:
+            self.session_allow_tools.remove(tool_name)
+            return True
+        return False
+
+    def revoke_command_for_session(self, command: str) -> bool:
+        if command in self.session_allow_commands:
+            self.session_allow_commands.remove(command)
+            return True
+        return False
+
+    def revoke_readonly_for_session(self) -> bool:
+        if self.session_readonly:
+            self.session_readonly = False
+            return True
+        return False
+
+    def revoke_domain_for_session(self, url_or_domain: str) -> bool:
+        host = _host_of(url_or_domain)
+        if host.startswith("www."):
+            host = host[4:]
+        if host in self.session_allow_domains:
+            self.session_allow_domains.remove(host)
+            return True
+        return False
+
     # -- helpers ----------------------------------------------------------------
     def _candidate(self, path: str) -> Path:
         # Relative paths resolve against the primary (workspace_root); absolute/`~` taken as-is.

coworker/server/app.py

@@ -694,6 +694,19 @@ def set_workspace_trust(body: dict) -> dict[str, Any]:
             trusted=bool((body or {}).get("trusted", False)),
         )
 
+    @app.get("/v1/grants")
+    def active_grants() -> dict[str, Any]:
+        return {"grants": manager.list_active_grants()}
+
+    @app.post("/v1/grants/revoke")
+    def revoke_grant(body: dict) -> dict[str, Any]:
+        return manager.revoke_grant(
+            grant_id=(body or {}).get("grant_id"),
+            kind=(body or {}).get("kind"),
+            target=(body or {}).get("target"),
+            source_id=(body or {}).get("source_id"),
+        )
+
     @app.post("/v1/workspaces/temp")
     def provision_temp_workspace(body: dict) -> dict[str, Any]:
         # UX-029: a code-family session starting "in a temporary folder" — created only