create mode 100644 apps/desktop/src/ipc/methods/sshEnvironment.test.ts delete mode 100644 apps/desktop/src/ssh/DesktopSshRemoteApi.test.ts delete mode 100644 apps/desktop/src/ssh/DesktopSshRemoteApi.ts create mode 100644 apps/server/src/auth/EnvironmentAuth.test.ts create mode 100644 apps/server/src/auth/EnvironmentAuth.ts create mode 100644 apps/server/src/auth/EnvironmentAuthAdmin.test.ts create mode 100644 apps/server/src/auth/EnvironmentAuthPolicy.test.ts create mode 100644 apps/server/src/auth/EnvironmentAuthPolicy.ts delete mode 100644 apps/server/src/auth/Layers/AuthControlPlane.test.ts delete mode 100644 apps/server/src/auth/Layers/AuthControlPlane.ts delete mode 100644 apps/server/src/auth/Layers/BootstrapCredentialService.test.ts delete mode 100644 apps/server/src/auth/Layers/BootstrapCredentialService.ts delete mode 100644 apps/server/src/auth/Layers/ServerAuth.test.ts delete mode 100644 apps/server/src/auth/Layers/ServerAuth.ts delete mode 100644 apps/server/src/auth/Layers/ServerAuthPolicy.test.ts delete mode 100644 apps/server/src/auth/Layers/ServerAuthPolicy.ts delete mode 100644 apps/server/src/auth/Layers/ServerSecretStore.test.ts delete mode 100644 apps/server/src/auth/Layers/ServerSecretStore.ts delete mode 100644 apps/server/src/auth/Layers/SessionCredentialService.test.ts delete mode 100644 apps/server/src/auth/Layers/SessionCredentialService.ts create mode 100644 apps/server/src/auth/PairingGrantStore.test.ts create mode 100644 apps/server/src/auth/PairingGrantStore.ts create mode 100644 apps/server/src/auth/ServerSecretStore.test.ts create mode 100644 apps/server/src/auth/ServerSecretStore.ts delete mode 100644 apps/server/src/auth/Services/AuthControlPlane.ts delete mode 100644 apps/server/src/auth/Services/BootstrapCredentialService.ts delete mode 100644 apps/server/src/auth/Services/ServerAuth.ts delete mode 100644 apps/server/src/auth/Services/ServerAuthPolicy.ts delete mode 100644 apps/server/src/auth/Services/ServerSecretStore.ts delete mode 100644 apps/server/src/auth/Services/SessionCredentialService.ts create mode 100644 apps/server/src/auth/SessionStore.test.ts create mode 100644 apps/server/src/auth/SessionStore.ts create mode 100644 apps/server/src/persistence/Migrations/031_AuthAuthorizationScopes.test.ts create mode 100644 apps/server/src/persistence/Migrations/031_AuthAuthorizationScopes.ts create mode 100644 apps/web/src/environments/primary/httpClient.ts create mode 100644 apps/web/src/environments/primary/sessionState.ts create mode 100644 apps/web/test/environmentHttpTest.ts create mode 100644 docs/environment-auth.md create mode 100644 packages/contracts/src/environmentHttp.ts create mode 100644 packages/shared/src/oauthScope.test.ts create mode 100644 packages/shared/src/oauthScope.ts