Package-level declarations

Process-wide authorization gate for MCP tool calls that exercise authority above the player — execute_code (arbitrary Kotlin/JVM = root, on any lane) and run_command target=server (runs at op level 4 in the local server, above the world's cheat setting). Complements McpServer's transport auth (loopback bind + bearer token + Origin check) with a world/server authority check, derived from the live session:

Client-only half of the AuthGate: computes the session-derived authorization decision from live client state, on the client thread, every client tick, and publishes it to AuthGate's volatile. Touching Minecraft here keeps that link out of AuthGate, which loads on a dedicated server; there Lane.pump never takes the client branch, so this object is never reached.