# Task ID: 134

**Title:** RBAC wiring for new resources

**Status:** pending

**Dependencies:** 115, 126, 128, 131, 133

**Priority:** medium

**Description:** Update mapUrlToPermission and nameResolvers in main.ts for epics, epictasks, tasks, repos, sessions

**Details:**

In src/mcpd/src/main.ts:
1. Add to mapUrlToPermission cases: epics, epictasks, tasks, repos, sessions
2. Map /api/v1/inference-tasks to 'inference-tasks' resource
3. Add non-CRUD verb cases above the map:
   - POST /tasks/:id/accept|reject|transition → run:tasks:<name>
   - POST /sessions/:id/exec, GET /sessions/:id/attach → run:sessions:<name>
4. Add nameResolvers for epics, epictasks, tasks, repos, sessions (fetch by id, return name for scoped grants)
5. Follow existing patterns for permission mapping

**Test Strategy:**

Unit tests: verify mapUrlToPermission returns correct permission strings for all new routes, test nameResolvers resolve id→name correctly, test non-CRUD verbs get run: prefix.