@stigmer/cli 3.0.8

package/resources/connect/discover.js

@@ -0,0 +1,100 @@
+// Local MCP capability discovery for `connect mcp-server --dry-run`.
+//
+// Spawns/connects to the MCP server from the caller's machine (no backend push)
+// using the official @modelcontextprotocol/sdk client, lists its tools and
+// resource templates, and converts them to the same DiscoveredCapabilities proto
+// the backend returns — so dry-run and real connect render identically. Mirrors
+// Go's mcpdiscovery.Discover + CreateTransport (internal/cli/mcpdiscovery).
+//
+// stdio servers inherit process.env merged with --env overrides (override wins),
+// so credentials never leave the local machine. HTTP servers connect to the
+// configured URL with the server's static headers.
+import { create } from "@bufbuild/protobuf";
+import { DiscoveredCapabilitiesSchema, DiscoveredResourceTemplateSchema, DiscoveredToolSchema, } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/status_pb";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { mergeProcessEnv } from "../mcp/runtime-env.js";
+/** Discover an MCP server's capabilities locally without persisting to the backend. */
+export async function localDiscover(spec, envOverrides, timeoutMs) {
+    const { transport, readStderr } = await buildTransport(spec, envOverrides);
+    const client = new Client({ name: "stigmer-cli", version: "1.0.0" });
+    const options = timeoutMs > 0 ? { timeout: timeoutMs } : undefined;
+    try {
+        await client.connect(transport, options);
+    }
+    catch (error) {
+        // Append captured subprocess stderr so config/toolchain failures are
+        // diagnosable, mirroring Go's withStderr — without dumping raw output.
+        const stderr = readStderr();
+        const detail = stderr !== "" ? `\nsubprocess stderr:\n${stderr}` : "";
+        throw new Error(`failed to connect to MCP server: ${error.message}${detail}`);
+    }
+    try {
+        const { tools } = await client.listTools(undefined, options);
+        const resourceTemplates = (await client.getServerCapabilities())?.resources
+            ? (await client.listResourceTemplates(undefined, options)).resourceTemplates
+            : [];
+        return create(DiscoveredCapabilitiesSchema, {
+            tools: tools.map((tool) => create(DiscoveredToolSchema, {
+                name: tool.name,
+                description: tool.description ?? "",
+                inputSchema: tool.inputSchema ?? undefined,
+            })),
+            resourceTemplates: resourceTemplates.map((template) => create(DiscoveredResourceTemplateSchema, {
+                uriTemplate: template.uriTemplate,
+                name: template.name,
+                description: template.description ?? "",
+                mimeType: template.mimeType ?? "",
+            })),
+            lastDiscoveredAt: { seconds: BigInt(Math.floor(Date.now() / 1000)), nanos: 0 },
+        });
+    }
+    finally {
+        await client.close();
+    }
+}
+async function buildTransport(spec, envOverrides) {
+    if (spec.serverType?.case === "stdio") {
+        const { command, args, workingDir } = spec.serverType.value;
+        if (command === "")
+            throw new Error("stdio transport requires a command");
+        const { StdioClientTransport } = await import("@modelcontextprotocol/sdk/client/stdio.js");
+        const transport = new StdioClientTransport({
+            command,
+            args: [...args],
+            cwd: workingDir !== "" ? workingDir : undefined,
+            env: mergeProcessEnv([...envOverrides, ...goRunEnvOverrides(command, args)]),
+            // "pipe" exposes the child stderr as a PassThrough immediately, so we can
+            // capture diagnostics rather than leaking them to the user's terminal.
+            stderr: "pipe",
+        });
+        let captured = "";
+        transport.stderr?.on("data", (chunk) => {
+            captured += chunk.toString("utf8");
+        });
+        return { transport, readStderr: () => captured.trim() };
+    }
+    if (spec.serverType?.case === "http") {
+        const { url, headers } = spec.serverType.value;
+        if (url === "")
+            throw new Error("HTTP transport requires a URL");
+        const { StreamableHTTPClientTransport } = await import("@modelcontextprotocol/sdk/client/streamableHttp.js");
+        const requestInit = Object.keys(headers).length > 0 ? { headers: { ...headers } } : undefined;
+        const transport = new StreamableHTTPClientTransport(new URL(url), requestInit ? { requestInit } : undefined);
+        return { transport, readStderr: () => "" };
+    }
+    throw new Error("MCP server has no transport configured (expected stdio or http)");
+}
+// Go-toolchain overrides for `go run <module>@<version>` stdio commands so a
+// freshly-tagged version is usable before sum.golang.org indexes it. Mirrors
+// Go's goRunEnvOverrides. Safe: the command comes from operator-authored config.
+function goRunEnvOverrides(command, args) {
+    if (command !== "go" || args.length < 2 || args[0] !== "run")
+        return [];
+    const pkg = args[1].split("@")[0];
+    const parts = pkg.split("/");
+    if (parts.length < 3)
+        return [];
+    const prefix = `${parts[0]}/${parts[1]}/${parts[2]}/*`;
+    return [`GONOSUMDB=${prefix}`, `GONOSUMCHECK=${prefix}`];
+}
+//# sourceMappingURL=discover.js.map

package/resources/connect/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../src/resources/connect/discover.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,iFAAiF;AACjF,gFAAgF;AAChF,4EAA4E;AAC5E,EAAE;AACF,iFAAiF;AACjF,4EAA4E;AAC5E,mDAAmD;AAEnD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAEL,4BAA4B,EAC5B,gCAAgC,EAChC,oBAAoB,GACrB,MAAM,2DAA2D,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAmB,EACnB,YAA+B,EAC/B,SAAiB;IAEjB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,oCAAqC,KAAe,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,CAAC,MAAM,MAAM,CAAC,qBAAqB,EAAE,CAAC,EAAE,SAAS;YACzE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB;YAC5E,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,MAAM,CAAC,4BAA4B,EAAE;YAC1C,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACxB,MAAM,CAAC,oBAAoB,EAAE;gBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBACnC,WAAW,EAAG,IAAI,CAAC,WAAsC,IAAI,SAAS;aACvE,CAAC,CACH;YACD,iBAAiB,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpD,MAAM,CAAC,gCAAgC,EAAE;gBACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;gBACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;aAClC,CAAC,CACH;YACD,gBAAgB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;SAC/E,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAQD,KAAK,UAAU,cAAc,CAAC,IAAmB,EAAE,YAA+B;IAChF,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;QACtC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5D,IAAI,OAAO,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1E,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC3F,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;YACzC,OAAO;YACP,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YACf,GAAG,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAC/C,GAAG,EAAE,eAAe,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5E,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC7C,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC/C,IAAI,GAAG,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACjE,MAAM,EAAE,6BAA6B,EAAE,GAAG,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAC7G,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7G,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACrF,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,iFAAiF;AACjF,SAAS,iBAAiB,CAAC,OAAe,EAAE,IAAuB;IACjE,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,OAAO,CAAC,aAAa,MAAM,EAAE,EAAE,gBAAgB,MAAM,EAAE,CAAC,CAAC;AAC3D,CAAC"}

package/resources/connect/display.d.ts

@@ -0,0 +1,5 @@
+import type { ConnectResult } from "./connect.js";
+/** A sink for one display line (no trailing newline). */
+export type ConnectSink = (line: string) => void;
+export declare function renderConnectResult(result: ConnectResult, sink: ConnectSink, colorize: boolean): void;
+//# sourceMappingURL=display.d.ts.map

package/resources/connect/display.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../../src/resources/connect/display.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAIjD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAgBrG"}

package/resources/connect/display.js

@@ -0,0 +1,58 @@
+// Renders a connect result to the terminal. Port of Go's DisplayConnectResult
+// (connect_display.go): server identity + transport, the discovered tools and
+// resource templates, and a saved-vs-dry-run status line.
+import { styler } from "../../output/style.js";
+const NAME_COLUMN = 30;
+export function renderConnectResult(result, sink, colorize) {
+    const style = styler(colorize);
+    const meta = result.server.metadata;
+    sink("");
+    sink(style.cyan(`MCP Server: ${meta?.org ?? ""}/${meta?.name ?? ""}`));
+    sink(transportLine(result.server));
+    sink("");
+    renderTools(result, sink);
+    renderResourceTemplates(result, sink);
+    sink(result.updated !== undefined
+        ? style.green("✓ Connected — capabilities and tool approvals saved")
+        : style.yellow("⚠ Dry run — results not saved to backend"));
+    sink("");
+}
+function transportLine(server) {
+    const serverType = server.spec?.serverType;
+    if (serverType?.case === "stdio")
+        return `Transport:  stdio (${serverType.value.command})`;
+    if (serverType?.case === "http")
+        return `Transport:  http (${serverType.value.url})`;
+    return "Transport:  (unknown)";
+}
+function renderTools(result, sink) {
+    const tools = result.capabilities?.tools ?? [];
+    sink(`Tools (${tools.length}):`);
+    if (tools.length === 0) {
+        sink("  (none)");
+    }
+    else {
+        for (const tool of tools) {
+            sink(tool.description !== "" ? `  ${pad(tool.name)} ${tool.description}` : `  ${tool.name}`);
+        }
+    }
+    sink("");
+}
+function renderResourceTemplates(result, sink) {
+    const templates = result.capabilities?.resourceTemplates ?? [];
+    sink(`Resource Templates (${templates.length}):`);
+    if (templates.length === 0) {
+        sink("  (none)");
+    }
+    else {
+        for (const template of templates) {
+            sink(`  ${pad(template.name)} ${template.uriTemplate}`);
+        }
+    }
+    sink("");
+}
+// Left-justify a name to the fixed column width, mirroring Go's "%-30s".
+function pad(name) {
+    return name.length >= NAME_COLUMN ? name : name + " ".repeat(NAME_COLUMN - name.length);
+}
+//# sourceMappingURL=display.js.map

package/resources/connect/display.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"display.js","sourceRoot":"","sources":["../../../src/resources/connect/display.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,0DAA0D;AAG1D,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAM/C,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,IAAiB,EAAE,QAAiB;IAC7F,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;IAEpC,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,GAAG,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,CAAC;IAET,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1B,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;QAC/B,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,qDAAqD,CAAC;QACpE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,MAAiB;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC;IAC3C,IAAI,UAAU,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,sBAAsB,UAAU,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC;IAC3F,IAAI,UAAU,EAAE,IAAI,KAAK,MAAM;QAAE,OAAO,qBAAqB,UAAU,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;IACrF,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB,EAAE,IAAiB;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACX,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAqB,EAAE,IAAiB;IACvE,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,EAAE,iBAAiB,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,uBAAuB,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC;IAClD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACX,CAAC;AAED,yEAAyE;AACzE,SAAS,GAAG,CAAC,IAAY;IACvB,OAAO,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1F,CAAC"}

package/resources/connect/oauth.d.ts

@@ -0,0 +1,45 @@
+import type { McpServer } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import type { Stigmer } from "@stigmer/sdk";
+import type { BackendType } from "../../config/config.js";
+/** Well-known URL for the Stigmer Cloud web console. */
+export declare const DEFAULT_CLOUD_CONSOLE_URL = "https://app.stigmer.ai";
+/** Injectable side effects + inputs for {@link runOAuthFlow}. */
+export interface OAuthFlowDeps {
+    readonly client: Stigmer;
+    readonly server: McpServer;
+    readonly org: string;
+    readonly backendType: BackendType;
+    /** Opens the page URL in the user's browser. Defaults to the OS opener. */
+    readonly openBrowser?: (url: string) => Promise<void>;
+    /** Probes whether the local web console is reachable. Defaults to a 2s GET. */
+    readonly probeConsole?: (url: string) => Promise<boolean>;
+    /** Current epoch ms. Injectable for deterministic timeout tests. */
+    readonly now?: () => number;
+    /** Sleep helper. Injectable so tests don't wait real seconds. */
+    readonly sleep?: (ms: number) => Promise<void>;
+    /** Human-facing log sink (stderr by default, so stdout stays machine-clean). */
+    readonly log?: (line: string) => void;
+}
+/**
+ * Run the full interactive OAuth flow: probe (local), open the console, and
+ * wait for the grant. Throws a {@link UsageError} if the local console is
+ * unreachable or the wait times out.
+ */
+export declare function runOAuthFlow(deps: OAuthFlowDeps): Promise<void>;
+/**
+ * Poll getOAuthGrantStatus every 3s until the grant is connected or the
+ * 5-minute timeout elapses. Throws a {@link UsageError} on timeout.
+ */
+export declare function waitForOAuthGrant(deps: OAuthFlowDeps): Promise<void>;
+/** Query the backend for an existing/just-created OAuth grant. */
+export declare function checkOAuthGrant(client: Stigmer, mcpServerId: string, org: string): Promise<boolean>;
+/**
+ * Resolve the web console URL:
+ *   1. `STIGMER_CONSOLE_URL` (explicit override)
+ *   2. local backend → `http://localhost:{WEB_CONSOLE_PORT}`
+ *   3. cloud backend → {@link DEFAULT_CLOUD_CONSOLE_URL}
+ */
+export declare function resolveConsoleURL(backendType: BackendType, env?: NodeJS.ProcessEnv): string;
+/** The OS-specific command + args to open a URL. Exported for tests. */
+export declare function browserCommand(platform: NodeJS.Platform, url: string): [string | undefined, string[]];
+//# sourceMappingURL=oauth.d.ts.map

package/resources/connect/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/resources/connect/oauth.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wDAAwD,CAAC;AAExF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAI1D,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,2BAA2B,CAAC;AAMlE,iEAAiE;AACjE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,oEAAoE;IACpE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,gFAAgF;IAChF,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBrE;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB1E;AAED,kEAAkE;AAClE,wBAAsB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKzG;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAKxG;AAgDD,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,CAAC,CAWrG"}

package/resources/connect/oauth.js

@@ -0,0 +1,152 @@
+// Interactive OAuth browser flow for `connect mcp-server`. Mirrors Go's
+// internal/cli/mcpserver/oauth.go: resolve the web console URL, (in local mode)
+// probe that the console is reachable, open the org's MCP-server page so the
+// user can grant access, then poll getOAuthGrantStatus until the grant lands or
+// a 5-minute timeout elapses.
+//
+// Token acquisition and audit identity stay server-side by design; the CLI only
+// shepherds the user to the console and waits for the backend to report success.
+//
+// Every side effect (browser open, console probe, clock, sleep, log sink) is
+// injectable so the poll loop and URL resolution are unit-testable without a
+// real browser, network, or wall-clock delay.
+import { create } from "@bufbuild/protobuf";
+import { GetOAuthGrantStatusInputSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/io_pb";
+import { UsageError } from "../../errors/index.js";
+import { WEB_CONSOLE_PORT } from "../../local/constants.js";
+/** Well-known URL for the Stigmer Cloud web console. */
+export const DEFAULT_CLOUD_CONSOLE_URL = "https://app.stigmer.ai";
+const POLL_INTERVAL_MS = 3000;
+const POLL_TIMEOUT_MS = 5 * 60 * 1000;
+const CONSOLE_PROBE_TIMEOUT_MS = 2000;
+/**
+ * Run the full interactive OAuth flow: probe (local), open the console, and
+ * wait for the grant. Throws a {@link UsageError} if the local console is
+ * unreachable or the wait times out.
+ */
+export async function runOAuthFlow(deps) {
+    const log = deps.log ?? stderrLog;
+    const consoleURL = resolveConsoleURL(deps.backendType);
+    if (deps.backendType === "local") {
+        const probe = deps.probeConsole ?? probeWebConsole;
+        if (!(await probe(consoleURL)))
+            throw consoleUnavailableError(deps.server.metadata?.slug ?? "<slug>");
+    }
+    const slug = deps.server.metadata?.slug ?? "";
+    const name = deps.server.metadata?.name ?? slug;
+    const pageURL = `${consoleURL}/${deps.org}/mcp-servers/${slug}`;
+    log(`OAuth authentication required for '${name}'.`);
+    log("Opening web console to complete authentication...");
+    log(`\n  If the browser doesn't open automatically, visit:\n  ${pageURL}\n`);
+    const open = deps.openBrowser ?? openInBrowser;
+    try {
+        await open(pageURL);
+    }
+    catch {
+        log("  Could not open browser automatically. Please open the URL above in your browser.");
+    }
+    await waitForOAuthGrant(deps);
+}
+/**
+ * Poll getOAuthGrantStatus every 3s until the grant is connected or the
+ * 5-minute timeout elapses. Throws a {@link UsageError} on timeout.
+ */
+export async function waitForOAuthGrant(deps) {
+    const log = deps.log ?? stderrLog;
+    const now = deps.now ?? Date.now;
+    const sleep = deps.sleep ?? defaultSleep;
+    const serverId = deps.server.metadata?.id ?? "";
+    const deadline = now() + POLL_TIMEOUT_MS;
+    log("Waiting for OAuth connection... (press Ctrl+C to cancel)");
+    for (;;) {
+        await sleep(POLL_INTERVAL_MS);
+        if (now() >= deadline) {
+            throw new UsageError("timed out waiting for OAuth connection — please try again");
+        }
+        if (await checkOAuthGrant(deps.client, serverId, deps.org)) {
+            log("OAuth connection established.\n");
+            return;
+        }
+    }
+}
+/** Query the backend for an existing/just-created OAuth grant. */
+export async function checkOAuthGrant(client, mcpServerId, org) {
+    const status = await client.mcpServer.getOAuthGrantStatus(create(GetOAuthGrantStatusInputSchema, { resourceId: mcpServerId, org }));
+    return status.connected;
+}
+/**
+ * Resolve the web console URL:
+ *   1. `STIGMER_CONSOLE_URL` (explicit override)
+ *   2. local backend → `http://localhost:{WEB_CONSOLE_PORT}`
+ *   3. cloud backend → {@link DEFAULT_CLOUD_CONSOLE_URL}
+ */
+export function resolveConsoleURL(backendType, env = process.env) {
+    const override = env.STIGMER_CONSOLE_URL;
+    if (override !== undefined && override !== "")
+        return override;
+    if (backendType === "local")
+        return `http://localhost:${WEB_CONSOLE_PORT}`;
+    return DEFAULT_CLOUD_CONSOLE_URL;
+}
+// Probe the local web console with a short-timeout GET. Any HTTP response (even
+// an error status) means it's serving; a network/timeout failure means it isn't.
+async function probeWebConsole(url) {
+    try {
+        const response = await fetch(url, { signal: AbortSignal.timeout(CONSOLE_PROBE_TIMEOUT_MS) });
+        // Drain the body so the socket can close promptly.
+        await response.body?.cancel();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// Interactive OAuth needs a web console to host the grant page. The TS CLI does
+// not serve a local console, so for a local backend we steer the user to the two
+// real alternatives — manual credentials, or Stigmer Cloud's hosted console —
+// rather than telling them to enable a console that does not exist locally.
+function consoleUnavailableError(slug) {
+    return new UsageError("Interactive OAuth via the web console isn't available for a local backend.\n\n" +
+        "To connect this MCP server, either:\n" +
+        `  - Provide credentials directly: stigmer connect mcp-server ${slug} --env TOKEN=...\n` +
+        "  - Or use Stigmer Cloud's hosted console: stigmer config backend set cloud");
+}
+// Open a URL in the user's default browser. Mirrors Go's browser.Open: a
+// platform-specific launcher, no new dependency. Callers print the URL first so
+// a launch failure still leaves the user a way forward.
+function openInBrowser(url) {
+    return new Promise((resolve, reject) => {
+        void (async () => {
+            const { spawn } = await import("node:child_process");
+            const [command, args] = browserCommand(process.platform, url);
+            if (command === undefined) {
+                reject(new Error(`unsupported platform: ${process.platform}`));
+                return;
+            }
+            const child = spawn(command, args, { stdio: "ignore", detached: true });
+            child.once("error", reject);
+            child.unref();
+            resolve();
+        })().catch(reject);
+    });
+}
+/** The OS-specific command + args to open a URL. Exported for tests. */
+export function browserCommand(platform, url) {
+    switch (platform) {
+        case "darwin":
+            return ["open", [url]];
+        case "win32":
+            return ["rundll32", ["url.dll,FileProtocolHandler", url]];
+        case "linux":
+            return ["xdg-open", [url]];
+        default:
+            return [undefined, []];
+    }
+}
+function defaultSleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function stderrLog(line) {
+    process.stderr.write(`${line}\n`);
+}
+//# sourceMappingURL=oauth.js.map

package/resources/connect/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/resources/connect/oauth.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,8BAA8B;AAC9B,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,8CAA8C;AAE9C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,uDAAuD,CAAC;AAGvG,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,wDAAwD;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG,wBAAwB,CAAC;AAElE,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAoBtC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;IAClC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEvD,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,eAAe,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;YAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC;IAChD,MAAM,OAAO,GAAG,GAAG,UAAU,IAAI,IAAI,CAAC,GAAG,gBAAgB,IAAI,EAAE,CAAC;IAEhE,GAAG,CAAC,sCAAsC,IAAI,IAAI,CAAC,CAAC;IACpD,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACzD,GAAG,CAAC,4DAA4D,OAAO,IAAI,CAAC,CAAC;IAE7E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,aAAa,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,oFAAoF,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAmB;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,eAAe,CAAC;IAEzC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAEhE,SAAS,CAAC;QACR,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC9B,IAAI,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,iCAAiC,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;IACH,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAe,EAAE,WAAmB,EAAE,GAAW;IACrF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,mBAAmB,CACvD,MAAM,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CACzE,CAAC;IACF,OAAO,MAAM,CAAC,SAAS,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAwB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC9F,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/D,IAAI,WAAW,KAAK,OAAO;QAAE,OAAO,oBAAoB,gBAAgB,EAAE,CAAC;IAC3E,OAAO,yBAAyB,CAAC;AACnC,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAC7F,mDAAmD;QACnD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,4EAA4E;AAC5E,SAAS,uBAAuB,CAAC,IAAY;IAC3C,OAAO,IAAI,UAAU,CACnB,gFAAgF;QAC9E,uCAAuC;QACvC,gEAAgE,IAAI,oBAAoB;QACxF,6EAA6E,CAChF,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,gFAAgF;AAChF,wDAAwD;AACxD,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC9D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,QAAyB,EAAE,GAAW;IACnE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,KAAK,OAAO;YACV,OAAO,CAAC,UAAU,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5D,KAAK,OAAO;YACV,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B;YACE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/resources/delete.d.ts

@@ -0,0 +1,18 @@
+import type { Stigmer } from "@stigmer/sdk";
+import { CommandResult } from "../output/index.js";
+/** A staged delete: confirmation content plus the mutation to run on approval. */
+export interface DeletePlan {
+    /** Shown to the user (unless `--force`) before the destructive action. */
+    readonly warning: CommandResult;
+    /** The yes/no question, e.g. "Proceed with deletion? [y/N]". */
+    readonly confirmPrompt: string;
+    /** Runs the mutation and returns the result to render. */
+    perform(): Promise<CommandResult>;
+}
+/**
+ * Build the delete plan for a `<type> <reference>` pair. Routes the three
+ * special cases first, then the registry-driven standard path. Throws on
+ * unknown/unsupported types before any network call.
+ */
+export declare function planDelete(client: Stigmer, typeArg: string, reference: string, org: string): Promise<DeletePlan>;
+//# sourceMappingURL=delete.d.ts.map

package/resources/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../src/resources/delete.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAOnD,kFAAkF;AAClF,MAAM,WAAW,UAAU;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,0DAA0D;IAC1D,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;CACnC;AAyBD;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,UAAU,CAAC,CA0BrB"}

package/resources/delete.js

@@ -0,0 +1,180 @@
+// `delete` dispatch: resolve a resource by reference, describe it for a
+// confirmation prompt, then delete it. Mirrors the Go CLI's unified delete,
+// including its three special cases:
+//
+//   - execution  → maps to a *cancel* (agent executions only, by ID)
+//   - organization → not org-scoped; resolved via findMyOrganizations
+//   - api_key    → addressable by ID only (not slug)
+//
+// The deletion verbs are id-shaped mutations, so they ride the high-level
+// `client.stigmer.*` sub-clients — only `apply` needs raw controllers (see the
+// Wave 2 architecture note). Fetching reuses the `get` bindings rather than
+// re-implementing a second fetch path.
+//
+// Each kind produces a DeletePlan: a warning to show before confirming, the
+// confirmation prompt, and a `perform` thunk that runs the mutation and returns
+// the success/already-terminal result. The command layer owns the interaction
+// (render warning → confirm → perform → render result); this module owns *what*
+// to delete and *how* to describe it.
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ExecutionPhase } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { CliExitError, ExitCode, UsageError } from "../errors/index.js";
+import { CommandResult } from "../output/index.js";
+import { defaultRegistry, Verb } from "../registry/index.js";
+import { cancelAgentExecution, formatAgentPhase, isAgentExecutionId, isExecutionAlias } from "./execution.js";
+import { fetchResource } from "./get.js";
+import { getterFor } from "./get-bindings.js";
+import { parseReference } from "./reference.js";
+// Kinds the unified delete handles directly, each bound to its SDK delete call.
+// Mirrors Go's routeDelete switch exactly: kinds that carry a Delete verb but no
+// entry here (identity_provider, oauth_app, environment, instances, session)
+// fall through to a "not implemented" usage error, as in Go's default branch.
+// McpServer is the outlier whose delete takes a DeleteResourceInput, not an ID.
+const DELETE_HANDLERS = new Map([
+    [ApiResourceKind.agent, (c, id) => c.agent.delete(id)],
+    [ApiResourceKind.workflow, (c, id) => c.workflow.delete(id)],
+    [ApiResourceKind.mcp_server, (c, id) => c.mcpServer.delete({ resourceId: id })],
+    [ApiResourceKind.project, (c, id) => c.project.delete(id)],
+    [ApiResourceKind.skill, (c, id) => c.skill.delete(id)],
+    [ApiResourceKind.api_key, (c, id) => c.apiKey.delete(id)],
+]);
+/**
+ * Build the delete plan for a `<type> <reference>` pair. Routes the three
+ * special cases first, then the registry-driven standard path. Throws on
+ * unknown/unsupported types before any network call.
+ */
+export async function planDelete(client, typeArg, reference, org) {
+    if (isExecutionAlias(typeArg)) {
+        return planExecutionCancel(client, reference);
+    }
+    const info = defaultRegistry().getByAlias(typeArg);
+    if (info === undefined) {
+        throw new UsageError(`unknown resource type: ${typeArg}\n\nAvailable types: agent, workflow, mcpserver, project, skill, execution, organization`);
+    }
+    if (info.kind === ApiResourceKind.organization) {
+        return planOrganizationDelete(client, reference);
+    }
+    if (!info.supportedVerbs.has(Verb.Delete)) {
+        throw new UsageError(`${info.displayName} does not support 'delete'`);
+    }
+    const deleteFn = DELETE_HANDLERS.get(info.kind);
+    if (deleteFn === undefined) {
+        throw new UsageError(`delete not implemented for ${info.displayName}`);
+    }
+    return planStandardDelete(client, info, reference, org, deleteFn);
+}
+async function planStandardDelete(client, info, reference, org, deleteFn) {
+    // Safe by construction: every DELETE_HANDLERS key also has a get binding.
+    const getter = getterFor(info.kind);
+    if (getter === undefined) {
+        throw new UsageError(`delete not implemented for ${info.displayName}`);
+    }
+    const parsed = parseReference(reference, org, info.idPrefix);
+    // ResourceResult.message is the opaque proto Message; every resource carries
+    // the ApiResourceMetadata envelope, so read it through the structural view.
+    const resource = (await getter(client, parsed)).message;
+    const id = metaOf(resource).id;
+    return {
+        warning: buildDeleteWarning(info, resource),
+        confirmPrompt: "Proceed with deletion? [y/N]",
+        perform: async () => buildDeleteSuccess(info, await deleteFn(client, id)),
+    };
+}
+async function planOrganizationDelete(client, reference) {
+    // Organizations are not org-scoped: a bare token is a slug resolved against
+    // the caller's memberships (fetchResource handles the id-vs-slug split).
+    const parsed = parseReference(reference, "", "org");
+    const resource = (await fetchResource(client, ApiResourceKind.organization, parsed)).message;
+    const meta = metaOf(resource);
+    const warning = CommandResult.warning("You are about to delete the following organization:");
+    warning.addSection("").field("ID", meta.id).field("Name", meta.name).field("Slug", meta.slug);
+    warning.hint("This will delete the organization and all its resources.");
+    warning.hint("This action cannot be undone.");
+    return {
+        warning,
+        confirmPrompt: "Proceed with deletion? [y/N]",
+        perform: async () => {
+            const deleted = metaOf(await client.organization.delete(meta.id));
+            const out = CommandResult.success("Organization deleted successfully");
+            out.addSection("Deleted Organization").field("ID", deleted.id).field("Name", deleted.name).field("Slug", deleted.slug);
+            return out;
+        },
+    };
+}
+function planExecutionCancel(client, reference) {
+    if (!isAgentExecutionId(reference)) {
+        throw new CliExitError(`invalid execution ID: ${reference}\n\nExecutions must be referenced by ID (e.g., aex_01abc123)`, ExitCode.Usage);
+    }
+    const warning = CommandResult.warning(`You are about to cancel execution: ${reference}`);
+    warning.hint("This will gracefully stop the running agent.");
+    return {
+        warning,
+        confirmPrompt: "Proceed with cancellation? [y/N]",
+        perform: async () => {
+            const { execution, wasAlreadyTerminal } = await cancelAgentExecution(client, reference);
+            const id = execution.metadata?.id ?? "";
+            const status = formatAgentPhase(execution.status?.phase ?? ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED);
+            const out = wasAlreadyTerminal
+                ? CommandResult.warning("Execution was already in terminal state")
+                : CommandResult.success("Execution cancelled successfully");
+            out.addSection("Execution").field("ID", id).field("Status", status);
+            return out;
+        },
+    };
+}
+// --- Warning + success rendering (mirrors Go's per-type delete handlers) ---
+function buildDeleteWarning(info, message) {
+    if (info.kind === ApiResourceKind.api_key) {
+        return buildApiKeyWarning(message);
+    }
+    const meta = metaOf(message);
+    const warning = CommandResult.warning(`You are about to delete the following ${info.displayName.toLowerCase()}:`);
+    const section = warning
+        .addSection("")
+        .field("ID", meta.id)
+        .field("Name", meta.name)
+        .field("Slug", meta.slug)
+        .field("Org", meta.org);
+    if (info.kind === ApiResourceKind.skill) {
+        const tag = message.spec?.tag;
+        if (tag)
+            section.field("Tag", tag);
+        warning.hint("This will delete the skill and all its versions.");
+    }
+    warning.hint("This action cannot be undone.");
+    return warning;
+}
+function buildApiKeyWarning(message) {
+    const meta = metaOf(message);
+    const warning = CommandResult.warning("You are about to delete the following API key:");
+    const section = warning.addSection("").field("ID", meta.id);
+    if (meta.name)
+        section.field("Name", meta.name);
+    const fingerprint = message.spec?.fingerprint;
+    if (fingerprint)
+        section.field("Fingerprint", `***${fingerprint}`);
+    warning.hint("This will permanently revoke the API key.");
+    warning.hint("This action cannot be undone.");
+    return warning;
+}
+function buildDeleteSuccess(info, deleted) {
+    const meta = metaOf(deleted);
+    const out = CommandResult.success(`${info.displayName} deleted successfully`);
+    const section = out.addSection(`Deleted ${info.displayName}`).field("ID", meta.id);
+    if (info.kind === ApiResourceKind.api_key) {
+        if (meta.name)
+            section.field("Name", meta.name);
+        return out;
+    }
+    section.field("Name", meta.name).field("Slug", meta.slug);
+    return out;
+}
+function metaOf(message) {
+    return {
+        id: message.metadata?.id ?? "",
+        name: message.metadata?.name ?? "",
+        slug: message.metadata?.slug ?? "",
+        org: message.metadata?.org ?? "",
+    };
+}
+//# sourceMappingURL=delete.js.map

package/resources/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../src/resources/delete.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4EAA4E;AAC5E,qCAAqC;AACrC,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,qDAAqD;AACrD,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,4EAA4E;AAC5E,uCAAuC;AACvC,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,sCAAsC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAE9F,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAiB,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC9G,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAqBhD,gFAAgF;AAChF,iFAAiF;AACjF,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,MAAM,eAAe,GAA2C,IAAI,GAAG,CAA4B;IACjG,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CAC1D,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAe,EACf,OAAe,EACf,SAAiB,EACjB,GAAW;IAEX,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAClB,0BAA0B,OAAO,0FAA0F,CAC5H,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,YAAY,EAAE,CAAC;QAC/C,OAAO,sBAAsB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,CAAC,WAAW,4BAA4B,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAAC,8BAA8B,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAe,EACf,IAAc,EACd,SAAiB,EACjB,GAAW,EACX,QAAkB;IAElB,0EAA0E;IAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC,8BAA8B,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiC,CAAC;IAClF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;IAE/B,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC3C,aAAa,EAAE,8BAA8B;QAC7C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,MAAe,EAAE,SAAiB;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,CAAC,MAAM,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiC,CAAC;IACvH,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE9B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;IAC7F,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9F,OAAO,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACzE,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAE9C,OAAO;QACL,OAAO;QACP,aAAa,EAAE,8BAA8B;QAC7C,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;YACvE,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACvH,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAe,EAAE,SAAiB;IAC7D,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CACpB,yBAAyB,SAAS,8DAA8D,EAChG,QAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAE7D,OAAO;QACL,OAAO;QACP,aAAa,EAAE,kCAAkC;QACjD,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxF,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;YAEvG,MAAM,GAAG,GAAG,kBAAkB;gBAC5B,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,yCAAyC,CAAC;gBAClE,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;YAC9D,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACpE,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,SAAS,kBAAkB,CAAC,IAAc,EAAE,OAAoB;IAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,OAAO,EAAE,CAAC;QAC1C,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,yCAAyC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAClH,MAAM,OAAO,GAAG,OAAO;SACpB,UAAU,CAAC,EAAE,CAAC;SACd,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;SACpB,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;SACxB,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;SACxB,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,GAAG,GAAI,OAAuC,CAAC,IAAI,EAAE,GAAG,CAAC;QAC/D,IAAI,GAAG;YAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAoB;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,WAAW,GAAI,OAA+C,CAAC,IAAI,EAAE,WAAW,CAAC;IACvF,IAAI,WAAW;QAAE,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,WAAW,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAc,EAAE,OAAoB;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,uBAAuB,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAEnF,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,OAAoB;IAClC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;QAC9B,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;QAClC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;QAClC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE;KACjC,CAAC;AACJ,CAAC"}

package/resources/diff.d.ts

@@ -0,0 +1,16 @@
+import type { JsonValue } from "@bufbuild/protobuf";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import type { Stigmer } from "@stigmer/sdk";
+export type DiffResult = {
+    readonly status: "new";
+} | {
+    readonly status: "same";
+} | {
+    readonly status: "changed";
+    readonly text: string;
+};
+/** Diff one document against its remote state, returning what changed. */
+export declare function diffDocument(client: Stigmer, kind: ApiResourceKind, localRaw: string, document: JsonValue, baseName: string, org: string, contextLines: number): Promise<DiffResult>;
+/** Produce a unified diff of `a`→`b` with `context` trailing context lines. */
+export declare function unifiedDiff(a: string, b: string, labelA: string, labelB: string, context: number): string;
+//# sourceMappingURL=diff.d.ts.map