@stigmer/cli 3.14.1 → 3.15.1

package/client/client.d.ts

@@ -1,6 +1,7 @@
 import type { DescService } from "@bufbuild/protobuf";
 import { type Client, type Transport } from "@connectrpc/connect";
-import { Stigmer, type TokenProvider } from "@stigmer/sdk";
+import type { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { type ServerInfo, Stigmer, type TokenProvider } from "@stigmer/sdk";
 import { type Config } from "../config/index.js";
 /** The composed backend client returned by {@link createBackendClient}. */
 export interface BackendClient {
@@ -14,12 +15,30 @@ export interface BackendClient {
     controller<Desc extends DescService>(service: Desc): Client<Desc>;
     /** Probe the server (unauthenticated) to fail fast on connectivity issues. */
     connect(timeoutMs?: number): Promise<void>;
+    /**
+     * The connected server's edition and version, as the server reports them.
+     * Asked once per process and remembered; a failed probe is rethrown and
+     * not remembered, so the next question asks again.
+     */
+    serverInfo(): Promise<ServerInfo>;
+    /**
+     * Whether the connected server serves `kind`: the kind's tier against the
+     * server's reported edition. The CLI's counterpart to the console's
+     * `useResourceAvailable`.
+     */
+    isResourceAvailable(kind: ApiResourceKind): Promise<boolean>;
 }
 export interface BackendClientOptions {
     /** Config to use; defaults to the on-disk config (or standalone default). */
     readonly config?: Config;
     /** Token-provider override (the auth module supplies a refreshing provider). */
     readonly getAccessToken?: TokenProvider;
+    /**
+     * Transport override; defaults to the SDK's Node transport over the resolved
+     * endpoint. Mirrors `StigmerConfig.customTransport`: tests hand in an
+     * in-memory router so the façade's behaviour is proven without a network.
+     */
+    readonly transport?: Transport;
 }
 export declare function createBackendClient(options?: BackendClientOptions): BackendClient;
 //# sourceMappingURL=client.d.ts.map

package/client/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,KAAK,MAAM,EAAgB,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,EAAE,KAAK,MAAM,EAAuC,MAAM,oBAAoB,CAAC;AAGtF,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,uCAAuC;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,UAAU,CAAC,IAAI,SAAS,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAClE,8EAA8E;IAC9E,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;CACzC;AAID,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAuBrF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,KAAK,MAAM,EAAgB,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAC3H,OAAO,EAEL,KAAK,UAAU,EACf,OAAO,EACP,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,KAAK,MAAM,EAIZ,MAAM,oBAAoB,CAAC;AAG5B,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,uCAAuC;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,UAAU,CAAC,IAAI,SAAS,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAClE,8EAA8E;IAC9E,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C;;;;OAIG;IACH,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC;;;;OAIG;IACH,mBAAmB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;CAChC;AAID,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,oBAAyB,GACjC,aAAa,CAgDf"}

package/client/client.js

@@ -6,14 +6,22 @@
 //   - `transport` + `controller(service)`: the raw Connect layer, so write
 //     flows (a later wave) can drive generated controllers directly for full
 //     YAML->proto fidelity rather than the high-level client's lossy inputs.
+//   - `serverInfo()` + `isResourceAvailable(kind)`: what the connected server
+//     IS and what it serves. The edition is the server's reported one, asked
+//     once per process, and "does it serve this kind?" is the kind's tier
+//     against that edition — the SDK's isResourceAvailable, the same answer
+//     the console's useResourceAvailable gives. A command never infers a
+//     tier question from the config's backend `type` (20260911.11 A3): the
+//     backend type says where the config file lives and which token is sent,
+//     not which kinds a server serves.
 //
 // This module holds no business logic: backend selection, token precedence, and
 // endpoint shape are delegated to the config layer; org resolution and verb
 // dispatch live with the commands and the registry.
 import { createClient } from "@connectrpc/connect";
-import { Stigmer } from "@stigmer/sdk";
+import { isResourceAvailable, Stigmer, } from "@stigmer/sdk";
 import { createNodeTransport, normalizeEndpoint } from "@stigmer/sdk/node";
-import { load, resolveEndpoint, resolveToken } from "../config/index.js";
+import { load, resolveEndpoint, resolveToken, } from "../config/index.js";
 import { CliExitError, ExitCode } from "../errors/index.js";
 const DEFAULT_CONNECT_TIMEOUT_MS = 10_000;
 export function createBackendClient(options = {}) {
@@ -23,8 +31,23 @@ export function createBackendClient(options = {}) {
     // mid-session is picked up. STIGMER_API_KEY > config token precedence lives in
     // resolveToken; a caller-supplied provider (refresh-aware) takes over entirely.
     const tokenProvider = options.getAccessToken ?? (() => resolveToken(config) || null);
-    const transport = createNodeTransport({ baseUrl, getAccessToken: tokenProvider });
-    const stigmer = new Stigmer({ baseUrl, getAccessToken: tokenProvider, customTransport: transport });
+    const transport = options.transport ??
+        createNodeTransport({ baseUrl, getAccessToken: tokenProvider });
+    const stigmer = new Stigmer({
+        baseUrl,
+        getAccessToken: tokenProvider,
+        customTransport: transport,
+    });
+    // One probe per process. The pending promise is shared so concurrent askers
+    // coalesce; a rejection clears it so a transient fault is not remembered.
+    let serverInfo;
+    const probeServerInfo = () => {
+        serverInfo ??= stigmer.platform.getServerInfo().catch((err) => {
+            serverInfo = undefined;
+            throw err;
+        });
+        return serverInfo;
+    };
     return {
         stigmer,
         transport,
@@ -33,7 +56,11 @@ export function createBackendClient(options = {}) {
             return createClient(service, transport);
         },
         async connect(timeoutMs = DEFAULT_CONNECT_TIMEOUT_MS) {
-            await withTimeout(stigmer.platform.getServerInfo(), timeoutMs);
+            await withTimeout(probeServerInfo(), timeoutMs);
+        },
+        serverInfo: probeServerInfo,
+        async isResourceAvailable(kind) {
+            return isResourceAvailable(kind, (await probeServerInfo()).deploymentMode);
         },
     };
 }

package/client/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,EAAE;AACF,+EAA+E;AAC/E,kCAAkC;AAClC,kEAAkE;AAClE,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,oDAAoD;AAGpD,OAAO,EAAe,YAAY,EAAkB,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,OAAO,EAAsB,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAe,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAuB5D,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3D,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,aAAa,GAAkB,OAAO,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IAEpG,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;IAEpG,OAAO;QACL,OAAO;QACP,SAAS;QACT,MAAM;QACN,UAAU,CAAC,OAAO;YAChB,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,0BAA0B;YAClD,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,SAAiB;IAClE,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,4CAA4C,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,EACjG,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,EAAE;AACF,+EAA+E;AAC/E,kCAAkC;AAClC,kEAAkE;AAClE,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,6EAA6E;AAC7E,uCAAuC;AACvC,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,oDAAoD;AAGpD,OAAO,EAAe,YAAY,EAAkB,MAAM,qBAAqB,CAAC;AAEhF,OAAO,EACL,mBAAmB,EAEnB,OAAO,GAER,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAEL,IAAI,EACJ,eAAe,EACf,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAyC5D,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C,MAAM,UAAU,mBAAmB,CACjC,UAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3D,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,aAAa,GACjB,OAAO,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IAEjE,MAAM,SAAS,GACb,OAAO,CAAC,SAAS;QACjB,mBAAmB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,OAAO;QACP,cAAc,EAAE,aAAa;QAC7B,eAAe,EAAE,SAAS;KAC3B,CAAC,CAAC;IAEH,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,UAA2C,CAAC;IAChD,MAAM,eAAe,GAAG,GAAwB,EAAE;QAChD,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACrE,UAAU,GAAG,SAAS,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO;QACL,OAAO;QACP,SAAS;QACT,MAAM;QACN,UAAU,CAAC,OAAO;YAChB,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,0BAA0B;YAClD,MAAM,WAAW,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;QACD,UAAU,EAAE,eAAe;QAC3B,KAAK,CAAC,mBAAmB,CAAC,IAAI;YAC5B,OAAO,mBAAmB,CACxB,IAAI,EACJ,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC,cAAc,CACzC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,KAAK,UAAU,WAAW,CACxB,OAAmB,EACnB,SAAiB;IAEjB,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CACH,MAAM,CACJ,IAAI,YAAY,CACd,4CAA4C,EAC5C,QAAQ,CAAC,UAAU,CACpB,CACF,EACH,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/commands/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAezC,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkCnD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6BnD"}

package/commands/auth/index.js

@@ -1,8 +1,10 @@
 // `stigmer auth login|logout|whoami` — manage Stigmer Cloud authentication.
 //
 // login is interactive (browser PKCE) and human-only; logout and whoami honor
-// the standard mutating-output flags.
-import { activeBackend, ensureAuthenticated, load, resolveContextOrganization, save, } from "../../config/index.js";
+// the standard mutating-output flags. login and whoami both end in the SDK's
+// ensureMyIdentityAccount (login.ts, whoami.ts): the first-sign-in flow the
+// console runs, so the CLI provisions an account exactly as the console does.
+import { activeBackend, load, save } from "../../config/index.js";
 import { CommandResult, renderResult, } from "../../output/index.js";
 import { addResultFlags, resultFormat } from "../shared.js";
 export function registerAuth(program) {
@@ -13,11 +15,8 @@ export function registerAuth(program) {
         .command("login")
         .description("log in to Stigmer Cloud via browser (PKCE OAuth)")
         .action(async () => {
-        const { login } = await import("../../auth/index.js");
-        await login();
-        renderResult(CommandResult.success("Authenticated with Stigmer Cloud")
-            .hint("Run commands against the cloud backend, e.g.:")
-            .hint("  stigmer list agents"), "human");
+        const { runLogin } = await import("./login.js");
+        renderResult(await runLogin(), "human");
     });
     const logout = auth
         .command("logout")
@@ -30,6 +29,7 @@ export function registerAuth(program) {
         .command("whoami")
         .description("show the currently authenticated account")
         .action(async (options) => {
+        const { runWhoami } = await import("./whoami.js");
         renderResult(await runWhoami(), resultFormat(options));
     });
     addResultFlags(whoami);
@@ -55,33 +55,4 @@ function runLogout() {
     save(config);
     return CommandResult.success("Logged out from Stigmer Cloud").hint("Run 'stigmer auth login' to authenticate again.");
 }
-async function runWhoami() {
-    const { connectBackend } = await import("../../backend.js");
-    const client = connectBackend();
-    ensureAuthenticated(client.config);
-    const account = await client.stigmer.identityAccount.whoAmI();
-    const result = CommandResult.success("Authenticated");
-    const section = result.addSection("");
-    if (account.metadata !== undefined) {
-        section.field("Account ID", account.metadata.id);
-        if (account.metadata.name !== "")
-            section.field("Name", account.metadata.name);
-    }
-    if (account.spec !== undefined) {
-        if (account.spec.email !== "")
-            section.field("Email", account.spec.email);
-        if (account.spec.firstName !== "" || account.spec.lastName !== "") {
-            section.field("Full Name", `${account.spec.firstName} ${account.spec.lastName}`.trim());
-        }
-        section.field("Account Type", account.spec.isMachineAccount ? "Machine Account" : "User Account");
-    }
-    const org = resolveContextOrganization(client.config);
-    if (org !== "") {
-        section.field("Organization", org);
-    }
-    else {
-        result.hint("No organization set. Use: stigmer config context set --org <slug>");
-    }
-    return result;
-}
 //# sourceMappingURL=index.js.map

package/commands/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/auth/index.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,8EAA8E;AAC9E,sCAAsC;AAGtC,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,IAAI,EACJ,0BAA0B,EAC1B,IAAI,GACL,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,aAAa,EAEb,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5D,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0CAA0C,CAAC,CAAC;IAE3D,IAAI;SACD,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kDAAkD,CAAC;SAC/D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACtD,MAAM,KAAK,EAAE,CAAC;QACd,YAAY,CACV,aAAa,CAAC,OAAO,CAAC,kCAAkC,CAAC;aACtD,IAAI,CAAC,+CAA+C,CAAC;aACrD,IAAI,CAAC,uBAAuB,CAAC,EAChC,OAAO,CACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,IAAI;SAChB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CAAC,CAAC,OAAoB,EAAE,EAAE;QAC/B,YAAY,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACL,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,MAAM,GAAG,IAAI;SAChB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,KAAK,EAAE,OAAoB,EAAE,EAAE;QACrC,YAAY,CAAC,MAAM,SAAS,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACL,cAAc,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;IACtB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,aAAa,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,aAAa,CAAC,OAAO,CAC1B,2CAA2C,IAAI,GAAG,CACnD,CAAC;IACJ,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,EAChE,CAAC;QACD,OAAO,aAAa,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAC1D,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;IACxB,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;IAChC,KAAK,CAAC,YAAY,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,CAAC;IACb,OAAO,aAAa,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,IAAI,CAChE,iDAAiD,CAClD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE;YAC9B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAClE,OAAO,CAAC,KAAK,CACX,WAAW,EACX,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAC5D,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,KAAK,CACX,cAAc,EACd,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CACT,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/auth/index.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAG9E,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EACL,aAAa,EAEb,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5D,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0CAA0C,CAAC,CAAC;IAE3D,IAAI;SACD,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kDAAkD,CAAC;SAC/D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAChD,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,IAAI;SAChB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CAAC,CAAC,OAAoB,EAAE,EAAE;QAC/B,YAAY,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACL,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,MAAM,GAAG,IAAI;SAChB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,KAAK,EAAE,OAAoB,EAAE,EAAE;QACrC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAClD,YAAY,CAAC,MAAM,SAAS,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACL,cAAc,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;IACtB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,aAAa,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,CAAC;QACb,OAAO,aAAa,CAAC,OAAO,CAC1B,2CAA2C,IAAI,GAAG,CACnD,CAAC;IACJ,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,EAChE,CAAC;QACD,OAAO,aAAa,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAC1D,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;IACxB,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;IAChC,KAAK,CAAC,YAAY,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,CAAC;IACb,OAAO,aAAa,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,IAAI,CAChE,iDAAiD,CAClD,CAAC;AACJ,CAAC"}

package/commands/auth/login.d.ts

@@ -0,0 +1,13 @@
+import { CommandResult } from "../../output/index.js";
+/** How the account step went, after the tokens were persisted. */
+export type AccountSetup = {
+    readonly status: "ensured";
+    readonly created: boolean;
+} | {
+    readonly status: "failed";
+    readonly message: string;
+};
+/** Render the login outcome. Pure: the command layer supplies `setup`. */
+export declare function loginResult(setup: AccountSetup): CommandResult;
+export declare function runLogin(): Promise<CommandResult>;
+//# sourceMappingURL=login.d.ts.map

package/commands/auth/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/login.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,kEAAkE;AAClE,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAO5D,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAoB9D;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC,CAIvD"}

package/commands/auth/login.js

@@ -0,0 +1,58 @@
+// `stigmer auth login` — the browser PKCE flow, then the account.
+//
+// The auth module's login() persists the tokens and switches the backend to
+// cloud. This command then runs the SDK's ensureMyIdentityAccount — the
+// console's first-sign-in flow (20260911.11 A3) — so a person who signs in
+// from the CLI alone is provisioned, not left for entry 3's authorizer to
+// lock out as an unknown principal.
+//
+// The order matters for the result: the tokens are already saved when the
+// account step runs, so its failure is a WARNING that says the login stood
+// and how to finish (`auth whoami` runs the same flow), never an error that
+// sends the person back to the browser.
+import { ensureMyIdentityAccount } from "@stigmer/sdk";
+import { classify } from "../../errors/index.js";
+import { CommandResult } from "../../output/index.js";
+const CLOUD_HINTS = [
+    "Run commands against the cloud backend, e.g.:",
+    "  stigmer list agents",
+];
+/** Render the login outcome. Pure: the command layer supplies `setup`. */
+export function loginResult(setup) {
+    switch (setup.status) {
+        case "ensured": {
+            const result = CommandResult.success(setup.created
+                ? "Authenticated with Stigmer Cloud — your account was created on this first sign-in"
+                : "Authenticated with Stigmer Cloud");
+            for (const hint of CLOUD_HINTS)
+                result.hint(hint);
+            return result;
+        }
+        case "failed":
+            return CommandResult.warning(`Authenticated with Stigmer Cloud, but your account could not be set up: ${setup.message}`).hint("Run 'stigmer auth whoami' to finish setting up your account.");
+        default: {
+            const _exhaustive = setup;
+            throw new Error(`unknown account setup: ${String(_exhaustive)}`);
+        }
+    }
+}
+export async function runLogin() {
+    const { login } = await import("../../auth/index.js");
+    await login();
+    return loginResult(await ensureAccount());
+}
+// The tokens are on disk by now; connectBackend() reads them fresh.
+async function ensureAccount() {
+    const { connectBackend } = await import("../../backend.js");
+    const client = connectBackend();
+    try {
+        const { created } = await ensureMyIdentityAccount(client.stigmer, {
+            onProvisioning: () => process.stderr.write("Setting up your account...\n"),
+        });
+        return { status: "ensured", created };
+    }
+    catch (err) {
+        return { status: "failed", message: classify(err)?.message ?? String(err) };
+    }
+}
+//# sourceMappingURL=login.js.map

package/commands/auth/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/commands/auth/login.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,0EAA0E;AAC1E,oCAAoC;AACpC,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,wCAAwC;AAExC,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAOtD,MAAM,WAAW,GAAG;IAClB,+CAA+C;IAC/C,uBAAuB;CACxB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAClC,KAAK,CAAC,OAAO;gBACX,CAAC,CAAC,mFAAmF;gBACrF,CAAC,CAAC,kCAAkC,CACvC,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,WAAW;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,OAAO,CAC1B,2EAA2E,KAAK,CAAC,OAAO,EAAE,CAC3F,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,KAAK,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACtD,MAAM,KAAK,EAAE,CAAC;IACd,OAAO,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,aAAa;IAC1B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE;YAChE,cAAc,EAAE,GAAG,EAAE,CACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC;SACvD,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/commands/auth/whoami.d.ts

@@ -0,0 +1,18 @@
+import type { IdentityAccount } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/api_pb";
+import { CommandResult } from "../../output/index.js";
+/** What the call learned beyond the account itself. */
+export interface WhoamiContext {
+    /** `true` when this call created the account (a first sign-in). */
+    readonly created: boolean;
+    /** The organization the CLI context resolves to; "" when none is set. */
+    readonly org: string;
+}
+/**
+ * Render the caller's account. Every field is optional on the wire and an
+ * empty profile (the unconfigured laptop's operator) renders only what it
+ * has; a missing organization is a hint with the command that sets it, not a
+ * failure.
+ */
+export declare function whoamiResult(account: IdentityAccount, context: WhoamiContext): CommandResult;
+export declare function runWhoami(): Promise<CommandResult>;
+//# sourceMappingURL=whoami.d.ts.map

package/commands/auth/whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/whoami.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAMhG,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,aAAa,GACrB,aAAa,CAoCf;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,CAYxD"}

package/commands/auth/whoami.js

@@ -0,0 +1,58 @@
+// `stigmer auth whoami` — who the connected server says you are.
+//
+// Runs the SDK's ensureMyIdentityAccount, the same first-sign-in flow the
+// console's gate runs (20260911.11 A3): an authenticated caller with no
+// account yet is provisioned here rather than told "not found", so a person
+// who only ever uses the CLI is never left without an account. The result
+// says when THIS call created it — a first sign-in is visible, never silent.
+//
+// whoamiResult is the pure half (given the account and what the call learned,
+// the CommandResult a person reads); runWhoami is the I/O half.
+import { ensureMyIdentityAccount } from "@stigmer/sdk";
+import { ensureAuthenticated, resolveContextOrganization, } from "../../config/index.js";
+import { CommandResult } from "../../output/index.js";
+/**
+ * Render the caller's account. Every field is optional on the wire and an
+ * empty profile (the unconfigured laptop's operator) renders only what it
+ * has; a missing organization is a hint with the command that sets it, not a
+ * failure.
+ */
+export function whoamiResult(account, context) {
+    const result = CommandResult.success(context.created
+        ? "Authenticated — your account was created on this first sign-in"
+        : "Authenticated");
+    const section = result.addSection("");
+    if (account.metadata !== undefined) {
+        section.field("Account ID", account.metadata.id);
+        if (account.metadata.name !== "")
+            section.field("Name", account.metadata.name);
+    }
+    if (account.spec !== undefined) {
+        if (account.spec.email !== "")
+            section.field("Email", account.spec.email);
+        if (account.spec.firstName !== "" || account.spec.lastName !== "") {
+            section.field("Full Name", `${account.spec.firstName} ${account.spec.lastName}`.trim());
+        }
+        section.field("Account Type", account.spec.isMachineAccount ? "Machine Account" : "User Account");
+    }
+    if (context.org !== "") {
+        section.field("Organization", context.org);
+    }
+    else {
+        result.hint("No organization set. Use: stigmer config context set --org <slug>");
+    }
+    return result;
+}
+export async function runWhoami() {
+    const { connectBackend } = await import("../../backend.js");
+    const client = connectBackend();
+    ensureAuthenticated(client.config);
+    const { account, created } = await ensureMyIdentityAccount(client.stigmer, {
+        onProvisioning: () => process.stderr.write("Setting up your account...\n"),
+    });
+    return whoamiResult(account, {
+        created,
+        org: resolveContextOrganization(client.config),
+    });
+}
+//# sourceMappingURL=whoami.js.map

package/commands/auth/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../../src/commands/auth/whoami.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,gEAAgE;AAGhE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAUtD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAwB,EACxB,OAAsB;IAEtB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAClC,OAAO,CAAC,OAAO;QACb,CAAC,CAAC,gEAAgE;QAClE,CAAC,CAAC,eAAe,CACpB,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE;YAC9B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAClE,OAAO,CAAC,KAAK,CACX,WAAW,EACX,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAC5D,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,KAAK,CACX,cAAc,EACd,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,CACnE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CACT,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE;QACzE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC;KAC3E,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,OAAO,EAAE;QAC3B,OAAO;QACP,GAAG,EAAE,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC;KAC/C,CAAC,CAAC;AACL,CAAC"}

package/commands/draft.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"draft.d.ts","sourceRoot":"","sources":["../../src/commands/draft.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkCzC,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CASpD"}
+{"version":3,"file":"draft.d.ts","sourceRoot":"","sources":["../../src/commands/draft.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmDzC,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgBpD"}

package/commands/draft.js

@@ -6,24 +6,39 @@
 // Draft differs from run only at the edges: the agent is fixed (a system agent),
 // --message is required, and artifacts download to -o/--output (or the CWD)
 // unless detached or a local workspace is in play.
-import { ensureAuthenticated, isCloudMode, resolveOrganization } from "../config/index.js";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ensureAuthenticated, resolveOrganization } from "../config/index.js";
 import { UsageError } from "../errors/index.js";
-import { addAgentExecFlags, toAgentExecFlags } from "./agent-exec-flags.js";
+import { addAgentExecFlags, toAgentExecFlags, } from "./agent-exec-flags.js";
 import { globalOrg } from "./shared.js";
 // The org that owns the system agent blueprints (installed by the seedpack),
 // regardless of which org the user operates in. Mirrors Go's systemAgentOrg.
 const SYSTEM_AGENT_ORG = "stigmer";
 const CONFIGS = [
-    { name: "skill", resourceType: "Skill", summary: "create a skill with AI assistance" },
-    { name: "agent", resourceType: "Agent", summary: "create an agent with AI assistance" },
-    { name: "mcp-server", resourceType: "McpServer", summary: "create an MCP server config with AI assistance" },
+    {
+        name: "skill",
+        resourceType: "Skill",
+        summary: "create a skill with AI assistance",
+    },
+    {
+        name: "agent",
+        resourceType: "Agent",
+        summary: "create an agent with AI assistance",
+    },
+    {
+        name: "mcp-server",
+        resourceType: "McpServer",
+        summary: "create an MCP server config with AI assistance",
+    },
 ];
 // System agent slug per subcommand (Go's draftConfig.AgentName: "<type>-creator").
 function agentSlug(name) {
     return `${name}-creator`;
 }
 export function registerDraft(program) {
-    const draft = program.command("draft").description("create resource configurations with AI assistance");
+    const draft = program
+        .command("draft")
+        .description("create resource configurations with AI assistance");
     for (const config of CONFIGS) {
         const sub = draft.command(config.name).description(config.summary);
         addAgentExecFlags(sub, true)
@@ -40,7 +55,7 @@ async function runDraft(config, options, command) {
     if (org === "") {
         throw new UsageError("organization not set\n\nSet it with:\n  stigmer config context set --org <org>\n  stigmer draft --org <org> ...");
     }
-    const [{ prepareAgentExec }, { executeResolvedAgent }, { resolveAgentRef }, { localWorkspaceRoots }] = await Promise.all([
+    const [{ prepareAgentExec }, { executeResolvedAgent }, { resolveAgentRef }, { localWorkspaceRoots },] = await Promise.all([
         import("../resources/run/prepare.js"),
         import("../resources/run/agent-exec.js"),
         import("../resources/run/resolve.js"),
@@ -48,7 +63,8 @@ async function runDraft(config, options, command) {
     ]);
     const agent = await resolveDraftAgent(resolveAgentRef, client.stigmer, config);
     const prepared = await prepareAgentExec(toAgentExecFlags(options), client.stigmer, org, stderrProgress(), {
-        cloudBackend: isCloudMode(client.config),
+        // The kind's tier against the server's reported edition, as `run` asks it.
+        accountPreferencesAvailable: await client.isResourceAvailable(ApiResourceKind.identity_account),
     });
     if (prepared.attachments.length + prepared.workspaceFileRefs.length > 0) {
         process.stderr.write(`Attached ${prepared.attachments.length + prepared.workspaceFileRefs.length} file(s) as context\n`);

package/commands/draft.js.map

@@ -1 +1 @@
-{"version":3,"file":"draft.js","sourceRoot":"","sources":["../../src/commands/draft.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,6EAA6E;AAC7E,gFAAgF;AAChF,oCAAoC;AACpC,EAAE;AACF,iFAAiF;AACjF,4EAA4E;AAC5E,mDAAmD;AAGnD,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAyB,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAenC,MAAM,OAAO,GAA2B;IACtC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,mCAAmC,EAAE;IACtF,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACvF,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,gDAAgD,EAAE;CAC7G,CAAC;AAEF,mFAAmF;AACnF,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,GAAG,IAAI,UAAU,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,mDAAmD,CAAC,CAAC;IACxG,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;aACzB,MAAM,CAAC,oBAAoB,EAAE,oEAAoE,CAAC;aAClG,MAAM,CAAC,QAAQ,EAAE,yCAAyC,CAAC;aAC3D,MAAM,CAAC,CAAC,OAAmB,EAAE,OAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAmB,EAAE,OAAmB,EAAE,OAAgB;IAChF,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAClB,iHAAiH,CAClH,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,GAClG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,MAAM,CAAC,6BAA6B,CAAC;QACrC,MAAM,CAAC,gCAAgC,CAAC;QACxC,MAAM,CAAC,6BAA6B,CAAC;QACrC,MAAM,CAAC,+BAA+B,CAAC;KACxC,CAAC,CAAC;IAEL,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE/E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE;QACxG,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;KACzC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,iBAAiB,CAAC,MAAM,uBAAuB,CAAC,CAAC;IAC3H,CAAC;IAED,MAAM,oBAAoB,CAAC;QACzB,KAAK;QACL,QAAQ;QACR,GAAG;QACH,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACtH,UAAU,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QACrD,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,oDAAoD;AACpD,KAAK,UAAU,iBAAiB,CAC9B,eAA6E,EAC7E,MAAsC,EACtC,MAAmB;IAEnB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,gBAAgB,IAAI,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,qCAAqC,gBAAgB,OAAO;YACjE,uDAAuD,gBAAgB,qBAAqB;YAC5F,oBAAoB;YACpB,wDAAwD,gBAAgB,IAAI;YAC5E,uDAAuD,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,8DAA8D;AAC9D,qCAAqC;AACrC,+DAA+D;AAC/D,wCAAwC;AACxC,SAAS,kBAAkB,CAAC,MAAc,EAAE,MAAe,EAAE,UAA6B;IACxF,IAAI,MAAM;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IACjC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"draft.js","sourceRoot":"","sources":["../../src/commands/draft.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,6EAA6E;AAC7E,gFAAgF;AAChF,oCAAoC;AACpC,EAAE;AACF,iFAAiF;AACjF,4EAA4E;AAC5E,mDAAmD;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EACL,iBAAiB,EAEjB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAenC,MAAM,OAAO,GAA2B;IACtC;QACE,IAAI,EAAE,OAAO;QACb,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,mCAAmC;KAC7C;IACD;QACE,IAAI,EAAE,OAAO;QACb,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,oCAAoC;KAC9C;IACD;QACE,IAAI,EAAE,YAAY;QAClB,YAAY,EAAE,WAAW;QACzB,OAAO,EAAE,gDAAgD;KAC1D;CACF,CAAC;AAEF,mFAAmF;AACnF,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,GAAG,IAAI,UAAU,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,mDAAmD,CAAC,CAAC;IACpE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;aACzB,MAAM,CACL,oBAAoB,EACpB,oEAAoE,CACrE;aACA,MAAM,CAAC,QAAQ,EAAE,yCAAyC,CAAC;aAC3D,MAAM,CAAC,CAAC,OAAmB,EAAE,OAAgB,EAAE,EAAE,CAChD,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CACnC,CAAC;IACN,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAmB,EACnB,OAAmB,EACnB,OAAgB;IAEhB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAClB,iHAAiH,CAClH,CAAC;IACJ,CAAC;IAED,MAAM,CACJ,EAAE,gBAAgB,EAAE,EACpB,EAAE,oBAAoB,EAAE,EACxB,EAAE,eAAe,EAAE,EACnB,EAAE,mBAAmB,EAAE,EACxB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,MAAM,CAAC,6BAA6B,CAAC;QACrC,MAAM,CAAC,gCAAgC,CAAC;QACxC,MAAM,CAAC,6BAA6B,CAAC;QACrC,MAAM,CAAC,+BAA+B,CAAC;KACxC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACnC,eAAe,EACf,MAAM,CAAC,OAAO,EACd,MAAM,CACP,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,gBAAgB,CAAC,OAAO,CAAC,EACzB,MAAM,CAAC,OAAO,EACd,GAAG,EACH,cAAc,EAAE,EAChB;QACE,2EAA2E;QAC3E,2BAA2B,EAAE,MAAM,MAAM,CAAC,mBAAmB,CAC3D,eAAe,CAAC,gBAAgB,CACjC;KACF,CACF,CAAC;IAEF,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,iBAAiB,CAAC,MAAM,uBAAuB,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,oBAAoB,CAAC;QACzB,KAAK;QACL,QAAQ;QACR,GAAG;QACH,WAAW,EAAE,kBAAkB,CAC7B,OAAO,CAAC,MAAM,IAAI,EAAE,EACpB,QAAQ,CAAC,MAAM,EACf,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAC/C;QACD,UAAU,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QACrD,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,oDAAoD;AACpD,KAAK,UAAU,iBAAiB,CAC9B,eAA6E,EAC7E,MAAsC,EACtC,MAAmB;IAEnB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAC1B,MAAM,EACN,GAAG,gBAAgB,IAAI,IAAI,EAAE,EAC7B,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,qCAAqC,gBAAgB,OAAO;YACjE,uDAAuD,gBAAgB,qBAAqB;YAC5F,oBAAoB;YACpB,wDAAwD,gBAAgB,IAAI;YAC5E,uDAAuD,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,8DAA8D;AAC9D,qCAAqC;AACrC,+DAA+D;AAC/D,wCAAwC;AACxC,SAAS,kBAAkB,CACzB,MAAc,EACd,MAAe,EACf,UAA6B;IAE7B,IAAI,MAAM;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IACjC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAC1D,CAAC"}

package/commands/internal-daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal-daemon.d.ts","sourceRoot":"","sources":["../../src/commands/internal-daemon.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAS7D"}
+{"version":3,"file":"internal-daemon.d.ts","sourceRoot":"","sources":["../../src/commands/internal-daemon.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAS7D"}

package/commands/internal-daemon.js

@@ -1,22 +1,15 @@
 // `stigmer internal-daemon` (hidden) — the long-lived supervised daemon process
 // that `up` re-execs. It is not meant to be invoked directly; it runs the local
 // stack until it receives SIGTERM/SIGINT, then exits with the daemon's code.
+// (`stigmer up --foreground` runs the same body in the launching process.)
 export function registerInternalDaemon(program) {
     program
         .command("internal-daemon", { hidden: true })
         .description("internal: run the supervised local-stack daemon (do not invoke directly)")
         .action(async () => {
-        const { runInternalDaemon } = await import("../local/daemon/process.js");
+        const { runInternalDaemon, waitForShutdownSignal } = await import("../local/daemon/process.js");
         const code = await runInternalDaemon({ waitForShutdown: waitForShutdownSignal });
         process.exit(code);
     });
 }
-// Resolve when the first SIGTERM/SIGINT arrives — the daemon's shutdown trigger.
-function waitForShutdownSignal() {
-    return new Promise((resolve) => {
-        const onSignal = () => resolve();
-        process.once("SIGTERM", onSignal);
-        process.once("SIGINT", onSignal);
-    });
-}
 //# sourceMappingURL=internal-daemon.js.map

package/commands/internal-daemon.js.map

@@ -1 +1 @@
-{"version":3,"file":"internal-daemon.js","sourceRoot":"","sources":["../../src/commands/internal-daemon.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAI7E,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,OAAO;SACJ,OAAO,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC5C,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,iFAAiF;AACjF,SAAS,qBAAqB;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,GAAS,EAAE,CAAC,OAAO,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"internal-daemon.js","sourceRoot":"","sources":["../../src/commands/internal-daemon.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,2EAA2E;AAI3E,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,OAAO;SACJ,OAAO,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC5C,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/commands/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAUlD"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBzC,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAelD"}

package/commands/run.js

@@ -3,10 +3,11 @@
 // reference (smart 0/1/2-arg dispatch mirroring Go's run.go + run_picker.go),
 // then delegate to the shared run stack. Heavy modules (backend client, Ink,
 // the differ) load lazily inside the action so `--help` stays fast (DD-001).
-import { ensureAuthenticated, isCloudMode, resolveOrganization } from "../config/index.js";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ensureAuthenticated, resolveOrganization } from "../config/index.js";
 import { UsageError } from "../errors/index.js";
 import { interactiveBrowseEnabled } from "../resources/picker/tty.js";
-import { addAgentExecFlags } from "./agent-exec-flags.js";
+import { addAgentExecFlags, } from "./agent-exec-flags.js";
 import { globalOrg } from "./shared.js";
 export function registerRun(program) {
     const run = program
@@ -110,7 +111,9 @@ async function runResolvedAgent(agent, options, org, outputMode, client) {
     const { executeResolvedAgent } = await import("../resources/run/agent-exec.js");
     const { toAgentExecFlags } = await import("./agent-exec-flags.js");
     const prepared = await prepareAgentExec(toAgentExecFlags(options), client.stigmer, org, stderrProgress(), {
-        cloudBackend: isCloudMode(client.config),
+        // The kind's tier against the server's reported edition — the same
+        // question the console asks — never the config's backend type.
+        accountPreferencesAvailable: await client.isResourceAvailable(ApiResourceKind.identity_account),
         // run opts into the account default_harness fill; draft deliberately
         // does not (see the option's doc comment for the D5 rationale).
         applyAccountHarnessDefault: true,
@@ -132,7 +135,7 @@ async function runWorkflow(reference, options, org, outputMode, client) {
     if (options.workspace.length > 0) {
         throw new UsageError("--workspace is not supported for workflows (workspace is an agent-level concept)");
     }
-    const [{ resolveWorkflowRef }, { createWorkflowExecution }, { loadAndMergeEnv }, { parseApprovalAction }] = await Promise.all([
+    const [{ resolveWorkflowRef }, { createWorkflowExecution }, { loadAndMergeEnv }, { parseApprovalAction },] = await Promise.all([
         import("../resources/run/resolve.js"),
         import("../resources/run/create.js"),
         import("../resources/run/env.js"),
@@ -166,7 +169,9 @@ async function runWorkflow(reference, options, org, outputMode, client) {
         client: client.stigmer,
         executionId: id,
         outputMode,
-        defaultAction: options.autoApprove === true ? ApprovalAction.APPROVE_ALL : parseApprovalAction(options.approveDefault ?? ""),
+        defaultAction: options.autoApprove === true
+            ? ApprovalAction.APPROVE_ALL
+            : parseApprovalAction(options.approveDefault ?? ""),
     });
 }
 function stderrProgress() {
@@ -179,7 +184,11 @@ function stderrProgress() {
 // cleanly so the command exits 0. Loaded lazily to honor the DD-001 boundary.
 async function browseAndRunAgent(initialQuery, options, org, outputMode, client) {
     const { pickAgent } = await import("../resources/picker/ink.js");
-    const selected = await pickAgent({ client: client.stigmer, org, initialQuery });
+    const selected = await pickAgent({
+        client: client.stigmer,
+        org,
+        initialQuery,
+    });
     if (selected === undefined)
         return;
     await runAgent(selected.id, options, org, outputMode, client);