@stigmer/mcp-server 3.2.3 → 3.4.0

package/config.d.ts

@@ -1,6 +1,16 @@
 import { type LogFormat, type LogLevel } from "./logger.js";
 /** Communication mode between MCP clients and the server. */
 export type Transport = "stdio" | "http" | "both";
+/**
+ * Which tool roster the server exposes.
+ *
+ * - "full": every domain (the default — external MCP clients).
+ * - "records": only the five record tools (DD-005) with the agent-facing
+ *   argument surface. This is what the runner-synthesized datastore
+ *   attachment spawns over stdio (T05 R1); over HTTP the same roster is
+ *   served on the /records route regardless of this setting.
+ */
+export type Roster = "full" | "records";
 /**
  * OAuth 2.0 Protected Resource Metadata (RFC 9728) discovery settings.
  *
@@ -25,6 +35,8 @@ export interface Config {
      */
     readonly apiKey: string;
     readonly transport: Transport;
+    /** Tool roster for stdio/both stdio-side; HTTP routes by path. */
+    readonly roster: Roster;
     readonly httpPort: string;
     /** Whether HTTP requests require an Authorization: Bearer header. */
     readonly httpAuthEnabled: boolean;

package/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAQA,OAAO,EAAO,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjE,6DAA6D;AAC7D,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,gDAAgD;AAChD,MAAM,WAAW,MAAM;IACrB,mEAAmE;IACnE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B;AAMD,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAiB9E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CA8ChD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAQA,OAAO,EAAO,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjE,6DAA6D;AAC7D,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,gDAAgD;AAChD,MAAM,WAAW,MAAM;IACrB,mEAAmE;IACnE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B;AAOD,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAkB9E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAkDhD"}

package/config.js

@@ -7,6 +7,7 @@
 // reproduces Go's hard-errors AND warnings, not just the defaults.
 import { log } from "./logger.js";
 const VALID_TRANSPORTS = ["stdio", "http", "both"];
+const VALID_ROSTERS = ["full", "records"];
 const VALID_LOG_FORMATS = ["text", "json"];
 const VALID_LOG_LEVELS = ["debug", "info", "warn", "error"];
 /** Reads configuration from the process environment, applying defaults. */
@@ -15,6 +16,7 @@ export function loadConfigFromEnv(env = process.env) {
         stigmerServerAddress: envOr(env, "STIGMER_SERVER_ADDRESS", "localhost:7234"),
         apiKey: env.STIGMER_API_KEY ?? "",
         transport: envOr(env, "STIGMER_MCP_TRANSPORT", "stdio").toLowerCase(),
+        roster: envOr(env, "STIGMER_MCP_ROSTER", "full").toLowerCase(),
         httpPort: envOr(env, "STIGMER_MCP_HTTP_PORT", "8080"),
         // Go semantics: only the exact string "true" enables auth.
         httpAuthEnabled: envOr(env, "STIGMER_MCP_HTTP_AUTH_ENABLED", "true") === "true",
@@ -38,6 +40,9 @@ export function validateConfig(cfg) {
     if (!VALID_TRANSPORTS.includes(cfg.transport)) {
         throw new Error(`invalid STIGMER_MCP_TRANSPORT "${cfg.transport}": must be stdio, http, or both`);
     }
+    if (!VALID_ROSTERS.includes(cfg.roster)) {
+        throw new Error(`invalid STIGMER_MCP_ROSTER "${cfg.roster}": must be full or records`);
+    }
     if (cfg.stigmerServerAddress === "") {
         throw new Error("STIGMER_SERVER_ADDRESS must not be empty");
     }

package/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,mEAAmE;AAEnE,OAAO,EAAE,GAAG,EAAiC,MAAM,aAAa,CAAC;AAsCjE,MAAM,gBAAgB,GAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtE,MAAM,iBAAiB,GAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9D,MAAM,gBAAgB,GAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE/E,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,OAAO;QACL,oBAAoB,EAAE,KAAK,CAAC,GAAG,EAAE,wBAAwB,EAAE,gBAAgB,CAAC;QAC5E,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,EAAE;QACjC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAe;QAClF,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,MAAM,CAAC;QACrD,2DAA2D;QAC3D,eAAe,EAAE,KAAK,CAAC,GAAG,EAAE,+BAA+B,EAAE,MAAM,CAAC,KAAK,MAAM;QAC/E,KAAK,EAAE;YACL,OAAO,EAAE,GAAG,CAAC,yBAAyB,KAAK,MAAM;YACjD,QAAQ,EAAE,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACvD,oBAAoB,EAAE,SAAS,CAAC,GAAG,CAAC,uCAAuC,CAAC;YAC5E,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,kCAAkC,CAAC;SACnE;QACD,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAe;QAClF,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAc;KAChF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,CAAC,SAAS,iCAAiC,CACjF,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,oBAAoB,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CACN,6EAA6E;YAC3E,8DAA8D,EAChE,EAAE,KAAK,EAAE,GAAG,CAAC,oBAAoB,EAAE,CACpC,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CACN,kGAAkG,EAClG,EAAE,KAAK,EAAE,GAAG,CAAC,oBAAoB,EAAE,CACpC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,SAAS,yBAAyB,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,CAAC,QAAQ,wCAAwC,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,8GAA8G,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,GAAsB,EAAE,GAAW,EAAE,QAAgB;IAClE,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAiB;IACxC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,KAAK,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,SAAS,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;AAClE,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,mEAAmE;AAEnE,OAAO,EAAE,GAAG,EAAiC,MAAM,aAAa,CAAC;AAmDjE,MAAM,gBAAgB,GAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtE,MAAM,aAAa,GAAsB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAC7D,MAAM,iBAAiB,GAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9D,MAAM,gBAAgB,GAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE/E,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,OAAO;QACL,oBAAoB,EAAE,KAAK,CAAC,GAAG,EAAE,wBAAwB,EAAE,gBAAgB,CAAC;QAC5E,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,EAAE;QACjC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAe;QAClF,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAY;QACxE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,MAAM,CAAC;QACrD,2DAA2D;QAC3D,eAAe,EAAE,KAAK,CAAC,GAAG,EAAE,+BAA+B,EAAE,MAAM,CAAC,KAAK,MAAM;QAC/E,KAAK,EAAE;YACL,OAAO,EAAE,GAAG,CAAC,yBAAyB,KAAK,MAAM;YACjD,QAAQ,EAAE,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACvD,oBAAoB,EAAE,SAAS,CAAC,GAAG,CAAC,uCAAuC,CAAC;YAC5E,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,kCAAkC,CAAC;SACnE;QACD,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAe;QAClF,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAc;KAChF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,CAAC,SAAS,iCAAiC,CACjF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,4BAA4B,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,GAAG,CAAC,oBAAoB,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CACN,6EAA6E;YAC3E,8DAA8D,EAChE,EAAE,KAAK,EAAE,GAAG,CAAC,oBAAoB,EAAE,CACpC,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CACN,kGAAkG,EAClG,EAAE,KAAK,EAAE,GAAG,CAAC,oBAAoB,EAAE,CACpC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,SAAS,yBAAyB,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,CAAC,QAAQ,wCAAwC,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,8GAA8G,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,GAAsB,EAAE,GAAW,EAAE,QAAgB;IAClE,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAiB;IACxC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,KAAK,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,SAAS,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;AAClE,CAAC"}

package/domains/agentexecutions/approve.d.ts

@@ -0,0 +1,9 @@
+export interface SubmitAgentApprovalArgs {
+    readonly executionId: string;
+    readonly toolCallId: string;
+    readonly action: string;
+    readonly comment?: string;
+}
+/** Submit an approval decision; returns the execution in the compact view. */
+export declare function submitAgentApproval(serverAddress: string, token: string, args: SubmitAgentApprovalArgs): Promise<string>;
+//# sourceMappingURL=approve.d.ts.map

package/domains/agentexecutions/approve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.d.ts","sourceRoot":"","sources":["../../../src/domains/agentexecutions/approve.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,8EAA8E;AAC9E,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,MAAM,CAAC,CA0BjB"}

package/domains/agentexecutions/approve.js

@@ -0,0 +1,46 @@
+// Agent-execution approval path: submit a decision for a tool call the
+// execution is waiting on (AgentExecutionCommandController.submitApproval).
+//
+// Pending approvals surface in get_agent_execution's
+// status.pending_approvals[] — there is no org-wide inbox for agent
+// executions (that exists only for workflow human_input tasks, see
+// workflowexecutions/approvals.ts). The response reuses the compact
+// projection: the returned AgentExecution embeds the full message history,
+// which the approval loop doesn't need.
+import { ApprovalAction } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { AgentExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/command_pb";
+import { withClient } from "../client.js";
+import { rpcError } from "../rpcerr.js";
+import { compactExecutionJson, DEFAULT_MESSAGE_LIMIT } from "./fetch.js";
+/**
+ * Model-facing action spelling → proto enum. APPROVE_ALL is deliberately not
+ * exposed: blanket auto-approval is a run-configuration concern, not a
+ * per-decision one.
+ */
+const APPROVAL_ACTIONS = {
+    approve: ApprovalAction.APPROVE,
+    skip: ApprovalAction.SKIP,
+    reject: ApprovalAction.REJECT,
+};
+/** Submit an approval decision; returns the execution in the compact view. */
+export async function submitAgentApproval(serverAddress, token, args) {
+    const action = APPROVAL_ACTIONS[args.action];
+    if (action === undefined) {
+        throw new Error(`unknown action "${args.action}"; valid actions: approve, skip, reject`);
+    }
+    return withClient(AgentExecutionCommandController, serverAddress, token, async (client, callOptions) => {
+        try {
+            const execution = await client.submitApproval({
+                agentExecutionId: args.executionId,
+                toolCallId: args.toolCallId,
+                action,
+                comment: args.comment ?? "",
+            }, callOptions);
+            return compactExecutionJson(execution, DEFAULT_MESSAGE_LIMIT);
+        }
+        catch (err) {
+            throw rpcError(err, `approval for agent execution "${args.executionId}"`);
+        }
+    });
+}
+//# sourceMappingURL=approve.js.map

package/domains/agentexecutions/approve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.js","sourceRoot":"","sources":["../../../src/domains/agentexecutions/approve.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,4EAA4E;AAC5E,EAAE;AACF,qDAAqD;AACrD,oEAAoE;AACpE,mEAAmE;AACnE,oEAAoE;AACpE,2EAA2E;AAC3E,wCAAwC;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAC9F,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAElH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEzE;;;;GAIG;AACH,MAAM,gBAAgB,GAA6C;IACjE,OAAO,EAAE,cAAc,CAAC,OAAO;IAC/B,IAAI,EAAE,cAAc,CAAC,IAAI;IACzB,MAAM,EAAE,cAAc,CAAC,MAAM;CAC9B,CAAC;AASF,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,aAAqB,EACrB,KAAa,EACb,IAA6B;IAE7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,MAAM,yCAAyC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,UAAU,CACf,+BAA+B,EAC/B,aAAa,EACb,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAC3C;gBACE,gBAAgB,EAAE,IAAI,CAAC,WAAW;gBAClC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;aAC5B,EACD,WAAW,CACZ,CAAC;YACF,OAAO,oBAAoB,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,iCAAiC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/domains/agentexecutions/fetch.d.ts

@@ -0,0 +1,28 @@
+import { type AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+export type ExecutionView = "compact" | "full";
+/** Message-tail size when the caller doesn't specify one. */
+export declare const DEFAULT_MESSAGE_LIMIT = 5;
+/** Fetch a single agent execution by ID and shape it for the requested view. */
+export declare function fetchAgentExecution(serverAddress: string, token: string, executionId: string, view: ExecutionView, messageLimit: number): Promise<string>;
+/** The compact projection plus the pre-truncation message count. */
+export interface CompactExecution {
+    readonly totalMessages: number;
+    readonly data: Record<string, unknown>;
+}
+/**
+ * Build the compact projection: full protojson minus the pruned status
+ * fields, with status.messages sliced to the last `messageLimit` entries.
+ * Exposed at the data level so wrappers (cancel_execution's already_terminal
+ * envelope) can compose it without double-nesting.
+ *
+ * Shared by the write tools that return an AgentExecution (approve, cancel):
+ * their responses embed the same potentially-huge status.
+ */
+export declare function compactExecution(execution: AgentExecution, messageLimit: number): CompactExecution;
+/**
+ * The compact view as returned by tools: a wrapper carrying total_messages so
+ * the model can tell when the message tail is a window (and re-request with a
+ * larger message_limit or view=full).
+ */
+export declare function compactExecutionJson(execution: AgentExecution, messageLimit: number): string;
+//# sourceMappingURL=fetch.d.ts.map

package/domains/agentexecutions/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/domains/agentexecutions/fetch.ts"],"names":[],"mappings":"AAWA,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,6DAA6D,CAAC;AAOxH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,CAAC;AAE/C,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAevC,gFAAgF;AAChF,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAED,oEAAoE;AACpE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,GAAG,gBAAgB,CAiBlG;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAO5F"}

package/domains/agentexecutions/fetch.js

@@ -0,0 +1,82 @@
+// Agent-execution read path: the polling primitive behind get_agent_execution.
+//
+// Agent executions have no event-log RPC (unlike workflow executions) — the
+// platform's contract is: poll get and read status.phase, status.messages[],
+// and status.pending_approvals[]. That makes the response shape critical for
+// MCP: a long conversation's full protojson (every message, the resolved
+// context snapshot, the approval ledger, sub-agent transcripts) can dwarf the
+// model's context. The default "compact" view therefore returns a bounded
+// message tail and drops the bulky server-side bookkeeping fields; "full" is
+// the verbatim protojson for when the model genuinely needs everything.
+import { AgentExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { AgentExecutionQueryController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/query_pb";
+import { withClient } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** Message-tail size when the caller doesn't specify one. */
+export const DEFAULT_MESSAGE_LIMIT = 5;
+/**
+ * Bulky status fields pruned from the compact view. These are server-side
+ * bookkeeping (resolved-resource snapshot, append-only approval ledger,
+ * Temporal callback token) and sub-agent transcripts — none of which the
+ * poll loop (phase? messages? approvals?) needs.
+ */
+const COMPACT_PRUNED_STATUS_FIELDS = [
+    "resolved_context",
+    "approval_events",
+    "callback_token",
+    "sub_agent_executions",
+];
+/** Fetch a single agent execution by ID and shape it for the requested view. */
+export async function fetchAgentExecution(serverAddress, token, executionId, view, messageLimit) {
+    if (executionId === "") {
+        throw new Error("execution_id is required");
+    }
+    return withClient(AgentExecutionQueryController, serverAddress, token, async (client, callOptions) => {
+        let execution;
+        try {
+            execution = await client.get({ value: executionId }, callOptions);
+        }
+        catch (err) {
+            throw rpcError(err, `agent execution "${executionId}"`);
+        }
+        return view === "full"
+            ? toProtoJson(AgentExecutionSchema, execution)
+            : compactExecutionJson(execution, messageLimit);
+    });
+}
+/**
+ * Build the compact projection: full protojson minus the pruned status
+ * fields, with status.messages sliced to the last `messageLimit` entries.
+ * Exposed at the data level so wrappers (cancel_execution's already_terminal
+ * envelope) can compose it without double-nesting.
+ *
+ * Shared by the write tools that return an AgentExecution (approve, cancel):
+ * their responses embed the same potentially-huge status.
+ */
+export function compactExecution(execution, messageLimit) {
+    const data = JSON.parse(toProtoJson(AgentExecutionSchema, execution));
+    let totalMessages = 0;
+    const status = data.status;
+    if (status !== undefined) {
+        const messages = Array.isArray(status.messages) ? status.messages : [];
+        totalMessages = messages.length;
+        if (messages.length > messageLimit) {
+            status.messages = messages.slice(-messageLimit);
+        }
+        for (const field of COMPACT_PRUNED_STATUS_FIELDS) {
+            delete status[field];
+        }
+    }
+    return { totalMessages, data };
+}
+/**
+ * The compact view as returned by tools: a wrapper carrying total_messages so
+ * the model can tell when the message tail is a window (and re-request with a
+ * larger message_limit or view=full).
+ */
+export function compactExecutionJson(execution, messageLimit) {
+    const { totalMessages, data } = compactExecution(execution, messageLimit);
+    return JSON.stringify({ view: "compact", total_messages: totalMessages, execution: data }, null, 2);
+}
+//# sourceMappingURL=fetch.js.map

package/domains/agentexecutions/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../../src/domains/agentexecutions/fetch.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AAExE,OAAO,EAAE,oBAAoB,EAAuB,MAAM,6DAA6D,CAAC;AACxH,OAAO,EAAE,6BAA6B,EAAE,MAAM,+DAA+D,CAAC;AAE9G,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAIxC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,4BAA4B,GAAG;IACnC,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,sBAAsB;CACd,CAAC;AAEX,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,aAAqB,EACrB,KAAa,EACb,WAAmB,EACnB,IAAmB,EACnB,YAAoB;IAEpB,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CACf,6BAA6B,EAC7B,aAAa,EACb,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC5B,IAAI,SAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,oBAAoB,WAAW,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,KAAK,MAAM;YACpB,CAAC,CAAC,WAAW,CAAC,oBAAoB,EAAE,SAAS,CAAC;YAC9C,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACpD,CAAC,CACF,CAAC;AACJ,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAyB,EAAE,YAAoB;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAA4B,CAAC;IACjG,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAA6C,CAAC;IAClE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAc,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;QAChC,IAAI,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YACnC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,4BAA4B,EAAE,CAAC;YACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAyB,EAAE,YAAoB;IAClF,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,SAAS,CACnB,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,EACnE,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/domains/agentexecutions/run.d.ts

@@ -0,0 +1,27 @@
+import { type ExecutionValue } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/spec_pb";
+export interface RunAgentArgs {
+    readonly org: string;
+    readonly agent: string;
+    readonly message: string;
+    readonly sessionId?: string;
+    readonly runtimeEnv?: Record<string, string>;
+}
+/**
+ * Start an agent execution: resolve org/slug → agent ID, then create the
+ * execution. Returns the created execution as protojson (small at creation
+ * time — status is empty until the runner picks it up).
+ */
+export declare function runAgent(serverAddress: string, token: string, args: RunAgentArgs): Promise<string>;
+/**
+ * Convert the tool's plain string map to the proto ExecutionValue map. Values
+ * arriving through an MCP tool call have already passed through the model's
+ * context, so they are never secrets by definition — secrets reach executions
+ * through Environments, not through this tool.
+ */
+export declare function toExecutionValues(env: Record<string, string> | undefined): Record<string, ExecutionValue>;
+/**
+ * Unique-enough placeholder name; the backend owns final identity. Mirrors the
+ * CLI's executionName (Go's fmt.Sprintf("execution-%d", UnixMicro())).
+ */
+export declare function executionName(): string;
+//# sourceMappingURL=run.d.ts.map

package/domains/agentexecutions/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/domains/agentexecutions/run.ts"],"names":[],"mappings":"AAoBA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,gEAAgE,CAAC;AAWxE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9C;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,MAAM,CAAC,CAoCjB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GACtC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAMhC;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/domains/agentexecutions/run.js

@@ -0,0 +1,87 @@
+// Agent-execution start path for the run_agent tool.
+//
+// Mirrors the CLI's run stack (client-apps/cli/src/resources/run/create.ts):
+// starting an agent is a single AgentExecutionCommandController.create call —
+// the server bootstraps the session, resolves the agent's default instance
+// (auto-creating if missing), and dispatches the message. The MCP layer only
+// resolves the org/slug reference to the agent ID first, over the same
+// transport (the two-step pattern the delete tools use).
+//
+// The tool is deliberately asynchronous: it returns the created execution
+// (with its aex_* ID) immediately and the run continues in the background.
+// Observation happens through get_agent_execution polling — MCP tools are
+// request/response, so there is no streaming path here by design.
+import { createClient } from "@connectrpc/connect";
+import { create as createMessage } from "@bufbuild/protobuf";
+import { AgentQueryController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/query_pb";
+import { AgentExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { AgentExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/command_pb";
+import { AgentExecutionSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
+import { ExecutionValueSchema, } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/spec_pb";
+import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { withTransport } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** apiVersion stamped on created executions; mirrors the CLI's run stack. */
+const API_VERSION = "agentic.stigmer.ai/v1";
+/**
+ * Start an agent execution: resolve org/slug → agent ID, then create the
+ * execution. Returns the created execution as protojson (small at creation
+ * time — status is empty until the runner picks it up).
+ */
+export async function runAgent(serverAddress, token, args) {
+    const desc = `agent "${args.agent}" in org "${args.org}"`;
+    return withTransport(serverAddress, token, async (transport, callOptions) => {
+        const query = createClient(AgentQueryController, transport);
+        let agentId;
+        try {
+            const agent = await query.getByReference({ org: args.org, kind: ApiResourceKind.agent, slug: args.agent }, callOptions);
+            agentId = agent.metadata?.id ?? "";
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+        const execution = createMessage(AgentExecutionSchema, {
+            apiVersion: API_VERSION,
+            kind: "AgentExecution",
+            metadata: createMessage(ApiResourceMetadataSchema, { name: executionName(), org: args.org }),
+            spec: createMessage(AgentExecutionSpecSchema, {
+                // Empty message means "just run" — the CLI applies the same default.
+                message: args.message === "" ? "execute" : args.message,
+                runtimeEnv: toExecutionValues(args.runtimeEnv),
+                sessionId: args.sessionId ?? "",
+                agentId,
+            }),
+        });
+        const command = createClient(AgentExecutionCommandController, transport);
+        try {
+            const created = await command.create(execution, callOptions);
+            return toProtoJson(AgentExecutionSchema, created);
+        }
+        catch (err) {
+            throw rpcError(err, `execution of ${desc}`);
+        }
+    });
+}
+/**
+ * Convert the tool's plain string map to the proto ExecutionValue map. Values
+ * arriving through an MCP tool call have already passed through the model's
+ * context, so they are never secrets by definition — secrets reach executions
+ * through Environments, not through this tool.
+ */
+export function toExecutionValues(env) {
+    const out = {};
+    for (const [key, value] of Object.entries(env ?? {})) {
+        out[key] = createMessage(ExecutionValueSchema, { value, isSecret: false });
+    }
+    return out;
+}
+/**
+ * Unique-enough placeholder name; the backend owns final identity. Mirrors the
+ * CLI's executionName (Go's fmt.Sprintf("execution-%d", UnixMicro())).
+ */
+export function executionName() {
+    return `execution-${Date.now() * 1000}`;
+}
+//# sourceMappingURL=run.js.map

package/domains/agentexecutions/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/domains/agentexecutions/run.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,uEAAuE;AACvE,yDAAyD;AACzD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,kEAAkE;AAElE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AACxG,OAAO,EACL,oBAAoB,GAErB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,6EAA6E;AAC7E,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAU5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,aAAqB,EACrB,KAAa,EACb,IAAkB;IAElB,MAAM,IAAI,GAAG,UAAU,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,GAAG,GAAG,CAAC;IAC1D,OAAO,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,CACtC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EAChE,WAAW,CACZ,CAAC;YACF,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,SAAS,GAAG,aAAa,CAAC,oBAAoB,EAAE;YACpD,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,aAAa,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5F,IAAI,EAAE,aAAa,CAAC,wBAAwB,EAAE;gBAC5C,qEAAqE;gBACrE,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;gBACvD,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC9C,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;gBAC/B,OAAO;aACR,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,YAAY,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7D,OAAO,WAAW,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAuC;IAEvC,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,aAAa,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;AAC1C,CAAC"}

package/domains/agentexecutions/tools.d.ts

@@ -0,0 +1,5 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type BackendTarget } from "../client.js";
+/** Register every AgentExecution-domain tool; returns the registered tool names. */
+export declare function registerAgentExecutionTools(server: McpServer, target: BackendTarget): string[];
+//# sourceMappingURL=tools.d.ts.map

package/domains/agentexecutions/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/agentexecutions/tools.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAMhE,oFAAoF;AACpF,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAqH9F"}

package/domains/agentexecutions/tools.js

@@ -0,0 +1,97 @@
+// MCP tools for the AgentExecution domain: start a run, poll it, and answer
+// its approval requests. Together with cancel_execution (executions domain)
+// these close the agent iteration loop: author with apply_agent, run with
+// run_agent, observe with get_agent_execution, steer with
+// submit_agent_execution_approval.
+//
+// The execution model is asynchronous by design: run_agent returns as soon as
+// the backend accepts the execution; progress is observed by polling. Agent
+// executions have no event-log RPC, so get_agent_execution IS the poll loop —
+// which is why it defaults to the compact view (see fetch.ts).
+import { z } from "zod";
+import { resolveToken } from "../client.js";
+import { textOrError } from "../toolresult.js";
+import { submitAgentApproval } from "./approve.js";
+import { DEFAULT_MESSAGE_LIMIT, fetchAgentExecution } from "./fetch.js";
+import { runAgent } from "./run.js";
+/** Register every AgentExecution-domain tool; returns the registered tool names. */
+export function registerAgentExecutionTools(server, target) {
+    server.registerTool("run_agent", {
+        description: "Start an agent execution (asynchronous). Returns immediately with the created execution " +
+            "(aex_* ID) while the run continues in the background — poll get_agent_execution to observe " +
+            "progress, pending approvals, and the final result. Omit session_id to start a fresh " +
+            "conversation; pass one to send a follow-up message into an existing session.",
+        inputSchema: {
+            org: z.string().describe("Organization slug that owns the agent (e.g. stigmer)."),
+            agent: z
+                .string()
+                .describe("Agent slug — the unique identifier within the org (e.g. code-reviewer)."),
+            message: z.string().describe("The instruction or message for the agent to act on."),
+            session_id: z
+                .string()
+                .optional()
+                .describe("Existing session ID to continue a conversation (from a previous execution's " +
+                "spec.session_id). Omit to start a new session."),
+            runtime_env: z
+                .record(z.string())
+                .optional()
+                .describe("Non-secret runtime environment values (name → value) injected into the run. " +
+                "Secrets must come from Environments attached to the agent, never through this tool."),
+        },
+    }, (args, extra) => textOrError(() => runAgent(target.serverAddress, resolveToken(extra, target.apiKey), {
+        org: args.org,
+        agent: args.agent,
+        message: args.message,
+        sessionId: args.session_id,
+        runtimeEnv: args.runtime_env,
+    })));
+    server.registerTool("get_agent_execution", {
+        description: "Get an agent execution's status: phase, messages, pending approvals, errors, timing. " +
+            "Agent executions have no event log — poll this tool to track a run started with run_agent " +
+            "(terminal phases: completed, failed, cancelled, terminated). The default compact view " +
+            "returns the last few messages and omits bulky bookkeeping fields (resolved context, " +
+            "approval ledger, sub-agent transcripts); total_messages tells you when the tail is a " +
+            "window. Use view=full for the complete record.",
+        inputSchema: {
+            execution_id: z.string().describe("Agent execution ID (aex_* format)."),
+            view: z
+                .enum(["compact", "full"])
+                .optional()
+                .describe("Response shape: compact (default, bounded message tail) or full protojson."),
+            message_limit: z
+                .number()
+                .int()
+                .min(1)
+                .optional()
+                .describe(`Compact view only: number of trailing messages to return (default ${DEFAULT_MESSAGE_LIMIT}).`),
+        },
+    }, (args, extra) => textOrError(() => fetchAgentExecution(target.serverAddress, resolveToken(extra, target.apiKey), args.execution_id, args.view ?? "compact", args.message_limit ?? DEFAULT_MESSAGE_LIMIT)));
+    server.registerTool("submit_agent_execution_approval", {
+        description: "Approve, skip, or reject a tool call an agent execution is waiting on (phase " +
+            "waiting-for-approval). Find pending requests in get_agent_execution's " +
+            "status.pending_approvals — tool_call_id must match exactly. reject denies the single " +
+            "tool call and feeds your comment back to the agent, which then continues; to stop the " +
+            "whole run use cancel_execution instead.",
+        inputSchema: {
+            execution_id: z.string().describe("Agent execution ID (aex_* format)."),
+            tool_call_id: z
+                .string()
+                .describe("Tool call awaiting the decision (status.pending_approvals[].tool_call_id)."),
+            action: z
+                .enum(["approve", "skip", "reject"])
+                .describe("approve: execute the tool. skip: don't execute, agent proceeds without it. " +
+                "reject: don't execute, agent is told why (see comment) and adapts."),
+            comment: z
+                .string()
+                .optional()
+                .describe("Reason for the decision; on reject it is fed back to the agent."),
+        },
+    }, (args, extra) => textOrError(() => submitAgentApproval(target.serverAddress, resolveToken(extra, target.apiKey), {
+        executionId: args.execution_id,
+        toolCallId: args.tool_call_id,
+        action: args.action,
+        comment: args.comment,
+    })));
+    return ["run_agent", "get_agent_execution", "submit_agent_execution_approval"];
+}
+//# sourceMappingURL=tools.js.map

package/domains/agentexecutions/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/domains/agentexecutions/tools.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,0DAA0D;AAC1D,mCAAmC;AACnC,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,+DAA+D;AAG/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CAAC,MAAiB,EAAE,MAAqB;IAClF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,WAAW,EACT,0FAA0F;YAC1F,6FAA6F;YAC7F,sFAAsF;YACtF,8EAA8E;QAChF,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;YACjF,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,CAAC,yEAAyE,CAAC;YACtF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;YACnF,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,8EAA8E;gBAC5E,gDAAgD,CACnD;YACH,WAAW,EAAE,CAAC;iBACX,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBAClB,QAAQ,EAAE;iBACV,QAAQ,CACP,8EAA8E;gBAC5E,qFAAqF,CACxF;SACJ;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QACjE,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,UAAU,EAAE,IAAI,CAAC,WAAW;KAC7B,CAAC,CACH,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,WAAW,EACT,uFAAuF;YACvF,4FAA4F;YAC5F,wFAAwF;YACxF,sFAAsF;YACtF,uFAAuF;YACvF,gDAAgD;QAClD,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YACvE,IAAI,EAAE,CAAC;iBACJ,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;iBACzB,QAAQ,EAAE;iBACV,QAAQ,CAAC,4EAA4E,CAAC;YACzF,aAAa,EAAE,CAAC;iBACb,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,qEAAqE,qBAAqB,IAAI,CAAC;SAC5G;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,mBAAmB,CACjB,MAAM,CAAC,aAAa,EACpB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAClC,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,IAAI,IAAI,SAAS,EACtB,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAC5C,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iCAAiC,EACjC;QACE,WAAW,EACT,+EAA+E;YAC/E,wEAAwE;YACxE,uFAAuF;YACvF,wFAAwF;YACxF,yCAAyC;QAC3C,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YACvE,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,QAAQ,CAAC,4EAA4E,CAAC;YACzF,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;iBACnC,QAAQ,CACP,6EAA6E;gBAC3E,oEAAoE,CACvE;YACH,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,iEAAiE,CAAC;SAC/E;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,mBAAmB,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QAC5E,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,UAAU,EAAE,IAAI,CAAC,YAAY;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CACH,CACJ,CAAC;IAEF,OAAO,CAAC,WAAW,EAAE,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;AACjF,CAAC"}

package/domains/datastores/apply.d.ts

@@ -0,0 +1,4 @@
+import { type DatastoreInput } from "../../gen/datastore.js";
+/** Create or update a datastore, returning the persisted resource as protojson. */
+export declare function applyDatastore(serverAddress: string, token: string, input: DatastoreInput): Promise<string>;
+//# sourceMappingURL=apply.d.ts.map

package/domains/datastores/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/domains/datastores/apply.ts"],"names":[],"mappings":"AAWA,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAKpF,mFAAmF;AACnF,wBAAsB,cAAc,CAClC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,MAAM,CAAC,CAWjB"}

package/domains/datastores/apply.js

@@ -0,0 +1,28 @@
+// Datastore apply path: create-or-update via DatastoreCommandController.apply.
+// The flat MCP input is projected into a fully-formed Datastore proto by the
+// generated datastoreInputToProto bridge (codegen, src/gen/datastore.ts).
+//
+// The manifest is authoritative for structure, never for data: schema changes
+// sync on apply (the server enforces its additive-plus change matrix), and
+// records enter exclusively through the record tools.
+import { DatastoreSchema } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/api_pb";
+import { DatastoreCommandController } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/command_pb";
+import { datastoreInputToProto } from "../../gen/datastore.js";
+import { withClient } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** Create or update a datastore, returning the persisted resource as protojson. */
+export async function applyDatastore(serverAddress, token, input) {
+    const datastore = datastoreInputToProto(input);
+    const desc = `datastore "${datastore.metadata?.slug ?? ""}" in org "${datastore.metadata?.org ?? ""}"`;
+    return withClient(DatastoreCommandController, serverAddress, token, async (client, callOptions) => {
+        try {
+            const result = await client.apply(datastore, callOptions);
+            return toProtoJson(DatastoreSchema, result);
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+    });
+}
+//# sourceMappingURL=apply.js.map

package/domains/datastores/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../../src/domains/datastores/apply.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,6EAA6E;AAC7E,0EAA0E;AAC1E,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,sDAAsD;AAEtD,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AACzF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AAExG,OAAO,EAAE,qBAAqB,EAAuB,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,aAAqB,EACrB,KAAa,EACb,KAAqB;IAErB,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,cAAc,SAAS,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,aAAa,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC;IACvG,OAAO,UAAU,CAAC,0BAA0B,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAChG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1D,OAAO,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/domains/datastores/delete.d.ts

@@ -0,0 +1,3 @@
+/** Delete a datastore by org and slug, returning the deleted resource as protojson. */
+export declare function deleteDatastore(serverAddress: string, token: string, org: string, slug: string): Promise<string>;
+//# sourceMappingURL=delete.d.ts.map

package/domains/datastores/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/domains/datastores/delete.ts"],"names":[],"mappings":"AAiBA,uFAAuF;AACvF,wBAAsB,eAAe,CACnC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAuBjB"}

package/domains/datastores/delete.js

@@ -0,0 +1,38 @@
+// Datastore delete path: resolve org/slug → id via the Query controller, then
+// delete via the Command controller, both over a single shared transport. Like
+// McpServer, the command controller takes ApiResourceDeleteInput{resource_id}.
+//
+// This is the only path that destroys collections — record tools can delete
+// individual records but never structure.
+import { createClient } from "@connectrpc/connect";
+import { DatastoreSchema } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/api_pb";
+import { DatastoreCommandController } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/command_pb";
+import { DatastoreQueryController } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/query_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { withTransport } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** Delete a datastore by org and slug, returning the deleted resource as protojson. */
+export async function deleteDatastore(serverAddress, token, org, slug) {
+    const desc = `datastore "${slug}" in org "${org}"`;
+    return withTransport(serverAddress, token, async (transport, callOptions) => {
+        const query = createClient(DatastoreQueryController, transport);
+        let id;
+        try {
+            const datastore = await query.getByReference({ org, kind: ApiResourceKind.datastore, slug }, callOptions);
+            id = datastore.metadata?.id ?? "";
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+        const command = createClient(DatastoreCommandController, transport);
+        try {
+            const deleted = await command.delete({ resourceId: id }, callOptions);
+            return toProtoJson(DatastoreSchema, deleted);
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+    });
+}
+//# sourceMappingURL=delete.js.map

package/domains/datastores/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../src/domains/datastores/delete.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,EAAE;AACF,4EAA4E;AAC5E,0CAA0C;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AACzF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,aAAqB,EACrB,KAAa,EACb,GAAW,EACX,IAAY;IAEZ,MAAM,IAAI,GAAG,cAAc,IAAI,aAAa,GAAG,GAAG,CAAC;IACnD,OAAO,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAC1C,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,EAC9C,WAAW,CACZ,CAAC;YACF,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;YACtE,OAAO,WAAW,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/domains/datastores/fetch.d.ts

@@ -0,0 +1,3 @@
+/** Retrieve a datastore by org and slug, returning its protojson representation. */
+export declare function fetchDatastore(serverAddress: string, token: string, org: string, slug: string): Promise<string>;
+//# sourceMappingURL=fetch.d.ts.map

package/domains/datastores/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/domains/datastores/fetch.ts"],"names":[],"mappings":"AAaA,oFAAoF;AACpF,wBAAsB,cAAc,CAClC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAYjB"}