@stigmer/mcp-server 3.3.0 → 3.4.1

package/domains/datastores/fetch.js

@@ -0,0 +1,23 @@
+// Datastore-definition read path: the single RPC both the get_datastore tool
+// and the datastore resource template delegate to. This is the *structure*
+// surface (collections, constraints, grants); living records are served by the
+// record tools (records/), whose agent-facing summary is describe_datastore.
+import { DatastoreSchema } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/api_pb";
+import { DatastoreQueryController } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/query_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { withClient } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** Retrieve a datastore by org and slug, returning its protojson representation. */
+export async function fetchDatastore(serverAddress, token, org, slug) {
+    return withClient(DatastoreQueryController, serverAddress, token, async (client, callOptions) => {
+        try {
+            const datastore = await client.getByReference({ org, kind: ApiResourceKind.datastore, slug }, callOptions);
+            return toProtoJson(DatastoreSchema, datastore);
+        }
+        catch (err) {
+            throw rpcError(err, `datastore "${slug}" in org "${org}"`);
+        }
+    });
+}
+//# sourceMappingURL=fetch.js.map

package/domains/datastores/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../../src/domains/datastores/fetch.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AACzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,aAAqB,EACrB,KAAa,EACb,GAAW,EACX,IAAY;IAEZ,OAAO,UAAU,CAAC,wBAAwB,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC9F,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAC3C,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,EAC9C,WAAW,CACZ,CAAC;YACF,OAAO,WAAW,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,cAAc,IAAI,aAAa,GAAG,GAAG,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/domains/datastores/resources.d.ts

@@ -0,0 +1,5 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { BackendTarget } from "../client.js";
+/** Register the datastore resource template; returns the registered resource names. */
+export declare function registerDatastoreResources(server: McpServer, target: BackendTarget): string[];
+//# sourceMappingURL=resources.d.ts.map

package/domains/datastores/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../src/domains/datastores/resources.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAIlD,uFAAuF;AACvF,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAW7F"}

package/domains/datastores/resources.js

@@ -0,0 +1,16 @@
+// Datastore resource template (stigmer://datastores/{org}/{slug}).
+import { registerResource } from "../resourcehandler.js";
+import { fetchDatastore } from "./fetch.js";
+/** Register the datastore resource template; returns the registered resource names. */
+export function registerDatastoreResources(server, target) {
+    registerResource(server, target, {
+        name: "stigmer_datastore",
+        title: "Stigmer Datastore",
+        description: "Full definition of a Stigmer datastore (collections, constraints, grants), " +
+            "identified by organization and slug.",
+        template: "stigmer://datastores/{org}/{slug}",
+        fetch: fetchDatastore,
+    });
+    return ["stigmer_datastore"];
+}
+//# sourceMappingURL=resources.js.map

package/domains/datastores/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../src/domains/datastores/resources.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAKnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,uFAAuF;AACvF,MAAM,UAAU,0BAA0B,CAAC,MAAiB,EAAE,MAAqB;IACjF,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE;QAC/B,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,6EAA6E;YAC7E,sCAAsC;QACxC,QAAQ,EAAE,mCAAmC;QAC7C,KAAK,EAAE,cAAc;KACtB,CAAC,CAAC;IACH,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAC/B,CAAC"}

package/domains/datastores/tools.d.ts

@@ -0,0 +1,5 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type BackendTarget } from "../client.js";
+/** Register every Datastore-domain tool; returns the registered tool names. */
+export declare function registerDatastoreTools(server: McpServer, target: BackendTarget): string[];
+//# sourceMappingURL=tools.d.ts.map

package/domains/datastores/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/datastores/tools.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAMhE,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CA0DzF"}

package/domains/datastores/tools.js

@@ -0,0 +1,46 @@
+// MCP tools for the Datastore *definition* domain — the structure surface
+// (collections, fields, constraints, roles, grants). The record tools
+// (records/tools.ts) operate on the living data inside these structures;
+// before this domain existed, an assistant could insert records into a
+// datastore it had no way to create.
+import { z } from "zod";
+import { DatastoreInputShape } from "../../gen/datastore.js";
+import { resolveToken } from "../client.js";
+import { textOrError } from "../toolresult.js";
+import { applyDatastore } from "./apply.js";
+import { deleteDatastore } from "./delete.js";
+import { fetchDatastore } from "./fetch.js";
+/** Register every Datastore-domain tool; returns the registered tool names. */
+export function registerDatastoreTools(server, target) {
+    server.registerTool("get_datastore", {
+        description: "Get the full definition of a Stigmer datastore by its org and slug: collections, field " +
+            "declarations, constraints, roles, and grants. For the record-facing view of the same " +
+            "structure (allowed verbs, readable fields), use describe_datastore; for the data " +
+            "itself, use the record tools.",
+        inputSchema: {
+            org: z.string().describe("Organization slug that owns the datastore (e.g. stigmer)."),
+            slug: z
+                .string()
+                .describe("Datastore slug — the unique identifier within the org (e.g. clinic-bookings)."),
+        },
+    }, (args, extra) => textOrError(() => fetchDatastore(target.serverAddress, resolveToken(extra, target.apiKey), args.org, args.slug)));
+    server.registerTool("apply_datastore", {
+        description: "Create or update a Stigmer datastore definition (idempotent). The manifest is " +
+            "authoritative for structure only — schema changes sync on apply (the server enforces " +
+            "its additive-plus change rules), and records are never touched; use the record tools " +
+            "to manage data.",
+        inputSchema: DatastoreInputShape,
+    }, (args, extra) => textOrError(() => applyDatastore(target.serverAddress, resolveToken(extra, target.apiKey), args)));
+    server.registerTool("delete_datastore", {
+        description: "Delete a Stigmer datastore by its org and slug, destroying its collections and all " +
+            "records in them. This is irreversible. Returns the deleted datastore definition.",
+        inputSchema: {
+            org: z.string().describe("Organization slug that owns the datastore (e.g. stigmer)."),
+            slug: z
+                .string()
+                .describe("Datastore slug — the unique identifier within the org (e.g. clinic-bookings)."),
+        },
+    }, (args, extra) => textOrError(() => deleteDatastore(target.serverAddress, resolveToken(extra, target.apiKey), args.org, args.slug)));
+    return ["get_datastore", "apply_datastore", "delete_datastore"];
+}
+//# sourceMappingURL=tools.js.map

package/domains/datastores/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/domains/datastores/tools.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,qCAAqC;AAGrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,MAAiB,EAAE,MAAqB;IAC7E,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EACT,yFAAyF;YACzF,uFAAuF;YACvF,mFAAmF;YACnF,+BAA+B;QACjC,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;YACrF,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,+EAA+E,CAAC;SAC7F;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAC9F,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EACT,gFAAgF;YAChF,uFAAuF;YACvF,uFAAuF;YACvF,iBAAiB;QACnB,WAAW,EAAE,mBAAmB;KACjC,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAC/E,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,WAAW,EACT,qFAAqF;YACrF,kFAAkF;QACpF,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;YACrF,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,+EAA+E,CAAC;SAC7F;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,eAAe,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAC/F,CACJ,CAAC;IAEF,OAAO,CAAC,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;AAClE,CAAC"}

package/domains/environments/apply.d.ts

@@ -0,0 +1,4 @@
+import { type EnvironmentInput } from "../../gen/environment.js";
+/** Create or update an environment, returning the persisted resource as protojson. */
+export declare function applyEnvironment(serverAddress: string, token: string, input: EnvironmentInput): Promise<string>;
+//# sourceMappingURL=apply.d.ts.map

package/domains/environments/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/domains/environments/apply.ts"],"names":[],"mappings":"AAaA,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAK1F,sFAAsF;AACtF,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,CAgBjB"}

package/domains/environments/apply.js

@@ -0,0 +1,30 @@
+// Environment apply path: create-or-update via EnvironmentCommandController.apply.
+// The flat MCP input is projected into a fully-formed Environment proto by the
+// generated environmentInputToProto bridge (codegen, src/gen/environment.ts).
+//
+// Secret round-trip contract: a get → edit → apply loop is safe even when
+// secrets are present. The server redacts secret values to ***REDACTED*** on
+// read, and its update pipeline treats an echoed marker as "preserve the
+// existing secret" — so callers only ever send real secret values when
+// setting or rotating them.
+import { EnvironmentSchema } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/api_pb";
+import { EnvironmentCommandController } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/command_pb";
+import { environmentInputToProto } from "../../gen/environment.js";
+import { withClient } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** Create or update an environment, returning the persisted resource as protojson. */
+export async function applyEnvironment(serverAddress, token, input) {
+    const environment = environmentInputToProto(input);
+    const desc = `environment "${environment.metadata?.slug ?? ""}" in org "${environment.metadata?.org ?? ""}"`;
+    return withClient(EnvironmentCommandController, serverAddress, token, async (client, callOptions) => {
+        try {
+            const result = await client.apply(environment, callOptions);
+            return toProtoJson(EnvironmentSchema, result);
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+    });
+}
+//# sourceMappingURL=apply.js.map

package/domains/environments/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../../src/domains/environments/apply.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,+EAA+E;AAC/E,8EAA8E;AAC9E,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,uEAAuE;AACvE,4BAA4B;AAE5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,8DAA8D,CAAC;AAE5G,OAAO,EAAE,uBAAuB,EAAyB,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,KAAa,EACb,KAAuB;IAEvB,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,gBAAgB,WAAW,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,aAAa,WAAW,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC;IAC7G,OAAO,UAAU,CACf,4BAA4B,EAC5B,aAAa,EACb,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC5D,OAAO,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/domains/environments/delete.d.ts

@@ -0,0 +1,3 @@
+/** Delete an environment by org and slug, returning the deleted resource as protojson. */
+export declare function deleteEnvironment(serverAddress: string, token: string, org: string, slug: string): Promise<string>;
+//# sourceMappingURL=delete.d.ts.map

package/domains/environments/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/domains/environments/delete.ts"],"names":[],"mappings":"AAeA,0FAA0F;AAC1F,wBAAsB,iBAAiB,CACrC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAuBjB"}

package/domains/environments/delete.js

@@ -0,0 +1,36 @@
+// Environment delete path: resolve org/slug → id via the Query controller,
+// then delete via the Command controller, both over a single shared transport.
+// Like McpServer, the command controller takes the generic
+// ApiResourceDeleteInput{resource_id}.
+import { createClient } from "@connectrpc/connect";
+import { EnvironmentSchema } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/api_pb";
+import { EnvironmentCommandController } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/command_pb";
+import { EnvironmentQueryController } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/query_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { withTransport } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/** Delete an environment by org and slug, returning the deleted resource as protojson. */
+export async function deleteEnvironment(serverAddress, token, org, slug) {
+    const desc = `environment "${slug}" in org "${org}"`;
+    return withTransport(serverAddress, token, async (transport, callOptions) => {
+        const query = createClient(EnvironmentQueryController, transport);
+        let id;
+        try {
+            const environment = await query.getByReference({ org, kind: ApiResourceKind.environment, slug }, callOptions);
+            id = environment.metadata?.id ?? "";
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+        const command = createClient(EnvironmentCommandController, transport);
+        try {
+            const deleted = await command.delete({ resourceId: id }, callOptions);
+            return toProtoJson(EnvironmentSchema, deleted);
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+    });
+}
+//# sourceMappingURL=delete.js.map

package/domains/environments/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../src/domains/environments/delete.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,2DAA2D;AAC3D,uCAAuC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,8DAA8D,CAAC;AAC5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAAqB,EACrB,KAAa,EACb,GAAW,EACX,IAAY;IAEZ,MAAM,IAAI,GAAG,gBAAgB,IAAI,aAAa,GAAG,GAAG,CAAC;IACrD,OAAO,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,cAAc,CAC5C,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,EAAE,IAAI,EAAE,EAChD,WAAW,CACZ,CAAC;YACF,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,4BAA4B,EAAE,SAAS,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;YACtE,OAAO,WAAW,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/domains/environments/fetch.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Retrieve an environment by org and slug, returning its protojson
+ * representation (secret values arrive already redacted by the server).
+ */
+export declare function fetchEnvironment(serverAddress: string, token: string, org: string, slug: string): Promise<string>;
+//# sourceMappingURL=fetch.d.ts.map

package/domains/environments/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/domains/environments/fetch.ts"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAYjB"}

package/domains/environments/fetch.js

@@ -0,0 +1,30 @@
+// Environment read path: the single RPC both the get_environment tool and the
+// environment resource template delegate to.
+//
+// Secret handling happens entirely server-side: the response pipeline replaces
+// every is_secret value with the ***REDACTED*** sentinel before it leaves the
+// server (backend environment domain, preserve_redacted_secrets.go), so this
+// layer adds no redaction logic of its own — the server is the single
+// enforcement point.
+import { EnvironmentSchema } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/api_pb";
+import { EnvironmentQueryController } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/query_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { withClient } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+/**
+ * Retrieve an environment by org and slug, returning its protojson
+ * representation (secret values arrive already redacted by the server).
+ */
+export async function fetchEnvironment(serverAddress, token, org, slug) {
+    return withClient(EnvironmentQueryController, serverAddress, token, async (client, callOptions) => {
+        try {
+            const environment = await client.getByReference({ org, kind: ApiResourceKind.environment, slug }, callOptions);
+            return toProtoJson(EnvironmentSchema, environment);
+        }
+        catch (err) {
+            throw rpcError(err, `environment "${slug}" in org "${org}"`);
+        }
+    });
+}
+//# sourceMappingURL=fetch.js.map

package/domains/environments/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../../src/domains/environments/fetch.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6CAA6C;AAC7C,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,sEAAsE;AACtE,qBAAqB;AAErB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,KAAa,EACb,GAAW,EACX,IAAY;IAEZ,OAAO,UAAU,CAAC,0BAA0B,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;QAChG,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,cAAc,CAC7C,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,EAAE,IAAI,EAAE,EAChD,WAAW,CACZ,CAAC;YACF,OAAO,WAAW,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,gBAAgB,IAAI,aAAa,GAAG,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/domains/environments/resources.d.ts

@@ -0,0 +1,5 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { BackendTarget } from "../client.js";
+/** Register the environment resource template; returns the registered resource names. */
+export declare function registerEnvironmentResources(server: McpServer, target: BackendTarget): string[];
+//# sourceMappingURL=resources.d.ts.map

package/domains/environments/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../src/domains/environments/resources.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAIlD,yFAAyF;AACzF,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAW/F"}

package/domains/environments/resources.js

@@ -0,0 +1,16 @@
+// Environment resource template (stigmer://environments/{org}/{slug}).
+import { registerResource } from "../resourcehandler.js";
+import { fetchEnvironment } from "./fetch.js";
+/** Register the environment resource template; returns the registered resource names. */
+export function registerEnvironmentResources(server, target) {
+    registerResource(server, target, {
+        name: "stigmer_environment",
+        title: "Stigmer Environment",
+        description: "Full definition of a Stigmer environment, identified by organization and slug. " +
+            "Secret values are redacted.",
+        template: "stigmer://environments/{org}/{slug}",
+        fetch: fetchEnvironment,
+    });
+    return ["stigmer_environment"];
+}
+//# sourceMappingURL=resources.js.map

package/domains/environments/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../src/domains/environments/resources.ts"],"names":[],"mappings":"AAAA,uEAAuE;AAKvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,yFAAyF;AACzF,MAAM,UAAU,4BAA4B,CAAC,MAAiB,EAAE,MAAqB;IACnF,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE;QAC/B,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,iFAAiF;YACjF,6BAA6B;QAC/B,QAAQ,EAAE,qCAAqC;QAC/C,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAC;IACH,OAAO,CAAC,qBAAqB,CAAC,CAAC;AACjC,CAAC"}

package/domains/environments/tools.d.ts

@@ -0,0 +1,5 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type BackendTarget } from "../client.js";
+/** Register every Environment-domain tool; returns the registered tool names. */
+export declare function registerEnvironmentTools(server: McpServer, target: BackendTarget): string[];
+//# sourceMappingURL=tools.d.ts.map

package/domains/environments/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/environments/tools.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAMhE,iFAAiF;AACjF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CA0D3F"}

package/domains/environments/tools.js

@@ -0,0 +1,51 @@
+// MCP tools for the Environment domain. Environments hold the configuration
+// and secrets that agents, workflows, and MCP servers resolve at runtime —
+// without these tools, an assistant authoring an agent hits a dead end the
+// moment env config is involved.
+//
+// The secret contract every description teaches: reads return secret values
+// redacted to ***REDACTED*** (server-enforced); an apply that echoes the
+// marker back preserves the existing secret, so get → edit → apply is always
+// safe. Secret values are only ever sent when setting or rotating them, and
+// they can never be read back through MCP.
+import { z } from "zod";
+import { EnvironmentInputShape } from "../../gen/environment.js";
+import { resolveToken } from "../client.js";
+import { textOrError } from "../toolresult.js";
+import { applyEnvironment } from "./apply.js";
+import { deleteEnvironment } from "./delete.js";
+import { fetchEnvironment } from "./fetch.js";
+/** Register every Environment-domain tool; returns the registered tool names. */
+export function registerEnvironmentTools(server, target) {
+    server.registerTool("get_environment", {
+        description: "Get full details of a Stigmer environment by its org and slug, including its variable " +
+            "declarations. Secret values are redacted to ***REDACTED*** — they can never be read " +
+            "back through this tool.",
+        inputSchema: {
+            org: z.string().describe("Organization slug that owns the environment (e.g. stigmer)."),
+            slug: z
+                .string()
+                .describe("Environment slug — the unique identifier within the org (e.g. github-creds)."),
+        },
+    }, (args, extra) => textOrError(() => fetchEnvironment(target.serverAddress, resolveToken(extra, target.apiKey), args.org, args.slug)));
+    server.registerTool("apply_environment", {
+        description: "Create or update a Stigmer environment (idempotent). The spec is applied in full, so " +
+            "include every variable the environment should keep. When updating, secret values read " +
+            "back as ***REDACTED*** — echoing that marker preserves the existing secret, so a " +
+            "get → edit → apply round-trip never destroys secrets; send a real value only to set " +
+            "or rotate one.",
+        inputSchema: EnvironmentInputShape,
+    }, (args, extra) => textOrError(() => applyEnvironment(target.serverAddress, resolveToken(extra, target.apiKey), args)));
+    server.registerTool("delete_environment", {
+        description: "Delete a Stigmer environment by its org and slug. Returns the deleted environment. " +
+            "Agents and workflows referencing it will fail to resolve their variables at run time.",
+        inputSchema: {
+            org: z.string().describe("Organization slug that owns the environment (e.g. stigmer)."),
+            slug: z
+                .string()
+                .describe("Environment slug — the unique identifier within the org (e.g. github-creds)."),
+        },
+    }, (args, extra) => textOrError(() => deleteEnvironment(target.serverAddress, resolveToken(extra, target.apiKey), args.org, args.slug)));
+    return ["get_environment", "apply_environment", "delete_environment"];
+}
+//# sourceMappingURL=tools.js.map

package/domains/environments/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/domains/environments/tools.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,iCAAiC;AACjC,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,4EAA4E;AAC5E,2CAA2C;AAG3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,iFAAiF;AACjF,MAAM,UAAU,wBAAwB,CAAC,MAAiB,EAAE,MAAqB;IAC/E,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EACT,wFAAwF;YACxF,sFAAsF;YACtF,yBAAyB;QAC3B,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YACvF,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,8EAA8E,CAAC;SAC5F;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAChG,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,WAAW,EACT,uFAAuF;YACvF,wFAAwF;YACxF,mFAAmF;YACnF,sFAAsF;YACtF,gBAAgB;QAClB,WAAW,EAAE,qBAAqB;KACnC,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CACjF,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,WAAW,EACT,qFAAqF;YACrF,uFAAuF;QACzF,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YACvF,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,8EAA8E,CAAC;SAC5F;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CACjG,CACJ,CAAC;IAEF,OAAO,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;AACxE,CAAC"}

package/domains/executions/cancel.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Cancel an execution of either kind. Returns a wrapper documenting whether a
+ * cancel was actually issued: `{"already_terminal": bool, "execution": …}`.
+ * Agent executions are returned in the compact projection (their status embeds
+ * the full message history); workflow executions as plain protojson, matching
+ * get_workflow_execution.
+ */
+export declare function cancelExecution(serverAddress: string, token: string, executionId: string, reason: string): Promise<string>;
+//# sourceMappingURL=cancel.d.ts.map

package/domains/executions/cancel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel.d.ts","sourceRoot":"","sources":["../../../src/domains/executions/cancel.ts"],"names":[],"mappings":"AA+DA;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAIjB"}

package/domains/executions/cancel.js

@@ -0,0 +1,114 @@
+// Cross-kind execution cancellation for the cancel_execution tool.
+//
+// Executions are the one place the MCP surface routes on ID prefix rather
+// than a kind argument: agent (aex_*) and workflow (wex_*) executions live on
+// dedicated controllers but cancel with identical arguments, so one tool
+// serves both — mirroring the CLI's routing seam
+// (client-apps/cli/src/resources/execution.ts), including its cancel
+// semantics: read the execution first and short-circuit with
+// "already terminal" instead of issuing a futile cancel, so the
+// success/no-op distinction comes from authoritative state.
+import { createClient } from "@connectrpc/connect";
+import { AgentExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/command_pb";
+import { ExecutionPhase as AgentExecutionPhase } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { AgentExecutionQueryController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/query_pb";
+import { WorkflowExecutionSchema, } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
+import { WorkflowExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/command_pb";
+import { ExecutionPhase as WorkflowExecutionPhase } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/enum_pb";
+import { WorkflowExecutionQueryController } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/query_pb";
+import { compactExecution, DEFAULT_MESSAGE_LIMIT } from "../agentexecutions/fetch.js";
+import { withTransport } from "../client.js";
+import { toProtoJson } from "../marshal.js";
+import { rpcError } from "../rpcerr.js";
+// Terminal phases per kind. The two ExecutionPhase enums live in different
+// proto packages with different numeric values (agent TERMINATED is 8,
+// workflow TERMINATED is 6), so these are deliberately separate sets.
+const TERMINAL_AGENT_PHASES = new Set([
+    AgentExecutionPhase.EXECUTION_COMPLETED,
+    AgentExecutionPhase.EXECUTION_FAILED,
+    AgentExecutionPhase.EXECUTION_CANCELLED,
+    AgentExecutionPhase.EXECUTION_TERMINATED,
+]);
+const TERMINAL_WORKFLOW_PHASES = new Set([
+    WorkflowExecutionPhase.EXECUTION_COMPLETED,
+    WorkflowExecutionPhase.EXECUTION_FAILED,
+    WorkflowExecutionPhase.EXECUTION_CANCELLED,
+    WorkflowExecutionPhase.EXECUTION_TERMINATED,
+]);
+/**
+ * Resolve an execution ID to its controller family by prefix. Matching is
+ * case-sensitive and accepts both separators the backend does ("_" canonical,
+ * "-" legacy), mirroring the CLI's resolveExecutionType.
+ */
+function resolveExecutionType(id) {
+    const trimmed = id.trim();
+    if (trimmed.startsWith("aex_") || trimmed.startsWith("aex-"))
+        return "agent";
+    if (trimmed.startsWith("wex_") || trimmed.startsWith("wex-"))
+        return "workflow";
+    throw new Error(`unrecognized execution ID format: ${id}\n\n` +
+        "Expected formats:\n" +
+        "  Agent execution:    aex_<26-char-ulid>\n" +
+        "  Workflow execution: wex_<26-char-ulid>");
+}
+/**
+ * Cancel an execution of either kind. Returns a wrapper documenting whether a
+ * cancel was actually issued: `{"already_terminal": bool, "execution": …}`.
+ * Agent executions are returned in the compact projection (their status embeds
+ * the full message history); workflow executions as plain protojson, matching
+ * get_workflow_execution.
+ */
+export async function cancelExecution(serverAddress, token, executionId, reason) {
+    return resolveExecutionType(executionId) === "agent"
+        ? cancelAgentExecution(serverAddress, token, executionId, reason)
+        : cancelWorkflowExecution(serverAddress, token, executionId, reason);
+}
+async function cancelAgentExecution(serverAddress, token, id, reason) {
+    const desc = `agent execution "${id}"`;
+    return withTransport(serverAddress, token, async (transport, callOptions) => {
+        try {
+            const query = createClient(AgentExecutionQueryController, transport);
+            const current = await query.get({ value: id }, callOptions);
+            const phase = current.status?.phase ?? AgentExecutionPhase.EXECUTION_PHASE_UNSPECIFIED;
+            if (TERMINAL_AGENT_PHASES.has(phase)) {
+                return wrapAgent(current, true);
+            }
+            const command = createClient(AgentExecutionCommandController, transport);
+            const cancelled = await command.cancel({ id, reason }, callOptions);
+            return wrapAgent(cancelled, false);
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+    });
+}
+async function cancelWorkflowExecution(serverAddress, token, id, reason) {
+    const desc = `workflow execution "${id}"`;
+    return withTransport(serverAddress, token, async (transport, callOptions) => {
+        try {
+            const query = createClient(WorkflowExecutionQueryController, transport);
+            const current = await query.get({ value: id }, callOptions);
+            const phase = current.status?.phase ?? WorkflowExecutionPhase.EXECUTION_PHASE_UNSPECIFIED;
+            if (TERMINAL_WORKFLOW_PHASES.has(phase)) {
+                return wrapWorkflow(current, true);
+            }
+            const command = createClient(WorkflowExecutionCommandController, transport);
+            const cancelled = await command.cancel({ id, reason }, callOptions);
+            return wrapWorkflow(cancelled, false);
+        }
+        catch (err) {
+            throw rpcError(err, desc);
+        }
+    });
+}
+function wrapAgent(execution, alreadyTerminal) {
+    const { totalMessages, data } = compactExecution(execution, DEFAULT_MESSAGE_LIMIT);
+    return JSON.stringify({ already_terminal: alreadyTerminal, view: "compact", total_messages: totalMessages, execution: data }, null, 2);
+}
+function wrapWorkflow(execution, alreadyTerminal) {
+    return JSON.stringify({
+        already_terminal: alreadyTerminal,
+        execution: JSON.parse(toProtoJson(WorkflowExecutionSchema, execution)),
+    }, null, 2);
+}
+//# sourceMappingURL=cancel.js.map

package/domains/executions/cancel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel.js","sourceRoot":"","sources":["../../../src/domains/executions/cancel.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,yEAAyE;AACzE,iDAAiD;AACjD,qEAAqE;AACrE,6DAA6D;AAC7D,gEAAgE;AAChE,4DAA4D;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,cAAc,IAAI,mBAAmB,EAAE,MAAM,8DAA8D,CAAC;AACrH,OAAO,EAAE,6BAA6B,EAAE,MAAM,+DAA+D,CAAC;AAC9G,OAAO,EACL,uBAAuB,GAExB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EAAE,kCAAkC,EAAE,MAAM,oEAAoE,CAAC;AACxH,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,iEAAiE,CAAC;AAC3H,OAAO,EAAE,gCAAgC,EAAE,MAAM,kEAAkE,CAAC;AAEpH,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,2EAA2E;AAC3E,uEAAuE;AACvE,sEAAsE;AACtE,MAAM,qBAAqB,GAAqC,IAAI,GAAG,CAAC;IACtE,mBAAmB,CAAC,mBAAmB;IACvC,mBAAmB,CAAC,gBAAgB;IACpC,mBAAmB,CAAC,mBAAmB;IACvC,mBAAmB,CAAC,oBAAoB;CACzC,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAwC,IAAI,GAAG,CAAC;IAC5E,sBAAsB,CAAC,mBAAmB;IAC1C,sBAAsB,CAAC,gBAAgB;IACvC,sBAAsB,CAAC,mBAAmB;IAC1C,sBAAsB,CAAC,oBAAoB;CAC5C,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,EAAU;IACtC,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7E,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAChF,MAAM,IAAI,KAAK,CACb,qCAAqC,EAAE,MAAM;QAC3C,qBAAqB;QACrB,4CAA4C;QAC5C,0CAA0C,CAC7C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,aAAqB,EACrB,KAAa,EACb,WAAmB,EACnB,MAAc;IAEd,OAAO,oBAAoB,CAAC,WAAW,CAAC,KAAK,OAAO;QAClD,CAAC,CAAC,oBAAoB,CAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC;QACjE,CAAC,CAAC,uBAAuB,CAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,aAAqB,EACrB,KAAa,EACb,EAAU,EACV,MAAc;IAEd,MAAM,IAAI,GAAG,oBAAoB,EAAE,GAAG,CAAC;IACvC,OAAO,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;QAC1E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,mBAAmB,CAAC,2BAA2B,CAAC;YACvF,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrC,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,OAAO,GAAG,YAAY,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;YACpE,OAAO,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,aAAqB,EACrB,KAAa,EACb,EAAU,EACV,MAAc;IAEd,MAAM,IAAI,GAAG,uBAAuB,EAAE,GAAG,CAAC;IAC1C,OAAO,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;QAC1E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,sBAAsB,CAAC,2BAA2B,CAAC;YAC1F,IAAI,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,OAAO,GAAG,YAAY,CAAC,kCAAkC,EAAE,SAAS,CAAC,CAAC;YAC5E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;YACpE,OAAO,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,SAAyB,EAAE,eAAwB;IACpE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC,SAAS,CACnB,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,EACtG,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,SAA4B,EAAE,eAAwB;IAC1E,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,gBAAgB,EAAE,eAAe;QACjC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;KACvE,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/domains/executions/tools.d.ts

@@ -0,0 +1,5 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type BackendTarget } from "../client.js";
+/** Register the cross-kind execution-control tools; returns the registered tool names. */
+export declare function registerExecutionControlTools(server: McpServer, target: BackendTarget): string[];
+//# sourceMappingURL=tools.d.ts.map

package/domains/executions/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/executions/tools.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAIhE,0FAA0F;AAC1F,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CA6BhG"}

package/domains/executions/tools.js

@@ -0,0 +1,28 @@
+// Cross-kind execution-control tools. Currently just cancel_execution — the
+// one control verb whose argument shape is identical for agent and workflow
+// executions, so a single ID-prefix-dispatched tool serves both (the
+// "crisp schemas over fewer tools" principle cuts the other way for
+// approvals, whose shapes are disjoint). pause/resume/terminate stay
+// CLI-only until a real MCP need shows up.
+import { z } from "zod";
+import { resolveToken } from "../client.js";
+import { textOrError } from "../toolresult.js";
+import { cancelExecution } from "./cancel.js";
+/** Register the cross-kind execution-control tools; returns the registered tool names. */
+export function registerExecutionControlTools(server, target) {
+    server.registerTool("cancel_execution", {
+        description: "Gracefully cancel a running agent (aex_*) or workflow (wex_*) execution — the kind is " +
+            "inferred from the ID prefix. Cancellation is terminal: the run stops after cleanup and " +
+            "cannot be resumed. Executions already in a terminal phase are returned with " +
+            "already_terminal=true instead of an error.",
+        inputSchema: {
+            execution_id: z.string().describe("Execution ID to cancel (aex_* or wex_* format)."),
+            reason: z
+                .string()
+                .optional()
+                .describe("Human-readable reason for the cancellation, stored in the audit trail."),
+        },
+    }, (args, extra) => textOrError(() => cancelExecution(target.serverAddress, resolveToken(extra, target.apiKey), args.execution_id, args.reason ?? "")));
+    return ["cancel_execution"];
+}
+//# sourceMappingURL=tools.js.map

package/domains/executions/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/domains/executions/tools.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,qEAAqE;AACrE,oEAAoE;AACpE,qEAAqE;AACrE,2CAA2C;AAG3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,0FAA0F;AAC1F,MAAM,UAAU,6BAA6B,CAAC,MAAiB,EAAE,MAAqB;IACpF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,WAAW,EACT,wFAAwF;YACxF,yFAAyF;YACzF,8EAA8E;YAC9E,4CAA4C;QAC9C,WAAW,EAAE;YACX,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;YACpF,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,wEAAwE,CAAC;SACtF;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,WAAW,CAAC,GAAG,EAAE,CACf,eAAe,CACb,MAAM,CAAC,aAAa,EACpB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAClC,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,MAAM,IAAI,EAAE,CAClB,CACF,CACJ,CAAC;IAEF,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC9B,CAAC"}

package/domains/records/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/records/tools.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAWhE,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAyBpD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,EAAE,CA0IV"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/domains/records/tools.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAWhE,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAyBpD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,EAAE,CA8IV"}

package/domains/records/tools.js

@@ -54,8 +54,10 @@ export function registerRecordTools(server, target, audience) {
     server.registerTool("describe_datastore", {
         description: "Describe a datastore: its collections, field declarations and encodings, constraint " +
             "messages, data partitions, and the verbs you are allowed to use per collection " +
-            "(empty access means you are not allowed to touch that collection). Call this before " +
-            `the first record operation against an unfamiliar datastore. ${ENCODINGS}`,
+            "(empty access means you are not allowed to touch that collection). A read verb may " +
+            "carry readable_fields: reads then return only those fields, and only they may appear " +
+            "in filter conditions and order_by (empty readable_fields means every field). Call " +
+            `this before the first record operation against an unfamiliar datastore. ${ENCODINGS}`,
         inputSchema: {
             datastore: z.string().describe("Datastore slug (e.g. clinic)."),
             ...orgShape,
@@ -65,7 +67,9 @@ export function registerRecordTools(server, target, audience) {
     server.registerTool("find_records", {
         description: "Find records in a datastore collection with a typed filter (conditions are AND-combined). " +
             "Returns records plus total/limit/offset for paging. Results are ordered by created_at " +
-            `descending unless order_by is given. ${ENCODINGS}`,
+            "descending unless order_by is given. Records carry only the fields your grant allows " +
+            "(describe_datastore lists them as readable_fields); conditions and order_by on other " +
+            `fields are rejected. ${ENCODINGS}`,
         inputSchema: {
             datastore: z.string().describe("Datastore slug (e.g. clinic)."),
             ...orgShape,