@stigmer/protos 0.0.34

package/ai/stigmer/agentic/mcpserver/v1/api_pb.d.ts

@@ -0,0 +1,129 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { McpServerSpec } from "./spec_pb";
+import type { McpServerStatus } from "./status_pb";
+import type { ApiResourceMetadata } from "../../../commons/apiresource/metadata_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/api.proto.
+ */
+export declare const file_ai_stigmer_agentic_mcpserver_v1_api: GenFile;
+/**
+ * McpServer represents a reusable MCP (Model Context Protocol) server configuration.
+ * MCP servers provide tools and capabilities to AI agents via a standardized protocol.
+ *
+ * Unlike inline McpServerDefinition in AgentSpec, McpServer is a first-class resource that:
+ * - Can be referenced by multiple agents (reusability)
+ * - Has proper access control via FGA (authorization)
+ * - Can be discovered in the marketplace (discoverability)
+ * - Belongs to an organization with PUBLIC/PRIVATE visibility
+ *
+ * Lifecycle:
+ * 1. Create McpServer definition (this resource) with server type and env requirements
+ * 2. Reference in Agent via mcp_server_usages
+ * 3. Create AgentInstance with environment_ref providing actual secrets
+ * 4. Agent runner resolves McpServer, gets secrets from Environment, starts server
+ *
+ * Example YAML:
+ *   apiVersion: agentic.stigmer.ai/v1
+ *   kind: McpServer
+ *   metadata:
+ *     name: github
+ *     scope: platform
+ *   spec:
+ *     description: "GitHub MCP server for repository operations"
+ *     stdio:
+ *       command: npx
+ *       args: ["-y", "@modelcontextprotocol/server-github"]
+ *     env_spec:
+ *       data:
+ *         GITHUB_TOKEN:
+ *           is_secret: true
+ *           description: "GitHub personal access token"
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.McpServer
+ */
+export type McpServer = Message<"ai.stigmer.agentic.mcpserver.v1.McpServer"> & {
+    /**
+     * API version for this resource type.
+     * Must be exactly "agentic.stigmer.ai/v1".
+     *
+     * @generated from field: string api_version = 1;
+     */
+    apiVersion: string;
+    /**
+     * Resource kind identifier.
+     * Must be exactly "McpServer".
+     *
+     * @generated from field: string kind = 2;
+     */
+    kind: string;
+    /**
+     * Standard resource metadata including name, id, org, visibility, labels, and tags.
+     *
+     * Key fields:
+     * - name: Human-readable name (e.g., "GitHub MCP Server")
+     * - slug: URL-friendly identifier (e.g., "github")
+     * - org: Organization that owns this MCP server (required)
+     * - visibility: Access control (PUBLIC or PRIVATE)
+     *
+     * Visibility semantics:
+     * - PUBLIC: Marketplace server, discoverable by all users
+     * - PRIVATE: Only accessible to organization members
+     *
+     * Reference format: "org/slug" (e.g., "stigmer/github", "acme/internal-tools")
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceMetadata metadata = 3;
+     */
+    metadata?: ApiResourceMetadata;
+    /**
+     * User-provided MCP server configuration (desired state).
+     * Defines the server type, connection details, and environment requirements.
+     *
+     * @generated from field: ai.stigmer.agentic.mcpserver.v1.McpServerSpec spec = 4;
+     */
+    spec?: McpServerSpec;
+    /**
+     * System-managed MCP server state (observed state).
+     * Contains validation status and audit information.
+     * This is populated by the system, not by users.
+     *
+     * @generated from field: ai.stigmer.agentic.mcpserver.v1.McpServerStatus status = 5;
+     */
+    status?: McpServerStatus;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServer.
+ * Use `create(McpServerSchema)` to create a new message.
+ */
+export declare const McpServerSchema: GenMessage<McpServer>;
+/**
+ * McpServerList represents a paginated list of MCP servers.
+ * Returned by list operations with pagination support.
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.McpServerList
+ */
+export type McpServerList = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerList"> & {
+    /**
+     * API version for this list type.
+     *
+     * @generated from field: string api_version = 1;
+     */
+    apiVersion: string;
+    /**
+     * Resource kind identifier for the list.
+     *
+     * @generated from field: string kind = 2;
+     */
+    kind: string;
+    /**
+     * List of MCP server resources.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.mcpserver.v1.McpServer items = 3;
+     */
+    items: McpServer[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServerList.
+ * Use `create(McpServerListSchema)` to create a new message.
+ */
+export declare const McpServerListSchema: GenMessage<McpServerList>;

package/ai/stigmer/agentic/mcpserver/v1/api_pb.js

@@ -0,0 +1,23 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/mcpserver/v1/api.proto (package ai.stigmer.agentic.mcpserver.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_mcpserver_v1_spec } from "./spec_pb";
+import { file_ai_stigmer_agentic_mcpserver_v1_status } from "./status_pb";
+import { file_ai_stigmer_commons_apiresource_metadata } from "../../../commons/apiresource/metadata_pb";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/api.proto.
+ */
+export const file_ai_stigmer_agentic_mcpserver_v1_api = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_mcpserver_v1_spec, file_ai_stigmer_agentic_mcpserver_v1_status, file_ai_stigmer_commons_apiresource_metadata, file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServer.
+ * Use `create(McpServerSchema)` to create a new message.
+ */
+export const McpServerSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_api, 0);
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServerList.
+ * Use `create(McpServerListSchema)` to create a new message.
+ */
+export const McpServerListSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_api, 1);
+//# sourceMappingURL=api_pb.js.map

package/ai/stigmer/agentic/mcpserver/v1/api_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/api_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,0HAA0H;AAC1H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,WAAW,CAAC;AAEtE,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,4CAA4C,EAAE,MAAM,0CAA0C,CAAC;AACxG,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,4pBAA4pB,EAAE,CAAC,yCAAyC,EAAE,2CAA2C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA2F70B;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AA+B3D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_connect.d.ts

@@ -0,0 +1,136 @@
+/**
+ * McpServerCommandController provides write operations for MCP server resources.
+ * Supports creating, updating, and deleting MCP server definitions.
+ *
+ * Authorization model for writes:
+ * - Platform-scoped: Only platform operators can create/modify
+ * - Organization-scoped: Org admins can create/modify
+ * - Identity-account-scoped: Only the owner can create/modify
+ *
+ * Primary interface: The `apply` method provides Kubernetes-style idempotent
+ * create-or-update semantics, which is the recommended approach for CLI usage.
+ *
+ * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerCommandController
+ */
+export declare const McpServerCommandController: {
+    readonly typeName: "ai.stigmer.agentic.mcpserver.v1.McpServerCommandController";
+    readonly methods: {
+        /**
+         * Create or update an MCP server resource (Kubernetes-style apply).
+         *
+         * This is the primary interface for MCP server management.
+         * Behavior:
+         * - If the resource doesn't exist: Creates a new MCP server
+         * - If the resource exists: Updates the existing MCP server
+         *
+         * The resource is identified by (scope, org, slug) combination.
+         *
+         * Input: Full McpServer resource with metadata and spec.
+         * Returns: The created/updated McpServer with system-populated fields.
+         *
+         * Authorization: Custom authorization in handler.
+         * The handler determines whether this is a create or update operation
+         * and performs appropriate scope-aware authorization:
+         * - Create: Requires permission to create in the target scope
+         * - Update: Requires can_edit on the existing resource
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.apply
+         */
+        readonly apply: {
+            readonly name: "apply";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Create a new MCP server resource.
+         *
+         * Use this when you explicitly want to create a new resource
+         * and want an error if it already exists.
+         *
+         * Input: McpServer with metadata (scope, org, name/slug) and spec.
+         * Returns: The created McpServer with system-generated ID and status.
+         *
+         * Authorization: Custom authorization in handler.
+         * Requires permission to create MCP servers in the specified scope:
+         * - Platform: Requires platform operator role
+         * - Organization: Requires org admin role or can_create_mcp_server permission
+         * - Identity Account: Automatically allowed for the authenticated user
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.create
+         */
+        readonly create: {
+            readonly name: "create";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Update an existing MCP server resource.
+         *
+         * Input: McpServer with metadata.id populated and updated spec.
+         * Returns: The updated McpServer.
+         *
+         * Authorization: Requires can_edit permission on the mcp_server resource.
+         * Only the owner (based on scope) can update:
+         * - Platform: Platform operators
+         * - Organization: Org admins or resource owner
+         * - Identity Account: The owner
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.update
+         */
+        readonly update: {
+            readonly name: "update";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Delete an MCP server resource.
+         *
+         * Permanently removes the MCP server definition.
+         * Agents referencing this MCP server will need to be updated.
+         *
+         * Input: ApiResourceDeleteInput with resource_id and optional version_message.
+         * Returns: The deleted McpServer (for confirmation/audit).
+         *
+         * Authorization: Requires can_delete permission on the mcp_server resource.
+         * Only the owner can delete:
+         * - Platform: Platform operators
+         * - Organization: Org admins or resource owner
+         * - Identity Account: The owner
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.delete
+         */
+        readonly delete: {
+            readonly name: "delete";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Update the discovered capabilities (tools and resource templates) for an MCP server.
+         *
+         * This is a targeted status update — it only modifies status.discovered_capabilities,
+         * leaving spec, validation state, and other status fields untouched.
+         *
+         * Typical flow:
+         * 1. CLI calls getByReference(org/slug) to fetch the McpServer and its ID
+         * 2. CLI connects to the MCP server locally and queries tools/resources
+         * 3. CLI calls this RPC with the ID and discovered capabilities
+         *
+         * Input: UpdateDiscoveredCapabilitiesInput with mcp_server_id and discovered_capabilities.
+         * Returns: The updated McpServer with the new discovered capabilities.
+         *
+         * Authorization: Requires can_edit permission on the mcp_server resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.updateDiscoveredCapabilities
+         */
+        readonly updateDiscoveredCapabilities: {
+            readonly name: "updateDiscoveredCapabilities";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js

@@ -0,0 +1,142 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/mcpserver/v1/command.proto (package ai.stigmer.agentic.mcpserver.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * McpServerCommandController provides write operations for MCP server resources.
+ * Supports creating, updating, and deleting MCP server definitions.
+ *
+ * Authorization model for writes:
+ * - Platform-scoped: Only platform operators can create/modify
+ * - Organization-scoped: Org admins can create/modify
+ * - Identity-account-scoped: Only the owner can create/modify
+ *
+ * Primary interface: The `apply` method provides Kubernetes-style idempotent
+ * create-or-update semantics, which is the recommended approach for CLI usage.
+ *
+ * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerCommandController
+ */
+export const McpServerCommandController = {
+    typeName: "ai.stigmer.agentic.mcpserver.v1.McpServerCommandController",
+    methods: {
+        /**
+         * Create or update an MCP server resource (Kubernetes-style apply).
+         *
+         * This is the primary interface for MCP server management.
+         * Behavior:
+         * - If the resource doesn't exist: Creates a new MCP server
+         * - If the resource exists: Updates the existing MCP server
+         *
+         * The resource is identified by (scope, org, slug) combination.
+         *
+         * Input: Full McpServer resource with metadata and spec.
+         * Returns: The created/updated McpServer with system-populated fields.
+         *
+         * Authorization: Custom authorization in handler.
+         * The handler determines whether this is a create or update operation
+         * and performs appropriate scope-aware authorization:
+         * - Create: Requires permission to create in the target scope
+         * - Update: Requires can_edit on the existing resource
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.apply
+         */
+        apply: {
+            name: "apply",
+            I: McpServer,
+            O: McpServer,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Create a new MCP server resource.
+         *
+         * Use this when you explicitly want to create a new resource
+         * and want an error if it already exists.
+         *
+         * Input: McpServer with metadata (scope, org, name/slug) and spec.
+         * Returns: The created McpServer with system-generated ID and status.
+         *
+         * Authorization: Custom authorization in handler.
+         * Requires permission to create MCP servers in the specified scope:
+         * - Platform: Requires platform operator role
+         * - Organization: Requires org admin role or can_create_mcp_server permission
+         * - Identity Account: Automatically allowed for the authenticated user
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.create
+         */
+        create: {
+            name: "create",
+            I: McpServer,
+            O: McpServer,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Update an existing MCP server resource.
+         *
+         * Input: McpServer with metadata.id populated and updated spec.
+         * Returns: The updated McpServer.
+         *
+         * Authorization: Requires can_edit permission on the mcp_server resource.
+         * Only the owner (based on scope) can update:
+         * - Platform: Platform operators
+         * - Organization: Org admins or resource owner
+         * - Identity Account: The owner
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.update
+         */
+        update: {
+            name: "update",
+            I: McpServer,
+            O: McpServer,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Delete an MCP server resource.
+         *
+         * Permanently removes the MCP server definition.
+         * Agents referencing this MCP server will need to be updated.
+         *
+         * Input: ApiResourceDeleteInput with resource_id and optional version_message.
+         * Returns: The deleted McpServer (for confirmation/audit).
+         *
+         * Authorization: Requires can_delete permission on the mcp_server resource.
+         * Only the owner can delete:
+         * - Platform: Platform operators
+         * - Organization: Org admins or resource owner
+         * - Identity Account: The owner
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.delete
+         */
+        delete: {
+            name: "delete",
+            I: ApiResourceDeleteInput,
+            O: McpServer,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Update the discovered capabilities (tools and resource templates) for an MCP server.
+         *
+         * This is a targeted status update — it only modifies status.discovered_capabilities,
+         * leaving spec, validation state, and other status fields untouched.
+         *
+         * Typical flow:
+         * 1. CLI calls getByReference(org/slug) to fetch the McpServer and its ID
+         * 2. CLI connects to the MCP server locally and queries tools/resources
+         * 3. CLI calls this RPC with the ID and discovered capabilities
+         *
+         * Input: UpdateDiscoveredCapabilitiesInput with mcp_server_id and discovered_capabilities.
+         * Returns: The updated McpServer with the new discovered capabilities.
+         *
+         * Authorization: Requires can_edit permission on the mcp_server resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.updateDiscoveredCapabilities
+         */
+        updateDiscoveredCapabilities: {
+            name: "updateDiscoveredCapabilities",
+            I: UpdateDiscoveredCapabilitiesInput,
+            O: McpServer,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=command_connect.js.map

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,4BAA4B,EAAE;YAC5B,IAAI,EAAE,8BAA8B;YACpC,CAAC,EAAE,iCAAiC;YACpC,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_pb.d.ts

@@ -0,0 +1,136 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { McpServerSchema } from "./api_pb";
+import type { UpdateDiscoveredCapabilitiesInputSchema } from "./io_pb";
+import type { ApiResourceDeleteInputSchema } from "../../../commons/apiresource/io_pb";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/command.proto.
+ */
+export declare const file_ai_stigmer_agentic_mcpserver_v1_command: GenFile;
+/**
+ * McpServerCommandController provides write operations for MCP server resources.
+ * Supports creating, updating, and deleting MCP server definitions.
+ *
+ * Authorization model for writes:
+ * - Platform-scoped: Only platform operators can create/modify
+ * - Organization-scoped: Org admins can create/modify
+ * - Identity-account-scoped: Only the owner can create/modify
+ *
+ * Primary interface: The `apply` method provides Kubernetes-style idempotent
+ * create-or-update semantics, which is the recommended approach for CLI usage.
+ *
+ * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerCommandController
+ */
+export declare const McpServerCommandController: GenService<{
+    /**
+     * Create or update an MCP server resource (Kubernetes-style apply).
+     *
+     * This is the primary interface for MCP server management.
+     * Behavior:
+     * - If the resource doesn't exist: Creates a new MCP server
+     * - If the resource exists: Updates the existing MCP server
+     *
+     * The resource is identified by (scope, org, slug) combination.
+     *
+     * Input: Full McpServer resource with metadata and spec.
+     * Returns: The created/updated McpServer with system-populated fields.
+     *
+     * Authorization: Custom authorization in handler.
+     * The handler determines whether this is a create or update operation
+     * and performs appropriate scope-aware authorization:
+     * - Create: Requires permission to create in the target scope
+     * - Update: Requires can_edit on the existing resource
+     *
+     * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.apply
+     */
+    apply: {
+        methodKind: "unary";
+        input: typeof McpServerSchema;
+        output: typeof McpServerSchema;
+    };
+    /**
+     * Create a new MCP server resource.
+     *
+     * Use this when you explicitly want to create a new resource
+     * and want an error if it already exists.
+     *
+     * Input: McpServer with metadata (scope, org, name/slug) and spec.
+     * Returns: The created McpServer with system-generated ID and status.
+     *
+     * Authorization: Custom authorization in handler.
+     * Requires permission to create MCP servers in the specified scope:
+     * - Platform: Requires platform operator role
+     * - Organization: Requires org admin role or can_create_mcp_server permission
+     * - Identity Account: Automatically allowed for the authenticated user
+     *
+     * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.create
+     */
+    create: {
+        methodKind: "unary";
+        input: typeof McpServerSchema;
+        output: typeof McpServerSchema;
+    };
+    /**
+     * Update an existing MCP server resource.
+     *
+     * Input: McpServer with metadata.id populated and updated spec.
+     * Returns: The updated McpServer.
+     *
+     * Authorization: Requires can_edit permission on the mcp_server resource.
+     * Only the owner (based on scope) can update:
+     * - Platform: Platform operators
+     * - Organization: Org admins or resource owner
+     * - Identity Account: The owner
+     *
+     * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.update
+     */
+    update: {
+        methodKind: "unary";
+        input: typeof McpServerSchema;
+        output: typeof McpServerSchema;
+    };
+    /**
+     * Delete an MCP server resource.
+     *
+     * Permanently removes the MCP server definition.
+     * Agents referencing this MCP server will need to be updated.
+     *
+     * Input: ApiResourceDeleteInput with resource_id and optional version_message.
+     * Returns: The deleted McpServer (for confirmation/audit).
+     *
+     * Authorization: Requires can_delete permission on the mcp_server resource.
+     * Only the owner can delete:
+     * - Platform: Platform operators
+     * - Organization: Org admins or resource owner
+     * - Identity Account: The owner
+     *
+     * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.delete
+     */
+    delete: {
+        methodKind: "unary";
+        input: typeof ApiResourceDeleteInputSchema;
+        output: typeof McpServerSchema;
+    };
+    /**
+     * Update the discovered capabilities (tools and resource templates) for an MCP server.
+     *
+     * This is a targeted status update — it only modifies status.discovered_capabilities,
+     * leaving spec, validation state, and other status fields untouched.
+     *
+     * Typical flow:
+     * 1. CLI calls getByReference(org/slug) to fetch the McpServer and its ID
+     * 2. CLI connects to the MCP server locally and queries tools/resources
+     * 3. CLI calls this RPC with the ID and discovered capabilities
+     *
+     * Input: UpdateDiscoveredCapabilitiesInput with mcp_server_id and discovered_capabilities.
+     * Returns: The updated McpServer with the new discovered capabilities.
+     *
+     * Authorization: Requires can_edit permission on the mcp_server resource.
+     *
+     * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.updateDiscoveredCapabilities
+     */
+    updateDiscoveredCapabilities: {
+        methodKind: "unary";
+        input: typeof UpdateDiscoveredCapabilitiesInputSchema;
+        output: typeof McpServerSchema;
+    };
+}>;

package/ai/stigmer/agentic/mcpserver/v1/command_pb.js

@@ -0,0 +1,29 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/mcpserver/v1/command.proto (package ai.stigmer.agentic.mcpserver.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_mcpserver_v1_api } from "./api_pb";
+import { file_ai_stigmer_agentic_mcpserver_v1_io } from "./io_pb";
+import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb";
+import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from "../../../iam/iampolicy/v1/rpcauthorization/method_options_pb";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/command.proto.
+ */
+export const file_ai_stigmer_agentic_mcpserver_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_mcpserver_v1_api, file_ai_stigmer_agentic_mcpserver_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+/**
+ * McpServerCommandController provides write operations for MCP server resources.
+ * Supports creating, updating, and deleting MCP server definitions.
+ *
+ * Authorization model for writes:
+ * - Platform-scoped: Only platform operators can create/modify
+ * - Organization-scoped: Org admins can create/modify
+ * - Identity-account-scoped: Only the owner can create/modify
+ *
+ * Primary interface: The `apply` method provides Kubernetes-style idempotent
+ * create-or-update semantics, which is the recommended approach for CLI usage.
+ *
+ * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerCommandController
+ */
+export const McpServerCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_mcpserver_v1_command, 0);
+//# sourceMappingURL=command_pb.js.map

package/ai/stigmer/agentic/mcpserver/v1/command_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAE,uCAAuC,EAAE,MAAM,SAAS,CAAC;AAElE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,koCAAkoC,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEv4C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAiHlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}