@stigmer/protos 0.0.34

package/ai/stigmer/agentic/mcpserver/v1/io_pb.d.ts

@@ -0,0 +1,62 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { DiscoveredCapabilities } from "./status_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/io.proto.
+ */
+export declare const file_ai_stigmer_agentic_mcpserver_v1_io: GenFile;
+/**
+ * McpServerId wraps an MCP server resource identifier.
+ * Used as input for operations that require an MCP server ID.
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.McpServerId
+ */
+export type McpServerId = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerId"> & {
+    /**
+     * The unique identifier of the MCP server resource.
+     * This is the system-generated ID (metadata.id), not the slug.
+     * Format: "mcp-" followed by a unique identifier.
+     * Example: "mcp-abc123xyz"
+     *
+     * @generated from field: string value = 1;
+     */
+    value: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServerId.
+ * Use `create(McpServerIdSchema)` to create a new message.
+ */
+export declare const McpServerIdSchema: GenMessage<McpServerId>;
+/**
+ * UpdateDiscoveredCapabilitiesInput is the request for the updateDiscoveredCapabilities RPC.
+ *
+ * Used by:
+ * - CLI: after `stigmer discover mcp-server <name>` connects locally, queries tools/resources,
+ *   and pushes the results to stigmer-server.
+ * - Agent-runner: future runtime cache refresh.
+ *
+ * The caller must first resolve the MCP server's system ID (e.g., via getByReference)
+ * before calling this RPC.
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.UpdateDiscoveredCapabilitiesInput
+ */
+export type UpdateDiscoveredCapabilitiesInput = Message<"ai.stigmer.agentic.mcpserver.v1.UpdateDiscoveredCapabilitiesInput"> & {
+    /**
+     * System-generated ID of the MCP server to update.
+     * Obtained from McpServer.metadata.id (e.g., via getByReference).
+     *
+     * @generated from field: string mcp_server_id = 1;
+     */
+    mcpServerId: string;
+    /**
+     * Discovered tools and resource templates to store.
+     *
+     * @generated from field: ai.stigmer.agentic.mcpserver.v1.DiscoveredCapabilities discovered_capabilities = 2;
+     */
+    discoveredCapabilities?: DiscoveredCapabilities;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.UpdateDiscoveredCapabilitiesInput.
+ * Use `create(UpdateDiscoveredCapabilitiesInputSchema)` to create a new message.
+ */
+export declare const UpdateDiscoveredCapabilitiesInputSchema: GenMessage<UpdateDiscoveredCapabilitiesInput>;

package/ai/stigmer/agentic/mcpserver/v1/io_pb.js

@@ -0,0 +1,21 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/mcpserver/v1/io.proto (package ai.stigmer.agentic.mcpserver.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_mcpserver_v1_status } from "./status_pb";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/io.proto.
+ */
+export const file_ai_stigmer_agentic_mcpserver_v1_io = /*@__PURE__*/ fileDesc("CihhaS9zdGlnbWVyL2FnZW50aWMvbWNwc2VydmVyL3YxL2lvLnByb3RvEh9haS5zdGlnbWVyLmFnZW50aWMubWNwc2VydmVyLnYxIiQKC01jcFNlcnZlcklkEhUKBXZhbHVlGAEgASgJQga6SAPIAQEipAEKIVVwZGF0ZURpc2NvdmVyZWRDYXBhYmlsaXRpZXNJbnB1dBIdCg1tY3Bfc2VydmVyX2lkGAEgASgJQga6SAPIAQESYAoXZGlzY292ZXJlZF9jYXBhYmlsaXRpZXMYAiABKAsyNy5haS5zdGlnbWVyLmFnZW50aWMubWNwc2VydmVyLnYxLkRpc2NvdmVyZWRDYXBhYmlsaXRpZXNCBrpIA8gBAWIGcHJvdG8z", [file_ai_stigmer_agentic_mcpserver_v1_status, file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServerId.
+ * Use `create(McpServerIdSchema)` to create a new message.
+ */
+export const McpServerIdSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.UpdateDiscoveredCapabilitiesInput.
+ * Use `create(UpdateDiscoveredCapabilitiesInputSchema)` to create a new message.
+ */
+export const UpdateDiscoveredCapabilitiesInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_io, 1);
+//# sourceMappingURL=io_pb.js.map

package/ai/stigmer/agentic/mcpserver/v1/io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,kYAAkY,EAAE,CAAC,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAoB1d;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAgC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/query_connect.d.ts

@@ -0,0 +1,59 @@
+/**
+ * McpServerQueryController provides read operations for MCP server resources.
+ * All read operations require appropriate authorization based on the resource's scope.
+ *
+ * Authorization model:
+ * - Platform-scoped: Anyone can view (public marketplace)
+ * - Organization-scoped: Org members can view
+ * - Identity-account-scoped: Only the owner can view
+ *
+ * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerQueryController
+ */
+export declare const McpServerQueryController: {
+    readonly typeName: "ai.stigmer.agentic.mcpserver.v1.McpServerQueryController";
+    readonly methods: {
+        /**
+         * Get an MCP server by its unique identifier.
+         *
+         * Input: ApiResourceId containing the MCP server's system-generated ID.
+         * Returns: The full McpServer resource including metadata, spec, and status.
+         *
+         * Authorization: Requires can_view permission on the mcp_server resource.
+         * The caller must have access based on the resource's scope:
+         * - Platform: All authenticated users
+         * - Organization: Organization members
+         * - Identity Account: Only the owner
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.get
+         */
+        readonly get: {
+            readonly name: "get";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get an MCP server by reference (scope + org + slug).
+         *
+         * Input: ApiResourceReference with scope, org (if applicable), kind, and slug.
+         * Returns: The full McpServer resource.
+         *
+         * This is the preferred method for looking up MCP servers by name/slug
+         * rather than system-generated ID. Useful for:
+         * - Resolving references from Agent.mcp_server_usages
+         * - CLI lookups by name
+         * - Cross-scope resolution (platform vs org vs personal)
+         *
+         * Authorization: Custom authorization in handler.
+         * The handler performs scope-aware authorization based on the reference.
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getByReference
+         */
+        readonly getByReference: {
+            readonly name: "getByReference";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js

@@ -0,0 +1,65 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/mcpserver/v1/query.proto (package ai.stigmer.agentic.mcpserver.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * McpServerQueryController provides read operations for MCP server resources.
+ * All read operations require appropriate authorization based on the resource's scope.
+ *
+ * Authorization model:
+ * - Platform-scoped: Anyone can view (public marketplace)
+ * - Organization-scoped: Org members can view
+ * - Identity-account-scoped: Only the owner can view
+ *
+ * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerQueryController
+ */
+export const McpServerQueryController = {
+    typeName: "ai.stigmer.agentic.mcpserver.v1.McpServerQueryController",
+    methods: {
+        /**
+         * Get an MCP server by its unique identifier.
+         *
+         * Input: ApiResourceId containing the MCP server's system-generated ID.
+         * Returns: The full McpServer resource including metadata, spec, and status.
+         *
+         * Authorization: Requires can_view permission on the mcp_server resource.
+         * The caller must have access based on the resource's scope:
+         * - Platform: All authenticated users
+         * - Organization: Organization members
+         * - Identity Account: Only the owner
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.get
+         */
+        get: {
+            name: "get",
+            I: ApiResourceId,
+            O: McpServer,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Get an MCP server by reference (scope + org + slug).
+         *
+         * Input: ApiResourceReference with scope, org (if applicable), kind, and slug.
+         * Returns: The full McpServer resource.
+         *
+         * This is the preferred method for looking up MCP servers by name/slug
+         * rather than system-generated ID. Useful for:
+         * - Resolving references from Agent.mcp_server_usages
+         * - CLI lookups by name
+         * - Cross-scope resolution (platform vs org vs personal)
+         *
+         * Authorization: Custom authorization in handler.
+         * The handler performs scope-aware authorization based on the reference.
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getByReference
+         */
+        getByReference: {
+            name: "getByReference",
+            I: ApiResourceReference,
+            O: McpServer,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=query_connect.js.map

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/query_pb.d.ts

@@ -0,0 +1,61 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { McpServerSchema } from "./api_pb";
+import type { ApiResourceIdSchema, ApiResourceReferenceSchema } from "../../../commons/apiresource/io_pb";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/query.proto.
+ */
+export declare const file_ai_stigmer_agentic_mcpserver_v1_query: GenFile;
+/**
+ * McpServerQueryController provides read operations for MCP server resources.
+ * All read operations require appropriate authorization based on the resource's scope.
+ *
+ * Authorization model:
+ * - Platform-scoped: Anyone can view (public marketplace)
+ * - Organization-scoped: Org members can view
+ * - Identity-account-scoped: Only the owner can view
+ *
+ * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerQueryController
+ */
+export declare const McpServerQueryController: GenService<{
+    /**
+     * Get an MCP server by its unique identifier.
+     *
+     * Input: ApiResourceId containing the MCP server's system-generated ID.
+     * Returns: The full McpServer resource including metadata, spec, and status.
+     *
+     * Authorization: Requires can_view permission on the mcp_server resource.
+     * The caller must have access based on the resource's scope:
+     * - Platform: All authenticated users
+     * - Organization: Organization members
+     * - Identity Account: Only the owner
+     *
+     * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.get
+     */
+    get: {
+        methodKind: "unary";
+        input: typeof ApiResourceIdSchema;
+        output: typeof McpServerSchema;
+    };
+    /**
+     * Get an MCP server by reference (scope + org + slug).
+     *
+     * Input: ApiResourceReference with scope, org (if applicable), kind, and slug.
+     * Returns: The full McpServer resource.
+     *
+     * This is the preferred method for looking up MCP servers by name/slug
+     * rather than system-generated ID. Useful for:
+     * - Resolving references from Agent.mcp_server_usages
+     * - CLI lookups by name
+     * - Cross-scope resolution (platform vs org vs personal)
+     *
+     * Authorization: Custom authorization in handler.
+     * The handler performs scope-aware authorization based on the reference.
+     *
+     * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getByReference
+     */
+    getByReference: {
+        methodKind: "unary";
+        input: typeof ApiResourceReferenceSchema;
+        output: typeof McpServerSchema;
+    };
+}>;

package/ai/stigmer/agentic/mcpserver/v1/query_pb.js

@@ -0,0 +1,25 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/mcpserver/v1/query.proto (package ai.stigmer.agentic.mcpserver.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_mcpserver_v1_api } from "./api_pb";
+import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb";
+import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from "../../../iam/iampolicy/v1/rpcauthorization/method_options_pb";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/query.proto.
+ */
+export const file_ai_stigmer_agentic_mcpserver_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_mcpserver_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+/**
+ * McpServerQueryController provides read operations for MCP server resources.
+ * All read operations require appropriate authorization based on the resource's scope.
+ *
+ * Authorization model:
+ * - Platform-scoped: Anyone can view (public marketplace)
+ * - Organization-scoped: Org members can view
+ * - Identity-account-scoped: Only the owner can view
+ *
+ * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerQueryController
+ */
+export const McpServerQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_mcpserver_v1_query, 0);
+//# sourceMappingURL=query_pb.js.map

package/ai/stigmer/agentic/mcpserver/v1/query_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qgBAAqgB,EAAE,CAAC,wCAAwC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEjuB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GA0ChC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts

@@ -0,0 +1,332 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { EnvironmentSpec } from "../../environment/v1/spec_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/spec.proto.
+ */
+export declare const file_ai_stigmer_agentic_mcpserver_v1_spec: GenFile;
+/**
+ * McpServerSpec defines the configuration template for an MCP server.
+ * This is a reusable definition that can be referenced by multiple agents.
+ * Actual secrets/credentials are provided at runtime via AgentInstance's environment.
+ *
+ * MCP (Model Context Protocol) servers provide tools and capabilities to AI agents.
+ * This spec declares the server type, connection details, and required environment variables.
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.McpServerSpec
+ */
+export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSpec"> & {
+    /**
+     * Human-readable description for marketplace display and documentation.
+     * Should explain what this MCP server does and its primary use cases.
+     * Example: "GitHub MCP server for repository operations, code search, and PR management"
+     *
+     * @generated from field: string description = 1;
+     */
+    description: string;
+    /**
+     * Icon URL for UI display in marketplace and agent configuration screens.
+     * Should be a publicly accessible URL to an image (SVG, PNG, or JPEG).
+     * Example: "https://github.githubassets.com/favicons/favicon.svg"
+     *
+     * @generated from field: string icon_url = 2;
+     */
+    iconUrl: string;
+    /**
+     * Categorization tags for discoverability in the marketplace.
+     * Use lowercase, hyphenated tags that describe the server's domain and capabilities.
+     * Examples: ["git", "vcs", "code-analysis"], ["aws", "cloud", "infrastructure"]
+     *
+     * @generated from field: repeated string tags = 3;
+     */
+    tags: string[];
+    /**
+     * Server type and transport configuration.
+     * Exactly one must be specified based on how the MCP server communicates.
+     *
+     * @generated from oneof ai.stigmer.agentic.mcpserver.v1.McpServerSpec.server_type
+     */
+    serverType: {
+        /**
+         * stdio-based server (subprocess with stdin/stdout communication).
+         * Most common type - used for Node.js, Python, and other CLI-based MCP servers.
+         *
+         * @generated from field: ai.stigmer.agentic.mcpserver.v1.StdioServerConfig stdio = 4;
+         */
+        value: StdioServerConfig;
+        case: "stdio";
+    } | {
+        /**
+         * HTTP-based server (HTTP + Server-Sent Events communication).
+         * Used for remote/managed MCP services accessible over the network.
+         *
+         * @generated from field: ai.stigmer.agentic.mcpserver.v1.HttpServerConfig http = 5;
+         */
+        value: HttpServerConfig;
+        case: "http";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+    /**
+     * Default tools to enable from this MCP server.
+     * Empty list means all tools are enabled by default.
+     * When specified, only these tools will be available unless overridden in McpServerUsage.
+     * Tool names must match exactly what the MCP server reports via tools/list.
+     * IMPORTANT: Only names from `discovered_capabilities.tools` are valid here.
+     * Do NOT include names from `discovered_capabilities.resource_templates` —
+     * resource templates are read-only data endpoints, not callable tools.
+     * Examples: ["create_pull_request", "search_code", "get_file_contents"]
+     *
+     * @generated from field: repeated string default_enabled_tools = 7;
+     */
+    defaultEnabledTools: string[];
+    /**
+     * Environment specification declaring required environment variables.
+     * This defines the SCHEMA of required env vars - actual values are provided
+     * at runtime via AgentInstance's environment_ref.
+     *
+     * Use this to declare what environment variables the MCP server needs,
+     * whether they are secrets (e.g., API tokens), and their descriptions.
+     * Values in this spec can be empty - they serve as documentation and validation.
+     *
+     * Example:
+     *   data:
+     *     GITHUB_TOKEN:
+     *       is_secret: true
+     *       description: "GitHub personal access token with repo scope"
+     *     GITHUB_OWNER:
+     *       is_secret: false
+     *       description: "Default GitHub organization or user"
+     *
+     * @generated from field: ai.stigmer.agentic.environment.v1.EnvironmentSpec env_spec = 8;
+     */
+    envSpec?: EnvironmentSpec;
+    /**
+     * Default tool approval policies for this MCP server.
+     *
+     * Tools listed here require user approval before execution by default.
+     * This is the first layer in the approval policy chain:
+     *   McpServer.default_tool_approvals → Agent.tool_approval_overrides → auto_approve_all
+     *
+     * Use cases:
+     * - Mark destructive operations as requiring approval by default
+     * - Protect sensitive data access across all agents using this server
+     * - Establish organization-wide safety policies for dangerous tools
+     *
+     * Example (GitHub MCP):
+     *   default_tool_approvals:
+     *     - tool_name: "delete_repository"
+     *       message: "Delete repository: {{args.repo}}"
+     *     - tool_name: "force_push"
+     *       message: "Force push to {{args.branch}}"
+     *     - tool_name: "add_collaborator"
+     *       message: "Add {{args.user}} as collaborator to {{args.repo}}"
+     *
+     * Example (Database MCP):
+     *   default_tool_approvals:
+     *     - tool_name: "execute_sql"
+     *       message: "Execute SQL: {{args.query}}"
+     *     - tool_name: "drop_table"
+     *       message: "Drop table: {{args.table_name}}"
+     *
+     * Tools not listed here do not require approval by default.
+     * Agents can still add approval requirements via tool_approval_overrides.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.mcpserver.v1.ToolApprovalPolicy default_tool_approvals = 9;
+     */
+    defaultToolApprovals: ToolApprovalPolicy[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServerSpec.
+ * Use `create(McpServerSpecSchema)` to create a new message.
+ */
+export declare const McpServerSpecSchema: GenMessage<McpServerSpec>;
+/**
+ * StdioServerConfig defines an MCP server that runs as a subprocess.
+ * Communication happens via stdin/stdout using JSON-RPC messages.
+ *
+ * This is the most common MCP server type, used for:
+ * - Node.js servers: npx @modelcontextprotocol/server-github
+ * - Python servers: python -m mcp_server_sqlite
+ * - Go servers: ./mcp-server-binary
+ *
+ * The agent runner starts this process and communicates via stdio.
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.StdioServerConfig
+ */
+export type StdioServerConfig = Message<"ai.stigmer.agentic.mcpserver.v1.StdioServerConfig"> & {
+    /**
+     * Command to execute the MCP server.
+     * This is the executable name or path.
+     * Examples: "npx", "python", "node", "./custom-mcp-server"
+     *
+     * @generated from field: string command = 1;
+     */
+    command: string;
+    /**
+     * Arguments to pass to the command.
+     * Examples:
+     * - For npx: ["-y", "@modelcontextprotocol/server-github"]
+     * - For python: ["-m", "mcp_server_sqlite", "--db-path", "/data/db.sqlite"]
+     *
+     * @generated from field: repeated string args = 2;
+     */
+    args: string[];
+    /**
+     * Working directory for the process.
+     * If not specified, the process inherits the agent runner's working directory.
+     * Use absolute paths or paths relative to the agent runner's context.
+     *
+     * @generated from field: string working_dir = 3;
+     */
+    workingDir: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.StdioServerConfig.
+ * Use `create(StdioServerConfigSchema)` to create a new message.
+ */
+export declare const StdioServerConfigSchema: GenMessage<StdioServerConfig>;
+/**
+ * HttpServerConfig defines an MCP server accessible via HTTP + Server-Sent Events.
+ * Used for remote/managed MCP services that expose an HTTP endpoint.
+ *
+ * Communication flow:
+ * 1. Agent sends JSON-RPC requests via HTTP POST
+ * 2. Server streams responses via Server-Sent Events (SSE)
+ *
+ * This is useful for:
+ * - Managed MCP services (e.g., hosted by a cloud provider)
+ * - MCP servers behind a reverse proxy or API gateway
+ * - Sharing a single MCP server instance across multiple agents
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.HttpServerConfig
+ */
+export type HttpServerConfig = Message<"ai.stigmer.agentic.mcpserver.v1.HttpServerConfig"> & {
+    /**
+     * Base URL of the MCP server endpoint.
+     * Must be a valid HTTP or HTTPS URL.
+     * Examples:
+     * - "http://localhost:3000/mcp"
+     * - "https://mcp.example.com/v1"
+     * - "https://api.company.com/mcp/github"
+     *
+     * @generated from field: string url = 1;
+     */
+    url: string;
+    /**
+     * HTTP headers to include with every request.
+     * Use for authentication, API versioning, or custom routing.
+     *
+     * Header values can reference environment variables using ${VAR_NAME} syntax.
+     * These placeholders are resolved at runtime from AgentInstance's environment.
+     *
+     * Examples:
+     *   "Authorization": "Bearer ${API_TOKEN}"
+     *   "X-API-Version": "2024-01"
+     *   "X-Tenant-ID": "${TENANT_ID}"
+     *
+     * @generated from field: map<string, string> headers = 2;
+     */
+    headers: {
+        [key: string]: string;
+    };
+    /**
+     * Query parameters to append to the URL.
+     * Values can reference environment variables using ${VAR_NAME} syntax.
+     *
+     * Examples:
+     *   "region": "${AWS_REGION}"
+     *   "version": "v1"
+     *
+     * @generated from field: map<string, string> query_params = 3;
+     */
+    queryParams: {
+        [key: string]: string;
+    };
+    /**
+     * Timeout for HTTP requests in seconds.
+     * Applies to both the initial connection and response streaming.
+     * Default: 30 seconds if not specified.
+     * Set higher values for MCP servers that perform long-running operations.
+     *
+     * @generated from field: int32 timeout_seconds = 4;
+     */
+    timeoutSeconds: number;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.HttpServerConfig.
+ * Use `create(HttpServerConfigSchema)` to create a new message.
+ */
+export declare const HttpServerConfigSchema: GenMessage<HttpServerConfig>;
+/**
+ * ToolApprovalPolicy defines approval requirements for a specific tool.
+ *
+ * ## Message Templates
+ *
+ * The message field supports {{args.field}} placeholders that are resolved
+ * at runtime using the actual tool arguments. This enables contextual
+ * approval messages that help users make informed decisions.
+ *
+ * Placeholder syntax:
+ *   {{args.field_name}} - Replaced with the tool argument value
+ *   {{tool_name}} - Replaced with the tool name (always available)
+ *
+ * If a placeholder references a missing argument, it's replaced with "<unknown>".
+ *
+ * ## Examples
+ *
+ * Simple message:
+ *   tool_name: "send_email"
+ *   message: "Send email to {{args.recipient}}"
+ *   Result: "Send email to customer@example.com"
+ *
+ * Multiple placeholders:
+ *   tool_name: "delete_file"
+ *   message: "Delete {{args.path}} from {{args.repository}}"
+ *   Result: "Delete src/main.py from acme/webapp"
+ *
+ * Default message (empty):
+ *   tool_name: "dangerous_operation"
+ *   message: ""
+ *   Result: "Execute tool: dangerous_operation" (auto-generated)
+ *
+ * ## Policy Chain
+ *
+ * This policy sits at the McpServer level. The full approval policy chain is:
+ * 1. McpServer.default_tool_approvals (this message) - Platform/org defaults
+ * 2. Agent.McpServerUsage.tool_approval_overrides - Per-agent customization
+ * 3. AgentExecution.auto_approve_all - Runtime bypass
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.ToolApprovalPolicy
+ */
+export type ToolApprovalPolicy = Message<"ai.stigmer.agentic.mcpserver.v1.ToolApprovalPolicy"> & {
+    /**
+     * Name of the tool (must match tools/list from MCP server exactly).
+     * Case-sensitive matching against tool names reported by the MCP server.
+     * Example: "delete_repository", "send_email", "execute_sql"
+     *
+     * @generated from field: string tool_name = 1;
+     */
+    toolName: string;
+    /**
+     * Human-readable message shown to user when approval is requested.
+     * Supports {{args.field}} placeholders for dynamic content.
+     *
+     * If empty, a default message is generated: "Execute tool: {tool_name}"
+     *
+     * Guidelines for effective messages:
+     *   - Be specific about what will happen
+     *   - Include the most important argument values using placeholders
+     *   - Keep under 100 characters for UI display
+     *   - Use action verbs: "Delete", "Send", "Execute", "Create"
+     *
+     * @generated from field: string message = 2;
+     */
+    message: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.ToolApprovalPolicy.
+ * Use `create(ToolApprovalPolicySchema)` to create a new message.
+ */
+export declare const ToolApprovalPolicySchema: GenMessage<ToolApprovalPolicy>;