@stigmer/protos 0.0.77 → 0.0.78

package/ai/stigmer/agentic/mcpserver/v1/command_connect.d.ts

@@ -145,5 +145,65 @@ export declare const McpServerCommandController: {
             readonly O: any;
             readonly kind: any;
         };
+        /**
+         * Start the OAuth authorization flow for an MCP server.
+         *
+         * Performs setup (DCR registration or OAuthApp credential lookup, PKCE
+         * generation) and returns an authorization URL for the frontend to
+         * redirect the user to. The frontend calls completeOAuthConnect after
+         * the user authorizes.
+         *
+         * @internal
+         * Two auth modes determined by the MCP server's spec.auth block:
+         * - No oauth_app_ref: MCP Authorization spec (DCR + PKCE). Backend
+         *   discovers the authorization server, registers a client via DCR,
+         *   and builds the auth URL automatically.
+         * - oauth_app_ref set: Vendor OAuth. Backend loads the referenced
+         *   OAuthApp for client credentials and endpoint URLs.
+         *
+         * Errors:
+         * - FAILED_PRECONDITION: MCP server has no auth block, or is stdio
+         *   without oauth_app_ref (DCR requires HTTP transport)
+         * - NOT_FOUND: MCP server or referenced OAuthApp does not exist
+         *
+         * Authorization: Requires can_connect permission on the mcp_server resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.initiateOAuthConnect
+         */
+        readonly initiateOAuthConnect: {
+            readonly name: "initiateOAuthConnect";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Complete the OAuth authorization flow by exchanging the authorization
+         * code for tokens.
+         *
+         * Called by the frontend after the user is redirected back from the
+         * OAuth authorization server. Exchanges the code for tokens, stores
+         * them in the user's personal environment, and creates an OAuthGrant
+         * record for pre-flight expiry checks.
+         *
+         * After success, the frontend should call connect() to trigger tool
+         * discovery using the freshly acquired token.
+         *
+         * @internal
+         * Errors:
+         * - FAILED_PRECONDITION: State parameter is invalid, expired, or does
+         *   not match the mcp_server_id
+         * - UNAVAILABLE: Token exchange with the authorization server failed
+         * - NOT_FOUND: No pending OAuth state found for the given state param
+         *
+         * Authorization: Requires can_connect permission on the mcp_server resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.completeOAuthConnect
+         */
+        readonly completeOAuthConnect: {
+            readonly name: "completeOAuthConnect";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
     };
 };

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js

@@ -150,6 +150,66 @@ export const McpServerCommandController = {
             O: McpServer,
             kind: MethodKind.Unary,
         },
+        /**
+         * Start the OAuth authorization flow for an MCP server.
+         *
+         * Performs setup (DCR registration or OAuthApp credential lookup, PKCE
+         * generation) and returns an authorization URL for the frontend to
+         * redirect the user to. The frontend calls completeOAuthConnect after
+         * the user authorizes.
+         *
+         * @internal
+         * Two auth modes determined by the MCP server's spec.auth block:
+         * - No oauth_app_ref: MCP Authorization spec (DCR + PKCE). Backend
+         *   discovers the authorization server, registers a client via DCR,
+         *   and builds the auth URL automatically.
+         * - oauth_app_ref set: Vendor OAuth. Backend loads the referenced
+         *   OAuthApp for client credentials and endpoint URLs.
+         *
+         * Errors:
+         * - FAILED_PRECONDITION: MCP server has no auth block, or is stdio
+         *   without oauth_app_ref (DCR requires HTTP transport)
+         * - NOT_FOUND: MCP server or referenced OAuthApp does not exist
+         *
+         * Authorization: Requires can_connect permission on the mcp_server resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.initiateOAuthConnect
+         */
+        initiateOAuthConnect: {
+            name: "initiateOAuthConnect",
+            I: InitiateOAuthConnectInput,
+            O: InitiateOAuthConnectOutput,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Complete the OAuth authorization flow by exchanging the authorization
+         * code for tokens.
+         *
+         * Called by the frontend after the user is redirected back from the
+         * OAuth authorization server. Exchanges the code for tokens, stores
+         * them in the user's personal environment, and creates an OAuthGrant
+         * record for pre-flight expiry checks.
+         *
+         * After success, the frontend should call connect() to trigger tool
+         * discovery using the freshly acquired token.
+         *
+         * @internal
+         * Errors:
+         * - FAILED_PRECONDITION: State parameter is invalid, expired, or does
+         *   not match the mcp_server_id
+         * - UNAVAILABLE: Token exchange with the authorization server failed
+         * - NOT_FOUND: No pending OAuth state found for the given state param
+         *
+         * Authorization: Requires can_connect permission on the mcp_server resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.completeOAuthConnect
+         */
+        completeOAuthConnect: {
+            name: "completeOAuthConnect",
+            I: CompleteOAuthConnectInput,
+            O: CompleteOAuthConnectOutput,
+            kind: MethodKind.Unary,
+        },
     }
 };
 //# sourceMappingURL=command_connect.js.map

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_pb.d.ts

@@ -1,6 +1,6 @@
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
 import type { McpServerSchema } from "./api_pb";
-import type { ConnectInputSchema } from "./io_pb";
+import type { CompleteOAuthConnectInputSchema, CompleteOAuthConnectOutputSchema, ConnectInputSchema, InitiateOAuthConnectInputSchema, InitiateOAuthConnectOutputSchema } from "./io_pb";
 import type { ApiResourceDeleteInputSchema, UpdateVisibilityInputSchema } from "../../../commons/apiresource/io_pb";
 /**
  * Describes the file ai/stigmer/agentic/mcpserver/v1/command.proto.
@@ -145,4 +145,62 @@ export declare const McpServerCommandController: GenService<{
         input: typeof ConnectInputSchema;
         output: typeof McpServerSchema;
     };
+    /**
+     * Start the OAuth authorization flow for an MCP server.
+     *
+     * Performs setup (DCR registration or OAuthApp credential lookup, PKCE
+     * generation) and returns an authorization URL for the frontend to
+     * redirect the user to. The frontend calls completeOAuthConnect after
+     * the user authorizes.
+     *
+     * @internal
+     * Two auth modes determined by the MCP server's spec.auth block:
+     * - No oauth_app_ref: MCP Authorization spec (DCR + PKCE). Backend
+     *   discovers the authorization server, registers a client via DCR,
+     *   and builds the auth URL automatically.
+     * - oauth_app_ref set: Vendor OAuth. Backend loads the referenced
+     *   OAuthApp for client credentials and endpoint URLs.
+     *
+     * Errors:
+     * - FAILED_PRECONDITION: MCP server has no auth block, or is stdio
+     *   without oauth_app_ref (DCR requires HTTP transport)
+     * - NOT_FOUND: MCP server or referenced OAuthApp does not exist
+     *
+     * Authorization: Requires can_connect permission on the mcp_server resource.
+     *
+     * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.initiateOAuthConnect
+     */
+    initiateOAuthConnect: {
+        methodKind: "unary";
+        input: typeof InitiateOAuthConnectInputSchema;
+        output: typeof InitiateOAuthConnectOutputSchema;
+    };
+    /**
+     * Complete the OAuth authorization flow by exchanging the authorization
+     * code for tokens.
+     *
+     * Called by the frontend after the user is redirected back from the
+     * OAuth authorization server. Exchanges the code for tokens, stores
+     * them in the user's personal environment, and creates an OAuthGrant
+     * record for pre-flight expiry checks.
+     *
+     * After success, the frontend should call connect() to trigger tool
+     * discovery using the freshly acquired token.
+     *
+     * @internal
+     * Errors:
+     * - FAILED_PRECONDITION: State parameter is invalid, expired, or does
+     *   not match the mcp_server_id
+     * - UNAVAILABLE: Token exchange with the authorization server failed
+     * - NOT_FOUND: No pending OAuth state found for the given state param
+     *
+     * Authorization: Requires can_connect permission on the mcp_server resource.
+     *
+     * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.completeOAuthConnect
+     */
+    completeOAuthConnect: {
+        methodKind: "unary";
+        input: typeof CompleteOAuthConnectInputSchema;
+        output: typeof CompleteOAuthConnectOutputSchema;
+    };
 }>;

package/ai/stigmer/agentic/mcpserver/v1/command_pb.js

@@ -10,7 +10,7 @@ import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc
 /**
  * Describes the file ai/stigmer/agentic/mcpserver/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_mcpserver_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_mcpserver_v1_api, file_ai_stigmer_agentic_mcpserver_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+export const file_ai_stigmer_agentic_mcpserver_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_mcpserver_v1_api, file_ai_stigmer_agentic_mcpserver_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
 /**
  * McpServerCommandController provides write operations for MCP server resources.
  *

package/ai/stigmer/agentic/mcpserver/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAE,uCAAuC,EAAE,MAAM,SAAS,CAAC;AAElE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,k0CAAk0C,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjjD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GA6HlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAE,uCAAuC,EAAE,MAAM,SAAS,CAAC;AAElE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,65DAA65D,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5oE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAuLlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/io_pb.d.ts

@@ -80,3 +80,159 @@ export type ConnectInput = Message<"ai.stigmer.agentic.mcpserver.v1.ConnectInput
  * Use `create(ConnectInputSchema)` to create a new message.
  */
 export declare const ConnectInputSchema: GenMessage<ConnectInput>;
+/**
+ * InitiateOAuthConnectInput starts the OAuth authorization flow for an
+ * MCP server that has an auth block in its spec.
+ *
+ * @internal
+ * Returns an authorization URL that the frontend redirects the user to.
+ * The backend performs all setup (DCR registration for MCP OAuth servers,
+ * OAuthApp credential lookup for vendor OAuth servers, PKCE pair generation)
+ * and stores the pending state for the subsequent completeOAuthConnect call.
+ *
+ * Prerequisites:
+ * - The MCP server must exist and have spec.auth configured
+ * - For DCR: the server must use HTTP transport (discovery requires a URL)
+ * - For vendor OAuth: the referenced OAuthApp must exist and be accessible
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.InitiateOAuthConnectInput
+ */
+export type InitiateOAuthConnectInput = Message<"ai.stigmer.agentic.mcpserver.v1.InitiateOAuthConnectInput"> & {
+    /**
+     * System-generated ID of the MCP server to initiate OAuth for.
+     *
+     * @generated from field: string mcp_server_id = 1;
+     */
+    mcpServerId: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.InitiateOAuthConnectInput.
+ * Use `create(InitiateOAuthConnectInputSchema)` to create a new message.
+ */
+export declare const InitiateOAuthConnectInputSchema: GenMessage<InitiateOAuthConnectInput>;
+/**
+ * InitiateOAuthConnectOutput contains the authorization URL and metadata
+ * the frontend needs to redirect the user to the OAuth authorization server.
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.InitiateOAuthConnectOutput
+ */
+export type InitiateOAuthConnectOutput = Message<"ai.stigmer.agentic.mcpserver.v1.InitiateOAuthConnectOutput"> & {
+    /**
+     * Full authorization URL to redirect the user to.
+     * Includes client_id, redirect_uri, code_challenge, state, and scopes.
+     *
+     * @generated from field: string authorization_url = 1;
+     */
+    authorizationUrl: string;
+    /**
+     * Opaque state parameter for CSRF protection.
+     * The frontend must pass this back in completeOAuthConnect to correlate
+     * the callback with this initiation.
+     *
+     * @generated from field: string state = 2;
+     */
+    state: string;
+    /**
+     * OAuth scopes that will be requested.
+     * For DCR: discovered from authorization server metadata or scope_hints.
+     * For vendor OAuth: from the OAuthApp spec.
+     *
+     * @generated from field: repeated string scopes = 3;
+     */
+    scopes: string[];
+    /**
+     * Human-readable provider name for UI display during the redirect.
+     * For DCR: derived from the MCP server name.
+     * For vendor OAuth: from OAuthApp.spec.provider.
+     *
+     * @generated from field: string provider_name = 4;
+     */
+    providerName: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.InitiateOAuthConnectOutput.
+ * Use `create(InitiateOAuthConnectOutputSchema)` to create a new message.
+ */
+export declare const InitiateOAuthConnectOutputSchema: GenMessage<InitiateOAuthConnectOutput>;
+/**
+ * CompleteOAuthConnectInput finishes the OAuth flow by exchanging the
+ * authorization code for tokens.
+ *
+ * @internal
+ * Called by the frontend after the user is redirected back from the
+ * OAuth authorization server. The frontend extracts the authorization
+ * code and state from the callback URL and passes them here.
+ *
+ * The backend:
+ * 1. Validates the state parameter against the stored PendingOAuthState
+ * 2. Exchanges the authorization code for tokens (using PKCE code_verifier)
+ * 3. Stores the access token in the user's personal environment
+ * 4. Stores the refresh token (if present) in the personal environment
+ * 5. Creates an OAuthGrant record for pre-flight expiry checks
+ *
+ * After this succeeds, the frontend should call the regular connect RPC
+ * to trigger tool discovery (which will find the fresh token in the
+ * personal environment).
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.CompleteOAuthConnectInput
+ */
+export type CompleteOAuthConnectInput = Message<"ai.stigmer.agentic.mcpserver.v1.CompleteOAuthConnectInput"> & {
+    /**
+     * System-generated ID of the MCP server.
+     * Must match the mcp_server_id used in the preceding initiateOAuthConnect.
+     *
+     * @generated from field: string mcp_server_id = 1;
+     */
+    mcpServerId: string;
+    /**
+     * Authorization code from the OAuth callback redirect.
+     *
+     * @generated from field: string authorization_code = 2;
+     */
+    authorizationCode: string;
+    /**
+     * State parameter from the OAuth callback redirect.
+     * Must match the state returned by initiateOAuthConnect.
+     *
+     * @generated from field: string state = 3;
+     */
+    state: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.CompleteOAuthConnectInput.
+ * Use `create(CompleteOAuthConnectInputSchema)` to create a new message.
+ */
+export declare const CompleteOAuthConnectInputSchema: GenMessage<CompleteOAuthConnectInput>;
+/**
+ * CompleteOAuthConnectOutput confirms that tokens were successfully
+ * acquired and stored.
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.CompleteOAuthConnectOutput
+ */
+export type CompleteOAuthConnectOutput = Message<"ai.stigmer.agentic.mcpserver.v1.CompleteOAuthConnectOutput"> & {
+    /**
+     * Whether the OAuth flow completed successfully and tokens are stored.
+     *
+     * @generated from field: bool connected = 1;
+     */
+    connected: boolean;
+    /**
+     * The environment variable name where the access token was stored.
+     * Matches McpServerAuth.target_env_var on the MCP server spec.
+     *
+     * @generated from field: string target_env_var = 2;
+     */
+    targetEnvVar: string;
+    /**
+     * Informational hint about expected token lifetime.
+     * Echoed from McpServerAuth.token_lifetime_hint for UI display.
+     *
+     * @generated from field: string token_lifetime_hint = 3;
+     */
+    tokenLifetimeHint: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.CompleteOAuthConnectOutput.
+ * Use `create(CompleteOAuthConnectOutputSchema)` to create a new message.
+ */
+export declare const CompleteOAuthConnectOutputSchema: GenMessage<CompleteOAuthConnectOutput>;

package/ai/stigmer/agentic/mcpserver/v1/io_pb.js

@@ -7,7 +7,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/mcpserver/v1/io.proto.
  */
-export const file_ai_stigmer_agentic_mcpserver_v1_io = /*@__PURE__*/ fileDesc("CihhaS9zdGlnbWVyL2FnZW50aWMvbWNwc2VydmVyL3YxL2lvLnByb3RvEh9haS5zdGlnbWVyLmFnZW50aWMubWNwc2VydmVyLnYxIiQKC01jcFNlcnZlcklkEhUKBXZhbHVlGAEgASgJQga6SAPIAQEi7AEKDENvbm5lY3RJbnB1dBIdCg1tY3Bfc2VydmVyX2lkGAEgASgJQga6SAPIAQESUgoLcnVudGltZV9lbnYYAiADKAsyPS5haS5zdGlnbWVyLmFnZW50aWMubWNwc2VydmVyLnYxLkNvbm5lY3RJbnB1dC5SdW50aW1lRW52RW50cnkaaQoPUnVudGltZUVudkVudHJ5EgsKA2tleRgBIAEoCRJFCgV2YWx1ZRgCIAEoCzI2LmFpLnN0aWdtZXIuYWdlbnRpYy5leGVjdXRpb25jb250ZXh0LnYxLkV4ZWN1dGlvblZhbHVlOgI4AWIGcHJvdG8z", [file_ai_stigmer_agentic_executioncontext_v1_spec, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_mcpserver_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_executioncontext_v1_spec, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServerId.
  * Use `create(McpServerIdSchema)` to create a new message.
@@ -18,4 +18,24 @@ export const McpServerIdSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agent
  * Use `create(ConnectInputSchema)` to create a new message.
  */
 export const ConnectInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_io, 1);
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.InitiateOAuthConnectInput.
+ * Use `create(InitiateOAuthConnectInputSchema)` to create a new message.
+ */
+export const InitiateOAuthConnectInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_io, 2);
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.InitiateOAuthConnectOutput.
+ * Use `create(InitiateOAuthConnectOutputSchema)` to create a new message.
+ */
+export const InitiateOAuthConnectOutputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_io, 3);
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.CompleteOAuthConnectInput.
+ * Use `create(CompleteOAuthConnectInputSchema)` to create a new message.
+ */
+export const CompleteOAuthConnectInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_io, 4);
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.CompleteOAuthConnectOutput.
+ * Use `create(CompleteOAuthConnectOutputSchema)` to create a new message.
+ */
+export const CompleteOAuthConnectOutputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_io, 5);
 //# sourceMappingURL=io_pb.js.map

package/ai/stigmer/agentic/mcpserver/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,gDAAgD,EAAE,MAAM,mCAAmC,CAAC;AACrG,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,keAAke,EAAE,CAAC,gDAAgD,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAoB/jB;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAkD1D;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,gDAAgD,EAAE,MAAM,mCAAmC,CAAC;AACrG,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,g/BAAg/B,EAAE,CAAC,gDAAgD,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAoB7kC;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAkD1D;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AA4B1D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AA6C1D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAiD1D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAiC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/oauth_pb.d.ts

@@ -0,0 +1,102 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/oauth.proto.
+ */
+export declare const file_ai_stigmer_agentic_mcpserver_v1_oauth: GenFile;
+/**
+ * OAuthGrant tracks OAuth metadata for a user's MCP server connection.
+ *
+ * @internal
+ * Infrastructure-only. Not a public API resource — no kind, no apiVersion,
+ * no CRUD RPCs. Stored in the backend's database, keyed by the composite
+ * of (identity_account_id, mcp_server_id).
+ *
+ * Actual tokens (access + refresh) live in the user's personal environment
+ * as secret env vars. OAuthGrant only holds non-secret metadata needed
+ * by the refresh mechanism and pre-flight expiry checks.
+ *
+ * Storage split rationale:
+ * - Personal environment: access token (target_env_var), refresh token
+ *   ({target_env_var}_REFRESH_TOKEN). These are secrets, encrypted at rest,
+ *   subject to Environment access control.
+ * - OAuthGrant: expiry timestamp, client_id, token_endpoint, env var names.
+ *   These are non-secret metadata that the backend reads during pre-flight
+ *   checks without needing secret-read permissions on the Environment.
+ *
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.OAuthGrant
+ */
+export type OAuthGrant = Message<"ai.stigmer.agentic.mcpserver.v1.OAuthGrant"> & {
+    /**
+     * Which user owns this grant.
+     *
+     * @generated from field: string identity_account_id = 1;
+     */
+    identityAccountId: string;
+    /**
+     * Which MCP server this grant is for.
+     *
+     * @generated from field: string mcp_server_id = 2;
+     */
+    mcpServerId: string;
+    /**
+     * When the current access token expires (Unix timestamp seconds).
+     * 0 means the token does not expire (e.g., long-lived tokens from
+     * Notion or Slack user tokens).
+     *
+     * @generated from field: int64 access_token_expires_at = 3;
+     */
+    accessTokenExpiresAt: bigint;
+    /**
+     * OAuth client ID used for this grant.
+     * For mcp_oauth: obtained via Dynamic Client Registration.
+     * For vendor_oauth: copied from the referenced OAuthApp.spec.client_id.
+     *
+     * @generated from field: string client_id = 4;
+     */
+    clientId: string;
+    /**
+     * Which auth method was used to obtain this grant.
+     * Values: "mcp_oauth" or "vendor_oauth".
+     * Determines how token refresh is performed (DCR client vs. OAuthApp credentials).
+     *
+     * @generated from field: string auth_method = 5;
+     */
+    authMethod: string;
+    /**
+     * Token endpoint URL for refresh requests.
+     * For mcp_oauth: discovered via .well-known/oauth-authorization-server.
+     * For vendor_oauth: copied from OAuthApp.spec.token_url.
+     *
+     * @generated from field: string token_endpoint = 6;
+     */
+    tokenEndpoint: string;
+    /**
+     * Env var name where the access token is stored in the personal environment.
+     * Matches McpServerAuth.target_env_var on the McpServer spec.
+     *
+     * @generated from field: string access_token_env_var = 7;
+     */
+    accessTokenEnvVar: string;
+    /**
+     * Env var name where the refresh token is stored in the personal environment.
+     * Convention: {target_env_var}_REFRESH_TOKEN.
+     *
+     * @generated from field: string refresh_token_env_var = 8;
+     */
+    refreshTokenEnvVar: string;
+    /**
+     * Which Environment resource holds the tokens.
+     * The refresh mechanism reads/writes tokens in this environment.
+     * Default: the user's personal environment (stigmer.ai/personal=true label).
+     * Stored explicitly to allow future flexibility for team or project environments.
+     *
+     * @generated from field: string environment_id = 9;
+     */
+    environmentId: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.OAuthGrant.
+ * Use `create(OAuthGrantSchema)` to create a new message.
+ */
+export declare const OAuthGrantSchema: GenMessage<OAuthGrant>;

package/ai/stigmer/agentic/mcpserver/v1/oauth_pb.js

@@ -0,0 +1,14 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/mcpserver/v1/oauth.proto (package ai.stigmer.agentic.mcpserver.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file ai/stigmer/agentic/mcpserver/v1/oauth.proto.
+ */
+export const file_ai_stigmer_agentic_mcpserver_v1_oauth = /*@__PURE__*/ fileDesc("CithaS9zdGlnbWVyL2FnZW50aWMvbWNwc2VydmVyL3YxL29hdXRoLnByb3RvEh9haS5zdGlnbWVyLmFnZW50aWMubWNwc2VydmVyLnYxIvYBCgpPQXV0aEdyYW50EhsKE2lkZW50aXR5X2FjY291bnRfaWQYASABKAkSFQoNbWNwX3NlcnZlcl9pZBgCIAEoCRIfChdhY2Nlc3NfdG9rZW5fZXhwaXJlc19hdBgDIAEoAxIRCgljbGllbnRfaWQYBCABKAkSEwoLYXV0aF9tZXRob2QYBSABKAkSFgoOdG9rZW5fZW5kcG9pbnQYBiABKAkSHAoUYWNjZXNzX3Rva2VuX2Vudl92YXIYByABKAkSHQoVcmVmcmVzaF90b2tlbl9lbnZfdmFyGAggASgJEhYKDmVudmlyb25tZW50X2lkGAkgASgJYgZwcm90bzM");
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.OAuthGrant.
+ * Use `create(OAuthGrantSchema)` to create a new message.
+ */
+export const OAuthGrantSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_oauth, 0);
+//# sourceMappingURL=oauth_pb.js.map

package/ai/stigmer/agentic/mcpserver/v1/oauth_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/oauth_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,icAAic,CAAC,CAAC;AAsG9c;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}