@stigmer/protos 3.11.1-dev.20260812192248 → 3.12.1

package/ai/stigmer/activity/v1/io_pb.d.ts

@@ -83,6 +83,10 @@ export type ListRecentActivityRequest = Message<"ai.stigmer.activity.v1.ListRece
      * When empty, results span every organization the caller has resource
      * access in.
      *
+     * On the OSS edition the filter is a no-op: the server is single-tenant,
+     * so org scoping has nothing to narrow — matching the per-kind OSS list
+     * RPCs this feed summarizes.
+     *
      * @generated from field: string org = 2;
      */
     org: string;

package/ai/stigmer/activity/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uGAAuG;AACvG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAY,aAAa,CAClE,QAAQ,CAAC,odAAod,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;AAoDngB;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;AAoCjD;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;AAiBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uGAAuG;AACvG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAY,aAAa,CAClE,QAAQ,CAAC,odAAod,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;AAoDngB;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;AAwCjD;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;AAiBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/activity/v1/query_connect.d.ts

@@ -24,8 +24,10 @@ export declare const ActivityQueryController: {
          * sessions and workflow executions. On the hosted edition, per-resource
          * authorization filtering is applied server-side (FGA `can_view`
          * enumeration for both kinds — the same permission the per-kind `get`
-         * RPCs enforce, so every listed entry is openable by construction). The
-         * OSS server does not currently implement this RPC (stigmer#461).
+         * RPCs enforce, so every listed entry is openable by construction). On
+         * the OSS edition the server is single-tenant: the caller owns every
+         * stored resource, so there is no authorization set to enumerate and the
+         * request's org is a no-op (stigmer#461).
          *
          * @internal
          * Authorization is handled in-handler: the FGA id enumeration is the only

package/ai/stigmer/activity/v1/query_connect.js

@@ -30,8 +30,10 @@ export const ActivityQueryController = {
          * sessions and workflow executions. On the hosted edition, per-resource
          * authorization filtering is applied server-side (FGA `can_view`
          * enumeration for both kinds — the same permission the per-kind `get`
-         * RPCs enforce, so every listed entry is openable by construction). The
-         * OSS server does not currently implement this RPC (stigmer#461).
+         * RPCs enforce, so every listed entry is openable by construction). On
+         * the OSS edition the server is single-tenant: the caller owns every
+         * stored resource, so there is no authorization set to enumerate and the
+         * request's org is a no-op (stigmer#461).
          *
          * @internal
          * Authorization is handled in-handler: the FGA id enumeration is the only

package/ai/stigmer/activity/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0GAA0G;AAC1G,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,gDAAgD;IAC1D,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;WAgBG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0GAA0G;AAC1G,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,gDAAgD;IAC1D,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;WAkBG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/activity/v1/query_pb.d.ts

@@ -28,8 +28,10 @@ export declare const ActivityQueryController: GenService<{
      * sessions and workflow executions. On the hosted edition, per-resource
      * authorization filtering is applied server-side (FGA `can_view`
      * enumeration for both kinds — the same permission the per-kind `get`
-     * RPCs enforce, so every listed entry is openable by construction). The
-     * OSS server does not currently implement this RPC (stigmer#461).
+     * RPCs enforce, so every listed entry is openable by construction). On
+     * the OSS edition the server is single-tenant: the caller owns every
+     * stored resource, so there is no authorization set to enumerate and the
+     * request's org is a no-op (stigmer#461).
      *
      * @internal
      * Authorization is handled in-handler: the FGA id enumeration is the only

package/ai/stigmer/activity/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0GAA0G;AAC1G,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG;;GAEG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAY,aAAa,CACrE,QAAQ,CAAC,kTAAkT,EAAE,CAAC,8BAA8B,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE7Y;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAuB/B,aAAa,CAChB,WAAW,CAAC,iCAAiC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0GAA0G;AAC1G,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG;;GAEG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAY,aAAa,CACrE,QAAQ,CAAC,kTAAkT,EAAE,CAAC,8BAA8B,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE7Y;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAyB/B,aAAa,CAChB,WAAW,CAAC,iCAAiC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agent/v1/spec_pb.d.ts

@@ -64,13 +64,6 @@ export type AgentSpec = Message<"ai.stigmer.agentic.agent.v1.AgentSpec"> & {
     env: {
         [key: string]: EnvVarDeclaration;
     };
-    /**
-     * Datastores this agent can use.
-     * Each entry must reference a Datastore resource by slug.
-     *
-     * @generated from field: repeated ai.stigmer.agentic.agent.v1.DatastoreUsage datastore_usages = 9;
-     */
-    datastoreUsages: DatastoreUsage[];
 };
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.AgentSpec.
@@ -165,16 +158,24 @@ export type McpServerUsage = Message<"ai.stigmer.agentic.agent.v1.McpServerUsage
      * Only names from discovered_capabilities.tools are valid here.
      * Do NOT include names from discovered_capabilities.resource_templates —
      * resource templates are read-only data endpoints, not callable tools.
-     * A name the server does not expose (including a resource template name)
-     * is warned and ignored at execution: the runner enforces the INTERSECTION
-     * with the server's live toolset, so a stale or mistyped entry narrows the
-     * toolset but never widens it or fails the run.
      *
-     * Enforcement: the native (deep-agent) harness filters the discovered
-     * toolset before it reaches the model; the Cursor harness cannot hide a
-     * server's tools (its SDK config has no allow-list field), so its HITL
-     * hook permanently denies calls to non-enabled tools instead — the model
-     * may still see the tool listed, but every call is refused.
+     * Enforcement is two-layered:
+     *   - Apply time: agent create/update/apply rejects (INVALID_ARGUMENT) any
+     *     name the referenced server's discovered_capabilities.tools does not
+     *     contain, with the valid names in the error. The check is skipped when
+     *     the server has no discovered capabilities yet (never connected) —
+     *     there is nothing authoritative to validate against in that window.
+     *   - Execution time: the runner enforces the INTERSECTION with the
+     *     server's live toolset — an unknown name (possible when the manifest
+     *     was applied before the server's first connect, or when the toolset
+     *     changed since) is warned in the runner log and ignored, so a stale
+     *     entry narrows the toolset but never widens it or fails the run.
+     *
+     * Per-harness runtime enforcement: the native (deep-agent) harness filters
+     * the discovered toolset before it reaches the model; the Cursor harness
+     * cannot hide a server's tools (its SDK config has no allow-list field),
+     * so its HITL hook permanently denies calls to non-enabled tools instead —
+     * the model may still see the tool listed, but every call is refused.
      *
      * @generated from field: repeated string enabled_tools = 2;
      */
@@ -196,40 +197,6 @@ export type McpServerUsage = Message<"ai.stigmer.agentic.agent.v1.McpServerUsage
  * Use `create(McpServerUsageSchema)` to create a new message.
  */
 export declare const McpServerUsageSchema: GenMessage<McpServerUsage>;
-/**
- * DatastoreUsage declares that this agent uses a Datastore resource.
- *
- * Attaching a datastore gives the agent the built-in record tools
- * (find_records, insert_record, update_record, delete_record,
- * describe_datastore) for it. What each caller may actually do is
- * governed by the datastore's own authorization block, resolved per
- * request from the verified sender or principal behind the session.
- *
- * @internal
- * Usage-wrapper idiom (McpServerUsage precedent) so per-usage fields
- * (approval tightening, verb caps, collection subsets — recorded growth
- * slots) land additively. The usage edge is authorization-bearing for
- * session-bound runner credentials (DD-006 SD-1): the record RPCs
- * resolve reach through it live, per call, fail-closed. The runner
- * synthesizes one bridge MCP attachment with an injected execution
- * credential and empty approval maps — record tools are approval-free
- * by construction.
- *
- * @generated from message ai.stigmer.agentic.agent.v1.DatastoreUsage
- */
-export type DatastoreUsage = Message<"ai.stigmer.agentic.agent.v1.DatastoreUsage"> & {
-    /**
-     * Reference to the Datastore resource.
-     *
-     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference datastore_ref = 1;
-     */
-    datastoreRef?: ApiResourceReference;
-};
-/**
- * Describes the message ai.stigmer.agentic.agent.v1.DatastoreUsage.
- * Use `create(DatastoreUsageSchema)` to create a new message.
- */
-export declare const DatastoreUsageSchema: GenMessage<DatastoreUsage>;
 /**
  * McpAccess grants a sub-agent access to one of the parent's MCP servers.
  *

package/ai/stigmer/agentic/agent/v1/spec_pb.js

@@ -9,7 +9,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agent/v1/spec.proto.
  */
-export const file_ai_stigmer_agentic_agent_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agent_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.AgentSpec.
  * Use `create(AgentSpecSchema)` to create a new message.
@@ -25,19 +25,14 @@ export const SubAgentSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_
  * Use `create(McpServerUsageSchema)` to create a new message.
  */
 export const McpServerUsageSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 2);
-/**
- * Describes the message ai.stigmer.agentic.agent.v1.DatastoreUsage.
- * Use `create(DatastoreUsageSchema)` to create a new message.
- */
-export const DatastoreUsageSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 3);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.McpAccess.
  * Use `create(McpAccessSchema)` to create a new message.
  */
-export const McpAccessSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 4);
+export const McpAccessSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 3);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.ToolApprovalOverride.
  * Use `create(ToolApprovalOverrideSchema)` to create a new message.
  */
-export const ToolApprovalOverrideSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 5);
+export const ToolApprovalOverrideSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 4);
 //# sourceMappingURL=spec_pb.js.map

package/ai/stigmer/agentic/agent/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,43EAA43E,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA0E/iF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA4DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAgCxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,8/DAA8/D,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkEjrE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoExD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_command_connect.d.ts

@@ -4,10 +4,9 @@
  *
  * @internal
  * proactive-messaging DD-002 D2: the runtime messaging surface beside
- * the AgentChannel resource controllers — the
- * DatastoreRecordCommandController-beside-DatastoreCommandController
- * split, so resource CRUD and runtime traffic never mix. Dual-audience
- * by token-class dispatch (the RecordReach shape): the agent's
+ * the AgentChannel resource controllers — a dedicated runtime service
+ * next to the resource CRUD service, so resource CRUD and runtime
+ * traffic never mix. Dual-audience by token-class dispatch: the agent's
  * send_channel_message tool calls with a session-scoped sandbox token;
  * direct principals (console, CLI, SDK) call with their own identity.
  *

package/ai/stigmer/agentic/agentchannel/v1/message_command_connect.js

@@ -10,10 +10,9 @@ import { MethodKind } from "@bufbuild/protobuf";
  *
  * @internal
  * proactive-messaging DD-002 D2: the runtime messaging surface beside
- * the AgentChannel resource controllers — the
- * DatastoreRecordCommandController-beside-DatastoreCommandController
- * split, so resource CRUD and runtime traffic never mix. Dual-audience
- * by token-class dispatch (the RecordReach shape): the agent's
+ * the AgentChannel resource controllers — a dedicated runtime service
+ * next to the resource CRUD service, so resource CRUD and runtime
+ * traffic never mix. Dual-audience by token-class dispatch: the agent's
  * send_channel_message tool calls with a session-scoped sandbox token;
  * direct principals (console, CLI, SDK) call with their own identity.
  *

package/ai/stigmer/agentic/agentchannel/v1/message_command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"message_command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_command_pb.d.ts

@@ -10,10 +10,9 @@ export declare const file_ai_stigmer_agentic_agentchannel_v1_message_command: Ge
  *
  * @internal
  * proactive-messaging DD-002 D2: the runtime messaging surface beside
- * the AgentChannel resource controllers — the
- * DatastoreRecordCommandController-beside-DatastoreCommandController
- * split, so resource CRUD and runtime traffic never mix. Dual-audience
- * by token-class dispatch (the RecordReach shape): the agent's
+ * the AgentChannel resource controllers — a dedicated runtime service
+ * next to the resource CRUD service, so resource CRUD and runtime
+ * traffic never mix. Dual-audience by token-class dispatch: the agent's
  * send_channel_message tool calls with a session-scoped sandbox token;
  * direct principals (console, CLI, SDK) call with their own identity.
  *

package/ai/stigmer/agentic/agentchannel/v1/message_command_pb.js

@@ -15,10 +15,9 @@ export const file_ai_stigmer_agentic_agentchannel_v1_message_command = /*@__PURE
  *
  * @internal
  * proactive-messaging DD-002 D2: the runtime messaging surface beside
- * the AgentChannel resource controllers — the
- * DatastoreRecordCommandController-beside-DatastoreCommandController
- * split, so resource CRUD and runtime traffic never mix. Dual-audience
- * by token-class dispatch (the RecordReach shape): the agent's
+ * the AgentChannel resource controllers — a dedicated runtime service
+ * next to the resource CRUD service, so resource CRUD and runtime
+ * traffic never mix. Dual-audience by token-class dispatch: the agent's
  * send_channel_message tool calls with a session-scoped sandbox token;
  * direct principals (console, CLI, SDK) call with their own identity.
  *

package/ai/stigmer/agentic/agentchannel/v1/message_command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,uDAAuD,GAAY,aAAa,CAC3F,QAAQ,CAAC,oYAAoY,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5iB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GA6BvC,aAAa,CAChB,WAAW,CAAC,uDAAuD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"message_command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,uDAAuD,GAAY,aAAa,CAC3F,QAAQ,CAAC,oYAAoY,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5iB;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,+BAA+B,GA6BvC,aAAa,CAChB,WAAW,CAAC,uDAAuD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_io_pb.d.ts

@@ -9,8 +9,7 @@ export declare const file_ai_stigmer_agentic_agentchannel_v1_message_io: GenFile
  *
  * @internal
  * proactive-messaging DD-002 D4, amended: channel + org are separate
- * fields (the FindRecordsRequest slug/org precedent), never a
- * slug-or-id union. Dispatch mirrors the datastore record surface:
+ * fields, never a slug-or-id union. Dispatch is token-class-driven:
  * session-bound runner credentials leave both empty and the server
  * derives them from the session's serving channel; direct principals
  * (console, CLI, SDK) set them. Ambiguity — the caller's agent has more

package/ai/stigmer/agentic/agentchannel/v1/message_io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uIAAuI;AACvI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,opEAAopE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAkD/rE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAyCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAgBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwDrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAsCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwGrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAmBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,EAAE,CAAC,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,kBA8BX;AA9BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,mEAAY,CAAA;IAEZ;;;;OAIG;IACH,+DAAU,CAAA;IAEV;;;;;;OAMG;IACH,iEAAW,CAAA;AACb,CAAC,EA9BW,kBAAkB,KAAlB,kBAAkB,QA8B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"message_io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uIAAuI;AACvI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,opEAAopE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAiD/rE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAyCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAgBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwDrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAsCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwGrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAmBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,EAAE,CAAC,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,kBA8BX;AA9BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,mEAAY,CAAA;IAEZ;;;;OAIG;IACH,+DAAU,CAAA;IAEV;;;;;;OAMG;IACH,iEAAW,CAAA;AACb,CAAC,EA9BW,kBAAkB,KAAlB,kBAAkB,QA8B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_query_connect.d.ts

@@ -5,8 +5,7 @@
  * @internal
  * proactive-messaging DD-003 D6: the query sibling of
  * ChannelMessageCommandController — runtime messaging traffic (the send
- * and its supporting reads) stays off the resource CRUD surface, the
- * datastore-domain split applied consistently.
+ * and its supporting reads) stays off the resource CRUD surface.
  *
  * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
  */

package/ai/stigmer/agentic/agentchannel/v1/message_query_connect.js

@@ -11,8 +11,7 @@ import { MethodKind } from "@bufbuild/protobuf";
  * @internal
  * proactive-messaging DD-003 D6: the query sibling of
  * ChannelMessageCommandController — runtime messaging traffic (the send
- * and its supporting reads) stays off the resource CRUD surface, the
- * datastore-domain split applied consistently.
+ * and its supporting reads) stays off the resource CRUD surface.
  *
  * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
  */

package/ai/stigmer/agentic/agentchannel/v1/message_query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC/H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;WAmBG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,qBAAqB,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"message_query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC/H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;WAmBG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,qBAAqB,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_query_pb.d.ts

@@ -11,8 +11,7 @@ export declare const file_ai_stigmer_agentic_agentchannel_v1_message_query: GenF
  * @internal
  * proactive-messaging DD-003 D6: the query sibling of
  * ChannelMessageCommandController — runtime messaging traffic (the send
- * and its supporting reads) stays off the resource CRUD surface, the
- * datastore-domain split applied consistently.
+ * and its supporting reads) stays off the resource CRUD surface.
  *
  * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
  */

package/ai/stigmer/agentic/agentchannel/v1/message_query_pb.js

@@ -16,8 +16,7 @@ export const file_ai_stigmer_agentic_agentchannel_v1_message_query = /*@__PURE__
  * @internal
  * proactive-messaging DD-003 D6: the query sibling of
  * ChannelMessageCommandController — runtime messaging traffic (the send
- * and its supporting reads) stays off the resource CRUD surface, the
- * datastore-domain split applied consistently.
+ * and its supporting reads) stays off the resource CRUD surface.
  *
  * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
  */

package/ai/stigmer/agentic/agentchannel/v1/message_query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,qDAAqD,GAAY,aAAa,CACzF,QAAQ,CAAC,kkBAAkkB,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1uB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAoDrC,aAAa,CAChB,WAAW,CAAC,qDAAqD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"message_query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,qDAAqD,GAAY,aAAa,CACzF,QAAQ,CAAC,kkBAAkkB,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1uB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAoDrC,aAAa,CAChB,WAAW,CAAC,qDAAqD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/context_pb.d.ts

@@ -24,9 +24,10 @@ export declare const file_ai_stigmer_agentic_agentexecution_v1_context: GenFile;
  *
  * ## Timing
  *
- * Populated in execute_graphton.py after Steps 3-5 complete (skills, env vars, MCP servers)
- * but before the streaming loop begins. This represents the "snapshot" of resolved state.
- * Once set, this field is immutable for the remainder of the execution.
+ * Populated by the agent runner once resolution completes (skills, env vars,
+ * MCP servers) but before the streaming loop begins, and reported through the
+ * execution status-update path. This represents the "snapshot" of resolved
+ * state. Once set, this field is immutable for the remainder of the execution.
  *
  * ## Security Considerations
  *
@@ -39,7 +40,9 @@ export declare const file_ai_stigmer_agentic_agentexecution_v1_context: GenFile;
 export type ResolvedExecutionContext = Message<"ai.stigmer.agentic.agentexecution.v1.ResolvedExecutionContext"> & {
     /**
      * Environment variable keys available to the agent (NOT values for security).
-     * Represents the merged result of: template env_spec + instance environment_refs + runtime_env.
+     * Represents the merged environment values (instance environment_refs <
+     * runtime_env) filtered to the keys declared in Agent.spec.env — the agent
+     * env map is a declaration whitelist, not a value source.
      * Keys are sorted alphabetically for consistent ordering and deterministic comparison.
      * Examples: ["API_KEY", "DATABASE_URL", "LOG_LEVEL"]
      *

package/ai/stigmer/agentic/agentexecution/v1/context_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"context_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/context_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAG9E;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,4kDAA4kD,EAAE,CAAC,8CAA8C,CAAC,CAAC,CAAC;AAkF3oD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoDpE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AA8IpE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoIpE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"context_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/context_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAG9E;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,4kDAA4kD,EAAE,CAAC,8CAA8C,CAAC,CAAC,CAAC;AAqF3oD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoDpE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AA8IpE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoIpE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/spec_pb.d.ts

@@ -100,10 +100,25 @@ export type AgentExecutionSpec = Message<"ai.stigmer.agentic.agentexecution.v1.A
     executionConfig?: ExecutionConfig;
     /**
      * Runtime environment variables and secrets (execution-scoped).
-     * These values are only available for this specific execution.
-     * Use case: B2B integrations where secrets are injected at runtime (e.g., Plant & Cloud).
-     * These values are stored in ExecutionContext and deleted when execution completes.
-     * Merge priority: Agent defaults < Environment < runtime_env (highest)
+     * These values are only available for this specific execution and take the
+     * highest merge priority, overriding values from Environments bound via
+     * environment_refs. A key must be declared in Agent.spec.env to survive the
+     * merge: the agent env map is a declaration whitelist (name + is_secret +
+     * optional), never a value source — undeclared keys are dropped.
+     * Use case: B2B integrations where secrets are injected at runtime per call.
+     * These values are consumed into the ExecutionContext (deleted when the
+     * execution completes) and cleared from the persisted execution.
+     *
+     * @internal
+     * Merge priority (lowest to highest): resolved Environment values — from the
+     * creating schedule's or agent_call task's environment_refs (when present),
+     * then the instance's environment_refs; a later ref wins — then runtime_env
+     * (this field). The merged map is filtered to the keys declared in
+     * Agent.spec.env (no filtering when the agent declares none); a missing
+     * required key only logs a warning — the run is not failed. The merge is
+     * owned by backend/libs/go/envmerge and the agentexecution controller's
+     * executionContextBuilder, and asserted by
+     * test/conformance/src/suites-execution/envmerge.conformance.test.ts.
      *
      * @generated from field: map<string, ai.stigmer.agentic.executioncontext.v1.ExecutionValue> runtime_env = 5;
      */

package/ai/stigmer/agentic/agentexecution/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,gDAAgD,EAAE,MAAM,sCAAsC,CAAC;AAExG,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,qqGAAqqG,EAAE,CAAC,8CAA8C,EAAE,gDAAgD,EAAE,uCAAuC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA8Vx5G;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA0LjE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAsGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAiGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA+CjE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,gDAAgD,EAAE,MAAM,sCAAsC,CAAC;AAExG,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,qqGAAqqG,EAAE,CAAC,8CAA8C,EAAE,gDAAgD,EAAE,uCAAuC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA6Wx5G;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA0LjE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAsGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAiGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA+CjE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/spec_pb.d.ts

@@ -38,27 +38,6 @@ export type AgentInstanceSpec = Message<"ai.stigmer.agentic.agentinstance.v1.Age
      * @generated from field: repeated ai.stigmer.commons.apiresource.ApiResourceReference environment_refs = 3;
      */
     environmentRefs: ApiResourceReference[];
-    /**
-     * Data partition this instance's record operations are scoped to, for
-     * every datastore the agent uses. Unset means the shared "default"
-     * partition.
-     *
-     * Instances declaring the same label share records (e.g. the prod
-     * instances of two agents on one datastore); a different label is a
-     * fully isolated dataset (e.g. a dev instance whose test records
-     * never touch prod).
-     *
-     * @internal
-     * DD-010: the record RPCs derive the partition from the session's
-     * resolved instance — server-side, per call, never from tool
-     * arguments — so the label (not the instance id, which changes when
-     * default instances are recreated) is the durable partition key.
-     * One label per instance in v1; a per-datastore map is a recorded
-     * additive growth slot.
-     *
-     * @generated from field: string datastore_partition = 4;
-     */
-    datastorePartition: string;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentinstance.v1.AgentInstanceSpec.

package/ai/stigmer/agentic/agentinstance/v1/spec_pb.js

@@ -8,7 +8,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agentinstance/v1/spec.proto.
  */
-export const file_ai_stigmer_agentic_agentinstance_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agentinstance_v1_spec = /*@__PURE__*/ fileDesc("Ci5haS9zdGlnbWVyL2FnZW50aWMvYWdlbnRpbnN0YW5jZS92MS9zcGVjLnByb3RvEiNhaS5zdGlnbWVyLmFnZW50aWMuYWdlbnRpbnN0YW5jZS52MSKpAgoRQWdlbnRJbnN0YW5jZVNwZWMSGQoIYWdlbnRfaWQYASABKAlCB7pIBHICEAESEwoLZGVzY3JpcHRpb24YAiABKAkSyAEKEGVudmlyb25tZW50X3JlZnMYAyADKAsyNC5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VSZWZlcmVuY2VCeLpIcZIBbiJsugFpChVlbnZpcm9ubWVudF9yZWZzLmtpbmQSP2Vudmlyb25tZW50X3JlZnMgbXVzdCByZWZlcmVuY2UgcmVzb3VyY2VzIHdpdGgga2luZD1lbnZpcm9ubWVudBoPdGhpcy5raW5kID09IDUz4IUsNUoECAQQBVITZGF0YXN0b3JlX3BhcnRpdGlvbmIGcHJvdG8z", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agentinstance.v1.AgentInstanceSpec.
  * Use `create(AgentInstanceSpecSchema)` to create a new message.

package/ai/stigmer/agentic/agentinstance/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,qkBAAqkB,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6D3sB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,8gBAA8gB,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuCppB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/spec_pb.d.ts

@@ -99,8 +99,14 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
      * (SharedSessionBlueprintAccess) on every session/execution create — the
      * same gate that re-checks enabled, so revocation latency is identical
      * (immediate). Unframed hosted-page visitors report no origin and are
-     * exempt by construction. Exact origins only — loosening to wildcards
-     * later is a non-breaking change, tightening would not be.
+     * exempt by construction. Since stigmer-cloud#341 both gates cross-check
+     * the self-report against the request's browser-enforced Origin header
+     * (SharingRequestOriginPolicy): for direct SDK embeds the header is the
+     * authoritative origin — a lying or omitted embed_origin no longer
+     * bypasses this list — while requests from Stigmer's own hosted page
+     * keep the widget's browser-authentic self-report as the embedder
+     * signal. Exact origins only — loosening to wildcards later is a
+     * non-breaking change, tightening would not be.
      *
      * @generated from field: repeated string allowed_origins = 4;
      */

package/ai/stigmer/agentic/agentshare/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,oDAAoD,EAAE,MAAM,0CAA0C,CAAC;AAChH,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qjEAAqjE,EAAE,CAAC,oDAAoD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6KjvE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAmC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBA0BX;AA1BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;;;OAMG;IACH,+DAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yDAAO,CAAA;AACT,CAAC,EA1BW,kBAAkB,KAAlB,kBAAkB,QA0B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,oDAAoD,EAAE,MAAM,0CAA0C,CAAC;AAChH,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qjEAAqjE,EAAE,CAAC,oDAAoD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmLjvE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAmC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBA0BX;AA1BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;;;OAMG;IACH,+DAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yDAAO,CAAA;AACT,CAAC,EA1BW,kBAAkB,KAAlB,kBAAkB,QA0B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_connect.d.ts

@@ -242,6 +242,11 @@ export declare const McpServerCommandController: {
          * Idempotent: if an override already exists for this resource + org, the
          * existing OAuthApp is updated with the new credentials.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and deleteOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * @internal
          * Authorization: Requires can_create_oauth_app permission on the organization.
          * This is an org-admin operation — setting credentials that affect all users
@@ -267,6 +272,11 @@ export declare const McpServerCommandController: {
          * was created for it. After this, the resolution chain falls back to
          * the platform default.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and setOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * Existing user OAuthGrants that were issued using the org's OAuthApp
          * will fail on next token refresh — those users will need to
          * re-authenticate using the platform default or a new org override.

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js

@@ -250,6 +250,11 @@ export const McpServerCommandController = {
          * Idempotent: if an override already exists for this resource + org, the
          * existing OAuthApp is updated with the new credentials.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and deleteOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * @internal
          * Authorization: Requires can_create_oauth_app permission on the organization.
          * This is an org-admin operation — setting credentials that affect all users
@@ -275,6 +280,11 @@ export const McpServerCommandController = {
          * was created for it. After this, the resolution chain falls back to
          * the platform default.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and setOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * Existing user OAuthGrants that were issued using the org's OAuthApp
          * will fail on next token refresh — those users will need to
          * re-authenticate using the platform default or a new org override.

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;WAqBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}