@stigmer/protos 3.12.0 → 3.12.1

package/ai/stigmer/agentic/agent/v1/spec_pb.d.ts

@@ -158,16 +158,24 @@ export type McpServerUsage = Message<"ai.stigmer.agentic.agent.v1.McpServerUsage
      * Only names from discovered_capabilities.tools are valid here.
      * Do NOT include names from discovered_capabilities.resource_templates —
      * resource templates are read-only data endpoints, not callable tools.
-     * A name the server does not expose (including a resource template name)
-     * is warned and ignored at execution: the runner enforces the INTERSECTION
-     * with the server's live toolset, so a stale or mistyped entry narrows the
-     * toolset but never widens it or fails the run.
      *
-     * Enforcement: the native (deep-agent) harness filters the discovered
-     * toolset before it reaches the model; the Cursor harness cannot hide a
-     * server's tools (its SDK config has no allow-list field), so its HITL
-     * hook permanently denies calls to non-enabled tools instead — the model
-     * may still see the tool listed, but every call is refused.
+     * Enforcement is two-layered:
+     *   - Apply time: agent create/update/apply rejects (INVALID_ARGUMENT) any
+     *     name the referenced server's discovered_capabilities.tools does not
+     *     contain, with the valid names in the error. The check is skipped when
+     *     the server has no discovered capabilities yet (never connected) —
+     *     there is nothing authoritative to validate against in that window.
+     *   - Execution time: the runner enforces the INTERSECTION with the
+     *     server's live toolset — an unknown name (possible when the manifest
+     *     was applied before the server's first connect, or when the toolset
+     *     changed since) is warned in the runner log and ignored, so a stale
+     *     entry narrows the toolset but never widens it or fails the run.
+     *
+     * Per-harness runtime enforcement: the native (deep-agent) harness filters
+     * the discovered toolset before it reaches the model; the Cursor harness
+     * cannot hide a server's tools (its SDK config has no allow-list field),
+     * so its HITL hook permanently denies calls to non-enabled tools instead —
+     * the model may still see the tool listed, but every call is refused.
      *
      * @generated from field: repeated string enabled_tools = 2;
      */

package/ai/stigmer/agentic/agent/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,8/DAA8/D,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkEjrE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA4DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,8/DAA8/D,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkEjrE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoExD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/context_pb.d.ts

@@ -24,9 +24,10 @@ export declare const file_ai_stigmer_agentic_agentexecution_v1_context: GenFile;
  *
  * ## Timing
  *
- * Populated in execute_graphton.py after Steps 3-5 complete (skills, env vars, MCP servers)
- * but before the streaming loop begins. This represents the "snapshot" of resolved state.
- * Once set, this field is immutable for the remainder of the execution.
+ * Populated by the agent runner once resolution completes (skills, env vars,
+ * MCP servers) but before the streaming loop begins, and reported through the
+ * execution status-update path. This represents the "snapshot" of resolved
+ * state. Once set, this field is immutable for the remainder of the execution.
  *
  * ## Security Considerations
  *
@@ -39,7 +40,9 @@ export declare const file_ai_stigmer_agentic_agentexecution_v1_context: GenFile;
 export type ResolvedExecutionContext = Message<"ai.stigmer.agentic.agentexecution.v1.ResolvedExecutionContext"> & {
     /**
      * Environment variable keys available to the agent (NOT values for security).
-     * Represents the merged result of: template env_spec + instance environment_refs + runtime_env.
+     * Represents the merged environment values (instance environment_refs <
+     * runtime_env) filtered to the keys declared in Agent.spec.env — the agent
+     * env map is a declaration whitelist, not a value source.
      * Keys are sorted alphabetically for consistent ordering and deterministic comparison.
      * Examples: ["API_KEY", "DATABASE_URL", "LOG_LEVEL"]
      *

package/ai/stigmer/agentic/agentexecution/v1/context_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"context_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/context_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAG9E;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,4kDAA4kD,EAAE,CAAC,8CAA8C,CAAC,CAAC,CAAC;AAkF3oD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoDpE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AA8IpE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoIpE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"context_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/context_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAG9E;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,4kDAA4kD,EAAE,CAAC,8CAA8C,CAAC,CAAC,CAAC;AAqF3oD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoDpE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AA8IpE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoIpE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/spec_pb.d.ts

@@ -100,10 +100,25 @@ export type AgentExecutionSpec = Message<"ai.stigmer.agentic.agentexecution.v1.A
     executionConfig?: ExecutionConfig;
     /**
      * Runtime environment variables and secrets (execution-scoped).
-     * These values are only available for this specific execution.
-     * Use case: B2B integrations where secrets are injected at runtime (e.g., Plant & Cloud).
-     * These values are stored in ExecutionContext and deleted when execution completes.
-     * Merge priority: Agent defaults < Environment < runtime_env (highest)
+     * These values are only available for this specific execution and take the
+     * highest merge priority, overriding values from Environments bound via
+     * environment_refs. A key must be declared in Agent.spec.env to survive the
+     * merge: the agent env map is a declaration whitelist (name + is_secret +
+     * optional), never a value source — undeclared keys are dropped.
+     * Use case: B2B integrations where secrets are injected at runtime per call.
+     * These values are consumed into the ExecutionContext (deleted when the
+     * execution completes) and cleared from the persisted execution.
+     *
+     * @internal
+     * Merge priority (lowest to highest): resolved Environment values — from the
+     * creating schedule's or agent_call task's environment_refs (when present),
+     * then the instance's environment_refs; a later ref wins — then runtime_env
+     * (this field). The merged map is filtered to the keys declared in
+     * Agent.spec.env (no filtering when the agent declares none); a missing
+     * required key only logs a warning — the run is not failed. The merge is
+     * owned by backend/libs/go/envmerge and the agentexecution controller's
+     * executionContextBuilder, and asserted by
+     * test/conformance/src/suites-execution/envmerge.conformance.test.ts.
      *
      * @generated from field: map<string, ai.stigmer.agentic.executioncontext.v1.ExecutionValue> runtime_env = 5;
      */

package/ai/stigmer/agentic/agentexecution/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,gDAAgD,EAAE,MAAM,sCAAsC,CAAC;AAExG,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,qqGAAqqG,EAAE,CAAC,8CAA8C,EAAE,gDAAgD,EAAE,uCAAuC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA8Vx5G;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA0LjE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAsGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAiGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA+CjE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,gDAAgD,EAAE,MAAM,sCAAsC,CAAC;AAExG,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,qqGAAqqG,EAAE,CAAC,8CAA8C,EAAE,gDAAgD,EAAE,uCAAuC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA6Wx5G;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA0LjE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAsGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAiGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA+CjE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/spec_pb.d.ts

@@ -99,8 +99,14 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
      * (SharedSessionBlueprintAccess) on every session/execution create — the
      * same gate that re-checks enabled, so revocation latency is identical
      * (immediate). Unframed hosted-page visitors report no origin and are
-     * exempt by construction. Exact origins only — loosening to wildcards
-     * later is a non-breaking change, tightening would not be.
+     * exempt by construction. Since stigmer-cloud#341 both gates cross-check
+     * the self-report against the request's browser-enforced Origin header
+     * (SharingRequestOriginPolicy): for direct SDK embeds the header is the
+     * authoritative origin — a lying or omitted embed_origin no longer
+     * bypasses this list — while requests from Stigmer's own hosted page
+     * keep the widget's browser-authentic self-report as the embedder
+     * signal. Exact origins only — loosening to wildcards later is a
+     * non-breaking change, tightening would not be.
      *
      * @generated from field: repeated string allowed_origins = 4;
      */

package/ai/stigmer/agentic/agentshare/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,oDAAoD,EAAE,MAAM,0CAA0C,CAAC;AAChH,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qjEAAqjE,EAAE,CAAC,oDAAoD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6KjvE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAmC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBA0BX;AA1BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;;;OAMG;IACH,+DAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yDAAO,CAAA;AACT,CAAC,EA1BW,kBAAkB,KAAlB,kBAAkB,QA0B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,oDAAoD,EAAE,MAAM,0CAA0C,CAAC;AAChH,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qjEAAqjE,EAAE,CAAC,oDAAoD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmLjvE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAmC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBA0BX;AA1BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;;;OAMG;IACH,+DAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yDAAO,CAAA;AACT,CAAC,EA1BW,kBAAkB,KAAlB,kBAAkB,QA0B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_connect.d.ts

@@ -242,6 +242,11 @@ export declare const McpServerCommandController: {
          * Idempotent: if an override already exists for this resource + org, the
          * existing OAuthApp is updated with the new credentials.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and deleteOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * @internal
          * Authorization: Requires can_create_oauth_app permission on the organization.
          * This is an org-admin operation — setting credentials that affect all users
@@ -267,6 +272,11 @@ export declare const McpServerCommandController: {
          * was created for it. After this, the resolution chain falls back to
          * the platform default.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and setOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * Existing user OAuthGrants that were issued using the org's OAuthApp
          * will fail on next token refresh — those users will need to
          * re-authenticate using the platform default or a new org override.

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js

@@ -250,6 +250,11 @@ export const McpServerCommandController = {
          * Idempotent: if an override already exists for this resource + org, the
          * existing OAuthApp is updated with the new credentials.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and deleteOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * @internal
          * Authorization: Requires can_create_oauth_app permission on the organization.
          * This is an org-admin operation — setting credentials that affect all users
@@ -275,6 +280,11 @@ export const McpServerCommandController = {
          * was created for it. After this, the resolution chain falls back to
          * the platform default.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and setOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * Existing user OAuthGrants that were issued using the org's OAuthApp
          * will fail on next token refresh — those users will need to
          * re-authenticate using the platform default or a new org override.

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;WAqBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_pb.d.ts

@@ -239,6 +239,11 @@ export declare const McpServerCommandController: GenService<{
      * Idempotent: if an override already exists for this resource + org, the
      * existing OAuthApp is updated with the new credentials.
      *
+     * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+     * design, as one capability with getOrgOAuthApp and deleteOrgOAuthApp —
+     * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+     * the RPC clients probe.
+     *
      * @internal
      * Authorization: Requires can_create_oauth_app permission on the organization.
      * This is an org-admin operation — setting credentials that affect all users
@@ -263,6 +268,11 @@ export declare const McpServerCommandController: GenService<{
      * was created for it. After this, the resolution chain falls back to
      * the platform default.
      *
+     * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+     * design, as one capability with getOrgOAuthApp and setOrgOAuthApp —
+     * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+     * the RPC clients probe.
+     *
      * Existing user OAuthGrants that were issued using the org's OAuthApp
      * will fail on next token refresh — those users will need to
      * re-authenticate using the platform default or a new org override.

package/ai/stigmer/agentic/mcpserver/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,8qFAA8qF,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE75F;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAqQlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,8qFAA8qF,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE75F;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GA+QlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/oauth_pb.d.ts

@@ -147,6 +147,12 @@ export declare const OAuthGrantSchema: GenMessage<OAuthGrant>;
  *   2. McpServerAuth.oauth_app_ref on the resource spec — platform default
  *   3. None — no OAuth app available (manual token or DCR only)
  *
+ * Edition scoping: the override binding — and the whole resolution chain
+ * above it — exists only on the hosted platform. OSS resolves the
+ * oauth_app_ref directly against its flat OAuthApp store (the ref IS the
+ * whole resolution) and answers UNIMPLEMENTED for the org-OAuth-app RPCs;
+ * see McpServerQueryController.getOrgOAuthApp for the contract.
+ *
  * The override is resource-agnostic: currently used for MCP servers, but the
  * composite key supports any API resource kind that needs BYOA (e.g., workflows).
  *

package/ai/stigmer/agentic/mcpserver/v1/oauth_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/oauth_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,0nBAA0nB,CAAC,CAAC;AA8HvoB;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAqE7D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"oauth_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/oauth_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,0nBAA0nB,CAAC,CAAC;AA8HvoB;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA2E7D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/query_connect.d.ts

@@ -76,6 +76,18 @@ export declare const McpServerQueryController: {
          * exposing secrets. The frontend uses this to show which credential
          * source is active and to offer override management options to org admins.
          *
+         * Edition scoping: hosted-only, together with setOrgOAuthApp and
+         * deleteOrgOAuthApp — the three org-OAuth-app RPCs are ONE capability.
+         * The OSS server answers UNIMPLEMENTED for all of them by design: its
+         * flat OAuthApp store has no override binding, its OAuth resolution has
+         * no override level to consult, and BYOA's clone-from-platform-template
+         * model has no template to clone (self-hosted users apply their own
+         * OAuthApp and reference it from spec.auth.oauth_app_ref — a strictly
+         * more powerful path). Clients probe the capability through THIS RPC:
+         * an UNIMPLEMENTED answer means "hide every BYOA affordance" (see the
+         * SDK's useOrgOAuthApp.isSupported). Never implement one RPC of the
+         * surface without the other two and the client-side gate.
+         *
          * @internal
          * Authorization: Requires can_view permission on the mcp_server resource.
          * Any user who can view the MCP server can check whether their org has

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js

@@ -84,6 +84,18 @@ export const McpServerQueryController = {
          * exposing secrets. The frontend uses this to show which credential
          * source is active and to offer override management options to org admins.
          *
+         * Edition scoping: hosted-only, together with setOrgOAuthApp and
+         * deleteOrgOAuthApp — the three org-OAuth-app RPCs are ONE capability.
+         * The OSS server answers UNIMPLEMENTED for all of them by design: its
+         * flat OAuthApp store has no override binding, its OAuth resolution has
+         * no override level to consult, and BYOA's clone-from-platform-template
+         * model has no template to clone (self-hosted users apply their own
+         * OAuthApp and reference it from spec.auth.oauth_app_ref — a strictly
+         * more powerful path). Clients probe the capability through THIS RPC:
+         * an UNIMPLEMENTED answer means "hide every BYOA affordance" (see the
+         * SDK's useOrgOAuthApp.isSupported). Never implement one RPC of the
+         * surface without the other two and the client-side gate.
+         *
          * @internal
          * Authorization: Requires can_view permission on the mcp_server resource.
          * Any user who can view the MCP server can check whether their org has

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE3H;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;WAWG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE3H;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;WAWG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;WAyBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/query_pb.d.ts

@@ -79,6 +79,18 @@ export declare const McpServerQueryController: GenService<{
      * exposing secrets. The frontend uses this to show which credential
      * source is active and to offer override management options to org admins.
      *
+     * Edition scoping: hosted-only, together with setOrgOAuthApp and
+     * deleteOrgOAuthApp — the three org-OAuth-app RPCs are ONE capability.
+     * The OSS server answers UNIMPLEMENTED for all of them by design: its
+     * flat OAuthApp store has no override binding, its OAuth resolution has
+     * no override level to consult, and BYOA's clone-from-platform-template
+     * model has no template to clone (self-hosted users apply their own
+     * OAuthApp and reference it from spec.auth.oauth_app_ref — a strictly
+     * more powerful path). Clients probe the capability through THIS RPC:
+     * an UNIMPLEMENTED answer means "hide every BYOA affordance" (see the
+     * SDK's useOrgOAuthApp.isSupported). Never implement one RPC of the
+     * surface without the other two and the client-side gate.
+     *
      * @internal
      * Authorization: Requires can_view permission on the mcp_server resource.
      * Any user who can view the MCP server can check whether their org has

package/ai/stigmer/agentic/mcpserver/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,kjCAAkjC,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjyC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GA0EhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,kjCAAkjC,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjyC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAsFhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts

@@ -78,11 +78,19 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
      * Only names from discovered_capabilities.tools are valid here.
      * Do NOT include names from discovered_capabilities.resource_templates —
      * resource templates are read-only data endpoints, not callable tools.
-     * A name the server does not expose (including a resource template name)
-     * is warned and ignored at execution: the runner enforces the INTERSECTION
-     * with the server's live toolset, so a stale or mistyped entry narrows the
-     * toolset but never widens it or fails the run. Enforcement is per harness
-     * — see McpServerUsage.enabled_tools in agent/v1/spec.proto.
+     *
+     * Enforcement is two-layered:
+     *   - Apply time: mcpserver update/apply rejects (INVALID_ARGUMENT) any
+     *     name this server's own discovered_capabilities.tools does not
+     *     contain, with the valid names in the error. Skipped when the server
+     *     has never been connected (no capabilities yet) — which is always the
+     *     case on create, so the check only bites from the first re-apply
+     *     after discovery.
+     *   - Execution time: the runner enforces the INTERSECTION with the
+     *     server's live toolset — an unknown name is warned in the runner log
+     *     and ignored, so a stale entry narrows the toolset but never widens
+     *     it or fails the run. Enforcement is per harness — see
+     *     McpServerUsage.enabled_tools in agent/v1/spec.proto.
      *
      * @generated from field: repeated string default_enabled_tools = 7;
      */

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwK7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4E5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6H5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgL7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4E5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6H5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/status_pb.d.ts

@@ -72,9 +72,9 @@ export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServer
     toolApprovals: ToolApprovalPolicy[];
     /**
      * OAuth-related enrichment state, populated at query time by the backend.
-     * Contains vendor approval status (resolved from the referenced OAuthApp)
-     * and BYOA resolution chain results (which OAuthApp is effective for the
-     * caller's org context). None of these fields are persisted.
+     * Carries the vendor approval status resolved from the referenced OAuthApp
+     * (fields 1-2; fields 3-4 are never populated — see OAuthStatus).
+     * None of these fields are persisted.
      *
      * @generated from field: ai.stigmer.agentic.mcpserver.v1.OAuthStatus oauth_status = 5;
      */
@@ -217,17 +217,24 @@ export declare const DiscoveredResourceTemplateSchema: GenMessage<DiscoveredReso
  * OAuthStatus holds system-derived OAuth enrichment state for an MCP server.
  *
  * @internal
- * All fields are read-only, populated by the backend enricher at query time.
- * None are persisted on the McpServer document — they are computed fresh on
- * every get/getByReference response.
+ * All fields are read-only and never persisted on the McpServer document.
  *
- * Two categories of enrichment:
- * 1. Vendor approval (fields 1-2): Resolved from the referenced OAuthApp
- *    resource. Tells the frontend whether the sign-in button should be
- *    enabled and provides a BYOA documentation link when approval is pending.
- * 2. BYOA resolution (fields 3-4): Computed from the OAuth app resolution
- *    chain. Tells the frontend which credential source is active for the
- *    caller's org context and its OAuthApp ID.
+ * Two categories, with different production stories:
+ * 1. Vendor approval (fields 1-2): populated by the backend enricher on
+ *    every get/getByReference response, resolved from the referenced
+ *    OAuthApp. Tells the frontend whether the platform sign-in flow is
+ *    gated and provides a BYOA documentation link when approval is pending.
+ * 2. BYOA resolution (fields 3-4): NEVER POPULATED, by any edition. The
+ *    resolution is per (server, caller's active org), and the caller's
+ *    active org is client-side context the read RPCs never carry — get has
+ *    no org, and getByReference's org is the server's OWNING org (the
+ *    lookup key), which differs from the caller's org when browsing another
+ *    org's public server. Resolving against the owning org would misreport
+ *    exactly the cross-org marketplace flow BYOA exists for. The shared SDK
+ *    instead derives the signal client-side from the getOrgOAuthApp RPC,
+ *    keyed on the same org the connect flow uses. The fields are retained
+ *    for wire compatibility and as the home of this contract note; a future
+ *    server-side active-org mechanism could legitimately populate them.
  *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.OAuthStatus
  */
@@ -251,18 +258,17 @@ export type OAuthStatus = Message<"ai.stigmer.agentic.mcpserver.v1.OAuthStatus">
      */
     vendorApprovalDocsUrl: string;
     /**
-     * Where the effective OAuth app was resolved from for the caller's org.
-     * Computed from the resolution chain:
-     *   1. OAuthAppOverride for (resource_id, resource_kind, org_id) → ORG_OVERRIDE
-     *   2. McpServerAuth.oauth_app_ref → PLATFORM
-     *   3. Neither exists → NONE
+     * NEVER POPULATED (see the message comment): the caller's active org is
+     * client-side context, so no backend can evaluate the resolution chain at
+     * read time. The shared SDK derives this value client-side from the
+     * getOrgOAuthApp RPC (useMcpServerCredentials.effectiveOAuthSource).
      *
      * @generated from field: ai.stigmer.agentic.mcpserver.v1.OAuthAppSource effective_oauth_source = 3;
      */
     effectiveOauthSource: OAuthAppSource;
     /**
-     * System-generated ID (metadata.id) of the OAuthApp that the resolution
-     * chain selected. Empty when effective_oauth_source is NONE.
+     * NEVER POPULATED (see the message comment). The override's OAuthApp ID
+     * is available from the getOrgOAuthApp RPC (GetOrgOAuthAppOutput.oauth_app_id).
      *
      * @generated from field: string effective_oauth_app_id = 4;
      */
@@ -310,10 +316,17 @@ export declare enum ValidationState {
 export declare const ValidationStateSchema: GenEnum<ValidationState>;
 /**
  * OAuthAppSource identifies where the effective OAuth app for an MCP server
- * was resolved from. Populated at query time by the backend enricher to tell
- * the frontend which credential source is active for the current org context.
+ * was resolved from.
  *
- * Used in OAuthStatus.effective_oauth_source (read-only, not persisted).
+ * The resolution chain is the same one the OAuth connect flow evaluates:
+ *   1. OAuthAppOverride for (resource_id, resource_kind, org_id) → ORG_OVERRIDE
+ *   2. McpServerAuth.oauth_app_ref → PLATFORM
+ *   3. Neither exists → NONE
+ *
+ * Resolved CLIENT-SIDE by the shared SDK from the getOrgOAuthApp RPC: the
+ * resolution is per (server, caller's active org), and the caller's active
+ * org is client-side context the read RPCs never carry, so no backend can
+ * compute it at enrichment time (see OAuthStatus fields 3-4).
  *
  * @generated from enum ai.stigmer.agentic.mcpserver.v1.OAuthAppSource
  */

package/ai/stigmer/agentic/mcpserver/v1/status_pb.js

@@ -73,10 +73,17 @@ export var ValidationState;
 export const ValidationStateSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 0);
 /**
  * OAuthAppSource identifies where the effective OAuth app for an MCP server
- * was resolved from. Populated at query time by the backend enricher to tell
- * the frontend which credential source is active for the current org context.
+ * was resolved from.
  *
- * Used in OAuthStatus.effective_oauth_source (read-only, not persisted).
+ * The resolution chain is the same one the OAuth connect flow evaluates:
+ *   1. OAuthAppOverride for (resource_id, resource_kind, org_id) → ORG_OVERRIDE
+ *   2. McpServerAuth.oauth_app_ref → PLATFORM
+ *   3. Neither exists → NONE
+ *
+ * Resolved CLIENT-SIDE by the shared SDK from the getOrgOAuthApp RPC: the
+ * resolution is per (server, caller's active org), and the caller's active
+ * org is client-side context the read RPCs never carry, so no backend can
+ * compute it at enrichment time (see OAuthStatus fields 3-4).
  *
  * @generated from enum ai.stigmer.agentic.mcpserver.v1.OAuthAppSource
  */

package/ai/stigmer/agentic/mcpserver/v1/status_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y2DAAy2D,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAsFljE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA2C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA6D9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y2DAAy2D,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAsFljE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA2C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAmE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/workspace_pb.d.ts

@@ -112,10 +112,13 @@ export declare const LocalPathSourceSchema: GenMessage<LocalPathSource>;
  *
  * @internal
  * Authentication: The provisioner resolves GITHUB_TOKEN from the merged
- * environment (Agent defaults < Environment < ExecutionContext.runtime_env)
- * and injects it into the clone URL. The token is consumed by provisioning
- * and stripped before forwarding to the agent runtime (see AD-05).
- * SSH key authentication is a future enhancement.
+ * environment (instance environment_refs < ExecutionContext.runtime_env). As a
+ * workspace-provisioning key it is re-injected past the Agent.spec.env
+ * declared-key filter when the session has git_repo entries, with a fallback
+ * to the caller's personal environment (see the agentexecution controller's
+ * executionContextBuilder). The token is injected into the clone URL, consumed
+ * by provisioning, and stripped before forwarding to the agent runtime (see
+ * AD-05). SSH key authentication is a future enhancement.
  *
  * @generated from message ai.stigmer.agentic.session.v1.GitRepoSource
  */

package/ai/stigmer/agentic/session/v1/workspace_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/workspace_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,uCAAuC,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,o+BAAo+B,EAAE,CAAC,uCAAuC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmCxjC;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAiC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAwB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA+E/D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"workspace_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/workspace_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,uCAAuC,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,o+BAAo+B,EAAE,CAAC,uCAAuC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmCxjC;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAiC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAwB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAkF/D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflowexecution/v1/spec_pb.d.ts

@@ -103,25 +103,31 @@ export type WorkflowExecutionSpec = Message<"ai.stigmer.agentic.workflowexecutio
         [key: string]: string;
     };
     /**
-     * Execution-scoped environment variables and secrets that override instance defaults.
+     * Execution-scoped environment variables and secrets, available only to this
+     * execution. Values here take the highest merge priority, overriding values
+     * from Environments bound via the instance's environment_refs. A key must be
+     * declared in Workflow.spec.env to survive the merge: the workflow env map is
+     * a declaration whitelist (name + is_secret + optional), never a value source
+     * — undeclared keys are dropped.
      *
      * @internal
-     * These values are only available for this specific execution and override values
-     * from Environments and Workflow defaults.
-     *
-     * Merge Priority (highest to lowest):
-     * 1. runtime_env (this field) - Execution-specific overrides
-     * 2. Environment values (from WorkflowInstance.environment_ids)
-     * 3. Workflow defaults (from Workflow.default_env)
-     *
-     * Value Types:
-     * - value: Plain text value (not encrypted, use for non-sensitive config)
-     * - secret_ref: Reference to a Secret resource (encrypted, use for API keys, passwords)
+     * Merge priority (lowest to highest):
+     * 1. Environment values (resolved from WorkflowInstance.environment_refs, in
+     *    order; a later ref wins on key conflicts)
+     * 2. runtime_env (this field)
+     *
+     * The merged map is then filtered to the keys declared in Workflow.spec.env
+     * (no filtering when the workflow declares none); a declared-but-required key
+     * that is still missing only logs a warning — the run is not failed. The
+     * merge is owned by backend/libs/go/envmerge and the workflowexecution
+     * controller's createExecutionContextStep, and asserted by
+     * test/conformance/src/suites-execution/envmerge.conformance.test.ts.
      *
      * Security:
-     * - runtime_env values are stored in ExecutionContext
+     * - runtime_env values are consumed into the ExecutionContext at create time
+     *   and cleared from the persisted execution (never in Temporal history)
      * - ExecutionContext is deleted when execution completes (ephemeral secrets)
-     * - Secret references are resolved at runtime (never exposed in logs)
+     * - Values with is_secret=true are encrypted at rest and redacted in logs
      *
      * Tasks can access these values using: {{env.VARIABLE_NAME}}
      *

package/ai/stigmer/agentic/workflowexecution/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowexecution/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2IAA2I;AAC3I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,gDAAgD,EAAE,MAAM,sCAAsC,CAAC;AAExG,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AAGtF;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,w4BAAw4B,EAAE,CAAC,gDAAgD,EAAE,uCAAuC,CAAC,CAAC,CAAC;AAsLl/B;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowexecution/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2IAA2I;AAC3I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,gDAAgD,EAAE,MAAM,sCAAsC,CAAC;AAExG,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AAGtF;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,w4BAAw4B,EAAE,CAAC,gDAAgD,EAAE,uCAAuC,CAAC,CAAC,CAAC;AA4Ll/B;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/metadata_pb.d.ts

@@ -56,6 +56,14 @@ export type ApiResourceMetadata = Message<"ai.stigmer.commons.apiresource.ApiRes
      * Default: config-driven per kind — blueprint kinds (marked
      * defaults_to_org_visibility) default to ORG; all other kinds default to PRIVATE.
      *
+     * Mutation contract: visibility is set at create and changed ONLY through
+     * the kind's UpdateVisibility RPC, where the visibility guards live
+     * (per-kind level support, default-instance rejection). A plain Update
+     * preserves the stored value — a request-carried level is ignored, never
+     * applied. Declarative clients that want a manifest's visibility to land
+     * on update must follow up with UpdateVisibility (the CLI and MCP apply
+     * surfaces do this automatically).
+     *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceVisibility visibility = 5;
      */
     visibility: ApiResourceVisibility;

package/ai/stigmer/commons/apiresource/metadata_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"metadata_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/metadata_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,s/BAAs/B,EAAE,CAAC,wCAAwC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA0F3kC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAkD/D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"metadata_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/metadata_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,s/BAAs/B,EAAE,CAAC,wCAAwC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkG3kC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAkD/D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/platformclient/v1/token_pb.d.ts

@@ -144,14 +144,25 @@ export type MintGuestTokenRequest = Message<"ai.stigmer.iam.platformclient.v1.Mi
      * @internal
      * Validated at mint against the share's spec.allowed_origins: empty list
      * admits any origin; a non-empty list refuses PERMISSION_DENIED for
-     * unlisted origins and for "null". An empty field always passes (the
-     * anyone-with-link hosted page). The validated value is stamped into the
-     * guest JWT as the embed_origin claim and re-validated against the live
-     * list by the guest create-time gate. Self-reported by design: the widget
-     * code inside the iframe derives it from browser-authentic sources the
-     * embedder cannot alter; non-browser callers gain nothing by omitting it
-     * since the hosted link is anyone-with-link (decision 001) — rate limits
-     * and the billing gate remain the API guards.
+     * unlisted origins and for "null". An empty field always passes for
+     * hosted-page and non-browser requests (the anyone-with-link hosted
+     * page). The validated value is stamped into the guest JWT as the
+     * embed_origin claim and re-validated against the live list by the
+     * guest create-time gate.
+     *
+     * The hosted server cross-checks this field against the request's
+     * browser-enforced Origin header (stigmer-cloud#341). When the header
+     * is a third-party origin (a direct SDK embed), the header is
+     * authoritative: a non-empty field that disagrees with it is refused
+     * PERMISSION_DENIED naming both origins, and an empty field resolves
+     * to the header instead of the hosted-page exemption. When the header
+     * is Stigmer's own hosted-page origin, this self-report is the only
+     * embedder signal (the iframe'd page's RPCs carry Stigmer's origin) —
+     * the widget code derives it from browser-authentic sources the
+     * embedder cannot alter. Non-browser callers send no Origin header and
+     * keep the self-report semantics; they gain nothing by omitting it
+     * since the hosted link is anyone-with-link (decision 001) — rate
+     * limits and the billing gate remain the API guards.
      *
      * @generated from field: string embed_origin = 4;
      */

package/ai/stigmer/iam/platformclient/v1/token_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,omDAAomD,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwE3rD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8E9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAwC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAkErC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,omDAAomD,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwE3rD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAyF9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAwC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAkErC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/protos",
-  "version": "3.12.0",
+  "version": "3.12.1",
   "description": "Generated TypeScript protobuf stubs for Stigmer APIs",
   "license": "Apache-2.0",
   "type": "module",