@stigmer/protos 3.12.0 → 3.12.2

package/ai/stigmer/agentic/artifact/v1/command_pb.js

@@ -17,7 +17,7 @@ export const file_ai_stigmer_agentic_artifact_v1_command = /*@__PURE__*/ fileDes
  * @internal
  * Follows the Command-Query Separation (CQS) pattern.
  *
- * These RPCs are system-level — used by the workflow-runner and agent-runner
+ * These RPCs are system-level — used by the runner (stigmer-runner)
  * to persist task outputs. They are NOT exposed to end users or the SDK.
  *
  * Artifact creation flow:

package/ai/stigmer/agentic/artifact/v1/io_pb.d.ts

@@ -64,7 +64,7 @@ export declare const ArtifactListSchema: GenMessage<ArtifactList>;
  * CreateArtifactInput provides the data needed to create an artifact.
  *
  * @internal
- * Used by the workflow-runner and agent-runner to persist task outputs.
+ * Used by the runner (stigmer-runner) to persist task outputs.
  * This is a system-level RPC — not exposed to end users or the SDK.
  *
  * The backend:

package/ai/stigmer/agentic/artifact/v1/spec_pb.d.ts

@@ -8,7 +8,7 @@ export declare const file_ai_stigmer_agentic_artifact_v1_spec: GenFile;
  * ArtifactSpec defines the properties of an artifact provided at creation time.
  *
  * @internal
- * Artifacts are created by the workflow-runner or agent-runner when a task
+ * Artifacts are created by the runner when a task
  * produces output that should be persisted outside the execution status
  * snapshot (either because it exceeds the size threshold or because the
  * workflow author explicitly requested artifact persistence).

package/ai/stigmer/agentic/environment/v1/api_pb.d.ts

@@ -11,7 +11,6 @@ export declare const file_ai_stigmer_agentic_environment_v1_api: GenFile;
  * Environment stores configuration and secrets as key-value pairs for runtime use by agents and workflow instances.
  *
  * @internal
- * Uses Graphton configuration for state management.
  *
  * @generated from message ai.stigmer.agentic.environment.v1.Environment
  */

package/ai/stigmer/agentic/environment/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,giBAAgiB,EAAE,CAAC,2CAA2C,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkDltB;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,giBAAgiB,EAAE,CAAC,2CAA2C,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAiDltB;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_connect.d.ts

@@ -123,12 +123,13 @@ export declare const McpServerCommandController: {
          * @internal
          * Typical flows:
          * - Web console: user clicks Connect, backend resolves env vars from the
-         *   user's personal environment, starts a Temporal workflow on the agent-runner.
+         *   user's personal environment, starts a Temporal workflow on the runner
+         *   (stigmer-runner).
          * - CLI: `stigmer discover mcp-server <name>` calls connect with runtime_env
          *   populated from local env vars, delegating discovery to the backend.
-         * - Graphton backfill: agent-runner calls connect on first execution when
+         * - Runner backfill: the runner calls connect on first use when
          *   status.discovered_capabilities is empty, passing runtime_env from the
-         *   execution context.
+         *   execution context (shared/connect-backfill.ts).
          *
          * Errors:
          * - FAILED_PRECONDITION: Required credentials missing from personal environment
@@ -242,6 +243,11 @@ export declare const McpServerCommandController: {
          * Idempotent: if an override already exists for this resource + org, the
          * existing OAuthApp is updated with the new credentials.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and deleteOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * @internal
          * Authorization: Requires can_create_oauth_app permission on the organization.
          * This is an org-admin operation — setting credentials that affect all users
@@ -267,6 +273,11 @@ export declare const McpServerCommandController: {
          * was created for it. After this, the resolution chain falls back to
          * the platform default.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and setOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * Existing user OAuthGrants that were issued using the org's OAuthApp
          * will fail on next token refresh — those users will need to
          * re-authenticate using the platform default or a new org override.

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js

@@ -131,12 +131,13 @@ export const McpServerCommandController = {
          * @internal
          * Typical flows:
          * - Web console: user clicks Connect, backend resolves env vars from the
-         *   user's personal environment, starts a Temporal workflow on the agent-runner.
+         *   user's personal environment, starts a Temporal workflow on the runner
+         *   (stigmer-runner).
          * - CLI: `stigmer discover mcp-server <name>` calls connect with runtime_env
          *   populated from local env vars, delegating discovery to the backend.
-         * - Graphton backfill: agent-runner calls connect on first execution when
+         * - Runner backfill: the runner calls connect on first use when
          *   status.discovered_capabilities is empty, passing runtime_env from the
-         *   execution context.
+         *   execution context (shared/connect-backfill.ts).
          *
          * Errors:
          * - FAILED_PRECONDITION: Required credentials missing from personal environment
@@ -250,6 +251,11 @@ export const McpServerCommandController = {
          * Idempotent: if an override already exists for this resource + org, the
          * existing OAuthApp is updated with the new credentials.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and deleteOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * @internal
          * Authorization: Requires can_create_oauth_app permission on the organization.
          * This is an org-admin operation — setting credentials that affect all users
@@ -275,6 +281,11 @@ export const McpServerCommandController = {
          * was created for it. After this, the resolution chain falls back to
          * the platform default.
          *
+         * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+         * design, as one capability with getOrgOAuthApp and setOrgOAuthApp —
+         * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+         * the RPC clients probe.
+         *
          * Existing user OAuthGrants that were issued using the org's OAuthApp
          * will fail on next token refresh — those users will need to
          * re-authenticate using the platform default or a new org override.

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;WAqBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_pb.d.ts

@@ -124,12 +124,13 @@ export declare const McpServerCommandController: GenService<{
      * @internal
      * Typical flows:
      * - Web console: user clicks Connect, backend resolves env vars from the
-     *   user's personal environment, starts a Temporal workflow on the agent-runner.
+     *   user's personal environment, starts a Temporal workflow on the runner
+     *   (stigmer-runner).
      * - CLI: `stigmer discover mcp-server <name>` calls connect with runtime_env
      *   populated from local env vars, delegating discovery to the backend.
-     * - Graphton backfill: agent-runner calls connect on first execution when
+     * - Runner backfill: the runner calls connect on first use when
      *   status.discovered_capabilities is empty, passing runtime_env from the
-     *   execution context.
+     *   execution context (shared/connect-backfill.ts).
      *
      * Errors:
      * - FAILED_PRECONDITION: Required credentials missing from personal environment
@@ -239,6 +240,11 @@ export declare const McpServerCommandController: GenService<{
      * Idempotent: if an override already exists for this resource + org, the
      * existing OAuthApp is updated with the new credentials.
      *
+     * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+     * design, as one capability with getOrgOAuthApp and deleteOrgOAuthApp —
+     * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+     * the RPC clients probe.
+     *
      * @internal
      * Authorization: Requires can_create_oauth_app permission on the organization.
      * This is an org-admin operation — setting credentials that affect all users
@@ -263,6 +269,11 @@ export declare const McpServerCommandController: GenService<{
      * was created for it. After this, the resolution chain falls back to
      * the platform default.
      *
+     * Edition scoping: hosted-only. UNIMPLEMENTED on the OSS server by
+     * design, as one capability with getOrgOAuthApp and setOrgOAuthApp —
+     * see the full scoping note on McpServerQueryController.getOrgOAuthApp,
+     * the RPC clients probe.
+     *
      * Existing user OAuthGrants that were issued using the org's OAuthApp
      * will fail on next token refresh — those users will need to
      * re-authenticate using the platform default or a new org override.

package/ai/stigmer/agentic/mcpserver/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,8qFAA8qF,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE75F;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAqQlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,8qFAA8qF,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE75F;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAgRlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/io_pb.d.ts

@@ -34,7 +34,7 @@ export declare const McpServerIdSchema: GenMessage<McpServerId>;
  * Triggers server-side MCP discovery and tool approval classification:
  * the backend creates an ephemeral ExecutionContext with the resolved
  * environment variables, starts a Temporal workflow that connects to the
- * MCP server (via the agent-runner), enumerates tools and resource
+ * MCP server (via the runner), enumerates tools and resource
  * templates, classifies tool approval policies, and stores the results
  * in status.discovered_capabilities and status.tool_approvals.
  *
@@ -47,7 +47,7 @@ export declare const McpServerIdSchema: GenMessage<McpServerId>;
  * Callers:
  * - Web console: calls connect after saving credentials to personal environment.
  * - CLI: calls connect with runtime_env populated from local env vars.
- * - Graphton backfill: calls connect with runtime_env from execution context
+ * - Runner backfill: calls connect with runtime_env from execution context
  *   when status.discovered_capabilities is empty on first agent execution.
  *
  * Prerequisites:

package/ai/stigmer/agentic/mcpserver/v1/oauth_pb.d.ts

@@ -147,6 +147,12 @@ export declare const OAuthGrantSchema: GenMessage<OAuthGrant>;
  *   2. McpServerAuth.oauth_app_ref on the resource spec — platform default
  *   3. None — no OAuth app available (manual token or DCR only)
  *
+ * Edition scoping: the override binding — and the whole resolution chain
+ * above it — exists only on the hosted platform. OSS resolves the
+ * oauth_app_ref directly against its flat OAuthApp store (the ref IS the
+ * whole resolution) and answers UNIMPLEMENTED for the org-OAuth-app RPCs;
+ * see McpServerQueryController.getOrgOAuthApp for the contract.
+ *
  * The override is resource-agnostic: currently used for MCP servers, but the
  * composite key supports any API resource kind that needs BYOA (e.g., workflows).
  *

package/ai/stigmer/agentic/mcpserver/v1/oauth_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/oauth_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,0nBAA0nB,CAAC,CAAC;AA8HvoB;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAqE7D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"oauth_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/oauth_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,0nBAA0nB,CAAC,CAAC;AA8HvoB;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA2E7D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/query_connect.d.ts

@@ -76,6 +76,18 @@ export declare const McpServerQueryController: {
          * exposing secrets. The frontend uses this to show which credential
          * source is active and to offer override management options to org admins.
          *
+         * Edition scoping: hosted-only, together with setOrgOAuthApp and
+         * deleteOrgOAuthApp — the three org-OAuth-app RPCs are ONE capability.
+         * The OSS server answers UNIMPLEMENTED for all of them by design: its
+         * flat OAuthApp store has no override binding, its OAuth resolution has
+         * no override level to consult, and BYOA's clone-from-platform-template
+         * model has no template to clone (self-hosted users apply their own
+         * OAuthApp and reference it from spec.auth.oauth_app_ref — a strictly
+         * more powerful path). Clients probe the capability through THIS RPC:
+         * an UNIMPLEMENTED answer means "hide every BYOA affordance" (see the
+         * SDK's useOrgOAuthApp.isSupported). Never implement one RPC of the
+         * surface without the other two and the client-side gate.
+         *
          * @internal
          * Authorization: Requires can_view permission on the mcp_server resource.
          * Any user who can view the MCP server can check whether their org has

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js

@@ -84,6 +84,18 @@ export const McpServerQueryController = {
          * exposing secrets. The frontend uses this to show which credential
          * source is active and to offer override management options to org admins.
          *
+         * Edition scoping: hosted-only, together with setOrgOAuthApp and
+         * deleteOrgOAuthApp — the three org-OAuth-app RPCs are ONE capability.
+         * The OSS server answers UNIMPLEMENTED for all of them by design: its
+         * flat OAuthApp store has no override binding, its OAuth resolution has
+         * no override level to consult, and BYOA's clone-from-platform-template
+         * model has no template to clone (self-hosted users apply their own
+         * OAuthApp and reference it from spec.auth.oauth_app_ref — a strictly
+         * more powerful path). Clients probe the capability through THIS RPC:
+         * an UNIMPLEMENTED answer means "hide every BYOA affordance" (see the
+         * SDK's useOrgOAuthApp.isSupported). Never implement one RPC of the
+         * surface without the other two and the client-side gate.
+         *
          * @internal
          * Authorization: Requires can_view permission on the mcp_server resource.
          * Any user who can view the MCP server can check whether their org has

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE3H;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;WAWG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE3H;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;WAWG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;WAyBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/query_pb.d.ts

@@ -79,6 +79,18 @@ export declare const McpServerQueryController: GenService<{
      * exposing secrets. The frontend uses this to show which credential
      * source is active and to offer override management options to org admins.
      *
+     * Edition scoping: hosted-only, together with setOrgOAuthApp and
+     * deleteOrgOAuthApp — the three org-OAuth-app RPCs are ONE capability.
+     * The OSS server answers UNIMPLEMENTED for all of them by design: its
+     * flat OAuthApp store has no override binding, its OAuth resolution has
+     * no override level to consult, and BYOA's clone-from-platform-template
+     * model has no template to clone (self-hosted users apply their own
+     * OAuthApp and reference it from spec.auth.oauth_app_ref — a strictly
+     * more powerful path). Clients probe the capability through THIS RPC:
+     * an UNIMPLEMENTED answer means "hide every BYOA affordance" (see the
+     * SDK's useOrgOAuthApp.isSupported). Never implement one RPC of the
+     * surface without the other two and the client-side gate.
+     *
      * @internal
      * Authorization: Requires can_view permission on the mcp_server resource.
      * Any user who can view the MCP server can check whether their org has

package/ai/stigmer/agentic/mcpserver/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,kjCAAkjC,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjyC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GA0EhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,kjCAAkjC,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjyC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAsFhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts

@@ -78,11 +78,19 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
      * Only names from discovered_capabilities.tools are valid here.
      * Do NOT include names from discovered_capabilities.resource_templates —
      * resource templates are read-only data endpoints, not callable tools.
-     * A name the server does not expose (including a resource template name)
-     * is warned and ignored at execution: the runner enforces the INTERSECTION
-     * with the server's live toolset, so a stale or mistyped entry narrows the
-     * toolset but never widens it or fails the run. Enforcement is per harness
-     * — see McpServerUsage.enabled_tools in agent/v1/spec.proto.
+     *
+     * Enforcement is two-layered:
+     *   - Apply time: mcpserver update/apply rejects (INVALID_ARGUMENT) any
+     *     name this server's own discovered_capabilities.tools does not
+     *     contain, with the valid names in the error. Skipped when the server
+     *     has never been connected (no capabilities yet) — which is always the
+     *     case on create, so the check only bites from the first re-apply
+     *     after discovery.
+     *   - Execution time: the runner enforces the INTERSECTION with the
+     *     server's live toolset — an unknown name is warned in the runner log
+     *     and ignored, so a stale entry narrows the toolset but never widens
+     *     it or fails the run. Enforcement is per harness — see
+     *     McpServerUsage.enabled_tools in agent/v1/spec.proto.
      *
      * @generated from field: repeated string default_enabled_tools = 7;
      */
@@ -116,15 +124,20 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
         [key: string]: EnvVarDeclaration;
     };
     /**
-     * Manual tool approval overrides set by the MCP server owner.
+     * Tools pinned by the MCP server owner to always require approval.
      *
      * @internal
      * These take precedence over system-generated `McpServerStatus.tool_approvals`.
      * Never auto-modified — only changed by explicit user action (apply/update).
      *
+     * Presence in this list IS the gate: every entry force-requires approval
+     * for its tool, overriding the classifier. The field cannot express the
+     * opposite direction — a pin can never exempt a tool. To un-gate a tool
+     * the classifier flagged, use `Agent.McpServerUsage.tool_approval_overrides`
+     * (layer 3 below), whose entries carry a real `requires_approval` boolean.
+     *
      * Use cases:
      * - Force approval for a tool the classifier marked as auto-approve
-     * - Exempt a safe tool the classifier flagged as needing approval
      * - Establish organization-wide safety policies for dangerous tools
      *
      * Policy chain (lowest to highest priority):

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwK7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4E5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6H5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAqL7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4E5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6H5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/status_pb.d.ts

@@ -17,7 +17,7 @@ export declare const file_ai_stigmer_agentic_mcpserver_v1_status: GenFile;
  * 2. Discovered capabilities — the tools and resource templates the MCP server
  *    actually provides. Populated by:
  *      a. Static seedpack bootstrap (for built-in servers like stigmer-mcp-server)
- *      b. The connect RPC — the backend delegates to the agent-runner via a Temporal
+ *      b. The connect RPC — the backend delegates to the runner via a Temporal
  *         workflow, which connects to the MCP server and enumerates tools/resources.
  * 3. Tool approval policies — system-generated by a lightweight LLM classifier during
  *    the connect flow. Manual overrides live in McpServerSpec.pinned_tool_approvals.
@@ -72,9 +72,9 @@ export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServer
     toolApprovals: ToolApprovalPolicy[];
     /**
      * OAuth-related enrichment state, populated at query time by the backend.
-     * Contains vendor approval status (resolved from the referenced OAuthApp)
-     * and BYOA resolution chain results (which OAuthApp is effective for the
-     * caller's org context). None of these fields are persisted.
+     * Carries the vendor approval status resolved from the referenced OAuthApp
+     * (fields 1-2; fields 3-4 are never populated — see OAuthStatus).
+     * None of these fields are persisted.
      *
      * @generated from field: ai.stigmer.agentic.mcpserver.v1.OAuthStatus oauth_status = 5;
      */
@@ -108,7 +108,7 @@ export declare const McpServerStatusSchema: GenMessage<McpServerStatus>;
  *
  * Populated by:
  * - Seedpack bootstrap (built-in servers with known, stable tool sets)
- * - The connect RPC (web console, CLI, or Graphton first-time-use backfill)
+ * - The connect RPC (web console, CLI, or the runner's first-time-use backfill)
  *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.DiscoveredCapabilities
  */
@@ -217,17 +217,24 @@ export declare const DiscoveredResourceTemplateSchema: GenMessage<DiscoveredReso
  * OAuthStatus holds system-derived OAuth enrichment state for an MCP server.
  *
  * @internal
- * All fields are read-only, populated by the backend enricher at query time.
- * None are persisted on the McpServer document — they are computed fresh on
- * every get/getByReference response.
+ * All fields are read-only and never persisted on the McpServer document.
  *
- * Two categories of enrichment:
- * 1. Vendor approval (fields 1-2): Resolved from the referenced OAuthApp
- *    resource. Tells the frontend whether the sign-in button should be
- *    enabled and provides a BYOA documentation link when approval is pending.
- * 2. BYOA resolution (fields 3-4): Computed from the OAuth app resolution
- *    chain. Tells the frontend which credential source is active for the
- *    caller's org context and its OAuthApp ID.
+ * Two categories, with different production stories:
+ * 1. Vendor approval (fields 1-2): populated by the backend enricher on
+ *    every get/getByReference response, resolved from the referenced
+ *    OAuthApp. Tells the frontend whether the platform sign-in flow is
+ *    gated and provides a BYOA documentation link when approval is pending.
+ * 2. BYOA resolution (fields 3-4): NEVER POPULATED, by any edition. The
+ *    resolution is per (server, caller's active org), and the caller's
+ *    active org is client-side context the read RPCs never carry — get has
+ *    no org, and getByReference's org is the server's OWNING org (the
+ *    lookup key), which differs from the caller's org when browsing another
+ *    org's public server. Resolving against the owning org would misreport
+ *    exactly the cross-org marketplace flow BYOA exists for. The shared SDK
+ *    instead derives the signal client-side from the getOrgOAuthApp RPC,
+ *    keyed on the same org the connect flow uses. The fields are retained
+ *    for wire compatibility and as the home of this contract note; a future
+ *    server-side active-org mechanism could legitimately populate them.
  *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.OAuthStatus
  */
@@ -251,18 +258,17 @@ export type OAuthStatus = Message<"ai.stigmer.agentic.mcpserver.v1.OAuthStatus">
      */
     vendorApprovalDocsUrl: string;
     /**
-     * Where the effective OAuth app was resolved from for the caller's org.
-     * Computed from the resolution chain:
-     *   1. OAuthAppOverride for (resource_id, resource_kind, org_id) → ORG_OVERRIDE
-     *   2. McpServerAuth.oauth_app_ref → PLATFORM
-     *   3. Neither exists → NONE
+     * NEVER POPULATED (see the message comment): the caller's active org is
+     * client-side context, so no backend can evaluate the resolution chain at
+     * read time. The shared SDK derives this value client-side from the
+     * getOrgOAuthApp RPC (useMcpServerCredentials.effectiveOAuthSource).
      *
      * @generated from field: ai.stigmer.agentic.mcpserver.v1.OAuthAppSource effective_oauth_source = 3;
      */
     effectiveOauthSource: OAuthAppSource;
     /**
-     * System-generated ID (metadata.id) of the OAuthApp that the resolution
-     * chain selected. Empty when effective_oauth_source is NONE.
+     * NEVER POPULATED (see the message comment). The override's OAuthApp ID
+     * is available from the getOrgOAuthApp RPC (GetOrgOAuthAppOutput.oauth_app_id).
      *
      * @generated from field: string effective_oauth_app_id = 4;
      */
@@ -310,10 +316,17 @@ export declare enum ValidationState {
 export declare const ValidationStateSchema: GenEnum<ValidationState>;
 /**
  * OAuthAppSource identifies where the effective OAuth app for an MCP server
- * was resolved from. Populated at query time by the backend enricher to tell
- * the frontend which credential source is active for the current org context.
+ * was resolved from.
  *
- * Used in OAuthStatus.effective_oauth_source (read-only, not persisted).
+ * The resolution chain is the same one the OAuth connect flow evaluates:
+ *   1. OAuthAppOverride for (resource_id, resource_kind, org_id) → ORG_OVERRIDE
+ *   2. McpServerAuth.oauth_app_ref → PLATFORM
+ *   3. Neither exists → NONE
+ *
+ * Resolved CLIENT-SIDE by the shared SDK from the getOrgOAuthApp RPC: the
+ * resolution is per (server, caller's active org), and the caller's active
+ * org is client-side context the read RPCs never carry, so no backend can
+ * compute it at enrichment time (see OAuthStatus fields 3-4).
  *
  * @generated from enum ai.stigmer.agentic.mcpserver.v1.OAuthAppSource
  */

package/ai/stigmer/agentic/mcpserver/v1/status_pb.js

@@ -73,10 +73,17 @@ export var ValidationState;
 export const ValidationStateSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 0);
 /**
  * OAuthAppSource identifies where the effective OAuth app for an MCP server
- * was resolved from. Populated at query time by the backend enricher to tell
- * the frontend which credential source is active for the current org context.
+ * was resolved from.
  *
- * Used in OAuthStatus.effective_oauth_source (read-only, not persisted).
+ * The resolution chain is the same one the OAuth connect flow evaluates:
+ *   1. OAuthAppOverride for (resource_id, resource_kind, org_id) → ORG_OVERRIDE
+ *   2. McpServerAuth.oauth_app_ref → PLATFORM
+ *   3. Neither exists → NONE
+ *
+ * Resolved CLIENT-SIDE by the shared SDK from the getOrgOAuthApp RPC: the
+ * resolution is per (server, caller's active org), and the caller's active
+ * org is client-side context the read RPCs never carry, so no backend can
+ * compute it at enrichment time (see OAuthStatus fields 3-4).
  *
  * @generated from enum ai.stigmer.agentic.mcpserver.v1.OAuthAppSource
  */

package/ai/stigmer/agentic/mcpserver/v1/status_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y2DAAy2D,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAsFljE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA2C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA6D9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y2DAAy2D,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAsFljE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA2C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAmE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/workspace_pb.d.ts

@@ -86,7 +86,7 @@ export declare const WorkspaceEntrySchema: GenMessage<WorkspaceEntry>;
  * and persistent. No copy or clone is made.
  *
  * @internal
- * Deployment constraint: only valid when the agent-runner is in local mode.
+ * Deployment constraint: only valid when the runner is in local mode.
  * Cloud runners reject this at provisioning time with a clear error, the same
  * way GitRepoSource rejects SSH URLs at validation time.
  *
@@ -112,10 +112,13 @@ export declare const LocalPathSourceSchema: GenMessage<LocalPathSource>;
  *
  * @internal
  * Authentication: The provisioner resolves GITHUB_TOKEN from the merged
- * environment (Agent defaults < Environment < ExecutionContext.runtime_env)
- * and injects it into the clone URL. The token is consumed by provisioning
- * and stripped before forwarding to the agent runtime (see AD-05).
- * SSH key authentication is a future enhancement.
+ * environment (instance environment_refs < ExecutionContext.runtime_env). As a
+ * workspace-provisioning key it is re-injected past the Agent.spec.env
+ * declared-key filter when the session has git_repo entries, with a fallback
+ * to the caller's personal environment (see the agentexecution controller's
+ * executionContextBuilder). The token is injected into the clone URL, consumed
+ * by provisioning, and stripped before forwarding to the agent runtime (see
+ * AD-05). SSH key authentication is a future enhancement.
  *
  * @generated from message ai.stigmer.agentic.session.v1.GitRepoSource
  */

package/ai/stigmer/agentic/session/v1/workspace_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/workspace_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,uCAAuC,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,o+BAAo+B,EAAE,CAAC,uCAAuC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmCxjC;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAiC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAwB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA+E/D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"workspace_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/workspace_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,uCAAuC,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,o+BAAo+B,EAAE,CAAC,uCAAuC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmCxjC;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAiC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAwB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAkF/D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/skill/v1/query_connect.d.ts

@@ -42,7 +42,7 @@ export declare const SkillQueryController: {
          * Returns the ZIP file containing SKILL.md and implementation files.
          *
          * @internal
-         * Used by the agent-runner to download and extract skill artifacts into the
+         * Used by the runner to download and extract skill artifacts into the
          * sandbox at /bin/skills/{version_hash}/. Authorization is skipped as the
          * storage key itself acts as a capability token.
          *

package/ai/stigmer/agentic/skill/v1/query_connect.js

@@ -50,7 +50,7 @@ export const SkillQueryController = {
          * Returns the ZIP file containing SKILL.md and implementation files.
          *
          * @internal
-         * Used by the agent-runner to download and extract skill artifacts into the
+         * Used by the runner to download and extract skill artifacts into the
          * sandbox at /bin/skills/{version_hash}/. Authorization is skipped as the
          * storage key itself acts as a capability token.
          *

package/ai/stigmer/agentic/skill/v1/query_pb.d.ts

@@ -46,7 +46,7 @@ export declare const SkillQueryController: GenService<{
      * Returns the ZIP file containing SKILL.md and implementation files.
      *
      * @internal
-     * Used by the agent-runner to download and extract skill artifacts into the
+     * Used by the runner to download and extract skill artifacts into the
      * sandbox at /bin/skills/{version_hash}/. Authorization is skipped as the
      * storage key itself acts as a capability token.
      *

package/ai/stigmer/agentic/workflow/v1/api_pb.d.ts

@@ -11,7 +11,6 @@ export declare const file_ai_stigmer_agentic_workflow_v1_api: GenFile;
  * Workflow defines a multi-step task orchestration with sequential, parallel, and conditional execution.
  *
  * @internal
- * Uses Graphton configuration for state management.
  *
  * @generated from message ai.stigmer.agentic.workflow.v1.Workflow
  */

package/ai/stigmer/agentic/workflow/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,0CAA0C,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,6fAA6f,EAAE,CAAC,wCAAwC,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA+C5qB;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,0CAA0C,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,6fAA6f,EAAE,CAAC,wCAAwC,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA8C5qB;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflow/v1/tasks/agent_call_pb.d.ts

@@ -183,7 +183,7 @@ export type AgentCallTaskConfig = Message<"ai.stigmer.agentic.workflow.v1.tasks.
      * - HARNESS_UNSPECIFIED / HARNESS_NATIVE: Stigmer native engine (Python/LangGraph)
      * - HARNESS_CURSOR: Cursor SDK engine (TypeScript/Cursor)
      *
-     * The workflow-runner creates a Session with this harness before creating
+     * The runner creates a Session with this harness before creating
      * the AgentExecution. The harness is a session-level concern — it determines
      * tool availability, state management, model access, and billing tier.
      *