@stigmer/protos 3.12.2 → 3.12.4

package/ai/stigmer/agentic/mcpserver/v1/query_connect.d.ts

@@ -1,12 +1,6 @@
 /**
  * McpServerQueryController provides read operations for MCP server resources.
  *
- * @internal
- * Authorization model:
- * - Platform-scoped: Anyone can view (public marketplace)
- * - Organization-scoped: Org members can view
- * - Identity-account-scoped: Only the owner can view
- *
  * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerQueryController
  */
 export declare const McpServerQueryController: {
@@ -15,13 +9,6 @@ export declare const McpServerQueryController: {
         /**
          * Get an MCP server by its unique identifier.
          *
-         * @internal
-         * Authorization: Requires can_view permission on the mcp_server resource.
-         * The caller must have access based on the resource's scope:
-         * - Platform: All authenticated users
-         * - Organization: Organization members
-         * - Identity Account: Only the owner
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.get
          */
         readonly get: {
@@ -36,10 +23,6 @@ export declare const McpServerQueryController: {
          * Preferred method for looking up MCP servers by name/slug rather than
          * system-generated ID.
          *
-         * @internal
-         * Authorization: Custom authorization in handler.
-         * The handler performs scope-aware authorization based on the reference.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getByReference
          */
         readonly getByReference: {
@@ -57,10 +40,6 @@ export declare const McpServerQueryController: {
          * render the correct OAuth state in the MCP server detail page and
          * session composer.
          *
-         * @internal
-         * Authorization: Requires can_view permission on the mcp_server resource.
-         * The resource_id field contains the MCP server's system-generated ID.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getOAuthGrantStatus
          */
         readonly getOAuthGrantStatus: {
@@ -88,11 +67,6 @@ export declare const McpServerQueryController: {
          * SDK's useOrgOAuthApp.isSupported). Never implement one RPC of the
          * surface without the other two and the client-side gate.
          *
-         * @internal
-         * Authorization: Requires can_view permission on the mcp_server resource.
-         * Any user who can view the MCP server can check whether their org has
-         * an override — no secrets are exposed.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getOrgOAuthApp
          */
         readonly getOrgOAuthApp: {

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js

@@ -9,12 +9,6 @@ import { GetOAuthGrantStatusInput, GetOAuthGrantStatusOutput, GetOrgOAuthAppInpu
 /**
  * McpServerQueryController provides read operations for MCP server resources.
  *
- * @internal
- * Authorization model:
- * - Platform-scoped: Anyone can view (public marketplace)
- * - Organization-scoped: Org members can view
- * - Identity-account-scoped: Only the owner can view
- *
  * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerQueryController
  */
 export const McpServerQueryController = {
@@ -23,13 +17,6 @@ export const McpServerQueryController = {
         /**
          * Get an MCP server by its unique identifier.
          *
-         * @internal
-         * Authorization: Requires can_view permission on the mcp_server resource.
-         * The caller must have access based on the resource's scope:
-         * - Platform: All authenticated users
-         * - Organization: Organization members
-         * - Identity Account: Only the owner
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.get
          */
         get: {
@@ -44,10 +31,6 @@ export const McpServerQueryController = {
          * Preferred method for looking up MCP servers by name/slug rather than
          * system-generated ID.
          *
-         * @internal
-         * Authorization: Custom authorization in handler.
-         * The handler performs scope-aware authorization based on the reference.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getByReference
          */
         getByReference: {
@@ -65,10 +48,6 @@ export const McpServerQueryController = {
          * render the correct OAuth state in the MCP server detail page and
          * session composer.
          *
-         * @internal
-         * Authorization: Requires can_view permission on the mcp_server resource.
-         * The resource_id field contains the MCP server's system-generated ID.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getOAuthGrantStatus
          */
         getOAuthGrantStatus: {
@@ -96,11 +75,6 @@ export const McpServerQueryController = {
          * SDK's useOrgOAuthApp.isSupported). Never implement one RPC of the
          * surface without the other two and the client-side gate.
          *
-         * @internal
-         * Authorization: Requires can_view permission on the mcp_server resource.
-         * Any user who can view the MCP server can check whether their org has
-         * an override — no secrets are exposed.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getOrgOAuthApp
          */
         getOrgOAuthApp: {

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE3H;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;WAWG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;WAyBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE3H;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/query_pb.d.ts

@@ -9,25 +9,12 @@ export declare const file_ai_stigmer_agentic_mcpserver_v1_query: GenFile;
 /**
  * McpServerQueryController provides read operations for MCP server resources.
  *
- * @internal
- * Authorization model:
- * - Platform-scoped: Anyone can view (public marketplace)
- * - Organization-scoped: Org members can view
- * - Identity-account-scoped: Only the owner can view
- *
  * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerQueryController
  */
 export declare const McpServerQueryController: GenService<{
     /**
      * Get an MCP server by its unique identifier.
      *
-     * @internal
-     * Authorization: Requires can_view permission on the mcp_server resource.
-     * The caller must have access based on the resource's scope:
-     * - Platform: All authenticated users
-     * - Organization: Organization members
-     * - Identity Account: Only the owner
-     *
      * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.get
      */
     get: {
@@ -41,10 +28,6 @@ export declare const McpServerQueryController: GenService<{
      * Preferred method for looking up MCP servers by name/slug rather than
      * system-generated ID.
      *
-     * @internal
-     * Authorization: Custom authorization in handler.
-     * The handler performs scope-aware authorization based on the reference.
-     *
      * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getByReference
      */
     getByReference: {
@@ -61,10 +44,6 @@ export declare const McpServerQueryController: GenService<{
      * render the correct OAuth state in the MCP server detail page and
      * session composer.
      *
-     * @internal
-     * Authorization: Requires can_view permission on the mcp_server resource.
-     * The resource_id field contains the MCP server's system-generated ID.
-     *
      * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getOAuthGrantStatus
      */
     getOAuthGrantStatus: {
@@ -91,11 +70,6 @@ export declare const McpServerQueryController: GenService<{
      * SDK's useOrgOAuthApp.isSupported). Never implement one RPC of the
      * surface without the other two and the client-side gate.
      *
-     * @internal
-     * Authorization: Requires can_view permission on the mcp_server resource.
-     * Any user who can view the MCP server can check whether their org has
-     * an override — no secrets are exposed.
-     *
      * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerQueryController.getOrgOAuthApp
      */
     getOrgOAuthApp: {

package/ai/stigmer/agentic/mcpserver/v1/query_pb.js

@@ -14,12 +14,6 @@ export const file_ai_stigmer_agentic_mcpserver_v1_query = /*@__PURE__*/ fileDesc
 /**
  * McpServerQueryController provides read operations for MCP server resources.
  *
- * @internal
- * Authorization model:
- * - Platform-scoped: Anyone can view (public marketplace)
- * - Organization-scoped: Org members can view
- * - Identity-account-scoped: Only the owner can view
- *
  * @generated from service ai.stigmer.agentic.mcpserver.v1.McpServerQueryController
  */
 export const McpServerQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_mcpserver_v1_query, 0);

package/ai/stigmer/agentic/mcpserver/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,kjCAAkjC,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjyC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAsFhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,kjCAAkjC,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjyC;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAkEhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts

@@ -9,10 +9,6 @@ export declare const file_ai_stigmer_agentic_mcpserver_v1_spec: GenFile;
 /**
  * McpServerSpec defines the configurable properties of an MCP server.
  *
- * @internal
- * This is the "Template" layer — declares capabilities and requirements.
- * The overview.md file provides the SDK-facing description and example YAML.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.McpServerSpec
  */
 export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSpec"> & {
@@ -73,25 +69,6 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
      * Empty list means all tools are enabled by default.
      * Applies whenever an agent's McpServerUsage.enabled_tools is empty.
      *
-     * @internal
-     * Tool names must match exactly what the MCP server reports via tools/list.
-     * Only names from discovered_capabilities.tools are valid here.
-     * Do NOT include names from discovered_capabilities.resource_templates —
-     * resource templates are read-only data endpoints, not callable tools.
-     *
-     * Enforcement is two-layered:
-     *   - Apply time: mcpserver update/apply rejects (INVALID_ARGUMENT) any
-     *     name this server's own discovered_capabilities.tools does not
-     *     contain, with the valid names in the error. Skipped when the server
-     *     has never been connected (no capabilities yet) — which is always the
-     *     case on create, so the check only bites from the first re-apply
-     *     after discovery.
-     *   - Execution time: the runner enforces the INTERSECTION with the
-     *     server's live toolset — an unknown name is warned in the runner log
-     *     and ignored, so a stale entry narrows the toolset but never widens
-     *     it or fails the run. Enforcement is per harness — see
-     *     McpServerUsage.enabled_tools in agent/v1/spec.proto.
-     *
      * @generated from field: repeated string default_enabled_tools = 7;
      */
     defaultEnabledTools: string[];
@@ -99,25 +76,6 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
      * Environment variable declarations for this MCP server.
      * Keys are variable names; values describe their metadata and optionality.
      *
-     * @internal
-     * Reserved platform keys — declared here like any other variable, but
-     * their values are injected by the runner per resolution context and are
-     * authoritative over same-named user env entries:
-     *   STIGMER_CALLER_IDENTITY_KIND  — the verified caller's kind token
-     *       ("whatsapp_phone", "slack_user_id", "stigmer_user", "anonymous")
-     *   STIGMER_CALLER_IDENTITY_VALUE — the identity value (wa_id, user id,
-     *       email); empty for anonymous
-     *   STIGMER_SESSION_ID            — the session the identity was
-     *       resolved for; empty outside a session
-     * Reserved keys MUST be declared `optional: true`: they have no value at
-     * execution-create time, and a required declaration fails the pipeline's
-     * env-completeness validation before the runner ever injects them.
-     * Discovery (the connect workflow) runs with no session and injects the
-     * anonymous sentinel — a server consuming these keys must answer
-     * tools/list for anonymous callers and gate tool CALLS instead. The
-     * injected header is runner-asserted, not signed: pair it with a shared
-     * secret and treat it as trustworthy only for servers you operate.
-     *
      * @generated from field: map<string, ai.stigmer.agentic.environment.v1.EnvVarDeclaration> env = 8;
      */
     env: {
@@ -126,26 +84,6 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
     /**
      * Tools pinned by the MCP server owner to always require approval.
      *
-     * @internal
-     * These take precedence over system-generated `McpServerStatus.tool_approvals`.
-     * Never auto-modified — only changed by explicit user action (apply/update).
-     *
-     * Presence in this list IS the gate: every entry force-requires approval
-     * for its tool, overriding the classifier. The field cannot express the
-     * opposite direction — a pin can never exempt a tool. To un-gate a tool
-     * the classifier flagged, use `Agent.McpServerUsage.tool_approval_overrides`
-     * (layer 3 below), whose entries carry a real `requires_approval` boolean.
-     *
-     * Use cases:
-     * - Force approval for a tool the classifier marked as auto-approve
-     * - Establish organization-wide safety policies for dangerous tools
-     *
-     * Policy chain (lowest to highest priority):
-     * 1. McpServerStatus.tool_approvals - System-generated defaults
-     * 2. McpServerSpec.pinned_tool_approvals - Manual overrides (this field)
-     * 3. Agent.McpServerUsage.tool_approval_overrides - Per-agent customization
-     * 4. AgentExecution.auto_approve_all - Runtime bypass
-     *
      * @generated from field: repeated ai.stigmer.agentic.mcpserver.v1.ToolApprovalPolicy pinned_tool_approvals = 11;
      */
     pinnedToolApprovals: ToolApprovalPolicy[];
@@ -188,15 +126,6 @@ export declare const McpServerSpecSchema: GenMessage<McpServerSpec>;
 /**
  * StdioServerConfig defines an MCP server that runs as a subprocess.
  *
- * @internal
- * Communication happens via stdin/stdout using JSON-RPC messages.
- * The agent runner starts this process and communicates via stdio.
- *
- * Common examples:
- * - Node.js servers: npx @modelcontextprotocol/server-github
- * - Python servers: python -m mcp_server_sqlite
- * - Go servers: ./mcp-server-binary
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.StdioServerConfig
  */
 export type StdioServerConfig = Message<"ai.stigmer.agentic.mcpserver.v1.StdioServerConfig"> & {
@@ -251,16 +180,6 @@ export declare const StdioServerConfigSchema: GenMessage<StdioServerConfig>;
 /**
  * HttpServerConfig defines an MCP server accessible via HTTP + Server-Sent Events.
  *
- * @internal
- * Communication flow:
- * 1. Agent sends JSON-RPC requests via HTTP POST
- * 2. Server streams responses via Server-Sent Events (SSE)
- *
- * Use cases:
- * - Managed MCP services (e.g., hosted by a cloud provider)
- * - MCP servers behind a reverse proxy or API gateway
- * - Sharing a single MCP server instance across multiple agents
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.HttpServerConfig
  */
 export type HttpServerConfig = Message<"ai.stigmer.agentic.mcpserver.v1.HttpServerConfig"> & {
@@ -287,13 +206,6 @@ export type HttpServerConfig = Message<"ai.stigmer.agentic.mcpserver.v1.HttpServ
      *   "X-API-Version": "2024-01"
      *   "X-Tenant-ID": "${TENANT_ID}"
      *
-     * @internal
-     * Templates may also reference the reserved caller-identity keys
-     * (STIGMER_CALLER_IDENTITY_KIND / _VALUE, STIGMER_SESSION_ID) when the
-     * server declares them in spec.env — see the env field's reserved-key
-     * contract. Placeholders resolve against the env FILTERED to declared
-     * keys, so an undeclared reserved key in a template fails resolution.
-     *
      * @generated from field: map<string, string> headers = 2;
      */
     headers: {
@@ -330,23 +242,6 @@ export declare const HttpServerConfigSchema: GenMessage<HttpServerConfig>;
 /**
  * ToolApprovalPolicy defines approval requirements for a specific tool.
  *
- * @internal
- * The message field supports {{args.field}} placeholders that are resolved
- * at runtime using the actual tool arguments. This enables contextual
- * approval messages that help users make informed decisions.
- *
- * Placeholder syntax:
- *   {{args.field_name}} - Replaced with the tool argument value
- *   {{tool_name}} - Replaced with the tool name (always available)
- *
- * If a placeholder references a missing argument, it's replaced with "<unknown>".
- *
- * Policy chain (lowest to highest priority):
- * 1. McpServerStatus.tool_approvals - System-generated defaults
- * 2. McpServerSpec.pinned_tool_approvals - Manual overrides
- * 3. Agent.McpServerUsage.tool_approval_overrides - Per-agent customization
- * 4. AgentExecution.auto_approve_all - Runtime bypass
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.ToolApprovalPolicy
  */
 export type ToolApprovalPolicy = Message<"ai.stigmer.agentic.mcpserver.v1.ToolApprovalPolicy"> & {
@@ -399,32 +294,6 @@ export declare const ToolApprovalPolicySchema: GenMessage<ToolApprovalPolicy>;
 /**
  * McpServerAuth configures automated credential acquisition via OAuth.
  *
- * @internal
- * Two authentication modes are determined by the presence of oauth_app_ref:
- *
- * - When oauth_app_ref is empty: the MCP server implements the MCP
- *   Authorization specification (RFC 8414 discovery, RFC 7591 Dynamic Client
- *   Registration, OAuth 2.1 with PKCE). Stigmer auto-discovers everything
- *   from the server URL. No OAuthApp resource is needed — credentials are
- *   obtained automatically via DCR.
- *
- * - When oauth_app_ref is set: the MCP server requires pre-registered OAuth
- *   app credentials from a specific vendor (Slack, Salesforce, Figma, etc.).
- *   The referenced OAuthApp holds the client_id, client_secret, and endpoint
- *   URLs needed for the authorization code flow.
- *
- * In both cases, the acquired access token is stored in a system-managed
- * environment (labeled stigmer.ai/managed=true) as target_env_var. A refresh
- * token (if issued by the vendor) is stored alongside as
- * {target_env_var}_REFRESH_TOKEN by convention. The managed environment ID
- * is recorded on the OAuthGrant for all subsequent reads and refreshes.
- *
- * Token lifecycle:
- * - Pre-flight check before execution: if the access token is expired,
- *   the backend uses the refresh token to obtain a new one automatically.
- * - If the refresh token is also expired: execution fails with a clear
- *   error, and the user re-authenticates from the MCP server Connect page.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.McpServerAuth
  */
 export type McpServerAuth = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerAuth"> & {

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAqL7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4E5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6H5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuH7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAsD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA2D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAoD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAmG5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/status_pb.d.ts

@@ -11,19 +11,6 @@ export declare const file_ai_stigmer_agentic_mcpserver_v1_status: GenFile;
 /**
  * McpServerStatus represents the system-managed state of an MCP server definition.
  *
- * @internal
- * Tracks four concerns:
- * 1. Structural validation — whether the definition is valid and can be used by agents.
- * 2. Discovered capabilities — the tools and resource templates the MCP server
- *    actually provides. Populated by:
- *      a. Static seedpack bootstrap (for built-in servers like stigmer-mcp-server)
- *      b. The connect RPC — the backend delegates to the runner via a Temporal
- *         workflow, which connects to the MCP server and enumerates tools/resources.
- * 3. Tool approval policies — system-generated by a lightweight LLM classifier during
- *    the connect flow. Manual overrides live in McpServerSpec.pinned_tool_approvals.
- * 4. OAuth enrichment — vendor approval status and BYOA resolution chain results,
- *    populated by the backend enricher at query time. Never persisted.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.McpServerStatus
  */
 export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerStatus"> & {
@@ -56,17 +43,6 @@ export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServer
     /**
      * System-generated tool approval policies.
      *
-     * @internal
-     * Produced by a lightweight LLM classifier during the connect flow.
-     * Overwritten on each reconnect. Never manually edited — use
-     * McpServerSpec.pinned_tool_approvals for manual overrides.
-     *
-     * Policy chain (lowest to highest priority):
-     * 1. McpServerStatus.tool_approvals (this field) - System-generated defaults
-     * 2. McpServerSpec.pinned_tool_approvals - Manual overrides
-     * 3. Agent.McpServerUsage.tool_approval_overrides - Per-agent customization
-     * 4. AgentExecution.auto_approve_all - Runtime bypass
-     *
      * @generated from field: repeated ai.stigmer.agentic.mcpserver.v1.ToolApprovalPolicy tool_approvals = 4;
      */
     toolApprovals: ToolApprovalPolicy[];
@@ -94,22 +70,6 @@ export declare const McpServerStatusSchema: GenMessage<McpServerStatus>;
 /**
  * DiscoveredCapabilities holds the tools and resource templates reported by an MCP server.
  *
- * @internal
- * This is a point-in-time snapshot — the server's actual capabilities may change
- * if tools are added or removed.
- *
- * Tools vs Resource Templates:
- *   - tools: Callable actions the agent can invoke (e.g., search_code, create_pr).
- *     Only tool names are valid in Agent enabled_tools and McpServer default_enabled_tools.
- *   - resource_templates: Read-only data endpoints accessed by URI template.
- *     Resource template names must NEVER appear in enabled_tools — such a name
- *     never matches a discovered tool, so the runner warns and ignores it
- *     (enforcing the intersection with the live toolset).
- *
- * Populated by:
- * - Seedpack bootstrap (built-in servers with known, stable tool sets)
- * - The connect RPC (web console, CLI, or the runner's first-time-use backfill)
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.DiscoveredCapabilities
  */
 export type DiscoveredCapabilities = Message<"ai.stigmer.agentic.mcpserver.v1.DiscoveredCapabilities"> & {
@@ -140,9 +100,6 @@ export declare const DiscoveredCapabilitiesSchema: GenMessage<DiscoveredCapabili
 /**
  * DiscoveredTool describes a single tool reported by an MCP server.
  *
- * @internal
- * Maps directly to the MCP protocol's Tool type from tools/list.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.DiscoveredTool
  */
 export type DiscoveredTool = Message<"ai.stigmer.agentic.mcpserver.v1.DiscoveredTool"> & {
@@ -174,10 +131,6 @@ export declare const DiscoveredToolSchema: GenMessage<DiscoveredTool>;
 /**
  * DiscoveredResourceTemplate describes a parameterized resource template reported by an MCP server.
  *
- * @internal
- * Resource templates use URI templates (RFC 6570) with placeholders that
- * clients fill in to access specific resources.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.DiscoveredResourceTemplate
  */
 export type DiscoveredResourceTemplate = Message<"ai.stigmer.agentic.mcpserver.v1.DiscoveredResourceTemplate"> & {
@@ -216,26 +169,6 @@ export declare const DiscoveredResourceTemplateSchema: GenMessage<DiscoveredReso
 /**
  * OAuthStatus holds system-derived OAuth enrichment state for an MCP server.
  *
- * @internal
- * All fields are read-only and never persisted on the McpServer document.
- *
- * Two categories, with different production stories:
- * 1. Vendor approval (fields 1-2): populated by the backend enricher on
- *    every get/getByReference response, resolved from the referenced
- *    OAuthApp. Tells the frontend whether the platform sign-in flow is
- *    gated and provides a BYOA documentation link when approval is pending.
- * 2. BYOA resolution (fields 3-4): NEVER POPULATED, by any edition. The
- *    resolution is per (server, caller's active org), and the caller's
- *    active org is client-side context the read RPCs never carry — get has
- *    no org, and getByReference's org is the server's OWNING org (the
- *    lookup key), which differs from the caller's org when browsing another
- *    org's public server. Resolving against the owning org would misreport
- *    exactly the cross-org marketplace flow BYOA exists for. The shared SDK
- *    instead derives the signal client-side from the getOrgOAuthApp RPC,
- *    keyed on the same org the connect flow uses. The fields are retained
- *    for wire compatibility and as the home of this contract note; a future
- *    server-side active-org mechanism could legitimately populate them.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.OAuthStatus
  */
 export type OAuthStatus = Message<"ai.stigmer.agentic.mcpserver.v1.OAuthStatus"> & {

package/ai/stigmer/agentic/mcpserver/v1/status_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y2DAAy2D,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAsFljE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA2C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAmE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y2DAAy2D,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA8DljE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAuC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/schedule/v1/api_pb.d.ts

@@ -17,16 +17,6 @@ export declare const file_ai_stigmer_agentic_schedule_v1_api: GenFile;
  * status. Deleting a schedule stops firing permanently; disabling pauses
  * firing while preserving the schedule and its history.
  *
- * @internal
- * DD-008 D1 (as amended by DD-009): standalone kind (56), target oneof
- * extensible to workflows without a new kind. One agent may have many
- * schedules with different prompts; metadata.org is the billing org for
- * every fire. Calendar semantics live in the Temporal server (D2) — the
- * platform parses no cron in either edition. The defaults resolver does
- * NOT default the slug to the agent slug (schedules are N-per-agent, the
- * AgentChannel P7 rule); standard derive-from-name applies. The
- * overview.md file provides the SDK-facing description and example YAML.
- *
  * @generated from message ai.stigmer.agentic.schedule.v1.Schedule
  */
 export type Schedule = Message<"ai.stigmer.agentic.schedule.v1.Schedule"> & {

package/ai/stigmer/agentic/schedule/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/schedule/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,0CAA0C,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,6fAA6f,EAAE,CAAC,wCAAwC,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6D5qB;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/schedule/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,0CAA0C,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,6fAA6f,EAAE,CAAC,wCAAwC,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmD5qB;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}