@stigmer/protos 3.12.3 → 3.12.5

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAqL7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4E5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6H5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuH7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAsD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA2D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAoD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAmG5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/status_pb.d.ts

@@ -11,19 +11,6 @@ export declare const file_ai_stigmer_agentic_mcpserver_v1_status: GenFile;
 /**
  * McpServerStatus represents the system-managed state of an MCP server definition.
  *
- * @internal
- * Tracks four concerns:
- * 1. Structural validation — whether the definition is valid and can be used by agents.
- * 2. Discovered capabilities — the tools and resource templates the MCP server
- *    actually provides. Populated by:
- *      a. Static seedpack bootstrap (for built-in servers like stigmer-mcp-server)
- *      b. The connect RPC — the backend delegates to the runner via a Temporal
- *         workflow, which connects to the MCP server and enumerates tools/resources.
- * 3. Tool approval policies — system-generated by a lightweight LLM classifier during
- *    the connect flow. Manual overrides live in McpServerSpec.pinned_tool_approvals.
- * 4. OAuth enrichment — vendor approval status and BYOA resolution chain results,
- *    populated by the backend enricher at query time. Never persisted.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.McpServerStatus
  */
 export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerStatus"> & {
@@ -56,17 +43,6 @@ export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServer
     /**
      * System-generated tool approval policies.
      *
-     * @internal
-     * Produced by a lightweight LLM classifier during the connect flow.
-     * Overwritten on each reconnect. Never manually edited — use
-     * McpServerSpec.pinned_tool_approvals for manual overrides.
-     *
-     * Policy chain (lowest to highest priority):
-     * 1. McpServerStatus.tool_approvals (this field) - System-generated defaults
-     * 2. McpServerSpec.pinned_tool_approvals - Manual overrides
-     * 3. Agent.McpServerUsage.tool_approval_overrides - Per-agent customization
-     * 4. AgentExecution.auto_approve_all - Runtime bypass
-     *
      * @generated from field: repeated ai.stigmer.agentic.mcpserver.v1.ToolApprovalPolicy tool_approvals = 4;
      */
     toolApprovals: ToolApprovalPolicy[];
@@ -79,6 +55,17 @@ export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServer
      * @generated from field: ai.stigmer.agentic.mcpserver.v1.OAuthStatus oauth_status = 5;
      */
     oauthStatus?: OAuthStatus;
+    /**
+     * State of the most recent connect (discovery + classification) operation.
+     *
+     * Persisted (unlike oauth_status). Written by the backend when a connect
+     * operation starts and again when it settles; clients poll it through the
+     * ordinary get/getByReference queries after startConnect returns.
+     * Absent until the first connect is attempted.
+     *
+     * @generated from field: ai.stigmer.agentic.mcpserver.v1.ConnectStatus connect_status = 6;
+     */
+    connectStatus?: ConnectStatus;
     /**
      * Standard audit information (created_at, updated_at, created_by, etc.)
      *
@@ -92,23 +79,80 @@ export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServer
  */
 export declare const McpServerStatusSchema: GenMessage<McpServerStatus>;
 /**
- * DiscoveredCapabilities holds the tools and resource templates reported by an MCP server.
+ * ConnectStatus records one connect operation — the most recent one.
  *
- * @internal
- * This is a point-in-time snapshot — the server's actual capabilities may change
- * if tools are added or removed.
- *
- * Tools vs Resource Templates:
- *   - tools: Callable actions the agent can invoke (e.g., search_code, create_pr).
- *     Only tool names are valid in Agent enabled_tools and McpServer default_enabled_tools.
- *   - resource_templates: Read-only data endpoints accessed by URI template.
- *     Resource template names must NEVER appear in enabled_tools — such a name
- *     never matches a discovered tool, so the runner warns and ignores it
- *     (enforcing the intersection with the live toolset).
- *
- * Populated by:
- * - Seedpack bootstrap (built-in servers with known, stable tool sets)
- * - The connect RPC (web console, CLI, or the runner's first-time-use backfill)
+ * @generated from message ai.stigmer.agentic.mcpserver.v1.ConnectStatus
+ */
+export type ConnectStatus = Message<"ai.stigmer.agentic.mcpserver.v1.ConnectStatus"> & {
+    /**
+     * Where the operation stands. See ConnectPhase.
+     *
+     * @generated from field: ai.stigmer.agentic.mcpserver.v1.ConnectPhase phase = 1;
+     */
+    phase: ConnectPhase;
+    /**
+     * The Temporal workflow ID of the connect run — the operation handle.
+     * Used by the backend for orphan reconciliation and idempotent attach;
+     * opaque to clients.
+     *
+     * @generated from field: string workflow_id = 2;
+     */
+    workflowId: string;
+    /**
+     * When the operation was accepted (workflow started).
+     *
+     * @generated from field: google.protobuf.Timestamp started_at = 3;
+     */
+    startedAt?: Timestamp;
+    /**
+     * When the operation settled (success or failure). Unset while CONNECTING.
+     *
+     * @generated from field: google.protobuf.Timestamp finished_at = 4;
+     */
+    finishedAt?: Timestamp;
+    /**
+     * gRPC status code name classifying the failure, mirroring what the
+     * blocking connect RPC returns for the same outcome (CamelCase, the Go
+     * grpc codes.Code String() form):
+     * - "FailedPrecondition": the target server (or its credentials/config)
+     *   refused the connect with a user-facing message — failure_message
+     *   renders verbatim.
+     * - "DeadlineExceeded": the workflow run timeout elapsed.
+     * - "Unavailable": the workflow run disappeared (e.g. Temporal data loss).
+     * - "Internal": unexpected runner/backend error (failure_message carries
+     *   the runner's classified, user-facing connect-failure text — the same
+     *   deliberate exception the blocking RPC makes, stigmer/stigmer#478).
+     * Empty unless phase is connect_phase_failed.
+     *
+     * @generated from field: string failure_code = 5;
+     */
+    failureCode: string;
+    /**
+     * Human-readable failure detail. Same rendering contract as the blocking
+     * connect RPC's error message. Empty unless phase is connect_phase_failed.
+     *
+     * @generated from field: string failure_message = 6;
+     */
+    failureMessage: string;
+    /**
+     * Non-fatal advisory recorded at start time, rendered by clients alongside
+     * the CONNECTING state. Today's only source is the dead-runner pre-flight:
+     * when no worker is polling the runner task queue at start, this warns
+     * that the operation may sit unclaimed (deliberately warn-only — a worker
+     * may be booting, and the pre-flight has a startup false-negative race).
+     * Empty when the pre-flight saw a live worker.
+     *
+     * @generated from field: string warning = 7;
+     */
+    warning: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.ConnectStatus.
+ * Use `create(ConnectStatusSchema)` to create a new message.
+ */
+export declare const ConnectStatusSchema: GenMessage<ConnectStatus>;
+/**
+ * DiscoveredCapabilities holds the tools and resource templates reported by an MCP server.
  *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.DiscoveredCapabilities
  */
@@ -140,9 +184,6 @@ export declare const DiscoveredCapabilitiesSchema: GenMessage<DiscoveredCapabili
 /**
  * DiscoveredTool describes a single tool reported by an MCP server.
  *
- * @internal
- * Maps directly to the MCP protocol's Tool type from tools/list.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.DiscoveredTool
  */
 export type DiscoveredTool = Message<"ai.stigmer.agentic.mcpserver.v1.DiscoveredTool"> & {
@@ -174,10 +215,6 @@ export declare const DiscoveredToolSchema: GenMessage<DiscoveredTool>;
 /**
  * DiscoveredResourceTemplate describes a parameterized resource template reported by an MCP server.
  *
- * @internal
- * Resource templates use URI templates (RFC 6570) with placeholders that
- * clients fill in to access specific resources.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.DiscoveredResourceTemplate
  */
 export type DiscoveredResourceTemplate = Message<"ai.stigmer.agentic.mcpserver.v1.DiscoveredResourceTemplate"> & {
@@ -216,26 +253,6 @@ export declare const DiscoveredResourceTemplateSchema: GenMessage<DiscoveredReso
 /**
  * OAuthStatus holds system-derived OAuth enrichment state for an MCP server.
  *
- * @internal
- * All fields are read-only and never persisted on the McpServer document.
- *
- * Two categories, with different production stories:
- * 1. Vendor approval (fields 1-2): populated by the backend enricher on
- *    every get/getByReference response, resolved from the referenced
- *    OAuthApp. Tells the frontend whether the platform sign-in flow is
- *    gated and provides a BYOA documentation link when approval is pending.
- * 2. BYOA resolution (fields 3-4): NEVER POPULATED, by any edition. The
- *    resolution is per (server, caller's active org), and the caller's
- *    active org is client-side context the read RPCs never carry — get has
- *    no org, and getByReference's org is the server's OWNING org (the
- *    lookup key), which differs from the caller's org when browsing another
- *    org's public server. Resolving against the owning org would misreport
- *    exactly the cross-org marketplace flow BYOA exists for. The shared SDK
- *    instead derives the signal client-side from the getOrgOAuthApp RPC,
- *    keyed on the same org the connect flow uses. The fields are retained
- *    for wire compatibility and as the home of this contract note; a future
- *    server-side active-org mechanism could legitimately populate them.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.OAuthStatus
  */
 export type OAuthStatus = Message<"ai.stigmer.agentic.mcpserver.v1.OAuthStatus"> & {
@@ -279,6 +296,51 @@ export type OAuthStatus = Message<"ai.stigmer.agentic.mcpserver.v1.OAuthStatus">
  * Use `create(OAuthStatusSchema)` to create a new message.
  */
 export declare const OAuthStatusSchema: GenMessage<OAuthStatus>;
+/**
+ * ConnectPhase is the lifecycle of a connect operation.
+ *
+ * Exactly three phases: one live, two terminal. There is no queued/pending
+ * distinction — the Temporal workflow is started before CONNECTING is ever
+ * persisted, so CONNECTING always means "a workflow run exists".
+ *
+ * @generated from enum ai.stigmer.agentic.mcpserver.v1.ConnectPhase
+ */
+export declare enum ConnectPhase {
+    /**
+     * Default/unset. No connect has been recorded (or the resource predates
+     * this field).
+     *
+     * @generated from enum value: connect_phase_unspecified = 0;
+     */
+    unspecified = 0,
+    /**
+     * A connect workflow is running (or was running when the backend last
+     * observed it — see ConnectStatus.workflow_id for how stale entries are
+     * reconciled).
+     *
+     * @generated from enum value: connect_phase_connecting = 1;
+     */
+    connecting = 1,
+    /**
+     * The connect completed and its results were persisted to
+     * discovered_capabilities / tool_approvals.
+     *
+     * @generated from enum value: connect_phase_succeeded = 2;
+     */
+    succeeded = 2,
+    /**
+     * The connect settled without usable results. failure_code and
+     * failure_message carry the same classification the blocking connect RPC
+     * reports as a gRPC error.
+     *
+     * @generated from enum value: connect_phase_failed = 3;
+     */
+    failed = 3
+}
+/**
+ * Describes the enum ai.stigmer.agentic.mcpserver.v1.ConnectPhase.
+ */
+export declare const ConnectPhaseSchema: GenEnum<ConnectPhase>;
 /**
  * ValidationState represents the structural validity of an MCP server definition.
  * This is NOT runtime health — it only indicates whether the definition is valid.

package/ai/stigmer/agentic/mcpserver/v1/status_pb.js

@@ -9,32 +9,83 @@ import { file_google_protobuf_struct, file_google_protobuf_timestamp } from "@bu
 /**
  * Describes the file ai/stigmer/agentic/mcpserver/v1/status.proto.
  */
-export const file_ai_stigmer_agentic_mcpserver_v1_status = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_mcpserver_v1_spec, file_ai_stigmer_commons_apiresource_status, file_ai_stigmer_iam_oauthapp_v1_spec, file_google_protobuf_struct, file_google_protobuf_timestamp]);
+export const file_ai_stigmer_agentic_mcpserver_v1_status = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_mcpserver_v1_spec, file_ai_stigmer_commons_apiresource_status, file_ai_stigmer_iam_oauthapp_v1_spec, file_google_protobuf_struct, file_google_protobuf_timestamp]);
 /**
  * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServerStatus.
  * Use `create(McpServerStatusSchema)` to create a new message.
  */
 export const McpServerStatusSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 0);
+/**
+ * Describes the message ai.stigmer.agentic.mcpserver.v1.ConnectStatus.
+ * Use `create(ConnectStatusSchema)` to create a new message.
+ */
+export const ConnectStatusSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 1);
 /**
  * Describes the message ai.stigmer.agentic.mcpserver.v1.DiscoveredCapabilities.
  * Use `create(DiscoveredCapabilitiesSchema)` to create a new message.
  */
-export const DiscoveredCapabilitiesSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 1);
+export const DiscoveredCapabilitiesSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 2);
 /**
  * Describes the message ai.stigmer.agentic.mcpserver.v1.DiscoveredTool.
  * Use `create(DiscoveredToolSchema)` to create a new message.
  */
-export const DiscoveredToolSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 2);
+export const DiscoveredToolSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 3);
 /**
  * Describes the message ai.stigmer.agentic.mcpserver.v1.DiscoveredResourceTemplate.
  * Use `create(DiscoveredResourceTemplateSchema)` to create a new message.
  */
-export const DiscoveredResourceTemplateSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 3);
+export const DiscoveredResourceTemplateSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 4);
 /**
  * Describes the message ai.stigmer.agentic.mcpserver.v1.OAuthStatus.
  * Use `create(OAuthStatusSchema)` to create a new message.
  */
-export const OAuthStatusSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 4);
+export const OAuthStatusSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 5);
+/**
+ * ConnectPhase is the lifecycle of a connect operation.
+ *
+ * Exactly three phases: one live, two terminal. There is no queued/pending
+ * distinction — the Temporal workflow is started before CONNECTING is ever
+ * persisted, so CONNECTING always means "a workflow run exists".
+ *
+ * @generated from enum ai.stigmer.agentic.mcpserver.v1.ConnectPhase
+ */
+export var ConnectPhase;
+(function (ConnectPhase) {
+    /**
+     * Default/unset. No connect has been recorded (or the resource predates
+     * this field).
+     *
+     * @generated from enum value: connect_phase_unspecified = 0;
+     */
+    ConnectPhase[ConnectPhase["unspecified"] = 0] = "unspecified";
+    /**
+     * A connect workflow is running (or was running when the backend last
+     * observed it — see ConnectStatus.workflow_id for how stale entries are
+     * reconciled).
+     *
+     * @generated from enum value: connect_phase_connecting = 1;
+     */
+    ConnectPhase[ConnectPhase["connecting"] = 1] = "connecting";
+    /**
+     * The connect completed and its results were persisted to
+     * discovered_capabilities / tool_approvals.
+     *
+     * @generated from enum value: connect_phase_succeeded = 2;
+     */
+    ConnectPhase[ConnectPhase["succeeded"] = 2] = "succeeded";
+    /**
+     * The connect settled without usable results. failure_code and
+     * failure_message carry the same classification the blocking connect RPC
+     * reports as a gRPC error.
+     *
+     * @generated from enum value: connect_phase_failed = 3;
+     */
+    ConnectPhase[ConnectPhase["failed"] = 3] = "failed";
+})(ConnectPhase || (ConnectPhase = {}));
+/**
+ * Describes the enum ai.stigmer.agentic.mcpserver.v1.ConnectPhase.
+ */
+export const ConnectPhaseSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 0);
 /**
  * ValidationState represents the structural validity of an MCP server definition.
  * This is NOT runtime health — it only indicates whether the definition is valid.
@@ -70,7 +121,7 @@ export var ValidationState;
 /**
  * Describes the enum ai.stigmer.agentic.mcpserver.v1.ValidationState.
  */
-export const ValidationStateSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 0);
+export const ValidationStateSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 1);
 /**
  * OAuthAppSource identifies where the effective OAuth app for an MCP server
  * was resolved from.
@@ -118,5 +169,5 @@ export var OAuthAppSource;
 /**
  * Describes the enum ai.stigmer.agentic.mcpserver.v1.OAuthAppSource.
  */
-export const OAuthAppSourceSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 1);
+export const OAuthAppSourceSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_mcpserver_v1_status, 2);
 //# sourceMappingURL=status_pb.js.map

package/ai/stigmer/agentic/mcpserver/v1/status_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y2DAAy2D,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAsFljE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA2C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAmE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,w9EAAw9E,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA0EjqF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA6E9D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAuC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,YAkCX;AAlCD,WAAY,YAAY;IACtB;;;;;OAKG;IACH,6DAAe,CAAA;IAEf;;;;;;OAMG;IACH,2DAAc,CAAA;IAEd;;;;;OAKG;IACH,yDAAa,CAAA;IAEb;;;;;;OAMG;IACH,mDAAU,CAAA;AACZ,CAAC,EAlCW,YAAY,KAAZ,YAAY,QAkCvB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,aAAa,CACpE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/schedule/v1/api_pb.d.ts

@@ -17,16 +17,6 @@ export declare const file_ai_stigmer_agentic_schedule_v1_api: GenFile;
  * status. Deleting a schedule stops firing permanently; disabling pauses
  * firing while preserving the schedule and its history.
  *
- * @internal
- * DD-008 D1 (as amended by DD-009): standalone kind (56), target oneof
- * extensible to workflows without a new kind. One agent may have many
- * schedules with different prompts; metadata.org is the billing org for
- * every fire. Calendar semantics live in the Temporal server (D2) — the
- * platform parses no cron in either edition. The defaults resolver does
- * NOT default the slug to the agent slug (schedules are N-per-agent, the
- * AgentChannel P7 rule); standard derive-from-name applies. The
- * overview.md file provides the SDK-facing description and example YAML.
- *
  * @generated from message ai.stigmer.agentic.schedule.v1.Schedule
  */
 export type Schedule = Message<"ai.stigmer.agentic.schedule.v1.Schedule"> & {

package/ai/stigmer/agentic/schedule/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/schedule/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,0CAA0C,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,6fAA6f,EAAE,CAAC,wCAAwC,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6D5qB;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/schedule/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,0CAA0C,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,6fAA6f,EAAE,CAAC,wCAAwC,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmD5qB;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/schedule/v1/command_connect.d.ts

@@ -9,16 +9,6 @@ export declare const ScheduleCommandController: {
         /**
          * Create or update a schedule.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on
-         * whether the schedule is going to be created or updated, resolved as
-         * part of request execution. Status is preserved verbatim across
-         * apply-as-update (the AgentChannel decision-004 posture): status is
-         * written only by the scheduling runtime and by the explicit resume
-         * command, and a routine manifest apply must never reset the failure
-         * streak or un-pause a platform-paused schedule (DD-008 D7 / DD-009
-         * pinned behaviors / DD-013 D-D).
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.apply
          */
         readonly apply: {
@@ -34,16 +24,6 @@ export declare const ScheduleCommandController: {
          * creates an execution that consumes the schedule-owning
          * organization's credits, unattended.
          *
-         * @internal
-         * Authorization: requires can_edit on the REFERENCED AGENT
-         * (spec.agent.agent_ref), checked in-handler — the AgentChannel /
-         * same-org AgentShare Phase A bar (DD-009 C-6): whoever may edit the
-         * agent may schedule it; there is deliberately no org-level
-         * can_create_schedule permission. Standard org-scoped create tuples
-         * (owner = creator); no visibility tuples (the kind has no visibility
-         * block). Invariant enforced here: metadata.org must equal
-         * spec.agent.agent_ref.org.
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.create
          */
         readonly create: {
@@ -61,21 +41,6 @@ export declare const ScheduleCommandController: {
          * pause) is never touched by updates — use resume to clear a platform
          * pause.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the schedule.
-         * agent_ref immutability is a consent-bar guarantee, not convenience
-         * (DD-009 C-7): create's bar is can_edit on the REFERENCED agent, and
-         * a repointing update would let a schedule owner drive an agent they
-         * may not edit — the AgentChannel rule for the AgentChannel reason.
-         * Target-arm immutability (an agent schedule cannot become a workflow
-         * schedule once that arm exists) is enforced in-handler: the two
-         * targets enter different execution pipelines. Update deliberately
-         * does NOT clear a platform auto-pause (DD-013 D-D, superseding the
-         * DD-008 D7 ensure-on-mutate sketch): apply routes through this same
-         * handler, so any update-clears-pause behavior would let a routine
-         * GitOps re-apply silently un-pause a failing schedule. resume is the
-         * one clearing path.
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.update
          */
         readonly update: {
@@ -91,13 +56,6 @@ export declare const ScheduleCommandController: {
          * untouched. To stop firing while keeping the schedule and its
          * history, disable it (enabled=false) instead.
          *
-         * @internal
-         * Authorization: requires can_delete permission on the schedule. The
-         * referenced agent is untouched. The Temporal artifact teardown
-         * (best-effort, AFTER the row delete — DD-008 D9) arrives with the
-         * clock; until then delete is the row alone, and an orphaned artifact
-         * is harmless by construction (fire-time revalidation no-ops it).
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.delete
          */
         readonly delete: {
@@ -115,19 +73,6 @@ export declare const ScheduleCommandController: {
          * resume clears the platform's pause, not the owner's switch
          * (spec.enabled).
          *
-         * @internal
-         * Authorization: requires can_edit permission on the schedule — the
-         * update bar; resuming does not change which agent runs, so it does
-         * not re-open create's consent bar (DD-009 C-6). This command is
-         * deliberately the ONLY path that clears a platform auto-pause
-         * (DD-013 D-D): apply and update preserve status byte-for-byte, so a
-         * routine manifest apply can never silently un-pause a failing
-         * schedule. The cloud handler loads before authorizing (#224: a
-         * missing schedule answers NOT_FOUND, not PERMISSION_DENIED) and
-         * patches status leaves rather than saving the row — the tick is a
-         * concurrent status writer. OSS excludes the authorization step, per
-         * its recorded single-user posture.
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.resume
          */
         readonly resume: {
@@ -153,30 +98,6 @@ export declare const ScheduleCommandController: {
          * verifies a fix before resuming; resume remains the one path that
          * clears the pause.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the schedule — the
-         * update bar (DD-014 D-A). Project DD-017 D-5/D-6 amends DD-014: the
-         * artifact round-trip is gone for manual fires (it made the fire
-         * asynchronous, so the RPC answered before the launch gates ran — a
-         * false "run started" beside a climbing failure counter). Cron fires
-         * keep the tracked artifact tick unchanged. The disabled refusal
-         * SURVIVES for a different reason than DD-014 D-B recorded:
-         * ScheduleBlueprintAccess requires spec.enabled at the create gate AND
-         * the mid-run sandbox read predicate, so a disabled-schedule run would
-         * die mid-execution after billing side effects (consoles offer
-         * "Enable & run now" instead; the fire-legitimacy model that would
-         * lift this is DD-017's named follow-up). Two-level contract: a gRPC
-         * error means the trigger itself was refused (disabled →
-         * FAILED_PRECONDITION with the byte-pinned copy, missing → NOT_FOUND
-         * before authorize, #224); a gRPC success means the fire happened and
-         * ScheduleTriggerResult names the run's outcome — a deterministically
-         * refused run is a successful trigger honestly reported, never an
-         * exception. The handler stamps last_fire_at/last_execution_id and
-         * writes the fire-ledger row (origin=manual) because the tick is not
-         * in the path to do it; status writes ride updateFields, never save()
-         * (DD-010 D-B). OSS mirrors the semantics; it excludes the
-         * authorization step per its recorded single-user posture.
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.trigger
          */
         readonly trigger: {

package/ai/stigmer/agentic/schedule/v1/command_connect.js

@@ -16,16 +16,6 @@ export const ScheduleCommandController = {
         /**
          * Create or update a schedule.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on
-         * whether the schedule is going to be created or updated, resolved as
-         * part of request execution. Status is preserved verbatim across
-         * apply-as-update (the AgentChannel decision-004 posture): status is
-         * written only by the scheduling runtime and by the explicit resume
-         * command, and a routine manifest apply must never reset the failure
-         * streak or un-pause a platform-paused schedule (DD-008 D7 / DD-009
-         * pinned behaviors / DD-013 D-D).
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.apply
          */
         apply: {
@@ -41,16 +31,6 @@ export const ScheduleCommandController = {
          * creates an execution that consumes the schedule-owning
          * organization's credits, unattended.
          *
-         * @internal
-         * Authorization: requires can_edit on the REFERENCED AGENT
-         * (spec.agent.agent_ref), checked in-handler — the AgentChannel /
-         * same-org AgentShare Phase A bar (DD-009 C-6): whoever may edit the
-         * agent may schedule it; there is deliberately no org-level
-         * can_create_schedule permission. Standard org-scoped create tuples
-         * (owner = creator); no visibility tuples (the kind has no visibility
-         * block). Invariant enforced here: metadata.org must equal
-         * spec.agent.agent_ref.org.
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.create
          */
         create: {
@@ -68,21 +48,6 @@ export const ScheduleCommandController = {
          * pause) is never touched by updates — use resume to clear a platform
          * pause.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the schedule.
-         * agent_ref immutability is a consent-bar guarantee, not convenience
-         * (DD-009 C-7): create's bar is can_edit on the REFERENCED agent, and
-         * a repointing update would let a schedule owner drive an agent they
-         * may not edit — the AgentChannel rule for the AgentChannel reason.
-         * Target-arm immutability (an agent schedule cannot become a workflow
-         * schedule once that arm exists) is enforced in-handler: the two
-         * targets enter different execution pipelines. Update deliberately
-         * does NOT clear a platform auto-pause (DD-013 D-D, superseding the
-         * DD-008 D7 ensure-on-mutate sketch): apply routes through this same
-         * handler, so any update-clears-pause behavior would let a routine
-         * GitOps re-apply silently un-pause a failing schedule. resume is the
-         * one clearing path.
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.update
          */
         update: {
@@ -98,13 +63,6 @@ export const ScheduleCommandController = {
          * untouched. To stop firing while keeping the schedule and its
          * history, disable it (enabled=false) instead.
          *
-         * @internal
-         * Authorization: requires can_delete permission on the schedule. The
-         * referenced agent is untouched. The Temporal artifact teardown
-         * (best-effort, AFTER the row delete — DD-008 D9) arrives with the
-         * clock; until then delete is the row alone, and an orphaned artifact
-         * is harmless by construction (fire-time revalidation no-ops it).
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.delete
          */
         delete: {
@@ -122,19 +80,6 @@ export const ScheduleCommandController = {
          * resume clears the platform's pause, not the owner's switch
          * (spec.enabled).
          *
-         * @internal
-         * Authorization: requires can_edit permission on the schedule — the
-         * update bar; resuming does not change which agent runs, so it does
-         * not re-open create's consent bar (DD-009 C-6). This command is
-         * deliberately the ONLY path that clears a platform auto-pause
-         * (DD-013 D-D): apply and update preserve status byte-for-byte, so a
-         * routine manifest apply can never silently un-pause a failing
-         * schedule. The cloud handler loads before authorizing (#224: a
-         * missing schedule answers NOT_FOUND, not PERMISSION_DENIED) and
-         * patches status leaves rather than saving the row — the tick is a
-         * concurrent status writer. OSS excludes the authorization step, per
-         * its recorded single-user posture.
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.resume
          */
         resume: {
@@ -160,30 +105,6 @@ export const ScheduleCommandController = {
          * verifies a fix before resuming; resume remains the one path that
          * clears the pause.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the schedule — the
-         * update bar (DD-014 D-A). Project DD-017 D-5/D-6 amends DD-014: the
-         * artifact round-trip is gone for manual fires (it made the fire
-         * asynchronous, so the RPC answered before the launch gates ran — a
-         * false "run started" beside a climbing failure counter). Cron fires
-         * keep the tracked artifact tick unchanged. The disabled refusal
-         * SURVIVES for a different reason than DD-014 D-B recorded:
-         * ScheduleBlueprintAccess requires spec.enabled at the create gate AND
-         * the mid-run sandbox read predicate, so a disabled-schedule run would
-         * die mid-execution after billing side effects (consoles offer
-         * "Enable & run now" instead; the fire-legitimacy model that would
-         * lift this is DD-017's named follow-up). Two-level contract: a gRPC
-         * error means the trigger itself was refused (disabled →
-         * FAILED_PRECONDITION with the byte-pinned copy, missing → NOT_FOUND
-         * before authorize, #224); a gRPC success means the fire happened and
-         * ScheduleTriggerResult names the run's outcome — a deterministically
-         * refused run is a successful trigger honestly reported, never an
-         * exception. The handler stamps last_fire_at/last_execution_id and
-         * writes the fire-ledger row (origin=manual) because the tick is not
-         * in the path to do it; status writes ride updateFields, never save()
-         * (DD-010 D-B). OSS mirrors the semantics; it excludes the
-         * authorization step per its recorded single-user posture.
-         *
          * @generated from rpc ai.stigmer.agentic.schedule.v1.ScheduleCommandController.trigger
          */
         trigger: {