@stigmer/runner 0.1.0-dev.20261017020314.g644422724c27

package/dist/activities/execute-deep-agent/v3-event-recorder.js

@@ -0,0 +1,72 @@
+/**
+ * V3 event recorder for capturing raw LangGraph v3 ProtocolEvents.
+ *
+ * Activated by the V3_EVENT_RECORD_DIR environment variable. When set,
+ * the adapter's stream loop (`turn-stream.ts`) records every raw protocol
+ * event and flushes them atomically to a JSON file after the stream
+ * completes — the native twin of `execute-cursor/cursor-event-recorder.ts`.
+ *
+ * Development infrastructure: the captured events are the ground truth the
+ * v3 fixtures (`__test-utils__/v3-event-fixtures.ts`) and the builder's
+ * tests were shaped from, and the way a new provider's event shape is read.
+ */
+import { writeFile, mkdir } from "node:fs/promises";
+import { join } from "node:path";
+/**
+ * Create a recorder if V3_EVENT_RECORD_DIR is set, otherwise return undefined.
+ * The caller does `recorder?.record(event, seq)` — zero overhead when off.
+ */
+export function createV3EventRecorder(executionId, recordDir) {
+    if (!recordDir)
+        return undefined;
+    return new FileV3EventRecorder(executionId, recordDir);
+}
+class FileV3EventRecorder {
+    executionId;
+    outputDir;
+    events = [];
+    constructor(executionId, outputDir) {
+        this.executionId = executionId;
+        this.outputDir = outputDir;
+    }
+    record(event, seq) {
+        this.events.push({
+            seq,
+            capturedAt: new Date().toISOString(),
+            type: event.type,
+            method: event.method,
+            namespace: event.params.namespace,
+            timestamp: event.params.timestamp,
+            node: event.params.node,
+            data: safeClone(event.params.data),
+        });
+    }
+    async flush() {
+        if (this.events.length === 0)
+            return;
+        await mkdir(this.outputDir, { recursive: true });
+        const filePath = join(this.outputDir, `${this.executionId}.v3-events.json`);
+        const payload = {
+            executionId: this.executionId,
+            recordedAt: new Date().toISOString(),
+            eventCount: this.events.length,
+            events: this.events,
+        };
+        await writeFile(filePath, JSON.stringify(payload, bigintReplacer, 2));
+    }
+}
+function safeClone(obj) {
+    try {
+        return JSON.parse(JSON.stringify(obj, bigintReplacer));
+    }
+    catch {
+        if (obj && typeof obj === "object") {
+            return { _serializationError: true, keys: Object.keys(obj) };
+        }
+        return { _serializationError: true };
+    }
+}
+function bigintReplacer(_key, value) {
+    return typeof value === "bigint" ? value.toString() : value;
+}
+//# sourceMappingURL=v3-event-recorder.js.map

package/dist/activities/execute-deep-agent/v3-event-recorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v3-event-recorder.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/v3-event-recorder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA8BjC;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAmB,EACnB,SAA6B;IAE7B,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,IAAI,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,mBAAmB;IAIJ;IACA;IAJF,MAAM,GAAsB,EAAE,CAAC;IAEhD,YACmB,WAAmB,EACnB,SAAiB;QADjB,gBAAW,GAAX,WAAW,CAAQ;QACnB,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEJ,MAAM,CAAC,KAAsB,EAAE,GAAW;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,GAAG;YACH,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;YACjC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;YACjC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;YACvB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,IAAI,CACnB,IAAI,CAAC,SAAS,EACd,GAAG,IAAI,CAAC,WAAW,iBAAiB,CACrC,CAAC;QAEF,MAAM,OAAO,GAAG;YACd,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAc;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC"}

package/dist/activities/generate-session-subject.d.ts

@@ -0,0 +1,93 @@
+/**
+ * GenerateSessionSubject Temporal activity — replaces the sentinel subject of
+ * an auto-created session with a concise LLM-generated conversation title.
+ *
+ * Called fire-and-forget by the Go InvokeAgentExecutionWorkflow (Step 1.5 of
+ * BOTH the deep-agent and cursor flows) on the runner task queue, with a 60 s
+ * deadline and a single attempt. Failures are non-critical by contract: the
+ * session simply keeps its sentinel subject, and the workflow logs a warning.
+ *
+ * Cross-edition parity: this is the behavioral twin of stigmer-cloud's
+ * GenerateSessionSubjectActivityImpl (Java, runs in-process on the server
+ * because the Java server owns an LLM call service; the OSS LLM stack lives
+ * here in the runner). The system prompt, skip rules, 50-char cap, and the
+ * heuristic fallback are kept in lockstep so both editions title sessions
+ * identically. The previous owner was the retired Python agent-runner
+ * (stigmer/stigmer#665).
+ *
+ * Model + credential resolution: the economy model for the configured
+ * primary (registry costTier=economy, graceful degrade to the primary),
+ * routed through the Stigmer proxy when one is configured, else called
+ * directly with the operator's provider key. A missing credential degrades
+ * to a heuristic title (the first words of the user message): a title is
+ * worth having even when no model is reachable, so nothing here fails
+ * closed.
+ *
+ * Activity contract — exactly ONE argument, in one of two shapes:
+ *   Name:   "GenerateSessionSubject"
+ *   Input:  (executionId: string)
+ *           | ({ execution_id, execution_context_token? }: GenerateSessionSubjectInput)
+ *   Output: void
+ *
+ * The object is what a server sends when the dispatch carries the run's
+ * credential (shared/run-credential.ts), so that this activity reads the
+ * run and titles the session AS THE RUN'S HUMAN — with sign-in on, the
+ * operator's key the process holds cannot read a member's run. The string
+ * is what every server sent before, and what a server whose dispatch carries
+ * no credential still sends (the cloud's, whose desktop runners in the field
+ * must keep titling sessions). Both shapes are accepted — the dual-shape
+ * posture the turn activities take (shared/activity-input.ts); the
+ * credential itself is entered by the activity boundary
+ * (interceptors/run-credential-activity.ts), never read here. The cloud's
+ * Java signature carries a second argument, invokerIdentityAccountId, that
+ * never crosses this wire.
+ */
+import type { Config } from "../config.js";
+import type { Run } from "@stigmer/apis/ai/stigmer/agentic/run/v1/api_pb";
+import type { Session } from "@stigmer/apis/ai/stigmer/agentic/session/v1/api_pb";
+import type { Agent } from "@stigmer/apis/ai/stigmer/agentic/agent/v1/api_pb";
+/**
+ * The sentinel written by the server on auto-created sessions — byte-identical
+ * to `autoCreatedSessionSubject` in stigmer-server's agentexecution create
+ * pipeline and to AUTO_CREATED_SUBJECT in the cloud activity. Only sessions
+ * still carrying it (or an empty subject) are ever titled.
+ */
+export declare const AUTO_CREATED_SUBJECT = "Auto-created session";
+/** The client surface this activity needs — StigmerClient satisfies it. */
+export interface SessionSubjectClient {
+    getExecution(executionId: string): Promise<Run>;
+    getSession(sessionId: string): Promise<Session>;
+    getAgent(agentId: string): Promise<Agent>;
+    updateSessionSubject(sessionId: string, subject: string): Promise<Session>;
+}
+export interface GenerateSessionSubjectOptions {
+    /** Null when the deployment has no proxy — the runner calls providers directly. */
+    proxyEndpoint: string | null;
+    stigmerToken: string | null;
+    primaryModel: string;
+}
+export declare function generateSessionSubject(executionId: string, client: SessionSubjectClient, options: GenerateSessionSubjectOptions): Promise<void>;
+/** Kept in lockstep with the cloud activity's buildUserPrompt. */
+export declare function buildUserPrompt(userMessage: string, agentName: string, agentDescription: string): string;
+/**
+ * Best-effort subject from the first few words of the user message. Used when
+ * the LLM is unavailable. Kept in lockstep with the cloud activity.
+ */
+export declare function heuristicSubject(userMessage: string): string;
+/**
+ * Strip one layer of wrapping quotes and enforce the length cap. Kept in
+ * lockstep with the cloud activity.
+ */
+export declare function cleanSubject(raw: string): string;
+/**
+ * The typed wire shape of the activity's argument (snake_case keys, the
+ * polyglot workflow-input convention). `execution_context_token` is the run
+ * credential, present exactly when the dispatch carried one.
+ */
+export interface GenerateSessionSubjectInput {
+    readonly execution_id: string;
+    readonly execution_context_token?: string;
+}
+export declare function createGenerateSessionSubjectActivities(config: Config): {
+    GenerateSessionSubject: (input: GenerateSessionSubjectInput | string) => Promise<void>;
+};

package/dist/activities/generate-session-subject.js

@@ -0,0 +1,285 @@
+/**
+ * GenerateSessionSubject Temporal activity — replaces the sentinel subject of
+ * an auto-created session with a concise LLM-generated conversation title.
+ *
+ * Called fire-and-forget by the Go InvokeAgentExecutionWorkflow (Step 1.5 of
+ * BOTH the deep-agent and cursor flows) on the runner task queue, with a 60 s
+ * deadline and a single attempt. Failures are non-critical by contract: the
+ * session simply keeps its sentinel subject, and the workflow logs a warning.
+ *
+ * Cross-edition parity: this is the behavioral twin of stigmer-cloud's
+ * GenerateSessionSubjectActivityImpl (Java, runs in-process on the server
+ * because the Java server owns an LLM call service; the OSS LLM stack lives
+ * here in the runner). The system prompt, skip rules, 50-char cap, and the
+ * heuristic fallback are kept in lockstep so both editions title sessions
+ * identically. The previous owner was the retired Python agent-runner
+ * (stigmer/stigmer#665).
+ *
+ * Model + credential resolution: the economy model for the configured
+ * primary (registry costTier=economy, graceful degrade to the primary),
+ * routed through the Stigmer proxy when one is configured, else called
+ * directly with the operator's provider key. A missing credential degrades
+ * to a heuristic title (the first words of the user message): a title is
+ * worth having even when no model is reachable, so nothing here fails
+ * closed.
+ *
+ * Activity contract — exactly ONE argument, in one of two shapes:
+ *   Name:   "GenerateSessionSubject"
+ *   Input:  (executionId: string)
+ *           | ({ execution_id, execution_context_token? }: GenerateSessionSubjectInput)
+ *   Output: void
+ *
+ * The object is what a server sends when the dispatch carries the run's
+ * credential (shared/run-credential.ts), so that this activity reads the
+ * run and titles the session AS THE RUN'S HUMAN — with sign-in on, the
+ * operator's key the process holds cannot read a member's run. The string
+ * is what every server sent before, and what a server whose dispatch carries
+ * no credential still sends (the cloud's, whose desktop runners in the field
+ * must keep titling sessions). Both shapes are accepted — the dual-shape
+ * posture the turn activities take (shared/activity-input.ts); the
+ * credential itself is entered by the activity boundary
+ * (interceptors/run-credential-activity.ts), never read here. The cloud's
+ * Java signature carries a second argument, invokerIdentityAccountId, that
+ * never crosses this wire.
+ */
+import { SystemMessage, HumanMessage } from "@langchain/core/messages";
+import { ConnectError, Code } from "@connectrpc/connect";
+import { activityStarted, activityFinished } from "../idle-watchdog.js";
+import { StigmerClient } from "../client/stigmer-client.js";
+import { getSummarizationModel } from "../shared/model-registry.js";
+import { buildChatModel } from "../shared/model-client.js";
+import { checkDirectCredentials } from "../shared/llm-backend.js";
+import { tryInferProvider } from "../shared/llm-proxy.js";
+import { sessionIdOf } from "../shared/execution-target.js";
+/**
+ * The sentinel written by the server on auto-created sessions — byte-identical
+ * to `autoCreatedSessionSubject` in stigmer-server's agentexecution create
+ * pipeline and to AUTO_CREATED_SUBJECT in the cloud activity. Only sessions
+ * still carrying it (or an empty subject) are ever titled.
+ */
+export const AUTO_CREATED_SUBJECT = "Auto-created session";
+const MAX_SUBJECT_LENGTH = 50;
+/** Titles are tiny; matches the cloud activity's completion budget. */
+const MAX_COMPLETION_TOKENS = 100;
+const TEMPERATURE = 0.7;
+/** Kept verbatim in lockstep with the cloud activity's SYSTEM_PROMPT. */
+const SYSTEM_PROMPT = `\
+You are a session title generator. Given a user's message and agent context, \
+produce a concise conversation title.
+
+Rules:
+- 3 to 7 words, maximum 50 characters
+- Capture the user's core intent or topic
+- Be specific (e.g. "PostgreSQL Multi-AZ Setup" not "Database Help")
+- No filler words ("help with", "question about", "I need")
+- No quotes, no punctuation at the end
+- Output ONLY the title, nothing else`;
+export async function generateSessionSubject(executionId, client, options) {
+    const execution = await getOrSkip(() => client.getExecution(executionId), `execution not found: ${executionId}`);
+    if (execution === undefined)
+        return;
+    const sessionId = sessionIdOf(execution.spec);
+    const userMessage = execution.spec?.message ?? "";
+    if (sessionId === "") {
+        log(`no session_id on execution ${executionId}, skipping`);
+        return;
+    }
+    if (userMessage === "") {
+        log(`no user message on execution ${executionId}, skipping`);
+        return;
+    }
+    const session = await getOrSkip(() => client.getSession(sessionId), `session not found: ${sessionId}`);
+    if (session === undefined)
+        return;
+    const currentSubject = session.spec?.subject ?? "";
+    if (currentSubject !== "" && currentSubject !== AUTO_CREATED_SUBJECT) {
+        log(`subject is '${currentSubject}' (already set), skipping`);
+        return;
+    }
+    // The agent the turn ran (its stamp), when it has one, lends the title its
+    // purpose; the built-in assistant (no agent stamped) is titled from the
+    // message alone rather than left "Untitled".
+    let agentName = "";
+    let agentDescription = "";
+    const agentId = execution.status?.agentId ?? "";
+    if (agentId !== "") {
+        const agent = await getOrSkip(() => client.getAgent(agentId), `agent not found: ${agentId}`);
+        if (agent === undefined)
+            return;
+        agentName = agent.metadata?.name ?? "";
+        agentDescription = agent.spec?.description ?? "";
+    }
+    const subject = await generateTitle({
+        userMessage,
+        agentName,
+        agentDescription,
+        executionId,
+        options,
+    });
+    if (subject === "") {
+        log("subject is empty after generation, skipping");
+        return;
+    }
+    try {
+        await client.updateSessionSubject(sessionId, subject);
+    }
+    catch (err) {
+        log(`failed to persist subject for session ${sessionId}: ${message(err)}`);
+        return;
+    }
+    log(`updated session ${sessionId} subject to '${subject}'`);
+}
+/**
+ * LLM title with heuristic degrade. Every unavailability class — no direct
+ * credential, model build failure, provider error, empty completion — lands on
+ * the heuristic, matching the cloud activity (its LlmCallService swallows
+ * provider failures into a null completion; heuristicSubject documents the
+ * same "expired API key, rate limit, registry miss" cases).
+ */
+async function generateTitle(params) {
+    const { userMessage, agentName, agentDescription, executionId, options } = params;
+    const model = await getSummarizationModel(options.primaryModel);
+    // Direct mode with no credential path degrades up front with one actionable
+    // message. The provider follows the economy-model resolution, not the
+    // operator's key, so the log names it.
+    if (!options.proxyEndpoint) {
+        const provider = tryInferProvider(model);
+        const missing = provider === null ? null : checkDirectCredentials(provider);
+        if (missing !== null) {
+            log(`title model '${model}' (${provider}) has no credential path — ` +
+                `using heuristic fallback. ${missing}`);
+            return heuristicSubject(userMessage);
+        }
+    }
+    try {
+        const { model: llm } = await buildChatModel({
+            modelName: model,
+            proxyEndpoint: options.proxyEndpoint ?? undefined,
+            stigmerToken: options.stigmerToken ?? undefined,
+            headerScope: { executionId },
+            maxTokens: MAX_COMPLETION_TOKENS,
+            temperature: TEMPERATURE,
+        });
+        const result = await llm.invoke([
+            new SystemMessage(SYSTEM_PROMPT),
+            new HumanMessage(buildUserPrompt(userMessage, agentName, agentDescription)),
+        ]);
+        const generated = contentToString(result.content).trim();
+        if (generated === "") {
+            log("LLM returned empty content, using heuristic fallback");
+            return heuristicSubject(userMessage);
+        }
+        return cleanSubject(generated);
+    }
+    catch (err) {
+        log(`LLM title generation failed, using heuristic fallback: ${message(err)}`);
+        return heuristicSubject(userMessage);
+    }
+}
+/** Kept in lockstep with the cloud activity's buildUserPrompt. */
+export function buildUserPrompt(userMessage, agentName, agentDescription) {
+    let prompt = `User's first message:\n"${userMessage}"\n\n`;
+    if (agentName !== "") {
+        prompt += `Agent: ${agentName}\n`;
+    }
+    if (agentDescription !== "") {
+        prompt += `Agent purpose: ${agentDescription}\n`;
+    }
+    prompt += "\nGenerate the title:";
+    return prompt;
+}
+/**
+ * Best-effort subject from the first few words of the user message. Used when
+ * the LLM is unavailable. Kept in lockstep with the cloud activity.
+ */
+export function heuristicSubject(userMessage) {
+    const words = userMessage.trim().split(/\s+/);
+    let subject = words.slice(0, 7).join(" ");
+    if (subject.length > MAX_SUBJECT_LENGTH) {
+        subject = subject.slice(0, MAX_SUBJECT_LENGTH - 3) + "...";
+    }
+    return subject;
+}
+/**
+ * Strip one layer of wrapping quotes and enforce the length cap. Kept in
+ * lockstep with the cloud activity.
+ */
+export function cleanSubject(raw) {
+    let subject = raw.trim();
+    if (subject.length > 1 && subject.startsWith('"') && subject.endsWith('"')) {
+        subject = subject.slice(1, -1);
+    }
+    if (subject.length > 1 && subject.startsWith("'") && subject.endsWith("'")) {
+        subject = subject.slice(1, -1);
+    }
+    subject = subject.trim();
+    if (subject.length > MAX_SUBJECT_LENGTH) {
+        subject = subject.slice(0, MAX_SUBJECT_LENGTH - 3) + "...";
+    }
+    return subject;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Helpers
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Run a lookup, translating NOT_FOUND into a logged skip (undefined) — the
+ * cloud activity's Optional.isEmpty branches. Anything else propagates as a
+ * genuine activity failure; the workflow's fire-and-forget wrapper logs it
+ * as non-critical.
+ */
+async function getOrSkip(fetch, skipMessage) {
+    try {
+        return await fetch();
+    }
+    catch (err) {
+        if (err instanceof ConnectError && err.code === Code.NotFound) {
+            log(`${skipMessage}, skipping`);
+            return undefined;
+        }
+        throw err;
+    }
+}
+/** LangChain message content is a string or an array of typed parts. */
+function contentToString(content) {
+    if (typeof content === "string")
+        return content;
+    if (Array.isArray(content)) {
+        return content
+            .map((part) => typeof part === "object" && part !== null && "text" in part
+            ? String(part.text)
+            : "")
+            .join("");
+    }
+    return "";
+}
+function message(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function log(msg) {
+    console.log(`[GenerateSessionSubject] ${msg}`);
+}
+export function createGenerateSessionSubjectActivities(config) {
+    const client = new StigmerClient({
+        endpoint: config.stigmerBackendEndpoint,
+        tokenRef: config.stigmerTokenRef,
+        runnerTokenRef: config.stigmerRunnerTokenRef,
+    });
+    return {
+        GenerateSessionSubject: async (input) => {
+            const executionId = typeof input === "string" ? input : input.execution_id;
+            activityStarted();
+            try {
+                log(`started: execution=${executionId}`);
+                await generateSessionSubject(executionId, client, {
+                    proxyEndpoint: config.proxyEndpoint,
+                    stigmerToken: config.stigmerTokenRef.current,
+                    primaryModel: config.primaryModel,
+                });
+            }
+            finally {
+                activityFinished();
+            }
+        },
+    };
+}
+//# sourceMappingURL=generate-session-subject.js.map

package/dist/activities/generate-session-subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-session-subject.js","sourceRoot":"","sources":["../../src/activities/generate-session-subject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAK5D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,yEAAyE;AACzE,MAAM,aAAa,GAAG;;;;;;;;;;sCAUgB,CAAC;AAqBvC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAAmB,EACnB,MAA4B,EAC5B,OAAsC;IAEtC,MAAM,SAAS,GAAG,MAAM,SAAS,CAC/B,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,EACtC,wBAAwB,WAAW,EAAE,CACtC,CAAC;IACF,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IAEpC,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAClD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,GAAG,CAAC,8BAA8B,WAAW,YAAY,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,GAAG,CAAC,gCAAgC,WAAW,YAAY,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAClC,sBAAsB,SAAS,EAAE,CAClC,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAElC,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IACnD,IAAI,cAAc,KAAK,EAAE,IAAI,cAAc,KAAK,oBAAoB,EAAE,CAAC;QACrE,GAAG,CAAC,eAAe,cAAc,2BAA2B,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,6CAA6C;IAC7C,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;IAChD,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC9B,oBAAoB,OAAO,EAAE,CAC9B,CAAC;QACF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,SAAS,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;QACvC,gBAAgB,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;QAClC,WAAW;QACX,SAAS;QACT,gBAAgB;QAChB,WAAW;QACX,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,6CAA6C,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,yCAAyC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,GAAG,CAAC,mBAAmB,SAAS,gBAAgB,OAAO,GAAG,CAAC,CAAC;AAC9D,CAAC;AAUD;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAC,MAA2B;IACtD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAElF,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEhE,4EAA4E;IAC5E,sEAAsE;IACtE,uCAAuC;IACvC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC5E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,GAAG,CACD,gBAAgB,KAAK,MAAM,QAAQ,6BAA6B;gBAChE,6BAA6B,OAAO,EAAE,CACvC,CAAC;YACF,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC;YAC1C,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,SAAS;YACjD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;YAC/C,WAAW,EAAE,EAAE,WAAW,EAAE;YAC5B,SAAS,EAAE,qBAAqB;YAChC,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC9B,IAAI,aAAa,CAAC,aAAa,CAAC;YAChC,IAAI,YAAY,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;SAC5E,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACrB,GAAG,CAAC,sDAAsD,CAAC,CAAC;YAC5D,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0DAA0D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,SAAiB,EACjB,gBAAwB;IAExB,IAAI,MAAM,GAAG,2BAA2B,WAAW,OAAO,CAAC;IAC3D,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,UAAU,SAAS,IAAI,CAAC;IACpC,CAAC;IACD,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,gBAAgB,IAAI,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,uBAAuB,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CACtB,KAAuB,EACvB,WAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9D,GAAG,CAAC,GAAG,WAAW,YAAY,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,IAAI,IAAI;YACzD,CAAC,CAAC,MAAM,CAAE,IAA0B,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,EAAE,CACP;aACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;AACjD,CAAC;AAgBD,MAAM,UAAU,sCAAsC,CAAC,MAAc;IACnE,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,sBAAsB;QACvC,QAAQ,EAAE,MAAM,CAAC,eAAe;QAChC,cAAc,EAAE,MAAM,CAAC,qBAAqB;KAC7C,CAAC,CAAC;IAEH,OAAO;QACL,sBAAsB,EAAE,KAAK,EAC3B,KAA2C,EAC5B,EAAE;YACjB,MAAM,WAAW,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;YAC3E,eAAe,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;gBACzC,MAAM,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE;oBAChD,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,OAAO;oBAC5C,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,gBAAgB,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/activities/list-plugin-tools.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The tools listing's activity: lists the tools one of a plugin's MCP
+ * servers offers now, as the person who asked, for the plugin page's
+ * "Check tools" and `stigmer connect plugin`. Nothing is stored; the server
+ * answers the list to its caller.
+ *
+ * The one step of the `stigmer/mcp-server/connect` workflow (its type name,
+ * and this activity's, are pinned wire identifiers from before a server
+ * lived inside a plugin). The activity reads the plugin through the control
+ * plane, takes the named server's entry, fetches the listing's values from
+ * their vaults (`VaultValueController.fetchValues`, the same fetch a turn
+ * makes, answered only for the attempt's credential), and lists the
+ * server's tools (shared/mcp-tool-listing.ts).
+ *
+ * Security: the workflow input carries only ids (the plugin, the server's
+ * name, and the attempt) and the attempt's credential — no value ever
+ * appears in workflow history. A listing has no conversation, so every
+ * caller-identity key the server reads resolves to the anonymous sentinel:
+ * a server reading them answers tools/list to anonymous callers by
+ * contract.
+ *
+ * Activity contract:
+ *   Name:   "DiscoverMcpServerCapabilities"
+ *   Input:  ListPluginToolsInput
+ *   Output: ListPluginToolsOutput
+ */
+import { StigmerClient } from "../client/stigmer-client.js";
+import { type McpTransportPosture } from "../shared/mcp-transport-guard.js";
+import { type PlatformEndpoints } from "../shared/platform-server-address.js";
+import type { Config } from "../config.js";
+export interface ListPluginToolsInput {
+    pluginId: string;
+    /** The server's name in the plugin. */
+    server: string;
+    /** The listing's attempt, whose values it fetches; absent when the server reads none. */
+    executionContextId?: string | null;
+    /**
+     * The runner credential bound to the attempt, the fetch's authority,
+     * carried with the work item: the listing has no execution of its own to
+     * exchange for one. Absent on an edition whose ambient connect sandbox
+     * credential is bound to the attempt.
+     */
+    executionContextToken?: string | null;
+}
+export interface ListedToolResult {
+    name: string;
+    description: string;
+    /** The tool's MCP annotation `destructiveHint === true`, and nothing else. */
+    destructiveHint: boolean;
+}
+export interface ListPluginToolsOutput {
+    tools: ListedToolResult[];
+}
+/**
+ * Raised when the values a server reads could not be delivered to the
+ * listing — the fetch was refused or failed, or answered nothing for a
+ * server that requires values (issue #239). It names the root cause, credential
+ * delivery, instead of its downstream symptom (an unresolved placeholder,
+ * or a dial with a missing login). The message is user-facing and
+ * self-contained: it survives the Temporal boundary into the server's
+ * failure text.
+ */
+export declare class CredentialResolutionError extends Error {
+    constructor(message: string);
+}
+export interface ListPluginToolsDeps {
+    stigmerClient: StigmerClient;
+    /** Whether stdio servers may be started here; a cloud runner refuses one even to list its tools. */
+    transportPosture: McpTransportPosture;
+    /** The runner's endpoints a missing STIGMER_SERVER_ADDRESS is filled from. */
+    platformEndpoints: PlatformEndpoints;
+}
+export declare function listPluginTools(input: ListPluginToolsInput, deps: ListPluginToolsDeps): Promise<ListPluginToolsOutput>;
+export declare function createListPluginToolsActivities(config: Config): {
+    DiscoverMcpServerCapabilities: (input: ListPluginToolsInput) => Promise<ListPluginToolsOutput>;
+};