@stigmer/runner 3.0.1

package/dist/activities/call-validate.js

@@ -0,0 +1,163 @@
+/**
+ * Validate action — validates data against JSON Schema and/or
+ * business rules expressed as JQ predicates.
+ *
+ * Called by `call: validate` tasks in the CNCF workflow DSL. The Go
+ * converter emits:
+ *   call: validate
+ *   with:
+ *     input: "${ $data.buildUser }"
+ *     schema: { type: object, properties: ..., required: [...] }
+ *     rules: [{ name: "...", expression: "...", message: "..." }]
+ *     on_fail: VALIDATION_FAIL_RAISE
+ *     fallback_task: human_review
+ *
+ * Schema validation is a lightweight subset (type, required,
+ * properties, enum, minimum, maximum). Business rules are evaluated
+ * as JQ expressions — a falsy result means the rule failed.
+ */
+import { ApplicationFailure } from "@temporalio/activity";
+import { evaluateExpression } from "../workflow-engine/expression.js";
+function normalizeOnFail(raw) {
+    if (!raw)
+        return "RAISE";
+    return raw
+        .toUpperCase()
+        .replace(/^VALIDATION_FAIL_/, "");
+}
+// ─────────────────────────────────────────────────────────────────────
+// JSON Schema validation (lightweight subset)
+// ─────────────────────────────────────────────────────────────────────
+function matchesType(value, expectedType) {
+    switch (expectedType) {
+        case "string":
+            return typeof value === "string";
+        case "number":
+        case "integer":
+            return typeof value === "number";
+        case "boolean":
+            return typeof value === "boolean";
+        case "object":
+            return typeof value === "object" && value !== null && !Array.isArray(value);
+        case "array":
+            return Array.isArray(value);
+        case "null":
+            return value === null;
+        default:
+            return true;
+    }
+}
+function validateJsonSchema(data, schema) {
+    const errors = [];
+    if (schema.type === "object") {
+        if (typeof data !== "object" || data === null || Array.isArray(data)) {
+            errors.push({ path: "$", message: "Expected object, got " + typeof data });
+            return errors;
+        }
+        const obj = data;
+        const required = schema.required;
+        if (required) {
+            for (const field of required) {
+                if (!(field in obj)) {
+                    errors.push({ path: `$.${field}`, message: `Missing required field '${field}'` });
+                }
+            }
+        }
+        const properties = schema.properties;
+        if (properties) {
+            for (const [field, propSchema] of Object.entries(properties)) {
+                if (!(field in obj))
+                    continue;
+                const value = obj[field];
+                if (propSchema.type && !matchesType(value, propSchema.type)) {
+                    errors.push({
+                        path: `$.${field}`,
+                        message: `Field '${field}' expected type '${propSchema.type}', got '${typeof value}'`,
+                    });
+                }
+                if (propSchema.enum && Array.isArray(propSchema.enum)) {
+                    if (!propSchema.enum.includes(value)) {
+                        errors.push({
+                            path: `$.${field}`,
+                            message: `Field '${field}' must be one of [${propSchema.enum.join(", ")}], got '${value}'`,
+                        });
+                    }
+                }
+                if (typeof value === "number") {
+                    if (propSchema.minimum !== undefined && value < propSchema.minimum) {
+                        errors.push({
+                            path: `$.${field}`,
+                            message: `Field '${field}' must be >= ${propSchema.minimum}, got ${value}`,
+                        });
+                    }
+                    if (propSchema.maximum !== undefined && value > propSchema.maximum) {
+                        errors.push({
+                            path: `$.${field}`,
+                            message: `Field '${field}' must be <= ${propSchema.maximum}, got ${value}`,
+                        });
+                    }
+                }
+            }
+        }
+    }
+    else if (schema.type === "array") {
+        if (!Array.isArray(data)) {
+            errors.push({ path: "$", message: "Expected array, got " + typeof data });
+        }
+    }
+    else if (schema.type) {
+        if (!matchesType(data, schema.type)) {
+            errors.push({ path: "$", message: `Expected type '${schema.type}', got '${typeof data}'` });
+        }
+    }
+    return errors;
+}
+// ─────────────────────────────────────────────────────────────────────
+// Business rules validation (JQ predicates)
+// ─────────────────────────────────────────────────────────────────────
+async function validateRules(data, rules) {
+    const errors = [];
+    for (const rule of rules) {
+        const result = await evaluateExpression(rule.expression, data, {});
+        if (!result) {
+            errors.push({
+                rule: rule.name,
+                message: rule.message || `Rule failed: ${rule.name}`,
+            });
+        }
+    }
+    return errors;
+}
+// ─────────────────────────────────────────────────────────────────────
+// Main entry point
+// ─────────────────────────────────────────────────────────────────────
+export async function validateAction(config) {
+    if (!config.schema && (!config.rules || config.rules.length === 0)) {
+        throw ApplicationFailure.nonRetryable("validate: at least one of 'schema' or 'rules' must be provided", "VALIDATE_MISSING_CRITERIA");
+    }
+    const errors = [];
+    if (config.schema) {
+        errors.push(...validateJsonSchema(config.input, config.schema));
+    }
+    if (config.rules && config.rules.length > 0) {
+        errors.push(...await validateRules(config.input, config.rules));
+    }
+    const result = {
+        valid: errors.length === 0,
+        errors,
+        data: config.input,
+    };
+    const onFail = normalizeOnFail(config.on_fail);
+    if (!result.valid && onFail === "BRANCH" && config.fallback_task) {
+        return { ...result, __flow_directive__: config.fallback_task };
+    }
+    if (!result.valid && onFail === "WARN") {
+        return result;
+    }
+    if (!result.valid) {
+        const summary = result.errors.map(e => e.message).join("; ");
+        throw ApplicationFailure.nonRetryable(`Validation failed: ${summary}`, "VALIDATION_FAILED", result);
+    }
+    return result;
+}
+//# sourceMappingURL=call-validate.js.map

package/dist/activities/call-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-validate.js","sourceRoot":"","sources":["../../src/activities/call-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AA2BtE,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC;IACzB,OAAO,GAAG;SACP,WAAW,EAAE;SACb,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,wEAAwE;AACxE,8CAA8C;AAC9C,wEAAwE;AAExE,SAAS,WAAW,CAAC,KAAc,EAAE,YAAoB;IACvD,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9E,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,MAAM;YACT,OAAO,KAAK,KAAK,IAAI,CAAC;QACxB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAa,EACb,MAA+B;IAE/B,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,uBAAuB,GAAG,OAAO,IAAI,EAAE,CAAC,CAAC;YAC3E,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAgC,CAAC;QACzD,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK,EAAE,EAAE,OAAO,EAAE,2BAA2B,KAAK,GAAG,EAAE,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiE,CAAC;QAC5F,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;oBAAE,SAAS;gBAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;gBAEzB,IAAI,UAAU,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,IAAc,CAAC,EAAE,CAAC;oBACtE,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,KAAK,KAAK,EAAE;wBAClB,OAAO,EAAE,UAAU,KAAK,oBAAoB,UAAU,CAAC,IAAI,WAAW,OAAO,KAAK,GAAG;qBACtF,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,UAAU,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACrC,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,KAAK,KAAK,EAAE;4BAClB,OAAO,EAAE,UAAU,KAAK,qBAAqB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,GAAG;yBAC3F,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC9B,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,GAAI,UAAU,CAAC,OAAkB,EAAE,CAAC;wBAC/E,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,KAAK,KAAK,EAAE;4BAClB,OAAO,EAAE,UAAU,KAAK,gBAAgB,UAAU,CAAC,OAAO,SAAS,KAAK,EAAE;yBAC3E,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,GAAI,UAAU,CAAC,OAAkB,EAAE,CAAC;wBAC/E,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,KAAK,KAAK,EAAE;4BAClB,OAAO,EAAE,UAAU,KAAK,gBAAgB,UAAU,CAAC,OAAO,SAAS,KAAK,EAAE;yBAC3E,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,IAAc,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,WAAW,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,4CAA4C;AAC5C,wEAAwE;AAExE,KAAK,UAAU,aAAa,CAC1B,IAAa,EACb,KAAuG;IAEvG,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,gBAAgB,IAAI,CAAC,IAAI,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,mBAAmB;AACnB,wEAAwE;AAExE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAsB;IACzD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,kBAAkB,CAAC,YAAY,CACnC,gEAAgE,EAChE,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAmB;QAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,IAAI,EAAE,MAAM,CAAC,KAAK;KACnB,CAAC;IAEF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/C,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACjE,OAAO,EAAE,GAAG,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,kBAAkB,CAAC,YAAY,CACnC,sBAAsB,OAAO,EAAE,EAC/B,mBAAmB,EACnB,MAAM,CACP,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/activities/classify-tool-approvals.d.ts

@@ -0,0 +1,47 @@
+/**
+ * ClassifyToolApprovals Temporal activity — uses a lightweight LLM call to
+ * classify each tool reported by an MCP server as safe (auto-approve) or
+ * sensitive (requires human approval before execution).
+ *
+ * Part of the `stigmer/mcp-server/connect` workflow: runs after capability
+ * discovery, before results are stored. The classifier output feeds
+ * `McpServerStatus.tool_approvals` — the lowest-priority layer in the
+ * approval policy chain.
+ *
+ * For large tool sets (>40), tools are classified in batches to stay
+ * within LLM output token limits. Failed batches fall back to
+ * `requires_approval: true` (safe default).
+ *
+ * Activity contract:
+ *   Name:   "ClassifyToolApprovals"
+ *   Input:  ClassifyToolApprovalsInput
+ *   Output: ToolApprovalResult[] (only tools requiring approval)
+ */
+import type { Config } from "../config.js";
+export interface ClassifyToolApprovalsInput {
+    tools: ToolDescriptor[];
+    serverName: string;
+    serverDescription: string;
+    mcpServerId?: string | null;
+}
+export interface ToolDescriptor {
+    name: string;
+    description: string;
+    input_schema?: Record<string, unknown> | null;
+}
+export interface ToolApprovalResult {
+    tool_name: string;
+    requires_approval: boolean;
+    message: string;
+}
+export interface ClassifyToolsOptions {
+    proxyEndpoint: string;
+    stigmerToken: string | null;
+    primaryModel: string;
+}
+export declare function classifyTools(input: ClassifyToolApprovalsInput, options: ClassifyToolsOptions): Promise<ToolApprovalResult[]>;
+export declare function fallbackApprovals(tools: ToolDescriptor[]): ToolApprovalResult[];
+export declare function buildToolsPayload(tools: ToolDescriptor[]): string;
+export declare function createClassifyToolApprovalsActivities(config: Config): {
+    ClassifyToolApprovals: (input: ClassifyToolApprovalsInput) => Promise<ToolApprovalResult[]>;
+};

package/dist/activities/classify-tool-approvals.js

@@ -0,0 +1,207 @@
+/**
+ * ClassifyToolApprovals Temporal activity — uses a lightweight LLM call to
+ * classify each tool reported by an MCP server as safe (auto-approve) or
+ * sensitive (requires human approval before execution).
+ *
+ * Part of the `stigmer/mcp-server/connect` workflow: runs after capability
+ * discovery, before results are stored. The classifier output feeds
+ * `McpServerStatus.tool_approvals` — the lowest-priority layer in the
+ * approval policy chain.
+ *
+ * For large tool sets (>40), tools are classified in batches to stay
+ * within LLM output token limits. Failed batches fall back to
+ * `requires_approval: true` (safe default).
+ *
+ * Activity contract:
+ *   Name:   "ClassifyToolApprovals"
+ *   Input:  ClassifyToolApprovalsInput
+ *   Output: ToolApprovalResult[] (only tools requiring approval)
+ */
+import { z } from "zod";
+import { ChatOpenAI } from "@langchain/openai";
+import { SystemMessage, HumanMessage } from "@langchain/core/messages";
+import { activityStarted, activityFinished } from "../idle-watchdog.js";
+import { getSummarizationModel } from "../shared/model-registry.js";
+import { resolveProxyBaseUrl, buildProxyHeaders } from "../shared/llm-proxy.js";
+const BATCH_SIZE = 40;
+const MAX_TOKENS_PER_TOOL = 60;
+const MIN_MAX_TOKENS = 4096;
+// ─────────────────────────────────────────────────────────────────────────────
+// Zod Schema (structured output)
+// ─────────────────────────────────────────────────────────────────────────────
+const ToolApprovalClassificationSchema = z.object({
+    tool_name: z.string().describe("Exact tool name as reported by the MCP server"),
+    requires_approval: z.boolean().describe("True if this tool performs mutations or has side effects"),
+    message: z.string().describe("Human-readable approval prompt shown to the user. " +
+        "Use {{args.field}} placeholders for dynamic values. " +
+        "Empty when requires_approval is false."),
+});
+const ClassifyToolApprovalsOutputSchema = z.object({
+    approvals: z.array(ToolApprovalClassificationSchema).describe("One classification per tool, same order as input"),
+});
+// ─────────────────────────────────────────────────────────────────────────────
+// System Prompt
+// ─────────────────────────────────────────────────────────────────────────────
+const SYSTEM_PROMPT = `\
+You are a tool safety classifier for AI agent platforms.
+
+Given a list of tools from an MCP server, classify each tool as either \
+safe (auto-approve) or sensitive (requires human approval before execution).
+
+Classification rules:
+
+1. READ-ONLY operations → requires_approval: false
+   Examples: search, list, get, query, read, fetch, describe, count
+   These only retrieve data and have no side effects.
+
+2. CREATE or MODIFY operations → requires_approval: true
+   Examples: create, update, put, set, add, edit, modify, write, post, send
+   These change state or create new resources.
+
+3. DELETE or DESTRUCTIVE operations → requires_approval: true
+   Examples: delete, remove, drop, purge, destroy, revoke, terminate
+   These permanently remove or disable resources.
+
+4. EXECUTE or INVOKE operations → requires_approval: true
+   Examples: execute, run, invoke, call, trigger, deploy, apply
+   These perform actions with external side effects.
+
+For tools that require approval, write a concise message (under 80 chars) \
+that describes the action using {{args.field}} placeholders to reference \
+the tool's input parameters.  Choose the most relevant parameter names \
+from the tool's input_schema.
+
+Message guidelines:
+- Start with an action verb: "Delete", "Create", "Send", "Execute"
+- Include the most important identifier: {{args.repo}}, {{args.path}}, etc.
+- Keep it specific: "Delete repository {{args.repo}}" not "Delete something"
+- If unsure which field to use, use the tool name: "Execute tool_name"
+
+For tools that do NOT require approval, leave message empty.
+
+Output one classification per tool, maintaining the input order.`;
+export async function classifyTools(input, options) {
+    const { tools, serverName, serverDescription, mcpServerId } = input;
+    if (tools.length === 0) {
+        return [];
+    }
+    const model = await getSummarizationModel(options.primaryModel);
+    const batches = [];
+    for (let i = 0; i < tools.length; i += BATCH_SIZE) {
+        batches.push(tools.slice(i, i + BATCH_SIZE));
+    }
+    console.log(`[ClassifyToolApprovals] Classifying ${tools.length} tools for '${serverName}' ` +
+        `using model '${model}' (${batches.length} batch(es) of up to ${BATCH_SIZE})`);
+    const allApprovals = [];
+    for (let batchIdx = 0; batchIdx < batches.length; batchIdx++) {
+        const batch = batches[batchIdx];
+        try {
+            const batchResult = await classifyBatch({
+                batch,
+                serverName,
+                serverDescription,
+                model,
+                proxyEndpoint: options.proxyEndpoint,
+                stigmerToken: options.stigmerToken,
+                mcpServerId: mcpServerId ?? null,
+                batchIdx,
+                totalBatches: batches.length,
+            });
+            allApprovals.push(...batchResult);
+        }
+        catch (err) {
+            console.error(`[ClassifyToolApprovals] Batch ${batchIdx + 1}/${batches.length} failed ` +
+                `for '${serverName}' (${batch.length} tools) — falling back to requires_approval=true`, err);
+            allApprovals.push(...fallbackApprovals(batch));
+        }
+    }
+    const approved = allApprovals.filter((a) => a.requires_approval);
+    console.log(`[ClassifyToolApprovals] Classification complete for '${serverName}': ` +
+        `${approved.length}/${allApprovals.length} tools require approval`);
+    return approved;
+}
+async function classifyBatch(params) {
+    const { batch, serverName, serverDescription, model, proxyEndpoint, stigmerToken, mcpServerId, batchIdx, totalBatches, } = params;
+    const maxTokens = Math.max(MIN_MAX_TOKENS, batch.length * MAX_TOKENS_PER_TOOL);
+    const resolvedBaseUrl = resolveProxyBaseUrl(proxyEndpoint, "openai");
+    const headers = stigmerToken
+        ? buildProxyHeaders(stigmerToken, { mcpServerId: mcpServerId ?? undefined })
+        : {};
+    const llm = new ChatOpenAI({
+        model,
+        temperature: 0,
+        maxTokens,
+        configuration: {
+            baseURL: resolvedBaseUrl,
+            defaultHeaders: headers,
+        },
+    });
+    const structuredLlm = llm.withStructuredOutput(ClassifyToolApprovalsOutputSchema);
+    const toolsPayload = buildToolsPayload(batch);
+    const userPrompt = `MCP Server: ${serverName}\n` +
+        `Description: ${serverDescription || "No description provided"}\n\n` +
+        `Tools to classify (${batch.length}):\n\n` +
+        toolsPayload;
+    console.log(`[ClassifyToolApprovals] Classifying batch ${batchIdx + 1}/${totalBatches} ` +
+        `(${batch.length} tools, max_tokens=${maxTokens}) for '${serverName}'`);
+    const result = await structuredLlm.invoke([
+        new SystemMessage(SYSTEM_PROMPT),
+        new HumanMessage(userPrompt),
+    ]);
+    console.log(`[ClassifyToolApprovals] Batch ${batchIdx + 1}/${totalBatches} complete ` +
+        `for '${serverName}': ${result.approvals.length} classification(s) returned`);
+    return result.approvals.map((a) => ({
+        tool_name: a.tool_name,
+        requires_approval: a.requires_approval,
+        message: a.message,
+    }));
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Helpers
+// ─────────────────────────────────────────────────────────────────────────────
+export function fallbackApprovals(tools) {
+    return tools.map((tool) => ({
+        tool_name: tool.name,
+        requires_approval: true,
+        message: `Execute ${tool.name}`,
+    }));
+}
+export function buildToolsPayload(tools) {
+    const formatted = tools.map((tool) => {
+        const entry = {
+            name: tool.name,
+            description: tool.description,
+        };
+        const schema = tool.input_schema;
+        if (schema && typeof schema === "object") {
+            const props = schema.properties;
+            if (props && typeof props === "object") {
+                entry.parameters = Object.keys(props);
+            }
+        }
+        return entry;
+    });
+    return JSON.stringify(formatted, null, 2);
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Temporal Activity Factory
+// ─────────────────────────────────────────────────────────────────────────────
+export function createClassifyToolApprovalsActivities(config) {
+    return {
+        ClassifyToolApprovals: async (input) => {
+            activityStarted();
+            try {
+                console.log(`[ClassifyToolApprovals] Activity started: ${input.tools.length} tools for '${input.serverName}'`);
+                return await classifyTools(input, {
+                    proxyEndpoint: config.proxyEndpoint ?? config.stigmerBackendEndpoint,
+                    stigmerToken: config.stigmerToken,
+                    primaryModel: config.primaryModel,
+                });
+            }
+            finally {
+                activityFinished();
+            }
+        },
+    };
+}
+//# sourceMappingURL=classify-tool-approvals.js.map

package/dist/activities/classify-tool-approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-tool-approvals.js","sourceRoot":"","sources":["../../src/activities/classify-tool-approvals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAGhF,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,cAAc,GAAG,IAAI,CAAC;AAyB5B,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC/E,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CACrC,0DAA0D,CAC3D;IACD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAC1B,oDAAoD;QACpD,sDAAsD;QACtD,wCAAwC,CACzC;CACF,CAAC,CAAC;AAEH,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAC3D,kDAAkD,CACnD;CACF,CAAC,CAAC;AAIH,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iEAqC2C,CAAC;AAYlE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAiC,EACjC,OAA6B;IAE7B,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAEpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEhE,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,CAAC,GAAG,CACT,uCAAuC,KAAK,CAAC,MAAM,eAAe,UAAU,IAAI;QAChF,gBAAgB,KAAK,MAAM,OAAO,CAAC,MAAM,uBAAuB,UAAU,GAAG,CAC9E,CAAC;IAEF,MAAM,YAAY,GAAyB,EAAE,CAAC;IAE9C,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC;gBACtC,KAAK;gBACL,UAAU;gBACV,iBAAiB;gBACjB,KAAK;gBACL,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,WAAW,EAAE,WAAW,IAAI,IAAI;gBAChC,QAAQ;gBACR,YAAY,EAAE,OAAO,CAAC,MAAM;aAC7B,CAAC,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,iCAAiC,QAAQ,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,UAAU;gBACzE,QAAQ,UAAU,MAAM,KAAK,CAAC,MAAM,kDAAkD,EACtF,GAAG,CACJ,CAAC;YACF,YAAY,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAEjE,OAAO,CAAC,GAAG,CACT,wDAAwD,UAAU,KAAK;QACvE,GAAG,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,yBAAyB,CACnE,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAkBD,KAAK,UAAU,aAAa,CAAC,MAA2B;IACtD,MAAM,EACJ,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAC3C,aAAa,EAAE,YAAY,EAAE,WAAW,EACxC,QAAQ,EAAE,YAAY,GACvB,GAAG,MAAM,CAAC;IAEX,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC;IAE/E,MAAM,eAAe,GAAG,mBAAmB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,YAAY;QAC1B,CAAC,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,CAAC;QAC5E,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC;QACzB,KAAK;QACL,WAAW,EAAE,CAAC;QACd,SAAS;QACT,aAAa,EAAE;YACb,OAAO,EAAE,eAAe;YACxB,cAAc,EAAE,OAAO;SACxB;KACF,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,GAAG,CAAC,oBAAoB,CAAC,iCAAiC,CAAC,CAAC;IAElF,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GACd,eAAe,UAAU,IAAI;QAC7B,gBAAgB,iBAAiB,IAAI,yBAAyB,MAAM;QACpE,sBAAsB,KAAK,CAAC,MAAM,QAAQ;QAC1C,YAAY,CAAC;IAEf,OAAO,CAAC,GAAG,CACT,6CAA6C,QAAQ,GAAG,CAAC,IAAI,YAAY,GAAG;QAC5E,IAAI,KAAK,CAAC,MAAM,sBAAsB,SAAS,UAAU,UAAU,GAAG,CACvE,CAAC;IAEF,MAAM,MAAM,GAAgC,MAAM,aAAa,CAAC,MAAM,CAAC;QACrE,IAAI,aAAa,CAAC,aAAa,CAAC;QAChC,IAAI,YAAY,CAAC,UAAU,CAAC;KAC7B,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CACT,iCAAiC,QAAQ,GAAG,CAAC,IAAI,YAAY,YAAY;QACzE,QAAQ,UAAU,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,6BAA6B,CAC7E,CAAC;IAEF,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;QACtC,OAAO,EAAE,CAAC,CAAC,OAAO;KACnB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,SAAS,EAAE,IAAI,CAAC,IAAI;QACpB,iBAAiB,EAAE,IAAI;QACvB,OAAO,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE;KAChC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,MAAM,KAAK,GAA4B;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC;QACjC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,KAAK,GAAI,MAAkC,CAAC,UAAU,CAAC;YAC7D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF,MAAM,UAAU,qCAAqC,CAAC,MAAc;IAClE,OAAO;QACL,qBAAqB,EAAE,KAAK,EAC1B,KAAiC,EACF,EAAE;YACjC,eAAe,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,CAAC,GAAG,CACT,6CAA6C,KAAK,CAAC,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,UAAU,GAAG,CAClG,CAAC;gBAEF,OAAO,MAAM,aAAa,CAAC,KAAK,EAAE;oBAChC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,sBAAsB;oBACpE,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,gBAAgB,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/activities/discover-mcp-server.d.ts

@@ -0,0 +1,65 @@
+/**
+ * DiscoverMcpServerCapabilities Temporal activity — connects to an MCP server,
+ * enumerates its tools and resource templates, and returns a serializable
+ * result for the connect workflow.
+ *
+ * Part of the `stigmer/mcp-server/connect` workflow: runs as step 1 before
+ * ClassifyToolApprovals. The activity hydrates the MCP server spec via gRPC,
+ * resolves environment variables from a pre-created ExecutionContext, and
+ * connects using MultiServerMCPClient for transport management.
+ *
+ * Security: Temporal input carries only IDs (mcp_server_id,
+ * execution_context_id) — no secret values ever appear in workflow history.
+ * The activity resolves secrets from the backend-created ExecutionContext.
+ *
+ * Activity contract:
+ *   Name:   "DiscoverMcpServerCapabilities"
+ *   Input:  DiscoverMcpServerInput
+ *   Output: DiscoverMcpServerOutput
+ */
+import { StigmerClient } from "../client/stigmer-client.js";
+import type { McpServer } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import type { Config } from "../config.js";
+export interface DiscoverMcpServerInput {
+    mcpServerId: string;
+    executionContextId?: string | null;
+    invokerIdentityAccountId?: string | null;
+}
+export interface DiscoveredToolResult {
+    name: string;
+    description: string;
+    inputSchema?: Record<string, unknown> | null;
+}
+export interface DiscoveredResourceTemplateResult {
+    uriTemplate: string;
+    name: string;
+    description: string;
+    mimeType: string;
+}
+export interface DiscoverMcpServerOutput {
+    tools: DiscoveredToolResult[];
+    resourceTemplates: DiscoveredResourceTemplateResult[];
+    previousToolsFingerprint: string;
+    previousToolApprovals: ToolApprovalDict[];
+    newToolsFingerprint: string;
+}
+export interface ToolApprovalDict {
+    toolName: string;
+    requiresApproval: boolean;
+    message: string;
+}
+export declare function toolsFingerprint(tools: DiscoveredToolResult[]): string;
+interface PreviousState {
+    fingerprint: string;
+    toolApprovals: ToolApprovalDict[];
+}
+export declare function extractPreviousState(mcpServer: McpServer): PreviousState;
+export declare function injectPlatformEnv(declaredEnvKeys: Set<string>, envVars: Record<string, string>): Record<string, string>;
+export interface DiscoverDeps {
+    stigmerClient: StigmerClient;
+}
+export declare function discoverMcpServer(input: DiscoverMcpServerInput, deps: DiscoverDeps): Promise<DiscoverMcpServerOutput>;
+export declare function createDiscoverMcpServerActivities(config: Config): {
+    DiscoverMcpServerCapabilities: (input: DiscoverMcpServerInput) => Promise<DiscoverMcpServerOutput>;
+};
+export {};