@stigmer/sdk 3.12.3 → 3.12.5

package/index.js

@@ -8,9 +8,11 @@ export { createGuestAuth, GuestAuth, } from "./guest-auth.js";
 // Agent sharing (hosted link + embed snippet; framework-free)
 export { MAX_ALLOWED_ORIGINS, LINK_TOKEN_PARAM, validateOrigin, chatPath, buildChatUrl, appendLinkToken, buildEmbedLoaderUrl, buildEmbedSnippet, } from "./sharing.js";
 // Error handling
-export { StigmerError, isNotFound, isUnauthenticated, isPermissionDenied, isRetryable, isConnectError, classifyError, isRetryableError, isTransientStreamError, getUserMessage, getErrorReason, annotateRpcError, getRpcMetadata, } from "./errors.js";
+export { StigmerError, isNotFound, isUnauthenticated, isPermissionDenied, isRetryable, isUnimplemented, isConnectError, classifyError, isRetryableError, isTransientStreamError, getUserMessage, getErrorReason, annotateRpcError, getRpcMetadata, } from "./errors.js";
 // Resource availability
 export { isResourceAvailable, } from "./resource-availability.js";
+// Complete update-input mappers (full-spec-replace round-trip safety)
+export { toOrganizationUpdateInput, toIdentityAccountUpdateInput, } from "./update-input.js";
 // Authorization config and IAM role utilities
 export { getGrantableRoles, hasGrantableRoles, isRoleGrantable, } from "./authorization-config.js";
 export { iamRoleToString, iamRoleFromString, iamRoleDisplayName, iamRoleDescription, } from "./iam-role.js";
@@ -21,6 +23,8 @@ export { ActivityClient, } from "./activity.js";
 export { BillingClient, } from "./billing.js";
 // Cursor accounts client (platform operators only)
 export { CursorAccountsClient, } from "./cursor-accounts.js";
+// Provider standing client (platform operators only, read-only)
+export { ProviderStandingClient } from "./provider-standing.js";
 // Search client
 export { SearchClient, ApiResourceKind, } from "./search.js";
 // GitHub OAuth client
@@ -45,6 +49,7 @@ export { InvitationClient, } from "./gen/invitation.js";
 export { IdentityProviderClient, } from "./gen/identityprovider.js";
 export { OAuthAppClient, } from "./gen/oauthapp.js";
 export { McpServerClient, buildMcpServerProto, } from "./gen/mcpserver.js";
+export { connectAndWait, ConnectStillRunningError, CONNECT_POLL_INTERVAL_MS, CONNECT_SETTLE_BOUND_MS, } from "./mcpserver-connect.js";
 export { OrganizationClient, } from "./gen/organization.js";
 export { PlatformClientClient, } from "./gen/platformclient.js";
 export { ProjectClient } from "./gen/project.js";
@@ -53,12 +58,13 @@ export { SessionClient, } from "./gen/session.js";
 // Session utilities (hand-written)
 export { PENDING_SUBJECT, SESSION_CONTEXT_METADATA_KEY, mergeSessionContext, resolvedSubject, } from "./session.js";
 // Tool-call view model (framework-agnostic; shared by @stigmer/react and @stigmer/ink)
-export { ToolKind, FileChangeCaptureLevel, resolveToolKind, resolveToolKindByName, normalizeToolResult, } from "./execution/tool-view.js";
+export { ToolKind, FileChangeCaptureLevel, resolveToolKind, resolveToolKindByName, normalizeToolResult, SHELL_INTENT_ARG_FIELD, extractShellIntent, shellIntentFromArgs, } from "./execution/tool-view.js";
 export { ApprovalPolicySource, describeApprovalPolicySource, isInformativePolicySource, } from "./execution/approval-provenance.js";
 export { isTerminalPhase } from "./execution/execution-phases.js";
 export { foldFileReviewEventStream, displayFileChangeSets, } from "./execution/file-review-fold.js";
 export { toDisplayFileChange } from "./execution/to-display-file-change.js";
 export { SkillClient } from "./gen/skill.js";
+export { RoutedSkillClient, MAX_INLINE_ARTIFACT_BYTES } from "./skill.js";
 export { WorkflowClient, } from "./gen/workflow.js";
 export { WorkflowExecutionClient, } from "./gen/workflowexecution.js";
 export { WorkflowInstanceClient, } from "./gen/workflowinstance.js";

package/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAE9B,mBAAmB;AACnB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,iBAAiB;AACjB,OAAO,EAGL,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAK7B,4EAA4E;AAC5E,OAAO,EACL,eAAe,EACf,SAAS,GAGV,MAAM,iBAAiB,CAAC;AAEzB,8DAA8D;AAC9D,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAEtB,iBAAiB;AACjB,OAAO,EACL,YAAY,EAEZ,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EAEX,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,EAEd,cAAc,EAEd,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,wBAAwB;AACxB,OAAO,EAEL,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAEpC,8CAA8C;AAC9C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAEpE,oCAAoC;AACpC,OAAO,EACL,cAAc,GAGf,MAAM,eAAe,CAAC;AAGvB,iBAAiB;AACjB,OAAO,EACL,aAAa,GAQd,MAAM,cAAc,CAAC;AAEtB,mDAAmD;AACnD,OAAO,EACL,oBAAoB,GAMrB,MAAM,sBAAsB,CAAC;AAE9B,gBAAgB;AAChB,OAAO,EACL,YAAY,EAGZ,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,sBAAsB;AACtB,OAAO,EACL,YAAY,GAKb,MAAM,aAAa,CAAC;AAErB,oDAAoD;AACpD,OAAO,EACL,cAAc,GAEf,MAAM,eAAe,CAAC;AAEvB,uDAAuD;AACvD,OAAO,EACL,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,2BAA2B,EAC3B,aAAa,EACb,0BAA0B,EAC1B,0BAA0B,EAC1B,UAAU,EACV,sBAAsB,EACtB,uBAAuB,GAKxB,MAAM,qBAAqB,CAAC;AAa7B,wDAAwD;AACxD,OAAO,EACL,WAAW,EACX,eAAe,GAOhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,GAKrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAoB,MAAM,iBAAiB,CAAC;AACjE,OAAO,EACL,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,GAElB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,GAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,cAAc,GAEf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,mBAAmB,GAKpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,GAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,GAErB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAqB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EACL,cAAc,EACd,kBAAkB,GAInB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,GAMd,MAAM,kBAAkB,CAAC;AAE1B,mCAAmC;AACnC,OAAO,EACL,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,uFAAuF;AACvF,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EACL,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAmB,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,cAAc,GAMf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAE9B,mBAAmB;AACnB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,iBAAiB;AACjB,OAAO,EAGL,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAK7B,4EAA4E;AAC5E,OAAO,EACL,eAAe,EACf,SAAS,GAGV,MAAM,iBAAiB,CAAC;AAEzB,8DAA8D;AAC9D,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAEtB,iBAAiB;AACjB,OAAO,EACL,YAAY,EAEZ,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,eAAe,EAEf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,EAEd,cAAc,EAEd,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,wBAAwB;AACxB,OAAO,EAEL,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAEpC,sEAAsE;AACtE,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAE3B,8CAA8C;AAC9C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAEpE,oCAAoC;AACpC,OAAO,EACL,cAAc,GAGf,MAAM,eAAe,CAAC;AAGvB,iBAAiB;AACjB,OAAO,EACL,aAAa,GAQd,MAAM,cAAc,CAAC;AAEtB,mDAAmD;AACnD,OAAO,EACL,oBAAoB,GAMrB,MAAM,sBAAsB,CAAC;AAE9B,gEAAgE;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,gBAAgB;AAChB,OAAO,EACL,YAAY,EAGZ,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,sBAAsB;AACtB,OAAO,EACL,YAAY,GAKb,MAAM,aAAa,CAAC;AAErB,oDAAoD;AACpD,OAAO,EACL,cAAc,GAEf,MAAM,eAAe,CAAC;AAEvB,uDAAuD;AACvD,OAAO,EACL,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,2BAA2B,EAC3B,aAAa,EACb,0BAA0B,EAC1B,0BAA0B,EAC1B,UAAU,EACV,sBAAsB,EACtB,uBAAuB,GAKxB,MAAM,qBAAqB,CAAC;AAa7B,wDAAwD;AACxD,OAAO,EACL,WAAW,EACX,eAAe,GAOhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,GAKrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAoB,MAAM,iBAAiB,CAAC;AACjE,OAAO,EACL,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,GAElB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,GAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,cAAc,GAEf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,mBAAmB,GAKpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,GAGxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,GAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,GAErB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAqB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EACL,cAAc,EACd,kBAAkB,GAInB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,GAMd,MAAM,kBAAkB,CAAC;AAE1B,mCAAmC;AACnC,OAAO,EACL,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,uFAAuF;AACvF,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,GAIpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EACL,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAmB,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EACL,cAAc,GAMf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC"}

package/mcpserver-connect.d.ts

@@ -0,0 +1,79 @@
+import type { McpServer } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import type { ConnectInput } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/io_pb";
+/**
+ * The slice of {@link McpServerClient} the connect protocol needs — the
+ * async-lane pair plus the blocking fallback. Structural on purpose: the
+ * full client satisfies it, and tests can hand in three functions.
+ */
+export interface McpServerConnectLane {
+    startConnect(input: ConnectInput): Promise<McpServer>;
+    connect(input: ConnectInput): Promise<McpServer>;
+    get(id: string): Promise<McpServer>;
+}
+/**
+ * How often {@link connectAndWait} re-reads the resource while a connect
+ * operation runs. Discovery legitimately takes tens of seconds to minutes;
+ * a few seconds of staleness is invisible next to that, and each poll is
+ * one cheap get.
+ */
+export declare const CONNECT_POLL_INTERVAL_MS = 2500;
+/**
+ * Absolute bound on waiting for a connect to settle: the backend's async
+ * connect ceiling (its asyncConnectTimeout, 60 min) plus margin. Every
+ * operation settles within the ceiling by construction; only a
+ * connect_status orphaned by a backend restart can still read CONNECTING
+ * past it, and this bound turns that into a typed error instead of an
+ * infinite wait.
+ */
+export declare const CONNECT_SETTLE_BOUND_MS: number;
+/**
+ * Thrown by {@link connectAndWait} when it stopped waiting while the
+ * server-side operation was still running. NOT a failure: the backend
+ * finishes the connect on its own and persists the result — re-read the
+ * resource (or re-run the connect) to observe the outcome.
+ */
+export declare class ConnectStillRunningError extends Error {
+    readonly mcpServerId: string;
+    constructor(mcpServerId: string, waitedMs: number);
+}
+/** Options for {@link connectAndWait}. */
+export interface ConnectAndWaitOptions {
+    /** Poll cadence. Defaults to {@link CONNECT_POLL_INTERVAL_MS}. */
+    readonly pollIntervalMs?: number;
+    /**
+     * Stop waiting after this long (soft bound — the server-side operation
+     * keeps running). Defaults to {@link CONNECT_SETTLE_BOUND_MS}, and is
+     * capped by it: waiting longer than the backend's own ceiling can only
+     * ever observe an orphaned record.
+     */
+    readonly deadlineMs?: number;
+    /**
+     * Observe the CONNECTING snapshot the moment the operation is accepted —
+     * the place to read `status.connect_status.warning` (the dead-runner
+     * advisory) before the wait begins. Not called on the blocking fallback,
+     * which has no start-time snapshot.
+     */
+    readonly onStarted?: (started: McpServer) => void;
+}
+/**
+ * Connect an MCP server and wait for the operation to settle, without any
+ * long-lived RPC (stigmer/stigmer#425).
+ *
+ * Uses the async lane — `startConnect` returns immediately with
+ * `status.connect_status = CONNECTING`, then the resource is polled until
+ * the operation settles — so the wait survives transport limits that kill
+ * a long-blocking unary call (browsers drop no-bytes responses around
+ * ~300s, below the server's discovery ceiling). Callers never see the
+ * mechanics: the promise resolves with the updated server exactly as the
+ * blocking `connect` RPC resolved, and a failed operation rejects with the
+ * same {@link StigmerError} classification the blocking RPC would have
+ * thrown (`connect_status.failure_code` is the Go gRPC code name, which
+ * matches connect-es `Code` member names — rehydration is lossless).
+ *
+ * Backends that predate the async lane answer UNIMPLEMENTED for
+ * `startConnect`; this falls back to the blocking `connect` RPC — the same
+ * edition capability-probe idiom as the skill artifact-transfer lane
+ * (skill.ts) and the org-OAuth-app surface.
+ */
+export declare function connectAndWait(client: McpServerConnectLane, input: ConnectInput, options?: ConnectAndWaitOptions): Promise<McpServer>;
+//# sourceMappingURL=mcpserver-connect.d.ts.map

package/mcpserver-connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpserver-connect.d.ts","sourceRoot":"","sources":["../src/mcpserver-connect.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wDAAwD,CAAC;AACxF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uDAAuD,CAAC;AAI1F;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CACrC;AAED;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAAc,CAAC;AAEnD;;;;;GAKG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAQlD;AAED,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,kEAAkE;IAClE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,KAAK,IAAI,CAAC;CACnD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,SAAS,CAAC,CA2BpB"}

package/mcpserver-connect.js

@@ -0,0 +1,114 @@
+import { Code, ConnectError } from "@connectrpc/connect";
+import { ConnectPhase } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/status_pb";
+import { isUnimplemented, wrapError } from "./gen/errors.js";
+/**
+ * How often {@link connectAndWait} re-reads the resource while a connect
+ * operation runs. Discovery legitimately takes tens of seconds to minutes;
+ * a few seconds of staleness is invisible next to that, and each poll is
+ * one cheap get.
+ */
+export const CONNECT_POLL_INTERVAL_MS = 2_500;
+/**
+ * Absolute bound on waiting for a connect to settle: the backend's async
+ * connect ceiling (its asyncConnectTimeout, 60 min) plus margin. Every
+ * operation settles within the ceiling by construction; only a
+ * connect_status orphaned by a backend restart can still read CONNECTING
+ * past it, and this bound turns that into a typed error instead of an
+ * infinite wait.
+ */
+export const CONNECT_SETTLE_BOUND_MS = 65 * 60_000;
+/**
+ * Thrown by {@link connectAndWait} when it stopped waiting while the
+ * server-side operation was still running. NOT a failure: the backend
+ * finishes the connect on its own and persists the result — re-read the
+ * resource (or re-run the connect) to observe the outcome.
+ */
+export class ConnectStillRunningError extends Error {
+    mcpServerId;
+    constructor(mcpServerId, waitedMs) {
+        super(`the connect of MCP server '${mcpServerId}' is still running server-side after ${Math.round(waitedMs / 1000)}s — ` +
+            "it will persist its result on its own; re-read the server to observe the outcome");
+        this.name = "ConnectStillRunningError";
+        this.mcpServerId = mcpServerId;
+    }
+}
+/**
+ * Connect an MCP server and wait for the operation to settle, without any
+ * long-lived RPC (stigmer/stigmer#425).
+ *
+ * Uses the async lane — `startConnect` returns immediately with
+ * `status.connect_status = CONNECTING`, then the resource is polled until
+ * the operation settles — so the wait survives transport limits that kill
+ * a long-blocking unary call (browsers drop no-bytes responses around
+ * ~300s, below the server's discovery ceiling). Callers never see the
+ * mechanics: the promise resolves with the updated server exactly as the
+ * blocking `connect` RPC resolved, and a failed operation rejects with the
+ * same {@link StigmerError} classification the blocking RPC would have
+ * thrown (`connect_status.failure_code` is the Go gRPC code name, which
+ * matches connect-es `Code` member names — rehydration is lossless).
+ *
+ * Backends that predate the async lane answer UNIMPLEMENTED for
+ * `startConnect`; this falls back to the blocking `connect` RPC — the same
+ * edition capability-probe idiom as the skill artifact-transfer lane
+ * (skill.ts) and the org-OAuth-app surface.
+ */
+export async function connectAndWait(client, input, options) {
+    const pollIntervalMs = options?.pollIntervalMs ?? CONNECT_POLL_INTERVAL_MS;
+    const waitMs = Math.min(options?.deadlineMs ?? CONNECT_SETTLE_BOUND_MS, CONNECT_SETTLE_BOUND_MS);
+    let started;
+    try {
+        started = await client.startConnect(input);
+    }
+    catch (err) {
+        if (!isUnimplemented(err))
+            throw err;
+        return blockingConnect(client, input, waitMs);
+    }
+    options?.onStarted?.(started);
+    const deadline = Date.now() + waitMs;
+    for (;;) {
+        if (Date.now() >= deadline) {
+            throw new ConnectStillRunningError(input.mcpServerId, waitMs);
+        }
+        await sleep(Math.min(pollIntervalMs, Math.max(1, deadline - Date.now())));
+        const current = await client.get(input.mcpServerId);
+        const cs = current.status?.connectStatus;
+        if (cs?.phase === ConnectPhase.succeeded)
+            return current;
+        if (cs?.phase === ConnectPhase.failed) {
+            throw rehydrateConnectFailure(cs.failureCode, cs.failureMessage);
+        }
+    }
+}
+// The pre-async-lane path, kept behaviorally identical for old backends: one
+// blocking RPC, raced (not cancelled — the server finishes and persists on
+// its own) against the caller's soft bound.
+async function blockingConnect(client, input, waitMs) {
+    const push = client.connect(input);
+    // The losing push may settle after the caller has moved on; swallow its
+    // late rejection so it cannot surface as an unhandled-rejection crash.
+    void push.catch(() => { });
+    let timer;
+    const timeout = new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new ConnectStillRunningError(input.mcpServerId, waitMs)), waitMs);
+    });
+    try {
+        return await Promise.race([push, timeout]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}
+// Rebuild the failure the blocking connect RPC would have thrown, from the
+// classification the backend persisted on connect_status. Routing the
+// rehydrated ConnectError through wrapError makes the result byte-identical
+// to a live RPC failure (same StigmerError code mapping, same raw message).
+function rehydrateConnectFailure(failureCode, failureMessage) {
+    const code = Code[failureCode];
+    return wrapError(new ConnectError(failureMessage, typeof code === "number" ? code : Code.Unknown));
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=mcpserver-connect.js.map

package/mcpserver-connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpserver-connect.js","sourceRoot":"","sources":["../src/mcpserver-connect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAa7D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAE9C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,WAAW,CAAS;IAE7B,YAAY,WAAmB,EAAE,QAAgB;QAC/C,KAAK,CACH,8BAA8B,WAAW,wCAAwC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM;YAChH,kFAAkF,CACrF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAsBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAA4B,EAC5B,KAAmB,EACnB,OAA+B;IAE/B,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,wBAAwB,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;IAEjG,IAAI,OAAkB,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;QACrC,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,SAAS,CAAC;QACR,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,wBAAwB,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC;QACzC,IAAI,EAAE,EAAE,KAAK,KAAK,YAAY,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC;QACzD,IAAI,EAAE,EAAE,KAAK,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,uBAAuB,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,4CAA4C;AAC5C,KAAK,UAAU,eAAe,CAAC,MAA4B,EAAE,KAAmB,EAAE,MAAc;IAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,wEAAwE;IACxE,uEAAuE;IACvE,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE1B,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,SAAS,uBAAuB,CAAC,WAAmB,EAAE,cAAsB;IAC1E,MAAM,IAAI,GAAI,IAAgC,CAAC,WAAW,CAAC,CAAC;IAC5D,OAAO,SAAS,CAAC,IAAI,YAAY,CAAC,cAAc,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAa,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/sdk",
-  "version": "3.12.3",
+  "version": "3.12.5",
   "description": "Stigmer TypeScript SDK — typed API client for all Stigmer platform resources",
   "license": "Apache-2.0",
   "type": "module",
@@ -45,6 +45,6 @@
   "peerDependencies": {
     "@bufbuild/protobuf": "^2.0.0",
     "@connectrpc/connect-node": "^2.0.0",
-    "@stigmer/protos": "3.12.3"
+    "@stigmer/protos": "3.12.5"
   }
 }

package/provider-standing.d.ts

@@ -0,0 +1,19 @@
+import { type Transport } from "@connectrpc/connect";
+import { type ProviderStandingView } from "@stigmer/protos/ai/stigmer/platform/providerstanding/v1/io_pb";
+/**
+ * Client for platform provider standing (platform operators only).
+ *
+ * Serves the read-only operator view of the platform's LLM provider
+ * account health: the latest canary-probe verdict per provider (status,
+ * HTTP status, latency, bounded error summary, probe time) recorded by
+ * the hourly standing probe. Requires `can_view_provider_standing` on
+ * `platform:stigmer`. Cloud-only — the OSS Go server does not implement
+ * this controller.
+ */
+export declare class ProviderStandingClient {
+    private readonly query;
+    constructor(transport: Transport);
+    /** Retrieve the latest probe verdict for every platform provider. */
+    getStandingView(): Promise<ProviderStandingView>;
+}
+//# sourceMappingURL=provider-standing.d.ts.map

package/provider-standing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-standing.d.ts","sourceRoot":"","sources":["../src/provider-standing.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhF,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,+DAA+D,CAAC;AAGvE;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiD;gBAE3D,SAAS,EAAE,SAAS;IAIhC,qEAAqE;IAC/D,eAAe,IAAI,OAAO,CAAC,oBAAoB,CAAC;CASvD"}

package/provider-standing.js

@@ -0,0 +1,31 @@
+import { createClient } from "@connectrpc/connect";
+import { create } from "@bufbuild/protobuf";
+import { ProviderStandingQueryController } from "@stigmer/protos/ai/stigmer/platform/providerstanding/v1/query_pb";
+import { GetProviderStandingViewInputSchema, } from "@stigmer/protos/ai/stigmer/platform/providerstanding/v1/io_pb";
+import { wrapError } from "./gen/errors.js";
+/**
+ * Client for platform provider standing (platform operators only).
+ *
+ * Serves the read-only operator view of the platform's LLM provider
+ * account health: the latest canary-probe verdict per provider (status,
+ * HTTP status, latency, bounded error summary, probe time) recorded by
+ * the hourly standing probe. Requires `can_view_provider_standing` on
+ * `platform:stigmer`. Cloud-only — the OSS Go server does not implement
+ * this controller.
+ */
+export class ProviderStandingClient {
+    query;
+    constructor(transport) {
+        this.query = createClient(ProviderStandingQueryController, transport);
+    }
+    /** Retrieve the latest probe verdict for every platform provider. */
+    async getStandingView() {
+        try {
+            return await this.query.getProviderStandingView(create(GetProviderStandingViewInputSchema, {}));
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+}
+//# sourceMappingURL=provider-standing.js.map

package/provider-standing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-standing.js","sourceRoot":"","sources":["../src/provider-standing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA+B,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,EACL,kCAAkC,GAEnC,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAsB;IAChB,KAAK,CAAiD;IAEvE,YAAY,SAAoB;QAC9B,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAC7C,MAAM,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAC/C,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;CACF"}

package/skill.d.ts

@@ -0,0 +1,51 @@
+import type { Transport } from "@connectrpc/connect";
+import type { Skill } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/api_pb";
+import { type PushSkillRequest } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/io_pb";
+import { SkillClient } from "./gen/skill.js";
+/**
+ * Largest artifact pushed inline in the gRPC request (#675). The server's
+ * transport cap is 10MB for the WHOLE message, so the artifact leaves 64KB
+ * of headroom for the request envelope (org, tag, provenance, framing).
+ * Mirrors the Go SDK's maxInlineArtifactBytes.
+ */
+export declare const MAX_INLINE_ARTIFACT_BYTES: number;
+/**
+ * Skill client with transport-aware push routing (stigmer#675 / #701).
+ *
+ * The gRPC transport caps messages at 10MB while skills may be up to 100MB,
+ * so `push` routes by size: small artifacts travel inline in the request
+ * (one round trip, unchanged behavior), larger ones are staged over HTTP
+ * via `createArtifactUploadUrl` — a capability URL, so no auth header —
+ * and pushed by reference. Callers never see the mechanics: `push(req)`
+ * simply works for any valid skill size.
+ *
+ * Every other method is the generated client's, inherited unchanged.
+ */
+export declare class RoutedSkillClient extends SkillClient {
+    private readonly fetchImpl;
+    /**
+     * @param fetchImpl - Custom `fetch` for the staging PUT. Must be the same
+     *   implementation the transport uses where the global one is restricted
+     *   (the Tauri CSP/CORS case the `Stigmer.fetch` property documents).
+     */
+    constructor(transport: Transport, fetchImpl?: typeof globalThis.fetch);
+    /**
+     * Push a skill, routing the artifact by size (see the class comment).
+     *
+     * A request that already carries an `artifactUploadRef` is passed through
+     * untouched — the caller has done its own staging.
+     */
+    push(input: PushSkillRequest): Promise<Skill>;
+    /**
+     * Stage the artifact over HTTP and push by reference:
+     * createArtifactUploadUrl → PUT bytes → push(artifactUploadRef).
+     */
+    private pushViaUploadUrl;
+    /**
+     * PUT the artifact ZIP to the staging URL. The URL is the credential
+     * (capability semantics — a pre-signed R2 URL on cloud, the server's own
+     * transfer lane on OSS), so no auth header is attached.
+     */
+    private putArtifact;
+}
+//# sourceMappingURL=skill.d.ts.map

package/skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.d.ts","sourceRoot":"","sources":["../src/skill.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAChF,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,QAA+B,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsC;IAEhE;;;;OAIG;gBACS,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK;IAKrE;;;;;OAKG;IACY,IAAI,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC;IAO5D;;;OAGG;YACW,gBAAgB;IAqC9B;;;;OAIG;YACW,WAAW;CAoB1B"}

package/skill.js

@@ -0,0 +1,102 @@
+import { create } from "@bufbuild/protobuf";
+import { Code } from "@connectrpc/connect";
+import { CreateSkillArtifactUploadUrlRequestSchema, PushSkillRequestSchema, } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/io_pb";
+import { isUnimplemented, StigmerError } from "./gen/errors.js";
+import { SkillClient } from "./gen/skill.js";
+/**
+ * Largest artifact pushed inline in the gRPC request (#675). The server's
+ * transport cap is 10MB for the WHOLE message, so the artifact leaves 64KB
+ * of headroom for the request envelope (org, tag, provenance, framing).
+ * Mirrors the Go SDK's maxInlineArtifactBytes.
+ */
+export const MAX_INLINE_ARTIFACT_BYTES = 10 * 1024 * 1024 - 64 * 1024;
+/**
+ * Skill client with transport-aware push routing (stigmer#675 / #701).
+ *
+ * The gRPC transport caps messages at 10MB while skills may be up to 100MB,
+ * so `push` routes by size: small artifacts travel inline in the request
+ * (one round trip, unchanged behavior), larger ones are staged over HTTP
+ * via `createArtifactUploadUrl` — a capability URL, so no auth header —
+ * and pushed by reference. Callers never see the mechanics: `push(req)`
+ * simply works for any valid skill size.
+ *
+ * Every other method is the generated client's, inherited unchanged.
+ */
+export class RoutedSkillClient extends SkillClient {
+    fetchImpl;
+    /**
+     * @param fetchImpl - Custom `fetch` for the staging PUT. Must be the same
+     *   implementation the transport uses where the global one is restricted
+     *   (the Tauri CSP/CORS case the `Stigmer.fetch` property documents).
+     */
+    constructor(transport, fetchImpl) {
+        super(transport);
+        this.fetchImpl = fetchImpl;
+    }
+    /**
+     * Push a skill, routing the artifact by size (see the class comment).
+     *
+     * A request that already carries an `artifactUploadRef` is passed through
+     * untouched — the caller has done its own staging.
+     */
+    async push(input) {
+        if (input.artifactUploadRef !== "" || input.artifact.length <= MAX_INLINE_ARTIFACT_BYTES) {
+            return super.push(input);
+        }
+        return this.pushViaUploadUrl(input);
+    }
+    /**
+     * Stage the artifact over HTTP and push by reference:
+     * createArtifactUploadUrl → PUT bytes → push(artifactUploadRef).
+     */
+    async pushViaUploadUrl(input) {
+        let minted;
+        try {
+            minted = await super.createArtifactUploadUrl(create(CreateSkillArtifactUploadUrlRequestSchema, {
+                org: input.org,
+                sizeBytes: BigInt(input.artifact.length),
+            }));
+        }
+        catch (err) {
+            if (isUnimplemented(err)) {
+                // Pre-transfer-lane server: without staging, an artifact this size
+                // physically cannot travel. Say so instead of surfacing the raw
+                // transport error (the failure mode #675 reported).
+                throw new StigmerError("unknown", `skill artifact is ${input.artifact.length} bytes, above the ~10MB gRPC message cap, ` +
+                    "and this server does not support the HTTP artifact transfer lane — " +
+                    "upgrade stigmer-server to push skills of this size", Code.Unimplemented, { cause: err });
+            }
+            throw err;
+        }
+        await this.putArtifact(minted.url, input.artifact);
+        // Same request, artifact traveling by reference instead of by value.
+        const byRef = create(PushSkillRequestSchema, {
+            ...input,
+            artifact: new Uint8Array(0),
+            artifactUploadRef: minted.artifactUploadRef,
+        });
+        return super.push(byRef);
+    }
+    /**
+     * PUT the artifact ZIP to the staging URL. The URL is the credential
+     * (capability semantics — a pre-signed R2 URL on cloud, the server's own
+     * transfer lane on OSS), so no auth header is attached.
+     */
+    async putArtifact(url, artifact) {
+        const doFetch = this.fetchImpl ?? globalThis.fetch;
+        const resp = await doFetch(url, {
+            method: "PUT",
+            // Both DOM and undici accept an ArrayBufferView body at runtime; the
+            // cast bridges TS 5.7's ArrayBufferLike generic, which BodyInit's
+            // typing predates. A Blob/Buffer wrapper would copy up to 100MB for
+            // nothing, and Buffer is Node-only while this client is isomorphic.
+            body: artifact,
+            headers: { "content-type": "application/zip" },
+        });
+        if (!resp.ok) {
+            const detail = (await resp.text().catch(() => "")).slice(0, 512).trim();
+            throw new StigmerError("unknown", `skill artifact upload rejected with HTTP ${resp.status}${detail === "" ? "" : `: ${detail}`}`, Code.Unknown);
+        }
+    }
+}
+//# sourceMappingURL=skill.js.map

package/skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../src/skill.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAG3C,OAAO,EACL,yCAAyC,EACzC,sBAAsB,GAEvB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,iBAAkB,SAAQ,WAAW;IAC/B,SAAS,CAAsC;IAEhE;;;;OAIG;IACH,YAAY,SAAoB,EAAE,SAAmC;QACnE,KAAK,CAAC,SAAS,CAAC,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACM,KAAK,CAAC,IAAI,CAAC,KAAuB;QACzC,IAAI,KAAK,CAAC,iBAAiB,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,yBAAyB,EAAE,CAAC;YACzF,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,gBAAgB,CAAC,KAAuB;QACpD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,uBAAuB,CAC1C,MAAM,CAAC,yCAAyC,EAAE;gBAChD,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;aACzC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,mEAAmE;gBACnE,gEAAgE;gBAChE,oDAAoD;gBACpD,MAAM,IAAI,YAAY,CACpB,SAAS,EACT,qBAAqB,KAAK,CAAC,QAAQ,CAAC,MAAM,4CAA4C;oBACpF,qEAAqE;oBACrE,oDAAoD,EACtD,IAAI,CAAC,aAAa,EAClB,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEnD,qEAAqE;QACrE,MAAM,KAAK,GAAG,MAAM,CAAC,sBAAsB,EAAE;YAC3C,GAAG,KAAK;YACR,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;YAC3B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,QAAoB;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,KAAK;YACb,qEAAqE;YACrE,kEAAkE;YAClE,oEAAoE;YACpE,oEAAoE;YACpE,IAAI,EAAE,QAA0C;YAChD,OAAO,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,MAAM,IAAI,YAAY,CACpB,SAAS,EACT,4CAA4C,IAAI,CAAC,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,EAAE,EAC9F,IAAI,CAAC,OAAO,CACb,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/src/__tests__/billing.test.ts

@@ -12,6 +12,7 @@ import { BillingQueryController } from "@stigmer/protos/ai/stigmer/billing/v1/qu
 import {
   CreditLedgerResponseSchema,
   type AdjustCreditsInput,
+  type GrantCreditsInput,
   type GetCreditLedgerInput,
 } from "@stigmer/protos/ai/stigmer/billing/v1/io_pb";
 import { CreditLedgerEntrySchema } from "@stigmer/protos/ai/stigmer/billing/v1/credit_pb";
@@ -20,6 +21,7 @@ import { BillingClient } from "../billing.js";
 
 interface Captured {
   adjustCredits?: AdjustCreditsInput;
+  grantCredits?: GrantCreditsInput;
   getCreditLedger?: GetCreditLedgerInput;
 }
 
@@ -30,6 +32,10 @@ function fakeTransport(captured: Captured): Transport {
         captured.adjustCredits = req;
         return create(CreditLedgerEntrySchema, { amountMicros: req.amountMicros });
       },
+      grantCredits: (req) => {
+        captured.grantCredits = req;
+        return create(CreditLedgerEntrySchema, { amountMicros: req.amountMicros });
+      },
     });
     service(BillingQueryController, {
       getCreditLedger: (req) => {
@@ -60,6 +66,44 @@ describe("BillingClient.adjustCredits", () => {
   });
 });
 
+describe("BillingClient.grantCredits", () => {
+  it("maps params including the expiry onto GrantCreditsInput", async () => {
+    const captured: Captured = {};
+    const client = new BillingClient(fakeTransport(captured));
+
+    const expiresAt = new Date("2026-08-31T23:59:59Z");
+    const entry = await client.grantCredits({
+      orgId: "acme",
+      amountMicros: 5_000_000n,
+      expiresAt,
+      reason: "monthly free allowance 2026-08",
+      idempotencyKey: "allowance-acme-2026-08",
+    });
+
+    expect(entry.amountMicros).toBe(5_000_000n);
+    const req = captured.grantCredits;
+    expect(req?.orgId).toBe("acme");
+    expect(req?.amountMicros).toBe(5_000_000n);
+    expect(req?.expiresAt && timestampDate(req.expiresAt)).toEqual(expiresAt);
+    expect(req?.reason).toBe("monthly free allowance 2026-08");
+    expect(req?.idempotencyKey).toBe("allowance-acme-2026-08");
+  });
+
+  it("omits the expiry for a never-expiring grant", async () => {
+    const captured: Captured = {};
+    const client = new BillingClient(fakeTransport(captured));
+
+    await client.grantCredits({
+      orgId: "acme",
+      amountMicros: 1_000_000n,
+      reason: "welcome credit",
+      idempotencyKey: "welcome-acme",
+    });
+
+    expect(captured.grantCredits?.expiresAt).toBeUndefined();
+  });
+});
+
 describe("BillingClient.getCreditLedger", () => {
   it("maps all filters including the time range", async () => {
     const captured: Captured = {};