@stigmer/sdk 3.12.4 → 3.12.5

package/src/__tests__/mcpserver-connect.test.ts

@@ -0,0 +1,181 @@
+// Pins the shared async-connect protocol (stigmer/stigmer#425): start + poll,
+// terminal-failure rehydration, the UNIMPLEMENTED blocking fallback, and the
+// still-running bound. Every SDK surface (CLI, React hooks, host apps) rides
+// this one implementation, so its contract is pinned here rather than
+// re-tested per consumer.
+
+import { describe, expect, it } from "vitest";
+import { create } from "@bufbuild/protobuf";
+import { Code, ConnectError } from "@connectrpc/connect";
+import { McpServerSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import type { McpServer } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import { ConnectInputSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/io_pb";
+import { ConnectPhase } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/status_pb";
+import { StigmerError, wrapError } from "../gen/errors.js";
+import {
+  connectAndWait,
+  ConnectStillRunningError,
+  type McpServerConnectLane,
+} from "../mcpserver-connect.js";
+
+const INPUT = create(ConnectInputSchema, { mcpServerId: "mcp-1", org: "test-org" });
+
+function server(overrides?: {
+  phase?: ConnectPhase;
+  failureCode?: string;
+  failureMessage?: string;
+  warning?: string;
+  toolName?: string;
+}): McpServer {
+  return create(McpServerSchema, {
+    metadata: { id: "mcp-1", name: "Test Server" },
+    status: {
+      ...(overrides?.toolName !== undefined
+        ? { discoveredCapabilities: { tools: [{ name: overrides.toolName }] } }
+        : {}),
+      connectStatus: {
+        phase: overrides?.phase ?? ConnectPhase.connecting,
+        workflowId: "stigmer/mcp-server/connect/mcp-1",
+        failureCode: overrides?.failureCode ?? "",
+        failureMessage: overrides?.failureMessage ?? "",
+        warning: overrides?.warning ?? "",
+      },
+    },
+  });
+}
+
+function unimplemented(): StigmerError {
+  return wrapError(new ConnectError("startConnect is not implemented", Code.Unimplemented));
+}
+
+const NEVER = () => new Promise<McpServer>(() => {});
+
+describe("connectAndWait", () => {
+  it("resolves with the settled resource once connect_status reports success", async () => {
+    const polled = [
+      server({ phase: ConnectPhase.connecting }),
+      server({ phase: ConnectPhase.succeeded, toolName: "search_code" }),
+    ];
+    const lane: McpServerConnectLane = {
+      startConnect: async () => server(),
+      connect: NEVER,
+      get: async () => polled.shift() ?? server({ phase: ConnectPhase.succeeded }),
+    };
+
+    const settled = await connectAndWait(lane, INPUT, { pollIntervalMs: 1 });
+    expect(settled.status?.connectStatus?.phase).toBe(ConnectPhase.succeeded);
+    expect(settled.status?.discoveredCapabilities?.tools[0]?.name).toBe("search_code");
+  });
+
+  it("surfaces the CONNECTING snapshot (dead-runner warning) via onStarted", async () => {
+    const lane: McpServerConnectLane = {
+      startConnect: async () => server({ warning: "no runner appears to be polling the task queue" }),
+      connect: NEVER,
+      get: async () => server({ phase: ConnectPhase.succeeded }),
+    };
+
+    let warning = "";
+    await connectAndWait(lane, INPUT, {
+      pollIntervalMs: 1,
+      onStarted: (started) => {
+        warning = started.status?.connectStatus?.warning ?? "";
+      },
+    });
+    expect(warning).toContain("no runner");
+  });
+
+  it("rehydrates a failed operation into the classification the blocking RPC would have thrown", async () => {
+    const lane: McpServerConnectLane = {
+      startConnect: async () => server(),
+      connect: NEVER,
+      get: async () =>
+        server({
+          phase: ConnectPhase.failed,
+          failureCode: "FailedPrecondition",
+          failureMessage: "connect failed for MCP server 'Test Server': missing credentials",
+        }),
+    };
+
+    const err = await connectAndWait(lane, INPUT, { pollIntervalMs: 1 }).catch((e: unknown) => e);
+    expect(err).toBeInstanceOf(StigmerError);
+    const stigmerErr = err as StigmerError;
+    // Byte-parity with the blocking lane: same code mapping, same raw message.
+    expect(stigmerErr.code).toBe("failed-precondition");
+    expect(stigmerErr.message).toBe("connect failed for MCP server 'Test Server': missing credentials");
+  });
+
+  it("maps an unknown failure_code to the unknown classification instead of crashing", async () => {
+    const lane: McpServerConnectLane = {
+      startConnect: async () => server(),
+      connect: NEVER,
+      get: async () =>
+        server({
+          phase: ConnectPhase.failed,
+          failureCode: "SomeFutureCode",
+          failureMessage: "boom",
+        }),
+    };
+
+    const err = await connectAndWait(lane, INPUT, { pollIntervalMs: 1 }).catch((e: unknown) => e);
+    expect((err as StigmerError).code).toBe("unknown");
+    expect((err as StigmerError).message).toBe("boom");
+  });
+
+  it("falls back to the blocking connect when the backend answers UNIMPLEMENTED", async () => {
+    let blockingCalled = false;
+    const lane: McpServerConnectLane = {
+      startConnect: async () => {
+        throw unimplemented();
+      },
+      connect: async () => {
+        blockingCalled = true;
+        return server({ phase: ConnectPhase.succeeded, toolName: "search_code" });
+      },
+      get: NEVER,
+    };
+
+    const settled = await connectAndWait(lane, INPUT);
+    expect(blockingCalled).toBe(true);
+    expect(settled.status?.discoveredCapabilities?.tools[0]?.name).toBe("search_code");
+  });
+
+  it("propagates non-UNIMPLEMENTED start failures untouched", async () => {
+    const startFailure = wrapError(new ConnectError("no such server", Code.NotFound));
+    const lane: McpServerConnectLane = {
+      startConnect: async () => {
+        throw startFailure;
+      },
+      connect: NEVER,
+      get: NEVER,
+    };
+
+    await expect(connectAndWait(lane, INPUT)).rejects.toBe(startFailure);
+  });
+
+  it("throws ConnectStillRunningError when the deadline elapses while CONNECTING", async () => {
+    const lane: McpServerConnectLane = {
+      startConnect: async () => server(),
+      connect: NEVER,
+      get: async () => server({ phase: ConnectPhase.connecting }),
+    };
+
+    const err = await connectAndWait(lane, INPUT, { pollIntervalMs: 1, deadlineMs: 20 }).catch(
+      (e: unknown) => e,
+    );
+    expect(err).toBeInstanceOf(ConnectStillRunningError);
+    expect((err as ConnectStillRunningError).mcpServerId).toBe("mcp-1");
+  });
+
+  it("bounds the blocking fallback with the same still-running semantics (soft, non-cancelling)", async () => {
+    const lane: McpServerConnectLane = {
+      startConnect: async () => {
+        throw unimplemented();
+      },
+      connect: NEVER,
+      get: NEVER,
+    };
+
+    const err = await connectAndWait(lane, INPUT, { deadlineMs: 20 }).catch((e: unknown) => e);
+    expect(err).toBeInstanceOf(ConnectStillRunningError);
+  });
+});

package/src/__tests__/update-input.test.ts

@@ -0,0 +1,219 @@
+import { describe, it, expect } from "vitest";
+import { create, toJson } from "@bufbuild/protobuf";
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import {
+  OrganizationSchema,
+  type Organization,
+} from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/api_pb";
+import { OrganizationSpecSchema } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/spec_pb";
+import { ManagementMode } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/enum_pb";
+import {
+  IdentityAccountSchema,
+  type IdentityAccount,
+} from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/api_pb";
+import { IdentityAccountSpecSchema } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/spec_pb";
+import { IdentityAccountProvisioningMode } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/enum_pb";
+import { buildOrganizationProto } from "../gen/organization";
+import { buildIdentityAccountProto } from "../gen/identityaccount";
+import {
+  toOrganizationUpdateInput,
+  toIdentityAccountUpdateInput,
+} from "../update-input";
+
+/**
+ * Update RPCs are full-spec replacements, so a complete mapper must
+ * round-trip EVERY mutable field of a loaded resource through the generated
+ * builder without loss. These tests pin that contract: fully-populated
+ * resource → mapper → builder → spec (as JSON, defaults omitted) deep-equals
+ * the original. If a mapper drops a field, the wipe-bug class is back.
+ */
+
+function fullOrganization(): Organization {
+  return create(OrganizationSchema, {
+    apiVersion: "tenancy.stigmer.ai/v1",
+    kind: "Organization",
+    metadata: {
+      id: "acme",
+      name: "Acme Corp",
+      slug: "acme",
+      org: "acme",
+      labels: { tier: "gold" },
+      visibility: ApiResourceVisibility.visibility_private,
+    },
+    spec: {
+      description: "We make everything.",
+      logoUrl: "https://acme.example/logo.png",
+      managementMode: ManagementMode.self_managed,
+      identityProviderRef: {
+        org: "acme",
+        slug: "acme-okta",
+        kind: ApiResourceKind.identity_provider,
+      },
+      externalOrgId: "ext-org-1",
+      isPersonal: true,
+      preferences: { standingContext: "We deploy to us-east-1." },
+    },
+  });
+}
+
+function fullIdentityAccount(): IdentityAccount {
+  return create(IdentityAccountSchema, {
+    apiVersion: "iam.stigmer.ai/v1",
+    kind: "IdentityAccount",
+    metadata: {
+      id: "ia-123",
+      name: "Ada Lovelace",
+      slug: "ada-lovelace",
+      org: "acme",
+      labels: { team: "platform" },
+      visibility: ApiResourceVisibility.visibility_private,
+    },
+    spec: {
+      idpId: "auth0|abc123",
+      email: "ada@acme.example",
+      firstName: "Ada",
+      lastName: "Lovelace",
+      pictureUrl: "https://acme.example/ada.png",
+      isMachineAccount: true,
+      provisioningMode: IdentityAccountProvisioningMode.federated,
+      identityProviderRef: { org: "acme", slug: "acme-okta" },
+      preferences: {
+        standingContext: "Keep answers terse.",
+        defaultHarness: "cursor",
+        defaultNativeModel: "claude-sonnet-4.6",
+        defaultCursorModel: "composer-2.5",
+      },
+    },
+  });
+}
+
+describe("toOrganizationUpdateInput", () => {
+  it("round-trips a fully-populated organization spec through the builder", () => {
+    const org = fullOrganization();
+
+    const built = buildOrganizationProto(toOrganizationUpdateInput(org));
+
+    expect(toJson(OrganizationSpecSchema, built.spec!)).toEqual(
+      toJson(OrganizationSpecSchema, org.spec!),
+    );
+    expect(built.metadata?.name).toBe("Acme Corp");
+    expect(built.metadata?.slug).toBe("acme");
+    expect(built.metadata?.org).toBe("acme");
+    expect(built.metadata?.labels).toEqual({ tier: "gold" });
+    expect(built.metadata?.visibility).toBe(
+      ApiResourceVisibility.visibility_private,
+    );
+  });
+
+  it("preserves preferences when a caller overrides only profile fields (the wipe-bug class)", () => {
+    const org = fullOrganization();
+
+    const built = buildOrganizationProto({
+      ...toOrganizationUpdateInput(org),
+      description: "New description",
+    });
+
+    expect(built.spec?.preferences?.standingContext).toBe(
+      "We deploy to us-east-1.",
+    );
+    expect(built.spec?.description).toBe("New description");
+    expect(built.spec?.logoUrl).toBe("https://acme.example/logo.png");
+  });
+
+  it("maps an empty spec without inventing values", () => {
+    const org = create(OrganizationSchema, {
+      metadata: { name: "Bare", slug: "bare", org: "bare" },
+      spec: {},
+    });
+
+    const built = buildOrganizationProto(toOrganizationUpdateInput(org));
+
+    expect(toJson(OrganizationSpecSchema, built.spec!)).toEqual({});
+  });
+
+  it("falls back to the slug when metadata.org is empty", () => {
+    const org = create(OrganizationSchema, {
+      metadata: { name: "Bare", slug: "bare" },
+    });
+
+    expect(toOrganizationUpdateInput(org).org).toBe("bare");
+  });
+});
+
+describe("toIdentityAccountUpdateInput", () => {
+  it("round-trips a fully-populated identity account spec through the builder", () => {
+    const account = fullIdentityAccount();
+
+    const built = buildIdentityAccountProto(
+      toIdentityAccountUpdateInput(account),
+    );
+
+    expect(toJson(IdentityAccountSpecSchema, built.spec!)).toEqual(
+      toJson(IdentityAccountSpecSchema, account.spec!),
+    );
+    expect(built.metadata?.name).toBe("Ada Lovelace");
+    expect(built.metadata?.labels).toEqual({ team: "platform" });
+  });
+
+  it("carries org and slug — the update pipeline's fallback address", () => {
+    const input = toIdentityAccountUpdateInput(fullIdentityAccount());
+
+    expect(input.org).toBe("acme");
+    expect(input.slug).toBe("ada-lovelace");
+  });
+
+  it("preserves the rest of the spec when a caller overrides only preferences", () => {
+    const account = fullIdentityAccount();
+    const mapped = toIdentityAccountUpdateInput(account);
+
+    const built = buildIdentityAccountProto({
+      ...mapped,
+      preferences: { ...mapped.preferences, standingContext: "Prefer bullet points." },
+    });
+
+    expect(built.spec?.preferences?.standingContext).toBe(
+      "Prefer bullet points.",
+    );
+    expect(built.spec?.email).toBe("ada@acme.example");
+    expect(built.spec?.idpId).toBe("auth0|abc123");
+    expect(built.spec?.provisioningMode).toBe(
+      IdentityAccountProvisioningMode.federated,
+    );
+  });
+
+  it("preserves structured defaults when only standing context is edited (nested wipe-bug class)", () => {
+    const account = fullIdentityAccount();
+    const mapped = toIdentityAccountUpdateInput(account);
+
+    // The correct editor pattern for a nested message: spread the mapper's
+    // COMPLETE preferences and override only the edited field. A bare
+    // `preferences: { standingContext }` literal would wipe the structured
+    // defaults — the session-4 wipe bug recurring one level down.
+    const built = buildIdentityAccountProto({
+      ...mapped,
+      preferences: { ...mapped.preferences, standingContext: "Terser still." },
+    });
+
+    expect(built.spec?.preferences?.standingContext).toBe("Terser still.");
+    expect(built.spec?.preferences?.defaultHarness).toBe("cursor");
+    expect(built.spec?.preferences?.defaultNativeModel).toBe("claude-sonnet-4.6");
+    expect(built.spec?.preferences?.defaultCursorModel).toBe("composer-2.5");
+  });
+
+  it("clears standing context to wire-absent when the text is emptied", () => {
+    const account = fullIdentityAccount();
+    const mapped = toIdentityAccountUpdateInput(account);
+
+    const built = buildIdentityAccountProto({
+      ...mapped,
+      preferences: { ...mapped.preferences, standingContext: "" },
+    });
+
+    // Proto3 empty string is the field default — wire-identical to absent,
+    // which the server compose steps treat as "no preference declared".
+    expect(built.spec?.preferences?.standingContext ?? "").toBe("");
+    // Clearing one field never disturbs its siblings.
+    expect(built.spec?.preferences?.defaultHarness).toBe("cursor");
+  });
+});

package/src/gen/agentexecution.ts

@@ -11,7 +11,7 @@ import { AgentExecutionCommandController } from "@stigmer/protos/ai/stigmer/agen
 import { InteractionMode, ApprovalMode, ServiceTier } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import { AgentExecutionIdSchema, AgentExecutionUpdateStatusInputSchema, UpdateStatusResponseSchema, SubmitApprovalInputSchema, SubmitFileDecisionInputSchema, CancelAgentExecutionInputSchema, TerminateAgentExecutionInputSchema, RecoverAgentExecutionInputSchema, PauseAgentExecutionInputSchema, ResumeAgentExecutionInputSchema, UploadAttachmentRequestSchema, UploadAttachmentResponseSchema, ListAgentExecutionsRequestSchema, AgentExecutionListSchema, ListAgentExecutionsBySessionRequestSchema, GetArtifactDownloadUrlRequestSchema, GetArtifactDownloadUrlResponseSchema, GetArtifactContentRequestSchema, GetArtifactContentResponseSchema, GetExecutionUsageReportInputSchema, GetExecutionUsageReportOutputSchema, GetSessionUsageReportInputSchema, GetSessionUsageReportOutputSchema, GetAgentUsageReportInputSchema, GetAgentUsageReportOutputSchema, GetOrgUsageReportInputSchema, GetOrgUsageReportOutputSchema, GetAgentExecutionSummaryRequestSchema, AgentExecutionSummarySchema, type AgentExecutionUpdateStatusInput, type UpdateStatusResponse, type SubmitApprovalInput, type SubmitFileDecisionInput, type CancelAgentExecutionInput, type TerminateAgentExecutionInput, type RecoverAgentExecutionInput, type PauseAgentExecutionInput, type ResumeAgentExecutionInput, type UploadAttachmentRequest, type UploadAttachmentResponse, type ListAgentExecutionsRequest, type AgentExecutionList, type ListAgentExecutionsBySessionRequest, type GetArtifactDownloadUrlRequest, type GetArtifactDownloadUrlResponse, type GetArtifactContentRequest, type GetArtifactContentResponse, type GetExecutionUsageReportInput, type GetExecutionUsageReportOutput, type GetSessionUsageReportInput, type GetSessionUsageReportOutput, type GetAgentUsageReportInput, type GetAgentUsageReportOutput, type GetOrgUsageReportInput, type GetOrgUsageReportOutput, type GetAgentExecutionSummaryRequest, type AgentExecutionSummary } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
 import { AgentExecutionQueryController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/query_pb";
-import { AgentExecutionSpecSchema, ContextManagementConfigSchema, ExecutionConfigSchema, AttachmentSchema, ConversationCatchupSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
+import { AgentExecutionSpecSchema, ContextManagementConfigSchema, ExecutionConfigSchema, AttachmentSchema, ConversationCatchupSchema, DeclaredPreferencesSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
 import { ExecutionValueSchema } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/spec_pb";
 import { Harness, CursorMode, ExecutionTarget, GitWriteBackMode } from "@stigmer/protos/ai/stigmer/agentic/session/v1/enum_pb";
 import { SessionSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/spec_pb";
@@ -192,6 +192,7 @@ export interface AgentExecutionInput {
   activityTaskQueue?: string;
   supersedesExecutionId?: string;
   conversationCatchup?: ConversationCatchupInput;
+  declaredPreferences?: DeclaredPreferencesInput;
 }
 
 /** SDK input type for SessionSpec. */
@@ -286,6 +287,12 @@ export interface ConversationCatchupInput {
   windowEnd?: Date | string;
 }
 
+/** SDK input type for DeclaredPreferences. */
+export interface DeclaredPreferencesInput {
+  orgContext?: string;
+  userContext?: string;
+}
+
 function buildGitRepoSourceProto(input: GitRepoSourceInput) {
   return Object.assign(create(GitRepoSourceSchema), stripUndefined({
     url: input.url,
@@ -392,6 +399,13 @@ function buildConversationCatchupProto(input: ConversationCatchupInput) {
   return msg;
 }
 
+function buildDeclaredPreferencesProto(input: DeclaredPreferencesInput) {
+  return Object.assign(create(DeclaredPreferencesSchema), stripUndefined({
+    orgContext: input.orgContext,
+    userContext: input.userContext,
+  }));
+}
+
 export function buildAgentExecutionProto(input: AgentExecutionInput): AgentExecution {
   const sessionSpec = input.sessionSpec ? buildSessionSpecProto(input.sessionSpec) : undefined;
   const executionConfig = input.executionConfig ? buildExecutionConfigProto(input.executionConfig) : undefined;
@@ -402,6 +416,7 @@ export function buildAgentExecutionProto(input: AgentExecutionInput): AgentExecu
   }
   const attachments = input.attachments?.map(buildAttachmentProto);
   const conversationCatchup = input.conversationCatchup ? buildConversationCatchupProto(input.conversationCatchup) : undefined;
+  const declaredPreferences = input.declaredPreferences ? buildDeclaredPreferencesProto(input.declaredPreferences) : undefined;
   return Object.assign(create(AgentExecutionSchema), {
     apiVersion: "agentic.stigmer.ai/v1",
     kind: "AgentExecution",
@@ -427,6 +442,7 @@ export function buildAgentExecutionProto(input: AgentExecutionInput): AgentExecu
       activityTaskQueue: input.activityTaskQueue,
       supersedesExecutionId: input.supersedesExecutionId,
       conversationCatchup,
+      declaredPreferences,
     })),
   }) as AgentExecution;
 }

package/src/gen/client.ts

@@ -90,7 +90,7 @@ export { type AgentInput, type McpServerUsageInput, type ToolApprovalOverrideInp
 export { AgentChannelClient } from "./agentchannel.js";
 export { type AgentChannelInput, type SlackChannelConfigInput, type WhatsAppChannelConfigInput, type RunConfigInput } from "./agentchannel.js";
 export { AgentExecutionClient } from "./agentexecution.js";
-export { type AgentExecutionInput, type SessionSpecInput, type WorkspaceEntryInput, type WorkspaceSourceInput, type GitRepoSourceInput, type LocalPathSourceInput, type ExecutionConfigInput, type ContextManagementConfigInput, type AttachmentInput, type ConversationCatchupInput } from "./agentexecution.js";
+export { type AgentExecutionInput, type SessionSpecInput, type WorkspaceEntryInput, type WorkspaceSourceInput, type GitRepoSourceInput, type LocalPathSourceInput, type ExecutionConfigInput, type ContextManagementConfigInput, type AttachmentInput, type ConversationCatchupInput, type DeclaredPreferencesInput } from "./agentexecution.js";
 export { AgentInstanceClient } from "./agentinstance.js";
 export { type AgentInstanceInput } from "./agentinstance.js";
 export { AgentShareClient } from "./agentshare.js";
@@ -108,7 +108,7 @@ export { type ExecutionContextInput } from "./executioncontext.js";
 export { IamPolicyClient } from "./iampolicy.js";
 export { type IamPolicyInput, type ApiResourceRefInput } from "./iampolicy.js";
 export { IdentityAccountClient } from "./identityaccount.js";
-export { type IdentityAccountInput } from "./identityaccount.js";
+export { type IdentityAccountInput, type IdentityAccountPreferencesInput } from "./identityaccount.js";
 export { IdentityProviderClient } from "./identityprovider.js";
 export { type IdentityProviderInput } from "./identityprovider.js";
 export { InvitationClient } from "./invitation.js";
@@ -118,7 +118,7 @@ export { type McpServerInput, type StdioServerConfigInput, type HttpServerConfig
 export { OAuthAppClient } from "./oauthapp.js";
 export { type OAuthAppInput } from "./oauthapp.js";
 export { OrganizationClient } from "./organization.js";
-export { type OrganizationInput } from "./organization.js";
+export { type OrganizationInput, type OrganizationPreferencesInput } from "./organization.js";
 export { PlatformClientClient } from "./platformclient.js";
 export { type PlatformClientInput } from "./platformclient.js";
 export { ProjectClient } from "./project.js";

package/src/gen/identityaccount.ts

@@ -15,7 +15,7 @@ import { IdentityAccountCommandController } from "@stigmer/protos/ai/stigmer/iam
 import { IdentityAccountProvisioningMode } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/enum_pb";
 import { IdentityAccountIdSchema, CreateFederatedAccountInputSchema, UpdateFederatedAccountInputSchema, DeprovisionFederatedAccountInputSchema, IdentityAccountEmailSchema, IdpIdSchema, ExternalSubLookupSchema, type CreateFederatedAccountInput, type UpdateFederatedAccountInput, type DeprovisionFederatedAccountInput, type IdentityAccountEmail, type ExternalSubLookup } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/io_pb";
 import { IdentityAccountQueryController } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/query_pb";
-import { IdentityAccountSpecSchema } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/spec_pb";
+import { IdentityAccountSpecSchema, IdentityAccountPreferencesSchema } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/spec_pb";
 
 /** Provides operations on identityaccount resources. */
 export class IdentityAccountClient {
@@ -121,10 +121,29 @@ export interface IdentityAccountInput {
   isMachineAccount?: boolean;
   provisioningMode?: IdentityAccountProvisioningMode;
   identityProviderRef?: ResourceRef;
+  preferences?: IdentityAccountPreferencesInput;
+}
+
+/** SDK input type for IdentityAccountPreferences. */
+export interface IdentityAccountPreferencesInput {
+  standingContext?: string;
+  defaultHarness?: string;
+  defaultNativeModel?: string;
+  defaultCursorModel?: string;
+}
+
+function buildIdentityAccountPreferencesProto(input: IdentityAccountPreferencesInput) {
+  return Object.assign(create(IdentityAccountPreferencesSchema), stripUndefined({
+    standingContext: input.standingContext,
+    defaultHarness: input.defaultHarness,
+    defaultNativeModel: input.defaultNativeModel,
+    defaultCursorModel: input.defaultCursorModel,
+  }));
 }
 
 export function buildIdentityAccountProto(input: IdentityAccountInput): IdentityAccount {
   const identityProviderRef = (input.identityProviderRef?.slug || input.identityProviderRef?.org) ? create(ApiResourceReferenceSchema, input.identityProviderRef) : undefined;
+  const preferences = input.preferences ? buildIdentityAccountPreferencesProto(input.preferences) : undefined;
   return Object.assign(create(IdentityAccountSchema), {
     apiVersion: "iam.stigmer.ai/v1",
     kind: "IdentityAccount",
@@ -144,6 +163,7 @@ export function buildIdentityAccountProto(input: IdentityAccountInput): Identity
       isMachineAccount: input.isMachineAccount,
       provisioningMode: input.provisioningMode,
       identityProviderRef,
+      preferences,
     })),
   }) as IdentityAccount;
 }

package/src/gen/mcpserver.ts

@@ -71,6 +71,12 @@ export class McpServerClient {
     } catch (e) { throw wrapError(e); }
   }
 
+  async startConnect(input: ConnectInput): Promise<McpServer> {
+    try {
+      return await this.command.startConnect(input);
+    } catch (e) { throw wrapError(e); }
+  }
+
   async initiateOAuthConnect(input: InitiateOAuthConnectInput): Promise<InitiateOAuthConnectOutput> {
     try {
       return await this.command.initiateOAuthConnect(input);

package/src/gen/oauthapp.ts

@@ -13,7 +13,7 @@ import { OAuthAppSchema, type OAuthApp } from "@stigmer/protos/ai/stigmer/iam/oa
 import { OAuthAppCommandController } from "@stigmer/protos/ai/stigmer/iam/oauthapp/v1/command_pb";
 import { ListOAuthAppsByOrgInputSchema, OAuthAppsSchema, type ListOAuthAppsByOrgInput, type OAuthApps } from "@stigmer/protos/ai/stigmer/iam/oauthapp/v1/io_pb";
 import { OAuthAppQueryController } from "@stigmer/protos/ai/stigmer/iam/oauthapp/v1/query_pb";
-import { OAuthAppSpecSchema, VendorApprovalStatus } from "@stigmer/protos/ai/stigmer/iam/oauthapp/v1/spec_pb";
+import { OAuthAppSpecSchema, VendorApprovalStatus, TokenEndpointAuthMethod } from "@stigmer/protos/ai/stigmer/iam/oauthapp/v1/spec_pb";
 
 /** Provides operations on oauthapp resources. */
 export class OAuthAppClient {
@@ -89,6 +89,7 @@ export interface OAuthAppInput {
   scopeParameterName?: string;
   vendorApprovalStatus?: VendorApprovalStatus;
   vendorApprovalDocsUrl?: string;
+  tokenEndpointAuthMethod?: TokenEndpointAuthMethod;
 }
 
 export function buildOAuthAppProto(input: OAuthAppInput): OAuthApp {
@@ -113,6 +114,7 @@ export function buildOAuthAppProto(input: OAuthAppInput): OAuthApp {
       scopeParameterName: input.scopeParameterName,
       vendorApprovalStatus: input.vendorApprovalStatus,
       vendorApprovalDocsUrl: input.vendorApprovalDocsUrl,
+      tokenEndpointAuthMethod: input.tokenEndpointAuthMethod,
     })),
   }) as OAuthApp;
 }

package/src/gen/organization.ts

@@ -14,7 +14,7 @@ import { OrganizationCommandController } from "@stigmer/protos/ai/stigmer/tenanc
 import { ManagementMode } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/enum_pb";
 import { OrganizationIdSchema, OrganizationListSchema, OrganizationsSchema, OrganizationExternalLookupSchema, type OrganizationList, type Organizations, type OrganizationExternalLookup } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/io_pb";
 import { OrganizationQueryController } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/query_pb";
-import { OrganizationSpecSchema } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/spec_pb";
+import { OrganizationSpecSchema, OrganizationPreferencesSchema } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/spec_pb";
 
 /** Provides operations on organization resources. */
 export class OrganizationClient {
@@ -88,10 +88,23 @@ export interface OrganizationInput {
   identityProviderRef?: ResourceRef;
   externalOrgId?: string;
   isPersonal?: boolean;
+  preferences?: OrganizationPreferencesInput;
+}
+
+/** SDK input type for OrganizationPreferences. */
+export interface OrganizationPreferencesInput {
+  standingContext?: string;
+}
+
+function buildOrganizationPreferencesProto(input: OrganizationPreferencesInput) {
+  return Object.assign(create(OrganizationPreferencesSchema), stripUndefined({
+    standingContext: input.standingContext,
+  }));
 }
 
 export function buildOrganizationProto(input: OrganizationInput): Organization {
   const identityProviderRef = (input.identityProviderRef?.slug || input.identityProviderRef?.org) ? create(ApiResourceReferenceSchema, input.identityProviderRef) : undefined;
+  const preferences = input.preferences ? buildOrganizationPreferencesProto(input.preferences) : undefined;
   return Object.assign(create(OrganizationSchema), {
     apiVersion: "tenancy.stigmer.ai/v1",
     kind: "Organization",
@@ -109,6 +122,7 @@ export function buildOrganizationProto(input: OrganizationInput): Organization {
       identityProviderRef,
       externalOrgId: input.externalOrgId,
       isPersonal: input.isPersonal,
+      preferences,
     })),
   }) as Organization;
 }

package/src/gen/platformclient.ts

@@ -104,10 +104,12 @@ export interface PlatformClientInput {
   autoGrantOnOrg?: boolean;
   autoGrantRole?: IamRole;
   allowedOrigins?: string[];
+  environmentRefs?: ResourceRef[];
 }
 
 export function buildPlatformClientProto(input: PlatformClientInput): PlatformClient {
   const expiresAt = input.expiresAt !== undefined ? toTimestamp(input.expiresAt) : undefined;
+  const environmentRefs = input.environmentRefs?.map(r => create(ApiResourceReferenceSchema, { ...r, kind: 53 }));
   return Object.assign(create(PlatformClientSchema), {
     apiVersion: "iam.stigmer.ai/v1",
     kind: "PlatformClient",
@@ -128,6 +130,7 @@ export function buildPlatformClientProto(input: PlatformClientInput): PlatformCl
       autoGrantOnOrg: input.autoGrantOnOrg,
       autoGrantRole: input.autoGrantRole,
       allowedOrigins: input.allowedOrigins,
+      environmentRefs,
     })),
   }) as PlatformClient;
 }

package/src/index.ts

@@ -61,6 +61,12 @@ export {
   isResourceAvailable,
 } from "./resource-availability.js";
 
+// Complete update-input mappers (full-spec-replace round-trip safety)
+export {
+  toOrganizationUpdateInput,
+  toIdentityAccountUpdateInput,
+} from "./update-input.js";
+
 // Authorization config and IAM role utilities
 export {
   getGrantableRoles,
@@ -235,6 +241,14 @@ export {
   type HttpServerConfigInput,
   type ToolApprovalPolicyInput,
 } from "./gen/mcpserver.js";
+export {
+  connectAndWait,
+  ConnectStillRunningError,
+  CONNECT_POLL_INTERVAL_MS,
+  CONNECT_SETTLE_BOUND_MS,
+  type ConnectAndWaitOptions,
+  type McpServerConnectLane,
+} from "./mcpserver-connect.js";
 export {
   OrganizationClient,
   type OrganizationInput,