@stigmer/sdk 3.2.2 → 3.3.0

package/src/execution/approval-provenance.ts

@@ -37,6 +37,8 @@ export function describeApprovalPolicySource(
       return "auto-approved by a run-wide bypass";
     case ApprovalPolicySource.APPROVAL_LEASE:
       return "auto-approved by a run lease";
+    case ApprovalPolicySource.UNATTENDED_SKIP:
+      return "skipped: approval not available on this surface";
     case ApprovalPolicySource.UNSPECIFIED:
     default:
       return null;
@@ -70,6 +72,11 @@ export function isInformativePolicySource(
     case ApprovalPolicySource.ANNOTATION_DESTRUCTIVE_TIGHTEN:
     case ApprovalPolicySource.AUTO_APPROVE_ALL:
     case ApprovalPolicySource.APPROVAL_LEASE:
+    // An unattended skip is a platform RESOLUTION, not an everyday gating
+    // default: an org admin reviewing a channel conversation (DD-012
+    // observer) needs to see why the tool did not run — and that no human
+    // declined it.
+    case ApprovalPolicySource.UNATTENDED_SKIP:
       return true;
     case ApprovalPolicySource.CLASSIFIER_DEFAULT:
     case ApprovalPolicySource.BUILTIN_CATEGORY:

package/src/gen/agent.ts

@@ -9,7 +9,7 @@ import { AgentSchema, type Agent } from "@stigmer/protos/ai/stigmer/agentic/agen
 import { AgentCommandController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/command_pb";
 import { AgentIdSchema, GetDefaultAgentRequestSchema, type GetDefaultAgentRequest } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/io_pb";
 import { AgentQueryController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/query_pb";
-import { AgentSpecSchema, ToolApprovalOverrideSchema, McpServerUsageSchema, McpAccessSchema, SubAgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
+import { AgentSpecSchema, ToolApprovalOverrideSchema, McpServerUsageSchema, McpAccessSchema, SubAgentSchema, DatastoreUsageSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
 import { EnvVarDeclarationSchema } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/spec_pb";
 import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
 import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
@@ -112,6 +112,7 @@ export interface AgentInput {
   skillRefs?: ResourceRef[];
   subAgents?: SubAgentInput[];
   env?: Record<string, EnvVarDeclarationInput>;
+  datastoreUsages?: DatastoreUsageInput[];
 }
 
 /** SDK input type for McpServerUsage. */
@@ -151,6 +152,11 @@ export interface EnvVarDeclarationInput {
   optional?: boolean;
 }
 
+/** SDK input type for DatastoreUsage. */
+export interface DatastoreUsageInput {
+  datastoreRef: ResourceRef;
+}
+
 function buildToolApprovalOverrideProto(input: ToolApprovalOverrideInput) {
   return Object.assign(create(ToolApprovalOverrideSchema), stripUndefined({
     toolName: input.toolName,
@@ -193,6 +199,12 @@ function buildEnvVarDeclarationProto(input: EnvVarDeclarationInput) {
   }));
 }
 
+function buildDatastoreUsageProto(input: DatastoreUsageInput) {
+  const msg = create(DatastoreUsageSchema);
+  if (input.datastoreRef?.slug || input.datastoreRef?.org) msg.datastoreRef = create(ApiResourceReferenceSchema, { ...input.datastoreRef, kind: 49 });
+  return msg;
+}
+
 export function buildAgentProto(input: AgentInput): Agent {
   const mcpServerUsages = input.mcpServerUsages?.map(buildMcpServerUsageProto);
   const skillRefs = input.skillRefs?.map(r => create(ApiResourceReferenceSchema, { ...r, kind: 43 }));
@@ -201,6 +213,7 @@ export function buildAgentProto(input: AgentInput): Agent {
   if (input.env) {
     env = Object.fromEntries(Object.entries(input.env).map(([k, v]) => [k, buildEnvVarDeclarationProto(v)]));
   }
+  const datastoreUsages = input.datastoreUsages?.map(buildDatastoreUsageProto);
   return Object.assign(create(AgentSchema), {
     apiVersion: "agentic.stigmer.ai/v1",
     kind: "Agent",
@@ -219,6 +232,7 @@ export function buildAgentProto(input: AgentInput): Agent {
       skillRefs,
       subAgents,
       env,
+      datastoreUsages,
     })),
   }) as Agent;
 }

package/src/gen/agentexecution.ts

@@ -8,7 +8,7 @@ import { createClient, type Client, type Transport } from "@connectrpc/connect";
 import { ToolApprovalOverrideSchema, McpServerUsageSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
 import { AgentExecutionSchema, type AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import { AgentExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/command_pb";
-import { InteractionMode } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { InteractionMode, ApprovalMode } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import { AgentExecutionIdSchema, AgentExecutionUpdateStatusInputSchema, UpdateStatusResponseSchema, SubmitApprovalInputSchema, SubmitFileDecisionInputSchema, CancelAgentExecutionInputSchema, TerminateAgentExecutionInputSchema, RecoverAgentExecutionInputSchema, PauseAgentExecutionInputSchema, ResumeAgentExecutionInputSchema, UploadAttachmentRequestSchema, UploadAttachmentResponseSchema, ListAgentExecutionsRequestSchema, AgentExecutionListSchema, ListAgentExecutionsBySessionRequestSchema, GetArtifactDownloadUrlRequestSchema, GetArtifactDownloadUrlResponseSchema, GetArtifactContentRequestSchema, GetArtifactContentResponseSchema, GetExecutionUsageReportInputSchema, GetExecutionUsageReportOutputSchema, GetSessionUsageReportInputSchema, GetSessionUsageReportOutputSchema, GetAgentUsageReportInputSchema, GetAgentUsageReportOutputSchema, GetOrgUsageReportInputSchema, GetOrgUsageReportOutputSchema, GetAgentExecutionSummaryRequestSchema, AgentExecutionSummarySchema, type AgentExecutionUpdateStatusInput, type UpdateStatusResponse, type SubmitApprovalInput, type SubmitFileDecisionInput, type CancelAgentExecutionInput, type TerminateAgentExecutionInput, type RecoverAgentExecutionInput, type PauseAgentExecutionInput, type ResumeAgentExecutionInput, type UploadAttachmentRequest, type UploadAttachmentResponse, type ListAgentExecutionsRequest, type AgentExecutionList, type ListAgentExecutionsBySessionRequest, type GetArtifactDownloadUrlRequest, type GetArtifactDownloadUrlResponse, type GetArtifactContentRequest, type GetArtifactContentResponse, type GetExecutionUsageReportInput, type GetExecutionUsageReportOutput, type GetSessionUsageReportInput, type GetSessionUsageReportOutput, type GetAgentUsageReportInput, type GetAgentUsageReportOutput, type GetOrgUsageReportInput, type GetOrgUsageReportOutput, type GetAgentExecutionSummaryRequest, type AgentExecutionSummary } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
 import { AgentExecutionQueryController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/query_pb";
 import { AgentExecutionSpecSchema, ContextManagementConfigSchema, ExecutionConfigSchema, AttachmentSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
@@ -198,6 +198,7 @@ export interface SessionSpecInput {
   agentInstanceId?: string;
   subject?: string;
   harnessStateId?: string;
+  harnessStateIdHistory?: string[];
   metadata?: Record<string, string>;
   workspaceEntries?: WorkspaceEntryInput[];
   mcpServerUsages?: McpServerUsageInput[];
@@ -257,6 +258,7 @@ export interface ExecutionConfigInput {
   interactionMode?: InteractionMode;
   structuredOutputSchema?: JsonObject;
   buildFromPlan?: boolean;
+  approvalMode?: ApprovalMode;
 }
 
 /** SDK input type for ContextManagementConfig. */
@@ -330,6 +332,7 @@ function buildSessionSpecProto(input: SessionSpecInput) {
   if (input.agentInstanceId !== undefined) msg.agentInstanceId = input.agentInstanceId;
   if (input.subject !== undefined) msg.subject = input.subject;
   if (input.harnessStateId !== undefined) msg.harnessStateId = input.harnessStateId;
+  if (input.harnessStateIdHistory) msg.harnessStateIdHistory = input.harnessStateIdHistory;
   if (input.metadata) Object.assign(msg.metadata, input.metadata);
   if (input.workspaceEntries) msg.workspaceEntries = input.workspaceEntries.map(buildWorkspaceEntryProto);
   if (input.mcpServerUsages) msg.mcpServerUsages = input.mcpServerUsages.map(buildMcpServerUsageProto);
@@ -358,6 +361,7 @@ function buildExecutionConfigProto(input: ExecutionConfigInput) {
   if (input.interactionMode !== undefined) msg.interactionMode = input.interactionMode;
   if (input.structuredOutputSchema !== undefined) msg.structuredOutputSchema = input.structuredOutputSchema;
   if (input.buildFromPlan !== undefined) msg.buildFromPlan = input.buildFromPlan;
+  if (input.approvalMode !== undefined) msg.approvalMode = input.approvalMode;
   return msg;
 }
 

package/src/gen/agentinstance.ts

@@ -90,6 +90,7 @@ export interface AgentInstanceInput {
   agentId?: string;
   description?: string;
   environmentRefs?: ResourceRef[];
+  datastorePartition?: string;
 }
 
 export function buildAgentInstanceProto(input: AgentInstanceInput): AgentInstance {
@@ -108,6 +109,7 @@ export function buildAgentInstanceProto(input: AgentInstanceInput): AgentInstanc
       agentId: input.agentId,
       description: input.description,
       environmentRefs,
+      datastorePartition: input.datastorePartition,
     })),
   }) as AgentInstance;
 }

package/src/gen/authorization-config.ts

@@ -26,6 +26,7 @@ export const GRANTABLE_ROLES: ReadonlyMap<ApiResourceKind, readonly IamRole[]> =
   [ApiResourceKind.agent_share, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.agent_channel, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.channel_app, [IamRole.owner, IamRole.viewer]],
+  [ApiResourceKind.datastore, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.workflow, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.workflow_instance, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.workflow_execution, [IamRole.owner, IamRole.viewer]],

package/src/gen/client.ts

@@ -9,6 +9,7 @@ import { AgentShareClient } from "./agentshare.js";
 import { ApiKeyClient } from "./apikey.js";
 import { ArtifactClient } from "./artifact.js";
 import { ChannelAppClient } from "./channelapp.js";
+import { DatastoreClient } from "./datastore.js";
 import { EnvironmentClient } from "./environment.js";
 import { ExecutionContextClient } from "./executioncontext.js";
 import { IamPolicyClient } from "./iampolicy.js";
@@ -36,6 +37,7 @@ export class GeneratedClient {
   readonly apiKey: ApiKeyClient;
   readonly artifact: ArtifactClient;
   readonly channelapp: ChannelAppClient;
+  readonly datastore: DatastoreClient;
   readonly environment: EnvironmentClient;
   readonly executionContext: ExecutionContextClient;
   readonly iamPolicy: IamPolicyClient;
@@ -62,6 +64,7 @@ export class GeneratedClient {
     this.apiKey = new ApiKeyClient(transport);
     this.artifact = new ArtifactClient(transport);
     this.channelapp = new ChannelAppClient(transport);
+    this.datastore = new DatastoreClient(transport);
     this.environment = new EnvironmentClient(transport);
     this.executionContext = new ExecutionContextClient(transport);
     this.iamPolicy = new IamPolicyClient(transport);
@@ -83,7 +86,7 @@ export class GeneratedClient {
 
 // Re-export all resource client types and input types.
 export { AgentClient } from "./agent.js";
-export { type AgentInput, type McpServerUsageInput, type ToolApprovalOverrideInput, type SubAgentInput, type McpAccessInput, type EnvVarDeclarationInput } from "./agent.js";
+export { type AgentInput, type McpServerUsageInput, type ToolApprovalOverrideInput, type SubAgentInput, type McpAccessInput, type EnvVarDeclarationInput, type DatastoreUsageInput } from "./agent.js";
 export { AgentChannelClient } from "./agentchannel.js";
 export { type AgentChannelInput, type SlackChannelConfigInput, type WhatsAppChannelConfigInput } from "./agentchannel.js";
 export { AgentExecutionClient } from "./agentexecution.js";
@@ -98,12 +101,14 @@ export { ArtifactClient } from "./artifact.js";
 export { type ArtifactInput, type ArtifactSourceInput, type RetentionPolicyInput } from "./artifact.js";
 export { ChannelAppClient } from "./channelapp.js";
 export { type ChannelAppInput, type SlackChannelAppConfigInput, type WhatsAppChannelAppConfigInput } from "./channelapp.js";
+export { DatastoreClient } from "./datastore.js";
+export { type DatastoreInput, type DatastoreAuthorizationInput, type DatastoreRoleInput, type DatastoreRoleBindingInput, type DatastoreSubjectInput, type ChannelSenderSubjectInput, type ApiResourceRefInput, type CollectionDeclarationInput, type FieldDeclarationInput, type UniqueConstraintInput, type UniqueWhereInput, type CheckConstraintInput, type ExistsConstraintInput, type DatastoreGrantInput } from "./datastore.js";
 export { EnvironmentClient } from "./environment.js";
 export { type EnvironmentInput } from "./environment.js";
 export { ExecutionContextClient } from "./executioncontext.js";
 export { type ExecutionContextInput } from "./executioncontext.js";
 export { IamPolicyClient } from "./iampolicy.js";
-export { type IamPolicyInput, type ApiResourceRefInput } from "./iampolicy.js";
+export { type IamPolicyInput } from "./iampolicy.js";
 export { IdentityAccountClient } from "./identityaccount.js";
 export { type IdentityAccountInput } from "./identityaccount.js";
 export { IdentityProviderClient } from "./identityprovider.js";

package/src/gen/datastore.ts

@@ -0,0 +1,379 @@
+// Code generated by stigmer-codegen. DO NOT EDIT.
+
+import { wrapError } from "./errors.js";
+import { stripUndefined } from "./proto-utils.js";
+import { type DeleteResourceInput, type ListParams, type ListResult, type ResourceRef } from "./types.js";
+import { create, fromJson, type JsonValue } from "@bufbuild/protobuf";
+import { ValueSchema } from "@bufbuild/protobuf/wkt";
+import { createClient, type Client, type Transport } from "@connectrpc/connect";
+import { DatastoreSchema, type Datastore } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/api_pb";
+import { DatastoreCommandController } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/command_pb";
+import { DatastoreQueryController } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/query_pb";
+import { DatastoreRecordCommandController } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/record_command_pb";
+import { InsertRecordRequestSchema, RecordEnvelopeSchema, UpdateRecordRequestSchema, DeleteRecordRequestSchema, FindRecordsRequestSchema, RecordListSchema, DescribeDatastoreRequestSchema, DatastoreDescriptionSchema, type InsertRecordRequest, type RecordEnvelope, type UpdateRecordRequest, type DeleteRecordRequest, type FindRecordsRequest, type RecordList, type DescribeDatastoreRequest, type DatastoreDescription } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/record_io_pb";
+import { DatastoreRecordQueryController } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/record_query_pb";
+import { DatastoreSpecSchema, FieldType, DatastoreVerb, DatastoreGrantScope, DatastoreRoleSchema, ChannelSenderSubjectSchema, DatastoreSubjectSchema, DatastoreRoleBindingSchema, DatastoreAuthorizationSchema, FieldDeclarationSchema, UniqueWhereSchema, UniqueConstraintSchema, CheckConstraintSchema, ExistsConstraintSchema, DatastoreGrantSchema, CollectionDeclarationSchema } from "@stigmer/protos/ai/stigmer/agentic/datastore/v1/spec_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { ApiResourceIdSchema, ApiResourceReferenceSchema, ApiResourceDeleteInputSchema, type UpdateVisibilityInput } from "@stigmer/protos/ai/stigmer/commons/apiresource/io_pb";
+import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
+import { PageInfoSchema } from "@stigmer/protos/ai/stigmer/commons/rpc/pagination_pb";
+import { ApiResourceRefSchema } from "@stigmer/protos/ai/stigmer/iam/iampolicy/v1/spec_pb";
+import { SearchRequestSchema } from "@stigmer/protos/ai/stigmer/search/v1/io_pb";
+import { SearchService } from "@stigmer/protos/ai/stigmer/search/v1/query_pb";
+
+/** Provides operations on datastore resources. */
+export class DatastoreClient {
+  private readonly command: Client<typeof DatastoreCommandController>;
+  private readonly query: Client<typeof DatastoreQueryController>;
+  private readonly datastoreRecordCommand: Client<typeof DatastoreRecordCommandController>;
+  private readonly datastoreRecordQuery: Client<typeof DatastoreRecordQueryController>;
+  private readonly search: Client<typeof SearchService>;
+
+  constructor(transport: Transport) {
+    this.command = createClient(DatastoreCommandController, transport);
+    this.query = createClient(DatastoreQueryController, transport);
+    this.datastoreRecordCommand = createClient(DatastoreRecordCommandController, transport);
+    this.datastoreRecordQuery = createClient(DatastoreRecordQueryController, transport);
+    this.search = createClient(SearchService, transport);
+  }
+
+  async apply(input: DatastoreInput): Promise<Datastore> {
+    try {
+      return await this.command.apply(buildDatastoreProto(input));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async create(input: DatastoreInput): Promise<Datastore> {
+    try {
+      return await this.command.create(buildDatastoreProto(input));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async update(input: DatastoreInput): Promise<Datastore> {
+    try {
+      return await this.command.update(buildDatastoreProto(input));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async updateVisibility(input: UpdateVisibilityInput): Promise<Datastore> {
+    try {
+      return await this.command.updateVisibility(input);
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async delete(input: DeleteResourceInput): Promise<Datastore> {
+    try {
+      return await this.command.delete(create(ApiResourceDeleteInputSchema, {
+        resourceId: input.resourceId,
+        versionMessage: input.versionMessage,
+        force: input.force,
+      }));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async get(id: string): Promise<Datastore> {
+    try {
+      return await this.query.get(create(ApiResourceIdSchema, { value: id }));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async getByReference(ref: ResourceRef): Promise<Datastore> {
+    try {
+      return await this.query.getByReference(create(ApiResourceReferenceSchema, { ...ref, kind: ApiResourceKind.datastore }));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async insertRecord(input: InsertRecordRequest): Promise<RecordEnvelope> {
+    try {
+      return await this.datastoreRecordCommand.insertRecord(input);
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async updateRecord(input: UpdateRecordRequest): Promise<RecordEnvelope> {
+    try {
+      return await this.datastoreRecordCommand.updateRecord(input);
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async deleteRecord(input: DeleteRecordRequest): Promise<RecordEnvelope> {
+    try {
+      return await this.datastoreRecordCommand.deleteRecord(input);
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async findRecords(input: FindRecordsRequest): Promise<RecordList> {
+    try {
+      return await this.datastoreRecordQuery.findRecords(input);
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async describeDatastore(input: DescribeDatastoreRequest): Promise<DatastoreDescription> {
+    try {
+      return await this.datastoreRecordQuery.describeDatastore(input);
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async list(params: ListParams): Promise<ListResult> {
+    try {
+      const resp = await this.search.search(create(SearchRequestSchema, {
+        kinds: [ApiResourceKind.datastore],
+        query: params.query,
+        org: params.org,
+        excludePublic: params.excludePublic ?? false,
+        crossOrgPublic: params.crossOrgPublic ?? false,
+        page: params.page ? create(PageInfoSchema, params.page) : undefined,
+      }));
+      return {
+        entries: resp.entries,
+        totalCount: resp.totalCount,
+        totalPages: resp.totalPages,
+      };
+    } catch (e) { throw wrapError(e); }
+  }
+}
+
+/** Input for creating/updating a Datastore. */
+export interface DatastoreInput {
+  name: string;
+  slug?: string;
+  org: string;
+  labels?: Record<string, string>;
+  visibility?: ApiResourceVisibility;
+  description?: string;
+  timezone?: string;
+  authorization?: DatastoreAuthorizationInput;
+  collections?: CollectionDeclarationInput[];
+}
+
+/** SDK input type for DatastoreAuthorization. */
+export interface DatastoreAuthorizationInput {
+  roles?: DatastoreRoleInput[];
+  bindings?: DatastoreRoleBindingInput[];
+  defaultRole?: string;
+}
+
+/** SDK input type for DatastoreRole. */
+export interface DatastoreRoleInput {
+  name: string;
+}
+
+/** SDK input type for DatastoreRoleBinding. */
+export interface DatastoreRoleBindingInput {
+  subject: DatastoreSubjectInput;
+  role: string;
+}
+
+/** SDK input type for DatastoreSubject. */
+export interface DatastoreSubjectInput {
+  channelSender?: ChannelSenderSubjectInput;
+  principal?: ApiResourceRefInput;
+}
+
+/** SDK input type for ChannelSenderSubject. */
+export interface ChannelSenderSubjectInput {
+  senderKind: string;
+  value: string;
+}
+
+/** SDK input type for ApiResourceRef. */
+export interface ApiResourceRefInput {
+  kind: string;
+  id: string;
+  relation?: string;
+}
+
+/** SDK input type for CollectionDeclaration. */
+export interface CollectionDeclarationInput {
+  name: string;
+  description?: string;
+  fields?: FieldDeclarationInput[];
+  uniques?: UniqueConstraintInput[];
+  checks?: CheckConstraintInput[];
+  exists?: ExistsConstraintInput[];
+  notExists?: ExistsConstraintInput[];
+  grants?: DatastoreGrantInput[];
+}
+
+/** SDK input type for FieldDeclaration. */
+export interface FieldDeclarationInput {
+  name: string;
+  type: FieldType;
+  required?: boolean;
+  default?: JsonValue;
+  enumValues?: string[];
+  description?: string;
+}
+
+/** SDK input type for UniqueConstraint. */
+export interface UniqueConstraintInput {
+  name: string;
+  fields?: string[];
+  where?: UniqueWhereInput;
+  message: string;
+}
+
+/** SDK input type for UniqueWhere. */
+export interface UniqueWhereInput {
+  field: string;
+  equals: JsonValue;
+}
+
+/** SDK input type for CheckConstraint. */
+export interface CheckConstraintInput {
+  name: string;
+  expression: string;
+  when?: string;
+  message: string;
+}
+
+/** SDK input type for ExistsConstraint. */
+export interface ExistsConstraintInput {
+  name: string;
+  collection: string;
+  where: string;
+  when?: string;
+  message: string;
+}
+
+/** SDK input type for DatastoreGrant. */
+export interface DatastoreGrantInput {
+  role: string;
+  verbs?: DatastoreVerb[];
+  scope?: DatastoreGrantScope;
+}
+
+function buildDatastoreRoleProto(input: DatastoreRoleInput) {
+  return Object.assign(create(DatastoreRoleSchema), stripUndefined({
+    name: input.name,
+  }));
+}
+
+function buildChannelSenderSubjectProto(input: ChannelSenderSubjectInput) {
+  return Object.assign(create(ChannelSenderSubjectSchema), stripUndefined({
+    senderKind: input.senderKind,
+    value: input.value,
+  }));
+}
+
+function buildApiResourceRefProto(input: ApiResourceRefInput) {
+  return Object.assign(create(ApiResourceRefSchema), stripUndefined({
+    kind: input.kind,
+    id: input.id,
+    relation: input.relation,
+  }));
+}
+
+function buildDatastoreSubjectProto(input: DatastoreSubjectInput) {
+  const msg = create(DatastoreSubjectSchema);
+  if (input.channelSender) {
+    msg.kind = { case: "channelSender", value: buildChannelSenderSubjectProto(input.channelSender) };
+  } else if (input.principal) {
+    msg.kind = { case: "principal", value: buildApiResourceRefProto(input.principal) };
+  }
+  return msg;
+}
+
+function buildDatastoreRoleBindingProto(input: DatastoreRoleBindingInput) {
+  const msg = create(DatastoreRoleBindingSchema);
+  if (input.subject) msg.subject = buildDatastoreSubjectProto(input.subject);
+  if (input.role !== undefined) msg.role = input.role;
+  return msg;
+}
+
+function buildDatastoreAuthorizationProto(input: DatastoreAuthorizationInput) {
+  const msg = create(DatastoreAuthorizationSchema);
+  if (input.roles) msg.roles = input.roles.map(buildDatastoreRoleProto);
+  if (input.bindings) msg.bindings = input.bindings.map(buildDatastoreRoleBindingProto);
+  if (input.defaultRole !== undefined) msg.defaultRole = input.defaultRole;
+  return msg;
+}
+
+function buildFieldDeclarationProto(input: FieldDeclarationInput) {
+  const msg = create(FieldDeclarationSchema);
+  if (input.name !== undefined) msg.name = input.name;
+  if (input.type !== undefined) msg.type = input.type;
+  if (input.required !== undefined) msg.required = input.required;
+  if (input.default !== undefined) msg.default = fromJson(ValueSchema, input.default);
+  if (input.enumValues) msg.enumValues = input.enumValues;
+  if (input.description !== undefined) msg.description = input.description;
+  return msg;
+}
+
+function buildUniqueWhereProto(input: UniqueWhereInput) {
+  const msg = create(UniqueWhereSchema);
+  if (input.field !== undefined) msg.field = input.field;
+  if (input.equals !== undefined) msg.equals = fromJson(ValueSchema, input.equals);
+  return msg;
+}
+
+function buildUniqueConstraintProto(input: UniqueConstraintInput) {
+  const msg = create(UniqueConstraintSchema);
+  if (input.name !== undefined) msg.name = input.name;
+  if (input.fields) msg.fields = input.fields;
+  if (input.where) msg.where = buildUniqueWhereProto(input.where);
+  if (input.message !== undefined) msg.message = input.message;
+  return msg;
+}
+
+function buildCheckConstraintProto(input: CheckConstraintInput) {
+  return Object.assign(create(CheckConstraintSchema), stripUndefined({
+    name: input.name,
+    expression: input.expression,
+    when: input.when,
+    message: input.message,
+  }));
+}
+
+function buildExistsConstraintProto(input: ExistsConstraintInput) {
+  return Object.assign(create(ExistsConstraintSchema), stripUndefined({
+    name: input.name,
+    collection: input.collection,
+    where: input.where,
+    when: input.when,
+    message: input.message,
+  }));
+}
+
+function buildDatastoreGrantProto(input: DatastoreGrantInput) {
+  return Object.assign(create(DatastoreGrantSchema), stripUndefined({
+    role: input.role,
+    verbs: input.verbs,
+    scope: input.scope,
+  }));
+}
+
+function buildCollectionDeclarationProto(input: CollectionDeclarationInput) {
+  const msg = create(CollectionDeclarationSchema);
+  if (input.name !== undefined) msg.name = input.name;
+  if (input.description !== undefined) msg.description = input.description;
+  if (input.fields) msg.fields = input.fields.map(buildFieldDeclarationProto);
+  if (input.uniques) msg.uniques = input.uniques.map(buildUniqueConstraintProto);
+  if (input.checks) msg.checks = input.checks.map(buildCheckConstraintProto);
+  if (input.exists) msg.exists = input.exists.map(buildExistsConstraintProto);
+  if (input.notExists) msg.notExists = input.notExists.map(buildExistsConstraintProto);
+  if (input.grants) msg.grants = input.grants.map(buildDatastoreGrantProto);
+  return msg;
+}
+
+export function buildDatastoreProto(input: DatastoreInput): Datastore {
+  const authorization = input.authorization ? buildDatastoreAuthorizationProto(input.authorization) : undefined;
+  const collections = input.collections?.map(buildCollectionDeclarationProto);
+  return Object.assign(create(DatastoreSchema), {
+    apiVersion: "agentic.stigmer.ai/v1",
+    kind: "Datastore",
+    metadata: Object.assign(create(ApiResourceMetadataSchema), {
+      name: input.name,
+      org: input.org,
+      ...(input.slug && { slug: input.slug }),
+      ...(input.labels && { labels: input.labels }),
+      ...(input.visibility && { visibility: input.visibility }),
+    }),
+    spec: Object.assign(create(DatastoreSpecSchema), stripUndefined({
+      description: input.description,
+      timezone: input.timezone,
+      authorization,
+      collections,
+    })),
+  }) as Datastore;
+}

package/src/gen/session.ts

@@ -92,6 +92,7 @@ export interface SessionInput {
   agentInstanceId?: string;
   subject?: string;
   harnessStateId?: string;
+  harnessStateIdHistory?: string[];
   metadata?: Record<string, string>;
   workspaceEntries?: WorkspaceEntryInput[];
   mcpServerUsages?: McpServerUsageInput[];
@@ -208,6 +209,7 @@ export function buildSessionProto(input: SessionInput): Session {
       agentInstanceId: input.agentInstanceId,
       subject: input.subject,
       harnessStateId: input.harnessStateId,
+      harnessStateIdHistory: input.harnessStateIdHistory,
       metadata: input.metadata,
       workspaceEntries,
       mcpServerUsages,

package/src/index.ts

@@ -49,6 +49,7 @@ export {
   getUserMessage,
   type ErrorReason,
   getErrorReason,
+  getRecordConstraint,
   type RpcErrorMetadata,
   annotateRpcError,
   getRpcMetadata,
@@ -93,6 +94,16 @@ export {
   type GetCustomerModelPricingParams,
 } from "./billing.js";
 
+// Cursor accounts client (platform operators only)
+export {
+  CursorAccountsClient,
+  type UpsertCursorAccountParams,
+  type DeleteCursorAccountParams,
+  type AddCursorMemberKeyParams,
+  type RemoveCursorMemberKeyParams,
+  type SetCursorMemberKeyEnabledParams,
+} from "./cursor-accounts.js";
+
 // Search client
 export {
   SearchClient,
@@ -116,6 +127,23 @@ export {
   type ServerInfo,
 } from "./platform.js";
 
+// Manifest engine (kind-agnostic YAML ⇄ proto ⇄ apply)
+export {
+  ManifestClient,
+  parseManifest,
+  serializeManifest,
+  manifestKinds,
+  manifestHandlerForYamlKind,
+  manifestHandlerForTypeName,
+  metadataOf,
+  REDACTED_SECRET_MARKER,
+  containsRedactedSecrets,
+  type AppliedManifest,
+  type ManifestDocument,
+  type ManifestKindHandler,
+  type ParseManifestOptions,
+} from "./manifest/index.js";
+
 // Shared types (from generated code)
 export {
   type DeleteResourceInput,
@@ -130,6 +158,7 @@ export {
 // Re-export all resource client classes and input types
 export {
   AgentClient,
+  buildAgentProto,
   type AgentInput,
   type McpServerUsageInput,
   type ToolApprovalOverrideInput,
@@ -194,6 +223,7 @@ export {
 } from "./gen/oauthapp.js";
 export {
   McpServerClient,
+  buildMcpServerProto,
   type McpServerInput,
   type StdioServerConfigInput,
   type HttpServerConfigInput,