@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/mcpserver/search-extractor.js

@@ -0,0 +1,45 @@
+import { McpServerSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { buildSearchResult } from "../../query/search/extractor.js";
+export const mcpServerSearchExtractor = {
+    kind: ApiResourceKind.mcp_server,
+    schema: McpServerSchema,
+    getSearchSummary(resource) {
+        // Go McpServerExtractor.GetSearchSummary: spec.description.
+        const mcpServer = resource;
+        return mcpServer.spec?.description ?? "";
+    },
+    toSearchResult(resource, score) {
+        const mcpServer = resource;
+        return buildSearchResult({
+            kind: ApiResourceKind.mcp_server,
+            metadata: mcpServer.metadata,
+            summary: mcpServer.spec?.description ?? "",
+            score,
+            createdAt: mcpServer.status?.audit?.specAudit?.createdAt,
+            updatedAt: mcpServer.status?.audit?.specAudit?.updatedAt,
+            iconUrl: mcpServer.spec?.iconUrl ?? "",
+        });
+    },
+    getSearchIndexEntry(resource) {
+        const mcpServer = resource;
+        const metadata = mcpServer.metadata;
+        if (metadata === undefined) {
+            return undefined;
+        }
+        return {
+            name: metadata.name,
+            // Go McpServerExtractor.GetSearchSummary: spec.description.
+            description: mcpServer.spec?.description ?? "",
+            // Tags join space-separated — the index entry carries one tags
+            // string (Go extractor.JoinTags).
+            tags: metadata.tags.join(" "),
+            org: metadata.org,
+            // The enum NAME string, exactly Go's visibility.String().
+            visibility: ApiResourceVisibility[metadata.visibility] ?? "",
+            createdAt: Number(mcpServer.status?.audit?.specAudit?.createdAt?.seconds ?? 0n),
+        };
+    },
+};
+//# sourceMappingURL=search-extractor.js.map

package/dist/domain/mcpserver/search-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-extractor.js","sourceRoot":"","sources":["../../../src/domain/mcpserver/search-extractor.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AAEzF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAI/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGpE,MAAM,CAAC,MAAM,wBAAwB,GAAwB;IAC3D,IAAI,EAAE,eAAe,CAAC,UAAU;IAChC,MAAM,EAAE,eAAe;IAEvB,gBAAgB,CAAC,QAAiB;QAChC,4DAA4D;QAC5D,MAAM,SAAS,GAAG,QAAgC,CAAC;QACnD,OAAO,SAAS,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,QAAiB,EAAE,KAAa;QAC7C,MAAM,SAAS,GAAG,QAAgC,CAAC;QACnD,OAAO,iBAAiB,CAAC;YACvB,IAAI,EAAE,eAAe,CAAC,UAAU;YAChC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;YAC1C,KAAK;YACL,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;YACxD,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;YACxD,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,QAAiB;QACnC,MAAM,SAAS,GAAG,QAAgC,CAAC;QACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,4DAA4D;YAC5D,WAAW,EAAE,SAAS,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;YAC9C,+DAA+D;YAC/D,kCAAkC;YAClC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,0DAA0D;YAC1D,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE;YAC5D,SAAS,EAAE,MAAM,CACf,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE,CAC7D;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/domain/mcpserver/start-connect.d.ts

@@ -0,0 +1,38 @@
+/**
+ * McpServer startConnect (async lane) — ports
+ * pkg/domain/mcpserver/controller/start_connect.go: begin a connect
+ * operation and return without waiting for it (stigmer/stigmer#425).
+ *
+ * Everything that needs the caller's identity — OAuth refresh pre-flight,
+ * personal-environment resolution, ExecutionContext creation, token
+ * minting — runs synchronously here via prepareConnect, exactly as in the
+ * blocking connect. Only awaiting the workflow moves to a detached settle
+ * task, which records the terminal connect_status and cleans up the
+ * ExecutionContext when the run finishes. Clients poll
+ * get/getByReference until connect_status reaches a terminal phase.
+ *
+ * Idempotent while an operation is in flight, at two layers: a fast path
+ * (a live CONNECTING record whose workflow Temporal reports as running
+ * returns immediately, before any ExecutionContext is created) and the
+ * authoritative deterministic-workflow-ID refusal, turned into the same
+ * attach semantics. A CONNECTING record whose run is NOT running (the
+ * backend restarted before its awaiter could settle, or Temporal lost the
+ * run) is not reconciled in place — the fresh start below overwrites it,
+ * which is both the repair and the caller's intent.
+ *
+ * Proven by mcpserver-connect.conformance.test.ts
+ * (CONFORMANCE_TARGET=local-execution) and
+ * __tests__/start-connect.test.ts.
+ */
+import type { McpServer } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import type { ConnectInput } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/io_pb";
+import type { CallerIdentity } from "../../extensions/identity.js";
+import type { McpServerConnectDeps } from "./connect.js";
+/**
+ * The dead-runner advisory recorded on connect_status when no worker is
+ * polling the runner task queue at start time (Go runnerQueueWarning's
+ * copy — rendered verbatim by the SDK).
+ */
+export declare const RUNNER_QUEUE_WARNING: string;
+export declare function startConnect(deps: McpServerConnectDeps, input: ConnectInput, identity: CallerIdentity): Promise<McpServer>;
+//# sourceMappingURL=start-connect.d.ts.map

package/dist/domain/mcpserver/start-connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-connect.d.ts","sourceRoot":"","sources":["../../../src/domain/mcpserver/start-connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wDAAwD,CAAC;AAGxF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uDAAuD,CAAC;AAI1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAqBnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGzD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,QAEoC,CAAC;AAEtE,wBAAsB,YAAY,CAChC,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CAwHpB"}

package/dist/domain/mcpserver/start-connect.js

@@ -0,0 +1,175 @@
+import { McpServerSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import { McpServerCommandController } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/command_pb";
+import { ConnectPhase } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/status_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { failedPreconditionError, internalError, invalidArgumentError, notFoundError, } from "../../pipeline/errors.js";
+import { authorizeDirect } from "../../pipeline/steps/authorize.js";
+import { ResourceNotFoundError } from "../../store/interface.js";
+import { persistConnectFailure, persistConnectResult, persistConnectStarting, } from "./connect-status.js";
+import { ASYNC_CONNECT_TIMEOUT, BEST_EFFORT_CONNECT_GET_BUFFER_MS, deleteConnectExecutionContext, mapConnectFailure, prepareConnect, } from "./connect.js";
+/**
+ * The dead-runner advisory recorded on connect_status when no worker is
+ * polling the runner task queue at start time (Go runnerQueueWarning's
+ * copy — rendered verbatim by the SDK).
+ */
+export const RUNNER_QUEUE_WARNING = "no runner appears to be polling the task queue — the connect will wait " +
+    "for one to come up (start your local runner if it is not running)";
+export async function startConnect(deps, input, identity) {
+    const engineState = deps.engineState();
+    if (!engineState.connected) {
+        throw failedPreconditionError("connect is not available: Temporal not configured");
+    }
+    const mcpServerId = input.mcpServerId;
+    if (mcpServerId === "") {
+        throw invalidArgumentError("mcp_server_id is required");
+    }
+    if (input.org === "") {
+        throw invalidArgumentError("org is required for connect");
+    }
+    let mcpServer;
+    try {
+        mcpServer = await deps.store.getResource(ApiResourceKind.mcp_server, mcpServerId, McpServerSchema);
+    }
+    catch {
+        throw notFoundError("mcp_server", mcpServerId);
+    }
+    // The annotation's can_connect check AFTER the load — the Java
+    // McpServerStartConnectHandler order (the connect handler's shared
+    // load/authorize steps, stigmer#224). C2 Stage 4.
+    await authorizeDirect(McpServerCommandController.method.startConnect, deps.authorizer, identity, input);
+    const connectStatus = mcpServer.status?.connectStatus;
+    if (connectStatus?.phase === ConnectPhase.connecting) {
+        if (await engineState.engine.isConnectRunRunning(connectStatus.workflowId)) {
+            deps.logger.info("StartConnect attached to in-flight connect operation", {
+                mcp_server_id: mcpServerId,
+                workflow_id: connectStatus.workflowId,
+            });
+            return mcpServer;
+        }
+    }
+    const prepared = await prepareConnect(deps, mcpServer, input);
+    // Taken before the start so the advisory describes the queue the run is
+    // about to join. Warn-only by design: a worker may be booting (the
+    // pre-flight has a startup false-negative race), so the operation
+    // proceeds either way and the poller renders the warning as context.
+    const warning = await runnerQueueWarning(engineState.engine);
+    let run;
+    try {
+        run = await engineState.engine.startOrAttachConnect(mcpServerId, prepared.workflowInput, ASYNC_CONNECT_TIMEOUT.ms);
+    }
+    catch (error) {
+        if (prepared.ecResourceId !== "") {
+            await deleteConnectExecutionContext(deps, prepared.ecResourceId, prepared.executionId);
+        }
+        deps.logger.error("Failed to start MCP connect workflow", {
+            mcp_server_id: mcpServerId,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw internalError(error, "failed to start connect workflow");
+    }
+    if (run.attached) {
+        // Lost the residual race to another lane: its run and CONNECTING
+        // record stand, and the ExecutionContext prepared here is unused.
+        if (prepared.ecResourceId !== "") {
+            await deleteConnectExecutionContext(deps, prepared.ecResourceId, prepared.executionId);
+        }
+        try {
+            return await deps.store.getResource(ApiResourceKind.mcp_server, mcpServerId, McpServerSchema);
+        }
+        catch {
+            throw notFoundError("mcp_server", mcpServerId);
+        }
+    }
+    let persisted;
+    try {
+        persisted = await persistConnectStarting(deps.store, mcpServerId, run.workflowId, warning);
+    }
+    catch (error) {
+        // The workflow is already running; hand it to the background settler
+        // (which copes with a deleted resource) but fail the RPC honestly —
+        // a caller that cannot observe CONNECTING cannot poll.
+        detachSettle(deps, mcpServer, run, prepared);
+        throw internalError(error, "failed to record connect operation");
+    }
+    detachSettle(deps, mcpServer, run, prepared);
+    return persisted;
+}
+/**
+ * Launches the settle task fire-and-forget (Go's `go settleConnectAsync`).
+ * settleConnectAsync's own arms never reject; the catch here is the
+ * process-safety net an unhandled rejection would otherwise pierce.
+ */
+function detachSettle(deps, mcpServer, run, prepared) {
+    void settleConnectAsync(deps, mcpServer, run, prepared.ecResourceId, prepared.executionId).catch((error) => {
+        deps.logger.warn("Async connect settle task failed unexpectedly", {
+            mcp_server_id: mcpServer.metadata?.id ?? "",
+            error: error instanceof Error ? error.message : String(error),
+        });
+    });
+}
+/**
+ * Awaits a connect workflow off the request path, records the terminal
+ * connect_status (with results on success), and cleans up the ephemeral
+ * ExecutionContext (Go settleConnectAsync).
+ *
+ * The bounded wait follows the startBestEffortConnect pattern: the
+ * workflow's own WorkflowRunTimeout is the deadline that should fire
+ * first; the slightly longer backstop only guarantees the settle task can
+ * never hang if Temporal becomes unreachable. If this process dies before
+ * settling, the CONNECTING record goes stale; the next startConnect
+ * overwrites it (the orphan contract on ConnectStatus). Never throws —
+ * every failure lands on connect_status or the log.
+ */
+async function settleConnectAsync(deps, mcpServer, run, ecResourceId, executionId) {
+    const mcpServerId = mcpServer.metadata?.id ?? "";
+    try {
+        const outcome = await run.result(ASYNC_CONNECT_TIMEOUT.ms + BEST_EFFORT_CONNECT_GET_BUFFER_MS);
+        if (!outcome.ok) {
+            const failure = mapConnectFailure(deps.logger, mcpServer, run.workflowId, outcome.failure, ASYNC_CONNECT_TIMEOUT);
+            await persistConnectFailure(deps.store, deps.logger, mcpServerId, failure);
+            return;
+        }
+        let persisted;
+        let toolApprovalCount;
+        try {
+            ({ persisted, toolApprovalCount } = await persistConnectResult(deps.store, mcpServerId, run.workflowId, outcome.output));
+        }
+        catch (error) {
+            if (error instanceof ResourceNotFoundError) {
+                deps.logger.info("Skipping async connect persistence: MCP server deleted before connect completed", { mcp_server_id: mcpServerId });
+                return;
+            }
+            deps.logger.warn("Failed to persist async connect result", {
+                mcp_server_id: mcpServerId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return;
+        }
+        deps.logger.info("Async MCP server connect completed and stored", {
+            workflow_id: run.workflowId,
+            mcp_server_id: mcpServerId,
+            tools: persisted.status?.discoveredCapabilities?.tools.length ?? 0,
+            resource_templates: persisted.status?.discoveredCapabilities?.resourceTemplates.length ?? 0,
+            tool_approvals: toolApprovalCount,
+        });
+    }
+    finally {
+        if (ecResourceId !== "") {
+            await deleteConnectExecutionContext(deps, ecResourceId, executionId);
+        }
+    }
+}
+/**
+ * The dead-runner advisory for connect_status, or "" when a worker is
+ * polling the runner task queue — or when the question cannot be answered
+ * (an unreachable Temporal should not cry wolf on an operation that is
+ * about to fail loudly anyway; Go runnerQueueWarning).
+ */
+async function runnerQueueWarning(engine) {
+    const hasPollers = await engine.hasRunnerQueuePollers();
+    if (hasPollers === undefined || hasPollers) {
+        return "";
+    }
+    return RUNNER_QUEUE_WARNING;
+}
+//# sourceMappingURL=start-connect.js.map

package/dist/domain/mcpserver/start-connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-connect.js","sourceRoot":"","sources":["../../../src/domain/mcpserver/start-connect.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AACzF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AAExG,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAGtH,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,iCAAiC,EACjC,6BAA6B,EAC7B,iBAAiB,EACjB,cAAc,GACf,MAAM,cAAc,CAAC;AAItB;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,yEAAyE;IACzE,mEAAmE,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAA0B,EAC1B,KAAmB,EACnB,QAAwB;IAExB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;QAC3B,MAAM,uBAAuB,CAC3B,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,oBAAoB,CAAC,2BAA2B,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,oBAAoB,CAAC,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,SAAoB,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CACtC,eAAe,CAAC,UAAU,EAC1B,WAAW,EACX,eAAe,CAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,+DAA+D;IAC/D,mEAAmE;IACnE,kDAAkD;IAClD,MAAM,eAAe,CACnB,0BAA0B,CAAC,MAAM,CAAC,YAAY,EAC9C,IAAI,CAAC,UAAU,EACf,QAAQ,EACR,KAAK,CACN,CAAC;IAEF,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC;IACtD,IAAI,aAAa,EAAE,KAAK,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;QACrD,IACE,MAAM,WAAW,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,UAAU,CAAC,EACtE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBACvE,aAAa,EAAE,WAAW;gBAC1B,WAAW,EAAE,aAAa,CAAC,UAAU;aACtC,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAE9D,wEAAwE;IACxE,mEAAmE;IACnE,kEAAkE;IAClE,qEAAqE;IACrE,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE7D,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,oBAAoB,CACjD,WAAW,EACX,QAAQ,CAAC,aAAa,EACtB,qBAAqB,CAAC,EAAE,CACzB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YACjC,MAAM,6BAA6B,CACjC,IAAI,EACJ,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,WAAW,CACrB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;YACxD,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,iEAAiE;QACjE,kEAAkE;QAClE,IAAI,QAAQ,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YACjC,MAAM,6BAA6B,CACjC,IAAI,EACJ,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,WAAW,CACrB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CACjC,eAAe,CAAC,UAAU,EAC1B,WAAW,EACX,eAAe,CAChB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,IAAI,SAAoB,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,sBAAsB,CACtC,IAAI,CAAC,KAAK,EACV,WAAW,EACX,GAAG,CAAC,UAAU,EACd,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,oEAAoE;QACpE,uDAAuD;QACvD,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,aAAa,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACnE,CAAC;IAED,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE7C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CACnB,IAA0B,EAC1B,SAAoB,EACpB,GAAe,EACf,QAAyE;IAEzE,KAAK,kBAAkB,CACrB,IAAI,EACJ,SAAS,EACT,GAAG,EACH,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,WAAW,CACrB,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;YAChE,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;YAC3C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,kBAAkB,CAC/B,IAA0B,EAC1B,SAAoB,EACpB,GAAe,EACf,YAAoB,EACpB,WAAmB;IAEnB,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAC9B,qBAAqB,CAAC,EAAE,GAAG,iCAAiC,CAC7D,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,iBAAiB,CAC/B,IAAI,CAAC,MAAM,EACX,SAAS,EACT,GAAG,CAAC,UAAU,EACd,OAAO,CAAC,OAAO,EACf,qBAAqB,CACtB,CAAC;YACF,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,SAAoB,CAAC;QACzB,IAAI,iBAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,MAAM,oBAAoB,CAC5D,IAAI,CAAC,KAAK,EACV,WAAW,EACX,GAAG,CAAC,UAAU,EACd,OAAO,CAAC,MAAM,CACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iFAAiF,EACjF,EAAE,aAAa,EAAE,WAAW,EAAE,CAC/B,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBACzD,aAAa,EAAE,WAAW;gBAC1B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;YAChE,WAAW,EAAE,GAAG,CAAC,UAAU;YAC3B,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;YAClE,kBAAkB,EAChB,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,MAAM,IAAI,CAAC;YACzE,cAAc,EAAE,iBAAiB;SAClC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,6BAA6B,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAC/B,MAA8B;IAE9B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,qBAAqB,EAAE,CAAC;IACxD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}

package/dist/domain/mcpserver/steps.d.ts

@@ -0,0 +1,63 @@
+import type { DescMessage } from "@bufbuild/protobuf";
+import type { McpServerSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import type { Logger } from "../../boot/logger.js";
+import type { PipelineStep } from "../../pipeline/pipeline.js";
+import type { Store } from "../../store/interface.js";
+/**
+ * ValidateDefaultEnabledTools — rejects updates whose
+ * spec.default_enabled_tools name tools this server does not expose
+ * (issue #402, the mcpserver twin of the agent controller's
+ * ValidateEnabledTools step).
+ *
+ * The check is self-referential — spec against the resource's OWN stored
+ * discovered capabilities — so it needs no store fetch: BuildUpdateState
+ * has already copied the existing status (including capabilities) onto
+ * the merged state this step reads.
+ *
+ * Wired into the UPDATE pipeline only. On create the resource cannot have
+ * a status yet (the first discovery is the post-apply best-effort
+ * connect), so a create-side check would be a no-op by construction;
+ * leaving it unwired keeps the create pipeline honest about what it
+ * enforces.
+ *
+ * Deliberate skips: an empty default_enabled_tools means "all tools
+ * enabled" — nothing to check; absent discovered capabilities mean the
+ * server was never connected, so there is no authoritative toolset to
+ * validate against (the runner's warn-and-intersect, issue #350, remains
+ * the safety net for that window).
+ */
+export declare function newValidateDefaultEnabledToolsStep(): PipelineStep<typeof McpServerSchema>;
+/**
+ * EnrichOAuthStatus — populates response-only status.oauth_status on a
+ * loaded McpServer from the OAuthApp its spec.auth.oauth_app_ref points
+ * to, mirroring the cloud's McpServerVendorApprovalEnricher so the shared
+ * SDK's vendor-approval-blocked UI renders identically on both editions
+ * (stigmer/stigmer#523). Without it, an OSS user's first hint that OAuth
+ * sign-in is vendor-blocked is the initiate RPC's refusal — after they
+ * click.
+ *
+ * Semantics shared with the cloud enricher:
+ *   - Servers without an oauth_app_ref (DCR or manual-token) are
+ *     untouched.
+ *   - A missing OAuthApp skips enrichment (the initiate path owns
+ *     refusing).
+ *   - oauth_status is set only when there is something to gate on: a
+ *     non-default vendor_approval_status or a docs URL. Its very presence
+ *     is the signal the SDK keys on, so "nothing to report" means absent.
+ *   - The fields are response-only, per the OAuthStatus proto contract.
+ *     Nothing here persists: get pipelines don't save, and the write
+ *     pipelines clear client-sent status, so a round-tripped enriched
+ *     read cannot leak into the store.
+ *
+ * One deliberate divergence from cloud (Go's, preserved): a store failure
+ * during the lookup degrades to an unenriched response (WARN) instead of
+ * failing the read. Enrichment is advisory — the initiate RPC's vendor
+ * refusal remains the enforcement boundary — and an advisory lookup must
+ * not take down the primary read path.
+ *
+ * Generic over the pipeline input (get takes an ApiResourceId,
+ * getByReference an ApiResourceReference); it only touches the
+ * already-loaded target resource.
+ */
+export declare function newEnrichOAuthStatusStep<Desc extends DescMessage>(store: Store, logger: Logger): PipelineStep<Desc>;
+//# sourceMappingURL=steps.d.ts.map

package/dist/domain/mcpserver/steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.d.ts","sourceRoot":"","sources":["../../../src/domain/mcpserver/steps.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AAQ9F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAStD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,kCAAkC,IAAI,YAAY,CAChE,OAAO,eAAe,CACvB,CAsCA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,SAAS,WAAW,EAC/D,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,IAAI,CAAC,CAkDpB"}

package/dist/domain/mcpserver/steps.js

@@ -0,0 +1,144 @@
+/**
+ * McpServer domain-local pipeline steps — port
+ * pkg/domain/mcpserver/controller/validate_default_enabled_tools.go and
+ * enrich_oauth_status.go. Shared vocabulary step names; error copy
+ * byte-pinned from Go.
+ *
+ * Proven by __tests__/mcpserver.test.ts and mcpserver.conformance.test.ts
+ * (CONFORMANCE_TARGET=local).
+ */
+import { create } from "@bufbuild/protobuf";
+import { McpServerStatusSchema, OAuthStatusSchema, } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/status_pb";
+import { VendorApprovalStatus } from "@stigmer/protos/ai/stigmer/iam/oauthapp/v1/spec_pb";
+import { invalidArgumentError } from "../../pipeline/errors.js";
+import { TARGET_RESOURCE_KEY } from "../../pipeline/steps/load-target.js";
+import { resolveOAuthAppRef } from "../oauthapp/refresolution.js";
+import { classify, isValidClassification, quoteJoin, toolNames, } from "./enabledtools/enabledtools.js";
+/**
+ * ValidateDefaultEnabledTools — rejects updates whose
+ * spec.default_enabled_tools name tools this server does not expose
+ * (issue #402, the mcpserver twin of the agent controller's
+ * ValidateEnabledTools step).
+ *
+ * The check is self-referential — spec against the resource's OWN stored
+ * discovered capabilities — so it needs no store fetch: BuildUpdateState
+ * has already copied the existing status (including capabilities) onto
+ * the merged state this step reads.
+ *
+ * Wired into the UPDATE pipeline only. On create the resource cannot have
+ * a status yet (the first discovery is the post-apply best-effort
+ * connect), so a create-side check would be a no-op by construction;
+ * leaving it unwired keeps the create pipeline honest about what it
+ * enforces.
+ *
+ * Deliberate skips: an empty default_enabled_tools means "all tools
+ * enabled" — nothing to check; absent discovered capabilities mean the
+ * server was never connected, so there is no authoritative toolset to
+ * validate against (the runner's warn-and-intersect, issue #350, remains
+ * the safety net for that window).
+ */
+export function newValidateDefaultEnabledToolsStep() {
+    return {
+        name: "ValidateDefaultEnabledTools",
+        execute(ctx) {
+            const mcpServer = ctx.newState;
+            const requested = mcpServer.spec?.defaultEnabledTools ?? [];
+            if (requested.length === 0) {
+                return;
+            }
+            const caps = mcpServer.status?.discoveredCapabilities;
+            if (caps === undefined) {
+                return;
+            }
+            const classification = classify(caps, requested);
+            if (isValidClassification(classification)) {
+                return;
+            }
+            const problems = [];
+            if (classification.unknown.length > 0) {
+                problems.push(`default_enabled_tools names tool(s) this server does not expose: ${quoteJoin(classification.unknown)}`);
+            }
+            if (classification.resourceTemplates.length > 0) {
+                problems.push(`default_enabled_tools names resource template(s): ${quoteJoin(classification.resourceTemplates)} — resource templates are read-only data endpoints, not callable tools, and must not appear in default_enabled_tools`);
+            }
+            throw invalidArgumentError(`MCP server '${mcpServer.metadata?.slug ?? ""}': ${problems.join("; ")}. Discovered tools: ${quoteJoin(toolNames(caps))}. If the server's toolset changed, run 'stigmer connect' on it to refresh discovered capabilities.`);
+        },
+    };
+}
+/**
+ * EnrichOAuthStatus — populates response-only status.oauth_status on a
+ * loaded McpServer from the OAuthApp its spec.auth.oauth_app_ref points
+ * to, mirroring the cloud's McpServerVendorApprovalEnricher so the shared
+ * SDK's vendor-approval-blocked UI renders identically on both editions
+ * (stigmer/stigmer#523). Without it, an OSS user's first hint that OAuth
+ * sign-in is vendor-blocked is the initiate RPC's refusal — after they
+ * click.
+ *
+ * Semantics shared with the cloud enricher:
+ *   - Servers without an oauth_app_ref (DCR or manual-token) are
+ *     untouched.
+ *   - A missing OAuthApp skips enrichment (the initiate path owns
+ *     refusing).
+ *   - oauth_status is set only when there is something to gate on: a
+ *     non-default vendor_approval_status or a docs URL. Its very presence
+ *     is the signal the SDK keys on, so "nothing to report" means absent.
+ *   - The fields are response-only, per the OAuthStatus proto contract.
+ *     Nothing here persists: get pipelines don't save, and the write
+ *     pipelines clear client-sent status, so a round-tripped enriched
+ *     read cannot leak into the store.
+ *
+ * One deliberate divergence from cloud (Go's, preserved): a store failure
+ * during the lookup degrades to an unenriched response (WARN) instead of
+ * failing the read. Enrichment is advisory — the initiate RPC's vendor
+ * refusal remains the enforcement boundary — and an advisory lookup must
+ * not take down the primary read path.
+ *
+ * Generic over the pipeline input (get takes an ApiResourceId,
+ * getByReference an ApiResourceReference); it only touches the
+ * already-loaded target resource.
+ */
+export function newEnrichOAuthStatusStep(store, logger) {
+    return {
+        name: "EnrichOAuthStatus",
+        async execute(ctx) {
+            const mcpServer = ctx.get(TARGET_RESOURCE_KEY);
+            if (mcpServer === undefined) {
+                return;
+            }
+            const ref = mcpServer.spec?.auth?.oauthAppRef;
+            if ((ref?.slug ?? "") === "") {
+                return;
+            }
+            let oauthApp;
+            try {
+                oauthApp = await resolveOAuthAppRef(store, ref, logger);
+            }
+            catch (error) {
+                logger.warn("OAuthApp lookup failed; returning MCP server without oauth_status enrichment", {
+                    mcpServerId: mcpServer.metadata?.id ?? "",
+                    oauthAppSlug: ref?.slug ?? "",
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                return;
+            }
+            if (oauthApp === undefined) {
+                logger.debug("OAuthApp not found for ref; skipping oauth_status enrichment", {
+                    mcpServerId: mcpServer.metadata?.id ?? "",
+                    oauthAppSlug: ref?.slug ?? "",
+                });
+                return;
+            }
+            const approvalStatus = oauthApp.spec?.vendorApprovalStatus ?? VendorApprovalStatus.UNSPECIFIED;
+            const docsUrl = oauthApp.spec?.vendorApprovalDocsUrl ?? "";
+            if (approvalStatus === VendorApprovalStatus.UNSPECIFIED && docsUrl === "") {
+                return;
+            }
+            mcpServer.status ??= create(McpServerStatusSchema, {});
+            mcpServer.status.oauthStatus = create(OAuthStatusSchema, {
+                vendorApprovalStatus: approvalStatus,
+                vendorApprovalDocsUrl: docsUrl,
+            });
+        },
+    };
+}
+//# sourceMappingURL=steps.js.map

package/dist/domain/mcpserver/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../../src/domain/mcpserver/steps.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAK5C,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAC;AAG1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EACL,QAAQ,EACR,qBAAqB,EACrB,SAAS,EACT,SAAS,GACV,MAAM,gCAAgC,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,kCAAkC;IAGhD,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,OAAO,CAAC,GAA2C;YACjD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC;YAE/B,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,mBAAmB,IAAI,EAAE,CAAC;YAC5D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,sBAAsB,CAAC;YACtD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACjD,IAAI,qBAAqB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CACX,oEAAoE,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CACxG,CAAC;YACJ,CAAC;YACD,IAAI,cAAc,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,QAAQ,CAAC,IAAI,CACX,qDAAqD,SAAS,CAAC,cAAc,CAAC,iBAAiB,CAAC,sHAAsH,CACvN,CAAC;YACJ,CAAC;YAED,MAAM,oBAAoB,CACxB,eAAe,SAAS,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,oGAAoG,CAC5N,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAY,EACZ,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAA0B,CAAC;YACxE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT,8EAA8E,EAC9E;oBACE,WAAW,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;oBACzC,YAAY,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE;oBAC7B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;oBAC3E,WAAW,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;oBACzC,YAAY,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE;iBAC9B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,cAAc,GAClB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,IAAI,oBAAoB,CAAC,WAAW,CAAC;YAC1E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,qBAAqB,IAAI,EAAE,CAAC;YAC3D,IAAI,cAAc,KAAK,oBAAoB,CAAC,WAAW,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBAC1E,OAAO;YACT,CAAC;YAED,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;YACvD,SAAS,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,iBAAiB,EAAE;gBACvD,oBAAoB,EAAE,cAAc;gBACpC,qBAAqB,EAAE,OAAO;aAC/B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domain/memory/constants.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Memory domain constants — the byte-pinned cross-edition contract copy,
+ * ported character-for-character from Go
+ * pkg/domain/memory/controller/steps.go. Every string here is pinned by
+ * the conformance suite and mirrored byte-identically by the cloud
+ * edition's handlers; none is editable without an owner-ratified wire
+ * change. Refusals are visible and actionable — never silent eviction
+ * (the ChatGPT Memory-Full pattern, DD-006 D5).
+ */
+/**
+ * The per-subject-per-org record ceiling, counted across ALL lifecycle
+ * states — proposed clutter counts, which pressures honest rejection over
+ * letting proposals pile up (DD-006 D5). Go MaxMemoriesPerSubject.
+ */
+export declare const MAX_MEMORIES_PER_SUBJECT = 100;
+/**
+ * Refuses a create once the subject's ceiling is reached — Go
+ * MemoryFullMessage.
+ */
+export declare const MEMORY_FULL_MESSAGE = "memory is full \u2014 review and delete existing memories";
+/**
+ * Refuses a create while the organization has not enabled memory — Go
+ * MemoryDisabledMessageFmt, taking the org slug.
+ */
+export declare function memoryDisabledMessage(org: string): string;
+/**
+ * Refuses confirming a rejected memory: the decision is auditable and
+ * stands; a fresh proposal is the way back. Go
+ * MemoryConfirmRejectedMessage.
+ */
+export declare const MEMORY_CONFIRM_REJECTED_MESSAGE = "memory was rejected \u2014 delete it and let the agent propose it again";
+/**
+ * Refuses rejecting a confirmed memory: deletion IS the revocation of a
+ * confirmed fact (DD-006). Go MemoryRejectConfirmedMessage.
+ */
+export declare const MEMORY_REJECT_CONFIRMED_MESSAGE = "memory was confirmed \u2014 delete it to stop it from being recalled";
+/**
+ * Refuses an update that changes the subject: an editable subject would
+ * re-aim the record at another person. Go MemorySubjectImmutableMessage.
+ */
+export declare const MEMORY_SUBJECT_IMMUTABLE_MESSAGE = "spec.subject_identity_account_id is immutable \u2014 it is derived from the capturing credential at create";
+/**
+ * Refuses an update that changes provenance: attribution that can be
+ * edited is not attribution. Go MemoryProvenanceImmutableMessage.
+ */
+export declare const MEMORY_PROVENANCE_IMMUTABLE_MESSAGE = "spec.provenance is immutable \u2014 it records where the fact came from";
+//# sourceMappingURL=constants.d.ts.map

package/dist/domain/memory/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/domain/memory/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,mBAAmB,8DACwB,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,4EAC0B,CAAC;AAEvE;;;GAGG;AACH,eAAO,MAAM,+BAA+B,yEACuB,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,gCAAgC,+GAC4D,CAAC;AAE1G;;;GAGG;AACH,eAAO,MAAM,mCAAmC,4EACsB,CAAC"}

package/dist/domain/memory/constants.js

@@ -0,0 +1,49 @@
+/**
+ * Memory domain constants — the byte-pinned cross-edition contract copy,
+ * ported character-for-character from Go
+ * pkg/domain/memory/controller/steps.go. Every string here is pinned by
+ * the conformance suite and mirrored byte-identically by the cloud
+ * edition's handlers; none is editable without an owner-ratified wire
+ * change. Refusals are visible and actionable — never silent eviction
+ * (the ChatGPT Memory-Full pattern, DD-006 D5).
+ */
+/**
+ * The per-subject-per-org record ceiling, counted across ALL lifecycle
+ * states — proposed clutter counts, which pressures honest rejection over
+ * letting proposals pile up (DD-006 D5). Go MaxMemoriesPerSubject.
+ */
+export const MAX_MEMORIES_PER_SUBJECT = 100;
+/**
+ * Refuses a create once the subject's ceiling is reached — Go
+ * MemoryFullMessage.
+ */
+export const MEMORY_FULL_MESSAGE = "memory is full — review and delete existing memories";
+/**
+ * Refuses a create while the organization has not enabled memory — Go
+ * MemoryDisabledMessageFmt, taking the org slug.
+ */
+export function memoryDisabledMessage(org) {
+    return `memory is not enabled for organization ${org} — an organization admin can enable it in organization preferences`;
+}
+/**
+ * Refuses confirming a rejected memory: the decision is auditable and
+ * stands; a fresh proposal is the way back. Go
+ * MemoryConfirmRejectedMessage.
+ */
+export const MEMORY_CONFIRM_REJECTED_MESSAGE = "memory was rejected — delete it and let the agent propose it again";
+/**
+ * Refuses rejecting a confirmed memory: deletion IS the revocation of a
+ * confirmed fact (DD-006). Go MemoryRejectConfirmedMessage.
+ */
+export const MEMORY_REJECT_CONFIRMED_MESSAGE = "memory was confirmed — delete it to stop it from being recalled";
+/**
+ * Refuses an update that changes the subject: an editable subject would
+ * re-aim the record at another person. Go MemorySubjectImmutableMessage.
+ */
+export const MEMORY_SUBJECT_IMMUTABLE_MESSAGE = "spec.subject_identity_account_id is immutable — it is derived from the capturing credential at create";
+/**
+ * Refuses an update that changes provenance: attribution that can be
+ * edited is not attribution. Go MemoryProvenanceImmutableMessage.
+ */
+export const MEMORY_PROVENANCE_IMMUTABLE_MESSAGE = "spec.provenance is immutable — it records where the fact came from";
+//# sourceMappingURL=constants.js.map

package/dist/domain/memory/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/domain/memory/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,sDAAsD,CAAC;AAEzD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,0CAA0C,GAAG,oEAAoE,CAAC;AAC3H,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,oEAAoE,CAAC;AAEvE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,iEAAiE,CAAC;AAEpE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,uGAAuG,CAAC;AAE1G;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAC9C,oEAAoE,CAAC"}