@stigmer/server 3.14.0-dev.20260910084630

package/dist/boot/inprocess.js

@@ -0,0 +1,226 @@
+/**
+ * In-process ConnectRPC clients — the TS twin of Go's pkg/downstream/*
+ * packages (agent, agentinstance), which serve cross-domain calls through
+ * the same *grpc.Server over an in-memory bufconn so EVERY interceptor
+ * executes: an internal call is validated, logged, and kind-tagged exactly
+ * like an external one. Here the bufconn equivalent is ConnectRPC's
+ * `createRouterTransport` built from the SAME routes registration function
+ * the unified-port server uses, with the SAME interceptor chain EXCEPT the
+ * position-1 identity source (O2, ruling Q4): this chain stamps the
+ * `internal` caller class only it can mint, where the serving chain runs
+ * the verifier chassis over the wire's credentials. Chain traversal proven
+ * by spike SP-B (src/pipeline/__tests__/router-transport.test.ts): every
+ * interceptor runs, in registration order, and a chain rejection
+ * short-circuits with a ConnectError the in-process caller sees (DD-002).
+ *
+ * The agent↔agentinstance true cycle is broken at the CONSUMERS with lazy
+ * providers (`() => client`) resolved at call time; this module only
+ * supplies the client objects those providers close over.
+ */
+import { createClient, createRouterTransport } from "@connectrpc/connect";
+import { create } from "@bufbuild/protobuf";
+import { AgentCommandController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/command_pb";
+import { AgentQueryController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/query_pb";
+import { AgentIdSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/io_pb";
+import { McpServerCommandController } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/command_pb";
+import { ApiResourceDeleteInputSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/io_pb";
+import { SkillCommandController } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/command_pb";
+import { SkillIdSchema } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/io_pb";
+import { WorkflowCommandController } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/command_pb";
+import { AgentInstanceCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentinstance/v1/command_pb";
+import { AgentInstanceQueryController } from "@stigmer/protos/ai/stigmer/agentic/agentinstance/v1/query_pb";
+import { AgentInstanceIdSchema } from "@stigmer/protos/ai/stigmer/agentic/agentinstance/v1/io_pb";
+import { EnvironmentCommandController } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/command_pb";
+import { EnvironmentQueryController } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/query_pb";
+import { ExecutionContextCommandController } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/command_pb";
+import { SessionCommandController } from "@stigmer/protos/ai/stigmer/agentic/session/v1/command_pb";
+import { SessionQueryController } from "@stigmer/protos/ai/stigmer/agentic/session/v1/query_pb";
+import { SessionIdSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/io_pb";
+import { WorkflowQueryController } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/query_pb";
+import { WorkflowIdSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/io_pb";
+import { WorkflowInstanceCommandController } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/command_pb";
+import { WorkflowInstanceQueryController } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/query_pb";
+import { WorkflowInstanceIdSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/io_pb";
+import { AgentExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/command_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { buildInterceptorChain } from "../pipeline/chain.js";
+import { createInProcessCallerInterceptor, encodeInProcessCaller, IN_PROCESS_CALLER_HEADER, } from "../pipeline/interceptors/auth.js";
+/**
+ * Builds the in-process clients over a router transport that registers the
+ * SAME routes and runs the SAME interceptor chain as the serving router —
+ * validation parity is the point, exactly Go's bufconn shape.
+ */
+export function createInProcessClients(routes, logger) {
+    // Position 1 of this chain is the in-process identity stamper, NOT the
+    // serving chassis (O2, ruling Q4): every call through this transport
+    // carries the internal caller class, which only this chain can mint —
+    // the TS rendering of the Java in-process authorization skip. Positions
+    // 2–4 stay identical to the serving chain (validation parity, DD-002).
+    const transport = createRouterTransport(routes, {
+        router: {
+            interceptors: buildInterceptorChain(logger, createInProcessCallerInterceptor()),
+        },
+    });
+    const agentInstanceCommand = createClient(AgentInstanceCommandController, transport);
+    const agentInstanceQuery = createClient(AgentInstanceQueryController, transport);
+    const agentQuery = createClient(AgentQueryController, transport);
+    const sessionCommand = createClient(SessionCommandController, transport);
+    const sessionQuery = createClient(SessionQueryController, transport);
+    const environmentCommand = createClient(EnvironmentCommandController, transport);
+    const environmentQuery = createClient(EnvironmentQueryController, transport);
+    const executionContextCommand = createClient(ExecutionContextCommandController, transport);
+    const workflowInstanceCommand = createClient(WorkflowInstanceCommandController, transport);
+    const workflowInstanceQuery = createClient(WorkflowInstanceQueryController, transport);
+    const workflowQuery = createClient(WorkflowQueryController, transport);
+    const agentExecutionCommand = createClient(AgentExecutionCommandController, transport);
+    const agentCommand = createClient(AgentCommandController, transport);
+    const workflowCommand = createClient(WorkflowCommandController, transport);
+    const mcpServerCommand = createClient(McpServerCommandController, transport);
+    const skillCommand = createClient(SkillCommandController, transport);
+    // The caller-propagation call options (C2 Stage 3, ruling R5 — the
+    // Java posture restored): the ORIGINAL caller's identity rides the
+    // propagation header (the one client→router channel; contextValues are
+    // server-side); the in-process position-1 interceptor decodes it and
+    // stamps `origin: "in-process"` instead of minting internal. Explicit
+    // per call, never ambient (DD-007's threading doctrine); the serving
+    // chassis strips the header, so the wire cannot forge it.
+    const asCaller = (caller) => ({
+        headers: { [IN_PROCESS_CALLER_HEADER]: encodeInProcessCaller(caller) },
+    });
+    const clients = {
+        // The Apply RPC AS THE ORIGINAL CALLER (ruling R5; Java
+        // applyAsCaller): the default instance's owner attribution lands on
+        // the requesting user, so it stays manageable under an enforcing
+        // Authorizer. Pre-R5 this lane minted the internal class (Go's
+        // ApplyAsSystem shape) — the recorded attribution gap.
+        agentInstanceApplier: {
+            applyAsCaller: (instance, caller) => agentInstanceCommand.apply(instance, asCaller(caller)),
+        },
+        // CREATE (not apply) so a duplicate default-instance slug surfaces
+        // as AlreadyExists instead of silently updating — as the original
+        // caller (ruling R5).
+        agentInstanceCreator: {
+            createAsCaller: (instance, caller) => agentInstanceCommand.create(instance, asCaller(caller)),
+        },
+        parentAgentLoader: {
+            get: (agentId) => agentQuery.get(create(AgentIdSchema, { value: agentId })),
+        },
+        // CREATE (not apply) for the same AlreadyExists posture — as the
+        // original caller (ruling R5), matching the agent edge above.
+        workflowInstanceCreator: {
+            createAsCaller: (instance, caller) => workflowInstanceCommand.create(instance, asCaller(caller)),
+        },
+        // Go's workflow.Client.Get for workflowinstance create's parent load
+        // (server.go 657: the other direction of the mutual edge).
+        parentWorkflowLoader: {
+            get: (workflowId) => workflowQuery.get(create(WorkflowIdSchema, { value: workflowId })),
+        },
+        // The agentexecution edges: reads stay under the internal class (the
+        // daemon-safe default); the CREATES propagate the original caller
+        // (ruling R5) so instances and sessions born during execution create
+        // carry their real owner.
+        executionAgentLoader: {
+            get: (agentId) => agentQuery.get(create(AgentIdSchema, { value: agentId })),
+        },
+        executionAgentInstanceLoader: {
+            get: (instanceId) => agentInstanceQuery.get(create(AgentInstanceIdSchema, { value: instanceId })),
+        },
+        executionAgentInstanceCreator: {
+            createAsCaller: (instance, caller) => agentInstanceCommand.create(instance, asCaller(caller)),
+        },
+        executionSessionLoader: {
+            get: (sessionId) => sessionQuery.get(create(SessionIdSchema, { value: sessionId })),
+        },
+        executionSessionCreator: {
+            createAsCaller: (session, caller) => sessionCommand.create(session, asCaller(caller)),
+        },
+        executionEnvironmentReader: {
+            list: (request) => environmentQuery.list(request),
+            getSecretValue: (input) => environmentQuery.getSecretValue(input),
+            updateVariables: (request) => environmentCommand.updateVariables(request),
+            // The managed-env create propagates the connecting user when the
+            // lane has one (ruling R5 — the Java createAsCaller posture; parity
+            // entry 20260830.05): ownership tuples land on the user, not the
+            // unattributable internal class.
+            create: (environment, caller) => environmentCommand.create(environment, caller === undefined ? undefined : asCaller(caller)),
+            delete: (input) => environmentCommand.delete(input),
+        },
+        executionContextCreator: {
+            create: (ec) => executionContextCommand.create(ec),
+        },
+        connectExecutionContextClient: {
+            create: (ec) => executionContextCommand.create(ec),
+            delete: (input) => executionContextCommand.delete(input),
+        },
+        // The workflowexecution edges: the default-instance self-heal creates
+        // as the original caller (ruling R5), surfacing duplicate slugs as
+        // AlreadyExists exactly as before.
+        workflowExecutionInstanceCreator: {
+            createAsCaller: (instance, caller) => workflowInstanceCommand.create(instance, asCaller(caller)),
+        },
+        workflowExecutionInstanceLoader: {
+            get: (instanceId) => workflowInstanceQuery.get(create(WorkflowInstanceIdSchema, { value: instanceId })),
+        },
+        workflowExecutionContextCreator: {
+            create: (ec) => executionContextCommand.create(ec),
+        },
+        // The two HITL forwarding edges — Go's method-segregated
+        // AgentExecutionApprovalClient / AgentExecutionFileDecisionClient,
+        // both satisfied by the in-process agentexecution controller.
+        workflowExecutionApprovalForwarder: {
+            submitApproval: (input) => agentExecutionCommand.submitApproval(input),
+        },
+        workflowExecutionFileDecisionForwarder: {
+            submitFileDecision: (input) => agentExecutionCommand.submitFileDecision(input),
+        },
+        // The schedule clock's fire edge — the plain Create RPC (Go's
+        // ExecutionCreator). Since O2 every call through this transport
+        // carries the internal caller class stamped at position 1; its audit
+        // derivation equals the old process-global operator identity. A
+        // composed fire caller (the scheduleFireCaller driver point,
+        // stigmer-cloud#572) propagates instead — the RunStarter mints it per
+        // fire, so the created execution and its auto-created session carry
+        // the edition's schedule identity (ruling R5's asCaller lane).
+        scheduleExecutionCreator: {
+            create: (execution, fireCaller) => agentExecutionCommand.create(execution, fireCaller === undefined ? undefined : asCaller(fireCaller)),
+        },
+        // The worker's own-behalf status writes — the plain UpdateStatus RPC
+        // under the internal class (never asCaller: the fallback is the
+        // server's own reconciliation of a runner outcome, a daemon-origin
+        // write with no original caller to propagate, exactly the schedule
+        // clock's posture when no fire caller is composed).
+        executionStatusWriter: {
+            updateStatus: (input) => agentExecutionCommand.updateStatus(input),
+        },
+        // The project reconciler's delete routing — Go's
+        // ResourceDeleterAdapter.Delete switch (execution_engine.go:75-92).
+        // The unsupported-kind default is defense-in-depth kept for Go parity:
+        // the reconciler's slug resolver rejects unsupported kinds before any
+        // delete is attempted, in both editions. Log-only surface: reconcile
+        // failures never reach the wire.
+        projectOrphanDeleter: {
+            async delete(kind, resourceId) {
+                switch (kind) {
+                    case ApiResourceKind.agent:
+                        await agentCommand.delete(create(AgentIdSchema, { value: resourceId }));
+                        return;
+                    case ApiResourceKind.workflow:
+                        await workflowCommand.delete(create(WorkflowIdSchema, { value: resourceId }));
+                        return;
+                    case ApiResourceKind.mcp_server:
+                        // McpServer's delete input is the commons ApiResourceDeleteInput
+                        // (not an id wrapper) — Go's client builds the same message.
+                        await mcpServerCommand.delete(create(ApiResourceDeleteInputSchema, { resourceId }));
+                        return;
+                    case ApiResourceKind.skill:
+                        await skillCommand.delete(create(SkillIdSchema, { value: resourceId }));
+                        return;
+                    default:
+                        throw new Error(`unsupported resource kind for delete: ${ApiResourceKind[kind] ?? String(kind)}`);
+                }
+            },
+        },
+    };
+    return { clients, transport };
+}
+//# sourceMappingURL=inprocess.js.map

package/dist/boot/inprocess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inprocess.js","sourceRoot":"","sources":["../../src/boot/inprocess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,mDAAmD,CAAC;AAClF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sDAAsD,CAAC;AACpG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,MAAM,mDAAmD,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,8BAA8B,EAAE,MAAM,gEAAgE,CAAC;AAChH,OAAO,EAAE,4BAA4B,EAAE,MAAM,8DAA8D,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,2DAA2D,CAAC;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,8DAA8D,CAAC;AAC5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,iCAAiC,EAAE,MAAM,mEAAmE,CAAC;AACtH,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AACxF,OAAO,EAAE,iCAAiC,EAAE,MAAM,mEAAmE,CAAC;AACtH,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AACxG,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AA2BlH,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAItH,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EACL,gCAAgC,EAChC,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AA0F1C;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAuC,EACvC,MAAc;IAEd,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,EAAE;QAC9C,MAAM,EAAE;YACN,YAAY,EAAE,qBAAqB,CACjC,MAAM,EACN,gCAAgC,EAAE,CACnC;SACF;KACF,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,YAAY,CACvC,8BAA8B,EAC9B,SAAS,CACV,CAAC;IACF,MAAM,kBAAkB,GAAG,YAAY,CACrC,4BAA4B,EAC5B,SAAS,CACV,CAAC;IACF,MAAM,UAAU,GAAG,YAAY,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,YAAY,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,YAAY,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,kBAAkB,GAAG,YAAY,CACrC,4BAA4B,EAC5B,SAAS,CACV,CAAC;IACF,MAAM,gBAAgB,GAAG,YAAY,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;IAC7E,MAAM,uBAAuB,GAAG,YAAY,CAC1C,iCAAiC,EACjC,SAAS,CACV,CAAC;IACF,MAAM,uBAAuB,GAAG,YAAY,CAC1C,iCAAiC,EACjC,SAAS,CACV,CAAC;IACF,MAAM,qBAAqB,GAAG,YAAY,CACxC,+BAA+B,EAC/B,SAAS,CACV,CAAC;IACF,MAAM,aAAa,GAAG,YAAY,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IACvE,MAAM,qBAAqB,GAAG,YAAY,CACxC,+BAA+B,EAC/B,SAAS,CACV,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,YAAY,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC;IAC3E,MAAM,gBAAgB,GAAG,YAAY,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,YAAY,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IAErE,mEAAmE;IACnE,mEAAmE;IACnE,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,qEAAqE;IACrE,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAe,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE;KACvE,CAAC,CAAC;IAEH,MAAM,OAAO,GAAqB;QAChC,wDAAwD;QACxD,oEAAoE;QACpE,iEAAiE;QACjE,+DAA+D;QAC/D,uDAAuD;QACvD,oBAAoB,EAAE;YACpB,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAClC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;SACzD;QACD,mEAAmE;QACnE,kEAAkE;QAClE,sBAAsB;QACtB,oBAAoB,EAAE;YACpB,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACnC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC1D;QACD,iBAAiB,EAAE;YACjB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CACf,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;SAC5D;QACD,iEAAiE;QACjE,8DAA8D;QAC9D,uBAAuB,EAAE;YACvB,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACnC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC7D;QACD,qEAAqE;QACrE,2DAA2D;QAC3D,oBAAoB,EAAE;YACpB,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAClB,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;SACrE;QACD,qEAAqE;QACrE,kEAAkE;QAClE,qEAAqE;QACrE,0BAA0B;QAC1B,oBAAoB,EAAE;YACpB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CACf,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;SAC5D;QACD,4BAA4B,EAAE;YAC5B,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAClB,kBAAkB,CAAC,GAAG,CACpB,MAAM,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CACrD;SACJ;QACD,6BAA6B,EAAE;YAC7B,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACnC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC1D;QACD,sBAAsB,EAAE;YACtB,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CACjB,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;SAClE;QACD,uBAAuB,EAAE;YACvB,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAClC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;SACnD;QACD,0BAA0B,EAAE;YAC1B,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;YACjD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,KAAK,CAAC;YACjE,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,eAAe,CAAC,OAAO,CAAC;YACzE,iEAAiE;YACjE,oEAAoE;YACpE,iEAAiE;YACjE,iCAAiC;YACjC,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAC9B,kBAAkB,CAAC,MAAM,CACvB,WAAW,EACX,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACpD;YACH,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC;SACpD;QACD,uBAAuB,EAAE;YACvB,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;SACnD;QACD,6BAA6B,EAAE;YAC7B,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC;SACzD;QACD,sEAAsE;QACtE,mEAAmE;QACnE,mCAAmC;QACnC,gCAAgC,EAAE;YAChC,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACnC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC7D;QACD,+BAA+B,EAAE;YAC/B,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAClB,qBAAqB,CAAC,GAAG,CACvB,MAAM,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CACxD;SACJ;QACD,+BAA+B,EAAE;YAC/B,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;SACnD;QACD,yDAAyD;QACzD,mEAAmE;QACnE,8DAA8D;QAC9D,kCAAkC,EAAE;YAClC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,cAAc,CAAC,KAAK,CAAC;SACvE;QACD,sCAAsC,EAAE;YACtC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5B,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC;SAClD;QACD,8DAA8D;QAC9D,gEAAgE;QAChE,qEAAqE;QACrE,gEAAgE;QAChE,6DAA6D;QAC7D,sEAAsE;QACtE,oEAAoE;QACpE,+DAA+D;QAC/D,wBAAwB,EAAE;YACxB,MAAM,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAChC,qBAAqB,CAAC,MAAM,CAC1B,SAAS,EACT,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC5D;SACJ;QACD,qEAAqE;QACrE,gEAAgE;QAChE,mEAAmE;QACnE,mEAAmE;QACnE,oDAAoD;QACpD,qBAAqB,EAAE;YACrB,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,CAAC,KAAK,CAAC;SACnE;QACD,iDAAiD;QACjD,oEAAoE;QACpE,uEAAuE;QACvE,sEAAsE;QACtE,qEAAqE;QACrE,iCAAiC;QACjC,oBAAoB,EAAE;YACpB,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU;gBAC3B,QAAQ,IAAI,EAAE,CAAC;oBACb,KAAK,eAAe,CAAC,KAAK;wBACxB,MAAM,YAAY,CAAC,MAAM,CACvB,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAC7C,CAAC;wBACF,OAAO;oBACT,KAAK,eAAe,CAAC,QAAQ;wBAC3B,MAAM,eAAe,CAAC,MAAM,CAC1B,MAAM,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAChD,CAAC;wBACF,OAAO;oBACT,KAAK,eAAe,CAAC,UAAU;wBAC7B,iEAAiE;wBACjE,6DAA6D;wBAC7D,MAAM,gBAAgB,CAAC,MAAM,CAC3B,MAAM,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,CAAC,CACrD,CAAC;wBACF,OAAO;oBACT,KAAK,eAAe,CAAC,KAAK;wBACxB,MAAM,YAAY,CAAC,MAAM,CACvB,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAC7C,CAAC;wBACF,OAAO;oBACT;wBACE,MAAM,IAAI,KAAK,CACb,yCAAyC,eAAe,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CACjF,CAAC;gBACN,CAAC;YACH,CAAC;SACF;KACF,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}

package/dist/boot/logger.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Leveled structured logger for the server process.
+ *
+ * Hand-rolled rather than a dependency: the repo's TS services have no
+ * logging library precedent (the runner logs through raw console and
+ * Temporal's runtime), and the server's needs are exactly four levels, a
+ * threshold, structured fields, and two output shapes. Go's zerolog
+ * behavior is the reference: NDJSON to stderr in deployed environments,
+ * human-readable console output when ENV=local (server.go:939), stdout
+ * untouched.
+ *
+ * The sink is the one seam for a structured export. A deployable that
+ * ships records to a collector (the cloud composition's OTLP log export,
+ * convergence entry 20260909.05; a self-hosting team's own exporter next)
+ * needs the entry — level, instant, message, fields — not the formatted
+ * line, and it needs it exactly for the lines the threshold let through,
+ * so LOG_LEVEL governs every output from one place. The written line stays
+ * the operator's `kubectl logs` view, unchanged whether a sink is present
+ * or not; the sink is called after the write, so a stderr fault skips the
+ * export of that line rather than the reverse. This module stays free of
+ * runtime dependencies on purpose: the SDK that turns an entry into a
+ * record belongs to the deployable that chose a collector.
+ *
+ * The level tiering CONTRACT lives in the logging interceptor
+ * (pipeline/interceptors/logging.ts) — this module only provides the
+ * mechanism.
+ */
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export type LogFields = Record<string, unknown>;
+export interface Logger {
+    debug(message: string, fields?: LogFields): void;
+    info(message: string, fields?: LogFields): void;
+    warn(message: string, fields?: LogFields): void;
+    error(message: string, fields?: LogFields): void;
+}
+/**
+ * One log line, structured, as a sink receives it: computed once per
+ * emission, so the written line and the exported record carry the same
+ * instant and the same fields.
+ */
+export interface LogEntry {
+    readonly level: LogLevel;
+    readonly time: Date;
+    readonly message: string;
+    readonly fields: LogFields | undefined;
+}
+/**
+ * Receives every entry that passed the threshold, after the line is
+ * written. A sink owns its own failure handling — the logger is called
+ * from every hot path in the process and never wraps the sink in a
+ * try/catch it would then have to log through itself.
+ */
+export type LogSink = (entry: LogEntry) => void;
+export interface LoggerOptions {
+    /** Threshold; entries below it are dropped. Unknown values mean "info". */
+    level: string;
+    /** Human-readable output (ENV=local) instead of NDJSON. */
+    pretty: boolean;
+    /** Test seam; defaults to stderr so stdout stays clean for tooling. */
+    write?: (line: string) => void;
+    /** Structured export seam; absent means the written line is the only output. */
+    sink?: LogSink;
+}
+export declare function createLogger(options: LoggerOptions): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/boot/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/boot/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAClD;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;AAShD,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,MAAM,EAAE,OAAO,CAAC;IAChB,uEAAuE;IACvE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,gFAAgF;IAChF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAiC3D"}

package/dist/boot/logger.js

@@ -0,0 +1,61 @@
+/**
+ * Leveled structured logger for the server process.
+ *
+ * Hand-rolled rather than a dependency: the repo's TS services have no
+ * logging library precedent (the runner logs through raw console and
+ * Temporal's runtime), and the server's needs are exactly four levels, a
+ * threshold, structured fields, and two output shapes. Go's zerolog
+ * behavior is the reference: NDJSON to stderr in deployed environments,
+ * human-readable console output when ENV=local (server.go:939), stdout
+ * untouched.
+ *
+ * The sink is the one seam for a structured export. A deployable that
+ * ships records to a collector (the cloud composition's OTLP log export,
+ * convergence entry 20260909.05; a self-hosting team's own exporter next)
+ * needs the entry — level, instant, message, fields — not the formatted
+ * line, and it needs it exactly for the lines the threshold let through,
+ * so LOG_LEVEL governs every output from one place. The written line stays
+ * the operator's `kubectl logs` view, unchanged whether a sink is present
+ * or not; the sink is called after the write, so a stderr fault skips the
+ * export of that line rather than the reverse. This module stays free of
+ * runtime dependencies on purpose: the SDK that turns an entry into a
+ * record belongs to the deployable that chose a collector.
+ *
+ * The level tiering CONTRACT lives in the logging interceptor
+ * (pipeline/interceptors/logging.ts) — this module only provides the
+ * mechanism.
+ */
+const LEVEL_RANK = {
+    debug: 10,
+    info: 20,
+    warn: 30,
+    error: 40,
+};
+export function createLogger(options) {
+    const threshold = LEVEL_RANK[options.level] ?? LEVEL_RANK.info;
+    const write = options.write ?? ((line) => process.stderr.write(line + "\n"));
+    const sink = options.sink;
+    const emit = (level, message, fields) => {
+        if (LEVEL_RANK[level] < threshold) {
+            return;
+        }
+        const time = new Date();
+        if (options.pretty) {
+            const suffix = fields === undefined || Object.keys(fields).length === 0
+                ? ""
+                : " " + JSON.stringify(fields);
+            write(`${time.toISOString()} ${level.toUpperCase().padEnd(5)} ${message}${suffix}`);
+        }
+        else {
+            write(JSON.stringify({ level, time: time.toISOString(), message, ...fields }));
+        }
+        sink?.({ level, time, message, fields });
+    };
+    return {
+        debug: (message, fields) => emit("debug", message, fields),
+        info: (message, fields) => emit("info", message, fields),
+        warn: (message, fields) => emit("warn", message, fields),
+        error: (message, fields) => emit("error", message, fields),
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/boot/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/boot/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAiCH,MAAM,UAAU,GAA6B;IAC3C,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC;AAaF,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,KAAiB,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;IAC3E,MAAM,KAAK,GACT,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,MAAkB,EAAQ,EAAE;QAC1E,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,SAAS,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,MAAM,GACV,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;gBACtD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACnC,KAAK,CACH,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,MAAM,EAAE,CAC7E,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CACH,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAC1D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACxD,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACxD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;KAC3D,CAAC;AACJ,CAAC"}

package/dist/domain/agent/controller.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Agent controller — ports pkg/domain/agent/controller (command + query
+ * sides): the agent BLUEPRINT surface. Create provisions the agent's
+ * default instance through the in-process agentinstance client (the
+ * agent↔agentinstance mutual edge, wired as a lazy provider in the
+ * composition root — sub-project DD-002); delete cascades ALL instances
+ * (oss#611) and same-org shares before the agent row; GetDefault serves
+ * the platform default-agent resolution (defaultagent.ts).
+ *
+ * Pipeline per RPC mirrors the Go step chains character-for-character.
+ * Proven by agent.conformance.test.ts (CONFORMANCE_TARGET=local) and
+ * __tests__/agent.test.ts.
+ *
+ * Versus Stigmer Cloud, OSS excludes the Authorize, CreateIamPolicies, and
+ * Publish steps (no multi-tenant auth, IAM/FGA, or event publishing here).
+ */
+import type { ConnectRouter } from "@connectrpc/connect";
+import type { Logger } from "../../boot/logger.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { ResourceAuthorizationLifecycle } from "../../extensions/resource-authorization.js";
+import type { Store } from "../../store/interface.js";
+import type { AgentInstanceApplierProvider } from "./steps.js";
+export interface AgentControllerDeps {
+    readonly store: Store;
+    readonly logger: Logger;
+    /** The composed authorization seam — the Authorize step at position 1 of every chain calls it (O2, DD-007 §3). */
+    readonly authorizer: Authorizer;
+    /** The composed tuple-lifecycle driver — undefined = the shared steps no-op (C2). */
+    readonly authorizationLifecycle: ResourceAuthorizationLifecycle | undefined;
+    /**
+     * The agentinstance in-process edge — a lazy provider because
+     * agent↔agentinstance is a true dependency cycle (DD-002; the ratified
+     * DI story breaks cycles with `() => client` closures resolved at call
+     * time, never at construction).
+     */
+    readonly agentInstanceApplier: AgentInstanceApplierProvider;
+}
+/** Registers both agent services on the router (routes stage). */
+export declare function registerAgentServices(router: ConnectRouter, deps: AgentControllerDeps): void;
+//# sourceMappingURL=controller.d.ts.map

package/dist/domain/agent/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../src/domain/agent/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAC;AAgBzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AA2DjG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAWtD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kHAAkH;IAClH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,qFAAqF;IACrF,QAAQ,CAAC,sBAAsB,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC5E;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,EAAE,4BAA4B,CAAC;CAC7D;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,mBAAmB,GACxB,IAAI,CAaN"}