@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/agent/controller.js

@@ -0,0 +1,278 @@
+import { AgentCommandController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/command_pb";
+import { AgentQueryController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/query_pb";
+import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { apiResourceKindKey } from "../../pipeline/interceptors/apiresource.js";
+import { internalError, notFoundError } from "../../pipeline/errors.js";
+import { newPipeline } from "../../pipeline/pipeline.js";
+import { callerIdentityOf } from "../../pipeline/interceptors/auth.js";
+import { RequestContext } from "../../pipeline/request-context.js";
+import { newAuthorizeStep } from "../../pipeline/steps/authorize.js";
+import { newGuardReservedLabelsStep } from "../../pipeline/steps/guard-reserved-labels.js";
+import { newAuthorizeVisibilityTransitionStep, newGuardPublicVisibilityStep, } from "../../pipeline/steps/visibility-gates.js";
+import { newBuildNewStateStep, setAuditFieldsForUpdate, } from "../../pipeline/steps/defaults.js";
+import { newBuildUpdateStateStep } from "../../pipeline/steps/build-update-state.js";
+import { newCheckDuplicateStep } from "../../pipeline/steps/duplicate.js";
+import { newDeleteResourceStep, newExtractResourceIdStep, newLoadExistingForDeleteStep, } from "../../pipeline/steps/delete.js";
+import { newDeleteSearchIndexStep, newIndexSearchStep, } from "../../pipeline/steps/index-search.js";
+import { EXISTING_RESOURCE_KEY, newLoadExistingStep, } from "../../pipeline/steps/load-existing.js";
+import { SHOULD_CREATE_KEY, newLoadForApplyStep, withResolvedApplyId, } from "../../pipeline/steps/load-for-apply.js";
+import { newLoadByReferenceStep } from "../../pipeline/steps/load-by-reference.js";
+import { TARGET_RESOURCE_KEY, newLoadTargetStep, } from "../../pipeline/steps/load-target.js";
+import { newNormalizeReferencesStep, newValidateReferencesStep, } from "../../pipeline/steps/references.js";
+import { newCleanupIamPoliciesStep, newCreateAuthorizationTuplesStep, newRecordVisibilityBeforeUpdateStep, newUpdateVisibilityTuplesStep, } from "../../pipeline/steps/authorization-tuples.js";
+import { newPersistStep } from "../../pipeline/steps/persist.js";
+import { newResolveSlugStep } from "../../pipeline/steps/slug.js";
+import { newValidateProtoStep } from "../../pipeline/steps/validation.js";
+import { newValidateVisibilityStep, newValidateVisibilityUpdateStep, } from "../../pipeline/steps/validate-visibility.js";
+import { agentSearchExtractor } from "./search-extractor.js";
+import { newCascadeDeleteInstancesStep, newCascadeDeleteSharesStep, newCreateDefaultInstanceStep, newLoadDefaultAgentStep, newMergeMcpServerEnvSpecsStep, newUpdateAgentStatusWithDefaultInstanceStep, newValidateEnabledToolsStep, } from "./steps.js";
+/** Registers both agent services on the router (routes stage). */
+export function registerAgentServices(router, deps) {
+    router.service(AgentCommandController, {
+        apply: (agent, ctx) => apply(deps, agent, ctx),
+        create: (agent, ctx) => createAgent(deps, agent, ctx),
+        update: (agent, ctx) => update(deps, agent, ctx),
+        updateVisibility: (input, ctx) => updateVisibility(deps, input, ctx),
+        delete: (id, ctx) => deleteAgent(deps, id, ctx),
+    });
+    router.service(AgentQueryController, {
+        get: (id, ctx) => get(deps, id, ctx),
+        getByReference: (ref, ctx) => getByReference(deps, ref, ctx),
+        getDefault: (req, ctx) => getDefault(deps, req, ctx),
+    });
+}
+function kindOf(ctx) {
+    return ctx.values.get(apiResourceKindKey);
+}
+/**
+ * Create — chain per Go buildCreatePipeline: the default instance is
+ * applied AFTER Persist (children need the parent's id), then the agent's
+ * status.default_instance_id is written in an explicit second persist.
+ */
+async function createAgent(deps, agent, ctx) {
+    const reqCtx = new RequestContext(AgentSchema, agent, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-create", deps.logger)
+        .addStep(newAuthorizeStep(AgentCommandController.method.create, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newValidateVisibilityStep())
+        .addStep(newResolveSlugStep())
+        .addStep(newCheckDuplicateStep(deps.store))
+        .addStep(newBuildNewStateStep())
+        .addStep(newGuardPublicVisibilityStep(deps.authorizer))
+        .addStep(newGuardReservedLabelsStep(deps.authorizer))
+        .addStep(newNormalizeReferencesStep())
+        .addStep(newValidateReferencesStep(deps.store))
+        .addStep(newValidateEnabledToolsStep(deps.store))
+        .addStep(newMergeMcpServerEnvSpecsStep(deps.store, deps.logger))
+        .addStep(newPersistStep(deps.store))
+        .addStep(newCreateAuthorizationTuplesStep(deps.authorizationLifecycle, deps.logger))
+        .addStep(newCreateDefaultInstanceStep(deps.agentInstanceApplier, deps.logger))
+        .addStep(newUpdateAgentStatusWithDefaultInstanceStep(deps.store, deps.logger, deps.authorizationLifecycle))
+        .addStep(newIndexSearchStep(deps.store, agentSearchExtractor, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.newState;
+}
+/** Update — chain per Go buildUpdatePipeline. */
+async function update(deps, agent, ctx) {
+    const reqCtx = new RequestContext(AgentSchema, agent, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-update", deps.logger)
+        .addStep(newAuthorizeStep(AgentCommandController.method.update, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveSlugStep())
+        .addStep(newLoadExistingStep(deps.store))
+        .addStep(newBuildUpdateStateStep())
+        .addStep(newGuardReservedLabelsStep(deps.authorizer))
+        .addStep(newNormalizeReferencesStep())
+        .addStep(newValidateReferencesStep(deps.store))
+        .addStep(newValidateEnabledToolsStep(deps.store))
+        .addStep(newMergeMcpServerEnvSpecsStep(deps.store, deps.logger))
+        .addStep(newPersistStep(deps.store))
+        .addStep(newIndexSearchStep(deps.store, agentSearchExtractor, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.newState;
+}
+/**
+ * Apply — kubectl-style create-or-update: a minimal probe pipeline decides
+ * existence, then delegates to Create or Update with the ORIGINAL request
+ * message (Go delegates `agent`, not the pipeline's mutated clone);
+ * the update arm carries the resolved id via withResolvedApplyId.
+ */
+async function apply(deps, agent, ctx) {
+    const reqCtx = new RequestContext(AgentSchema, agent, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-apply", deps.logger)
+        .addStep(newAuthorizeStep(AgentCommandController.method.apply, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveSlugStep())
+        .addStep(newLoadForApplyStep(deps.store))
+        .build()
+        .execute(reqCtx);
+    const shouldCreate = reqCtx.get(SHOULD_CREATE_KEY);
+    if (typeof shouldCreate !== "boolean") {
+        throw internalError(new Error("apply pipeline did not set shouldCreate flag"), "apply operation failed to determine create vs update");
+    }
+    return shouldCreate
+        ? createAgent(deps, agent, ctx)
+        : update(deps, withResolvedApplyId(AgentSchema, agent, reqCtx), ctx);
+}
+/**
+ * Delete — cascades children before the parent (delete_cascade.go):
+ * ALL instances, then same-org shares, then the agent row and its index
+ * entry. Returns the deleted agent (the audit-trail convention).
+ */
+async function deleteAgent(deps, agentId, ctx) {
+    const reqCtx = new RequestContext(AgentCommandController.method.delete.input, agentId, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-delete", deps.logger)
+        .addStep(newAuthorizeStep(AgentCommandController.method.delete, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newExtractResourceIdStep())
+        .addStep(newLoadExistingForDeleteStep(deps.store, AgentSchema))
+        .addStep(newCascadeDeleteInstancesStep(deps.store, deps.logger))
+        .addStep(newCascadeDeleteSharesStep(deps.store, deps.logger))
+        .addStep(newDeleteResourceStep(deps.store))
+        .addStep(newCleanupIamPoliciesStep(deps.authorizationLifecycle, deps.logger))
+        .addStep(newDeleteSearchIndexStep(deps.store, deps.logger))
+        .build()
+        .execute(reqCtx);
+    const deleted = reqCtx.get(EXISTING_RESOURCE_KEY);
+    if (deleted === undefined) {
+        throw internalError(new Error("deleted agent not found in context"), "deleted agent not found in context");
+    }
+    return deleted;
+}
+// ---------------------------------------------------------------------------
+// updateVisibility — update_visibility.go: a targeted metadata update (only
+// metadata.visibility changes; spec/status untouched). The level check runs
+// AFTER load, preserving the cross-edition error precedence: unknown id +
+// bad level = NOT_FOUND on both editions.
+// ---------------------------------------------------------------------------
+const UPDATE_VISIBILITY_AGENT_KEY = "updateVisibilityAgent";
+async function updateVisibility(deps, input, ctx) {
+    const reqCtx = new RequestContext(AgentCommandController.method.updateVisibility.input, input, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-update-visibility", deps.logger)
+        .addStep(newAuthorizeStep(AgentCommandController.method.updateVisibility, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadAgentForVisibilityUpdateStep(deps.store))
+        .addStep(newRecordVisibilityBeforeUpdateStep(UPDATE_VISIBILITY_AGENT_KEY))
+        .addStep(newValidateVisibilityUpdateStep())
+        .addStep(newAuthorizeVisibilityTransitionStep(UPDATE_VISIBILITY_AGENT_KEY, deps.authorizer))
+        .addStep(newSetAgentVisibilityStep())
+        .addStep(newPersistAgentForVisibilityUpdateStep(deps.store))
+        .addStep(newUpdateVisibilityTuplesStep(deps.authorizationLifecycle, UPDATE_VISIBILITY_AGENT_KEY))
+        .addStep(newIndexAgentAfterVisibilityUpdateStep(deps.store, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(UPDATE_VISIBILITY_AGENT_KEY);
+}
+/** Loads the agent by resource_id; ANY load failure → NotFound. */
+function newLoadAgentForVisibilityUpdateStep(store) {
+    return {
+        name: "LoadAgentForVisibilityUpdate",
+        async execute(ctx) {
+            const input = ctx.input;
+            let agent;
+            try {
+                agent = await store.getResource(ApiResourceKind.agent, input.resourceId, AgentSchema);
+            }
+            catch {
+                throw notFoundError("agent", input.resourceId);
+            }
+            ctx.set(UPDATE_VISIBILITY_AGENT_KEY, agent);
+        },
+    };
+}
+/** Sets metadata.visibility and stamps the StatusAudit slot (#540). */
+function newSetAgentVisibilityStep() {
+    return {
+        name: "SetAgentVisibility",
+        execute(ctx) {
+            const agent = ctx.get(UPDATE_VISIBILITY_AGENT_KEY);
+            if (agent.metadata !== undefined) {
+                agent.metadata.visibility = ctx.input.visibility;
+            }
+            setAuditFieldsForUpdate(AgentSchema, agent, "status_audit", ctx.callerIdentity);
+        },
+    };
+}
+/** Persists the visibility change. */
+function newPersistAgentForVisibilityUpdateStep(store) {
+    return {
+        name: "PersistAgentForVisibilityUpdate",
+        async execute(ctx) {
+            const agent = ctx.get(UPDATE_VISIBILITY_AGENT_KEY);
+            try {
+                await store.saveResource(ApiResourceKind.agent, agent.metadata?.id ?? "", AgentSchema, agent);
+            }
+            catch (error) {
+                throw internalError(error, "failed to save agent");
+            }
+        },
+    };
+}
+/**
+ * Re-indexes after the visibility change (visibility is an indexed field).
+ * Domain-local because the shared IndexSearch reads newState, which is the
+ * UpdateVisibilityInput here, not the agent. Best-effort by contract.
+ */
+function newIndexAgentAfterVisibilityUpdateStep(store, logger) {
+    return {
+        name: "IndexAgentAfterVisibilityUpdate",
+        async execute(ctx) {
+            const agent = ctx.get(UPDATE_VISIBILITY_AGENT_KEY);
+            const entry = agentSearchExtractor.getSearchIndexEntry(agent);
+            if (entry === undefined) {
+                logger.warn("IndexAgentAfterVisibilityUpdate: extractor returned nil, skipping", { id: agent.metadata?.id ?? "" });
+                return;
+            }
+            try {
+                await store.upsertSearchIndex(ApiResourceKind.agent, agent.metadata?.id ?? "", entry);
+            }
+            catch (error) {
+                logger.warn("IndexAgentAfterVisibilityUpdate: failed (best-effort)", {
+                    id: agent.metadata?.id ?? "",
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        },
+    };
+}
+/** Get — LoadTarget by id (Go's chain has no ExtractResourceId here). */
+async function get(deps, id, ctx) {
+    const reqCtx = new RequestContext(AgentQueryController.method.get.input, id, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-get", deps.logger)
+        .addStep(newAuthorizeStep(AgentQueryController.method.get, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadTargetStep(deps.store, AgentSchema))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+/** GetByReference — slug+org lookup. */
+async function getByReference(deps, ref, ctx) {
+    const reqCtx = new RequestContext(AgentQueryController.method.getByReference.input, ref, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-get-by-reference", deps.logger)
+        .addStep(newAuthorizeStep(AgentQueryController.method.getByReference, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadByReferenceStep(deps.store, AgentSchema))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+/**
+ * GetDefault — the platform default agent (label + visibility_public,
+ * incumbent-wins). Used by frontends for the session-first UX where users
+ * start a conversation without explicitly selecting an agent.
+ */
+async function getDefault(deps, req, ctx) {
+    const reqCtx = new RequestContext(AgentQueryController.method.getDefault.input, req, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-get-default", deps.logger)
+        .addStep(newAuthorizeStep(AgentQueryController.method.getDefault, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadDefaultAgentStep(deps.store, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+//# sourceMappingURL=controller.js.map

package/dist/domain/agent/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../src/domain/agent/controller.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AAUjF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAKtH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EACL,oCAAoC,EACpC,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACnF,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EACL,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAC7B,2CAA2C,EAC3C,2BAA2B,GAC5B,MAAM,YAAY,CAAC;AAmBpB,kEAAkE;AAClE,MAAM,UAAU,qBAAqB,CACnC,MAAqB,EACrB,IAAyB;IAEzB,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE;QACrC,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAC9C,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QACrD,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAChD,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QACpE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE;QACnC,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;QACpC,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QAC5D,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;KACrD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,GAAmB;IACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACxB,IAAyB,EACzB,KAAY,EACZ,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,WAAW,EACX,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAAqB,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC;SAC/D,OAAO,CACN,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CACxE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,yBAAyB,EAAE,CAAC;SACpC,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACtD,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACpD,OAAO,CAAC,0BAA0B,EAAE,CAAC;SACrC,OAAO,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC9C,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAChD,OAAO,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC/D,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACnC,OAAO,CACN,gCAAgC,CAC9B,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,MAAM,CACZ,CACF;SACA,OAAO,CACN,4BAA4B,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,CACrE;SACA,OAAO,CACN,2CAA2C,CACzC,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,sBAAsB,CAC5B,CACF;SACA,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC1E,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED,iDAAiD;AACjD,KAAK,UAAU,MAAM,CACnB,IAAyB,EACzB,KAAY,EACZ,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,WAAW,EACX,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAAqB,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC;SAC/D,OAAO,CACN,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CACxE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACxC,OAAO,CAAC,uBAAuB,EAAE,CAAC;SAClC,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACpD,OAAO,CAAC,0BAA0B,EAAE,CAAC;SACrC,OAAO,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC9C,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAChD,OAAO,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC/D,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACnC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC1E,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,KAAK,CAClB,IAAyB,EACzB,KAAY,EACZ,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,WAAW,EACX,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAAqB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC;SAC9D,OAAO,CACN,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CACvE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACxC,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,8CAA8C,CAAC,EACzD,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,YAAY;QACjB,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACxB,IAAyB,EACzB,OAAgB,EAChB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAC1C,OAAO,EACP,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,cAAc,EACd,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CACxE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,wBAAwB,EAAE,CAAC;SACnC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;SAC9D,OAAO,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC/D,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC5D,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,OAAO,CACN,yBAAyB,CAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,MAAM,CAAC,CACpE;SACA,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC1D,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,oCAAoC,CAAC,EAC/C,oCAAoC,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,OAAgB,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,0CAA0C;AAC1C,8EAA8E;AAE9E,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AAK5D,KAAK,UAAU,gBAAgB,CAC7B,IAAyB,EACzB,KAA4B,EAC5B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,sBAAsB,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,EACpD,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,yBAAyB,EACzB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,sBAAsB,CAAC,MAAM,CAAC,gBAAgB,EAC9C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACxD,OAAO,CAAC,mCAAmC,CAAC,2BAA2B,CAAC,CAAC;SACzE,OAAO,CAAC,+BAA+B,EAAE,CAAC;SAC1C,OAAO,CACN,oCAAoC,CAClC,2BAA2B,EAC3B,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,yBAAyB,EAAE,CAAC;SACpC,OAAO,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC3D,OAAO,CACN,6BAA6B,CAC3B,IAAI,CAAC,sBAAsB,EAC3B,2BAA2B,CAC5B,CACF;SACA,OAAO,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SACxE,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,OAAO,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAU,CAAC;AAC1D,CAAC;AAED,mEAAmE;AACnE,SAAS,mCAAmC,CAC1C,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,KAAK,CAAC,OAAO,CAAC,GAAyC;YACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACxB,IAAI,KAAY,CAAC;YACjB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAC7B,eAAe,CAAC,KAAK,EACrB,KAAK,CAAC,UAAU,EAChB,WAAW,CACZ,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACjD,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,yBAAyB;IAChC,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,OAAO,CAAC,GAAyC;YAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAU,CAAC;YAC5D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACjC,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YACnD,CAAC;YACD,uBAAuB,CACrB,WAAW,EACX,KAAK,EACL,cAAc,EACd,GAAG,CAAC,cAAc,CACnB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,sCAAsC;AACtC,SAAS,sCAAsC,CAC7C,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,KAAK,CAAC,OAAO,CAAC,GAAyC;YACrD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAU,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CACtB,eAAe,CAAC,KAAK,EACrB,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EACxB,WAAW,EACX,KAAK,CACN,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,sCAAsC,CAC7C,KAAY,EACZ,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,KAAK,CAAC,OAAO,CAAC,GAAyC;YACrD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAU,CAAC;YAC5D,MAAM,KAAK,GAAG,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CACT,mEAAmE,EACnE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,CACjC,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,iBAAiB,CAC3B,eAAe,CAAC,KAAK,EACrB,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EACxB,KAAK,CACN,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;oBACnE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;oBAC5B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,GAAG,CAChB,IAAyB,EACzB,EAAW,EACX,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EACrC,EAAE,EACF,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,WAAW,EACX,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;SAC3E,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;SACnD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAU,CAAC;AAClD,CAAC;AAED,wCAAwC;AACxC,KAAK,UAAU,cAAc,CAC3B,IAAyB,EACzB,GAAyB,EACzB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAChD,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,wBAAwB,EACxB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,oBAAoB,CAAC,MAAM,CAAC,cAAc,EAC1C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;SACxD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAU,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,IAAyB,EACzB,GAA2B,EAC3B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAC5C,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,mBAAmB,EACnB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAC1E;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SACzD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAU,CAAC;AAClD,CAAC"}

package/dist/domain/agent/defaultagent.d.ts

@@ -0,0 +1,37 @@
+import type { Agent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import type { Logger } from "../../boot/logger.js";
+import type { Store } from "../../store/interface.js";
+/** Marks the platform default agent; the value must be DEFAULT_AGENT_LABEL_VALUE. */
+export declare const DEFAULT_AGENT_LABEL = "stigmer.ai/default-agent";
+/** The only value of DEFAULT_AGENT_LABEL that marks an agent as the default. */
+export declare const DEFAULT_AGENT_LABEL_VALUE = "true";
+/**
+ * No agent carries the default-agent label. Call sites map this to
+ * NotFound with their own caller-facing copy (Go ErrNotConfigured).
+ */
+export declare class DefaultAgentNotConfiguredError extends Error {
+    constructor();
+}
+/**
+ * Labeled agents exist but none is visibility_public. Call sites map this
+ * to FailedPrecondition — a deliberate divergence from the cloud edition,
+ * whose SQL predicate collapses this state into "not found": the distinct
+ * code tells a self-hosting operator the label is present but the
+ * visibility is wrong (Go ErrNotPublic).
+ */
+export declare class DefaultAgentNotPublicError extends Error {
+    constructor();
+}
+/**
+ * Resolves the platform default agent per the module contract: candidates
+ * are all agents labeled DEFAULT_AGENT_LABEL=true, only visibility_public
+ * candidates are eligible, and among those the lowest metadata.id wins.
+ *
+ * Throws DefaultAgentNotConfiguredError when nothing carries the label,
+ * DefaultAgentNotPublicError when labeled agents exist but none is public,
+ * and lets store/decode failures propagate (a store failure is an internal
+ * fault, not a "no default agent" condition — callers must not map it to
+ * NotFound).
+ */
+export declare function findDefaultAgent(store: Store, logger: Logger): Promise<Agent>;
+//# sourceMappingURL=defaultagent.d.ts.map

package/dist/domain/agent/defaultagent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultagent.d.ts","sourceRoot":"","sources":["../../../src/domain/agent/defaultagent.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oDAAoD,CAAC;AAIhF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEtD,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAE9D,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,SAAS,CAAC;AAEhD;;;GAGG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;;CAOxD;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;;CAOpD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,KAAK,CAAC,CAkDhB"}

package/dist/domain/agent/defaultagent.js

@@ -0,0 +1,104 @@
+/**
+ * Platform default-agent resolution — ports
+ * pkg/domain/agent/defaultagent/defaultagent.go: the single resolution
+ * implementation behind Agent.GetDefault, AgentExecution create (#17), and
+ * Session create.
+ *
+ * The default agent is a platform-level singleton: the agent labeled
+ * stigmer.ai/default-agent: "true" with visibility_public, seeded in the
+ * system org and served to callers of every org. Resolution is deliberately
+ * GLOBAL — GetDefaultAgentRequest.org exists for authorization scoping only
+ * (see apis/ai/stigmer/agentic/agent/v1/io.proto). It powers the
+ * session-first UX where a user starts a conversation without picking an
+ * agent. The cloud twin is AgentRepo.findDefault(); keep the two in sync.
+ *
+ * Determinism contract (stigmer/stigmer#356): multiple labeled agents is a
+ * reachable state, not an error — safe label rotation applies the new
+ * default before retiring the old one. Among public candidates the winner
+ * is the one with the LOWEST metadata.id — the incumbent. Rejected
+ * alternatives (recorded in the Go package doc): first-match depends on row
+ * insertion order; newest-wins lets any newly labeled public agent capture
+ * the platform-wide default (nothing guards the reserved stigmer.ai/*
+ * namespace at OSS write boundaries); creation time is not trustworthy as
+ * an ordering key (pre-#453 rows may carry rewritten timestamps).
+ * metadata.id never changes and is time-ordered for server-generated ULIDs.
+ */
+import { fromBinary } from "@bufbuild/protobuf";
+import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+/** Marks the platform default agent; the value must be DEFAULT_AGENT_LABEL_VALUE. */
+export const DEFAULT_AGENT_LABEL = "stigmer.ai/default-agent";
+/** The only value of DEFAULT_AGENT_LABEL that marks an agent as the default. */
+export const DEFAULT_AGENT_LABEL_VALUE = "true";
+/**
+ * No agent carries the default-agent label. Call sites map this to
+ * NotFound with their own caller-facing copy (Go ErrNotConfigured).
+ */
+export class DefaultAgentNotConfiguredError extends Error {
+    constructor() {
+        super(`no agent labeled ${DEFAULT_AGENT_LABEL}=${DEFAULT_AGENT_LABEL_VALUE}`);
+        this.name = "DefaultAgentNotConfiguredError";
+    }
+}
+/**
+ * Labeled agents exist but none is visibility_public. Call sites map this
+ * to FailedPrecondition — a deliberate divergence from the cloud edition,
+ * whose SQL predicate collapses this state into "not found": the distinct
+ * code tells a self-hosting operator the label is present but the
+ * visibility is wrong (Go ErrNotPublic).
+ */
+export class DefaultAgentNotPublicError extends Error {
+    constructor() {
+        super(`agents labeled ${DEFAULT_AGENT_LABEL}=${DEFAULT_AGENT_LABEL_VALUE} exist but none is visibility_public`);
+        this.name = "DefaultAgentNotPublicError";
+    }
+}
+/**
+ * Resolves the platform default agent per the module contract: candidates
+ * are all agents labeled DEFAULT_AGENT_LABEL=true, only visibility_public
+ * candidates are eligible, and among those the lowest metadata.id wins.
+ *
+ * Throws DefaultAgentNotConfiguredError when nothing carries the label,
+ * DefaultAgentNotPublicError when labeled agents exist but none is public,
+ * and lets store/decode failures propagate (a store failure is an internal
+ * fault, not a "no default agent" condition — callers must not map it to
+ * NotFound).
+ */
+export async function findDefaultAgent(store, logger) {
+    const raws = await store.findAllByLabel(ApiResourceKind.agent, DEFAULT_AGENT_LABEL, DEFAULT_AGENT_LABEL_VALUE, AgentSchema);
+    if (raws.length === 0) {
+        throw new DefaultAgentNotConfiguredError();
+    }
+    let publicCount = 0;
+    let winner;
+    for (const raw of raws) {
+        // findAllByLabel already unmarshaled every returned row to match the
+        // label, so a decode failure here is store corruption. Fail loudly
+        // (propagate): skipping a row could silently change which agent wins.
+        const candidate = fromBinary(AgentSchema, raw);
+        if (candidate.metadata?.visibility !==
+            ApiResourceVisibility.visibility_public) {
+            continue;
+        }
+        publicCount++;
+        if (winner === undefined ||
+            (candidate.metadata?.id ?? "") < (winner.metadata?.id ?? "")) {
+            winner = candidate;
+        }
+    }
+    if (winner === undefined) {
+        throw new DefaultAgentNotPublicError();
+    }
+    if (publicCount > 1) {
+        // Expected briefly mid-rotation; persistent duplicates mean someone
+        // forgot to retire the old label after applying the new default.
+        logger.warn("Multiple public agents carry the default-agent label; serving the incumbent (lowest id). Retire the stale label to complete rotation.", {
+            publicLabeledAgents: publicCount,
+            winnerId: winner.metadata?.id ?? "",
+            winnerName: winner.metadata?.name ?? "",
+        });
+    }
+    return winner;
+}
+//# sourceMappingURL=defaultagent.js.map

package/dist/domain/agent/defaultagent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultagent.js","sourceRoot":"","sources":["../../../src/domain/agent/defaultagent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AAEjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAKtH,qFAAqF;AACrF,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAE9D,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD;;;GAGG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IACvD;QACE,KAAK,CACH,oBAAoB,mBAAmB,IAAI,yBAAyB,EAAE,CACvE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD;QACE,KAAK,CACH,kBAAkB,mBAAmB,IAAI,yBAAyB,sCAAsC,CACzG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAY,EACZ,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CACrC,eAAe,CAAC,KAAK,EACrB,mBAAmB,EACnB,yBAAyB,EACzB,WAAW,CACZ,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,8BAA8B,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,MAAyB,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC/C,IACE,SAAS,CAAC,QAAQ,EAAE,UAAU;YAC9B,qBAAqB,CAAC,iBAAiB,EACvC,CAAC;YACD,SAAS;QACX,CAAC;QACD,WAAW,EAAE,CAAC;QACd,IACE,MAAM,KAAK,SAAS;YACpB,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAC5D,CAAC;YACD,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,0BAA0B,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACpB,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,CAAC,IAAI,CACT,uIAAuI,EACvI;YACE,mBAAmB,EAAE,WAAW;YAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;YACnC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;SACxC,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/domain/agent/search-extractor.d.ts

@@ -0,0 +1,3 @@
+import type { SearchableExtractor } from "../../query/search/extractor.js";
+export declare const agentSearchExtractor: SearchableExtractor;
+//# sourceMappingURL=search-extractor.d.ts.map

package/dist/domain/agent/search-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-extractor.d.ts","sourceRoot":"","sources":["../../../src/domain/agent/search-extractor.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,eAAO,MAAM,oBAAoB,EAAE,mBAyClC,CAAC"}

package/dist/domain/agent/search-extractor.js

@@ -0,0 +1,50 @@
+import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { buildSearchResult } from "../../query/search/extractor.js";
+export const agentSearchExtractor = {
+    kind: ApiResourceKind.agent,
+    schema: AgentSchema,
+    getSearchSummary(resource) {
+        return agentSearchSummary(resource);
+    },
+    toSearchResult(resource, score) {
+        const agent = resource;
+        return buildSearchResult({
+            kind: ApiResourceKind.agent,
+            metadata: agent.metadata,
+            summary: agentSearchSummary(agent),
+            score,
+            createdAt: agent.status?.audit?.specAudit?.createdAt,
+            updatedAt: agent.status?.audit?.specAudit?.updatedAt,
+            iconUrl: agent.spec?.iconUrl ?? "",
+        });
+    },
+    getSearchIndexEntry(resource) {
+        const agent = resource;
+        const metadata = agent.metadata;
+        if (metadata === undefined) {
+            return undefined;
+        }
+        return {
+            name: metadata.name,
+            description: agentSearchSummary(agent),
+            // Tags join space-separated — the index entry carries one tags
+            // string (Go extractor.JoinTags).
+            tags: metadata.tags.join(" "),
+            org: metadata.org,
+            // The enum NAME string, exactly Go's visibility.String().
+            visibility: ApiResourceVisibility[metadata.visibility] ?? "",
+            createdAt: Number(agent.status?.audit?.specAudit?.createdAt?.seconds ?? 0n),
+        };
+    },
+};
+/** Go AgentExtractor.GetSearchSummary: description, else instructions. */
+function agentSearchSummary(agent) {
+    const spec = agent.spec;
+    if (spec === undefined) {
+        return "";
+    }
+    return spec.description !== "" ? spec.description : spec.instructions;
+}
+//# sourceMappingURL=search-extractor.js.map

package/dist/domain/agent/search-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-extractor.js","sourceRoot":"","sources":["../../../src/domain/agent/search-extractor.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAI/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGpE,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,IAAI,EAAE,eAAe,CAAC,KAAK;IAC3B,MAAM,EAAE,WAAW;IAEnB,gBAAgB,CAAC,QAAiB;QAChC,OAAO,kBAAkB,CAAC,QAA4B,CAAC,CAAC;IAC1D,CAAC;IAED,cAAc,CAAC,QAAiB,EAAE,KAAa;QAC7C,MAAM,KAAK,GAAG,QAA4B,CAAC;QAC3C,OAAO,iBAAiB,CAAC;YACvB,IAAI,EAAE,eAAe,CAAC,KAAK;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC;YAClC,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;YACpD,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;YACpD,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE;SACnC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,QAAiB;QACnC,MAAM,KAAK,GAAG,QAA4B,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,kBAAkB,CAAC,KAAK,CAAC;YACtC,+DAA+D;YAC/D,kCAAkC;YAClC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,0DAA0D;YAC1D,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE;YAC5D,SAAS,EAAE,MAAM,CACf,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE,CACzD;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,0EAA0E;AAC1E,SAAS,kBAAkB,CAAC,KAAY;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;AACxE,CAAC"}

package/dist/domain/agent/steps.d.ts

@@ -0,0 +1,81 @@
+import type { DescMessage } from "@bufbuild/protobuf";
+import type { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import type { AgentInstance } from "@stigmer/protos/ai/stigmer/agentic/agentinstance/v1/api_pb";
+import type { Logger } from "../../boot/logger.js";
+import type { CallerIdentity } from "../../extensions/identity.js";
+import type { ResourceAuthorizationLifecycle } from "../../extensions/resource-authorization.js";
+import type { PipelineStep } from "../../pipeline/pipeline.js";
+import type { Store } from "../../store/interface.js";
+type AgentDesc = typeof AgentSchema;
+/**
+ * The narrow in-process surface the agent domain needs from agentinstance —
+ * consumer-defined so the dependency reads at the domain boundary (the Go
+ * twin is pkg/downstream/agentinstance.Client). Calls ride the in-process
+ * router transport, traversing the full interceptor chain (DD-002).
+ */
+export interface AgentInstanceApplier {
+    /**
+     * Applies AS THE ORIGINAL CALLER (C2 Stage 3, ruling R5 — the Java
+     * applyAsCaller posture): the propagated identity gives the default
+     * instance real owner attribution, so its creator can manage it under
+     * an enforcing Authorizer. Pre-R5 this ran as the internal class,
+     * which the cloud's tuple driver deliberately never attributes.
+     */
+    applyAsCaller(instance: AgentInstance, caller: CallerIdentity): Promise<AgentInstance>;
+}
+/**
+ * Lazy provider for the agent↔agentinstance true cycle — resolved at call
+ * time, never at construction (the ratified DI story, D2 §2).
+ */
+export type AgentInstanceApplierProvider = () => AgentInstanceApplier;
+export declare function newValidateEnabledToolsStep(store: Store): PipelineStep<AgentDesc>;
+export declare function newMergeMcpServerEnvSpecsStep(store: Store, logger: Logger): PipelineStep<AgentDesc>;
+/**
+ * Applies (not creates — idempotency) the agent's default instance through
+ * the in-process client. Agent delete cascades the default instance, so
+ * this normally routes to CREATE; the UPDATE route remains as self-heal for
+ * pre-cascade legacy orphans (self-hosters upgrading across the T08
+ * release), which Apply recovers by re-pointing agent_id at the new agent.
+ *
+ * Versus Go: no nil-client skip — the provider is a required dependency
+ * (the staged composition root eliminates the nil-then-inject window whose
+ * silent no-op the domain inventory flags).
+ */
+export declare function newCreateDefaultInstanceStep(applierProvider: AgentInstanceApplierProvider, logger: Logger): PipelineStep<AgentDesc>;
+/**
+ * Writes status.default_instance_id onto the just-persisted agent and
+ * re-persists. Reads the id from context (set by CreateDefaultInstance).
+ * Fires the driver's default-instance link event AFTER the pointer
+ * persists (C2 Stage 3 — the default_of invariant rides the pointer).
+ */
+export declare function newUpdateAgentStatusWithDefaultInstanceStep(store: Store, logger: Logger, authorizationLifecycle?: ResourceAuthorizationLifecycle): PipelineStep<AgentDesc>;
+/**
+ * Deletes EVERY instance of the agent (row + search-index entry) before the
+ * agent is deleted — the system-managed default AND members' personal ones
+ * (owner ruling stigmer/stigmer#611, extending the workflow ruling #592:
+ * instances are configuration OF the agent, meaningless without it, and an
+ * orphan occupies its org-scoped slug forever with no UI left to delete
+ * it). Matched by spec.agent_id — a required, validated field on every
+ * instance — so a single ID sweep covers the default instance too,
+ * including legacy rows that predate the status.default_instance_id
+ * pointer.
+ */
+export declare function newCascadeDeleteInstancesStep<Desc extends DescMessage>(store: Store, logger: Logger): PipelineStep<Desc>;
+/**
+ * Deletes the agent's SAME-ORG AgentShares before the agent is deleted.
+ * Shares reference the agent by org+slug (spec.agent_ref), so a stale share
+ * would silently rebind — audience, link token, and bound credentials
+ * included — to whatever agent is later created at that slug. Matching by
+ * spec.agent_ref finds them all regardless of each share's own slug (a
+ * renamed share stays covered). Cross-org shares (another org sharing this
+ * marketplace-public agent) are NOT cascaded: they are that org's
+ * resources, and deleting them here would make agent delete a
+ * cross-principal destructive action — they fail closed instead, via the
+ * dangling-ref check and the status.agent_id pin every share-resolution
+ * gate verifies. AgentShare is not search-indexed, so there is no index
+ * entry to clean.
+ */
+export declare function newCascadeDeleteSharesStep<Desc extends DescMessage>(store: Store, logger: Logger): PipelineStep<Desc>;
+export declare function newLoadDefaultAgentStep<Desc extends DescMessage>(store: Store, logger: Logger): PipelineStep<Desc>;
+export {};
+//# sourceMappingURL=steps.d.ts.map

package/dist/domain/agent/steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.d.ts","sourceRoot":"","sources":["../../../src/domain/agent/steps.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,KAAK,EAEV,WAAW,EACZ,MAAM,oDAAoD,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4DAA4D,CAAC;AAUhG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAYnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAEjG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAWtD,KAAK,SAAS,GAAG,OAAO,WAAW,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,aAAa,CACX,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,aAAa,CAAC,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,oBAAoB,CAAC;AAqBtE,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,KAAK,GACX,YAAY,CAAC,SAAS,CAAC,CAoDzB;AAuDD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,SAAS,CAAC,CA4FzB;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,eAAe,EAAE,4BAA4B,EAC7C,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,SAAS,CAAC,CAoDzB;AAED;;;;;GAKG;AACH,wBAAgB,2CAA2C,CACzD,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,EACd,sBAAsB,CAAC,EAAE,8BAA8B,GACtD,YAAY,CAAC,SAAS,CAAC,CA2DzB;AAWD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,SAAS,WAAW,EACpE,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,IAAI,CAAC,CA4EpB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,SAAS,WAAW,EACjE,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,IAAI,CAAC,CA+DpB;AASD,wBAAgB,uBAAuB,CAAC,IAAI,SAAS,WAAW,EAC9D,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,GACb,YAAY,CAAC,IAAI,CAAC,CAyCpB"}