@stigmer/server 3.19.0 → 3.20.0

package/dist/domain/project/reconcile.js

@@ -1,179 +0,0 @@
-/**
- * Project membership reconciliation — ports pkg/domain/project/reconcile/
- * (service.go, execution_engine.go, reconciliation_{result,options,error}.go).
- * Proven by __tests__/reconcile.test.ts and the apply→prune composed arms in
- * __tests__/project.composed.test.ts.
- *
- * Apply compares the previous project's spec.members with the newly persisted
- * spec.members, both keyed "{kind}:{slug}" (the kind's enum NAME — Go's %s).
- * Members only in the current list are ADDED; members only in the previous
- * list are ORPHANS and, with pruning enabled, are deleted through the four
- * downstream domains' in-process clients — their FULL delete pipelines, so a
- * referentially-blocked orphan fails exactly as an external delete would.
- *
- * Error posture (Go, verified): reconcile NEVER throws. Per-orphan failures
- * are collected on the result and are log-only — ToProtoSummary carries only
- * created/deleted, so a failed orphan is simply absent from `deleted`. The
- * wire surface of this whole module is those two lists.
- *
- * Deliberately not ported (plan-gate decisions, tasks/T01_0_plan.md):
- *   - Go's nil-deleter stub arm (service.go:95-98) and the
- *     SetReconciliationService late-bind — both exist only for Go's
- *     registration-before-clients boot window; the compose root's lazy
- *     provider closes that window, so here a deleter always exists.
- *   - ResultBuilder and the DryRun/NoPrune option factories — zero non-test
- *     uses in Go; the sole production call is
- *     reconcile(previous, current, DEFAULT_RECONCILIATION_OPTIONS).
- */
-import { create } from "@bufbuild/protobuf";
-import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
-import { McpServerSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
-import { SkillSchema } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/api_pb";
-import { WorkflowSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/api_pb";
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-import { ReconciliationSummarySchema } from "@stigmer/protos/ai/stigmer/tenancy/project/v1/status_pb";
-import { findResourceBySlug } from "../../pipeline/steps/helpers.js";
-import { metadataOf } from "../../pipeline/steps/shapes.js";
-export const DEFAULT_RECONCILIATION_OPTIONS = {
-    pruneEnabled: true,
-    dryRun: false,
-};
-export function newReconciliationService(deps) {
-    return {
-        async reconcile(previousMembers, currentMembers, options) {
-            const previousSet = buildReferenceSet(previousMembers);
-            const currentSet = buildReferenceSet(currentMembers);
-            const added = currentMembers.filter((ref) => !previousSet.has(referenceKey(ref)));
-            const orphans = previousMembers.filter((ref) => !currentSet.has(referenceKey(ref)));
-            if (added.length === 0 && orphans.length === 0) {
-                return { added: [], removed: [], errors: [] };
-            }
-            // Dry run reports the orphans in `removed` WITHOUT deleting (Go
-            // service.go:61-63 passes them straight through).
-            if (options.dryRun) {
-                return { added, removed: orphans, errors: [] };
-            }
-            if (!options.pruneEnabled || orphans.length === 0) {
-                return { added, removed: [], errors: [] };
-            }
-            const { removed, errors } = await deleteOrphans(deps, orphans);
-            return { added, removed, errors };
-        },
-    };
-}
-/**
- * Deletes each orphan, continuing on failure (Go deleteOrphans). Failures
- * are warned here — Go collects them onto a result nothing in production
- * reads, which leaves operators blind; the log is edition-local and the
- * wire behavior is identical.
- */
-async function deleteOrphans(deps, orphans) {
-    const removed = [];
-    const errors = [];
-    for (const ref of orphans) {
-        const refKey = referenceKey(ref);
-        let resourceId;
-        try {
-            resourceId = await resolveResourceId(deps.store, ref);
-        }
-        catch (cause) {
-            errors.push({
-                resourceKey: refKey,
-                message: "failed to resolve resource for deletion",
-                cause,
-            });
-            deps.logger.warn("reconciliation: failed to resolve orphan for deletion", {
-                resource: refKey,
-                error: cause instanceof Error ? cause.message : String(cause),
-            });
-            continue;
-        }
-        try {
-            await deps.orphanDeleter().delete(ref.kind, resourceId);
-        }
-        catch (cause) {
-            errors.push({
-                resourceKey: refKey,
-                message: "failed to delete orphaned resource",
-                cause,
-            });
-            deps.logger.warn("reconciliation: failed to delete orphaned resource", {
-                resource: refKey,
-                resourceId,
-                error: cause instanceof Error ? cause.message : String(cause),
-            });
-            continue;
-        }
-        removed.push(ref);
-    }
-    return { removed, errors };
-}
-/**
- * Resolves an orphan reference to its resource id, within the org the
- * reference names. Slugs are org-scoped identifiers: a local backend holds
- * the `stigmer` system org beside the user's, a self-host holds many, and
- * the same slug may exist in several. The Go port matched by slug alone and
- * could prune another org's resource (stigmer/stigmer#1151); the CLI has
- * always stamped `org` on every member reference, so scoping is a change
- * of lookup, not of contract. A reference without an org (a project written
- * before members carried one) keeps the unscoped match, the helper's
- * documented empty-org arm.
- */
-async function resolveResourceId(store, ref) {
-    const schema = schemaForKind(ref.kind);
-    const resource = await findResourceBySlug(store, ref.kind, schema, ref.slug, ref.org);
-    if (resource === undefined) {
-        const where = ref.org === "" ? "" : ` in org '${ref.org}'`;
-        throw new Error(`resource ${kindName(ref.kind)}/${ref.slug} not found${where}`);
-    }
-    const id = metadataOf(resource)?.id ?? "";
-    if (id === "") {
-        throw new Error(`resource ${kindName(ref.kind)}/${ref.slug} has no ID`);
-    }
-    return id;
-}
-/**
- * The four member kinds the reconciler supports (Go newProtoForKind);
- * anything else is an unsupported-kind resolution error.
- */
-function schemaForKind(kind) {
-    switch (kind) {
-        case ApiResourceKind.agent:
-            return AgentSchema;
-        case ApiResourceKind.workflow:
-            return WorkflowSchema;
-        case ApiResourceKind.mcp_server:
-            return McpServerSchema;
-        case ApiResourceKind.skill:
-            return SkillSchema;
-        default:
-            throw new Error(`unsupported resource kind: ${kindName(kind)}`);
-    }
-}
-/**
- * "{kind}:{slug}" with the kind's enum NAME — Go fmt %s of the enum (e.g.
- * "agent:my-agent", "mcp_server:tools"). The numeric form would diverge
- * from Go's log/error copy.
- */
-export function referenceKey(ref) {
-    return `${kindName(ref.kind)}:${ref.slug}`;
-}
-function kindName(kind) {
-    return ApiResourceKind[kind] ?? String(kind);
-}
-function buildReferenceSet(refs) {
-    return new Set(refs.map(referenceKey));
-}
-/**
- * Go ToProtoSummary: added → created, updated ALWAYS empty (not applicable
- * in the reference model), removed → deleted. Every successful apply sets
- * the summary — even an all-empty one is a PRESENT message on the wire.
- */
-export function toProtoSummary(result) {
-    return create(ReconciliationSummarySchema, {
-        created: [...result.added],
-        updated: [],
-        deleted: [...result.removed],
-    });
-}
-//# sourceMappingURL=reconcile.js.map

package/dist/domain/project/reconcile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reconcile.js","sourceRoot":"","sources":["../../../src/domain/project/reconcile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,2BAA2B,EAAE,MAAM,yDAAyD,CAAC;AAItG,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AA0B5D,MAAM,CAAC,MAAM,8BAA8B,GAA0B;IACnE,YAAY,EAAE,IAAI;IAClB,MAAM,EAAE,KAAK;CACd,CAAC;AA8CF,MAAM,UAAU,wBAAwB,CACtC,IAA+B;IAE/B,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO;YACtD,MAAM,WAAW,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;YAErD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CACjC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAC7C,CAAC;YACF,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAC5C,CAAC;YAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAChD,CAAC;YAED,gEAAgE;YAChE,kDAAkD;YAClD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACjD,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC5C,CAAC;YAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC1B,IAA+B,EAC/B,OAA4C;IAK5C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,MAAM,GAA0B,EAAE,CAAC;IAEzC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC;gBACV,WAAW,EAAE,MAAM;gBACnB,OAAO,EAAE,yCAAyC;gBAClD,KAAK;aACN,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;gBACxE,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC;gBACV,WAAW,EAAE,MAAM;gBACnB,OAAO,EAAE,oCAAoC;gBAC7C,KAAK;aACN,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBACrE,QAAQ,EAAE,MAAM;gBAChB,UAAU;gBACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,iBAAiB,CAC9B,KAAY,EACZ,GAAyB;IAEzB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC,KAAK,EACL,GAAG,CAAC,IAAI,EACR,MAAM,EACN,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,GAAG,CACR,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,GAAG,GAAG,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,YAAY,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,aAAa,KAAK,EAAE,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAqB;IAC1C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe,CAAC,KAAK;YACxB,OAAO,WAAW,CAAC;QACrB,KAAK,eAAe,CAAC,QAAQ;YAC3B,OAAO,cAAc,CAAC;QACxB,KAAK,eAAe,CAAC,UAAU;YAC7B,OAAO,eAAe,CAAC;QACzB,KAAK,eAAe,CAAC,KAAK;YACxB,OAAO,WAAW,CAAC;QACrB;YACE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAyB;IACpD,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAqB;IACrC,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAyC;IAEzC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA4B;IAE5B,OAAO,MAAM,CAAC,2BAA2B,EAAE;QACzC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;KAC7B,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/project/search-extractor.d.ts

@@ -1,3 +0,0 @@
-import type { SearchableExtractor } from "../../query/search/extractor.js";
-export declare const projectSearchExtractor: SearchableExtractor;
-//# sourceMappingURL=search-extractor.d.ts.map

package/dist/domain/project/search-extractor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"search-extractor.d.ts","sourceRoot":"","sources":["../../../src/domain/project/search-extractor.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,eAAO,MAAM,sBAAsB,EAAE,mBA0CpC,CAAC"}

package/dist/domain/project/search-extractor.js

@@ -1,43 +0,0 @@
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
-import { ProjectSchema } from "@stigmer/protos/ai/stigmer/tenancy/project/v1/api_pb";
-import { buildSearchResult } from "../../query/search/extractor.js";
-export const projectSearchExtractor = {
-    kind: ApiResourceKind.project,
-    schema: ProjectSchema,
-    getSearchSummary(resource) {
-        // Go ProjectExtractor.GetSearchSummary: spec.description.
-        const project = resource;
-        return project.spec?.description ?? "";
-    },
-    toSearchResult(resource, score) {
-        const project = resource;
-        return buildSearchResult({
-            kind: ApiResourceKind.project,
-            metadata: project.metadata,
-            summary: project.spec?.description ?? "",
-            score,
-            createdAt: project.status?.audit?.specAudit?.createdAt,
-            updatedAt: project.status?.audit?.specAudit?.updatedAt,
-        });
-    },
-    getSearchIndexEntry(resource) {
-        const project = resource;
-        const metadata = project.metadata;
-        if (metadata === undefined) {
-            return undefined;
-        }
-        return {
-            name: metadata.name,
-            description: project.spec?.description ?? "",
-            // Tags join space-separated — the index entry carries one tags
-            // string (Go extractor.JoinTags).
-            tags: metadata.tags.join(" "),
-            org: metadata.org,
-            // The enum NAME string, exactly Go's visibility.String().
-            visibility: ApiResourceVisibility[metadata.visibility] ?? "",
-            createdAt: Number(project.status?.audit?.specAudit?.createdAt?.seconds ?? 0n),
-        };
-    },
-};
-//# sourceMappingURL=search-extractor.js.map

package/dist/domain/project/search-extractor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"search-extractor.js","sourceRoot":"","sources":["../../../src/domain/project/search-extractor.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAE/F,OAAO,EAAE,aAAa,EAAE,MAAM,sDAAsD,CAAC;AAIrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGpE,MAAM,CAAC,MAAM,sBAAsB,GAAwB;IACzD,IAAI,EAAE,eAAe,CAAC,OAAO;IAC7B,MAAM,EAAE,aAAa;IAErB,gBAAgB,CAAC,QAAiB;QAChC,0DAA0D;QAC1D,MAAM,OAAO,GAAG,QAA8B,CAAC;QAC/C,OAAO,OAAO,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,cAAc,CAAC,QAAiB,EAAE,KAAa;QAC7C,MAAM,OAAO,GAAG,QAA8B,CAAC;QAC/C,OAAO,iBAAiB,CAAC;YACvB,IAAI,EAAE,eAAe,CAAC,OAAO;YAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;YACxC,KAAK;YACL,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;YACtD,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;SACvD,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,QAAiB;QACnC,MAAM,OAAO,GAAG,QAA8B,CAAC;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;YAC5C,+DAA+D;YAC/D,kCAAkC;YAClC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,0DAA0D;YAC1D,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE;YAC5D,SAAS,EAAE,MAAM,CACf,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE,CAC3D;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/src/authorization/model/project.ts

@@ -1,47 +0,0 @@
-/**
- * Transcript of fga/model/tenancy/project.fga — an organization's
- * grouping: admins own it, and `viewer from organization` lets every
- * organization viewer read it without a visibility tuple (projects have
- * no visibility axis in `kind_meta`; the whole organization is their
- * audience by the model's own line).
- */
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-import { ProjectSchema } from "@stigmer/protos/ai/stigmer/tenancy/project/v1/api_pb";
-
-import {
-  computed,
-  declareKind,
-  direct,
-  from,
-  objectOf,
-  union,
-} from "./rewrite.js";
-
-export const projectDeclaration = declareKind({
-  kind: ApiResourceKind.project,
-  schema: ProjectSchema,
-  source: "fga/model/tenancy/project.fga",
-  relations: [
-    ["organization", direct(objectOf("organization"))],
-    [
-      "owner",
-      union(
-        direct(objectOf("identity_account")),
-        from("admin", "organization"),
-      ),
-    ],
-    [
-      "viewer",
-      union(
-        direct(objectOf("identity_account")),
-        computed("owner"),
-        from("viewer", "organization"),
-      ),
-    ],
-    ["can_view", computed("viewer")],
-    ["can_edit", computed("owner")],
-    ["can_delete", computed("owner")],
-    ["can_grant_access", computed("owner")],
-    ["can_view_access", computed("viewer")],
-  ],
-});

package/src/domain/project/__tests__/project.composed.test.ts

@@ -1,381 +0,0 @@
-/**
- * Pins the project domain against Go's controller tests — through the REAL
- * stack: a composed server on an ephemeral port, a native gRPC client, the
- * full interceptor chain, and REAL orphan deletes through the in-process
- * command clients' full pipelines.
- *
- * The load-bearing pins the conformance suite does NOT cover (it never
- * touches spec.members or last_reconciliation):
- *   - every successful apply response carries status.last_reconciliation,
- *     even as a present-but-EMPTY message — and it is NEVER persisted;
- *   - apply→prune end to end: a dropped member is actually deleted through
- *     its owning domain's pipeline; an unresolvable member is silently
- *     absent from `deleted` while apply still succeeds;
- *   - members referencing nonexistent resources persist silently (no
- *     ValidateReferences in any project chain);
- *   - the create/update pipeline ASYMMETRY: ValidateVisibility and
- *     NormalizeReferences run on create only;
- *   - project delete never cascades to members.
- */
-import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import path from "node:path";
-
-import { create } from "@bufbuild/protobuf";
-import { Code, ConnectError, createClient } from "@connectrpc/connect";
-import type { Client, Transport } from "@connectrpc/connect";
-import { createGrpcTransport } from "@connectrpc/connect-node";
-import { afterAll, beforeAll, describe, expect, it } from "vitest";
-
-import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
-import { AgentQueryController } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/query_pb";
-import { McpServerSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
-import { McpServerQueryController } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/query_pb";
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
-import { ProjectCommandController } from "@stigmer/protos/ai/stigmer/tenancy/project/v1/command_pb";
-import { ProjectQueryController } from "@stigmer/protos/ai/stigmer/tenancy/project/v1/query_pb";
-
-import { loadConfig } from "../../../boot/config.js";
-import { composeServer } from "../../../boot/compose.js";
-import type { ComposedServer } from "../../../boot/compose.js";
-import { createLogger } from "../../../boot/logger.js";
-
-const silentLogger = createLogger({ level: "error", pretty: false, write: () => {} });
-
-let dir: string;
-let server: ComposedServer;
-let transport: Transport;
-let command: Client<typeof ProjectCommandController>;
-let query: Client<typeof ProjectQueryController>;
-let agentQuery: Client<typeof AgentQueryController>;
-let mcpServerQuery: Client<typeof McpServerQueryController>;
-
-beforeAll(async () => {
-  dir = mkdtempSync(path.join(tmpdir(), "project-domain-test-"));
-  server = await composeServer({
-    config: loadConfig({
-      STIGMER_MODEL_REGISTRY_REFRESH: "off",
-      // No engine behind composed tests: 127.0.0.1:1 is deterministically
-      // closed, so boots fail the non-fatal connect fast and can never touch
-      // a live local Temporal (the conformance CRUD harness does the same).
-      TEMPORAL_HOST_PORT: "127.0.0.1:1",
-      DB_PATH: path.join(dir, "stigmer.db"),
-      // Everything filesystem-backed stays inside the test dir — the
-      // defaults resolve into ~/.stigmer, which tests must never touch.
-      STORAGE_PATH: path.join(dir, "storage"),
-      ARTIFACT_LOCAL_BASE_PATH: path.join(dir, "artifacts"),
-    }),
-    logger: silentLogger,
-    portOverride: 0,
-    host: "127.0.0.1",
-  });
-  const port = await server.start();
-  transport = createGrpcTransport({ baseUrl: `http://127.0.0.1:${port}` });
-  command = createClient(ProjectCommandController, transport);
-  query = createClient(ProjectQueryController, transport);
-  agentQuery = createClient(AgentQueryController, transport);
-  mcpServerQuery = createClient(McpServerQueryController, transport);
-});
-
-afterAll(async () => {
-  await server.shutdown();
-  rmSync(dir, { recursive: true, force: true });
-});
-
-const API_VERSION = "tenancy.stigmer.ai/v1";
-const KIND = "Project";
-const ORG = "local";
-
-let seq = 0;
-function uniqueName(prefix: string): string {
-  seq += 1;
-  return `${prefix} ${seq}`;
-}
-
-interface MemberInit {
-  kind: ApiResourceKind;
-  slug: string;
-  org?: string;
-}
-
-function projectInput(
-  name: string,
-  extras?: { members?: MemberInit[]; visibility?: ApiResourceVisibility },
-) {
-  return {
-    apiVersion: API_VERSION,
-    kind: KIND,
-    metadata: {
-      name,
-      org: ORG,
-      ...(extras?.visibility !== undefined ? { visibility: extras.visibility } : {}),
-    },
-    spec: {
-      description: "created by the domain test",
-      members: (extras?.members ?? []).map((m) => ({
-        kind: m.kind,
-        slug: m.slug,
-        org: m.org ?? ORG,
-      })),
-    },
-  };
-}
-
-async function seedAgent(id: string, slug: string): Promise<void> {
-  await server.store.saveResource(
-    ApiResourceKind.agent,
-    id,
-    AgentSchema,
-    create(AgentSchema, {
-      apiVersion: "agentic.stigmer.ai/v1",
-      kind: "Agent",
-      metadata: { id, name: slug, slug, org: ORG },
-    }),
-  );
-}
-
-async function seedMcpServer(id: string, slug: string): Promise<void> {
-  await server.store.saveResource(
-    ApiResourceKind.mcp_server,
-    id,
-    McpServerSchema,
-    create(McpServerSchema, {
-      apiVersion: "agentic.stigmer.ai/v1",
-      kind: "McpServer",
-      metadata: { id, name: slug, slug, org: ORG },
-    }),
-  );
-}
-
-async function grpcCode(run: () => Promise<unknown>): Promise<ConnectError> {
-  try {
-    await run();
-    throw new Error("expected the call to fail");
-  } catch (error) {
-    if (error instanceof ConnectError) {
-      return error;
-    }
-    throw error;
-  }
-}
-
-describe("apply reconciliation summary (Go apply_test.go)", () => {
-  it("first apply reports all members as created and the prj_ id shape", async () => {
-    const applied = await command.apply(
-      projectInput(uniqueName("Members Project"), {
-        members: [
-          { kind: ApiResourceKind.agent, slug: "member-a" },
-          { kind: ApiResourceKind.workflow, slug: "member-b" },
-        ],
-      }),
-    );
-
-    expect(applied.metadata?.id).toMatch(/^prj_[0-9a-z]{26}$/);
-    expect(applied.status?.audit?.specAudit?.event).toBe("created");
-    expect(applied.status?.lastReconciliation).toBeDefined();
-    expect(
-      applied.status?.lastReconciliation?.created.map((r) => r.slug),
-    ).toEqual(["member-a", "member-b"]);
-    expect(applied.status?.lastReconciliation?.updated).toEqual([]);
-    expect(applied.status?.lastReconciliation?.deleted).toEqual([]);
-  });
-
-  it("a no-change apply still carries a PRESENT (empty) summary — and it is never persisted", async () => {
-    const name = uniqueName("Summary Presence");
-    const first = await command.apply(projectInput(name));
-    // No members at all: the summary message must still be present.
-    expect(first.status?.lastReconciliation).toBeDefined();
-    expect(first.status?.lastReconciliation?.created).toEqual([]);
-    expect(first.status?.lastReconciliation?.deleted).toEqual([]);
-
-    // Response-only: the persisted resource has NO last_reconciliation.
-    const fetched = await query.get({ value: first.metadata!.id });
-    expect(fetched.status?.lastReconciliation).toBeUndefined();
-
-    // And the second apply's summary is computed fresh from the delta.
-    const second = await command.apply(projectInput(name));
-    expect(second.metadata?.id).toBe(first.metadata?.id);
-    expect(second.status?.audit?.specAudit?.event).toBe("updated");
-    expect(second.status?.lastReconciliation).toBeDefined();
-    expect(second.status?.lastReconciliation?.created).toEqual([]);
-  });
-
-  it("prunes a dropped member FOR REAL through its domain's delete pipeline", async () => {
-    await seedAgent("agt_prune_keep", "prune-keep-agent");
-    await seedMcpServer("mcps_prune_drop", "prune-drop-mcps");
-    const name = uniqueName("Orphan Prune");
-
-    await command.apply(
-      projectInput(name, {
-        members: [
-          { kind: ApiResourceKind.agent, slug: "prune-keep-agent" },
-          { kind: ApiResourceKind.mcp_server, slug: "prune-drop-mcps" },
-        ],
-      }),
-    );
-
-    // The second apply both DROPS the mcpserver and INTRODUCES a new
-    // member, so one wire summary carries created and deleted together.
-    const second = await command.apply(
-      projectInput(name, {
-        members: [
-          { kind: ApiResourceKind.agent, slug: "prune-keep-agent" },
-          { kind: ApiResourceKind.workflow, slug: "prune-new-member" },
-        ],
-      }),
-    );
-
-    expect(
-      second.status?.lastReconciliation?.deleted.map((r) => r.slug),
-    ).toEqual(["prune-drop-mcps"]);
-    expect(
-      second.status?.lastReconciliation?.created.map((r) => r.slug),
-    ).toEqual(["prune-new-member"]);
-
-    // The orphan is GONE (deleted through mcpserver's own pipeline)…
-    const gone = await grpcCode(() =>
-      mcpServerQuery.get({ value: "mcps_prune_drop" }),
-    );
-    expect(gone.code).toBe(Code.NotFound);
-    // …and the retained member is untouched.
-    const kept = await agentQuery.get({ value: "agt_prune_keep" });
-    expect(kept.metadata?.slug).toBe("prune-keep-agent");
-  });
-
-  it("an id-carrying apply captures previous members and prunes on the update path", async () => {
-    await seedAgent("agt_idpath", "idpath-agent");
-    const name = uniqueName("Id Carrying Apply");
-
-    const first = await command.apply(
-      projectInput(name, {
-        members: [{ kind: ApiResourceKind.agent, slug: "idpath-agent" }],
-      }),
-    );
-
-    // Second apply addresses the project by its ID (the CLI's steady-state
-    // shape) with the member dropped — previousMembers must still be
-    // captured from the loaded existing resource.
-    const second = await command.apply({
-      ...projectInput(name),
-      metadata: { id: first.metadata!.id, name, org: ORG },
-    });
-
-    expect(second.metadata?.id).toBe(first.metadata?.id);
-    expect(
-      second.status?.lastReconciliation?.deleted.map((r) => r.slug),
-    ).toEqual(["idpath-agent"]);
-    const gone = await grpcCode(() => agentQuery.get({ value: "agt_idpath" }));
-    expect(gone.code).toBe(Code.NotFound);
-  });
-
-  it("a member dropped via plain UPDATE is stranded — the next apply prunes nothing", async () => {
-    // Update runs NO reconciliation, and apply diffs against the STORED
-    // members: dropping a member through update shrinks the stored list
-    // first, so the later apply computes no orphan and the resource
-    // survives. User-visible Go behavior (update strands, apply prunes).
-    await seedAgent("agt_stranded", "stranded-agent");
-    const name = uniqueName("Update Strands");
-
-    await command.apply(
-      projectInput(name, {
-        members: [{ kind: ApiResourceKind.agent, slug: "stranded-agent" }],
-      }),
-    );
-    await command.update(projectInput(name));
-
-    const applied = await command.apply(projectInput(name));
-    expect(applied.status?.lastReconciliation?.deleted).toEqual([]);
-    const survivor = await agentQuery.get({ value: "agt_stranded" });
-    expect(survivor.metadata?.slug).toBe("stranded-agent");
-  });
-
-  it("an unresolvable orphan is silently absent from deleted; apply still succeeds", async () => {
-    const name = uniqueName("Ghost Member");
-    // No ValidateReferences in any project chain: a member that points at
-    // nothing persists silently (pinned Go behavior).
-    const first = await command.apply(
-      projectInput(name, {
-        members: [{ kind: ApiResourceKind.agent, slug: "ghost-agent" }],
-      }),
-    );
-    expect(first.spec?.members.map((m) => m.slug)).toEqual(["ghost-agent"]);
-
-    const second = await command.apply(projectInput(name));
-    // Resolution failed (nothing to delete) → collected log-only, absent
-    // from the wire's deleted list, and apply SUCCEEDS.
-    expect(second.status?.lastReconciliation).toBeDefined();
-    expect(second.status?.lastReconciliation?.deleted).toEqual([]);
-  });
-});
-
-describe("create/update pipeline asymmetry (create.go vs update.go)", () => {
-  it("create rejects an unsupported visibility level; update IGNORES the carried level", async () => {
-    // Project's kind_meta has no VisibilityConfig → private-only.
-    const rejected = await grpcCode(() =>
-      command.create(
-        projectInput(uniqueName("Visibility Reject"), {
-          visibility: ApiResourceVisibility.visibility_org,
-        }),
-      ),
-    );
-    expect(rejected.code).toBe(Code.InvalidArgument);
-
-    // Update has NO ValidateVisibility step; the carried level is ignored
-    // (visibility is update-immutable, oss#573) — never rejected.
-    const name = uniqueName("Visibility Ignore");
-    const created = await command.create(projectInput(name));
-    const updated = await command.update(
-      projectInput(name, { visibility: ApiResourceVisibility.visibility_org }),
-    );
-    expect(updated.metadata?.id).toBe(created.metadata?.id);
-    expect(updated.metadata?.visibility).toBe(
-      ApiResourceVisibility.visibility_private,
-    );
-  });
-
-  it("create normalizes empty member orgs; update persists them EMPTY", async () => {
-    const name = uniqueName("Normalize Asymmetry");
-    const created = await command.create(
-      projectInput(name, {
-        members: [{ kind: ApiResourceKind.agent, slug: "norm-a", org: "" }],
-      }),
-    );
-    // NormalizeReferences filled the empty org from metadata.org.
-    expect(created.spec?.members[0]?.org).toBe(ORG);
-
-    const updated = await command.update(
-      projectInput(name, {
-        members: [{ kind: ApiResourceKind.agent, slug: "norm-b", org: "" }],
-      }),
-    );
-    // Update runs NO NormalizeReferences: the empty org persists as-is.
-    expect(updated.spec?.members[0]?.slug).toBe("norm-b");
-    expect(updated.spec?.members[0]?.org).toBe("");
-  });
-});
-
-describe("delete has no member cascade (delete.go)", () => {
-  it("returns the pre-delete resource and leaves members untouched", async () => {
-    await seedAgent("agt_cascade_safe", "cascade-safe-agent");
-    const created = await command.create(
-      projectInput(uniqueName("No Cascade"), {
-        members: [{ kind: ApiResourceKind.agent, slug: "cascade-safe-agent" }],
-      }),
-    );
-
-    const deleted = await command.delete({ value: created.metadata!.id });
-    expect(deleted.metadata?.id).toBe(created.metadata?.id);
-    expect(deleted.spec?.members.map((m) => m.slug)).toEqual([
-      "cascade-safe-agent",
-    ]);
-
-    const notFound = await grpcCode(() =>
-      query.get({ value: created.metadata!.id }),
-    );
-    expect(notFound.code).toBe(Code.NotFound);
-    // The member survives: delete removes ONLY the project entity.
-    const survivor = await agentQuery.get({ value: "agt_cascade_safe" });
-    expect(survivor.metadata?.slug).toBe("cascade-safe-agent");
-  });
-});