@stigmer/server 3.23.1-dev.20260923075205 → 3.25.0

package/dist/domain/platformclient/store.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The PlatformClientStore PORT: the storage contract the platform-client
+ * domain writes and reads through, so the cloud serves the same chains
+ * over its own `cloud.iam_platform_client` table by registering an
+ * implementation as `drivers.platformClientStore` (the identity-account
+ * and IamPolicy precedent: a port for an IAM kind whose rows an edition
+ * keeps in its own table). Open source's implementation is
+ * resource-store.ts over the generic Store.
+ *
+ * The methods are exactly the lookups the domain asks: by id (every
+ * chain, and the verifier's liveness read), by client_id (the mint), by
+ * org-scoped slug (getByReference, update addressed by slug, the
+ * duplicate check), by organization (listByOrg). A port carries nothing
+ * only one edition calls.
+ *
+ * Contract every implementation must satisfy — proven by the port-contract
+ * kit (store-contract.ts, exported), which the OSS adapter's test iterates
+ * on both drivers and a composition's driver test iterates too:
+ *   - `save` is create-only in effect: a held id, a held (org, slug) or a
+ *     held client_id raises DuplicatePlatformClientError, never a silent
+ *     overwrite;
+ *   - `update` replaces by id and never creates: an unknown id writes
+ *     nothing;
+ *   - `deleteById` of an unknown id resolves;
+ *   - `findByOrg` answers every client of the organization and no other,
+ *     in no promised order (the chain sorts);
+ *   - a typed not-found reads as `undefined`; any other storage failure
+ *     propagates as the infrastructure fault it is (the ratified
+ *     store-fault mapping — an outage must never read as "no client", which
+ *     on the verifier's path would revoke every live token).
+ */
+import type { PlatformClient } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/api_pb";
+/**
+ * Raised by `save` when the id, the (org, slug) pair or the client_id is
+ * already held, so the create chain answers ALREADY_EXISTS. `cause`
+ * carries a driver's own error (the cloud's SQLSTATE 23505) for the logs;
+ * the message is the port's.
+ */
+export declare class DuplicatePlatformClientError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+export interface PlatformClientStore {
+    /** Insert; a held id, (org, slug) or client_id raises DuplicatePlatformClientError. */
+    save(client: PlatformClient): Promise<void>;
+    /** Full-row replace by id; an unknown id writes nothing. */
+    update(client: PlatformClient): Promise<void>;
+    /** Removes the row; no error when it does not exist. */
+    deleteById(id: string): Promise<void>;
+    findById(id: string): Promise<PlatformClient | undefined>;
+    /** The client holding this public identifier — the mint's lookup. */
+    findByClientId(clientId: string): Promise<PlatformClient | undefined>;
+    findByOrgAndSlug(org: string, slug: string): Promise<PlatformClient | undefined>;
+    /** Every client of the organization, in no promised order. */
+    findByOrg(org: string): Promise<ReadonlyArray<PlatformClient>>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/domain/platformclient/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/domain/platformclient/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAE9F;;;;;GAKG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED,MAAM,WAAW,mBAAmB;IAClC,uFAAuF;IACvF,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,4DAA4D;IAC5D,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,wDAAwD;IACxD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC1D,qEAAqE;IACrE,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACtE,gBAAgB,CACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACvC,8DAA8D;IAC9D,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;CAChE"}

package/dist/domain/platformclient/store.js

@@ -0,0 +1,13 @@
+/**
+ * Raised by `save` when the id, the (org, slug) pair or the client_id is
+ * already held, so the create chain answers ALREADY_EXISTS. `cause`
+ * carries a driver's own error (the cloud's SQLSTATE 23505) for the logs;
+ * the message is the port's.
+ */
+export class DuplicatePlatformClientError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "DuplicatePlatformClientError";
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/domain/platformclient/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/domain/platformclient/store.ts"],"names":[],"mappings":"AAiCA;;;;;GAKG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF"}

package/dist/domain/platformclient/system-managed.d.ts

@@ -0,0 +1,18 @@
+import type { PlatformClient } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/api_pb";
+export interface SystemManagedPlatformClientInput {
+    /** The owning organization. */
+    readonly org: string;
+    /** A reserved slug (RESERVED_PLATFORM_CLIENT_SLUGS); anything else throws. */
+    readonly slug: string;
+    /** The display name a console would show. */
+    readonly name: string;
+    /** The creation instant stamped on both audit slots; defaults to the wall clock. */
+    readonly now?: Date;
+}
+/**
+ * A new system-managed client, ready for a store's `save`. Throws on an
+ * empty organization or a slug that is not reserved — an edition's
+ * programming error, never a request's.
+ */
+export declare function newSystemManagedPlatformClient(input: SystemManagedPlatformClientInput): PlatformClient;
+//# sourceMappingURL=system-managed.d.ts.map

package/dist/domain/platformclient/system-managed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-managed.d.ts","sourceRoot":"","sources":["../../../src/domain/platformclient/system-managed.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAsB9F,MAAM,WAAW,gCAAgC;IAC/C,+BAA+B;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,gCAAgC,GACtC,cAAc,CAuChB"}

package/dist/domain/platformclient/system-managed.js

@@ -0,0 +1,80 @@
+/**
+ * The one builder of a system-managed PlatformClient: the row an edition
+ * creates for itself, never through the create chain, so the tokens it
+ * signs on the platform's own behalf (a guest's, a schedule fire's) name a
+ * client that exists. Stigmer Cloud keeps one per organization under
+ * SYSTEM_SHARE_CLIENT_SLUG and persists it through its store driver.
+ *
+ * The domain already owns what such a client is — the create chain refuses
+ * its reserved slug (RefuseReservedSlug) and every mutation refuses its
+ * label (RefuseSystemManaged) — so the row is built here too, and the
+ * rules that make it safe hold by construction:
+ *   - it lives only under a reserved slug, which no user can create, so a
+ *     user client can never be mistaken for one;
+ *   - it carries the reserved `stigmer.ai/system-managed` label, so update,
+ *     delete and rotate refuse it;
+ *   - its credentials are real (a `client_id` unique like any other, a
+ *     hash, a fingerprint), but the secret is discarded here: nobody ever
+ *     authenticates as the platform's own client;
+ *   - its id is spelled like every other (`pcl_` + ULID, generateId);
+ *   - its audit names no actor, because no caller made it: the platform did.
+ *
+ * Who decides when one exists, and where it is stored, is the edition's:
+ * this function writes nothing. It writes no authorization tuples either —
+ * nothing authorizes against a system-managed client, and with none it
+ * stays out of every list and reference read a person makes.
+ */
+import { create } from "@bufbuild/protobuf";
+import { timestampFromDate } from "@bufbuild/protobuf/wkt";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ApiResourceAuditInfoSchema, ApiResourceAuditSchema, } from "@stigmer/protos/ai/stigmer/commons/apiresource/status_pb";
+import { PlatformClientSchema } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/api_pb";
+import { RESERVED_LABEL_TRUE, SYSTEM_MANAGED_LABEL, } from "../../pipeline/apiresource-labels.js";
+import { defaultVisibilityFor, getIdPrefix, } from "../../pipeline/apiresource-meta.js";
+import { generateId } from "../../pipeline/steps/defaults.js";
+import { PLATFORM_CLIENT_KIND_NAME, RESERVED_PLATFORM_CLIENT_SLUGS, } from "./constants.js";
+import { generateClientId, generateClientSecret, hashClientSecret, secretFingerprint, } from "./credentials.js";
+/**
+ * A new system-managed client, ready for a store's `save`. Throws on an
+ * empty organization or a slug that is not reserved — an edition's
+ * programming error, never a request's.
+ */
+export function newSystemManagedPlatformClient(input) {
+    if (input.org === "") {
+        throw new Error("a system-managed platform client needs an organization");
+    }
+    if (!RESERVED_PLATFORM_CLIENT_SLUGS.has(input.slug)) {
+        throw new Error(`'${input.slug}' is not a reserved platform-client slug; a system-managed client lives only under one (${[...RESERVED_PLATFORM_CLIENT_SLUGS].join(", ")})`);
+    }
+    const secret = generateClientSecret();
+    const created = timestampFromDate(input.now ?? new Date());
+    const audit = create(ApiResourceAuditInfoSchema, {
+        createdAt: created,
+        updatedAt: created,
+        event: "created",
+    });
+    return create(PlatformClientSchema, {
+        apiVersion: "iam.stigmer.ai/v1",
+        kind: PLATFORM_CLIENT_KIND_NAME,
+        metadata: {
+            id: generateId(getIdPrefix(ApiResourceKind.platform_client)),
+            org: input.org,
+            name: input.name,
+            slug: input.slug,
+            labels: { [SYSTEM_MANAGED_LABEL]: RESERVED_LABEL_TRUE },
+            visibility: defaultVisibilityFor(ApiResourceKind.platform_client),
+        },
+        spec: {
+            clientId: generateClientId(),
+            clientSecretHash: hashClientSecret(secret),
+            secretFingerprint: secretFingerprint(secret),
+        },
+        status: {
+            audit: create(ApiResourceAuditSchema, {
+                specAudit: audit,
+                statusAudit: audit,
+            }),
+        },
+    });
+}
+//# sourceMappingURL=system-managed.js.map

package/dist/domain/platformclient/system-managed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-managed.js","sourceRoot":"","sources":["../../../src/domain/platformclient/system-managed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAG/F,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,WAAW,GACZ,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EACL,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAa1B;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAuC;IAEvC,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,IAAI,KAAK,CAAC,IAAI,2FAA2F,CAAC,GAAG,8BAA8B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3J,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,0BAA0B,EAAE;QAC/C,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,oBAAoB,EAAE;QAClC,UAAU,EAAE,mBAAmB;QAC/B,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE;YACR,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YAC5D,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,mBAAmB,EAAE;YACvD,UAAU,EAAE,oBAAoB,CAAC,eAAe,CAAC,eAAe,CAAC;SAClE;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,gBAAgB,CAAC,MAAM,CAAC;YAC1C,iBAAiB,EAAE,iBAAiB,CAAC,MAAM,CAAC;SAC7C;QACD,MAAM,EAAE;YACN,KAAK,EAAE,MAAM,CAAC,sBAAsB,EAAE;gBACpC,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,KAAK;aACnB,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/platformclient/token-controller.d.ts

@@ -0,0 +1,11 @@
+import type { ConnectRouter } from "@connectrpc/connect";
+import type { GuestTokenMinting } from "../../extensions/guest-token-minting.js";
+import type { PlatformClientMintDeps } from "./mint.js";
+export interface PlatformClientTokenControllerDeps {
+    readonly mint: PlatformClientMintDeps;
+    /** The composed capability; undefined = mintGuestToken refuses UNIMPLEMENTED. */
+    readonly guestTokenMinting: GuestTokenMinting | undefined;
+}
+/** Registers the token service on the router (routes stage). */
+export declare function registerPlatformClientTokenService(router: ConnectRouter, deps: PlatformClientTokenControllerDeps): void;
+//# sourceMappingURL=token-controller.d.ts.map

package/dist/domain/platformclient/token-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-controller.d.ts","sourceRoot":"","sources":["../../../src/domain/platformclient/token-controller.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAGjF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,GAAG,SAAS,CAAC;CAC3D;AAED,gEAAgE;AAChE,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,iCAAiC,GACtC,IAAI,CAaN"}

package/dist/domain/platformclient/token-controller.js

@@ -0,0 +1,32 @@
+/**
+ * PlatformClientTokenController — the two public token RPCs, registered in
+ * every composition so the service has one owner (the routes stage refuses
+ * an extension that registers it again, boot/route-shadowing.ts):
+ *
+ *   - mintUserToken: the PlatformClient mint (mint.ts). Public on the wire
+ *     — the client authenticates with its credentials in the body, not a
+ *     bearer token — so there is no annotation to evaluate; the mint never
+ *     reads the chain's caller.
+ *   - mintGuestToken: the credential-free mint for anonymous visitors of a
+ *     shared agent's hosted page, dispatched to the composed guest-token
+ *     capability (extensions/guest-token-minting.ts). Without one — open
+ *     source hosts no shared-agent pages — it answers UNIMPLEMENTED with
+ *     the edition sentence, the identityFederation absent shape.
+ */
+import { Code, ConnectError } from "@connectrpc/connect";
+import { PlatformClientTokenController } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/token_pb";
+import { GUEST_MINT_UNIMPLEMENTED_MESSAGE } from "./constants.js";
+import { mintUserToken } from "./mint.js";
+/** Registers the token service on the router (routes stage). */
+export function registerPlatformClientTokenService(router, deps) {
+    router.service(PlatformClientTokenController, {
+        mintUserToken: (request) => mintUserToken(deps.mint, request),
+        mintGuestToken: (request, ctx) => {
+            if (deps.guestTokenMinting === undefined) {
+                throw new ConnectError(GUEST_MINT_UNIMPLEMENTED_MESSAGE, Code.Unimplemented);
+            }
+            return deps.guestTokenMinting.mintGuestToken(request, ctx.requestHeader);
+        },
+    });
+}
+//# sourceMappingURL=token-controller.js.map

package/dist/domain/platformclient/token-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-controller.js","sourceRoot":"","sources":["../../../src/domain/platformclient/token-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAG1G,OAAO,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAS1C,gEAAgE;AAChE,MAAM,UAAU,kCAAkC,CAChD,MAAqB,EACrB,IAAuC;IAEvC,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;QAC5C,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAC7D,cAAc,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;YAC/B,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,IAAI,YAAY,CACpB,gCAAgC,EAChC,IAAI,CAAC,aAAa,CACnB,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/platformclient/verifier.d.ts

@@ -0,0 +1,10 @@
+import type { IdentityVerifier } from "../../extensions/identity.js";
+import type { PlatformTokenKeyRing } from "../../platformtoken/key-ring.js";
+import type { PlatformClientStore } from "./store.js";
+export interface PlatformClientTokenVerifierDeps {
+    readonly keys: PlatformTokenKeyRing;
+    readonly clients: Pick<PlatformClientStore, "findById">;
+    readonly now?: () => Date;
+}
+export declare function newPlatformClientTokenVerifier(deps: PlatformClientTokenVerifierDeps): IdentityVerifier;
+//# sourceMappingURL=verifier.d.ts.map

package/dist/domain/platformclient/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../../src/domain/platformclient/verifier.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,8BAA8B,CAAC;AAOtC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAM5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,+BAA+B,GACpC,gBAAgB,CA8ClB"}

package/dist/domain/platformclient/verifier.js

@@ -0,0 +1,76 @@
+/**
+ * The PlatformClient user-token verifier: open source's one platform-token
+ * lane. It claims a token with `iss: "stigmer"` and NO `token_type` — the
+ * user token the mint signs — and passes every other token on:
+ *   - a token that is not a platform token is another verifier's (the
+ *     OIDC verifier's, an API key's);
+ *   - a typed platform token (guest, schedule, channel, the sandbox
+ *     family) belongs to the edition that mints it; open source verifies
+ *     only its own vocabulary, and on a server with no verifier for that
+ *     lane the chain refuses it as unclaimed.
+ * A platform token whose signature, expiry, audience or subject fails is
+ * refused here with the envelope's pinned copy, whichever lane it names —
+ * the refusal the cloud's verifier has always answered for it.
+ *
+ * Liveness is the verifier's (not a guard's), so every lane that
+ * authenticates — the serving chain and the extension HTTP edges that run
+ * the verifier chain without guards — refuses a deleted client's tokens on
+ * the next request, with the cloud's copy. A store fault propagates as the
+ * infrastructure fault it is, never as a revocation.
+ *
+ * Composed between `apikey` and `oidc`, only under an authentication
+ * posture (compose.ts): the OIDC verifier claims every JWT-shaped token and
+ * throws on one it cannot verify, so a platform token must be claimed
+ * before it gets there (stigmer#1137's lesson).
+ *
+ * The identity is the account the token was minted for: `sub` IS the
+ * account id (the mint signs it), so no account read is needed; class
+ * `user`, issuer "stigmer", the token carried (the memory-capture gate and
+ * the origin guard read its `platform_client_id`), and the email and name
+ * the platform asserted, for display only.
+ */
+import { Code, ConnectError } from "@connectrpc/connect";
+import { PLATFORM_TOKEN_ISSUER, platformTokenRefusalError, stringClaim, verifyPlatformToken, } from "../../platformtoken/envelope.js";
+import { DELETED_CLIENT_MESSAGE, TOKEN_NAMES_NO_CLIENT_MESSAGE, USER_TOKEN_CLAIMS, } from "./constants.js";
+export function newPlatformClientTokenVerifier(deps) {
+    return {
+        name: "platform-client",
+        async verify(token) {
+            const result = verifyPlatformToken(deps.keys, token, deps.now?.());
+            switch (result.outcome) {
+                case "foreign":
+                    return null;
+                case "refused":
+                    throw platformTokenRefusalError(result.refusal);
+                case "verified":
+                    break;
+                default: {
+                    const exhaustive = result;
+                    throw new Error(`unknown verification ${JSON.stringify(exhaustive)}`);
+                }
+            }
+            const verified = result.token;
+            if (verified.tokenType !== undefined) {
+                return null;
+            }
+            const platformClientId = stringClaim(verified.payload, USER_TOKEN_CLAIMS.platformClientId);
+            if (platformClientId === undefined) {
+                throw new ConnectError(TOKEN_NAMES_NO_CLIENT_MESSAGE, Code.Unauthenticated);
+            }
+            if ((await deps.clients.findById(platformClientId)) === undefined) {
+                throw new ConnectError(DELETED_CLIENT_MESSAGE, Code.Unauthenticated);
+            }
+            const email = stringClaim(verified.payload, USER_TOKEN_CLAIMS.email);
+            const displayName = stringClaim(verified.payload, USER_TOKEN_CLAIMS.name);
+            return {
+                identityId: verified.subject,
+                callerClass: "user",
+                issuer: PLATFORM_TOKEN_ISSUER,
+                rawToken: token,
+                ...(email !== undefined ? { email } : {}),
+                ...(displayName !== undefined ? { displayName } : {}),
+            };
+        },
+    };
+}
+//# sourceMappingURL=verifier.js.map

package/dist/domain/platformclient/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../../src/domain/platformclient/verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMzD,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,WAAW,EACX,mBAAmB,GACpB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AASxB,MAAM,UAAU,8BAA8B,CAC5C,IAAqC;IAErC,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,KAAK,CAAC,MAAM,CAAC,KAAa;YACxB,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnE,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,KAAK,SAAS;oBACZ,OAAO,IAAI,CAAC;gBACd,KAAK,SAAS;oBACZ,MAAM,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClD,KAAK,UAAU;oBACb,MAAM;gBACR,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,UAAU,GAAU,MAAM,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;YAC9B,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,gBAAgB,GAAG,WAAW,CAClC,QAAQ,CAAC,OAAO,EAChB,iBAAiB,CAAC,gBAAgB,CACnC,CAAC;YACF,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,IAAI,YAAY,CACpB,6BAA6B,EAC7B,IAAI,CAAC,eAAe,CACrB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClE,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC1E,OAAO;gBACL,UAAU,EAAE,QAAQ,CAAC,OAAO;gBAC5B,WAAW,EAAE,MAAM;gBACnB,MAAM,EAAE,qBAAqB;gBAC7B,QAAQ,EAAE,KAAK;gBACf,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domain/workflow/agent-call-references.d.ts

@@ -1,53 +1,80 @@
 /**
  * ValidateAgentCallReferences — the second collector for the reference rule
  * (pipeline/steps/references.ts): a workflow's `agent_call` tasks name their
- * agent as a STRING, `"slug"` or `"org/slug"`, inside a `google.protobuf.Struct`
- * config the generic spec walker cannot see, so the rule would never meet
- * them. This step parses each task's config through the converter's own
- * strict decoder (`unmarshalTaskConfig`, the one reader of a task config),
- * walks nested control-flow tasks exactly as the constraint validator does,
- * turns every `agent` string into a reference with the workflow as parent,
- * and asks the rule's one function — same clauses, same copy. It lives in
- * the workflow domain and not inside `InProcessValidator` because the
- * validator is pure over the spec by design and a rule that reads the
+ * agent as a STRING inside a `google.protobuf.Struct` config the generic
+ * spec walker cannot see, so the rule would never meet them. This step
+ * parses each task's config through the converter's own strict decoder
+ * (`unmarshalTaskConfig`, the one reader of a task config), walks nested
+ * control-flow tasks exactly as the constraint validator does, turns every
+ * `agent` string the write can judge into a reference with the workflow as
+ * parent, and asks the rule's one function — same clauses, same copy. It
+ * lives in the workflow domain and not inside `InProcessValidator` because
+ * the validator is pure over the spec by design and a rule that reads the
  * target's row cannot be.
  *
- * The parser here is STRICT: exactly `slug` or `org/slug`, both segments
- * non-empty, anything else refused at write naming the task. Two lenient
- * readers of the same string exist downstream and disagree with each other
- * (the runner's `parseAgentReference` in activities/call-agent.ts splits on
- * the first `/` and drops a third segment; the CLI's `parseReference` in
- * client-apps/cli/src/resources/reference.ts refuses a leading slash);
- * refusing every malformed shape here means neither ever meets one. The
- * three cannot share code — the packages share only the protos — so the
- * execution conformance suite is where their agreement is proven.
+ * The string has three forms (the `agent` field's contract in
+ * agent_call.proto), told apart by `classifyAgentReference`:
+ *
+ *   - `org/slug`, a LITERAL: judged now, like any stored reference;
+ *   - a bare `slug`, RELATIVE: the runner resolves it in the organization
+ *     the workflow runs in (`__stigmer_org_id`, the execution's), which is
+ *     not the workflow's when a person runs it from another organization by
+ *     id. It is judged now in the workflow's own organization with its
+ *     floor capped at org (references.ts, "RELATIVE");
+ *   - a value holding `${`, fixed only AT RUN: the runner's jq phase
+ *     (`${ expr }`, whole or embedded) or its activity phase
+ *     (`${.env_vars.KEY}`, `${.secrets.KEY}`) produces the reference when
+ *     the task runs. The write collects nothing for it; the run reads the
+ *     resolved agent as the person who ran the workflow, as it reads every
+ *     id-bound binding. The slug grammar (metadata.proto) can never contain
+ *     `${`, so the test is exact. It deliberately does not recognise only
+ *     the runner's shapes: that would be a second copy of the runner's
+ *     grammar in a package that shares only the protos with it, and a
+ *     mistyped expression already fails at run with the read's not-found.
+ *
+ * Anything else is refused at write naming the task. The runner's own
+ * parser (`parseAgentReference` in runner/src/activities/call-agent.ts) is
+ * lenient — it splits on the first `/` and drops a third segment — and the
+ * CLI's `parseReference` (client-apps/cli/src/resources/reference.ts)
+ * refuses a leading slash; refusing every malformed literal here means
+ * neither ever meets one. The three cannot share code; the conformance
+ * suites are where their agreement is proven.
  *
  * Runs after NormalizeReferences and ValidateReferences on the workflow
- * create and update chains, so the org the walk sees is the workflow's own
- * for a bare slug. Proven by __tests__/agent-call-references.test.ts and
- * the workflow conformance suite's reference arm.
+ * create and update chains, and feeds the workflow's escalation door
+ * (controller.ts). Proven by __tests__/agent-call-references.test.ts, the
+ * workflow conformance suite's agent_call reference arm, and the
+ * runner-as-subject execution arm for a reference fixed only at run.
  */
 import type { WorkflowSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/api_pb";
 import type { WorkflowSpec } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/spec_pb";
 import type { Store } from "../../store/interface.js";
 import type { PipelineStep } from "../../pipeline/pipeline.js";
 import type { SpecReference } from "../../pipeline/steps/references.js";
-/** The one sentence for an `agent` string that is neither `slug` nor `org/slug`. */
+/** The one sentence for an `agent` string that is none of the three forms. */
 export declare function malformedAgentReferenceMessage(taskName: string, agent: string): string;
-/**
- * `slug` or `org/slug` → the reference, with `org` empty for the bare form
- * (the caller fills the parent's). Returns undefined for any other shape.
- */
-export declare function parseAgentReference(agent: string): {
+/** What an `agent` string is before the rule reads it (the module header). */
+export type AgentReferenceForm = {
+    readonly kind: "literal";
     readonly org: string;
     readonly slug: string;
-} | undefined;
+} | {
+    readonly kind: "relative";
+    readonly slug: string;
+} | {
+    readonly kind: "run-time";
+} | {
+    readonly kind: "malformed";
+};
+export declare function classifyAgentReference(agent: string): AgentReferenceForm;
 /**
- * Every `agent_call` task's agent as a reference, nested tasks included in
- * declaration order, the bare form resolved to `parentOrg`. Throws
- * INVALID_ARGUMENT on the first malformed string. A config that does not
- * decode is skipped: the spec validation step has already refused the
- * workflow for it, and this collector never double-reports.
+ * Every `agent_call` task's agent the write can judge, as a reference,
+ * nested tasks included in declaration order: a literal as written, a
+ * relative slug in `parentOrg` and marked relative, a value fixed only at
+ * run not at all. Throws INVALID_ARGUMENT on the first malformed string. A
+ * config that does not decode is skipped: the spec validation step has
+ * already refused the workflow for it, and this collector never
+ * double-reports.
  */
 export declare function collectAgentCallReferences(spec: WorkflowSpec | undefined, parentOrg: string): SpecReference[];
 export declare function newValidateAgentCallReferencesStep(store: Store): PipelineStep<typeof WorkflowSchema>;

package/dist/domain/workflow/agent-call-references.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-call-references.d.ts","sourceRoot":"","sources":["../../../src/domain/workflow/agent-call-references.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AAE5F,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,wDAAwD,CAAC;AAIhE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,oCAAoC,CAAC;AAM5C,oFAAoF;AACpF,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,GACZ;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAS7D;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,aAAa,EAAE,CAyCjB;AAED,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,KAAK,GACX,YAAY,CAAC,OAAO,cAAc,CAAC,CAyBrC"}
+{"version":3,"file":"agent-call-references.d.ts","sourceRoot":"","sources":["../../../src/domain/workflow/agent-call-references.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AAE5F,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,wDAAwD,CAAC;AAIhE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,oCAAoC,CAAC;AAM5C,8EAA8E;AAC9E,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CAER;AAED,8EAA8E;AAC9E,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAKnC,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAYxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,aAAa,EAAE,CA4DjB;AAED,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,KAAK,GACX,YAAY,CAAC,OAAO,cAAc,CAAC,CAyBrC"}

package/dist/domain/workflow/agent-call-references.js

@@ -5,30 +5,33 @@ import { checkReferences } from "../../pipeline/steps/references.js";
 import { metadataOf } from "../../pipeline/steps/shapes.js";
 import { unmarshalTaskConfig } from "./converter/unmarshal.js";
 import { nestedTasks } from "./validation/task-config-constraints.js";
-/** The one sentence for an `agent` string that is neither `slug` nor `org/slug`. */
+/** The one sentence for an `agent` string that is none of the three forms. */
 export function malformedAgentReferenceMessage(taskName, agent) {
     return `task '${taskName}': agent '${agent}' is not a reference; write 'slug' for an agent of this organization or 'org/slug' for another organization's.`;
 }
-/**
- * `slug` or `org/slug` → the reference, with `org` empty for the bare form
- * (the caller fills the parent's). Returns undefined for any other shape.
- */
-export function parseAgentReference(agent) {
+/** Opens every runtime expression and placeholder the runner evaluates; never part of a slug. */
+const RUNTIME_EXPRESSION_MARKER = "${";
+export function classifyAgentReference(agent) {
+    if (agent.includes(RUNTIME_EXPRESSION_MARKER)) {
+        return { kind: "run-time" };
+    }
     const parts = agent.split("/");
-    if (parts.length === 1) {
-        return parts[0] === "" ? undefined : { org: "", slug: parts[0] };
+    if (parts.length === 1 && parts[0] !== "") {
+        return { kind: "relative", slug: parts[0] };
     }
     if (parts.length === 2 && parts[0] !== "" && parts[1] !== "") {
-        return { org: parts[0], slug: parts[1] };
+        return { kind: "literal", org: parts[0], slug: parts[1] };
     }
-    return undefined;
+    return { kind: "malformed" };
 }
 /**
- * Every `agent_call` task's agent as a reference, nested tasks included in
- * declaration order, the bare form resolved to `parentOrg`. Throws
- * INVALID_ARGUMENT on the first malformed string. A config that does not
- * decode is skipped: the spec validation step has already refused the
- * workflow for it, and this collector never double-reports.
+ * Every `agent_call` task's agent the write can judge, as a reference,
+ * nested tasks included in declaration order: a literal as written, a
+ * relative slug in `parentOrg` and marked relative, a value fixed only at
+ * run not at all. Throws INVALID_ARGUMENT on the first malformed string. A
+ * config that does not decode is skipped: the spec validation step has
+ * already refused the workflow for it, and this collector never
+ * double-reports.
  */
 export function collectAgentCallReferences(spec, parentOrg) {
     const refs = [];
@@ -47,15 +50,32 @@ export function collectAgentCallReferences(spec, parentOrg) {
             if (config !== undefined) {
                 if (task.kind === WorkflowTaskKind.agent_call) {
                     const agent = config.agent;
-                    const parsed = parseAgentReference(agent);
-                    if (parsed === undefined) {
-                        throw invalidArgumentError(malformedAgentReferenceMessage(task.name, agent));
+                    const form = classifyAgentReference(agent);
+                    switch (form.kind) {
+                        case "literal":
+                            refs.push({
+                                kind: ApiResourceKind.agent,
+                                org: form.org,
+                                slug: form.slug,
+                            });
+                            break;
+                        case "relative":
+                            refs.push({
+                                kind: ApiResourceKind.agent,
+                                org: parentOrg,
+                                slug: form.slug,
+                                resolvesIn: "running-organization",
+                            });
+                            break;
+                        case "run-time":
+                            break;
+                        case "malformed":
+                            throw invalidArgumentError(malformedAgentReferenceMessage(task.name, agent));
+                        default: {
+                            const exhaustive = form;
+                            throw new Error(`unknown agent reference form: ${JSON.stringify(exhaustive)}`);
+                        }
                     }
-                    refs.push({
-                        kind: ApiResourceKind.agent,
-                        org: parsed.org === "" ? parentOrg : parsed.org,
-                        slug: parsed.slug,
-                    });
                 }
                 for (const nested of nestedTasks(config)) {
                     visit(nested);

package/dist/domain/workflow/agent-call-references.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-call-references.js","sourceRoot":"","sources":["../../../src/domain/workflow/agent-call-references.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wDAAwD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAGtH,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAO/E,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAEtE,oFAAoF;AACpF,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,KAAa;IAEb,OAAO,SAAS,QAAQ,aAAa,KAAK,gHAAgH,CAAC;AAC7J,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7D,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAA8B,EAC9B,SAAiB;IAEjB,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAkB,EAAQ,EAAE;QACzC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;YACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,CAAC,UAAU,EAAE,CAAC;oBAC9C,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAC;oBACpD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;oBAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,MAAM,oBAAoB,CACxB,8BAA8B,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CACjD,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC;wBACR,IAAI,EAAE,eAAe,CAAC,KAAK;wBAC3B,GAAG,EAAE,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG;wBAC/C,IAAI,EAAE,MAAM,CAAC,IAAI;qBAClB,CAAC,CAAC;gBACL,CAAC;gBACD,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,KAAK,CAAC,OAAO,CAAC,GAA0C;YACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,0BAA0B,CAAC,EACrC,gCAAgC,CACjC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAoB;gBAC9B,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC3D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"agent-call-references.js","sourceRoot":"","sources":["../../../src/domain/workflow/agent-call-references.ts"],"names":[],"mappings":"AAsDA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wDAAwD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAGtH,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAO/E,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAEtE,8EAA8E;AAC9E,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,KAAa;IAEb,OAAO,SAAS,QAAQ,aAAa,KAAK,gHAAgH,CAAC;AAC7J,CAAC;AASD,iGAAiG;AACjG,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAA8B,EAC9B,SAAiB;IAEjB,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAkB,EAAQ,EAAE;QACzC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;YACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,CAAC,UAAU,EAAE,CAAC;oBAC9C,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAC;oBACpD,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;oBAC3C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;wBAClB,KAAK,SAAS;4BACZ,IAAI,CAAC,IAAI,CAAC;gCACR,IAAI,EAAE,eAAe,CAAC,KAAK;gCAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;gCACb,IAAI,EAAE,IAAI,CAAC,IAAI;6BAChB,CAAC,CAAC;4BACH,MAAM;wBACR,KAAK,UAAU;4BACb,IAAI,CAAC,IAAI,CAAC;gCACR,IAAI,EAAE,eAAe,CAAC,KAAK;gCAC3B,GAAG,EAAE,SAAS;gCACd,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,UAAU,EAAE,sBAAsB;6BACnC,CAAC,CAAC;4BACH,MAAM;wBACR,KAAK,UAAU;4BACb,MAAM;wBACR,KAAK,WAAW;4BACd,MAAM,oBAAoB,CACxB,8BAA8B,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CACjD,CAAC;wBACJ,OAAO,CAAC,CAAC,CAAC;4BACR,MAAM,UAAU,GAAU,IAAI,CAAC;4BAC/B,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAC9D,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,KAAK,CAAC,OAAO,CAAC,GAA0C;YACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,0BAA0B,CAAC,EACrC,gCAAgC,CACjC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAoB;gBAC9B,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC3D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domain/workflow/registry/data/task-kind-registry.json

@@ -1362,7 +1362,7 @@
                 {
                     "name": "agent",
                     "displayName": "Agent",
-                    "description": "Agent reference in \"org/slug\" or \"slug\" format. - \"slug\" only: uses the workflow's organization - \"org/slug\": explicit organization reference Examples: \"code-reviewer\", \"stigmer/code-reviewer\", \"acme/data-analyst\" Required field.",
+                    "description": "Agent to invoke, as \"slug\", \"org/slug\", or a value holding a runtime expression. - \"slug\": an agent of the organization the workflow runs in; checked when the workflow is saved, against the workflow's own organization - \"org/slug\": that organization's agent; checked when the workflow is saved, and another organization's agent must be shared at platform visibility - a value holding \"${ ... }\", \"${.env_vars.KEY}\" or \"${.secrets.KEY}\": resolved to \"slug\" or \"org/slug\" when the task runs, and read as the person who ran the workflow Examples: \"code-reviewer\", \"acme/data-analyst\", \"${.env_vars.TEAM_ORG}/assistant\" Required field.",
                     "type": "string",
                     "required": true,
                     "groupId": "core",
@@ -1470,7 +1470,7 @@
                 "additionalProperties": false,
                 "properties": {
                     "agent": {
-                        "description": "Agent reference in \"org/slug\" or \"slug\" format. - \"slug\" only: uses the workflow's organization - \"org/slug\": explicit organization reference Examples: \"code-reviewer\", \"stigmer/code-reviewer\", \"acme/data-analyst\" Required field.",
+                        "description": "Agent to invoke, as \"slug\", \"org/slug\", or a value holding a runtime expression. - \"slug\": an agent of the organization the workflow runs in; checked when the workflow is saved, against the workflow's own organization - \"org/slug\": that organization's agent; checked when the workflow is saved, and another organization's agent must be shared at platform visibility - a value holding \"${ ... }\", \"${.env_vars.KEY}\" or \"${.secrets.KEY}\": resolved to \"slug\" or \"org/slug\" when the task runs, and read as the person who ran the workflow Examples: \"code-reviewer\", \"acme/data-analyst\", \"${.env_vars.TEAM_ORG}/assistant\" Required field.",
                         "maxLength": 127,
                         "minLength": 1,
                         "type": "string"