@stigmer/server 3.40.1 → 3.41.0

package/dist/temporal/mcpserver/engine-client.d.ts

@@ -19,7 +19,7 @@
 import type { Client } from "@temporalio/client";
 import type { Logger } from "../../boot/logger.js";
 import type { AgentExecutionTemporalConfig } from "../../domain/agentexecution/temporal/config.js";
-import type { ConnectRun, ConnectWorkflowInput, McpServerConnectEngine, McpServerEngineStateProvider } from "../../domain/mcpserver/engine.js";
+import type { ConnectRun, ConnectTaskQueue, ConnectWorkflowInput, McpServerConnectEngine, McpServerEngineStateProvider } from "../../domain/mcpserver/engine.js";
 import type { TemporalManager } from "../manager.js";
 export interface McpServerEngineDeps {
     readonly client: Client;
@@ -29,7 +29,7 @@ export interface McpServerEngineDeps {
 export declare class TemporalMcpServerConnectEngine implements McpServerConnectEngine {
     private readonly deps;
     constructor(deps: McpServerEngineDeps);
-    startOrAttachConnect(mcpServerId: string, input: ConnectWorkflowInput, runTimeoutMs: number): Promise<ConnectRun>;
+    startOrAttachConnect(mcpServerId: string, input: ConnectWorkflowInput, runTimeoutMs: number, taskQueue: ConnectTaskQueue): Promise<ConnectRun>;
     isConnectRunRunning(workflowId: string): Promise<boolean>;
     hasRunnerQueuePollers(): Promise<boolean | undefined>;
 }

package/dist/temporal/mcpserver/engine-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine-client.d.ts","sourceRoot":"","sources":["../../../src/temporal/mcpserver/engine-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAajD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AACnG,OAAO,KAAK,EACV,UAAU,EAGV,oBAAoB,EAEpB,sBAAsB,EAEtB,4BAA4B,EAC7B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,8BAA+B,YAAW,sBAAsB;IAC/D,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,mBAAmB;IAEhD,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,oBAAoB,EAC3B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,UAAU,CAAC;IA8ChB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAczD,qBAAqB,IAAI,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;CAmB5D;AAoGD;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE;IACpD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,4BAA4B,CAsB/B"}
+{"version":3,"file":"engine-client.d.ts","sourceRoot":"","sources":["../../../src/temporal/mcpserver/engine-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAajD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AACnG,OAAO,KAAK,EACV,UAAU,EAGV,gBAAgB,EAChB,oBAAoB,EAEpB,sBAAsB,EAEtB,4BAA4B,EAC7B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,8BAA+B,YAAW,sBAAsB;IAC/D,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,mBAAmB;IAEhD,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,oBAAoB,EAC3B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,gBAAgB,GAC1B,OAAO,CAAC,UAAU,CAAC;IAiDhB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAczD,qBAAqB,IAAI,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;CAmB5D;AAoGD;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE;IACpD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,4BAA4B,CAsB/B"}

package/dist/temporal/mcpserver/engine-client.js

@@ -11,13 +11,15 @@ export class TemporalMcpServerConnectEngine {
     constructor(deps) {
         this.deps = deps;
     }
-    async startOrAttachConnect(mcpServerId, input, runTimeoutMs) {
+    async startOrAttachConnect(mcpServerId, input, runTimeoutMs, taskQueue) {
         const { client, config, logger } = this.deps;
         const workflowId = connectWorkflowIdFor(mcpServerId);
         // MCP connect is not session-scoped (it discovers tools at the server
-        // level), so it always routes to the default runner queue regardless
-        // of routing mode (connect.go:642-645).
-        const runnerQueue = config.runnerQueue;
+        // level), so it never takes the agent-execution routing mode: it runs
+        // on the shared runner queue (connect.go:642-645) or, with a sandbox
+        // provisioner composed, on the queue its own connect sandbox serves —
+        // the domain decides which (engine.ts ConnectTaskQueue).
+        const runnerQueue = taskQueue.kind === "runner" ? config.runnerQueue : taskQueue.name;
         let handle;
         let attached = false;
         try {

package/dist/temporal/mcpserver/engine-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"engine-client.js","sourceRoot":"","sources":["../../../src/temporal/mcpserver/engine-client.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oCAAoC,GACrC,MAAM,oBAAoB,CAAC;AAC5B,yEAAyE;AACzE,oEAAoE;AACpE,oEAAoE;AACpE,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAc9C,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAElF,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAQzE,MAAM,OAAO,8BAA8B;IACZ;IAA7B,YAA6B,IAAyB;QAAzB,SAAI,GAAJ,IAAI,CAAqB;IAAG,CAAC;IAE1D,KAAK,CAAC,oBAAoB,CACxB,WAAmB,EACnB,KAA2B,EAC3B,YAAoB;QAEpB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7C,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACrD,sEAAsE;QACtE,qEAAqE;QACrE,wCAAwC;QACxC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QAEvC,IAAI,MAAsB,CAAC;QAC3B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAC1D,UAAU;gBACV,SAAS,EAAE,WAAW;gBACtB,kBAAkB,EAAE,YAAY;gBAChC,IAAI,EAAE,CAAC,KAAK,CAAC;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oCAAoC,EAAE,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBAClE,WAAW,EAAE,UAAU;oBACvB,aAAa,EAAE,WAAW;iBAC3B,CAAC,CAAC;gBACH,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAC/C,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAC1C,WAAW,EAAE,UAAU;gBACvB,aAAa,EAAE,WAAW;gBAC1B,YAAY,EAAE,WAAW;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU;YACV,QAAQ;YACR,MAAM,EAAE,CAAC,aAAsB,EAAE,EAAE,CACjC,eAAe,CAAC,MAAM,EAAE,aAAa,CAAC;SACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAC1C,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAChD,SAAS,CAAC,UAAU,CAAC;iBACrB,QAAQ,EAAE,CAAC;YACd,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC;gBAC9D,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;gBACnC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE;gBACvC,aAAa,EACX,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa;qBAC9C,wBAAwB;aAC9B,CAAC,CAAC;YACH,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE;gBAC1E,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAsB,EACtB,aAAiC;IAEjC,MAAM,aAAa,GAAG,MAAM;SACzB,MAAM,EAAE;SACR,IAAI,CAAC,CAAC,MAAM,EAAqB,EAAE;QAClC,iEAAiE;QACjE,+DAA+D;QAC/D,iEAAiE;QACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,IAAI,EAAE,CAA0B,EAAE,CAAC;IACvE,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAqB,EAAE;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEL,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAI,QAAoC,CAAC;IACzC,MAAM,eAAe,GAAG,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;QACjE,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,uDAAuD;YACvD,0DAA0D;YAC1D,mDAAmD;YACnD,OAAO,CAAC;gBACN,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE;aACjE,CAAC,CAAC;QACL,CAAC,EAAE,aAAa,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QACzC,oEAAoE;QACpE,yDAAyD;QACzD,mEAAmE;QACnE,sEAAsE;QACtE,yDAAyD;QACzD,iEAAiE;QACjE,kEAAkE;QAClE,IAAI,WAA2C,CAAC;QAChD,IAAI,OAAmC,CAAC;QACxC,IAAI,KAAK,GAAY,KAAK,CAAC,KAAK,CAAC;QACjC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACrE,WAAW,GAAG,KAAK,CAAC;YACtB,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBAC7D,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,KAAK,GAAI,KAA6B,CAAC,KAAK,CAAC;QAC/C,CAAC;QACD,+DAA+D;QAC/D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,8DAA8D;YAC9D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,mDAAmD;YACnD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EACL,KAAK,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE;gBAC9D,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO;gBACrB,CAAC,CAAC,KAAK,CAAC,OAAO;SACpB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,kEAAkE;QAClE,8CAA8C;QAC9C,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IACvC,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAI/C;IACC,IAAI,IAAiE,CAAC;IACtE,OAAO,GAAG,EAAE;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,8BAA8B,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjD,IAAI,GAAG;gBACL,MAAM;gBACN,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,IAAI,8BAA8B,CAAC;wBACzC,MAAM;wBACN,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAC;iBACH;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"engine-client.js","sourceRoot":"","sources":["../../../src/temporal/mcpserver/engine-client.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oCAAoC,GACrC,MAAM,oBAAoB,CAAC;AAC5B,yEAAyE;AACzE,oEAAoE;AACpE,oEAAoE;AACpE,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAe9C,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAElF,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAQzE,MAAM,OAAO,8BAA8B;IACZ;IAA7B,YAA6B,IAAyB;QAAzB,SAAI,GAAJ,IAAI,CAAqB;IAAG,CAAC;IAE1D,KAAK,CAAC,oBAAoB,CACxB,WAAmB,EACnB,KAA2B,EAC3B,YAAoB,EACpB,SAA2B;QAE3B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7C,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACrD,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,WAAW,GACf,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAEpE,IAAI,MAAsB,CAAC;QAC3B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAC1D,UAAU;gBACV,SAAS,EAAE,WAAW;gBACtB,kBAAkB,EAAE,YAAY;gBAChC,IAAI,EAAE,CAAC,KAAK,CAAC;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oCAAoC,EAAE,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBAClE,WAAW,EAAE,UAAU;oBACvB,aAAa,EAAE,WAAW;iBAC3B,CAAC,CAAC;gBACH,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAC/C,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAC1C,WAAW,EAAE,UAAU;gBACvB,aAAa,EAAE,WAAW;gBAC1B,YAAY,EAAE,WAAW;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU;YACV,QAAQ;YACR,MAAM,EAAE,CAAC,aAAsB,EAAE,EAAE,CACjC,eAAe,CAAC,MAAM,EAAE,aAAa,CAAC;SACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAC1C,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAChD,SAAS,CAAC,UAAU,CAAC;iBACrB,QAAQ,EAAE,CAAC;YACd,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC;gBAC9D,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;gBACnC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE;gBACvC,aAAa,EACX,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa;qBAC9C,wBAAwB;aAC9B,CAAC,CAAC;YACH,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE;gBAC1E,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAsB,EACtB,aAAiC;IAEjC,MAAM,aAAa,GAAG,MAAM;SACzB,MAAM,EAAE;SACR,IAAI,CAAC,CAAC,MAAM,EAAqB,EAAE;QAClC,iEAAiE;QACjE,+DAA+D;QAC/D,iEAAiE;QACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,IAAI,EAAE,CAA0B,EAAE,CAAC;IACvE,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAqB,EAAE;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEL,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAI,QAAoC,CAAC;IACzC,MAAM,eAAe,GAAG,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;QACjE,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YACzB,uDAAuD;YACvD,0DAA0D;YAC1D,mDAAmD;YACnD,OAAO,CAAC;gBACN,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE;aACjE,CAAC,CAAC;QACL,CAAC,EAAE,aAAa,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QACzC,oEAAoE;QACpE,yDAAyD;QACzD,mEAAmE;QACnE,sEAAsE;QACtE,yDAAyD;QACzD,iEAAiE;QACjE,kEAAkE;QAClE,IAAI,WAA2C,CAAC;QAChD,IAAI,OAAmC,CAAC;QACxC,IAAI,KAAK,GAAY,KAAK,CAAC,KAAK,CAAC;QACjC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACrE,WAAW,GAAG,KAAK,CAAC;YACtB,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBAC7D,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,KAAK,GAAI,KAA6B,CAAC,KAAK,CAAC;QAC/C,CAAC;QACD,+DAA+D;QAC/D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,8DAA8D;YAC9D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,mDAAmD;YACnD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EACL,KAAK,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE;gBAC9D,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO;gBACrB,CAAC,CAAC,KAAK,CAAC,OAAO;SACpB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,kEAAkE;QAClE,8CAA8C;QAC9C,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IACvC,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAI/C;IACC,IAAI,IAAiE,CAAC;IACtE,OAAO,GAAG,EAAE;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,8BAA8B,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjD,IAAI,GAAG;gBACL,MAAM;gBACN,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,IAAI,8BAA8B,CAAC;wBACzC,MAAM;wBACN,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAC;iBACH;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC"}

package/dist/temporal/mcpserver/names.d.ts

@@ -1,7 +1,9 @@
 /**
  * McpServer connect workflow wire identifiers — cross-edition constants
- * copied character-for-character from Go (connect.go:31-32, 584-586).
- * Renaming one is a wire protocol break (guidelines §2).
+ * copied character-for-character from Go (connect.go:31-32, 584-586), plus
+ * the connect sandbox's task queue (stigmer/stigmer#1474), which a
+ * sandboxed runner polls. Renaming one is a wire protocol break
+ * (guidelines §2).
  */
 /** The runner's connect workflow type (Go connectWorkflowName). */
 export declare const CONNECT_WORKFLOW_NAME = "stigmer/mcp-server/connect";
@@ -17,4 +19,13 @@ export declare const CONNECT_WORKFLOW_NAME = "stigmer/mcp-server/connect";
  * is.
  */
 export declare function connectWorkflowIdFor(mcpServerId: string): string;
+/**
+ * The task queue one connect sandbox serves: its runner polls exactly this
+ * queue (STIGMER_TASK_QUEUE) and the connect workflow is started on it. The
+ * colon form of every per-queue name (`session:`, `wfexec:`, `sandbox:`);
+ * the id is the connect's synthetic execution id
+ * (domain/mcpserver/connect-execution-id.ts), unique per attempt, so two
+ * connects of one server never share a sandbox.
+ */
+export declare function connectTaskQueueFor(connectExecutionId: string): string;
 //# sourceMappingURL=names.d.ts.map

package/dist/temporal/mcpserver/names.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../../../src/temporal/mcpserver/names.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,mEAAmE;AACnE,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE"}
+{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../../../src/temporal/mcpserver/names.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,mEAAmE;AACnE,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAEtE"}

package/dist/temporal/mcpserver/names.js

@@ -1,7 +1,9 @@
 /**
  * McpServer connect workflow wire identifiers — cross-edition constants
- * copied character-for-character from Go (connect.go:31-32, 584-586).
- * Renaming one is a wire protocol break (guidelines §2).
+ * copied character-for-character from Go (connect.go:31-32, 584-586), plus
+ * the connect sandbox's task queue (stigmer/stigmer#1474), which a
+ * sandboxed runner polls. Renaming one is a wire protocol break
+ * (guidelines §2).
  */
 /** The runner's connect workflow type (Go connectWorkflowName). */
 export const CONNECT_WORKFLOW_NAME = "stigmer/mcp-server/connect";
@@ -19,4 +21,15 @@ export const CONNECT_WORKFLOW_NAME = "stigmer/mcp-server/connect";
 export function connectWorkflowIdFor(mcpServerId) {
     return `${CONNECT_WORKFLOW_NAME}/${mcpServerId}`;
 }
+/**
+ * The task queue one connect sandbox serves: its runner polls exactly this
+ * queue (STIGMER_TASK_QUEUE) and the connect workflow is started on it. The
+ * colon form of every per-queue name (`session:`, `wfexec:`, `sandbox:`);
+ * the id is the connect's synthetic execution id
+ * (domain/mcpserver/connect-execution-id.ts), unique per attempt, so two
+ * connects of one server never share a sandbox.
+ */
+export function connectTaskQueueFor(connectExecutionId) {
+    return `mcpconnect:${connectExecutionId}`;
+}
 //# sourceMappingURL=names.js.map

package/dist/temporal/mcpserver/names.js.map

@@ -1 +1 @@
-{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../src/temporal/mcpserver/names.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAElE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,GAAG,qBAAqB,IAAI,WAAW,EAAE,CAAC;AACnD,CAAC"}
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../src/temporal/mcpserver/names.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAElE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,GAAG,qBAAqB,IAAI,WAAW,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,kBAA0B;IAC5D,OAAO,cAAc,kBAAkB,EAAE,CAAC;AAC5C,CAAC"}

package/dist/temporal/sdk-logger.d.ts

@@ -0,0 +1,74 @@
+/**
+ * The Temporal SDK's log lines, routed through the server logger (#1037).
+ *
+ * The SDK logs through its process-wide Runtime logger: `Activity failed`
+ * with the activity's identity and error, worker lifecycle lines, and every
+ * `log.*` a workflow body calls (the workflow sink resolves to the same
+ * logger). Left at its default, that logger writes its own format to
+ * stderr, outside LOG_LEVEL and outside the sink seam, so a deployable that
+ * exports the server's lines (boot/logger.ts's `sink`) never sees the
+ * warnings an operator most needs. One `Runtime.install({ logger })` before
+ * the first native connection routes them all through the server logger,
+ * with the same threshold, shape and export as every other line.
+ *
+ * Meta becomes fields by one table, keyed on who wrote the line. The SDK
+ * tags each line with `sdkComponent`; `workflow`, `activity` and `nexus`
+ * are the context loggers user code calls, and the SDK "never publishes
+ * messages with" them (@temporalio/common's SdkComponent). Those lines are
+ * ours and get the server logger's own contract: values pass as the call
+ * site wrote them, and redaction is the call site's. Every other line is
+ * the SDK's own, and keeps only strings, numbers and booleans, because
+ * its nested values are not ours to vouch for: at debug the SDK logs
+ * `Creating worker` with the whole worker options, which hold the payload
+ * codecs and their decryption keys. An unknown or absent component is
+ * treated as the SDK's, since the SDK says its component list may change.
+ * On every line: symbol keys are dropped (the workflow sink's call-time
+ * stamp rides one), `taskToken` is dropped (it can complete the activity
+ * from outside, and has no business in a log store), null and undefined
+ * are dropped, an Error becomes its message as every server call site logs
+ * one, and a bigint becomes its decimal string because JSON cannot carry
+ * it. Keys keep the SDK's names (`activityType`, `workflowId`), which are
+ * Temporal's documented vocabulary.
+ *
+ * Two consequences, accepted. A workflow line is stamped when its
+ * activation's sinks flush, milliseconds after the `log.*` call, because
+ * the server Logger takes no instant. And the table runs before the
+ * threshold drops a line, because the Logger exposes no level check; it
+ * walks a handful of keys, and drops the one large SDK object unwalked.
+ *
+ * Native (Rust core) lines stay on the console, as the SDK defaults:
+ * forwarding them makes the SDK buffer every runtime-logger line for
+ * 100 ms (RuntimeOptions' telemetryOptions.logging), which would delay and
+ * restamp `Activity failed` itself.
+ *
+ * The Runtime is a process singleton, so the install is a bridge with one
+ * process instance: the first attach installs an adapter that reads the
+ * bridge's current target, and every later attach (a reconnect, a second
+ * composition in one test process) only retargets it. A Runtime created
+ * before the first attach (a test environment, or an embedder that touched
+ * the SDK first) keeps the SDK default; the attach says so once and never
+ * fails the boot over it. TemporalManager attaches before every native
+ * connect, so every worker it builds, OSS and extension alike, is covered.
+ * A composition that prebuilds a bundle with `bundleWorkflowCode` passes
+ * that call its own logger: the bundler never reads the Runtime.
+ */
+import { type LogMetadata, type Logger as SdkLogger } from "@temporalio/common";
+import { type RuntimeOptions } from "@temporalio/worker";
+import type { LogFields, Logger } from "../boot/logger.js";
+/** The meta table (module header), exported for its own unit arms. */
+export declare function toLogFields(meta: LogMetadata | undefined): LogFields;
+/** The SDK's Logger over whichever server logger `target` returns now. */
+export declare function createSdkLoggerAdapter(target: () => Logger): SdkLogger;
+/** `Runtime.install`'s shape, the bridge's test seam. */
+export type RuntimeInstall = (options: RuntimeOptions) => unknown;
+export interface SdkLogBridge {
+    /**
+     * Routes the SDK's lines to `logger`: installs the Runtime logger on the
+     * first call, retargets it on every later one.
+     */
+    attach(logger: Logger): void;
+}
+export declare function createSdkLogBridge(install: RuntimeInstall): SdkLogBridge;
+/** The process's one bridge, over the SDK's one Runtime. */
+export declare const processSdkLogBridge: SdkLogBridge;
+//# sourceMappingURL=sdk-logger.d.ts.map

package/dist/temporal/sdk-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-logger.d.ts","sourceRoot":"","sources":["../../src/temporal/sdk-logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,MAAM,IAAI,SAAS,EACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAW,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAY,MAAM,mBAAmB,CAAC;AAoBrE,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAwBpE;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,MAAM,GAAG,SAAS,CAYtE;AAED,yDAAyD;AACzD,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,YAAY,CA+BxE;AAED,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB,EAAE,YAEjC,CAAC"}

package/dist/temporal/sdk-logger.js

@@ -0,0 +1,143 @@
+/**
+ * The Temporal SDK's log lines, routed through the server logger (#1037).
+ *
+ * The SDK logs through its process-wide Runtime logger: `Activity failed`
+ * with the activity's identity and error, worker lifecycle lines, and every
+ * `log.*` a workflow body calls (the workflow sink resolves to the same
+ * logger). Left at its default, that logger writes its own format to
+ * stderr, outside LOG_LEVEL and outside the sink seam, so a deployable that
+ * exports the server's lines (boot/logger.ts's `sink`) never sees the
+ * warnings an operator most needs. One `Runtime.install({ logger })` before
+ * the first native connection routes them all through the server logger,
+ * with the same threshold, shape and export as every other line.
+ *
+ * Meta becomes fields by one table, keyed on who wrote the line. The SDK
+ * tags each line with `sdkComponent`; `workflow`, `activity` and `nexus`
+ * are the context loggers user code calls, and the SDK "never publishes
+ * messages with" them (@temporalio/common's SdkComponent). Those lines are
+ * ours and get the server logger's own contract: values pass as the call
+ * site wrote them, and redaction is the call site's. Every other line is
+ * the SDK's own, and keeps only strings, numbers and booleans, because
+ * its nested values are not ours to vouch for: at debug the SDK logs
+ * `Creating worker` with the whole worker options, which hold the payload
+ * codecs and their decryption keys. An unknown or absent component is
+ * treated as the SDK's, since the SDK says its component list may change.
+ * On every line: symbol keys are dropped (the workflow sink's call-time
+ * stamp rides one), `taskToken` is dropped (it can complete the activity
+ * from outside, and has no business in a log store), null and undefined
+ * are dropped, an Error becomes its message as every server call site logs
+ * one, and a bigint becomes its decimal string because JSON cannot carry
+ * it. Keys keep the SDK's names (`activityType`, `workflowId`), which are
+ * Temporal's documented vocabulary.
+ *
+ * Two consequences, accepted. A workflow line is stamped when its
+ * activation's sinks flush, milliseconds after the `log.*` call, because
+ * the server Logger takes no instant. And the table runs before the
+ * threshold drops a line, because the Logger exposes no level check; it
+ * walks a handful of keys, and drops the one large SDK object unwalked.
+ *
+ * Native (Rust core) lines stay on the console, as the SDK defaults:
+ * forwarding them makes the SDK buffer every runtime-logger line for
+ * 100 ms (RuntimeOptions' telemetryOptions.logging), which would delay and
+ * restamp `Activity failed` itself.
+ *
+ * The Runtime is a process singleton, so the install is a bridge with one
+ * process instance: the first attach installs an adapter that reads the
+ * bridge's current target, and every later attach (a reconnect, a second
+ * composition in one test process) only retargets it. A Runtime created
+ * before the first attach (a test environment, or an embedder that touched
+ * the SDK first) keeps the SDK default; the attach says so once and never
+ * fails the boot over it. TemporalManager attaches before every native
+ * connect, so every worker it builds, OSS and extension alike, is covered.
+ * A composition that prebuilds a bundle with `bundleWorkflowCode` passes
+ * that call its own logger: the bundler never reads the Runtime.
+ */
+import { IllegalStateError, SdkComponent, } from "@temporalio/common";
+import { Runtime } from "@temporalio/worker";
+/** The components whose lines come from our own code (module header). */
+const CALLER_COMPONENTS = new Set([
+    SdkComponent.workflow,
+    SdkComponent.activity,
+    SdkComponent.nexus,
+]);
+/** Dropped on every line: it completes the activity from outside. */
+const TASK_TOKEN_KEY = "taskToken";
+const LEVELS = {
+    TRACE: "debug",
+    DEBUG: "debug",
+    INFO: "info",
+    WARN: "warn",
+    ERROR: "error",
+};
+/** The meta table (module header), exported for its own unit arms. */
+export function toLogFields(meta) {
+    const fields = {};
+    if (meta === undefined) {
+        return fields;
+    }
+    const fromCaller = CALLER_COMPONENTS.has(String(meta["sdkComponent"]));
+    for (const [key, value] of Object.entries(meta)) {
+        if (key === TASK_TOKEN_KEY || value === null || value === undefined) {
+            continue;
+        }
+        if (value instanceof Error) {
+            fields[key] = value.message;
+        }
+        else if (typeof value === "bigint") {
+            fields[key] = value.toString();
+        }
+        else if (fromCaller ||
+            typeof value === "string" ||
+            typeof value === "number" ||
+            typeof value === "boolean") {
+            fields[key] = value;
+        }
+    }
+    return fields;
+}
+/** The SDK's Logger over whichever server logger `target` returns now. */
+export function createSdkLoggerAdapter(target) {
+    const log = (level, message, meta) => {
+        target()[LEVELS[level]](message, toLogFields(meta));
+    };
+    return {
+        log,
+        trace: (message, meta) => log("TRACE", message, meta),
+        debug: (message, meta) => log("DEBUG", message, meta),
+        info: (message, meta) => log("INFO", message, meta),
+        warn: (message, meta) => log("WARN", message, meta),
+        error: (message, meta) => log("ERROR", message, meta),
+    };
+}
+export function createSdkLogBridge(install) {
+    let state = "pending";
+    let target;
+    const adapter = createSdkLoggerAdapter(() => {
+        if (target === undefined) {
+            throw new Error("Temporal SDK log bridge used before attach");
+        }
+        return target;
+    });
+    return {
+        attach(logger) {
+            target = logger;
+            if (state !== "pending") {
+                return;
+            }
+            try {
+                install({ logger: adapter });
+                state = "installed";
+            }
+            catch (error) {
+                if (!(error instanceof IllegalStateError)) {
+                    throw error;
+                }
+                state = "preempted";
+                logger.warn("Temporal SDK logger not installed: the Temporal runtime already existed before the worker manager's first connect", { error: error.message });
+            }
+        },
+    };
+}
+/** The process's one bridge, over the SDK's one Runtime. */
+export const processSdkLogBridge = createSdkLogBridge((options) => Runtime.install(options));
+//# sourceMappingURL=sdk-logger.js.map

package/dist/temporal/sdk-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-logger.js","sourceRoot":"","sources":["../../src/temporal/sdk-logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,GAIb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAuB,MAAM,oBAAoB,CAAC;AAIlE,yEAAyE;AACzE,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IACrD,YAAY,CAAC,QAAQ;IACrB,YAAY,CAAC,QAAQ;IACrB,YAAY,CAAC,KAAK;CACnB,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,cAAc,GAAG,WAAW,CAAC;AAEnC,MAAM,MAAM,GAAkC;IAC5C,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,IAA6B;IACvD,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,cAAc,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACpE,SAAS;QACX,CAAC;QACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,CAAC;aAAM,IACL,UAAU;YACV,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CAAC,MAAoB;IACzD,MAAM,GAAG,GAAG,CAAC,KAAkB,EAAE,OAAe,EAAE,IAAkB,EAAE,EAAE;QACtE,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,OAAO;QACL,GAAG;QACH,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;QACrD,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;QACrD,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;QACnD,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;QACnD,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;KACtD,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,IAAI,KAAK,GAA0C,SAAS,CAAC;IAC7D,IAAI,MAA0B,CAAC;IAC/B,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE;QAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,CAAC,MAAM;YACX,MAAM,GAAG,MAAM,CAAC;YAChB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC7B,KAAK,GAAG,WAAW,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,iBAAiB,CAAC,EAAE,CAAC;oBAC1C,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,KAAK,GAAG,WAAW,CAAC;gBACpB,MAAM,CAAC,IAAI,CACT,mHAAmH,EACnH,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CACzB,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAiB,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9E,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CACzB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/server",
-  "version": "3.40.1",
+  "version": "3.41.0",
   "description": "The Stigmer OSS control plane as a composable library: composeServer, the extension registry and the driver seams a composition builds on. The self-contained deployable of the same server is @stigmer/server-slim.",
   "license": "Apache-2.0",
   "type": "module",
@@ -63,11 +63,11 @@
     "@connectrpc/connect-node": "^2.0.0",
     "@kubernetes/client-node": "2.0.0",
     "@opentelemetry/api": "^1.9.0",
-    "@stigmer/outbound": "3.40.1",
-    "@stigmer/plugin-package": "3.40.1",
-    "@stigmer/protos": "3.40.1",
-    "@stigmer/temporal-codecs": "3.40.1",
-    "@stigmer/zip-structure": "3.40.1",
+    "@stigmer/outbound": "3.41.0",
+    "@stigmer/plugin-package": "3.41.0",
+    "@stigmer/protos": "3.41.0",
+    "@stigmer/temporal-codecs": "3.41.0",
+    "@stigmer/zip-structure": "3.41.0",
     "@temporalio/activity": "1.16.2",
     "@temporalio/client": "1.16.2",
     "@temporalio/common": "1.16.2",

package/src/authorization/README.md

@@ -42,14 +42,16 @@ computes.
   edition evaluates (`authorizer.ts`, arm 2).
 - `tuples.ts` — the tuple vocabulary (object, relation, subject; the string
   notation), the `Person` type (the caller as the model sees them: account id
-  plus the aliases a creator stamp may carry). The model declares no wildcard
+  plus the aliases a creator stamp may carry), and the `Principal` a check asks
+  about: a person, or any other object matched by its own reference. The model declares no wildcard
   subject and no condition, so a check carries no context and the parser refuses
   the `type:*` notation.
 - `person.ts` — the one construction of a `Person`: `resolvePerson` reads the
   caller's account through the port the way whoAmI does, `personFor` builds the
   aliases (the account id and the issuer subject; an email is nobody's) and
   refuses an identity that names no person. Every driver resolves the caller
-  here.
+  here; `personOfAccount` builds the same aliases for an account id no caller
+  stands for (an invitation's creator).
 - `evaluator.ts` — OpenFGA's check over a model and a tuple source: type
   restrictions enforced on direct tuples (model drift fails closed), a memo per
   (object, relation), OpenFGA's depth bound, cycles and undeclared targets as
@@ -68,7 +70,10 @@ computes.
   organization's owner is a row, and a stamp that names no person is no tuple. A
   source may be seeded with candidates' facts (the list scope), so a seeded
   object's tuples derive without a read of its row; a `derived` rule still reads
-  the row it needs.
+  the row it needs. A row is read where the composition keeps it: open source's
+  kinds from the generic Store, an account through the account port, and a kind
+  a unit keeps itself through the reader it registered
+  (`drivers.resourceRowReaders`).
 - `strict-json.ts` — the strict reads both data inputs share (the compiled
   model and the store tests): an unknown key or a wrong shape is a fault naming
   where, never a half-read input.
@@ -78,8 +83,9 @@ computes.
   with the Java copy; a kind this edition does not serve denied (a platform
   capability no self-host holds); the target loaded once through the source;
   `not-found` for a missing row except on the kinds the cloud never probes
-  (`NOT_FOUND_EXEMPT_KINDS`: `identity_account`, `iam_policy` — account ids
-  cannot be enumerated); the model's answer with an empty reason on a denial so
+  (`NOT_FOUND_EXEMPT_KINDS`, the cloud's own set: accounts, policies, platform
+  clients, and the platform, identity providers, invitations and teams an
+  edition above open source serves — ids cannot be enumerated); the model's answer with an empty reason on a denial so
   the annotation's copy wins; every fault `unavailable`, never a denial and
   never a throw.
 - `organization-directory.ts` — `findMyOrganizations` as the cloud answers it
@@ -100,8 +106,14 @@ computes.
   that does not decode skipped; the `internal` class keeps everything (the
   in-process skip); a fault throws and is never an empty answer; an undeclared
   kind is a consumer bug, loud.
+- `policy-check.ts` — the one query-engine verb a unit asks, "is this policy
+  held", answered by the evaluator for a person by account id or for any other
+  object; handed to units as the composition's `authorizationQueries` under
+  the built-in posture. Contextual policies and userset principals are refused.
 - `posture.ts` — the three postures, named once for the composition root and the
-  boot log.
+  boot log, and `kindsWithoutRows`: the served kinds the built-in posture could
+  not read, which refuses the boot of an edition above open source until each
+  has a reader.
 
 ## Proof
 

package/src/authorization/__tests__/authorizer.test.ts

@@ -115,12 +115,16 @@ const SEEDED_KINDS: ReadonlyArray<ApiResourceKind> = [
 afterAll(dropPostgresFixture);
 
 describe("NOT_FOUND_EXEMPT_KINDS", () => {
-  it("is the cloud's probe exemption restricted to the kinds this edition serves — identity_account, iam_policy and platform_client", () => {
+  it("is the cloud's probe exemption: accounts, policies and platform clients, and the platform, providers, invitations and teams a wider edition serves", () => {
     expect([...NOT_FOUND_EXEMPT_KINDS].sort()).toEqual(
       [
+        ApiResourceKind.platform,
         ApiResourceKind.identity_account,
+        ApiResourceKind.identity_provider,
         ApiResourceKind.iam_policy,
         ApiResourceKind.platform_client,
+        ApiResourceKind.invitation,
+        ApiResourceKind.team,
       ].sort(),
     );
   });

package/src/authorization/__tests__/derived-tuples.test.ts

@@ -379,6 +379,30 @@ describe.each(driverFixtures(SEEDED_KINDS))(
         ).toEqual([]);
       });
 
+      it("derives the organization's affiliated tuple from each role row the person holds there, in the same read", async () => {
+        const affiliated = async (person: Person) =>
+          (
+            await sourceFor(person).tuplesOf(
+              parseObjectRef("organization:acme"),
+              "affiliated",
+            )
+          ).map(formatTuple);
+        expect(await affiliated(ROOT)).toEqual([
+          "organization:acme#affiliated@identity_account:ida_root",
+        ]);
+        expect(await affiliated(DAVE)).toEqual([
+          "organization:acme#affiliated@identity_account:ida_dave",
+        ]);
+        // The userset row (a partner organization's members as viewers)
+        // is structure, not a role the person holds: no affiliation.
+        expect(
+          await sourceFor(ROOT).tuplesOf(
+            parseObjectRef("organization:partner"),
+            "affiliated",
+          ),
+        ).toEqual([]);
+      });
+
       it("answers the person's own rows on the organization, and nobody else's", async () => {
         const source = sourceFor(ROOT);
         expect(
@@ -736,6 +760,7 @@ describe.each(driverFixtures(SEEDED_KINDS))(
         expect(
           (await sourceFor(DAVE).personTuples()).map(formatTuple).sort(),
         ).toEqual([
+          "organization:acme#affiliated@identity_account:ida_dave",
           "organization:acme#member@identity_account:ida_dave",
           "team:tm_core#member@identity_account:ida_dave",
         ]);
@@ -778,6 +803,7 @@ describe.each(driverFixtures(SEEDED_KINDS))(
         const policies = newResourceIamPolicyStore(opened.store);
         await grant(policies, orgRole(ROOT.accountId, "owner", "acme"));
         await grant(policies, orgRole(DAVE.accountId, "member", "acme"));
+        await grant(policies, orgRole(CAROL.accountId, "member", "acme"));
         await seed("organization", "acme", {
           org: "",
           visibility: ApiResourceVisibility.visibility_private,

package/src/authorization/__tests__/evaluator.test.ts

@@ -73,9 +73,12 @@ async function allowed(
 }
 
 describe("a person against a direct tuple", () => {
+  // carol holds a role on acme, so her account carries the organization's
+  // `affiliated` tuple the model bounds every direct grant with.
   const source = newInMemoryTupleSource([
     tuple("agent:a#organization@organization:acme"),
     tuple("agent:a#owner@identity_account:auth0|carol"),
+    tuple("organization:acme#affiliated@identity_account:ida_carol"),
   ]);
 
   it("matches on any alias, so a row stamped with the 3.14 issuer subject is still its creator's", async () => {
@@ -256,6 +259,7 @@ describe("the walk itself", () => {
     // role AND still one of the organization's viewers.
     const source = newInMemoryTupleSource([
       tuple("organization:acme#viewer@identity_account:ida_vic"),
+      tuple("organization:acme#affiliated@identity_account:ida_vic"),
       tuple("team:sre#organization@organization:acme"),
       tuple("team:sre#member@identity_account:ida_vic"),
       tuple("team:sre#member@identity_account:ida_left"),

package/src/authorization/__tests__/list-read-scope.test.ts

@@ -618,22 +618,28 @@ describe.each(driverFixtures(SEEDED_KINDS))(
             expect(storeReads).toEqual({ rows: 0, scans: 0 });
           });
 
-          it("an unprovisioned subject is their raw subject and nothing else: the 3.14-stamped row is theirs, the organization's rows are not", async () => {
-            // `agt_legacy` is stamped with LEGACY's raw subject; a caller
-            // who IS that subject and holds no account reaches it through
-            // the alias, and reaches nothing the organization holds.
+          it("an unprovisioned subject holds no role, so it reaches nothing an organization holds, the row its 3.14 subject stamped included", async () => {
+            // `agt_legacy` is stamped with LEGACY's raw subject. A caller who
+            // IS that subject but holds no account holds no role on the
+            // organization, and every direct grant, authorship included, is
+            // bounded by the organization's `affiliated`: the row becomes
+            // theirs again once they sign in and their roles are assigned
+            // (the next case).
             expect(
               await listAs(idpShaped(LEGACY_SUBJECT), ApiResourceKind.agent, [
                 rows.get(ApiResourceKind.agent)!.get("agt_legacy")!,
                 rows.get(ApiResourceKind.agent)!.get("agt_org")!,
               ]),
-            ).toEqual(["agt_legacy"]);
+            ).toEqual([]);
             expect(
               await listAs(idpShaped(FRESH_SUBJECT), ApiResourceKind.agent),
             ).toEqual([]);
           });
 
           it("a provisioned account whose idp subject stamped the row still owns it — the alias comparison the 3.14 rows need, on the list verb", async () => {
+            // Provisioned: the membership rules gave the account whose
+            // subject stamped rows a role at its first sign-in.
+            await grant(orgRole(LEGACY, "member", ORG));
             expect(
               await listAs(resolved(LEGACY), ApiResourceKind.agent, [
                 rows.get(ApiResourceKind.agent)!.get("agt_legacy")!,

package/src/authorization/__tests__/store-tests.test.ts

@@ -51,8 +51,9 @@ const DOCUMENTS = [
   "agent-instance-creation.fga.yaml",
   "agent-share-owner.fga.yaml",
   "artifact-org-and-owner.fga.yaml",
+  "blueprint-editor.fga.yaml",
   "blueprint-private-visibility.fga.yaml",
-  "channel-app-owner.fga.yaml",
+  "channel-app-administration.fga.yaml",
   "channel-participation.fga.yaml",
   "channel-session-visibility.fga.yaml",
   "credit-issuer.fga.yaml",
@@ -65,6 +66,7 @@ const DOCUMENTS = [
   "oauth-app-administration.fga.yaml",
   "org-admin-owner-inheritance.fga.yaml",
   "org-shared-environment.fga.yaml",
+  "organization-affiliation-bound.fga.yaml",
   "organization-role-assignment.fga.yaml",
   "plan-catalog-manager.fga.yaml",
   "platform-client-administration.fga.yaml",