stageflow 0.35.0 → 0.39.0

package/dist/config/mergePipelineIncludes.d.ts

@@ -2,6 +2,7 @@ import type { PayloadSchemaMap } from "../envelope/payloadSchema.js";
 import type { InlinePipelineDefinition } from "../types/pipeline.js";
 import { type LoadIssue, type LoadOutcome } from "./loadOutcome.js";
 import { type ToolRequirement } from "./toolRequires.js";
+import type { StageChannel } from "../types/stage.js";
 export type RawMergedEntry = {
     raw: unknown;
     declaringPath: string;
@@ -13,6 +14,8 @@ export declare function mergePipelineStages(rootPath: string): Promise<LoadOutco
     model?: string;
     schemas?: PayloadSchemaMap;
     requires?: ToolRequirement[];
+    channels?: StageChannel[];
+    memories?: string[];
     warnings: LoadIssue[];
 }>>;
 /** Synthetic `declaringPath` for stage entries with no backing file. */
@@ -24,5 +27,7 @@ export declare function mergeInlinePipelineStages(raw: InlinePipelineDefinition)
     model?: string;
     schemas?: PayloadSchemaMap;
     requires?: ToolRequirement[];
+    channels?: StageChannel[];
+    memories?: string[];
     warnings: LoadIssue[];
 }>>;

package/dist/config/mergePipelineIncludes.js

@@ -6,6 +6,8 @@ import { parseModelField } from "./modelField.js";
 import { readYamlObject } from "./readYamlObject.js";
 import { yamlParsePosition } from "./yamlParsePosition.js";
 import { parseToolRequires } from "./toolRequires.js";
+import { parseChannels } from "../channels/stageChannels.js";
+import { parseMemoryIdList } from "../memory/ids.js";
 import { classifyYamlDocument, collectDocumentKeys, mixedDialectIssue, } from "./yamlDialect.js";
 function isPlainObject(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -189,6 +191,14 @@ export async function mergePipelineStages(rootPath) {
     if (!requiresOutcome.ok)
         return requiresOutcome;
     const requires = requiresOutcome.value;
+    const channelsOutcome = parsePipelineChannels(raw.channels, `pipeline ${absRoot}`, pipelineId);
+    if (!channelsOutcome.ok)
+        return channelsOutcome;
+    const channels = channelsOutcome.value;
+    const memoriesOutcome = parsePipelineMemories(raw.memories, `pipeline ${absRoot}`, pipelineId);
+    if (!memoriesOutcome.ok)
+        return memoriesOutcome;
+    const memories = memoriesOutcome.value;
     const idLocations = new Map();
     const entries = [];
     const warnings = [];
@@ -211,6 +221,8 @@ export async function mergePipelineStages(rootPath) {
         ...(model !== undefined ? { model } : {}),
         ...(schemas !== undefined ? { schemas } : {}),
         ...(requires !== undefined ? { requires } : {}),
+        ...(channels !== undefined ? { channels } : {}),
+        ...(memories !== undefined ? { memories } : {}),
         warnings,
     });
 }
@@ -273,6 +285,14 @@ export async function mergeInlinePipelineStages(raw) {
     if (!requiresOutcome.ok)
         return requiresOutcome;
     const requires = requiresOutcome.value;
+    const channelsOutcome = parsePipelineChannels(raw.channels, `inline pipeline ${pipelineId}`, pipelineId);
+    if (!channelsOutcome.ok)
+        return channelsOutcome;
+    const channels = channelsOutcome.value;
+    const memoriesOutcome = parsePipelineMemories(raw.memories, `inline pipeline ${pipelineId}`, pipelineId);
+    if (!memoriesOutcome.ok)
+        return memoriesOutcome;
+    const memories = memoriesOutcome.value;
     const entries = [];
     for (let index = 0; index < raw.stages.length; index++) {
         const entry = raw.stages[index];
@@ -295,9 +315,41 @@ export async function mergeInlinePipelineStages(raw) {
         ...(model !== undefined ? { model } : {}),
         ...(schemas !== undefined ? { schemas } : {}),
         ...(requires !== undefined ? { requires } : {}),
+        ...(channels !== undefined ? { channels } : {}),
+        ...(memories !== undefined ? { memories } : {}),
         warnings: [],
     });
 }
+function parsePipelineMemories(raw, label, pipelineId) {
+    const parsed = parseMemoryIdList(raw);
+    if (!parsed.ok) {
+        return loadFailure([
+            {
+                code: "pipeline.invalid_memories",
+                message: `Invalid ${label}: ${parsed.message}`,
+                category: "pipeline",
+                pipelineId,
+            },
+        ]);
+    }
+    return loadSuccess(parsed.value);
+}
+function parsePipelineChannels(raw, label, pipelineId) {
+    if (raw === undefined)
+        return loadSuccess(undefined);
+    const parsed = parseChannels(raw);
+    if (!parsed.ok) {
+        return loadFailure([
+            {
+                code: "pipeline.invalid_channels",
+                message: `Invalid ${label}: ${parsed.message}`,
+                category: "pipeline",
+                pipelineId,
+            },
+        ]);
+    }
+    return loadSuccess(parsed.value);
+}
 function parsePipelineSchemas(raw, absPath, pipelineId) {
     if (raw === undefined)
         return loadSuccess(undefined);

package/dist/config/pipelineStageKeys.js

@@ -29,6 +29,7 @@ export const WIRING_KEYS = new Set([
 /** Stage body keys. Target: `io` / `verify`. IR/legacy: `payload_schema`, `pre_emit_checks`, `clone_input_schema`. */
 export const BODY_KEYS = new Set([
     "email",
+    "channels",
     "system_prompt",
     "model",
     "payload_schema",

package/dist/config/resolveStageMcpServers.d.ts

@@ -1,4 +1,4 @@
-export type StageMcpErrorCode = "missing_catalog" | "unknown_server" | "reserved_name" | "unresolved_var" | "invalid_config" | "untrusted_config_origin" | "connect_failed";
+export type StageMcpErrorCode = "missing_catalog" | "unknown_server" | "reserved_name" | "unresolved_var" | "invalid_config" | "untrusted_config_origin" | "connect_failed" | "host_state_corrupt";
 export declare class StageMcpError extends Error {
     readonly code: StageMcpErrorCode;
     constructor(message: string, code: StageMcpErrorCode);
@@ -9,18 +9,45 @@ export declare const MCP_CATALOG_FILENAME = ".mcp.json";
 export declare const STAGEFLOW_STAGE_ARTIFACTS_DIR_ENV = "STAGEFLOW_STAGE_ARTIFACTS_DIR";
 export declare function stampStagePromptArtifactsDir(prompt: string, artifactsDir: string): string;
 export type McpCatalogServers = Record<string, Record<string, unknown>>;
+export type McpServerOrigin = "project" | "console";
 export type InspectedMcpCatalog = {
     path: string;
     servers: McpCatalogServers;
+    /** Where each server came from; `console` = saved from the UI under $STAGEFLOW_HOME. */
+    origins: Record<string, McpServerOrigin>;
+};
+/**
+ * Who is asking. Without a scope only the project `.mcp.json` is visible; with one, servers saved
+ * from the console are merged in (console entry wins on a name clash) and secrets are filled by
+ * the rules of that scope:
+ * - stage:    console secrets whose names the stage declared in `secrets:`, plus the stage env
+ * - agent:    console secrets plus Host env names listed in STAGEFLOW_MCP_ENV_ALLOW
+ * - probe:    same as agent, so a probe and an agent run resolve one config identically
+ * - validate: placeholders are checked but no secret value is ever read into the output
+ * Console secrets always win over Host env for the same name.
+ */
+export type McpResolveScope = {
+    kind: "stage";
+    secrets: readonly string[];
+} | {
+    kind: "agent";
+} | {
+    kind: "probe";
+} | {
+    kind: "validate";
+};
+export type McpCatalogLoadOptions = {
+    scope?: McpResolveScope;
 };
 export declare function mcpCatalogPath(projectRoot: string): string;
 export declare function parseMcpCatalog(raw: string, catalogPath?: string): McpCatalogServers;
-export declare function mcpCatalogExists(projectRoot: string): Promise<boolean>;
-export declare function loadMcpCatalog(projectRoot: string): Promise<InspectedMcpCatalog>;
+export declare function mcpCatalogExists(projectRoot: string, options?: McpCatalogLoadOptions): Promise<boolean>;
+export declare function loadMcpCatalog(projectRoot: string, options?: McpCatalogLoadOptions): Promise<InspectedMcpCatalog>;
 export type ProjectMcpCatalogTransport = "stdio" | "http";
 export type ProjectMcpCatalogEntry = {
     name: string;
     transport: ProjectMcpCatalogTransport;
+    origin: McpServerOrigin;
 };
 export type ProjectMcpCatalogListStatus = "ok" | "missing_catalog" | "invalid_config";
 export type ProjectMcpCatalogList = {
@@ -32,7 +59,10 @@ export declare function assertMcpAllowlistKnown(servers: McpCatalogServers, allo
 export declare function resolveStageMcpServers(options: {
     projectRoot: string;
     allowlist?: readonly string[];
+    /** Stage env for the project-only and stage scopes; agent/probe/validate do not read it as a secret source. */
     env: NodeJS.ProcessEnv;
+    /** Host env that STAGEFLOW_MCP_ENV_ALLOW may draw from (agent/probe scopes). Defaults to process.env. */
+    hostEnv?: NodeJS.ProcessEnv;
     stageId?: string;
     bindingKind?: "repository" | "checkout" | "none";
     trustWorkspaceConfig?: string[];
@@ -40,4 +70,6 @@ export declare function resolveStageMcpServers(options: {
     trustProjectRoot?: string;
     /** When true, .mcp.json is treated as workspace-sourced. */
     workspaceSourced?: boolean;
+    /** Merge console-saved servers and fill `${VAR}` by the scope's rules. Omit for project-only. */
+    scope?: McpResolveScope;
 }): Promise<ResolvedMcpServers>;

package/dist/config/resolveStageMcpServers.js

@@ -1,6 +1,8 @@
 import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { STAGEFLOW_MCP_SERVER_NAME } from "../agent/claudeTools.js";
+import { isMcpHostStateError, mcpEnvAllowNames, readHostMcpServers, readMcpSecrets, } from "./mcpHostCatalog.js";
+import { assertSafeMcpUrl, McpUrlPolicyError } from "./mcpRedaction.js";
 export class StageMcpError extends Error {
     code;
     constructor(message, code) {
@@ -51,7 +53,31 @@ export function parseMcpCatalog(raw, catalogPath = MCP_CATALOG_FILENAME) {
     }
     return servers;
 }
-export async function mcpCatalogExists(projectRoot) {
+/** Console servers; a corrupt host file surfaces as a StageMcpError instead of reading as empty. */
+function hostServersOrThrow() {
+    try {
+        return readHostMcpServers();
+    }
+    catch (err) {
+        if (isMcpHostStateError(err))
+            throw new StageMcpError(err.message, "host_state_corrupt");
+        throw err;
+    }
+}
+function hostSecretsOrThrow() {
+    try {
+        return readMcpSecrets();
+    }
+    catch (err) {
+        if (isMcpHostStateError(err))
+            throw new StageMcpError(err.message, "host_state_corrupt");
+        throw err;
+    }
+}
+export async function mcpCatalogExists(projectRoot, options = {}) {
+    if (options.scope !== undefined && Object.keys(hostServersOrThrow()).length > 0) {
+        return true;
+    }
     try {
         await readFile(mcpCatalogPath(projectRoot), "utf8");
         return true;
@@ -63,20 +89,31 @@ export async function mcpCatalogExists(projectRoot) {
         throw err;
     }
 }
-export async function loadMcpCatalog(projectRoot) {
+export async function loadMcpCatalog(projectRoot, options = {}) {
     const catalogPath = mcpCatalogPath(projectRoot);
+    const hostServers = options.scope !== undefined ? hostServersOrThrow() : {};
     let raw;
     try {
         raw = await readFile(catalogPath, "utf8");
     }
     catch (err) {
         const code = err.code;
-        if (code === "ENOENT") {
+        if (code !== "ENOENT") {
+            throw new StageMcpError(`MCP catalog "${MCP_CATALOG_FILENAME}" could not be read`, "invalid_config");
+        }
+        if (Object.keys(hostServers).length === 0) {
             throw new StageMcpError(`MCP catalog "${MCP_CATALOG_FILENAME}" is missing`, "missing_catalog");
         }
-        throw new StageMcpError(`MCP catalog "${MCP_CATALOG_FILENAME}" could not be read`, "invalid_config");
     }
-    return { path: catalogPath, servers: parseMcpCatalog(raw, catalogPath) };
+    const servers = raw !== undefined ? parseMcpCatalog(raw, catalogPath) : {};
+    const origins = {};
+    for (const name of Object.keys(servers))
+        origins[name] = "project";
+    for (const [name, entry] of Object.entries(hostServers)) {
+        servers[name] = entry;
+        origins[name] = "console";
+    }
+    return { path: catalogPath, servers, origins };
 }
 function coarseMcpTransport(entry) {
     if (Object.hasOwn(entry, "command")) {
@@ -89,14 +126,20 @@ function coarseMcpTransport(entry) {
 }
 export async function listProjectMcpCatalog(projectRoot) {
     try {
-        const catalog = await loadMcpCatalog(projectRoot);
+        const catalog = await loadMcpCatalog(projectRoot, {
+            scope: { kind: "validate" },
+        });
         const servers = [];
         for (const [name, entry] of Object.entries(catalog.servers)) {
             const transport = coarseMcpTransport(entry);
             if (transport === undefined) {
                 return { status: "invalid_config", servers: [] };
             }
-            servers.push({ name, transport });
+            servers.push({
+                name,
+                transport,
+                origin: catalog.origins[name] ?? "project",
+            });
         }
         return { status: "ok", servers };
     }
@@ -207,6 +250,69 @@ function interpolateServer(entry, env, serverName, projectRoot, stageId) {
     }
     return stampSpawnRoot(resolved, projectRoot, serverName);
 }
+function bagOfStrings(value) {
+    return isPlainObject(value) && Object.values(value).every((v) => typeof v === "string");
+}
+/** Shape check for any entry about to be used (project or console). */
+function assertEntryShape(name, entry) {
+    const bad = (what) => {
+        throw new StageMcpError(`MCP catalog server "${name}" ${what}`, "invalid_config");
+    };
+    const hasCommand = Object.hasOwn(entry, "command");
+    const hasUrl = Object.hasOwn(entry, "url");
+    if (hasCommand === hasUrl)
+        bad('needs exactly one of "command" or "url"');
+    if (hasCommand && (typeof entry.command !== "string" || entry.command.length === 0)) {
+        bad('"command" must be a non-empty string');
+    }
+    if (hasUrl && (typeof entry.url !== "string" || entry.url.length === 0)) {
+        bad('"url" must be a non-empty string');
+    }
+    if (entry.args !== undefined &&
+        (!Array.isArray(entry.args) || entry.args.some((a) => typeof a !== "string"))) {
+        bad('"args" must be an array of strings');
+    }
+    for (const key of ["env", "headers"]) {
+        if (entry[key] !== undefined && !bagOfStrings(entry[key]))
+            bad(`"${key}" must map names to strings`);
+    }
+    if (entry.cwd !== undefined && typeof entry.cwd !== "string")
+        bad('"cwd" must be a string');
+}
+function assertResolvedUrlSafe(name, resolved) {
+    if (typeof resolved.url !== "string")
+        return;
+    try {
+        assertSafeMcpUrl(resolved.url);
+    }
+    catch (err) {
+        if (err instanceof McpUrlPolicyError) {
+            throw new StageMcpError(`MCP catalog server "${name}": ${err.message}`, "invalid_config");
+        }
+        throw err;
+    }
+}
+const VALIDATE_PLACEHOLDER = "<redacted>";
+/** The values `${NAME}` may be filled from, by scope. Console secrets win over Host env. */
+function envForScope(scope, stageEnv, hostEnv) {
+    const secrets = hostSecretsOrThrow();
+    if (scope.kind === "stage") {
+        const declared = new Set(scope.secrets);
+        const own = Object.fromEntries(Object.entries(secrets).filter(([n]) => declared.has(n)));
+        return { ...stageEnv, ...own };
+    }
+    const allowed = {};
+    for (const n of mcpEnvAllowNames(hostEnv)) {
+        if (hostEnv[n] !== undefined)
+            allowed[n] = hostEnv[n];
+    }
+    if (scope.kind === "validate") {
+        const names = new Set([...Object.keys(secrets), ...Object.keys(allowed), ...Object.keys(stageEnv)]);
+        return Object.fromEntries([...names].map((n) => [n, VALIDATE_PLACEHOLDER]));
+    }
+    // agent and probe: one rule, so the same config resolves the same way in both.
+    return { ...allowed, ...secrets };
+}
 export async function resolveStageMcpServers(options) {
     const allowlist = options.allowlist ?? [];
     if (allowlist.length === 0) {
@@ -224,11 +330,20 @@ export async function resolveStageMcpServers(options) {
             throw new StageMcpError(decision.message ?? "untrusted_config_origin", "untrusted_config_origin");
         }
     }
-    const catalog = await loadMcpCatalog(options.projectRoot);
+    // Workspace-sourced catalogs never see console servers or secrets.
+    const scope = options.workspaceSourced === true ? undefined : options.scope;
+    const catalog = await loadMcpCatalog(options.projectRoot, scope ? { scope } : {});
     assertMcpAllowlistKnown(catalog.servers, allowlist);
+    const env = scope
+        ? envForScope(scope, options.env, options.hostEnv ?? process.env)
+        : options.env;
     const resolved = {};
     for (const name of allowlist) {
-        resolved[name] = interpolateServer(catalog.servers[name], options.env, name, options.projectRoot, options.stageId);
+        const entry = catalog.servers[name];
+        assertEntryShape(name, entry);
+        resolved[name] = interpolateServer(entry, env, name, options.projectRoot, options.stageId);
+        if (scope?.kind !== "validate")
+            assertResolvedUrlSafe(name, resolved[name]);
     }
     return resolved;
 }

package/dist/config/validateCatalog.d.ts

@@ -1,9 +1,10 @@
 import type { InlinePipelineDefinition, LoadedPipeline } from "../types/pipeline.js";
 import type { TriggerFile } from "../types/trigger.js";
 import type { LoadIssue } from "./loadOutcome.js";
+import type { AnyChannelProvider } from "../channels/types.js";
 export type ValidationSeverity = "error" | "warning";
 export type ValidationCategory = "pipeline" | "stage" | "catalog" | "task" | "trigger";
-export type ValidationFindingCode = "pipeline.invalid_shape" | "pipeline.dag_error" | "pipeline.missing_stage" | "pipeline.load_error" | "pipeline.string_stage_ref" | "pipeline.stage_uses_inline_conflict" | "pipeline.stage_missing_body" | "pipeline.stage_id_mismatch" | "pipeline.stage_wrapper_skill_rejected" | "pipeline.invalid_completion" | "catalog.path_case_mismatch" | "pipeline.invalid_recovery" | "pipeline.include_cycle" | "pipeline.include_invalid" | "pipeline.include_duplicate_stage" | "pipeline.invalid_agent" | "pipeline.invalid_model" | "pipeline.invalid_verify" | "pipeline.io_incompatible" | "pipeline.model_applies" | "pipeline.route_if_invalid" | "pipeline.route_all_gated" | "pipeline.invalid_requires" | "pipeline.requires_conflict" | "stage.invalid_shape" | "stage.invalid_model" | "stage.missing_model" | "stage.invalid_payload_schema" | "stage.invalid_clone_input_schema" | "stage.unresolved_schema_ref" | "stage.invalid_clone_actions" | "stage.invalid_gate_kinds" | "stage.invalid_pre_emit_checks" | "stage.invalid_timeout_ms" | "stage.invalid_skill" | "stage.invalid_mcp" | "stage.invalid_browser" | "stage.invalid_secrets" | "stage.unknown_secret" | "stage.denied_secret" | "stage.invalid_requires" | "stage.invalid_agent" | "stage.invalid_io" | "stage.load_error" | "stage.id_filename_mismatch" | "task.invalid_shape" | "task.load_error" | "task.entry_input_unmet" | "task.binding_conflict" | "task.repository_ref_required" | "task.ref_without_repository" | "task.repository_invalid" | "trigger.invalid_shape" | "trigger.load_error" | "trigger.unknown_pipeline" | "trigger.unknown_task" | "catalog.duplicate_pipeline_id" | "catalog.manifest_missing" | "catalog.manifest_invalid" | "catalog.empty_catalog" | "catalog.manifest_load_error" | "catalog.invalid_mcp" | "catalog.mcp_command_missing" | "catalog.mixed_yaml_dialect" | "catalog.legacy_yaml" | "catalog.stageflow_home_absolute_path";
+export type ValidationFindingCode = "pipeline.invalid_shape" | "pipeline.dag_error" | "pipeline.missing_stage" | "pipeline.load_error" | "pipeline.string_stage_ref" | "pipeline.stage_uses_inline_conflict" | "pipeline.stage_missing_body" | "pipeline.stage_id_mismatch" | "pipeline.stage_wrapper_skill_rejected" | "pipeline.invalid_completion" | "catalog.path_case_mismatch" | "pipeline.invalid_recovery" | "pipeline.include_cycle" | "pipeline.include_invalid" | "pipeline.include_duplicate_stage" | "pipeline.invalid_agent" | "pipeline.invalid_model" | "pipeline.invalid_verify" | "pipeline.io_incompatible" | "pipeline.model_applies" | "pipeline.route_if_invalid" | "pipeline.route_all_gated" | "pipeline.invalid_requires" | "pipeline.requires_conflict" | "pipeline.invalid_channels" | "pipeline.invalid_memories" | "pipeline.memory_unavailable" | "stage.invalid_shape" | "stage.invalid_model" | "stage.missing_model" | "stage.invalid_payload_schema" | "stage.invalid_clone_input_schema" | "stage.unresolved_schema_ref" | "stage.invalid_clone_actions" | "stage.invalid_gate_kinds" | "stage.invalid_pre_emit_checks" | "stage.invalid_timeout_ms" | "stage.invalid_skill" | "stage.invalid_mcp" | "stage.invalid_channels" | "stage.channel_unavailable" | "stage.invalid_browser" | "stage.invalid_secrets" | "stage.unknown_secret" | "stage.denied_secret" | "stage.invalid_requires" | "stage.invalid_agent" | "stage.invalid_io" | "stage.load_error" | "stage.id_filename_mismatch" | "task.invalid_shape" | "task.load_error" | "task.entry_input_unmet" | "task.binding_conflict" | "task.repository_ref_required" | "task.ref_without_repository" | "task.repository_invalid" | "trigger.invalid_shape" | "trigger.load_error" | "trigger.unknown_pipeline" | "trigger.unknown_task" | "catalog.duplicate_pipeline_id" | "catalog.manifest_missing" | "catalog.manifest_invalid" | "catalog.empty_catalog" | "catalog.manifest_load_error" | "catalog.invalid_mcp" | "catalog.mcp_command_missing" | "catalog.mixed_yaml_dialect" | "catalog.legacy_yaml" | "catalog.stageflow_home_absolute_path";
 export type ValidationFinding = {
     severity: ValidationSeverity;
     code: ValidationFindingCode | string;
@@ -50,6 +51,7 @@ export type ValidatePipelineOptions = {
     projectRoot?: string;
     validateStages?: boolean;
     strict?: boolean;
+    channelProviders?: readonly AnyChannelProvider[];
 };
 export declare function validatePipeline(nameOrPath: string, options?: ValidatePipelineOptions): Promise<ValidationResult>;
 export type LoadPipelineValidatedResult = {
@@ -64,6 +66,7 @@ export declare function loadPipelineValidated(nameOrPath: string | InlinePipelin
     cwd?: string;
     projectRoot?: string;
     validateStages?: boolean;
+    channelProviders?: readonly AnyChannelProvider[];
 }): Promise<LoadPipelineValidatedResult>;
 export declare function collectPipelineIdsFromPaths(pipelinePaths: string[]): Promise<Map<string, string[]>>;
 export declare function collectTaskIdsFromPaths(taskPaths: string[]): Promise<Set<string>>;

package/dist/config/validateCatalog.js

@@ -14,6 +14,10 @@ import { MCP_CATALOG_FILENAME, StageMcpError, assertMcpAllowlistKnown, loadMcpCa
 import { loadSecretRegistry } from "../runtime/stageSecrets.js";
 import { isForeverDeniedSecret } from "../runtime/stageEnvironment.js";
 import { findMissingMcpCommands } from "../preflight/mcpCommands.js";
+import { ChannelError } from "../channels/errors.js";
+import { ChannelRegistry } from "../channels/registry.js";
+import { validateStageChannels } from "../channels/stageChannels.js";
+import { inspectMemorySync, memoryHome } from "../memory/host.js";
 export function relPath(cwd, absPath) {
     return path.relative(cwd, absPath).replace(/\\/g, "/");
 }
@@ -256,6 +260,42 @@ function collectMcpAllowlistNames(loaded) {
     }
     return [...names];
 }
+function findingsForStageChannels(cwd, pipelinePath, loaded, projectRoot, providers) {
+    const users = loaded.stages.filter((stage) => (stage.channels?.length ?? 0) > 0);
+    if (users.length === 0)
+        return [];
+    let registry;
+    try {
+        registry = new ChannelRegistry({ cwd: projectRoot, providers });
+    }
+    catch (error) {
+        const code = error instanceof ChannelError ? error.code : "CHANNEL_INVALID_INPUT";
+        const field = error instanceof ChannelError && error.detail?.connectionId
+            ? ` (connection "${error.detail.connectionId}"${error.detail.field ? `, field "${error.detail.field}"` : ""})`
+            : "";
+        return users.map((stage) => findingStageError(cwd, pipelinePath, `connections.yaml could not be loaded: ${code}${field}`, "stage.channel_unavailable", stage.id));
+    }
+    return users.flatMap((stage) => validateStageChannels(registry, stage).map((issue) => findingStageError(cwd, pipelinePath, issue.message, "stage.channel_unavailable", issue.stageId)));
+}
+const MEMORY_FINDING = {
+    MEMORY_NOT_FOUND: (id) => `Memory "${id}" does not exist. Create it before attaching it.`,
+    MEMORY_MISMATCH: (id) => `Memory "${id}" does not match the id in its file.`,
+    MEMORY_UNREADABLE: (id) => `Memory "${id}" could not be read.`,
+    MEMORY_INVALID_ID: (id) => `Memory "${id}" is not a valid id.`,
+};
+function findingsForMemories(cwd, pipelinePath, loaded) {
+    const ids = loaded.pipeline.memories;
+    if (!ids?.length)
+        return [];
+    const home = memoryHome();
+    return ids.flatMap((id) => {
+        const inspected = inspectMemorySync(home, id);
+        if (inspected.ok)
+            return [];
+        const message = (MEMORY_FINDING[inspected.code] ?? MEMORY_FINDING.MEMORY_UNREADABLE)(id);
+        return [findingPipelineError(cwd, pipelinePath, message, "pipeline.memory_unavailable", loaded.pipeline.id)];
+    });
+}
 function findingsForStageSecrets(cwd, pipelinePath, loaded) {
     const registry = loadSecretRegistry(process.env);
     const findings = [];
@@ -366,7 +406,7 @@ async function findingsForStageMcpCatalog(cwd, loaded) {
     }
     let catalog;
     try {
-        catalog = await loadMcpCatalog(projectRoot);
+        catalog = await loadMcpCatalog(projectRoot, { scope: { kind: "validate" } });
     }
     catch (err) {
         if (!(err instanceof StageMcpError))
@@ -438,6 +478,8 @@ async function runPipelineValidation(nameOrPath, options) {
     }
     findings.push(...(await findingsForStageMcpCatalog(cwd, outcome.value)));
     findings.push(...findingsForStageSecrets(cwd, pipelinePath, outcome.value));
+    findings.push(...findingsForStageChannels(cwd, pipelinePath, outcome.value, projectRoot, options.channelProviders));
+    findings.push(...findingsForMemories(cwd, pipelinePath, outcome.value));
     findings.push(...findingsForStageflowHomeAbsolutePaths(cwd, outcome.value));
     if (validateStages && outcome.value.stageSources) {
         for (const source of Object.values(outcome.value.stageSources)) {
@@ -461,6 +503,7 @@ export async function validatePipeline(nameOrPath, options = {}) {
         cwd,
         projectRoot,
         validateStages,
+        channelProviders: options.channelProviders,
     });
     return buildValidationResult("pipeline", core.findings, strict);
 }
@@ -472,6 +515,7 @@ export async function loadPipelineValidated(nameOrPath, options = {}) {
         cwd,
         projectRoot,
         validateStages,
+        channelProviders: options.channelProviders,
     });
     if (core.ok) {
         return { ok: true, loaded: core.loaded, findings: core.findings };

package/dist/errors/codes.d.ts

@@ -4,7 +4,7 @@ export declare const BUSY_CHECKOUT: "busy_checkout";
 /** Per-caller concurrency quota: queued when under global capacity; reject when queue full. */
 export declare const BUSY_CALLER_QUOTA: "busy_caller_quota";
 export declare const ABORTED: "aborted";
-export declare const NETWORK_ERROR_CODES: readonly ["busy_capacity", "busy_checkout", "busy_caller_quota", "aborted", "unknown_project_root", "absolute_path_not_allowed", "path_outside_project_root", "catalog_root_unreadable", "ensure_project_not_allowed", "config_invalid", "config_unknown_key", "provider_not_configured", "a2a_configuration_error", "untrusted_config_origin", "command_not_on_path", "missing_tool", "tool_version_mismatch", "unknown_version", "secret_unavailable", "not_ready", "internal_error", "retry_in_progress", "hitl_not_retriable", "run_not_retryable", "stage_not_failed", "manual_recovery_required", "run_not_found", "stage_not_found", "artifact_not_found", "artifact_path_denied", "envelope_not_found", "insufficient_disk", "disk_check_failed", "shutting_down", "start.token_rejected", "inline_pipeline_too_large", "skills_invalid_name", "skills_invalid_path", "skills_missing_skill_md", "skills_payload_too_large", "pinned_sha_unavailable", "store_integrity_failed", "store_unsupported_filesystem", "tmpdir_unusable", "backup_insufficient_disk"];
+export declare const NETWORK_ERROR_CODES: readonly ["busy_capacity", "busy_checkout", "busy_caller_quota", "aborted", "unknown_project_root", "absolute_path_not_allowed", "path_outside_project_root", "catalog_root_unreadable", "ensure_project_not_allowed", "config_invalid", "config_unknown_key", "provider_not_configured", "a2a_configuration_error", "untrusted_config_origin", "command_not_on_path", "missing_tool", "tool_version_mismatch", "unknown_version", "secret_unavailable", "channel_check_failed", "not_ready", "internal_error", "retry_in_progress", "hitl_not_retriable", "run_not_retryable", "stage_not_failed", "manual_recovery_required", "run_not_found", "stage_not_found", "artifact_not_found", "artifact_path_denied", "envelope_not_found", "insufficient_disk", "disk_check_failed", "shutting_down", "start.token_rejected", "inline_pipeline_too_large", "skills_invalid_name", "skills_invalid_path", "skills_missing_skill_md", "skills_payload_too_large", "pinned_sha_unavailable", "store_integrity_failed", "store_unsupported_filesystem", "tmpdir_unusable", "backup_insufficient_disk"];
 export type NetworkErrorCode = (typeof NETWORK_ERROR_CODES)[number] | string;
 export type NetworkErrorBody = {
     code: NetworkErrorCode;

package/dist/errors/codes.js

@@ -24,6 +24,7 @@ export const NETWORK_ERROR_CODES = [
     "tool_version_mismatch",
     "unknown_version",
     "secret_unavailable",
+    "channel_check_failed",
     "not_ready",
     "internal_error",
     "retry_in_progress",

package/dist/mcp/agentTools.d.ts

@@ -0,0 +1,8 @@
+import type { McpServer } from "@modelcontextprotocol/server";
+import type { McpToolDeps } from "./deps.js";
+/**
+ * Agent management for operators driving Stageflow over MCP. A running agent reaches these
+ * only through the Stageflow tool groups it is granted (`agents.*`); the guard in
+ * `toolkit/guard.ts` stops it acting on its own sessions.
+ */
+export declare function registerAgentTools(server: McpServer, deps: McpToolDeps): void;