@stigmer/protos 0.0.34

package/ai/stigmer/agentic/workflowinstance/v1/command_connect.js

@@ -0,0 +1,145 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/workflowinstance/v1/command.proto (package ai.stigmer.agentic.workflowinstance.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * WorkflowInstanceCommandController handles write operations (Create, Update, Delete) for WorkflowInstance resources.
+ *
+ * This service provides the CUD (Create, Update, Delete) operations following the
+ * Command-Query Separation pattern. All RPCs that modify state go through this controller.
+ *
+ * Authorization:
+ * - create: Custom authorization logic (validates workflow_id access, env_refs access)
+ * - update: Standard authorization (requires update permission on the instance)
+ * - delete: Standard authorization (requires delete permission on the instance)
+ *
+ * All workflow instances belong to an organization.
+ *
+ * @generated from service ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController
+ */
+export const WorkflowInstanceCommandController = {
+    typeName: "ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController",
+    methods: {
+        /**
+         * Create or update a workflow instance.
+         * The authorization and state-operation are determined depending on whether the workflow instance
+         * is going to be created or updated which is determined as part of the request execution.
+         *
+         * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.apply
+         */
+        apply: {
+            name: "apply",
+            I: WorkflowInstance,
+            O: WorkflowInstance,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Create a new workflow instance.
+         *
+         * Creates a configured deployment of a Workflow template with environment bindings.
+         *
+         * Input validation:
+         * - metadata.org must be specified
+         * - spec.workflow_id must be a valid Workflow resource ID
+         * - spec.env_refs must reference valid Environment resources
+         *
+         * Authorization:
+         * Uses custom authorization logic to verify:
+         * 1. User has permission to access the referenced Workflow template
+         * 2. User has permission to access all referenced Environment resources
+         * 3. Owner scope is valid for the user's organization/identity
+         *
+         * Returns:
+         * The created WorkflowInstance with:
+         * - Assigned resource ID (metadata.id)
+         * - Created timestamp (status.audit.created_at)
+         * - Initial version (status.audit.version = 1)
+         *
+         * Example:
+         * Input: WorkflowInstance with workflow_id="wfl-123", env_refs=["env-prod"]
+         * Output: WorkflowInstance with id="wfi-abc456", created_at="2025-01-11T10:00:00Z"
+         *
+         * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.create
+         */
+        create: {
+            name: "create",
+            I: WorkflowInstance,
+            O: WorkflowInstance,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Update an existing workflow instance.
+         *
+         * Modifies the configuration of an existing WorkflowInstance.
+         * You can update:
+         * - spec.description (change descriptive text)
+         * - spec.env_refs (add/remove/reorder environment bindings)
+         * - metadata.labels, metadata.tags, metadata.annotations
+         *
+         * You cannot update:
+         * - spec.workflow_id (must delete and recreate to change template)
+         * - metadata.id (immutable resource identifier)
+         * - metadata.org (immutable after creation)
+         *
+         * Authorization:
+         * Requires "update" permission on the specific WorkflowInstance resource.
+         * Field path "metadata.id" identifies which resource to authorize.
+         *
+         * Versioning:
+         * Each update increments status.audit.version and updates status.audit.updated_at.
+         *
+         * Returns:
+         * The updated WorkflowInstance with:
+         * - Incremented version number
+         * - Updated timestamp
+         * - Modified spec fields
+         *
+         * Error: PERMISSION_DENIED if user lacks update permission
+         *
+         * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.update
+         */
+        update: {
+            name: "update",
+            I: WorkflowInstance,
+            O: WorkflowInstance,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Delete a workflow instance.
+         *
+         * Permanently removes a WorkflowInstance resource.
+         *
+         * Important:
+         * - Deletion is permanent and cannot be undone
+         * - Does NOT delete the referenced Workflow template (templates are reusable)
+         * - Does NOT delete the referenced Environment resources (environments are reusable)
+         * - DOES cascade delete any dependent WorkflowExecution resources (executions belong to instance)
+         *
+         * Authorization:
+         * Requires "delete" permission on the specific WorkflowInstance resource.
+         * Field path "value" extracts the resource ID from WorkflowInstanceId wrapper.
+         *
+         * Use Cases:
+         * - Remove deprecated instances
+         * - Clean up test/dev instances
+         * - Decommission old deployment configurations
+         *
+         * Returns:
+         * The deleted WorkflowInstance (final state before deletion).
+         * Useful for audit logs and confirming what was deleted.
+         *
+         * Error: PERMISSION_DENIED if user lacks delete permission
+         * Error: NOT_FOUND if instance ID doesn't exist
+         *
+         * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.delete
+         */
+        delete: {
+            name: "delete",
+            I: WorkflowInstanceId,
+            O: WorkflowInstance,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=command_connect.js.map

package/ai/stigmer/agentic/workflowinstance/v1/command_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAKd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8BG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/workflowinstance/v1/command_pb.d.ts

@@ -0,0 +1,139 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { WorkflowInstanceSchema } from "./api_pb";
+import type { WorkflowInstanceIdSchema } from "./io_pb";
+/**
+ * Describes the file ai/stigmer/agentic/workflowinstance/v1/command.proto.
+ */
+export declare const file_ai_stigmer_agentic_workflowinstance_v1_command: GenFile;
+/**
+ * WorkflowInstanceCommandController handles write operations (Create, Update, Delete) for WorkflowInstance resources.
+ *
+ * This service provides the CUD (Create, Update, Delete) operations following the
+ * Command-Query Separation pattern. All RPCs that modify state go through this controller.
+ *
+ * Authorization:
+ * - create: Custom authorization logic (validates workflow_id access, env_refs access)
+ * - update: Standard authorization (requires update permission on the instance)
+ * - delete: Standard authorization (requires delete permission on the instance)
+ *
+ * All workflow instances belong to an organization.
+ *
+ * @generated from service ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController
+ */
+export declare const WorkflowInstanceCommandController: GenService<{
+    /**
+     * Create or update a workflow instance.
+     * The authorization and state-operation are determined depending on whether the workflow instance
+     * is going to be created or updated which is determined as part of the request execution.
+     *
+     * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.apply
+     */
+    apply: {
+        methodKind: "unary";
+        input: typeof WorkflowInstanceSchema;
+        output: typeof WorkflowInstanceSchema;
+    };
+    /**
+     * Create a new workflow instance.
+     *
+     * Creates a configured deployment of a Workflow template with environment bindings.
+     *
+     * Input validation:
+     * - metadata.org must be specified
+     * - spec.workflow_id must be a valid Workflow resource ID
+     * - spec.env_refs must reference valid Environment resources
+     *
+     * Authorization:
+     * Uses custom authorization logic to verify:
+     * 1. User has permission to access the referenced Workflow template
+     * 2. User has permission to access all referenced Environment resources
+     * 3. Owner scope is valid for the user's organization/identity
+     *
+     * Returns:
+     * The created WorkflowInstance with:
+     * - Assigned resource ID (metadata.id)
+     * - Created timestamp (status.audit.created_at)
+     * - Initial version (status.audit.version = 1)
+     *
+     * Example:
+     * Input: WorkflowInstance with workflow_id="wfl-123", env_refs=["env-prod"]
+     * Output: WorkflowInstance with id="wfi-abc456", created_at="2025-01-11T10:00:00Z"
+     *
+     * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.create
+     */
+    create: {
+        methodKind: "unary";
+        input: typeof WorkflowInstanceSchema;
+        output: typeof WorkflowInstanceSchema;
+    };
+    /**
+     * Update an existing workflow instance.
+     *
+     * Modifies the configuration of an existing WorkflowInstance.
+     * You can update:
+     * - spec.description (change descriptive text)
+     * - spec.env_refs (add/remove/reorder environment bindings)
+     * - metadata.labels, metadata.tags, metadata.annotations
+     *
+     * You cannot update:
+     * - spec.workflow_id (must delete and recreate to change template)
+     * - metadata.id (immutable resource identifier)
+     * - metadata.org (immutable after creation)
+     *
+     * Authorization:
+     * Requires "update" permission on the specific WorkflowInstance resource.
+     * Field path "metadata.id" identifies which resource to authorize.
+     *
+     * Versioning:
+     * Each update increments status.audit.version and updates status.audit.updated_at.
+     *
+     * Returns:
+     * The updated WorkflowInstance with:
+     * - Incremented version number
+     * - Updated timestamp
+     * - Modified spec fields
+     *
+     * Error: PERMISSION_DENIED if user lacks update permission
+     *
+     * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.update
+     */
+    update: {
+        methodKind: "unary";
+        input: typeof WorkflowInstanceSchema;
+        output: typeof WorkflowInstanceSchema;
+    };
+    /**
+     * Delete a workflow instance.
+     *
+     * Permanently removes a WorkflowInstance resource.
+     *
+     * Important:
+     * - Deletion is permanent and cannot be undone
+     * - Does NOT delete the referenced Workflow template (templates are reusable)
+     * - Does NOT delete the referenced Environment resources (environments are reusable)
+     * - DOES cascade delete any dependent WorkflowExecution resources (executions belong to instance)
+     *
+     * Authorization:
+     * Requires "delete" permission on the specific WorkflowInstance resource.
+     * Field path "value" extracts the resource ID from WorkflowInstanceId wrapper.
+     *
+     * Use Cases:
+     * - Remove deprecated instances
+     * - Clean up test/dev instances
+     * - Decommission old deployment configurations
+     *
+     * Returns:
+     * The deleted WorkflowInstance (final state before deletion).
+     * Useful for audit logs and confirming what was deleted.
+     *
+     * Error: PERMISSION_DENIED if user lacks delete permission
+     * Error: NOT_FOUND if instance ID doesn't exist
+     *
+     * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.delete
+     */
+    delete: {
+        methodKind: "unary";
+        input: typeof WorkflowInstanceIdSchema;
+        output: typeof WorkflowInstanceSchema;
+    };
+}>;

package/ai/stigmer/agentic/workflowinstance/v1/command_pb.js

@@ -0,0 +1,29 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/workflowinstance/v1/command.proto (package ai.stigmer.agentic.workflowinstance.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_workflowinstance_v1_api } from "./api_pb";
+import { file_ai_stigmer_agentic_workflowinstance_v1_io } from "./io_pb";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb";
+import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from "../../../iam/iampolicy/v1/rpcauthorization/method_options_pb";
+/**
+ * Describes the file ai/stigmer/agentic/workflowinstance/v1/command.proto.
+ */
+export const file_ai_stigmer_agentic_workflowinstance_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_workflowinstance_v1_api, file_ai_stigmer_agentic_workflowinstance_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+/**
+ * WorkflowInstanceCommandController handles write operations (Create, Update, Delete) for WorkflowInstance resources.
+ *
+ * This service provides the CUD (Create, Update, Delete) operations following the
+ * Command-Query Separation pattern. All RPCs that modify state go through this controller.
+ *
+ * Authorization:
+ * - create: Custom authorization logic (validates workflow_id access, env_refs access)
+ * - update: Standard authorization (requires update permission on the instance)
+ * - delete: Standard authorization (requires delete permission on the instance)
+ *
+ * All workflow instances belong to an organization.
+ *
+ * @generated from service ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController
+ */
+export const WorkflowInstanceCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_workflowinstance_v1_command, 0);
+//# sourceMappingURL=command_pb.js.map

package/ai/stigmer/agentic/workflowinstance/v1/command_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4IAA4I;AAC5I,oBAAoB;AAKpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,8CAA8C,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,8gCAA8gC,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEzvC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAoHzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflowinstance/v1/io_pb.d.ts

@@ -0,0 +1,119 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { WorkflowInstance } from "./api_pb";
+import type { PageInfo } from "../../../commons/rpc/pagination_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/workflowinstance/v1/io.proto.
+ */
+export declare const file_ai_stigmer_agentic_workflowinstance_v1_io: GenFile;
+/**
+ * WorkflowInstanceId wraps a workflow instance identifier for RPC operations.
+ *
+ * Used as input to RPCs that operate on a single instance:
+ * - get: Retrieve a specific instance by ID
+ * - delete: Remove a specific instance by ID
+ *
+ * Format: Resource ID string (e.g., "wfi-abc123")
+ * Validation: Required field (must not be empty)
+ *
+ * @generated from message ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceId
+ */
+export type WorkflowInstanceId = Message<"ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceId"> & {
+    /**
+     * The workflow instance resource ID.
+     * Example: "wfi-abc123"
+     *
+     * @generated from field: string value = 1;
+     */
+    value: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceId.
+ * Use `create(WorkflowInstanceIdSchema)` to create a new message.
+ */
+export declare const WorkflowInstanceIdSchema: GenMessage<WorkflowInstanceId>;
+/**
+ * GetWorkflowInstancesByWorkflowRequest retrieves all instances of a specific Workflow template.
+ *
+ * This allows you to find all configured deployments of a given Workflow.
+ * For example, a "deploy-to-cloud" Workflow might have instances:
+ * - "prod-deploy" (with production environments)
+ * - "staging-deploy" (with staging environments)
+ * - "dev-deploy" (with development environments)
+ *
+ * Supports pagination for efficient retrieval of large result sets.
+ *
+ * @generated from message ai.stigmer.agentic.workflowinstance.v1.GetWorkflowInstancesByWorkflowRequest
+ */
+export type GetWorkflowInstancesByWorkflowRequest = Message<"ai.stigmer.agentic.workflowinstance.v1.GetWorkflowInstancesByWorkflowRequest"> & {
+    /**
+     * Workflow template ID to filter by.
+     *
+     * Returns all WorkflowInstance resources where spec.workflow_id matches this value.
+     * Format: Workflow resource ID (e.g., "wfl-abc123")
+     * Validation: Required field
+     *
+     * @generated from field: string workflow_id = 1;
+     */
+    workflowId: string;
+    /**
+     * Pagination options for controlling result set size and pages.
+     *
+     * Includes:
+     * - page_size: Maximum number of instances per page
+     * - page_token: Token from previous response for next page
+     *
+     * Example pagination flow:
+     * 1. Request with page_info.page_size = 20
+     * 2. Response includes page_token = "next_page_token_here"
+     * 3. Subsequent request with page_info.page_token = "next_page_token_here"
+     *
+     * @generated from field: ai.stigmer.commons.rpc.PageInfo page_info = 2;
+     */
+    pageInfo?: PageInfo;
+};
+/**
+ * Describes the message ai.stigmer.agentic.workflowinstance.v1.GetWorkflowInstancesByWorkflowRequest.
+ * Use `create(GetWorkflowInstancesByWorkflowRequestSchema)` to create a new message.
+ */
+export declare const GetWorkflowInstancesByWorkflowRequestSchema: GenMessage<GetWorkflowInstancesByWorkflowRequest>;
+/**
+ * WorkflowInstanceList contains a paginated list of workflow instances.
+ *
+ * Returned by list and query operations. Includes pagination metadata
+ * to support iterating through large result sets.
+ *
+ * @generated from message ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceList
+ */
+export type WorkflowInstanceList = Message<"ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceList"> & {
+    /**
+     * Total number of pages available in the full result set.
+     *
+     * Use this to determine if there are more pages to fetch.
+     * If total_pages > current_page, more results are available.
+     *
+     * Example: If total_pages = 5, you can fetch up to 5 pages of results.
+     *
+     * @generated from field: int32 total_pages = 1;
+     */
+    totalPages: number;
+    /**
+     * Workflow instances in the current page.
+     *
+     * The number of entries is controlled by the page_size parameter
+     * in the request. May be fewer than page_size on the last page.
+     *
+     * Each entry is a complete WorkflowInstance resource with:
+     * - api_version, kind, metadata
+     * - spec (workflow_id, description, env_refs)
+     * - status (audit information)
+     *
+     * @generated from field: repeated ai.stigmer.agentic.workflowinstance.v1.WorkflowInstance entries = 2;
+     */
+    entries: WorkflowInstance[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceList.
+ * Use `create(WorkflowInstanceListSchema)` to create a new message.
+ */
+export declare const WorkflowInstanceListSchema: GenMessage<WorkflowInstanceList>;

package/ai/stigmer/agentic/workflowinstance/v1/io_pb.js

@@ -0,0 +1,27 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/workflowinstance/v1/io.proto (package ai.stigmer.agentic.workflowinstance.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_workflowinstance_v1_api } from "./api_pb";
+import { file_ai_stigmer_commons_rpc_pagination } from "../../../commons/rpc/pagination_pb";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb";
+/**
+ * Describes the file ai/stigmer/agentic/workflowinstance/v1/io.proto.
+ */
+export const file_ai_stigmer_agentic_workflowinstance_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_workflowinstance_v1_api, file_ai_stigmer_commons_rpc_pagination, file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceId.
+ * Use `create(WorkflowInstanceIdSchema)` to create a new message.
+ */
+export const WorkflowInstanceIdSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_workflowinstance_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.agentic.workflowinstance.v1.GetWorkflowInstancesByWorkflowRequest.
+ * Use `create(GetWorkflowInstancesByWorkflowRequestSchema)` to create a new message.
+ */
+export const GetWorkflowInstancesByWorkflowRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_workflowinstance_v1_io, 1);
+/**
+ * Describes the message ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceList.
+ * Use `create(WorkflowInstanceListSchema)` to create a new message.
+ */
+export const WorkflowInstanceListSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_workflowinstance_v1_io, 2);
+//# sourceMappingURL=io_pb.js.map

package/ai/stigmer/agentic/workflowinstance/v1/io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,uIAAuI;AACvI,oBAAoB;AAQpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,ogBAAogB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwBxoB;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA4CjE;;;GAGG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAsD,aAAa,CACzH,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAuCjE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflowinstance/v1/query_connect.d.ts

@@ -0,0 +1,142 @@
+/**
+ * WorkflowInstanceQueryController handles read operations (Get, List, Search) for WorkflowInstance resources.
+ *
+ * This service provides all query operations following the Command-Query Separation pattern.
+ * All RPCs that read state without modifying it go through this controller.
+ *
+ * Authorization:
+ * - get: Requires get permission on the specific instance
+ * - getByWorkflow: Authorization handled in handler via FGA query (returns filtered instances)
+ * - getByReference: Custom authorization (supports flexible reference lookup)
+ *
+ * All operations respect owner scope visibility rules (users see only their org/identity resources).
+ *
+ * @generated from service ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceQueryController
+ */
+export declare const WorkflowInstanceQueryController: {
+    readonly typeName: "ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceQueryController";
+    readonly methods: {
+        /**
+         * Get a single workflow instance by ID.
+         *
+         * Retrieves a specific WorkflowInstance using its unique resource identifier.
+         *
+         * Input:
+         * WorkflowInstanceId with the instance ID (e.g., "wfi-abc123")
+         *
+         * Returns:
+         * Complete WorkflowInstance resource with:
+         * - api_version, kind, metadata
+         * - spec (workflow_id, description, env_refs)
+         * - status (audit information: created_at, updated_at, version)
+         *
+         * Authorization:
+         * Requires "get" permission on the specific WorkflowInstance.
+         * Field path "value" extracts the resource ID from WorkflowInstanceId wrapper.
+         * Verifies user has access based on:
+         * - Instance owner scope (organization or identity_account)
+         * - User's IAM policies
+         *
+         * Use Cases:
+         * - Retrieve instance configuration before executing
+         * - View instance details in UI
+         * - Fetch instance for editing/updating
+         *
+         * Error: PERMISSION_DENIED if user lacks get permission
+         * Error: NOT_FOUND if instance ID doesn't exist
+         *
+         * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceQueryController.get
+         */
+        readonly get: {
+            readonly name: "get";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get all instances of a specific workflow template.
+         *
+         * Retrieves all WorkflowInstance resources that reference a specific Workflow template.
+         * Useful for discovering all configured deployments of a workflow.
+         *
+         * Example Use Case:
+         * Workflow "deploy-to-cloud" (wfl-123) has instances:
+         * - "prod-deploy" (wfi-abc) - Production deployment with aws-prod-env
+         * - "staging-deploy" (wfi-def) - Staging deployment with aws-staging-env
+         * - "dev-deploy" (wfi-ghi) - Development deployment with aws-dev-env
+         *
+         * Input:
+         * GetWorkflowInstancesByWorkflowRequest with:
+         * - workflow_id: Workflow template ID to filter by
+         * - page_info: Pagination settings (page_size, page_token)
+         *
+         * Returns:
+         * WorkflowInstanceList with:
+         * - total_pages: Total number of pages available
+         * - entries: Array of WorkflowInstance resources in current page
+         *
+         * Authorization:
+         * Authorization is handled in handler via FGA query for authorized workflow_instance_ids,
+         * then filtered by workflow_id. This ensures users only see instances they have access to,
+         * even if the parent workflow is shared across organizations.
+         *
+         * Filtering:
+         * Results are filtered by:
+         * - User's organization/identity visibility
+         * - IAM policies
+         * - Owner scope rules
+         *
+         * Error: PERMISSION_DENIED if user lacks access to the workflow
+         * Error: NOT_FOUND if workflow_id doesn't exist
+         *
+         * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceQueryController.getByWorkflow
+         */
+        readonly getByWorkflow: {
+            readonly name: "getByWorkflow";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get a workflow instance by flexible reference (ID or slug).
+         *
+         * Retrieves a WorkflowInstance using ApiResourceReference which supports multiple lookup methods:
+         * - By ID: {id: "wfi-abc123"}
+         * - By slug: {slug: "prod-deploy"}
+         * - By name: {name: "Production Deploy"}
+         *
+         * Input:
+         * ApiResourceReference with one of: id, slug, or name
+         *
+         * Returns:
+         * Complete WorkflowInstance resource matching the reference.
+         *
+         * Authorization:
+         * Uses custom authorization logic in the handler.
+         * Allows for flexible authorization based on reference type and context.
+         * Typical checks:
+         * - User has get permission on the resolved instance
+         * - Instance owner scope matches user's organization/identity
+         *
+         * Use Cases:
+         * - User-friendly lookups by slug instead of opaque IDs
+         * - CLI commands using human-readable names
+         * - API integrations using stable slugs
+         *
+         * Example:
+         * Input: ApiResourceReference{slug: "prod-deploy"}
+         * Output: WorkflowInstance with metadata.slug = "prod-deploy"
+         *
+         * Error: PERMISSION_DENIED if user lacks access
+         * Error: NOT_FOUND if reference doesn't resolve to an instance
+         *
+         * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceQueryController.getByReference
+         */
+        readonly getByReference: {
+            readonly name: "getByReference";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};