@stigmer/protos 0.0.34

package/ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.d.ts

@@ -0,0 +1,257 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/commons/apiresource/apiresourcekind/authorization_config.proto.
+ */
+export declare const file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config: GenFile;
+/**
+ * Visibility configuration for public access support.
+ * Controls whether this resource kind can be made publicly readable.
+ *
+ * When a resource is marked PUBLIC:
+ * - FGA creates a wildcard tuple: resource#viewer@identity_account:*
+ * - This grants viewer access to all authenticated users via FGA
+ * - Authorization remains pure FGA - no application-level fallbacks
+ *
+ * Open access resources (supports_public = true):
+ *   agent, skill, workflow, mcp_server
+ *
+ * Restricted access resources (supports_public = false or not configured):
+ *   session, environment, agent_instance, workflow_instance,
+ *   agent_execution, workflow_execution
+ *
+ * @generated from message ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig
+ */
+export type VisibilityConfig = Message<"ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig"> & {
+    /**
+     * Whether this resource kind supports public visibility.
+     * - true: Resources can be marked PUBLIC, creating identity_account:* tuple
+     * - false: Resources are always org-restricted, PUBLIC visibility is rejected
+     *
+     * @generated from field: bool supports_public = 1;
+     */
+    supportsPublic: boolean;
+};
+/**
+ * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig.
+ * Use `create(VisibilityConfigSchema)` to create a new message.
+ */
+export declare const VisibilityConfigSchema: GenMessage<VisibilityConfig>;
+/**
+ * Configuration for a parent relation link.
+ * Used for PARENT scope type and additional_parents.
+ *
+ * @generated from message ai.stigmer.commons.apiresource.apiresourcekind.ParentRelationConfig
+ */
+export type ParentRelationConfig = Message<"ai.stigmer.commons.apiresource.apiresourcekind.ParentRelationConfig"> & {
+    /**
+     * Parent resource kind name (e.g., "session", "agent", "workflow").
+     * Uses string instead of ApiResourceKind enum to avoid circular imports.
+     * Validated at runtime against known resource kinds.
+     *
+     * @generated from field: string kind = 1;
+     */
+    kind: string;
+    /**
+     * Relation name in FGA model (e.g., "session", "agent", "workflow").
+     * This is the relation that will be used in the FGA tuple.
+     * FGA tuple: resource#<relation>@<kind>:<parent_id>
+     *
+     * @generated from field: string relation = 2;
+     */
+    relation: string;
+    /**
+     * Field name in the resource's spec message that contains the parent ID.
+     * The service extracts this field from resource.spec to resolve the parent ID.
+     * Example: "session_id" for agent_execution, "agent_id" for agent_instance.
+     * This eliminates hardcoded parent ID extraction logic in the service.
+     *
+     * @generated from field: string spec_field = 3;
+     */
+    specField: string;
+};
+/**
+ * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.ParentRelationConfig.
+ * Use `create(ParentRelationConfigSchema)` to create a new message.
+ */
+export declare const ParentRelationConfigSchema: GenMessage<ParentRelationConfig>;
+/**
+ * FGA authorization tuple configuration for a resource kind.
+ * Embedded in ApiResourceKindMeta to drive tuple creation at runtime.
+ *
+ * Example configurations:
+ *
+ * Standard org-scoped resource (agent, skill, workflow):
+ *   scope_type: AUTHORIZATION_SCOPE_TYPE_ORGANIZATION
+ *   owner_type: OWNER_ATTRIBUTION_TYPE_DIRECT
+ *   -> Creates: resource#organization@organization:<org_id>
+ *   -> Creates: resource#owner@identity_account:<creator_id>
+ *
+ * Platform-linked resource (organization):
+ *   scope_type: AUTHORIZATION_SCOPE_TYPE_PLATFORM
+ *   owner_type: OWNER_ATTRIBUTION_TYPE_DIRECT
+ *   -> Creates: organization#platform@platform:stigmer
+ *   -> Creates: organization#owner@identity_account:<creator_id>
+ *
+ * Parent-bound resource (agent_execution):
+ *   scope_type: AUTHORIZATION_SCOPE_TYPE_PARENT
+ *   owner_type: OWNER_ATTRIBUTION_TYPE_INHERITED
+ *   parent: { kind: "session", relation: "session", spec_field: "session_id" }
+ *   -> Creates: agent_execution#session@session:<session_id>
+ *   -> No owner tuple (inherited from session)
+ *
+ * Resource with additional parent (agent_instance):
+ *   scope_type: AUTHORIZATION_SCOPE_TYPE_ORGANIZATION
+ *   owner_type: OWNER_ATTRIBUTION_TYPE_DIRECT
+ *   additional_parents: [{ kind: "agent", relation: "agent", spec_field: "agent_id" }]
+ *   -> Creates: agent_instance#organization@organization:<org_id>
+ *   -> Creates: agent_instance#agent@agent:<agent_id>
+ *   -> Creates: agent_instance#owner@identity_account:<creator_id>
+ *
+ * @generated from message ai.stigmer.commons.apiresource.apiresourcekind.AuthorizationConfig
+ */
+export type AuthorizationConfig = Message<"ai.stigmer.commons.apiresource.apiresourcekind.AuthorizationConfig"> & {
+    /**
+     * Primary scope type - determines main linkage for permission inheritance.
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.apiresourcekind.AuthorizationScopeType scope_type = 1;
+     */
+    scopeType: AuthorizationScopeType;
+    /**
+     * Owner attribution type - how owner relation is handled.
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.apiresourcekind.OwnerAttributionType owner_type = 2;
+     */
+    ownerType: OwnerAttributionType;
+    /**
+     * For PARENT scope: configuration of the parent resource link.
+     * Required when scope_type is AUTHORIZATION_SCOPE_TYPE_PARENT.
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.apiresourcekind.ParentRelationConfig parent = 3;
+     */
+    parent?: ParentRelationConfig;
+    /**
+     * Additional parent relations beyond the primary scope.
+     * Used for resources that need multiple parent links.
+     * Example: agent_instance needs org link AND agent link.
+     *
+     * @generated from field: repeated ai.stigmer.commons.apiresource.apiresourcekind.ParentRelationConfig additional_parents = 4;
+     */
+    additionalParents: ParentRelationConfig[];
+    /**
+     * Visibility configuration for public access.
+     * When configured with supports_public: true, resources can be made PUBLIC,
+     * which creates an identity_account:* wildcard tuple granting viewer access
+     * to all authenticated users via FGA.
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig visibility = 5;
+     */
+    visibility?: VisibilityConfig;
+};
+/**
+ * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.AuthorizationConfig.
+ * Use `create(AuthorizationConfigSchema)` to create a new message.
+ */
+export declare const AuthorizationConfigSchema: GenMessage<AuthorizationConfig>;
+/**
+ * Primary scope linkage for FGA authorization.
+ * Determines what the resource links to for permission inheritance.
+ *
+ * @generated from enum ai.stigmer.commons.apiresource.apiresourcekind.AuthorizationScopeType
+ */
+export declare enum AuthorizationScopeType {
+    /**
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Links to platform singleton.
+     * Used for: organization, identity_account
+     * FGA tuple: resource#platform@platform:stigmer
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_PLATFORM = 1;
+     */
+    PLATFORM = 1,
+    /**
+     * Links to an organization.
+     * Used for: agent, skill, workflow, environment, session, mcp_server, etc.
+     * FGA tuple: resource#organization@organization:<org_id>
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_ORGANIZATION = 2;
+     */
+    ORGANIZATION = 2,
+    /**
+     * Links to a parent resource.
+     * Used for: agent_execution (links to session)
+     * FGA tuple: resource#<relation>@<parent_kind>:<parent_id>
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_PARENT = 3;
+     */
+    PARENT = 3,
+    /**
+     * Owner link only, no scope hierarchy.
+     * Used for: api_key (belongs to user, not org)
+     * FGA tuple: resource#owner@identity_account:<owner_id>
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_OWNER_ONLY = 4;
+     */
+    OWNER_ONLY = 4,
+    /**
+     * No FGA tuples needed.
+     * Used for: platform (singleton), api_resource_version, execution_context
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_NONE = 5;
+     */
+    NONE = 5
+}
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.apiresourcekind.AuthorizationScopeType.
+ */
+export declare const AuthorizationScopeTypeSchema: GenEnum<AuthorizationScopeType>;
+/**
+ * How owner attribution is handled for a resource.
+ * Determines whether/how the owner relation tuple is created.
+ *
+ * @generated from enum ai.stigmer.commons.apiresource.apiresourcekind.OwnerAttributionType
+ */
+export declare enum OwnerAttributionType {
+    /**
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Creator becomes owner via direct tuple.
+     * Used for: most resources where creator should have edit/delete rights
+     * FGA tuple: resource#owner@identity_account:<creator_id>
+     *
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_DIRECT = 1;
+     */
+    DIRECT = 1,
+    /**
+     * Owner is computed from parent - no tuple created.
+     * Used for: agent_execution (inherits owner from session)
+     * FGA: owner relation derived via "owner from session"
+     *
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_INHERITED = 2;
+     */
+    INHERITED = 2,
+    /**
+     * Self-ownership - resource owns itself.
+     * Used for: identity_account (user owns their own account)
+     * FGA tuple: identity_account:<id>#owner@identity_account:<id>
+     *
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_SELF = 3;
+     */
+    SELF = 3,
+    /**
+     * No owner attribution.
+     * Used for: platform (singleton), internal resources
+     *
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_NONE = 4;
+     */
+    NONE = 4
+}
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.apiresourcekind.OwnerAttributionType.
+ */
+export declare const OwnerAttributionTypeSchema: GenEnum<OwnerAttributionType>;

package/ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.js

@@ -0,0 +1,128 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/commons/apiresource/apiresourcekind/authorization_config.proto (package ai.stigmer.commons.apiresource.apiresourcekind, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file ai/stigmer/commons/apiresource/apiresourcekind/authorization_config.proto.
+ */
+export const file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config = /*@__PURE__*/ fileDesc("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");
+/**
+ * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig.
+ * Use `create(VisibilityConfigSchema)` to create a new message.
+ */
+export const VisibilityConfigSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, 0);
+/**
+ * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.ParentRelationConfig.
+ * Use `create(ParentRelationConfigSchema)` to create a new message.
+ */
+export const ParentRelationConfigSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, 1);
+/**
+ * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.AuthorizationConfig.
+ * Use `create(AuthorizationConfigSchema)` to create a new message.
+ */
+export const AuthorizationConfigSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, 2);
+/**
+ * Primary scope linkage for FGA authorization.
+ * Determines what the resource links to for permission inheritance.
+ *
+ * @generated from enum ai.stigmer.commons.apiresource.apiresourcekind.AuthorizationScopeType
+ */
+export var AuthorizationScopeType;
+(function (AuthorizationScopeType) {
+    /**
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_UNSPECIFIED = 0;
+     */
+    AuthorizationScopeType[AuthorizationScopeType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * Links to platform singleton.
+     * Used for: organization, identity_account
+     * FGA tuple: resource#platform@platform:stigmer
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_PLATFORM = 1;
+     */
+    AuthorizationScopeType[AuthorizationScopeType["PLATFORM"] = 1] = "PLATFORM";
+    /**
+     * Links to an organization.
+     * Used for: agent, skill, workflow, environment, session, mcp_server, etc.
+     * FGA tuple: resource#organization@organization:<org_id>
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_ORGANIZATION = 2;
+     */
+    AuthorizationScopeType[AuthorizationScopeType["ORGANIZATION"] = 2] = "ORGANIZATION";
+    /**
+     * Links to a parent resource.
+     * Used for: agent_execution (links to session)
+     * FGA tuple: resource#<relation>@<parent_kind>:<parent_id>
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_PARENT = 3;
+     */
+    AuthorizationScopeType[AuthorizationScopeType["PARENT"] = 3] = "PARENT";
+    /**
+     * Owner link only, no scope hierarchy.
+     * Used for: api_key (belongs to user, not org)
+     * FGA tuple: resource#owner@identity_account:<owner_id>
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_OWNER_ONLY = 4;
+     */
+    AuthorizationScopeType[AuthorizationScopeType["OWNER_ONLY"] = 4] = "OWNER_ONLY";
+    /**
+     * No FGA tuples needed.
+     * Used for: platform (singleton), api_resource_version, execution_context
+     *
+     * @generated from enum value: AUTHORIZATION_SCOPE_TYPE_NONE = 5;
+     */
+    AuthorizationScopeType[AuthorizationScopeType["NONE"] = 5] = "NONE";
+})(AuthorizationScopeType || (AuthorizationScopeType = {}));
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.apiresourcekind.AuthorizationScopeType.
+ */
+export const AuthorizationScopeTypeSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, 0);
+/**
+ * How owner attribution is handled for a resource.
+ * Determines whether/how the owner relation tuple is created.
+ *
+ * @generated from enum ai.stigmer.commons.apiresource.apiresourcekind.OwnerAttributionType
+ */
+export var OwnerAttributionType;
+(function (OwnerAttributionType) {
+    /**
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_UNSPECIFIED = 0;
+     */
+    OwnerAttributionType[OwnerAttributionType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * Creator becomes owner via direct tuple.
+     * Used for: most resources where creator should have edit/delete rights
+     * FGA tuple: resource#owner@identity_account:<creator_id>
+     *
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_DIRECT = 1;
+     */
+    OwnerAttributionType[OwnerAttributionType["DIRECT"] = 1] = "DIRECT";
+    /**
+     * Owner is computed from parent - no tuple created.
+     * Used for: agent_execution (inherits owner from session)
+     * FGA: owner relation derived via "owner from session"
+     *
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_INHERITED = 2;
+     */
+    OwnerAttributionType[OwnerAttributionType["INHERITED"] = 2] = "INHERITED";
+    /**
+     * Self-ownership - resource owns itself.
+     * Used for: identity_account (user owns their own account)
+     * FGA tuple: identity_account:<id>#owner@identity_account:<id>
+     *
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_SELF = 3;
+     */
+    OwnerAttributionType[OwnerAttributionType["SELF"] = 3] = "SELF";
+    /**
+     * No owner attribution.
+     * Used for: platform (singleton), internal resources
+     *
+     * @generated from enum value: OWNER_ATTRIBUTION_TYPE_NONE = 4;
+     */
+    OwnerAttributionType[OwnerAttributionType["NONE"] = 4] = "NONE";
+})(OwnerAttributionType || (OwnerAttributionType = {}));
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.apiresourcekind.OwnerAttributionType.
+ */
+export const OwnerAttributionTypeSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, 1);
+//# sourceMappingURL=authorization_config_pb.js.map

package/ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization_config_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yKAAyK;AACzK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAG/E;;GAEG;AACH,MAAM,CAAC,MAAM,wEAAwE,GAAY,aAAa,CAC5G,QAAQ,CAAC,kmDAAkmD,CAAC,CAAC;AA+B/mD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAsC3F;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAgF3F;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,CAAN,IAAY,sBAiDX;AAjDD,WAAY,sBAAsB;IAChC;;OAEG;IACH,iFAAe,CAAA;IAEf;;;;;;OAMG;IACH,2EAAY,CAAA;IAEZ;;;;;;OAMG;IACH,mFAAgB,CAAA;IAEhB;;;;;;OAMG;IACH,uEAAU,CAAA;IAEV;;;;;;OAMG;IACH,+EAAc,CAAA;IAEd;;;;;OAKG;IACH,mEAAQ,CAAA;AACV,CAAC,EAjDW,sBAAsB,KAAtB,sBAAsB,QAiDjC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAoC,aAAa,CACxF,QAAQ,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAExF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,oBAwCX;AAxCD,WAAY,oBAAoB;IAC9B;;OAEG;IACH,6EAAe,CAAA;IAEf;;;;;;OAMG;IACH,mEAAU,CAAA;IAEV;;;;;;OAMG;IACH,yEAAa,CAAA;IAEb;;;;;;OAMG;IACH,+DAAQ,CAAA;IAER;;;;;OAKG;IACH,+DAAQ,CAAA;AACV,CAAC,EAxCW,oBAAoB,KAApB,oBAAoB,QAwC/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/enum_pb.d.ts

@@ -0,0 +1,122 @@
+import type { GenEnum, GenFile } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file ai/stigmer/commons/apiresource/enum.proto.
+ */
+export declare const file_ai_stigmer_commons_apiresource_enum: GenFile;
+/**
+ * enumeration of the union of all event types used across all the api resources.
+ * this is used for specifying the event type produced by rpc methods in command controllers.
+ * using different enum for these event types while specifying in rpc methods and individual api resource would
+ * work because the events are eventually converted to strings during message passing.
+ *
+ * @generated from enum ai.stigmer.commons.apiresource.ApiResourceEventType
+ */
+export declare enum ApiResourceEventType {
+    /**
+     * @generated from enum value: unspecified = 0;
+     */
+    unspecified = 0,
+    /**
+     * @generated from enum value: created = 1;
+     */
+    created = 1,
+    /**
+     * @generated from enum value: updated = 2;
+     */
+    updated = 2,
+    /**
+     * @generated from enum value: deleted = 3;
+     */
+    deleted = 3,
+    /**
+     * @generated from enum value: renamed = 4;
+     */
+    renamed = 4,
+    /**
+     * this is only applicable for cloud-resources
+     *
+     * @generated from enum value: stack_outputs_updated = 5;
+     */
+    stack_outputs_updated = 5
+}
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.ApiResourceEventType.
+ */
+export declare const ApiResourceEventTypeSchema: GenEnum<ApiResourceEventType>;
+/**
+ * @generated from enum ai.stigmer.commons.apiresource.ApiResourceStateOperationType
+ */
+export declare enum ApiResourceStateOperationType {
+    /**
+     * @generated from enum value: api_resource_state_operation_type_unspecified = 0;
+     */
+    api_resource_state_operation_type_unspecified = 0,
+    /**
+     * @generated from enum value: create = 1;
+     */
+    create = 1,
+    /**
+     * @generated from enum value: update = 2;
+     */
+    update = 2,
+    /**
+     * @generated from enum value: delete = 3;
+     */
+    delete = 3,
+    /**
+     * @generated from enum value: read = 4;
+     */
+    read = 4,
+    /**
+     * @generated from enum value: stream = 5;
+     */
+    stream = 5
+}
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.ApiResourceStateOperationType.
+ */
+export declare const ApiResourceStateOperationTypeSchema: GenEnum<ApiResourceStateOperationType>;
+/**
+ * Visibility controls who can access an API resource.
+ * This is orthogonal to ownership - visibility is about access control,
+ * while ownership (org) determines who manages the resource.
+ *
+ * Key distinction:
+ * - Ownership: Which organization controls/manages the resource
+ * - Visibility: Who can access/use the resource
+ *
+ * All resources belong to an organization. Visibility determines whether
+ * users outside that organization can access the resource.
+ *
+ * @generated from enum ai.stigmer.commons.apiresource.ApiResourceVisibility
+ */
+export declare enum ApiResourceVisibility {
+    /**
+     * Default/unspecified - backend infers from context.
+     * For new resources: defaults to visibility_private.
+     *
+     * @generated from enum value: api_resource_visibility_unspecified = 0;
+     */
+    api_resource_visibility_unspecified = 0,
+    /**
+     * Only members of the owning organization can access.
+     * This is the default for most resources.
+     * Named visibility_private to avoid Java reserved keyword conflict.
+     *
+     * @generated from enum value: visibility_private = 1;
+     */
+    visibility_private = 1,
+    /**
+     * Anyone can access (read) this resource.
+     * Used for marketplace-published resources (e.g., "stigmer/web-search").
+     * Write access still requires org membership.
+     * Named visibility_public to avoid Java reserved keyword conflict.
+     *
+     * @generated from enum value: visibility_public = 2;
+     */
+    visibility_public = 2
+}
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.ApiResourceVisibility.
+ */
+export declare const ApiResourceVisibilitySchema: GenEnum<ApiResourceVisibility>;

package/ai/stigmer/commons/apiresource/enum_pb.js

@@ -0,0 +1,129 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/commons/apiresource/enum.proto (package ai.stigmer.commons.apiresource, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file ai/stigmer/commons/apiresource/enum.proto.
+ */
+export const file_ai_stigmer_commons_apiresource_enum = /*@__PURE__*/ fileDesc("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");
+/**
+ * enumeration of the union of all event types used across all the api resources.
+ * this is used for specifying the event type produced by rpc methods in command controllers.
+ * using different enum for these event types while specifying in rpc methods and individual api resource would
+ * work because the events are eventually converted to strings during message passing.
+ *
+ * @generated from enum ai.stigmer.commons.apiresource.ApiResourceEventType
+ */
+export var ApiResourceEventType;
+(function (ApiResourceEventType) {
+    /**
+     * @generated from enum value: unspecified = 0;
+     */
+    ApiResourceEventType[ApiResourceEventType["unspecified"] = 0] = "unspecified";
+    /**
+     * @generated from enum value: created = 1;
+     */
+    ApiResourceEventType[ApiResourceEventType["created"] = 1] = "created";
+    /**
+     * @generated from enum value: updated = 2;
+     */
+    ApiResourceEventType[ApiResourceEventType["updated"] = 2] = "updated";
+    /**
+     * @generated from enum value: deleted = 3;
+     */
+    ApiResourceEventType[ApiResourceEventType["deleted"] = 3] = "deleted";
+    /**
+     * @generated from enum value: renamed = 4;
+     */
+    ApiResourceEventType[ApiResourceEventType["renamed"] = 4] = "renamed";
+    /**
+     * this is only applicable for cloud-resources
+     *
+     * @generated from enum value: stack_outputs_updated = 5;
+     */
+    ApiResourceEventType[ApiResourceEventType["stack_outputs_updated"] = 5] = "stack_outputs_updated";
+})(ApiResourceEventType || (ApiResourceEventType = {}));
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.ApiResourceEventType.
+ */
+export const ApiResourceEventTypeSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_commons_apiresource_enum, 0);
+/**
+ * @generated from enum ai.stigmer.commons.apiresource.ApiResourceStateOperationType
+ */
+export var ApiResourceStateOperationType;
+(function (ApiResourceStateOperationType) {
+    /**
+     * @generated from enum value: api_resource_state_operation_type_unspecified = 0;
+     */
+    ApiResourceStateOperationType[ApiResourceStateOperationType["api_resource_state_operation_type_unspecified"] = 0] = "api_resource_state_operation_type_unspecified";
+    /**
+     * @generated from enum value: create = 1;
+     */
+    ApiResourceStateOperationType[ApiResourceStateOperationType["create"] = 1] = "create";
+    /**
+     * @generated from enum value: update = 2;
+     */
+    ApiResourceStateOperationType[ApiResourceStateOperationType["update"] = 2] = "update";
+    /**
+     * @generated from enum value: delete = 3;
+     */
+    ApiResourceStateOperationType[ApiResourceStateOperationType["delete"] = 3] = "delete";
+    /**
+     * @generated from enum value: read = 4;
+     */
+    ApiResourceStateOperationType[ApiResourceStateOperationType["read"] = 4] = "read";
+    /**
+     * @generated from enum value: stream = 5;
+     */
+    ApiResourceStateOperationType[ApiResourceStateOperationType["stream"] = 5] = "stream";
+})(ApiResourceStateOperationType || (ApiResourceStateOperationType = {}));
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.ApiResourceStateOperationType.
+ */
+export const ApiResourceStateOperationTypeSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_commons_apiresource_enum, 1);
+/**
+ * Visibility controls who can access an API resource.
+ * This is orthogonal to ownership - visibility is about access control,
+ * while ownership (org) determines who manages the resource.
+ *
+ * Key distinction:
+ * - Ownership: Which organization controls/manages the resource
+ * - Visibility: Who can access/use the resource
+ *
+ * All resources belong to an organization. Visibility determines whether
+ * users outside that organization can access the resource.
+ *
+ * @generated from enum ai.stigmer.commons.apiresource.ApiResourceVisibility
+ */
+export var ApiResourceVisibility;
+(function (ApiResourceVisibility) {
+    /**
+     * Default/unspecified - backend infers from context.
+     * For new resources: defaults to visibility_private.
+     *
+     * @generated from enum value: api_resource_visibility_unspecified = 0;
+     */
+    ApiResourceVisibility[ApiResourceVisibility["api_resource_visibility_unspecified"] = 0] = "api_resource_visibility_unspecified";
+    /**
+     * Only members of the owning organization can access.
+     * This is the default for most resources.
+     * Named visibility_private to avoid Java reserved keyword conflict.
+     *
+     * @generated from enum value: visibility_private = 1;
+     */
+    ApiResourceVisibility[ApiResourceVisibility["visibility_private"] = 1] = "visibility_private";
+    /**
+     * Anyone can access (read) this resource.
+     * Used for marketplace-published resources (e.g., "stigmer/web-search").
+     * Write access still requires org membership.
+     * Named visibility_public to avoid Java reserved keyword conflict.
+     *
+     * @generated from enum value: visibility_public = 2;
+     */
+    ApiResourceVisibility[ApiResourceVisibility["visibility_public"] = 2] = "visibility_public";
+})(ApiResourceVisibility || (ApiResourceVisibility = {}));
+/**
+ * Describes the enum ai.stigmer.commons.apiresource.ApiResourceVisibility.
+ */
+export const ApiResourceVisibilitySchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_commons_apiresource_enum, 2);
+//# sourceMappingURL=enum_pb.js.map

package/ai/stigmer/commons/apiresource/enum_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/enum_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,smBAAsmB,CAAC,CAAC;AAEnnB;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,oBAgCX;AAhCD,WAAY,oBAAoB;IAC9B;;OAEG;IACH,6EAAe,CAAA;IAEf;;OAEG;IACH,qEAAW,CAAA;IAEX;;OAEG;IACH,qEAAW,CAAA;IAEX;;OAEG;IACH,qEAAW,CAAA;IAEX;;OAEG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,iGAAyB,CAAA;AAC3B,CAAC,EAhCW,oBAAoB,KAApB,oBAAoB,QAgC/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;GAEG;AACH,MAAM,CAAN,IAAY,6BA8BX;AA9BD,WAAY,6BAA6B;IACvC;;OAEG;IACH,mKAAiD,CAAA;IAEjD;;OAEG;IACH,qFAAU,CAAA;IAEV;;OAEG;IACH,qFAAU,CAAA;IAEV;;OAEG;IACH,qFAAU,CAAA;IAEV;;OAEG;IACH,iFAAQ,CAAA;IAER;;OAEG;IACH,qFAAU,CAAA;AACZ,CAAC,EA9BW,6BAA6B,KAA7B,6BAA6B,QA8BxC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA2C,aAAa,CACtG,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,qBA2BX;AA3BD,WAAY,qBAAqB;IAC/B;;;;;OAKG;IACH,+HAAuC,CAAA;IAEvC;;;;;;OAMG;IACH,6FAAsB,CAAA;IAEtB;;;;;;;OAOG;IACH,2FAAqB,CAAA;AACvB,CAAC,EA3BW,qBAAqB,KAArB,qBAAqB,QA2BhC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}