@stigmer/protos 0.0.34

package/ai/stigmer/iam/identityprovider/v1/spec_pb.js

@@ -0,0 +1,15 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/iam/identityprovider/v1/spec.proto (package ai.stigmer.iam.identityprovider.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb";
+/**
+ * Describes the file ai/stigmer/iam/identityprovider/v1/spec.proto.
+ */
+export const file_ai_stigmer_iam_identityprovider_v1_spec = /*@__PURE__*/ fileDesc("Ci1haS9zdGlnbWVyL2lhbS9pZGVudGl0eXByb3ZpZGVyL3YxL3NwZWMucHJvdG8SImFpLnN0aWdtZXIuaWFtLmlkZW50aXR5cHJvdmlkZXIudjEi0AEKFElkZW50aXR5UHJvdmlkZXJTcGVjEh4KDGRpc3BsYXlfbmFtZRgBIAEoCUIIukgFcgMYyAESGgoIandrc191cmkYAiABKAlCCLpIBXIDGIAQEhcKD2FsbG93ZWRfaXNzdWVycxgDIAMoCRIjChFleHBlY3RlZF9hdWRpZW5jZRgEIAEoCUIIukgFcgMYyAESGQoRcmF0ZV9saW1pdF9idWRnZXQYBSABKAUSIwoRdXNlcmluZm9fZW5kcG9pbnQYBiABKAlCCLpIBXIDGIAQYgZwcm90bzM", [file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.iam.identityprovider.v1.IdentityProviderSpec.
+ * Use `create(IdentityProviderSpecSchema)` to create a new message.
+ */
+export const IdentityProviderSpecSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityprovider_v1_spec, 0);
+//# sourceMappingURL=spec_pb.js.map

package/ai/stigmer/iam/identityprovider/v1/spec_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityprovider/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,qZAAqZ,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAuGhc;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/search/v1/io_pb.d.ts

@@ -0,0 +1,320 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { ApiResourceKind } from "../../commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import type { ApiResourceVisibility } from "../../commons/apiresource/enum_pb";
+import type { PageInfo } from "../../commons/rpc/pagination_pb";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/search/v1/io.proto.
+ */
+export declare const file_ai_stigmer_search_v1_io: GenFile;
+/**
+ * SearchRequest specifies criteria for searching API resources.
+ *
+ * This single request type supports three use cases:
+ * - List: Return all accessible resources of specified kind(s)
+ * - Search: Find resources matching a text query
+ * - Discover: Search across all resource kinds
+ *
+ * Examples:
+ *
+ * List agents in an organization:
+ *   {kinds: [agent], org: "acme", query: ""}
+ *
+ * Search agents by text:
+ *   {kinds: [agent], query: "code review"}
+ *
+ * Discover all resources matching a query:
+ *   {kinds: [], query: "kubernetes"}
+ *
+ * Search multiple kinds:
+ *   {kinds: [agent, skill], query: "security", org: "acme"}
+ *
+ * @generated from message ai.stigmer.search.v1.SearchRequest
+ */
+export type SearchRequest = Message<"ai.stigmer.search.v1.SearchRequest"> & {
+    /**
+     * Resource kinds to search.
+     *
+     * Behavior:
+     * - Empty: Search all searchable kinds (discover mode)
+     *   Searchable kinds: agent, skill, mcp_server, workflow
+     * - Single kind: Search only that resource type
+     * - Multiple kinds: Search specified types
+     *
+     * Invalid kinds are silently ignored (allows forward compatibility).
+     *
+     * @generated from field: repeated ai.stigmer.commons.apiresource.apiresourcekind.ApiResourceKind kinds = 1;
+     */
+    kinds: ApiResourceKind[];
+    /**
+     * Text query for full-text search.
+     *
+     * Searches across: name, description, tags.
+     *
+     * Behavior:
+     * - Empty: Return all accessible resources (list mode)
+     *   Results sorted by created_at descending (newer first)
+     * - Non-empty: Full-text search with relevance ranking
+     *   Results sorted by relevance score descending
+     *
+     * Query syntax: Plain text (no special operators).
+     * Maximum length: 500 characters.
+     *
+     * @generated from field: string query = 2;
+     */
+    query: string;
+    /**
+     * Organization to scope the search.
+     *
+     * Format: lowercase alphanumeric with hyphens (e.g., "acme", "stigmer").
+     *
+     * Behavior:
+     * - Empty: Search all organizations the caller has access to
+     * - Non-empty: Search only within the specified organization
+     *   Caller must have access to at least one resource in the org
+     *
+     * Examples: "stigmer", "acme-corp", "my-org"
+     *
+     * @generated from field: string org = 3;
+     */
+    org: string;
+    /**
+     * Exclude public/platform resources from results.
+     *
+     * Default: false (include public resources).
+     *
+     * When true: Only return resources from organizations the caller
+     * is a member of. Excludes platform-provided public resources
+     * like "stigmer/web-search".
+     *
+     * Useful when users want to see only their own resources.
+     *
+     * @generated from field: bool exclude_public = 4;
+     */
+    excludePublic: boolean;
+    /**
+     * Pagination parameters.
+     *
+     * - num: Page number (1-indexed). Default: 1
+     * - size: Items per page. Default: 20, Maximum: 100
+     *
+     * If not provided, defaults to page 1 with 20 items.
+     *
+     * @generated from field: ai.stigmer.commons.rpc.PageInfo page = 5;
+     */
+    page?: PageInfo;
+};
+/**
+ * Describes the message ai.stigmer.search.v1.SearchRequest.
+ * Use `create(SearchRequestSchema)` to create a new message.
+ */
+export declare const SearchRequestSchema: GenMessage<SearchRequest>;
+/**
+ * SearchResponse contains paginated search results with metadata.
+ *
+ * The response includes:
+ * - Matching resources as SearchResult projections
+ * - Counts per kind for UI filtering/tabs
+ * - Pagination metadata
+ *
+ * @generated from message ai.stigmer.search.v1.SearchResponse
+ */
+export type SearchResponse = Message<"ai.stigmer.search.v1.SearchResponse"> & {
+    /**
+     * Search results for the current page.
+     *
+     * Ordering:
+     * - With query: Sorted by relevance score (descending)
+     * - Without query: Sorted by created_at (descending, newer first)
+     *
+     * Each result is a display projection, not the full resource.
+     * To get the full resource, use the kind-specific get RPC.
+     *
+     * @generated from field: repeated ai.stigmer.search.v1.SearchResult entries = 1;
+     */
+    entries: SearchResult[];
+    /**
+     * Count of results per resource kind.
+     *
+     * Keys are ApiResourceKind enum names as strings (e.g., "agent", "skill").
+     * Values are the total count of matching resources for that kind
+     * (not just the current page).
+     *
+     * Useful for rendering UI tabs or filter badges showing counts.
+     * Example: {"agent": 5, "skill": 12, "mcp_server": 3, "workflow": 2}
+     *
+     * @generated from field: map<string, int32> counts_by_kind = 2;
+     */
+    countsByKind: {
+        [key: string]: number;
+    };
+    /**
+     * Total count of matching resources across all kinds.
+     *
+     * This is the sum of all counts_by_kind values.
+     * Used for displaying "Showing X of Y results".
+     *
+     * @generated from field: int32 total_count = 3;
+     */
+    totalCount: number;
+    /**
+     * Total number of pages based on current page size.
+     *
+     * Calculated as: ceil(total_count / page.size)
+     * Used for pagination controls.
+     *
+     * @generated from field: int32 total_pages = 4;
+     */
+    totalPages: number;
+};
+/**
+ * Describes the message ai.stigmer.search.v1.SearchResponse.
+ * Use `create(SearchResponseSchema)` to create a new message.
+ */
+export declare const SearchResponseSchema: GenMessage<SearchResponse>;
+/**
+ * SearchResult is a display-optimized projection of an API resource.
+ *
+ * Contains only the fields needed for search result display:
+ * - Identity: kind, id, slug, org
+ * - Display: name, description, tags
+ * - Metadata: visibility, timestamps, relevance score
+ *
+ * This is NOT the full resource. Use the kind-specific QueryController
+ * (e.g., AgentQueryController.get) to retrieve the complete resource.
+ *
+ * The description field is populated by each resource's Searchable interface:
+ * - Agent: spec.instructions (may be truncated)
+ * - Skill: spec.description
+ * - McpServer: spec.description
+ * - Workflow: spec.description
+ *
+ * @generated from message ai.stigmer.search.v1.SearchResult
+ */
+export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
+    /**
+     * Resource kind (e.g., agent, skill, mcp_server, workflow).
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.apiresourcekind.ApiResourceKind kind = 1;
+     */
+    kind: ApiResourceKind;
+    /**
+     * System-generated unique identifier (UUID).
+     *
+     * Format: Prefixed UUID (e.g., "agt-550e8400-e29b-41d4-a716-446655440000").
+     * Use this for subsequent API calls to get/update/delete the resource.
+     *
+     * @generated from field: string id = 2;
+     */
+    id: string;
+    /**
+     * Human-readable display name.
+     *
+     * From metadata.name. This is the user-provided name.
+     * Example: "Code Review Agent", "Web Search Skill"
+     *
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * URL-friendly identifier, unique within the organization.
+     *
+     * From metadata.slug. Lowercase alphanumeric with hyphens.
+     * Example: "code-review-agent", "web-search"
+     *
+     * @generated from field: string slug = 4;
+     */
+    slug: string;
+    /**
+     * Fully qualified slug: "org/slug".
+     *
+     * Pre-computed for CLI and UI display.
+     * Example: "stigmer/web-search", "acme/code-reviewer"
+     *
+     * This is the canonical reference format used in YAML configurations.
+     *
+     * @generated from field: string qualified_slug = 5;
+     */
+    qualifiedSlug: string;
+    /**
+     * Organization that owns this resource.
+     *
+     * From metadata.org. The organization slug.
+     * Example: "stigmer", "acme-corp"
+     *
+     * @generated from field: string org = 6;
+     */
+    org: string;
+    /**
+     * Brief description for display in search results.
+     *
+     * Extracted from the resource spec via the Searchable interface.
+     * The source field varies by resource type:
+     * - Agent: spec.instructions
+     * - Skill: spec.description
+     * - McpServer: spec.description
+     * - Workflow: spec.description
+     *
+     * May be empty if the resource has no description.
+     * Truncation for display is a presentation concern (CLI/UI responsibility).
+     *
+     * @generated from field: string description = 7;
+     */
+    description: string;
+    /**
+     * Resource visibility: public or private.
+     *
+     * - visibility_private: Only org members can access
+     * - visibility_public: Anyone can read (e.g., marketplace resources)
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceVisibility visibility = 8;
+     */
+    visibility: ApiResourceVisibility;
+    /**
+     * Tags for categorization and filtering.
+     *
+     * From metadata.tags. User-provided labels.
+     * Example: ["security", "code-review", "ai"]
+     *
+     * @generated from field: repeated string tags = 9;
+     */
+    tags: string[];
+    /**
+     * When the resource was created.
+     *
+     * From status.audit.created_at.
+     * Used for sorting in list mode (no query).
+     *
+     * @generated from field: google.protobuf.Timestamp created_at = 10;
+     */
+    createdAt?: Timestamp;
+    /**
+     * When the resource was last updated.
+     *
+     * From status.audit.updated_at.
+     * Useful for showing recency in search results.
+     *
+     * @generated from field: google.protobuf.Timestamp updated_at = 11;
+     */
+    updatedAt?: Timestamp;
+    /**
+     * Relevance score for search ranking.
+     *
+     * Range: 0.0 to 1.0 (higher = better match).
+     *
+     * Behavior:
+     * - With query: Score from full-text search ranking
+     * - Without query (list mode): Always 1.0
+     *
+     * Used for sorting when a search query is provided.
+     *
+     * @generated from field: float score = 12;
+     */
+    score: number;
+};
+/**
+ * Describes the message ai.stigmer.search.v1.SearchResult.
+ * Use `create(SearchResultSchema)` to create a new message.
+ */
+export declare const SearchResultSchema: GenMessage<SearchResult>;

package/ai/stigmer/search/v1/io_pb.js

@@ -0,0 +1,29 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/search/v1/io.proto (package ai.stigmer.search.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind } from "../../commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { file_ai_stigmer_commons_apiresource_enum } from "../../commons/apiresource/enum_pb";
+import { file_ai_stigmer_commons_rpc_pagination } from "../../commons/rpc/pagination_pb";
+import { file_buf_validate_validate } from "../../../../buf/validate/validate_pb";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file ai/stigmer/search/v1/io.proto.
+ */
+export const file_ai_stigmer_search_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind, file_ai_stigmer_commons_apiresource_enum, file_ai_stigmer_commons_rpc_pagination, file_buf_validate_validate, file_google_protobuf_timestamp]);
+/**
+ * Describes the message ai.stigmer.search.v1.SearchRequest.
+ * Use `create(SearchRequestSchema)` to create a new message.
+ */
+export const SearchRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_search_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.search.v1.SearchResponse.
+ * Use `create(SearchResponseSchema)` to create a new message.
+ */
+export const SearchResponseSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_search_v1_io, 1);
+/**
+ * Describes the message ai.stigmer.search.v1.SearchResult.
+ * Use `create(SearchResultSchema)` to create a new message.
+ */
+export const SearchResultSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_search_v1_io, 2);
+//# sourceMappingURL=io_pb.js.map

package/ai/stigmer/search/v1/io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,mGAAmG;AACnG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,gEAAgE,CAAC;AAEvJ,OAAO,EAAE,wCAAwC,EAAE,MAAM,mCAAmC,CAAC;AAE7F,OAAO,EAAE,sCAAsC,EAAE,MAAM,iCAAiC,CAAC;AACzF,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAElF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAY,aAAa,CAChE,QAAQ,CAAC,6vCAA6vC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAwGj+C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA8D/C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA0J/C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/search/v1/query_connect.d.ts

@@ -0,0 +1,67 @@
+/**
+ * SearchService provides unified search across all API resources.
+ *
+ * This is a CQRS Query Service operating on the read-side of the system.
+ * It queries multiple domain aggregates (Agent, Skill, McpServer, Workflow)
+ * and returns display-optimized projections. It does not modify state.
+ *
+ * Architectural Note:
+ * Search is cross-aggregate query infrastructure, not a domain bounded context.
+ * It lives in the query layer (CQRS read-side), not the domain layer.
+ * Therefore, it does not have an api_resource_kind option like domain services.
+ *
+ * Authorization Model:
+ * Unlike domain services that use declarative authorization options,
+ * SearchService handles authorization programmatically in the handler:
+ * 1. Call FGA to get authorized resource IDs per requested kind
+ * 2. Apply filters (org, query, exclude_public) against authorized set
+ * 3. Return only resources the caller has can_view permission on
+ *
+ * Usage Patterns (all via single RPC):
+ * - List agents in org:    {kinds: [agent], org: "acme", query: ""}
+ * - Search agents:         {kinds: [agent], query: "security"}
+ * - Search in org:         {kinds: [agent], org: "acme", query: "security"}
+ * - Discover all kinds:    {kinds: [], query: "kubernetes"}
+ * - Discover specific:     {kinds: [agent, skill], query: "kubernetes"}
+ *
+ * @generated from service ai.stigmer.search.v1.SearchService
+ */
+export declare const SearchService: {
+    readonly typeName: "ai.stigmer.search.v1.SearchService";
+    readonly methods: {
+        /**
+         * Search resources across one or more kinds.
+         *
+         * This is the unified entry point for list, search, and discover operations.
+         * The behavior is determined by the combination of request parameters:
+         *
+         * | Operation | kinds     | query | org     | Behavior                              |
+         * |-----------|-----------|-------|---------|---------------------------------------|
+         * | List      | [X]       | ""    | "acme"  | All X in org, sorted by created_at    |
+         * | List All  | [X]       | ""    | ""      | All accessible X, sorted by created_at|
+         * | Search    | [X]       | "..."  | ""      | Search X by query, sorted by relevance|
+         * | Search Org| [X]       | "..."  | "acme"  | Search X in org, sorted by relevance  |
+         * | Discover  | []        | "..."  | ""      | Search all kinds, sorted by relevance |
+         *
+         * Sort Order:
+         * - With query: Results sorted by relevance score (descending)
+         * - Without query: Results sorted by created_at (descending, newer first)
+         *
+         * Authorization:
+         * Returns only resources the caller has can_view permission on.
+         * The handler queries FGA per kind to get authorized IDs, then applies filters.
+         *
+         * Pagination:
+         * Use page.num (1-indexed) and page.size to paginate results.
+         * Response includes total_count and total_pages for UI pagination controls.
+         *
+         * @generated from rpc ai.stigmer.search.v1.SearchService.search
+         */
+        readonly search: {
+            readonly name: "search";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/search/v1/query_connect.js

@@ -0,0 +1,73 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts"
+// @generated from file ai/stigmer/search/v1/query.proto (package ai.stigmer.search.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * SearchService provides unified search across all API resources.
+ *
+ * This is a CQRS Query Service operating on the read-side of the system.
+ * It queries multiple domain aggregates (Agent, Skill, McpServer, Workflow)
+ * and returns display-optimized projections. It does not modify state.
+ *
+ * Architectural Note:
+ * Search is cross-aggregate query infrastructure, not a domain bounded context.
+ * It lives in the query layer (CQRS read-side), not the domain layer.
+ * Therefore, it does not have an api_resource_kind option like domain services.
+ *
+ * Authorization Model:
+ * Unlike domain services that use declarative authorization options,
+ * SearchService handles authorization programmatically in the handler:
+ * 1. Call FGA to get authorized resource IDs per requested kind
+ * 2. Apply filters (org, query, exclude_public) against authorized set
+ * 3. Return only resources the caller has can_view permission on
+ *
+ * Usage Patterns (all via single RPC):
+ * - List agents in org:    {kinds: [agent], org: "acme", query: ""}
+ * - Search agents:         {kinds: [agent], query: "security"}
+ * - Search in org:         {kinds: [agent], org: "acme", query: "security"}
+ * - Discover all kinds:    {kinds: [], query: "kubernetes"}
+ * - Discover specific:     {kinds: [agent, skill], query: "kubernetes"}
+ *
+ * @generated from service ai.stigmer.search.v1.SearchService
+ */
+export const SearchService = {
+    typeName: "ai.stigmer.search.v1.SearchService",
+    methods: {
+        /**
+         * Search resources across one or more kinds.
+         *
+         * This is the unified entry point for list, search, and discover operations.
+         * The behavior is determined by the combination of request parameters:
+         *
+         * | Operation | kinds     | query | org     | Behavior                              |
+         * |-----------|-----------|-------|---------|---------------------------------------|
+         * | List      | [X]       | ""    | "acme"  | All X in org, sorted by created_at    |
+         * | List All  | [X]       | ""    | ""      | All accessible X, sorted by created_at|
+         * | Search    | [X]       | "..."  | ""      | Search X by query, sorted by relevance|
+         * | Search Org| [X]       | "..."  | "acme"  | Search X in org, sorted by relevance  |
+         * | Discover  | []        | "..."  | ""      | Search all kinds, sorted by relevance |
+         *
+         * Sort Order:
+         * - With query: Results sorted by relevance score (descending)
+         * - Without query: Results sorted by created_at (descending, newer first)
+         *
+         * Authorization:
+         * Returns only resources the caller has can_view permission on.
+         * The handler queries FGA per kind to get authorized IDs, then applies filters.
+         *
+         * Pagination:
+         * Use page.num (1-indexed) and page.size to paginate results.
+         * Response includes total_count and total_pages for UI pagination controls.
+         *
+         * @generated from rpc ai.stigmer.search.v1.SearchService.search
+         */
+        search: {
+            name: "search",
+            I: SearchRequest,
+            O: SearchResponse,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=query_connect.js.map

package/ai/stigmer/search/v1/query_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sGAAsG;AACtG,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,oCAAoC;IAC9C,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/search/v1/query_pb.d.ts

@@ -0,0 +1,69 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { SearchRequestSchema, SearchResponseSchema } from "./io_pb";
+/**
+ * Describes the file ai/stigmer/search/v1/query.proto.
+ */
+export declare const file_ai_stigmer_search_v1_query: GenFile;
+/**
+ * SearchService provides unified search across all API resources.
+ *
+ * This is a CQRS Query Service operating on the read-side of the system.
+ * It queries multiple domain aggregates (Agent, Skill, McpServer, Workflow)
+ * and returns display-optimized projections. It does not modify state.
+ *
+ * Architectural Note:
+ * Search is cross-aggregate query infrastructure, not a domain bounded context.
+ * It lives in the query layer (CQRS read-side), not the domain layer.
+ * Therefore, it does not have an api_resource_kind option like domain services.
+ *
+ * Authorization Model:
+ * Unlike domain services that use declarative authorization options,
+ * SearchService handles authorization programmatically in the handler:
+ * 1. Call FGA to get authorized resource IDs per requested kind
+ * 2. Apply filters (org, query, exclude_public) against authorized set
+ * 3. Return only resources the caller has can_view permission on
+ *
+ * Usage Patterns (all via single RPC):
+ * - List agents in org:    {kinds: [agent], org: "acme", query: ""}
+ * - Search agents:         {kinds: [agent], query: "security"}
+ * - Search in org:         {kinds: [agent], org: "acme", query: "security"}
+ * - Discover all kinds:    {kinds: [], query: "kubernetes"}
+ * - Discover specific:     {kinds: [agent, skill], query: "kubernetes"}
+ *
+ * @generated from service ai.stigmer.search.v1.SearchService
+ */
+export declare const SearchService: GenService<{
+    /**
+     * Search resources across one or more kinds.
+     *
+     * This is the unified entry point for list, search, and discover operations.
+     * The behavior is determined by the combination of request parameters:
+     *
+     * | Operation | kinds     | query | org     | Behavior                              |
+     * |-----------|-----------|-------|---------|---------------------------------------|
+     * | List      | [X]       | ""    | "acme"  | All X in org, sorted by created_at    |
+     * | List All  | [X]       | ""    | ""      | All accessible X, sorted by created_at|
+     * | Search    | [X]       | "..."  | ""      | Search X by query, sorted by relevance|
+     * | Search Org| [X]       | "..."  | "acme"  | Search X in org, sorted by relevance  |
+     * | Discover  | []        | "..."  | ""      | Search all kinds, sorted by relevance |
+     *
+     * Sort Order:
+     * - With query: Results sorted by relevance score (descending)
+     * - Without query: Results sorted by created_at (descending, newer first)
+     *
+     * Authorization:
+     * Returns only resources the caller has can_view permission on.
+     * The handler queries FGA per kind to get authorized IDs, then applies filters.
+     *
+     * Pagination:
+     * Use page.num (1-indexed) and page.size to paginate results.
+     * Response includes total_count and total_pages for UI pagination controls.
+     *
+     * @generated from rpc ai.stigmer.search.v1.SearchService.search
+     */
+    search: {
+        methodKind: "unary";
+        input: typeof SearchRequestSchema;
+        output: typeof SearchResponseSchema;
+    };
+}>;

package/ai/stigmer/search/v1/query_pb.js

@@ -0,0 +1,40 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/search/v1/query.proto (package ai.stigmer.search.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from "../../iam/iampolicy/v1/rpcauthorization/method_options_pb";
+import { file_ai_stigmer_search_v1_io } from "./io_pb";
+/**
+ * Describes the file ai/stigmer/search/v1/query.proto.
+ */
+export const file_ai_stigmer_search_v1_query = /*@__PURE__*/ fileDesc("CiBhaS9zdGlnbWVyL3NlYXJjaC92MS9xdWVyeS5wcm90bxIUYWkuc3RpZ21lci5zZWFyY2gudjEyagoNU2VhcmNoU2VydmljZRJZCgZzZWFyY2gSIy5haS5zdGlnbWVyLnNlYXJjaC52MS5TZWFyY2hSZXF1ZXN0GiQuYWkuc3RpZ21lci5zZWFyY2gudjEuU2VhcmNoUmVzcG9uc2UiBNC4GAFiBnByb3RvMw", [file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options, file_ai_stigmer_search_v1_io]);
+/**
+ * SearchService provides unified search across all API resources.
+ *
+ * This is a CQRS Query Service operating on the read-side of the system.
+ * It queries multiple domain aggregates (Agent, Skill, McpServer, Workflow)
+ * and returns display-optimized projections. It does not modify state.
+ *
+ * Architectural Note:
+ * Search is cross-aggregate query infrastructure, not a domain bounded context.
+ * It lives in the query layer (CQRS read-side), not the domain layer.
+ * Therefore, it does not have an api_resource_kind option like domain services.
+ *
+ * Authorization Model:
+ * Unlike domain services that use declarative authorization options,
+ * SearchService handles authorization programmatically in the handler:
+ * 1. Call FGA to get authorized resource IDs per requested kind
+ * 2. Apply filters (org, query, exclude_public) against authorized set
+ * 3. Return only resources the caller has can_view permission on
+ *
+ * Usage Patterns (all via single RPC):
+ * - List agents in org:    {kinds: [agent], org: "acme", query: ""}
+ * - Search agents:         {kinds: [agent], query: "security"}
+ * - Search in org:         {kinds: [agent], org: "acme", query: "security"}
+ * - Discover all kinds:    {kinds: [], query: "kubernetes"}
+ * - Discover specific:     {kinds: [agent, skill], query: "kubernetes"}
+ *
+ * @generated from service ai.stigmer.search.v1.SearchService
+ */
+export const SearchService = /*@__PURE__*/ serviceDesc(file_ai_stigmer_search_v1_query, 0);
+//# sourceMappingURL=query_pb.js.map

package/ai/stigmer/search/v1/query_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,sGAAsG;AACtG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,gEAAgE,EAAE,MAAM,2DAA2D,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAEvD;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAY,aAAa,CACnE,QAAQ,CAAC,wOAAwO,EAAE,CAAC,gEAAgE,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAEvV;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,aAAa,GAkCrB,aAAa,CAChB,WAAW,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC"}