@stigmer/protos 0.0.36 → 0.0.40

package/ai/stigmer/agentic/agentinstance/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,UAAU,CAAC;AAExE,OAAO,EAAE,2CAA2C,EAAE,MAAM,SAAS,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,4vBAA4vB,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEzgC;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAkCpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,UAAU,CAAC;AAExE,OAAO,EAAE,2CAA2C,EAAE,MAAM,SAAS,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,y7BAAy7B,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEtsC;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GA8CpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/command_connect.d.ts

@@ -52,5 +52,29 @@ export declare const EnvironmentCommandController: {
             readonly O: any;
             readonly kind: any;
         };
+        /**
+         * Add or update specific variables in an environment (server-side merge).
+         * Existing variables not included in the request are preserved unchanged.
+         *
+         * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.updateVariables
+         */
+        readonly updateVariables: {
+            readonly name: "updateVariables";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Remove specific variables from an environment by key.
+         * Keys that don't exist are silently ignored.
+         *
+         * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.removeVariables
+         */
+        readonly removeVariables: {
+            readonly name: "removeVariables";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
     };
 };

package/ai/stigmer/agentic/environment/v1/command_connect.js

@@ -57,6 +57,30 @@ export const EnvironmentCommandController = {
             O: Environment,
             kind: MethodKind.Unary,
         },
+        /**
+         * Add or update specific variables in an environment (server-side merge).
+         * Existing variables not included in the request are preserved unchanged.
+         *
+         * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.updateVariables
+         */
+        updateVariables: {
+            name: "updateVariables",
+            I: UpdateEnvironmentVariablesRequest,
+            O: Environment,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Remove specific variables from an environment by key.
+         * Keys that don't exist are silently ignored.
+         *
+         * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.removeVariables
+         */
+        removeVariables: {
+            name: "removeVariables",
+            I: RemoveEnvironmentVariablesRequest,
+            O: Environment,
+            kind: MethodKind.Unary,
+        },
     }
 };
 //# sourceMappingURL=command_connect.js.map

package/ai/stigmer/agentic/environment/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,kIAAkI;AAClI,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,kIAAkI;AAClI,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,iCAAiC;YACpC,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,iCAAiC;YACpC,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/environment/v1/command_pb.d.ts

@@ -1,5 +1,6 @@
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
 import type { EnvironmentSchema } from "./api_pb";
+import type { RemoveEnvironmentVariablesRequestSchema, UpdateEnvironmentVariablesRequestSchema } from "./io_pb";
 import type { ApiResourceDeleteInputSchema } from "../../../commons/apiresource/io_pb";
 /**
  * Describes the file ai/stigmer/agentic/environment/v1/command.proto.
@@ -53,4 +54,26 @@ export declare const EnvironmentCommandController: GenService<{
         input: typeof ApiResourceDeleteInputSchema;
         output: typeof EnvironmentSchema;
     };
+    /**
+     * Add or update specific variables in an environment (server-side merge).
+     * Existing variables not included in the request are preserved unchanged.
+     *
+     * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.updateVariables
+     */
+    updateVariables: {
+        methodKind: "unary";
+        input: typeof UpdateEnvironmentVariablesRequestSchema;
+        output: typeof EnvironmentSchema;
+    };
+    /**
+     * Remove specific variables from an environment by key.
+     * Keys that don't exist are silently ignored.
+     *
+     * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.removeVariables
+     */
+    removeVariables: {
+        methodKind: "unary";
+        input: typeof RemoveEnvironmentVariablesRequestSchema;
+        output: typeof EnvironmentSchema;
+    };
 }>;

package/ai/stigmer/agentic/environment/v1/command_pb.js

@@ -3,13 +3,14 @@
 /* eslint-disable */
 import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
 import { file_ai_stigmer_agentic_environment_v1_api } from "./api_pb";
+import { file_ai_stigmer_agentic_environment_v1_io } from "./io_pb";
 import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb";
 import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb";
 import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from "../../../iam/iampolicy/v1/rpcauthorization/method_options_pb";
 /**
  * Describes the file ai/stigmer/agentic/environment/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_environment_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_environment_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_agentic_environment_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * EnvironmentCommandController provides write operations for Environment resources.
  *

package/ai/stigmer/agentic/environment/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,g5BAAg5B,EAAE,CAAC,0CAA0C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE9mC;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GA2CpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,yCAAyC,EAAE,MAAM,SAAS,CAAC;AAEpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,6iDAA6iD,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEtzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAiEpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/io_pb.d.ts

@@ -1,4 +1,7 @@
 import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Environment } from "./api_pb";
+import type { EnvironmentValue } from "./spec_pb";
+import type { PageInfo } from "../../../commons/rpc/pagination_pb";
 import type { Message } from "@bufbuild/protobuf";
 /**
  * Describes the file ai/stigmer/agentic/environment/v1/io.proto.
@@ -20,3 +23,140 @@ export type EnvironmentId = Message<"ai.stigmer.agentic.environment.v1.Environme
  * Use `create(EnvironmentIdSchema)` to create a new message.
  */
 export declare const EnvironmentIdSchema: GenMessage<EnvironmentId>;
+/**
+ * Input for retrieving a single unredacted secret value from an environment.
+ * Returns the decrypted value for exactly one key. Single-key retrieval by design:
+ * limits blast radius if intercepted, enables per-key audit trails, and matches
+ * the industry-standard "reveal" UX pattern (AWS, GitHub, 1Password).
+ *
+ * @generated from message ai.stigmer.agentic.environment.v1.EnvironmentSecretValueInput
+ */
+export type EnvironmentSecretValueInput = Message<"ai.stigmer.agentic.environment.v1.EnvironmentSecretValueInput"> & {
+    /**
+     * The environment resource ID.
+     *
+     * @generated from field: string environment_id = 1;
+     */
+    environmentId: string;
+    /**
+     * The key within EnvironmentSpec.data to retrieve the unredacted value for.
+     *
+     * @generated from field: string key = 2;
+     */
+    key: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.EnvironmentSecretValueInput.
+ * Use `create(EnvironmentSecretValueInputSchema)` to create a new message.
+ */
+export declare const EnvironmentSecretValueInputSchema: GenMessage<EnvironmentSecretValueInput>;
+/**
+ * ListEnvironmentsRequest specifies parameters for listing environments.
+ *
+ * @generated from message ai.stigmer.agentic.environment.v1.ListEnvironmentsRequest
+ */
+export type ListEnvironmentsRequest = Message<"ai.stigmer.agentic.environment.v1.ListEnvironmentsRequest"> & {
+    /**
+     * Organization to list environments for (required).
+     *
+     * @generated from field: string org = 1;
+     */
+    org: string;
+    /**
+     * Filter by metadata labels (optional). AND semantics: resource must match ALL labels.
+     * Example: {"stigmer.ai/personal": "true"} returns only personal environments.
+     *
+     * @generated from field: map<string, string> labels = 2;
+     */
+    labels: {
+        [key: string]: string;
+    };
+    /**
+     * Pagination options (optional).
+     *
+     * @generated from field: ai.stigmer.commons.rpc.PageInfo page_info = 3;
+     */
+    pageInfo?: PageInfo;
+};
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.ListEnvironmentsRequest.
+ * Use `create(ListEnvironmentsRequestSchema)` to create a new message.
+ */
+export declare const ListEnvironmentsRequestSchema: GenMessage<ListEnvironmentsRequest>;
+/**
+ * EnvironmentList contains a paginated list of environments.
+ *
+ * @generated from message ai.stigmer.agentic.environment.v1.EnvironmentList
+ */
+export type EnvironmentList = Message<"ai.stigmer.agentic.environment.v1.EnvironmentList"> & {
+    /**
+     * Total count of matching environments.
+     *
+     * @generated from field: int32 total_count = 1;
+     */
+    totalCount: number;
+    /**
+     * Environments in the current page.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.environment.v1.Environment items = 2;
+     */
+    items: Environment[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.EnvironmentList.
+ * Use `create(EnvironmentListSchema)` to create a new message.
+ */
+export declare const EnvironmentListSchema: GenMessage<EnvironmentList>;
+/**
+ * Request to add or update specific variables in an environment.
+ * Server-side merge: existing variables not included in this request are preserved.
+ * For secret variables, the new value replaces the old one (re-encrypted server-side).
+ *
+ * @generated from message ai.stigmer.agentic.environment.v1.UpdateEnvironmentVariablesRequest
+ */
+export type UpdateEnvironmentVariablesRequest = Message<"ai.stigmer.agentic.environment.v1.UpdateEnvironmentVariablesRequest"> & {
+    /**
+     * The environment resource ID.
+     *
+     * @generated from field: string environment_id = 1;
+     */
+    environmentId: string;
+    /**
+     * Variables to add or update. Keys that already exist are overwritten.
+     * Keys not present in this map are left unchanged.
+     *
+     * @generated from field: map<string, ai.stigmer.agentic.environment.v1.EnvironmentValue> variables = 2;
+     */
+    variables: {
+        [key: string]: EnvironmentValue;
+    };
+};
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.UpdateEnvironmentVariablesRequest.
+ * Use `create(UpdateEnvironmentVariablesRequestSchema)` to create a new message.
+ */
+export declare const UpdateEnvironmentVariablesRequestSchema: GenMessage<UpdateEnvironmentVariablesRequest>;
+/**
+ * Request to remove specific variables from an environment by key.
+ *
+ * @generated from message ai.stigmer.agentic.environment.v1.RemoveEnvironmentVariablesRequest
+ */
+export type RemoveEnvironmentVariablesRequest = Message<"ai.stigmer.agentic.environment.v1.RemoveEnvironmentVariablesRequest"> & {
+    /**
+     * The environment resource ID.
+     *
+     * @generated from field: string environment_id = 1;
+     */
+    environmentId: string;
+    /**
+     * Keys to remove from EnvironmentSpec.data. Keys that don't exist are silently ignored.
+     *
+     * @generated from field: repeated string keys = 2;
+     */
+    keys: string[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.RemoveEnvironmentVariablesRequest.
+ * Use `create(RemoveEnvironmentVariablesRequestSchema)` to create a new message.
+ */
+export declare const RemoveEnvironmentVariablesRequestSchema: GenMessage<RemoveEnvironmentVariablesRequest>;

package/ai/stigmer/agentic/environment/v1/io_pb.js

@@ -2,14 +2,42 @@
 // @generated from file ai/stigmer/agentic/environment/v1/io.proto (package ai.stigmer.agentic.environment.v1, syntax proto3)
 /* eslint-disable */
 import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_environment_v1_api } from "./api_pb";
+import { file_ai_stigmer_agentic_environment_v1_spec } from "./spec_pb";
+import { file_ai_stigmer_commons_rpc_pagination } from "../../../commons/rpc/pagination_pb";
 import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb";
 /**
  * Describes the file ai/stigmer/agentic/environment/v1/io.proto.
  */
-export const file_ai_stigmer_agentic_environment_v1_io = /*@__PURE__*/ fileDesc("CiphaS9zdGlnbWVyL2FnZW50aWMvZW52aXJvbm1lbnQvdjEvaW8ucHJvdG8SIWFpLnN0aWdtZXIuYWdlbnRpYy5lbnZpcm9ubWVudC52MSImCg1FbnZpcm9ubWVudElkEhUKBXZhbHVlGAEgASgJQga6SAPIAQFiBnByb3RvMw", [file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_environment_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_rpc_pagination, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.environment.v1.EnvironmentId.
  * Use `create(EnvironmentIdSchema)` to create a new message.
  */
 export const EnvironmentIdSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_environment_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.EnvironmentSecretValueInput.
+ * Use `create(EnvironmentSecretValueInputSchema)` to create a new message.
+ */
+export const EnvironmentSecretValueInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_environment_v1_io, 1);
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.ListEnvironmentsRequest.
+ * Use `create(ListEnvironmentsRequestSchema)` to create a new message.
+ */
+export const ListEnvironmentsRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_environment_v1_io, 2);
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.EnvironmentList.
+ * Use `create(EnvironmentListSchema)` to create a new message.
+ */
+export const EnvironmentListSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_environment_v1_io, 3);
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.UpdateEnvironmentVariablesRequest.
+ * Use `create(UpdateEnvironmentVariablesRequestSchema)` to create a new message.
+ */
+export const UpdateEnvironmentVariablesRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_environment_v1_io, 4);
+/**
+ * Describes the message ai.stigmer.agentic.environment.v1.RemoveEnvironmentVariablesRequest.
+ * Use `create(RemoveEnvironmentVariablesRequestSchema)` to create a new message.
+ */
+export const RemoveEnvironmentVariablesRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_environment_v1_io, 5);
 //# sourceMappingURL=io_pb.js.map

package/ai/stigmer/agentic/environment/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,4KAA4K,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAcvN;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,2CAA2C,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,qtCAAqtC,EAAE,CAAC,0CAA0C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAcj4C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA0B5D;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+B5D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAuB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA0B5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAuB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/query_connect.d.ts

@@ -28,5 +28,31 @@ export declare const EnvironmentQueryController: {
             readonly O: any;
             readonly kind: any;
         };
+        /**
+         * Get the unredacted value of a single secret key in an environment.
+         * Creator-only: requires can_read_secrets permission (FGA: creator relation).
+         * Returns the EnvironmentValue with the decrypted value.
+         *
+         * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.getSecretValue
+         */
+        readonly getSecretValue: {
+            readonly name: "getSecretValue";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * List environments with optional label filtering.
+         * Authorization is handled in-handler via FGA-filtered queries (cloud)
+         * or unrestricted store queries (OSS). Secret values are redacted.
+         *
+         * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.list
+         */
+        readonly list: {
+            readonly name: "list";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
     };
 };

package/ai/stigmer/agentic/environment/v1/query_connect.js

@@ -33,6 +33,32 @@ export const EnvironmentQueryController = {
             O: Environment,
             kind: MethodKind.Unary,
         },
+        /**
+         * Get the unredacted value of a single secret key in an environment.
+         * Creator-only: requires can_read_secrets permission (FGA: creator relation).
+         * Returns the EnvironmentValue with the decrypted value.
+         *
+         * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.getSecretValue
+         */
+        getSecretValue: {
+            name: "getSecretValue",
+            I: EnvironmentSecretValueInput,
+            O: EnvironmentValue,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * List environments with optional label filtering.
+         * Authorization is handled in-handler via FGA-filtered queries (cloud)
+         * or unrestricted store queries (OSS). Secret values are redacted.
+         *
+         * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.list
+         */
+        list: {
+            name: "list",
+            I: ListEnvironmentsRequest,
+            O: EnvironmentList,
+            kind: MethodKind.Unary,
+        },
     }
 };
 //# sourceMappingURL=query_connect.js.map

package/ai/stigmer/agentic/environment/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,8DAA8D;IACxE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,8DAA8D;IACxE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/environment/v1/query_pb.d.ts

@@ -1,5 +1,7 @@
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
 import type { EnvironmentSchema } from "./api_pb";
+import type { EnvironmentListSchema, EnvironmentSecretValueInputSchema, ListEnvironmentsRequestSchema } from "./io_pb";
+import type { EnvironmentValueSchema } from "./spec_pb";
 import type { ApiResourceIdSchema, ApiResourceReferenceSchema } from "../../../commons/apiresource/io_pb";
 /**
  * Describes the file ai/stigmer/agentic/environment/v1/query.proto.
@@ -31,4 +33,28 @@ export declare const EnvironmentQueryController: GenService<{
         input: typeof ApiResourceReferenceSchema;
         output: typeof EnvironmentSchema;
     };
+    /**
+     * Get the unredacted value of a single secret key in an environment.
+     * Creator-only: requires can_read_secrets permission (FGA: creator relation).
+     * Returns the EnvironmentValue with the decrypted value.
+     *
+     * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.getSecretValue
+     */
+    getSecretValue: {
+        methodKind: "unary";
+        input: typeof EnvironmentSecretValueInputSchema;
+        output: typeof EnvironmentValueSchema;
+    };
+    /**
+     * List environments with optional label filtering.
+     * Authorization is handled in-handler via FGA-filtered queries (cloud)
+     * or unrestricted store queries (OSS). Secret values are redacted.
+     *
+     * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.list
+     */
+    list: {
+        methodKind: "unary";
+        input: typeof ListEnvironmentsRequestSchema;
+        output: typeof EnvironmentListSchema;
+    };
 }>;

package/ai/stigmer/agentic/environment/v1/query_pb.js

@@ -3,13 +3,15 @@
 /* eslint-disable */
 import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
 import { file_ai_stigmer_agentic_environment_v1_api } from "./api_pb";
+import { file_ai_stigmer_agentic_environment_v1_io } from "./io_pb";
+import { file_ai_stigmer_agentic_environment_v1_spec } from "./spec_pb";
 import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb";
 import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb";
 import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from "../../../iam/iampolicy/v1/rpcauthorization/method_options_pb";
 /**
  * Describes the file ai/stigmer/agentic/environment/v1/query.proto.
  */
-export const file_ai_stigmer_agentic_environment_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_environment_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_agentic_environment_v1_io, file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * EnvironmentQueryController provides read operations for Environment resources.
  *

package/ai/stigmer/agentic/environment/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,whBAAwhB,EAAE,CAAC,0CAA0C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEtvB;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAqBlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,yCAAyC,EAAE,MAAM,SAAS,CAAC;AAEpE,OAAO,EAAE,2CAA2C,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,o+BAAo+B,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE1xC;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GA6ClC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/api_pb.d.ts

@@ -29,7 +29,7 @@ export type ExecutionContext = Message<"ai.stigmer.agentic.executioncontext.v1.E
     kind: string;
     /**
      * Standard resource metadata including name, id, labels, and tags.
-     * ExecutionContext is operator-managed and belongs to an organization.
+     * ExecutionContext is ephemeral and authorization is derived from the parent execution.
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceMetadata metadata = 3;
      */

package/ai/stigmer/agentic/executioncontext/v1/command_connect.d.ts

@@ -1,6 +1,13 @@
 /**
  * ExecutionContextCommandController provides write operations for ExecutionContext resources.
- * Note: ExecutionContext is typically created/deleted by the system, not directly by users.
+ *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
+ *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
+ *
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -21,7 +28,8 @@ export declare const ExecutionContextCommandController: {
             readonly kind: any;
         };
         /**
-         * Create a new ExecutionContext (typically called by execution engine).
+         * Create a new ExecutionContext (called by execution pipeline on behalf of the user).
+         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
          */
@@ -33,6 +41,7 @@ export declare const ExecutionContextCommandController: {
         };
         /**
          * Delete an ExecutionContext (called when execution completes).
+         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
          */

package/ai/stigmer/agentic/executioncontext/v1/command_connect.js

@@ -5,7 +5,14 @@
 import { MethodKind } from "@bufbuild/protobuf";
 /**
  * ExecutionContextCommandController provides write operations for ExecutionContext resources.
- * Note: ExecutionContext is typically created/deleted by the system, not directly by users.
+ *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
+ *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
+ *
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -26,7 +33,8 @@ export const ExecutionContextCommandController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Create a new ExecutionContext (typically called by execution engine).
+         * Create a new ExecutionContext (called by execution pipeline on behalf of the user).
+         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
          */
@@ -38,6 +46,7 @@ export const ExecutionContextCommandController = {
         },
         /**
          * Delete an ExecutionContext (called when execution completes).
+         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
          */

package/ai/stigmer/agentic/executioncontext/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/command_pb.d.ts

@@ -7,7 +7,14 @@ import type { ApiResourceDeleteInputSchema } from "../../../commons/apiresource/
 export declare const file_ai_stigmer_agentic_executioncontext_v1_command: GenFile;
 /**
  * ExecutionContextCommandController provides write operations for ExecutionContext resources.
- * Note: ExecutionContext is typically created/deleted by the system, not directly by users.
+ *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
+ *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
+ *
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -25,7 +32,8 @@ export declare const ExecutionContextCommandController: GenService<{
         output: typeof ExecutionContextSchema;
     };
     /**
-     * Create a new ExecutionContext (typically called by execution engine).
+     * Create a new ExecutionContext (called by execution pipeline on behalf of the user).
+     * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
      */
@@ -36,6 +44,7 @@ export declare const ExecutionContextCommandController: GenService<{
     };
     /**
      * Delete an ExecutionContext (called when execution completes).
+     * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
      */

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js

@@ -9,10 +9,17 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
 /**
  * Describes the file ai/stigmer/agentic/executioncontext/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_executioncontext_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_executioncontext_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_executioncontext_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_executioncontext_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * ExecutionContextCommandController provides write operations for ExecutionContext resources.
- * Note: ExecutionContext is typically created/deleted by the system, not directly by users.
+ *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
+ *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
+ *
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,45BAA45B,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE/nC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAiCzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,4sBAA4sB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE/6B;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAmCzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}