@stigmer/protos 0.0.39 → 0.0.40

package/ai/stigmer/agentic/agent/v1/command_connect.d.ts

@@ -45,6 +45,24 @@ export declare const AgentCommandController: {
             readonly O: any;
             readonly kind: any;
         };
+        /**
+         * Update the visibility of an existing agent.
+         *
+         * This is a targeted metadata update — it only modifies metadata.visibility,
+         * leaving spec, status, and other metadata fields untouched. Use this to
+         * make an agent publicly accessible or to revoke public access without
+         * sending the entire agent resource (avoiding read-modify-write races).
+         *
+         * Authorization: Requires can_edit permission on the agent resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.updateVisibility
+         */
+        readonly updateVisibility: {
+            readonly name: "updateVisibility";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
         /**
          * Delete an agent.
          *

package/ai/stigmer/agentic/agent/v1/command_connect.js

@@ -50,6 +50,24 @@ export const AgentCommandController = {
             O: Agent,
             kind: MethodKind.Unary,
         },
+        /**
+         * Update the visibility of an existing agent.
+         *
+         * This is a targeted metadata update — it only modifies metadata.visibility,
+         * leaving spec, status, and other metadata fields untouched. Use this to
+         * make an agent publicly accessible or to revoke public access without
+         * sending the entire agent resource (avoiding read-modify-write races).
+         *
+         * Authorization: Requires can_edit permission on the agent resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.updateVisibility
+         */
+        updateVisibility: {
+            name: "updateVisibility",
+            I: UpdateVisibilityInput,
+            O: Agent,
+            kind: MethodKind.Unary,
+        },
         /**
          * Delete an agent.
          *

package/ai/stigmer/agentic/agent/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agent/v1/command_pb.d.ts

@@ -1,6 +1,7 @@
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
 import type { AgentSchema } from "./api_pb";
 import type { AgentIdSchema } from "./io_pb";
+import type { UpdateVisibilityInputSchema } from "../../../commons/apiresource/io_pb";
 /**
  * Describes the file ai/stigmer/agentic/agent/v1/command.proto.
  */
@@ -47,6 +48,23 @@ export declare const AgentCommandController: GenService<{
         input: typeof AgentSchema;
         output: typeof AgentSchema;
     };
+    /**
+     * Update the visibility of an existing agent.
+     *
+     * This is a targeted metadata update — it only modifies metadata.visibility,
+     * leaving spec, status, and other metadata fields untouched. Use this to
+     * make an agent publicly accessible or to revoke public access without
+     * sending the entire agent resource (avoiding read-modify-write races).
+     *
+     * Authorization: Requires can_edit permission on the agent resource.
+     *
+     * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.updateVisibility
+     */
+    updateVisibility: {
+        methodKind: "unary";
+        input: typeof UpdateVisibilityInputSchema;
+        output: typeof AgentSchema;
+    };
     /**
      * Delete an agent.
      *

package/ai/stigmer/agentic/agent/v1/command_pb.js

@@ -4,12 +4,13 @@
 import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
 import { file_ai_stigmer_agentic_agent_v1_api } from "./api_pb";
 import { file_ai_stigmer_agentic_agent_v1_io } from "./io_pb";
+import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb";
 import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb";
 import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from "../../../iam/iampolicy/v1/rpcauthorization/method_options_pb";
 /**
  * Describes the file ai/stigmer/agentic/agent/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_agent_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agent_v1_api, file_ai_stigmer_agentic_agent_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_agent_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agent_v1_api, file_ai_stigmer_agentic_agent_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * AgentCommandController handles write operations for AI agents.
  *

package/ai/stigmer/agentic/agent/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,UAAU,CAAC;AAEhE,OAAO,EAAE,mCAAmC,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,6zBAA6zB,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAElhC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GA+C9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,UAAU,CAAC;AAEhE,OAAO,EAAE,mCAAmC,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,wiCAAwiC,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEryC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAgE9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agent/v1/query_pb.js

@@ -10,7 +10,7 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
 /**
  * Describes the file ai/stigmer/agentic/agent/v1/query.proto.
  */
-export const file_ai_stigmer_agentic_agent_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agent_v1_api, file_ai_stigmer_agentic_agent_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_agent_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agent_v1_api, file_ai_stigmer_agentic_agent_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * AgentQueryController handles read operations for AI agents.
  *

package/ai/stigmer/agentic/agent/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oHAAoH;AACpH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,UAAU,CAAC;AAEhE,OAAO,EAAE,mCAAmC,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,olBAAolB,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEj1B;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAyC5B,aAAa,CAChB,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oHAAoH;AACpH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,UAAU,CAAC;AAEhE,OAAO,EAAE,mCAAmC,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,omBAAomB,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEj2B;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAyC5B,aAAa,CAChB,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/command_pb.js

@@ -10,7 +10,7 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_api, file_ai_stigmer_agentic_agentexecution_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_agentexecution_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_api, file_ai_stigmer_agentic_agentexecution_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * AgentExecutionCommandController handles write operations for agent executions.
  * Follows the standard pattern: create, update, delete (no granular field updates).

package/ai/stigmer/agentic/agentexecution/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,6CAA6C,EAAE,MAAM,UAAU,CAAC;AAEzE,OAAO,EAAE,4CAA4C,EAAE,MAAM,SAAS,CAAC;AAEvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,gxFAAgxF,EAAE,CAAC,6CAA6C,EAAE,4CAA4C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE/hG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAwYvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,6CAA6C,EAAE,MAAM,UAAU,CAAC;AAEzE,OAAO,EAAE,4CAA4C,EAAE,MAAM,SAAS,CAAC;AAEvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,8wFAA8wF,EAAE,CAAC,6CAA6C,EAAE,4CAA4C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE7hG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAwYvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_connect.d.ts

@@ -31,8 +31,6 @@ export declare const AgentInstanceCommandController: {
          *
          * This pattern eliminates redundant checks by providing organization context to FGA
          *
-         * Authorization handled in handler using FGA contextual tuples
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */
         readonly create: {
@@ -45,7 +43,7 @@ export declare const AgentInstanceCommandController: {
          * Update an instance with full state.
          * Used to update entire instance configuration including metadata, spec, and secrets.
          * No individual field updates - always provide complete state.
-         * Authorization: Owner or org admin can update (can_edit permission)
+         * Authorization: Only owner can update (can_edit permission)
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.update
          */

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js

@@ -36,8 +36,6 @@ export const AgentInstanceCommandController = {
          *
          * This pattern eliminates redundant checks by providing organization context to FGA
          *
-         * Authorization handled in handler using FGA contextual tuples
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */
         create: {
@@ -50,7 +48,7 @@ export const AgentInstanceCommandController = {
          * Update an instance with full state.
          * Used to update entire instance configuration including metadata, spec, and secrets.
          * No individual field updates - always provide complete state.
-         * Authorization: Owner or org admin can update (can_edit permission)
+         * Authorization: Only owner can update (can_edit permission)
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.update
          */

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_pb.d.ts

@@ -35,8 +35,6 @@ export declare const AgentInstanceCommandController: GenService<{
      *
      * This pattern eliminates redundant checks by providing organization context to FGA
      *
-     * Authorization handled in handler using FGA contextual tuples
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
      */
     create: {
@@ -48,7 +46,7 @@ export declare const AgentInstanceCommandController: GenService<{
      * Update an instance with full state.
      * Used to update entire instance configuration including metadata, spec, and secrets.
      * No individual field updates - always provide complete state.
-     * Authorization: Owner or org admin can update (can_edit permission)
+     * Authorization: Only owner can update (can_edit permission)
      *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.update
      */

package/ai/stigmer/agentic/agentinstance/v1/command_pb.js

@@ -9,7 +9,7 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
 /**
  * Describes the file ai/stigmer/agentic/agentinstance/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_agentinstance_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentinstance_v1_api, file_ai_stigmer_agentic_agentinstance_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_agentinstance_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentinstance_v1_api, file_ai_stigmer_agentic_agentinstance_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * AgentInstanceCommandController handles write operations for agent instances.
  * Follows the standard pattern: create, update, delete (no granular field updates).

package/ai/stigmer/agentic/agentinstance/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,UAAU,CAAC;AAExE,OAAO,EAAE,2CAA2C,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,67BAA67B,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAElqC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAyDtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,UAAU,CAAC;AAExE,OAAO,EAAE,2CAA2C,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,k8BAAk8B,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEvqC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAuDtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/query_pb.js

@@ -10,7 +10,7 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
 /**
  * Describes the file ai/stigmer/agentic/agentinstance/v1/query.proto.
  */
-export const file_ai_stigmer_agentic_agentinstance_v1_query = /*@__PURE__*/ fileDesc("Ci9haS9zdGlnbWVyL2FnZW50aWMvYWdlbnRpbnN0YW5jZS92MS9xdWVyeS5wcm90bxIjYWkuc3RpZ21lci5hZ2VudGljLmFnZW50aW5zdGFuY2UudjEy4QQKHEFnZW50SW5zdGFuY2VRdWVyeUNvbnRyb2xsZXISpAEKA2dldBI0LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGluc3RhbmNlLnYxLkFnZW50SW5zdGFuY2VJZBoyLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGluc3RhbmNlLnYxLkFnZW50SW5zdGFuY2UiM8K4GC8IAxAtIgV2YWx1ZSoidW5hdXRob3JpemVkIHRvIGdldCBBZ2VudCBJbnN0YW5jZRKQAQoKZ2V0QnlBZ2VudBJELmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGluc3RhbmNlLnYxLkdldEFnZW50SW5zdGFuY2VzQnlBZ2VudFJlcXVlc3QaNi5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRpbnN0YW5jZS52MS5BZ2VudEluc3RhbmNlTGlzdCIE0LgYARJ6Cg5nZXRCeVJlZmVyZW5jZRI0LmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZVJlZmVyZW5jZRoyLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGluc3RhbmNlLnYxLkFnZW50SW5zdGFuY2UShAEKBGxpc3QSPi5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRpbnN0YW5jZS52MS5MaXN0QWdlbnRJbnN0YW5jZXNSZXF1ZXN0GjYuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50aW5zdGFuY2UudjEuQWdlbnRJbnN0YW5jZUxpc3QiBNC4GAEaBKD/Ky1iBnByb3RvMw", [file_ai_stigmer_agentic_agentinstance_v1_api, file_ai_stigmer_agentic_agentinstance_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_agentinstance_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentinstance_v1_api, file_ai_stigmer_agentic_agentinstance_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * AgentInstanceQueryController provides queries for retrieving agent instances.
  *

package/ai/stigmer/agentic/agentinstance/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,UAAU,CAAC;AAExE,OAAO,EAAE,2CAA2C,EAAE,MAAM,SAAS,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,g7BAAg7B,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE7rC;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GA8CpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,UAAU,CAAC;AAExE,OAAO,EAAE,2CAA2C,EAAE,MAAM,SAAS,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,y7BAAy7B,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEtsC;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GA8CpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/command_pb.js

@@ -10,7 +10,7 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
 /**
  * Describes the file ai/stigmer/agentic/environment/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_environment_v1_command = /*@__PURE__*/ fileDesc("Ci9haS9zdGlnbWVyL2FnZW50aWMvZW52aXJvbm1lbnQvdjEvY29tbWFuZC5wcm90bxIhYWkuc3RpZ21lci5hZ2VudGljLmVudmlyb25tZW50LnYxMu8HChxFbnZpcm9ubWVudENvbW1hbmRDb250cm9sbGVyEmcKBWFwcGx5Ei4uYWkuc3RpZ21lci5hZ2VudGljLmVudmlyb25tZW50LnYxLkVudmlyb25tZW50Gi4uYWkuc3RpZ21lci5hZ2VudGljLmVudmlyb25tZW50LnYxLkVudmlyb25tZW50EmgKBmNyZWF0ZRIuLmFpLnN0aWdtZXIuYWdlbnRpYy5lbnZpcm9ubWVudC52MS5FbnZpcm9ubWVudBouLmFpLnN0aWdtZXIuYWdlbnRpYy5lbnZpcm9ubWVudC52MS5FbnZpcm9ubWVudBKjAQoGdXBkYXRlEi4uYWkuc3RpZ21lci5hZ2VudGljLmVudmlyb25tZW50LnYxLkVudmlyb25tZW50Gi4uYWkuc3RpZ21lci5hZ2VudGljLmVudmlyb25tZW50LnYxLkVudmlyb25tZW50IjnCuBg1CAQQNSILbWV0YWRhdGEuaWQqInVuYXV0aG9yaXplZCB0byB1cGRhdGUgZW52aXJvbm1lbnQSqwEKBmRlbGV0ZRI2LmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZURlbGV0ZUlucHV0Gi4uYWkuc3RpZ21lci5hZ2VudGljLmVudmlyb25tZW50LnYxLkVudmlyb25tZW50IjnCuBg1CAQQNSILbWV0YWRhdGEuaWQqInVuYXV0aG9yaXplZCB0byBkZWxldGUgZW52aXJvbm1lbnQSzwEKD3VwZGF0ZVZhcmlhYmxlcxJELmFpLnN0aWdtZXIuYWdlbnRpYy5lbnZpcm9ubWVudC52MS5VcGRhdGVFbnZpcm9ubWVudFZhcmlhYmxlc1JlcXVlc3QaLi5haS5zdGlnbWVyLmFnZW50aWMuZW52aXJvbm1lbnQudjEuRW52aXJvbm1lbnQiRsK4GEIIBBA1Ig5lbnZpcm9ubWVudF9pZCosdW5hdXRob3JpemVkIHRvIHVwZGF0ZSBlbnZpcm9ubWVudCB2YXJpYWJsZXMSzwEKD3JlbW92ZVZhcmlhYmxlcxJELmFpLnN0aWdtZXIuYWdlbnRpYy5lbnZpcm9ubWVudC52MS5SZW1vdmVFbnZpcm9ubWVudFZhcmlhYmxlc1JlcXVlc3QaLi5haS5zdGlnbWVyLmFnZW50aWMuZW52aXJvbm1lbnQudjEuRW52aXJvbm1lbnQiRsK4GEIIBBA1Ig5lbnZpcm9ubWVudF9pZCosdW5hdXRob3JpemVkIHRvIHJlbW92ZSBlbnZpcm9ubWVudCB2YXJpYWJsZXMaBKD/KzViBnByb3RvMw", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_agentic_environment_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_environment_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_agentic_environment_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * EnvironmentCommandController provides write operations for Environment resources.
  *

package/ai/stigmer/agentic/environment/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,yCAAyC,EAAE,MAAM,SAAS,CAAC;AAEpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,g8CAAg8C,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEzsD;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAiEpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,yCAAyC,EAAE,MAAM,SAAS,CAAC;AAEpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,6iDAA6iD,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEtzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAiEpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/query_pb.js

@@ -11,7 +11,7 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
 /**
  * Describes the file ai/stigmer/agentic/environment/v1/query.proto.
  */
-export const file_ai_stigmer_agentic_environment_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_agentic_environment_v1_io, file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_environment_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_agentic_environment_v1_io, file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * EnvironmentQueryController provides read operations for Environment resources.
  *

package/ai/stigmer/agentic/environment/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,yCAAyC,EAAE,MAAM,SAAS,CAAC;AAEpE,OAAO,EAAE,2CAA2C,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,49BAA49B,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAElxC;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GA6ClC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,yCAAyC,EAAE,MAAM,SAAS,CAAC;AAEpE,OAAO,EAAE,2CAA2C,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,o+BAAo+B,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE1xC;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GA6ClC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/api_pb.d.ts

@@ -29,7 +29,7 @@ export type ExecutionContext = Message<"ai.stigmer.agentic.executioncontext.v1.E
     kind: string;
     /**
      * Standard resource metadata including name, id, labels, and tags.
-     * ExecutionContext is operator-managed and belongs to an organization.
+     * ExecutionContext is ephemeral and authorization is derived from the parent execution.
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceMetadata metadata = 3;
      */

package/ai/stigmer/agentic/executioncontext/v1/command_connect.d.ts

@@ -1,6 +1,13 @@
 /**
  * ExecutionContextCommandController provides write operations for ExecutionContext resources.
- * Note: ExecutionContext is typically created/deleted by the system, not directly by users.
+ *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
+ *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
+ *
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -21,7 +28,8 @@ export declare const ExecutionContextCommandController: {
             readonly kind: any;
         };
         /**
-         * Create a new ExecutionContext (typically called by execution engine).
+         * Create a new ExecutionContext (called by execution pipeline on behalf of the user).
+         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
          */
@@ -33,6 +41,7 @@ export declare const ExecutionContextCommandController: {
         };
         /**
          * Delete an ExecutionContext (called when execution completes).
+         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
          */

package/ai/stigmer/agentic/executioncontext/v1/command_connect.js

@@ -5,7 +5,14 @@
 import { MethodKind } from "@bufbuild/protobuf";
 /**
  * ExecutionContextCommandController provides write operations for ExecutionContext resources.
- * Note: ExecutionContext is typically created/deleted by the system, not directly by users.
+ *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
+ *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
+ *
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -26,7 +33,8 @@ export const ExecutionContextCommandController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Create a new ExecutionContext (typically called by execution engine).
+         * Create a new ExecutionContext (called by execution pipeline on behalf of the user).
+         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
          */
@@ -38,6 +46,7 @@ export const ExecutionContextCommandController = {
         },
         /**
          * Delete an ExecutionContext (called when execution completes).
+         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
          */

package/ai/stigmer/agentic/executioncontext/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/command_pb.d.ts

@@ -7,7 +7,14 @@ import type { ApiResourceDeleteInputSchema } from "../../../commons/apiresource/
 export declare const file_ai_stigmer_agentic_executioncontext_v1_command: GenFile;
 /**
  * ExecutionContextCommandController provides write operations for ExecutionContext resources.
- * Note: ExecutionContext is typically created/deleted by the system, not directly by users.
+ *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
+ *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
+ *
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -25,7 +32,8 @@ export declare const ExecutionContextCommandController: GenService<{
         output: typeof ExecutionContextSchema;
     };
     /**
-     * Create a new ExecutionContext (typically called by execution engine).
+     * Create a new ExecutionContext (called by execution pipeline on behalf of the user).
+     * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
      */
@@ -36,6 +44,7 @@ export declare const ExecutionContextCommandController: GenService<{
     };
     /**
      * Delete an ExecutionContext (called when execution completes).
+     * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
      */

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js

@@ -9,10 +9,17 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
 /**
  * Describes the file ai/stigmer/agentic/executioncontext/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_executioncontext_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_executioncontext_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
+export const file_ai_stigmer_agentic_executioncontext_v1_command = /*@__PURE__*/ fileDesc("CjRhaS9zdGlnbWVyL2FnZW50aWMvZXhlY3V0aW9uY29udGV4dC92MS9jb21tYW5kLnByb3RvEiZhaS5zdGlnbWVyLmFnZW50aWMuZXhlY3V0aW9uY29udGV4dC52MTKuAwohRXhlY3V0aW9uQ29udGV4dENvbW1hbmRDb250cm9sbGVyEnsKBWFwcGx5EjguYWkuc3RpZ21lci5hZ2VudGljLmV4ZWN1dGlvbmNvbnRleHQudjEuRXhlY3V0aW9uQ29udGV4dBo4LmFpLnN0aWdtZXIuYWdlbnRpYy5leGVjdXRpb25jb250ZXh0LnYxLkV4ZWN1dGlvbkNvbnRleHQSggEKBmNyZWF0ZRI4LmFpLnN0aWdtZXIuYWdlbnRpYy5leGVjdXRpb25jb250ZXh0LnYxLkV4ZWN1dGlvbkNvbnRleHQaOC5haS5zdGlnbWVyLmFnZW50aWMuZXhlY3V0aW9uY29udGV4dC52MS5FeGVjdXRpb25Db250ZXh0IgTQuBgBEoABCgZkZWxldGUSNi5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VEZWxldGVJbnB1dBo4LmFpLnN0aWdtZXIuYWdlbnRpYy5leGVjdXRpb25jb250ZXh0LnYxLkV4ZWN1dGlvbkNvbnRleHQiBNC4GAEaBKD/KzZiBnByb3RvMw", [file_ai_stigmer_agentic_executioncontext_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * ExecutionContextCommandController provides write operations for ExecutionContext resources.
- * Note: ExecutionContext is typically created/deleted by the system, not directly by users.
+ *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
+ *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
+ *
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,45BAA45B,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE/nC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAiCzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,4sBAA4sB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE/6B;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAmCzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/query_connect.d.ts

@@ -1,6 +1,15 @@
 /**
  * ExecutionContextQueryController provides read operations for ExecutionContext resources.
  *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - All read operations check can_view on parent agent_execution or workflow_execution
+ *
+ * The handler loads the ExecutionContext, extracts the execution_id from spec,
+ * and verifies the caller has permission on whichever parent type matches.
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController
  */
 export declare const ExecutionContextQueryController: {
@@ -8,7 +17,7 @@ export declare const ExecutionContextQueryController: {
     readonly methods: {
         /**
          * Get an ExecutionContext by ID.
-         * Note: Only the execution engine should typically need to read these.
+         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.get
          */
@@ -19,7 +28,8 @@ export declare const ExecutionContextQueryController: {
             readonly kind: any;
         };
         /**
-         * Get an ExecutionContext by reference (operator-only).
+         * Get an ExecutionContext by reference (slug-based lookup).
+         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByReference
          */
@@ -35,12 +45,7 @@ export declare const ExecutionContextQueryController: {
          * environment variables during workflow/agent execution. The returned context
          * contains decrypted secrets for runner consumption.
          *
-         * Use cases:
-         * - Go workflow-runner queries for merged env vars before executing workflow
-         * - Python agent-runner queries for merged env vars before executing agent
-         *
-         * Security: Operator-only access ensures only internal services (runners) can
-         * retrieve decrypted secrets. Public APIs use get/getByReference which redact secrets.
+         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
          */

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js

@@ -6,6 +6,15 @@ import { MethodKind } from "@bufbuild/protobuf";
 /**
  * ExecutionContextQueryController provides read operations for ExecutionContext resources.
  *
+ * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
+ * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
+ * FGA model. Authorization is derived from the parent execution:
+ *   - All read operations check can_view on parent agent_execution or workflow_execution
+ *
+ * The handler loads the ExecutionContext, extracts the execution_id from spec,
+ * and verifies the caller has permission on whichever parent type matches.
+ * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController
  */
 export const ExecutionContextQueryController = {
@@ -13,7 +22,7 @@ export const ExecutionContextQueryController = {
     methods: {
         /**
          * Get an ExecutionContext by ID.
-         * Note: Only the execution engine should typically need to read these.
+         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.get
          */
@@ -24,7 +33,8 @@ export const ExecutionContextQueryController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Get an ExecutionContext by reference (operator-only).
+         * Get an ExecutionContext by reference (slug-based lookup).
+         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByReference
          */
@@ -40,12 +50,7 @@ export const ExecutionContextQueryController = {
          * environment variables during workflow/agent execution. The returned context
          * contains decrypted secrets for runner consumption.
          *
-         * Use cases:
-         * - Go workflow-runner queries for merged env vars before executing workflow
-         * - Python agent-runner queries for merged env vars before executing agent
-         *
-         * Security: Operator-only access ensures only internal services (runners) can
-         * retrieve decrypted secrets. Public APIs use get/getByReference which redact secrets.
+         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
          */

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;WAKG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;WAKG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}