@stigmer/protos 0.0.52 → 0.0.54

package/ai/stigmer/agentic/agentexecution/v1/api_pb.d.ts

@@ -7,6 +7,7 @@ import type { AgentMessage } from "./message_pb";
 import type { AgentExecutionSpec } from "./spec_pb";
 import type { SubAgentExecution } from "./subagent_pb";
 import type { UsageMetrics } from "./usage_pb";
+import type { WorkspaceWriteBack } from "./writeback_pb";
 import type { ApiResourceMetadata } from "../../../commons/apiresource/metadata_pb";
 import type { ApiResourceAudit } from "../../../commons/apiresource/status_pb";
 import type { Message } from "@bufbuild/protobuf";
@@ -244,6 +245,23 @@ export type AgentExecutionStatus = Message<"ai.stigmer.agentic.agentexecution.v1
      * @generated from field: repeated ai.stigmer.agentic.agentexecution.v1.ExecutionArtifact artifacts = 15;
      */
     artifacts: ExecutionArtifact[];
+    /**
+     * Git write-back outcomes for workspace entries that had changes.
+     *
+     * One entry per git-backed workspace entry where the agent modified
+     * files and write_back_mode was enabled on the GitRepoSource. Omitted
+     * for workspace entries with no changes, non-git sources, or disabled
+     * write-back mode.
+     *
+     * Populated during post-execution processing. Each entry tracks the
+     * write-back lifecycle (committed -> pushed -> PR created) and carries
+     * the PR URL for UI display.
+     *
+     * @since Platform-Owned Git Write-Back
+     *
+     * @generated from field: repeated ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBack workspace_write_backs = 17;
+     */
+    workspaceWriteBacks: WorkspaceWriteBack[];
 };
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.AgentExecutionStatus.

package/ai/stigmer/agentic/agentexecution/v1/api_pb.js

@@ -10,13 +10,14 @@ import { file_ai_stigmer_agentic_agentexecution_v1_message } from "./message_pb"
 import { file_ai_stigmer_agentic_agentexecution_v1_spec } from "./spec_pb";
 import { file_ai_stigmer_agentic_agentexecution_v1_subagent } from "./subagent_pb";
 import { file_ai_stigmer_agentic_agentexecution_v1_usage } from "./usage_pb";
+import { file_ai_stigmer_agentic_agentexecution_v1_writeback } from "./writeback_pb";
 import { file_ai_stigmer_commons_apiresource_metadata } from "../../../commons/apiresource/metadata_pb";
 import { file_ai_stigmer_commons_apiresource_status } from "../../../commons/apiresource/status_pb";
 import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb";
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/api.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_api = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_approval, file_ai_stigmer_agentic_agentexecution_v1_artifact, file_ai_stigmer_agentic_agentexecution_v1_context, file_ai_stigmer_agentic_agentexecution_v1_enum, file_ai_stigmer_agentic_agentexecution_v1_message, file_ai_stigmer_agentic_agentexecution_v1_spec, file_ai_stigmer_agentic_agentexecution_v1_subagent, file_ai_stigmer_agentic_agentexecution_v1_usage, file_ai_stigmer_commons_apiresource_metadata, file_ai_stigmer_commons_apiresource_status, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agentexecution_v1_api = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_approval, file_ai_stigmer_agentic_agentexecution_v1_artifact, file_ai_stigmer_agentic_agentexecution_v1_context, file_ai_stigmer_agentic_agentexecution_v1_enum, file_ai_stigmer_agentic_agentexecution_v1_message, file_ai_stigmer_agentic_agentexecution_v1_spec, file_ai_stigmer_agentic_agentexecution_v1_subagent, file_ai_stigmer_agentic_agentexecution_v1_usage, file_ai_stigmer_agentic_agentexecution_v1_writeback, file_ai_stigmer_commons_apiresource_metadata, file_ai_stigmer_commons_apiresource_status, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.AgentExecution.
  * Use `create(AgentExecutionSchema)` to create a new message.

package/ai/stigmer/agentic/agentexecution/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/api_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,EAAE,kDAAkD,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,EAAE,iDAAiD,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,8CAA8C,EAAE,MAAM,WAAW,CAAC;AAE3E,OAAO,EAAE,iDAAiD,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,8CAA8C,EAAE,MAAM,WAAW,CAAC;AAE3E,OAAO,EAAE,kDAAkD,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,EAAE,+CAA+C,EAAE,MAAM,YAAY,CAAC;AAE7E,OAAO,EAAE,4CAA4C,EAAE,MAAM,0CAA0C,CAAC;AAExG,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,shEAAshE,EAAE,CAAC,kDAAkD,EAAE,kDAAkD,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,kDAAkD,EAAE,+CAA+C,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgD9iF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AAuMhE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AA6ChE;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/api_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,EAAE,kDAAkD,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,EAAE,iDAAiD,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,8CAA8C,EAAE,MAAM,WAAW,CAAC;AAE3E,OAAO,EAAE,iDAAiD,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,8CAA8C,EAAE,MAAM,WAAW,CAAC;AAE3E,OAAO,EAAE,kDAAkD,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,EAAE,+CAA+C,EAAE,MAAM,YAAY,CAAC;AAE7E,OAAO,EAAE,mDAAmD,EAAE,MAAM,gBAAgB,CAAC;AAErF,OAAO,EAAE,4CAA4C,EAAE,MAAM,0CAA0C,CAAC;AAExG,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,6oEAA6oE,EAAE,CAAC,kDAAkD,EAAE,kDAAkD,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,kDAAkD,EAAE,+CAA+C,EAAE,mDAAmD,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgD1tF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AAyNhE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AA6ChE;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/approval_pb.d.ts

@@ -97,6 +97,20 @@ export type PendingApproval = Message<"ai.stigmer.agentic.agentexecution.v1.Pend
      * @generated from field: string sub_agent_name = 7;
      */
     subAgentName: string;
+    /**
+     * Slug of the MCP server that provides this tool.
+     * Copied from ToolCall.mcp_server_slug for UI convenience.
+     * Empty for built-in sandbox tools (read, write, shell, etc.).
+     *
+     * Enables the approval card to classify MCP tools and render
+     * structured argument previews (scalar grids, humanized names)
+     * instead of falling back to raw JSON.
+     *
+     * Examples: "planton-cloud", "github", "slack"
+     *
+     * @generated from field: string mcp_server_slug = 8;
+     */
+    mcpServerSlug: string;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.PendingApproval.

package/ai/stigmer/agentic/agentexecution/v1/approval_pb.js

@@ -5,7 +5,7 @@ import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/approval.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_approval = /*@__PURE__*/ fileDesc("CjNhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRleGVjdXRpb24vdjEvYXBwcm92YWwucHJvdG8SJGFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MSKtAQoPUGVuZGluZ0FwcHJvdmFsEhQKDHRvb2xfY2FsbF9pZBgBIAEoCRIRCgl0b29sX25hbWUYAiABKAkSDwoHbWVzc2FnZRgDIAEoCRIUCgxhcmdzX3ByZXZpZXcYBCABKAkSFAoMcmVxdWVzdGVkX2F0GAUgASgJEhYKDmZyb21fc3ViX2FnZW50GAYgASgIEhYKDnN1Yl9hZ2VudF9uYW1lGAcgASgJSgQICBAJIoMBChlDaGlsZEFwcHJvdmFsTm90aWZpY2F0aW9uEhQKDGV4ZWN1dGlvbl9pZBgBIAEoCRJQChFwZW5kaW5nX2FwcHJvdmFscxgCIAMoCzI1LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5QZW5kaW5nQXBwcm92YWxiBnByb3RvMw");
+export const file_ai_stigmer_agentic_agentexecution_v1_approval = /*@__PURE__*/ fileDesc("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");
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.PendingApproval.
  * Use `create(PendingApprovalSchema)` to create a new message.

package/ai/stigmer/agentic/agentexecution/v1/approval_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/approval_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,oiBAAoiB,CAAC,CAAC;AAuGjjB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AA+DrE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"approval_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/approval_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,6jBAA6jB,CAAC,CAAC;AAsH1kB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AA+DrE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/artifact_pb.d.ts

@@ -100,6 +100,21 @@ export type ExecutionArtifact = Message<"ai.stigmer.agentic.agentexecution.v1.Ex
      * @generated from field: repeated string entries = 9;
      */
     entries: string[];
+    /**
+     * SHA-256 hex digest of the uploaded artifact bytes.
+     *
+     * Used as a cache-invalidation signal by UI clients: when the same file
+     * is overwritten (e.g., written then edited in the same execution), the
+     * storage_key remains stable but the content_hash changes. Clients
+     * include this value in their fetch-effect dependencies so that content
+     * is re-fetched whenever the underlying bytes change.
+     *
+     * Empty for older artifacts created before this field was added.
+     * Example: "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+     *
+     * @generated from field: string content_hash = 10;
+     */
+    contentHash: string;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.ExecutionArtifact.

package/ai/stigmer/agentic/agentexecution/v1/artifact_pb.js

@@ -7,7 +7,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/artifact.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_artifact = /*@__PURE__*/ fileDesc("CjNhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRleGVjdXRpb24vdjEvYXJ0aWZhY3QucHJvdG8SJGFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MSKEAgoRRXhlY3V0aW9uQXJ0aWZhY3QSDAoEbmFtZRgBIAEoCRIUCgxzYW5kYm94X3BhdGgYAiABKAkSUwoEa2luZBgDIAEoDjI7LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5FeGVjdXRpb25BcnRpZmFjdEtpbmRCCLpIBYIBAhABEhIKCnNpemVfYnl0ZXMYBCABKAMSEwoLc3RvcmFnZV9rZXkYBSABKAkSFAoMZG93bmxvYWRfdXJsGAYgASgJEhIKCmNyZWF0ZWRfYXQYByABKAkSEgoKZXhwaXJlc19hdBgIIAEoCRIPCgdlbnRyaWVzGAkgAygJYgZwcm90bzM", [file_ai_stigmer_agentic_agentexecution_v1_enum, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agentexecution_v1_artifact = /*@__PURE__*/ fileDesc("CjNhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRleGVjdXRpb24vdjEvYXJ0aWZhY3QucHJvdG8SJGFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MSKaAgoRRXhlY3V0aW9uQXJ0aWZhY3QSDAoEbmFtZRgBIAEoCRIUCgxzYW5kYm94X3BhdGgYAiABKAkSUwoEa2luZBgDIAEoDjI7LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5FeGVjdXRpb25BcnRpZmFjdEtpbmRCCLpIBYIBAhABEhIKCnNpemVfYnl0ZXMYBCABKAMSEwoLc3RvcmFnZV9rZXkYBSABKAkSFAoMZG93bmxvYWRfdXJsGAYgASgJEhIKCmNyZWF0ZWRfYXQYByABKAkSEgoKZXhwaXJlc19hdBgIIAEoCRIPCgdlbnRyaWVzGAkgAygJEhQKDGNvbnRlbnRfaGFzaBgKIAEoCWIGcHJvdG8z", [file_ai_stigmer_agentic_agentexecution_v1_enum, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.ExecutionArtifact.
  * Use `create(ExecutionArtifactSchema)` to create a new message.

package/ai/stigmer/agentic/agentexecution/v1/artifact_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/artifact_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,qeAAqe,EAAE,CAAC,8CAA8C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA2GhkB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"artifact_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/artifact_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,kgBAAkgB,EAAE,CAAC,8CAA8C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA2H7lB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/writeback_pb.d.ts

@@ -0,0 +1,139 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/agentexecution/v1/writeback.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentexecution_v1_writeback: GenFile;
+/**
+ * WorkspaceWriteBack captures the outcome of the platform-owned git
+ * write-back workflow for a single workspace entry.
+ *
+ * One entry is created per git-backed workspace entry that had uncommitted
+ * changes when the execution reached a terminal phase. Not populated for
+ * LocalPathSource workspace entries or git workspaces with no detected
+ * changes.
+ *
+ * The write-back progresses through phases: committed -> pushed ->
+ * pr_created. If any step fails, the phase is set to FAILED with the
+ * error message, and processing continues to the next workspace entry.
+ * One failed write-back does not block others.
+ *
+ * @since Platform-Owned Git Write-Back
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBack
+ */
+export type WorkspaceWriteBack = Message<"ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBack"> & {
+    /**
+     * Name of the workspace entry this write-back corresponds to.
+     * Links to SessionSpec.workspace_entries[].name.
+     * Example: "my-app", "frontend"
+     *
+     * @generated from field: string workspace_entry_name = 1;
+     */
+    workspaceEntryName: string;
+    /**
+     * Branch created for the agent's changes.
+     * Format: "stigmer/{short_execution_id}"
+     * Example: "stigmer/a1b2c3d4"
+     *
+     * @generated from field: string branch_name = 2;
+     */
+    branchName: string;
+    /**
+     * Base branch the PR targets (the branch that was originally cloned).
+     * Example: "main", "develop"
+     *
+     * @generated from field: string base_branch = 3;
+     */
+    baseBranch: string;
+    /**
+     * Full commit SHA of the agent's changes on the branch.
+     * Example: "e3b0c44298fc1c149afbf4c8996fb924"
+     *
+     * @generated from field: string commit_sha = 4;
+     */
+    commitSha: string;
+    /**
+     * GitHub pull request URL.
+     * Empty when write-back mode is not PR-based or PR creation failed.
+     * Example: "https://github.com/acme/my-app/pull/42"
+     *
+     * @generated from field: string pull_request_url = 5;
+     */
+    pullRequestUrl: string;
+    /**
+     * GitHub pull request number.
+     * 0 when no PR was created.
+     *
+     * @generated from field: int32 pull_request_number = 6;
+     */
+    pullRequestNumber: number;
+    /**
+     * Human-readable summary of changes from `git diff --stat`.
+     * Example: "3 files changed, 42 insertions(+), 7 deletions(-)"
+     *
+     * @generated from field: string diff_summary = 7;
+     */
+    diffSummary: string;
+    /**
+     * Current phase of the write-back workflow.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBackPhase phase = 8;
+     */
+    phase: WorkspaceWriteBackPhase;
+    /**
+     * Error message if the write-back failed at any step.
+     * Empty on success.
+     *
+     * @generated from field: string error = 9;
+     */
+    error: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBack.
+ * Use `create(WorkspaceWriteBackSchema)` to create a new message.
+ */
+export declare const WorkspaceWriteBackSchema: GenMessage<WorkspaceWriteBack>;
+/**
+ * WorkspaceWriteBackPhase tracks the progress of a single workspace
+ * write-back through its lifecycle steps.
+ *
+ * The phases are ordered: COMMITTED -> PUSHED -> PR_CREATED.
+ * FAILED can be reached from any step.
+ *
+ * @generated from enum ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBackPhase
+ */
+export declare enum WorkspaceWriteBackPhase {
+    /**
+     * @generated from enum value: WORKSPACE_WRITE_BACK_PHASE_UNSPECIFIED = 0;
+     */
+    WORKSPACE_WRITE_BACK_PHASE_UNSPECIFIED = 0,
+    /**
+     * Changes were committed to a new branch in the sandbox.
+     *
+     * @generated from enum value: WORKSPACE_WRITE_BACK_COMMITTED = 1;
+     */
+    WORKSPACE_WRITE_BACK_COMMITTED = 1,
+    /**
+     * The branch was pushed to the remote repository.
+     *
+     * @generated from enum value: WORKSPACE_WRITE_BACK_PUSHED = 2;
+     */
+    WORKSPACE_WRITE_BACK_PUSHED = 2,
+    /**
+     * A pull request was created on the remote repository.
+     *
+     * @generated from enum value: WORKSPACE_WRITE_BACK_PR_CREATED = 3;
+     */
+    WORKSPACE_WRITE_BACK_PR_CREATED = 3,
+    /**
+     * The write-back failed at some step. Check the error field.
+     *
+     * @generated from enum value: WORKSPACE_WRITE_BACK_FAILED = 4;
+     */
+    WORKSPACE_WRITE_BACK_FAILED = 4
+}
+/**
+ * Describes the enum ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBackPhase.
+ */
+export declare const WorkspaceWriteBackPhaseSchema: GenEnum<WorkspaceWriteBackPhase>;

package/ai/stigmer/agentic/agentexecution/v1/writeback_pb.js

@@ -0,0 +1,58 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/agentexecution/v1/writeback.proto (package ai.stigmer.agentic.agentexecution.v1, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file ai/stigmer/agentic/agentexecution/v1/writeback.proto.
+ */
+export const file_ai_stigmer_agentic_agentexecution_v1_writeback = /*@__PURE__*/ fileDesc("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");
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBack.
+ * Use `create(WorkspaceWriteBackSchema)` to create a new message.
+ */
+export const WorkspaceWriteBackSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_writeback, 0);
+/**
+ * WorkspaceWriteBackPhase tracks the progress of a single workspace
+ * write-back through its lifecycle steps.
+ *
+ * The phases are ordered: COMMITTED -> PUSHED -> PR_CREATED.
+ * FAILED can be reached from any step.
+ *
+ * @generated from enum ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBackPhase
+ */
+export var WorkspaceWriteBackPhase;
+(function (WorkspaceWriteBackPhase) {
+    /**
+     * @generated from enum value: WORKSPACE_WRITE_BACK_PHASE_UNSPECIFIED = 0;
+     */
+    WorkspaceWriteBackPhase[WorkspaceWriteBackPhase["WORKSPACE_WRITE_BACK_PHASE_UNSPECIFIED"] = 0] = "WORKSPACE_WRITE_BACK_PHASE_UNSPECIFIED";
+    /**
+     * Changes were committed to a new branch in the sandbox.
+     *
+     * @generated from enum value: WORKSPACE_WRITE_BACK_COMMITTED = 1;
+     */
+    WorkspaceWriteBackPhase[WorkspaceWriteBackPhase["WORKSPACE_WRITE_BACK_COMMITTED"] = 1] = "WORKSPACE_WRITE_BACK_COMMITTED";
+    /**
+     * The branch was pushed to the remote repository.
+     *
+     * @generated from enum value: WORKSPACE_WRITE_BACK_PUSHED = 2;
+     */
+    WorkspaceWriteBackPhase[WorkspaceWriteBackPhase["WORKSPACE_WRITE_BACK_PUSHED"] = 2] = "WORKSPACE_WRITE_BACK_PUSHED";
+    /**
+     * A pull request was created on the remote repository.
+     *
+     * @generated from enum value: WORKSPACE_WRITE_BACK_PR_CREATED = 3;
+     */
+    WorkspaceWriteBackPhase[WorkspaceWriteBackPhase["WORKSPACE_WRITE_BACK_PR_CREATED"] = 3] = "WORKSPACE_WRITE_BACK_PR_CREATED";
+    /**
+     * The write-back failed at some step. Check the error field.
+     *
+     * @generated from enum value: WORKSPACE_WRITE_BACK_FAILED = 4;
+     */
+    WorkspaceWriteBackPhase[WorkspaceWriteBackPhase["WORKSPACE_WRITE_BACK_FAILED"] = 4] = "WORKSPACE_WRITE_BACK_FAILED";
+})(WorkspaceWriteBackPhase || (WorkspaceWriteBackPhase = {}));
+/**
+ * Describes the enum ai.stigmer.agentic.agentexecution.v1.WorkspaceWriteBackPhase.
+ */
+export const WorkspaceWriteBackPhaseSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_agentexecution_v1_writeback, 0);
+//# sourceMappingURL=writeback_pb.js.map

package/ai/stigmer/agentic/agentexecution/v1/writeback_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeback_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/writeback_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAG/E;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,6xBAA6xB,CAAC,CAAC;AAgG1yB;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,uBAiCX;AAjCD,WAAY,uBAAuB;IACjC;;OAEG;IACH,yIAA0C,CAAA;IAE1C;;;;OAIG;IACH,yHAAkC,CAAA;IAElC;;;;OAIG;IACH,mHAA+B,CAAA;IAE/B;;;;OAIG;IACH,2HAAmC,CAAA;IAEnC;;;;OAIG;IACH,mHAA+B,CAAA;AACjC,CAAC,EAjCW,uBAAuB,KAAvB,uBAAuB,QAiClC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAqC,aAAa,CAC1F,QAAQ,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_connect.d.ts

@@ -24,12 +24,13 @@ export declare const AgentInstanceCommandController: {
          * Create a new agent instance with full state.
          * Provide organization_id in metadata.org, and complete spec with configuration and secrets.
          *
-         * Authorization: Uses FGA contextual tuples (handler-level)
+         * Authorization: FGA can_create_instance on parent agent (handler-level)
          * - Checks can_create_instance on parent agent (via spec.agent_id)
-         * - For org-scoped: Passes contextual tuple agent#organization@organization:target-org
-         * - FGA evaluates membership via contextual tuple (single authorization check)
+         * - Public agents: Any authenticated user can create instances (cross-org allowed)
+         * - Private agents: Only org members and agent owner can create instances
          *
-         * This pattern eliminates redundant checks by providing organization context to FGA
+         * FGA is the single source of truth — no hardcoded org-matching rules.
+         * Agents are blueprints with zero secrets; instances are personal resources in the caller's org.
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js

@@ -29,12 +29,13 @@ export const AgentInstanceCommandController = {
          * Create a new agent instance with full state.
          * Provide organization_id in metadata.org, and complete spec with configuration and secrets.
          *
-         * Authorization: Uses FGA contextual tuples (handler-level)
+         * Authorization: FGA can_create_instance on parent agent (handler-level)
          * - Checks can_create_instance on parent agent (via spec.agent_id)
-         * - For org-scoped: Passes contextual tuple agent#organization@organization:target-org
-         * - FGA evaluates membership via contextual tuple (single authorization check)
+         * - Public agents: Any authenticated user can create instances (cross-org allowed)
+         * - Private agents: Only org members and agent owner can create instances
          *
-         * This pattern eliminates redundant checks by providing organization context to FGA
+         * FGA is the single source of truth — no hardcoded org-matching rules.
+         * Agents are blueprints with zero secrets; instances are personal resources in the caller's org.
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_pb.d.ts

@@ -28,12 +28,13 @@ export declare const AgentInstanceCommandController: GenService<{
      * Create a new agent instance with full state.
      * Provide organization_id in metadata.org, and complete spec with configuration and secrets.
      *
-     * Authorization: Uses FGA contextual tuples (handler-level)
+     * Authorization: FGA can_create_instance on parent agent (handler-level)
      * - Checks can_create_instance on parent agent (via spec.agent_id)
-     * - For org-scoped: Passes contextual tuple agent#organization@organization:target-org
-     * - FGA evaluates membership via contextual tuple (single authorization check)
+     * - Public agents: Any authenticated user can create instances (cross-org allowed)
+     * - Private agents: Only org members and agent owner can create instances
      *
-     * This pattern eliminates redundant checks by providing organization context to FGA
+     * FGA is the single source of truth — no hardcoded org-matching rules.
+     * Agents are blueprints with zero secrets; instances are personal resources in the caller's org.
      *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
      */

package/ai/stigmer/agentic/agentinstance/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,UAAU,CAAC;AAExE,OAAO,EAAE,2CAA2C,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,k8BAAk8B,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEvqC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAuDtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,UAAU,CAAC;AAExE,OAAO,EAAE,2CAA2C,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,k8BAAk8B,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEvqC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAwDtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/enum_pb.d.ts

@@ -0,0 +1,41 @@
+import type { GenEnum, GenFile } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file ai/stigmer/agentic/session/v1/enum.proto.
+ */
+export declare const file_ai_stigmer_agentic_session_v1_enum: GenFile;
+/**
+ * GitWriteBackMode controls the platform's post-execution git workflow
+ * for a git-backed workspace entry.
+ *
+ * The user sets this when creating a session to opt in to automatic
+ * PR creation. The agent never sees or controls this setting.
+ *
+ * @generated from enum ai.stigmer.agentic.session.v1.GitWriteBackMode
+ */
+export declare enum GitWriteBackMode {
+    /**
+     * No write-back. File changes remain in the sandbox only.
+     * Artifacts are still published as downloadable files.
+     *
+     * @generated from enum value: GIT_WRITE_BACK_MODE_UNSPECIFIED = 0;
+     */
+    GIT_WRITE_BACK_MODE_UNSPECIFIED = 0,
+    /**
+     * After execution completes, the platform automatically:
+     *   1. Detects uncommitted changes via `git diff`
+     *   2. Creates a branch (stigmer/{execution_id_short})
+     *   3. Commits all changes
+     *   4. Pushes the branch to the remote
+     *   5. Creates a pull request targeting the original branch
+     *
+     * The write-back outcome is recorded in
+     * AgentExecutionStatus.workspace_write_backs.
+     *
+     * @generated from enum value: GIT_WRITE_BACK_BRANCH_AND_PR = 1;
+     */
+    GIT_WRITE_BACK_BRANCH_AND_PR = 1
+}
+/**
+ * Describes the enum ai.stigmer.agentic.session.v1.GitWriteBackMode.
+ */
+export declare const GitWriteBackModeSchema: GenEnum<GitWriteBackMode>;

package/ai/stigmer/agentic/session/v1/enum_pb.js

@@ -0,0 +1,46 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/agentic/session/v1/enum.proto (package ai.stigmer.agentic.session.v1, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file ai/stigmer/agentic/session/v1/enum.proto.
+ */
+export const file_ai_stigmer_agentic_session_v1_enum = /*@__PURE__*/ fileDesc("CihhaS9zdGlnbWVyL2FnZW50aWMvc2Vzc2lvbi92MS9lbnVtLnByb3RvEh1haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MSpZChBHaXRXcml0ZUJhY2tNb2RlEiMKH0dJVF9XUklURV9CQUNLX01PREVfVU5TUEVDSUZJRUQQABIgChxHSVRfV1JJVEVfQkFDS19CUkFOQ0hfQU5EX1BSEAFiBnByb3RvMw");
+/**
+ * GitWriteBackMode controls the platform's post-execution git workflow
+ * for a git-backed workspace entry.
+ *
+ * The user sets this when creating a session to opt in to automatic
+ * PR creation. The agent never sees or controls this setting.
+ *
+ * @generated from enum ai.stigmer.agentic.session.v1.GitWriteBackMode
+ */
+export var GitWriteBackMode;
+(function (GitWriteBackMode) {
+    /**
+     * No write-back. File changes remain in the sandbox only.
+     * Artifacts are still published as downloadable files.
+     *
+     * @generated from enum value: GIT_WRITE_BACK_MODE_UNSPECIFIED = 0;
+     */
+    GitWriteBackMode[GitWriteBackMode["GIT_WRITE_BACK_MODE_UNSPECIFIED"] = 0] = "GIT_WRITE_BACK_MODE_UNSPECIFIED";
+    /**
+     * After execution completes, the platform automatically:
+     *   1. Detects uncommitted changes via `git diff`
+     *   2. Creates a branch (stigmer/{execution_id_short})
+     *   3. Commits all changes
+     *   4. Pushes the branch to the remote
+     *   5. Creates a pull request targeting the original branch
+     *
+     * The write-back outcome is recorded in
+     * AgentExecutionStatus.workspace_write_backs.
+     *
+     * @generated from enum value: GIT_WRITE_BACK_BRANCH_AND_PR = 1;
+     */
+    GitWriteBackMode[GitWriteBackMode["GIT_WRITE_BACK_BRANCH_AND_PR"] = 1] = "GIT_WRITE_BACK_BRANCH_AND_PR";
+})(GitWriteBackMode || (GitWriteBackMode = {}));
+/**
+ * Describes the enum ai.stigmer.agentic.session.v1.GitWriteBackMode.
+ */
+export const GitWriteBackModeSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_session_v1_enum, 0);
+//# sourceMappingURL=enum_pb.js.map

package/ai/stigmer/agentic/session/v1/enum_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,uHAAuH;AACvH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,wOAAwO,CAAC,CAAC;AAErP;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,gBAuBX;AAvBD,WAAY,gBAAgB;IAC1B;;;;;OAKG;IACH,6GAAmC,CAAA;IAEnC;;;;;;;;;;;;OAYG;IACH,uGAAgC,CAAA;AAClC,CAAC,EAvBW,gBAAgB,KAAhB,gBAAgB,QAuB3B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA8B,aAAa,CAC5E,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/workspace_pb.d.ts

@@ -1,4 +1,5 @@
 import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { GitWriteBackMode } from "./enum_pb";
 import type { Message } from "@bufbuild/protobuf";
 /**
  * Describes the file ai/stigmer/agentic/session/v1/workspace.proto.
@@ -159,6 +160,23 @@ export type GitRepoSource = Message<"ai.stigmer.agentic.session.v1.GitRepoSource
      * @generated from field: optional int32 depth = 4;
      */
     depth?: number;
+    /**
+     * Controls whether the platform automatically creates a branch and
+     * pull request from the agent's file changes after execution completes.
+     *
+     * This is a platform-level workflow, not an agent-level decision. The
+     * agent focuses on making code changes; the platform packages them.
+     *
+     * Requires git credentials to be configured during workspace provisioning
+     * (GITHUB_TOKEN available in the execution environment). If credentials
+     * are not available, the write-back is silently skipped regardless of
+     * this setting.
+     *
+     * Default (UNSPECIFIED): no write-back, current behavior.
+     *
+     * @generated from field: ai.stigmer.agentic.session.v1.GitWriteBackMode write_back_mode = 5;
+     */
+    writeBackMode: GitWriteBackMode;
 };
 /**
  * Describes the message ai.stigmer.agentic.session.v1.GitRepoSource.

package/ai/stigmer/agentic/session/v1/workspace_pb.js

@@ -2,11 +2,12 @@
 // @generated from file ai/stigmer/agentic/session/v1/workspace.proto (package ai.stigmer.agentic.session.v1, syntax proto3)
 /* eslint-disable */
 import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_session_v1_enum } from "./enum_pb";
 import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb";
 /**
  * Describes the file ai/stigmer/agentic/session/v1/workspace.proto.
  */
-export const file_ai_stigmer_agentic_session_v1_workspace = /*@__PURE__*/ fileDesc("Ci1haS9zdGlnbWVyL2FnZW50aWMvc2Vzc2lvbi92MS93b3Jrc3BhY2UucHJvdG8SHWFpLnN0aWdtZXIuYWdlbnRpYy5zZXNzaW9uLnYxIqoBCg9Xb3Jrc3BhY2VTb3VyY2USQAoIZ2l0X3JlcG8YASABKAsyLC5haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MS5HaXRSZXBvU291cmNlSAASRAoKbG9jYWxfcGF0aBgCIAEoCzIuLmFpLnN0aWdtZXIuYWdlbnRpYy5zZXNzaW9uLnYxLkxvY2FsUGF0aFNvdXJjZUgAQg8KBnNvdXJjZRIFukgCCAEibwoOV29ya3NwYWNlRW50cnkSFQoEbmFtZRgBIAEoCUIHukgEcgIQARJGCgZzb3VyY2UYAiABKAsyLi5haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MS5Xb3Jrc3BhY2VTb3VyY2VCBrpIA8gBASIoCg9Mb2NhbFBhdGhTb3VyY2USFQoEcGF0aBgBIAEoCUIHukgEcgIQASL+AQoNR2l0UmVwb1NvdXJjZRKlAQoDdXJsGAEgASgJQpcBukiTAboBjAEKGWdpdF9yZXBvX3NvdXJjZS51cmwuaHR0cHMSUnVybCBtdXN0IHVzZSBIVFRQUyAoZS5nLiBodHRwczovL2dpdGh1Yi5jb20vb3JnL3JlcG8pLiBTU0ggVVJMcyBhcmUgbm90IHN1cHBvcnRlZC4aG3RoaXMuc3RhcnRzV2l0aCgnaHR0cHM6Ly8nKcgBARIOCgZicmFuY2gYAiABKAkSDgoGY29tbWl0GAMgASgJEhsKBWRlcHRoGAQgASgFQge6SAQaAigASACIAQFCCAoGX2RlcHRoYgZwcm90bzM", [file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_session_v1_workspace = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_enum, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.session.v1.WorkspaceSource.
  * Use `create(WorkspaceSourceSchema)` to create a new message.

package/ai/stigmer/agentic/session/v1/workspace_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/workspace_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,i4BAAi4B,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AA8B56B;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAmC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA4B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA6D/D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"workspace_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/workspace_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,uCAAuC,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,o+BAAo+B,EAAE,CAAC,uCAAuC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA8BxjC;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAmC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA4B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA+E/D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/protos",
-  "version": "0.0.52",
+  "version": "0.0.54",
   "description": "Generated TypeScript protobuf stubs for Stigmer APIs",
   "license": "Apache-2.0",
   "type": "module",