@stigmer/protos 0.0.68 → 0.0.70

package/ai/stigmer/agentic/mcpserver/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAE,uCAAuC,EAAE,MAAM,SAAS,CAAC;AAElE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,spDAAspD,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE35D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAoKlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAE,uCAAuC,EAAE,MAAM,SAAS,CAAC;AAElE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,spDAAspD,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAE35D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAgJlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/io_pb.d.ts

@@ -16,8 +16,8 @@ export type McpServerId = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerId">
     /**
      * The unique identifier of the MCP server resource.
      * This is the system-generated ID (metadata.id), not the slug.
-     * Format: "mcp-" followed by a unique identifier.
-     * Example: "mcp-abc123xyz"
+     * Format: "mcp_" followed by a unique identifier.
+     * Example: "mcp_abc123xyz"
      *
      * @generated from field: string value = 1;
      */
@@ -31,6 +31,7 @@ export declare const McpServerIdSchema: GenMessage<McpServerId>;
 /**
  * UpdateDiscoveredCapabilitiesInput is the request for the updateDiscoveredCapabilities RPC.
  *
+ * @internal
  * Used by:
  * - CLI: after `stigmer discover mcp-server <name>` connects locally, queries tools/resources,
  *   and pushes the results to stigmer-server.
@@ -64,15 +65,13 @@ export declare const UpdateDiscoveredCapabilitiesInputSchema: GenMessage<UpdateD
 /**
  * DiscoverCapabilitiesInput is the request for the discoverCapabilities RPC.
  *
+ * @internal
  * Triggers server-side MCP discovery: the backend creates an ephemeral
  * ExecutionContext with the resolved environment variables, starts a Temporal
  * workflow that connects to the MCP server (via the agent-runner), enumerates
  * tools and resource templates, and stores the result in
  * status.discovered_capabilities.
  *
- * The RPC blocks until discovery completes (~30s timeout) and returns the updated
- * McpServer with populated discovered_capabilities.
- *
  * Environment variable resolution:
  * - When runtime_env is provided, the backend creates an ExecutionContext directly
  *   from these values (one-time use, values are not persisted to any environment).
@@ -95,12 +94,7 @@ export type DiscoverCapabilitiesInput = Message<"ai.stigmer.agentic.mcpserver.v1
      */
     mcpServerId: string;
     /**
-     * Optional environment variable values for one-time discovery. When provided,
-     * the backend creates a temporary ExecutionContext directly from these values
-     * without reading from the personal environment. Each value carries its own
-     * is_secret classification, matching the contract of
-     * AgentExecution.spec.runtime_env.
-     *
+     * Optional environment variable values for one-time discovery.
      * When empty, values are resolved from the user's personal environment.
      *
      * @generated from field: map<string, ai.stigmer.agentic.executioncontext.v1.ExecutionValue> runtime_env = 2;

package/ai/stigmer/agentic/mcpserver/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,gDAAgD,EAAE,MAAM,mCAAmC,CAAC;AAErG,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,ouBAAouB,EAAE,CAAC,gDAAgD,EAAE,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAoB92B;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAgC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAkD1D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,gDAAgD,EAAE,MAAM,mCAAmC,CAAC;AAErG,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,ouBAAouB,EAAE,CAAC,gDAAgD,EAAE,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAoB92B;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAiC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AA2C1D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/query_connect.d.ts

@@ -1,7 +1,7 @@
 /**
  * McpServerQueryController provides read operations for MCP server resources.
- * All read operations require appropriate authorization based on the resource's scope.
  *
+ * @internal
  * Authorization model:
  * - Platform-scoped: Anyone can view (public marketplace)
  * - Organization-scoped: Org members can view
@@ -15,9 +15,7 @@ export declare const McpServerQueryController: {
         /**
          * Get an MCP server by its unique identifier.
          *
-         * Input: ApiResourceId containing the MCP server's system-generated ID.
-         * Returns: The full McpServer resource including metadata, spec, and status.
-         *
+         * @internal
          * Authorization: Requires can_view permission on the mcp_server resource.
          * The caller must have access based on the resource's scope:
          * - Platform: All authenticated users
@@ -35,15 +33,10 @@ export declare const McpServerQueryController: {
         /**
          * Get an MCP server by reference (scope + org + slug).
          *
-         * Input: ApiResourceReference with scope, org (if applicable), kind, and slug.
-         * Returns: The full McpServer resource.
-         *
-         * This is the preferred method for looking up MCP servers by name/slug
-         * rather than system-generated ID. Useful for:
-         * - Resolving references from Agent.mcp_server_usages
-         * - CLI lookups by name
-         * - Cross-scope resolution (platform vs org vs personal)
+         * Preferred method for looking up MCP servers by name/slug rather than
+         * system-generated ID.
          *
+         * @internal
          * Authorization: Custom authorization in handler.
          * The handler performs scope-aware authorization based on the reference.
          *

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js

@@ -5,8 +5,8 @@
 import { MethodKind } from "@bufbuild/protobuf";
 /**
  * McpServerQueryController provides read operations for MCP server resources.
- * All read operations require appropriate authorization based on the resource's scope.
  *
+ * @internal
  * Authorization model:
  * - Platform-scoped: Anyone can view (public marketplace)
  * - Organization-scoped: Org members can view
@@ -20,9 +20,7 @@ export const McpServerQueryController = {
         /**
          * Get an MCP server by its unique identifier.
          *
-         * Input: ApiResourceId containing the MCP server's system-generated ID.
-         * Returns: The full McpServer resource including metadata, spec, and status.
-         *
+         * @internal
          * Authorization: Requires can_view permission on the mcp_server resource.
          * The caller must have access based on the resource's scope:
          * - Platform: All authenticated users
@@ -40,15 +38,10 @@ export const McpServerQueryController = {
         /**
          * Get an MCP server by reference (scope + org + slug).
          *
-         * Input: ApiResourceReference with scope, org (if applicable), kind, and slug.
-         * Returns: The full McpServer resource.
-         *
-         * This is the preferred method for looking up MCP servers by name/slug
-         * rather than system-generated ID. Useful for:
-         * - Resolving references from Agent.mcp_server_usages
-         * - CLI lookups by name
-         * - Cross-scope resolution (platform vs org vs personal)
+         * Preferred method for looking up MCP servers by name/slug rather than
+         * system-generated ID.
          *
+         * @internal
          * Authorization: Custom authorization in handler.
          * The handler performs scope-aware authorization based on the reference.
          *

package/ai/stigmer/agentic/mcpserver/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;WAWG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/query_pb.d.ts

@@ -7,8 +7,8 @@ import type { ApiResourceIdSchema, ApiResourceReferenceSchema } from "../../../c
 export declare const file_ai_stigmer_agentic_mcpserver_v1_query: GenFile;
 /**
  * McpServerQueryController provides read operations for MCP server resources.
- * All read operations require appropriate authorization based on the resource's scope.
  *
+ * @internal
  * Authorization model:
  * - Platform-scoped: Anyone can view (public marketplace)
  * - Organization-scoped: Org members can view
@@ -20,9 +20,7 @@ export declare const McpServerQueryController: GenService<{
     /**
      * Get an MCP server by its unique identifier.
      *
-     * Input: ApiResourceId containing the MCP server's system-generated ID.
-     * Returns: The full McpServer resource including metadata, spec, and status.
-     *
+     * @internal
      * Authorization: Requires can_view permission on the mcp_server resource.
      * The caller must have access based on the resource's scope:
      * - Platform: All authenticated users
@@ -39,15 +37,10 @@ export declare const McpServerQueryController: GenService<{
     /**
      * Get an MCP server by reference (scope + org + slug).
      *
-     * Input: ApiResourceReference with scope, org (if applicable), kind, and slug.
-     * Returns: The full McpServer resource.
-     *
-     * This is the preferred method for looking up MCP servers by name/slug
-     * rather than system-generated ID. Useful for:
-     * - Resolving references from Agent.mcp_server_usages
-     * - CLI lookups by name
-     * - Cross-scope resolution (platform vs org vs personal)
+     * Preferred method for looking up MCP servers by name/slug rather than
+     * system-generated ID.
      *
+     * @internal
      * Authorization: Custom authorization in handler.
      * The handler performs scope-aware authorization based on the reference.
      *

package/ai/stigmer/agentic/mcpserver/v1/query_pb.js

@@ -12,8 +12,8 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
 export const file_ai_stigmer_agentic_mcpserver_v1_query = /*@__PURE__*/ fileDesc("CithaS9zdGlnbWVyL2FnZW50aWMvbWNwc2VydmVyL3YxL3F1ZXJ5LnByb3RvEh9haS5zdGlnbWVyLmFnZW50aWMubWNwc2VydmVyLnYxMq8CChhNY3BTZXJ2ZXJRdWVyeUNvbnRyb2xsZXISkgEKA2dldBItLmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZUlkGiouYWkuc3RpZ21lci5hZ2VudGljLm1jcHNlcnZlci52MS5NY3BTZXJ2ZXIiMMK4GCwIAxAsIgV2YWx1ZSofdW5hdXRob3JpemVkIHRvIHZpZXcgbWNwIHNlcnZlchJ4Cg5nZXRCeVJlZmVyZW5jZRI0LmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZVJlZmVyZW5jZRoqLmFpLnN0aWdtZXIuYWdlbnRpYy5tY3BzZXJ2ZXIudjEuTWNwU2VydmVyIgTQuBgBGgSg/yssYgZwcm90bzM", [file_ai_stigmer_agentic_mcpserver_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
  * McpServerQueryController provides read operations for MCP server resources.
- * All read operations require appropriate authorization based on the resource's scope.
  *
+ * @internal
  * Authorization model:
  * - Platform-scoped: Anyone can view (public marketplace)
  * - Organization-scoped: Org members can view

package/ai/stigmer/agentic/mcpserver/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,6gBAA6gB,EAAE,CAAC,wCAAwC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEzuB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GA0ChC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,6gBAA6gB,EAAE,CAAC,wCAAwC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEzuB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAmChC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts

@@ -6,12 +6,11 @@ import type { Message } from "@bufbuild/protobuf";
  */
 export declare const file_ai_stigmer_agentic_mcpserver_v1_spec: GenFile;
 /**
- * McpServerSpec defines the configuration template for an MCP server.
- * This is a reusable definition that can be referenced by multiple agents.
- * Actual secrets/credentials are provided at runtime via AgentInstance's environment.
+ * McpServerSpec defines the configurable properties of an MCP server.
  *
- * MCP (Model Context Protocol) servers provide tools and capabilities to AI agents.
- * This spec declares the server type, connection details, and required environment variables.
+ * @internal
+ * This is the "Template" layer — declares capabilities and requirements.
+ * The overview.md file provides the SDK-facing description and example YAML.
  *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.McpServerSpec
  */
@@ -71,33 +70,19 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
     /**
      * Default tools to enable from this MCP server.
      * Empty list means all tools are enabled by default.
-     * When specified, only these tools will be available unless overridden in McpServerUsage.
+     *
+     * @internal
      * Tool names must match exactly what the MCP server reports via tools/list.
-     * IMPORTANT: Only names from `discovered_capabilities.tools` are valid here.
-     * Do NOT include names from `discovered_capabilities.resource_templates` —
+     * Only names from discovered_capabilities.tools are valid here.
+     * Do NOT include names from discovered_capabilities.resource_templates —
      * resource templates are read-only data endpoints, not callable tools.
-     * Examples: ["create_pull_request", "search_code", "get_file_contents"]
+     * Including a resource template name here causes a fatal runtime error.
      *
      * @generated from field: repeated string default_enabled_tools = 7;
      */
     defaultEnabledTools: string[];
     /**
-     * Environment specification declaring required environment variables.
-     * This defines the SCHEMA of required env vars - actual values are provided
-     * at runtime via AgentInstance's environment_ref.
-     *
-     * Use this to declare what environment variables the MCP server needs,
-     * whether they are secrets (e.g., API tokens), and their descriptions.
-     * Values in this spec can be empty - they serve as documentation and validation.
-     *
-     * Example:
-     *   data:
-     *     GITHUB_TOKEN:
-     *       is_secret: true
-     *       description: "GitHub personal access token with repo scope"
-     *     GITHUB_OWNER:
-     *       is_secret: false
-     *       description: "Default GitHub organization or user"
+     * Environment variables required by the MCP server.
      *
      * @generated from field: ai.stigmer.agentic.environment.v1.EnvironmentSpec env_spec = 8;
      */
@@ -105,6 +90,7 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
     /**
      * Default tool approval policies for this MCP server.
      *
+     * @internal
      * Tools listed here require user approval before execution by default.
      * This is the first layer in the approval policy chain:
      *   McpServer.default_tool_approvals → Agent.tool_approval_overrides → auto_approve_all
@@ -114,22 +100,6 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
      * - Protect sensitive data access across all agents using this server
      * - Establish organization-wide safety policies for dangerous tools
      *
-     * Example (GitHub MCP):
-     *   default_tool_approvals:
-     *     - tool_name: "delete_repository"
-     *       message: "Delete repository: {{args.repo}}"
-     *     - tool_name: "force_push"
-     *       message: "Force push to {{args.branch}}"
-     *     - tool_name: "add_collaborator"
-     *       message: "Add {{args.user}} as collaborator to {{args.repo}}"
-     *
-     * Example (Database MCP):
-     *   default_tool_approvals:
-     *     - tool_name: "execute_sql"
-     *       message: "Execute SQL: {{args.query}}"
-     *     - tool_name: "drop_table"
-     *       message: "Drop table: {{args.table_name}}"
-     *
      * Tools not listed here do not require approval by default.
      * Agents can still add approval requirements via tool_approval_overrides.
      *
@@ -144,15 +114,16 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
 export declare const McpServerSpecSchema: GenMessage<McpServerSpec>;
 /**
  * StdioServerConfig defines an MCP server that runs as a subprocess.
+ *
+ * @internal
  * Communication happens via stdin/stdout using JSON-RPC messages.
+ * The agent runner starts this process and communicates via stdio.
  *
- * This is the most common MCP server type, used for:
+ * Common examples:
  * - Node.js servers: npx @modelcontextprotocol/server-github
  * - Python servers: python -m mcp_server_sqlite
  * - Go servers: ./mcp-server-binary
  *
- * The agent runner starts this process and communicates via stdio.
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.StdioServerConfig
  */
 export type StdioServerConfig = Message<"ai.stigmer.agentic.mcpserver.v1.StdioServerConfig"> & {
@@ -189,13 +160,13 @@ export type StdioServerConfig = Message<"ai.stigmer.agentic.mcpserver.v1.StdioSe
 export declare const StdioServerConfigSchema: GenMessage<StdioServerConfig>;
 /**
  * HttpServerConfig defines an MCP server accessible via HTTP + Server-Sent Events.
- * Used for remote/managed MCP services that expose an HTTP endpoint.
  *
+ * @internal
  * Communication flow:
  * 1. Agent sends JSON-RPC requests via HTTP POST
  * 2. Server streams responses via Server-Sent Events (SSE)
  *
- * This is useful for:
+ * Use cases:
  * - Managed MCP services (e.g., hosted by a cloud provider)
  * - MCP servers behind a reverse proxy or API gateway
  * - Sharing a single MCP server instance across multiple agents
@@ -262,8 +233,7 @@ export declare const HttpServerConfigSchema: GenMessage<HttpServerConfig>;
 /**
  * ToolApprovalPolicy defines approval requirements for a specific tool.
  *
- * ## Message Templates
- *
+ * @internal
  * The message field supports {{args.field}} placeholders that are resolved
  * at runtime using the actual tool arguments. This enables contextual
  * approval messages that help users make informed decisions.
@@ -274,26 +244,7 @@ export declare const HttpServerConfigSchema: GenMessage<HttpServerConfig>;
  *
  * If a placeholder references a missing argument, it's replaced with "<unknown>".
  *
- * ## Examples
- *
- * Simple message:
- *   tool_name: "send_email"
- *   message: "Send email to {{args.recipient}}"
- *   Result: "Send email to customer@example.com"
- *
- * Multiple placeholders:
- *   tool_name: "delete_file"
- *   message: "Delete {{args.path}} from {{args.repository}}"
- *   Result: "Delete src/main.py from acme/webapp"
- *
- * Default message (empty):
- *   tool_name: "dangerous_operation"
- *   message: ""
- *   Result: "Execute tool: dangerous_operation" (auto-generated)
- *
- * ## Policy Chain
- *
- * This policy sits at the McpServer level. The full approval policy chain is:
+ * Policy chain (lowest to highest priority):
  * 1. McpServer.default_tool_approvals (this message) - Platform/org defaults
  * 2. Agent.McpServerUsage.tool_approval_overrides - Per-agent customization
  * 3. AgentExecution.auto_approve_all - Runtime bypass

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,8BAA8B,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,4zCAA4zC,EAAE,CAAC,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA0Ip5C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6C5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAsE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,8BAA8B,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,4zCAA4zC,EAAE,CAAC,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA4Gp5C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA8C5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAkD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/status_pb.d.ts

@@ -9,10 +9,9 @@ export declare const file_ai_stigmer_agentic_mcpserver_v1_status: GenFile;
 /**
  * McpServerStatus represents the system-managed state of an MCP server definition.
  *
- * This status tracks two concerns:
- *
+ * @internal
+ * Tracks two concerns:
  * 1. Structural validation — whether the definition is valid and can be used by agents.
- *
  * 2. Discovered capabilities — the tools and resource templates the MCP server
  *    actually provides. Populated by one of three mechanisms:
  *      a. Static seedpack bootstrap (for built-in servers like stigmer-mcp-server)
@@ -53,8 +52,7 @@ export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServer
      */
     discoveredCapabilities?: DiscoveredCapabilities;
     /**
-     * Standard audit information tracking creation and modification.
-     * Field 99 follows Stigmer convention for audit placement in status messages.
+     * Standard audit information (created_at, updated_at, created_by, etc.)
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceAudit audit = 99;
      */
@@ -66,26 +64,18 @@ export type McpServerStatus = Message<"ai.stigmer.agentic.mcpserver.v1.McpServer
  */
 export declare const McpServerStatusSchema: GenMessage<McpServerStatus>;
 /**
- * DiscoveredCapabilities holds the tools and resource templates reported by an
- * MCP server. This is a point-in-time snapshot — the server's actual capabilities
- * may change if tools are added or removed.
+ * DiscoveredCapabilities holds the tools and resource templates reported by an MCP server.
  *
- * IMPORTANT — Tools vs Resource Templates:
- * These are two fundamentally different MCP capability types:
+ * @internal
+ * This is a point-in-time snapshot — the server's actual capabilities may change
+ * if tools are added or removed.
  *
+ * Tools vs Resource Templates:
  *   - tools: Callable actions the agent can invoke (e.g., search_code, create_pr).
- *     These are the ONLY names valid for use in Agent `enabled_tools`,
- *     McpServer `default_enabled_tools`, and `tool_approval_overrides`.
- *
- *   - resource_templates: Read-only data endpoints accessed by URI template
- *     (e.g., cloud-resource-schema://{kind}). These are NOT callable tools.
- *     Resource template names must NEVER appear in `enabled_tools` or
- *     `default_enabled_tools` — doing so causes a fatal runtime error because
- *     the agent-runner cannot find them in the tools registry.
- *
- * When authoring Agent YAML, always select tool names from `tools` only.
- * Resource templates serve a different purpose (data discovery) and are
- * accessed through MCP resource reads, not tool calls.
+ *     Only tool names are valid in Agent enabled_tools and McpServer default_enabled_tools.
+ *   - resource_templates: Read-only data endpoints accessed by URI template.
+ *     Resource template names must NEVER appear in enabled_tools — doing so causes
+ *     a fatal runtime error.
  *
  * Populated by:
  * - Seedpack bootstrap (built-in servers with known, stable tool sets)
@@ -96,18 +86,13 @@ export declare const McpServerStatusSchema: GenMessage<McpServerStatus>;
  */
 export type DiscoveredCapabilities = Message<"ai.stigmer.agentic.mcpserver.v1.DiscoveredCapabilities"> & {
     /**
-     * Tools reported by the MCP server via tools/list.
-     * These are callable actions. Only names from this list may be used in
-     * Agent `enabled_tools` and McpServer `default_enabled_tools`.
+     * Callable tools reported by the MCP server.
      *
      * @generated from field: repeated ai.stigmer.agentic.mcpserver.v1.DiscoveredTool tools = 1;
      */
     tools: DiscoveredTool[];
     /**
-     * Resource templates reported by the MCP server via resources/templates/list.
-     * These are read-only data endpoints, NOT callable tools.
-     * Resource template names must NOT be placed in `enabled_tools` —
-     * they are accessed via MCP resource reads, not tool invocations.
+     * Read-only data endpoints reported by the MCP server.
      *
      * @generated from field: repeated ai.stigmer.agentic.mcpserver.v1.DiscoveredResourceTemplate resource_templates = 2;
      */
@@ -133,10 +118,8 @@ export declare const DiscoveredCapabilitiesSchema: GenMessage<DiscoveredCapabili
 /**
  * DiscoveredTool describes a single tool reported by an MCP server.
  *
- * Maps directly to the MCP protocol's Tool type from tools/list:
- *   - name: unique tool identifier within the server
- *   - description: human-readable explanation of what the tool does
- *   - input_schema: JSON Schema describing the tool's expected input
+ * @internal
+ * Maps directly to the MCP protocol's Tool type from tools/list.
  *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.DiscoveredTool
  */
@@ -156,9 +139,6 @@ export type DiscoveredTool = Message<"ai.stigmer.agentic.mcpserver.v1.Discovered
     description: string;
     /**
      * JSON Schema describing the tool's input parameters.
-     * Stored as a Struct for natural representation in YAML/JSON and to allow
-     * inspection without string parsing. This is the raw schema from the MCP
-     * server's tools/list response.
      *
      * @generated from field: google.protobuf.Struct input_schema = 3;
      */
@@ -170,18 +150,12 @@ export type DiscoveredTool = Message<"ai.stigmer.agentic.mcpserver.v1.Discovered
  */
 export declare const DiscoveredToolSchema: GenMessage<DiscoveredTool>;
 /**
- * DiscoveredResourceTemplate describes a parameterized resource template
- * reported by an MCP server via resources/templates/list.
+ * DiscoveredResourceTemplate describes a parameterized resource template reported by an MCP server.
  *
+ * @internal
  * Resource templates use URI templates (RFC 6570) with placeholders that
  * clients fill in to access specific resources.
  *
- * Example:
- *   uri_template: "stigmer://agents/{org}/{slug}"
- *   name: "stigmer_agent"
- *   description: "Full definition of a Stigmer agent"
- *   mime_type: "application/json"
- *
  * @generated from message ai.stigmer.agentic.mcpserver.v1.DiscoveredResourceTemplate
  */
 export type DiscoveredResourceTemplate = Message<"ai.stigmer.agentic.mcpserver.v1.DiscoveredResourceTemplate"> & {

package/ai/stigmer/agentic/mcpserver/v1/status_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y4CAAy4C,EAAE,CAAC,0CAA0C,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA4DjgD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAuC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAiD9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAN,IAAY,eAqCX;AArCD,WAAY,eAAe;IACzB;;;;OAIG;IACH,qGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6DAAY,CAAA;IAEZ;;;;;OAKG;IACH,mDAAO,CAAA;IAEP;;;;OAIG;IACH,qEAAgB,CAAA;IAEhB;;;;;OAKG;IACH,mDAAO,CAAA;AACT,CAAC,EArCW,eAAe,KAAf,eAAe,QAqC1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y4CAAy4C,EAAE,CAAC,0CAA0C,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA0DjgD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAqD9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA2C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAN,IAAY,eAqCX;AArCD,WAAY,eAAe;IACzB;;;;OAIG;IACH,qGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6DAAY,CAAA;IAEZ;;;;;OAKG;IACH,mDAAO,CAAA;IAEP;;;;OAIG;IACH,qEAAgB,CAAA;IAEhB;;;;;OAKG;IACH,mDAAO,CAAA;AACT,CAAC,EArCW,eAAe,KAAf,eAAe,QAqC1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/command_connect.d.ts

@@ -8,6 +8,8 @@ export declare const SessionCommandController: {
     readonly methods: {
         /**
          * Create or update a session.
+         *
+         * @internal
          * The authorization and state-operation are determined depending on whether the session
          * is going to be created or updated which is determined as part of the request execution.
          *
@@ -20,7 +22,9 @@ export declare const SessionCommandController: {
             readonly kind: any;
         };
         /**
-         * Create a new session for an agent.
+         * Create a session.
+         *
+         * @internal
          * Requires can_create_session permission in the organization.
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.create
@@ -43,12 +47,17 @@ export declare const SessionCommandController: {
             readonly kind: any;
         };
         /**
-         * Set the session subject (server-side field-level update, race-safe).
+         * Set the session subject.
          *
-         * Unlike the full update RPC, this atomically modifies only spec.subject
-         * without touching other fields. This eliminates the lost-update race
-         * between GenerateSessionSubject and sandbox_manager, which both run in
-         * parallel during agent execution.
+         * This is a targeted update that modifies only the subject field,
+         * leaving other session fields untouched. Use this instead of the full
+         * update RPC when you only need to change the session subject.
+         *
+         * @internal
+         * Server-side field-level update, race-safe. Atomically modifies only
+         * spec.subject without touching other fields. Eliminates the lost-update
+         * race between GenerateSessionSubject and sandbox_manager, which both run
+         * in parallel during agent execution.
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.updateSubject
          */
@@ -59,12 +68,17 @@ export declare const SessionCommandController: {
             readonly kind: any;
         };
         /**
-         * Set the session sandbox ID (server-side field-level update, race-safe).
+         * Set the session sandbox ID.
+         *
+         * This is a targeted update that modifies only the sandbox ID field,
+         * leaving other session fields untouched. Use this instead of the full
+         * update RPC when you only need to change the sandbox assignment.
          *
-         * Unlike the full update RPC, this atomically modifies only spec.sandbox_id
-         * without touching other fields. This eliminates the lost-update race
-         * between sandbox_manager and GenerateSessionSubject, which both run in
-         * parallel during agent execution.
+         * @internal
+         * Server-side field-level update, race-safe. Atomically modifies only
+         * spec.sandbox_id without touching other fields. Eliminates the lost-update
+         * race between sandbox_manager and GenerateSessionSubject, which both run
+         * in parallel during agent execution.
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.updateSandboxId
          */

package/ai/stigmer/agentic/session/v1/command_connect.js

@@ -13,6 +13,8 @@ export const SessionCommandController = {
     methods: {
         /**
          * Create or update a session.
+         *
+         * @internal
          * The authorization and state-operation are determined depending on whether the session
          * is going to be created or updated which is determined as part of the request execution.
          *
@@ -25,7 +27,9 @@ export const SessionCommandController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Create a new session for an agent.
+         * Create a session.
+         *
+         * @internal
          * Requires can_create_session permission in the organization.
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.create
@@ -48,12 +52,17 @@ export const SessionCommandController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Set the session subject (server-side field-level update, race-safe).
+         * Set the session subject.
          *
-         * Unlike the full update RPC, this atomically modifies only spec.subject
-         * without touching other fields. This eliminates the lost-update race
-         * between GenerateSessionSubject and sandbox_manager, which both run in
-         * parallel during agent execution.
+         * This is a targeted update that modifies only the subject field,
+         * leaving other session fields untouched. Use this instead of the full
+         * update RPC when you only need to change the session subject.
+         *
+         * @internal
+         * Server-side field-level update, race-safe. Atomically modifies only
+         * spec.subject without touching other fields. Eliminates the lost-update
+         * race between GenerateSessionSubject and sandbox_manager, which both run
+         * in parallel during agent execution.
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.updateSubject
          */
@@ -64,12 +73,17 @@ export const SessionCommandController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Set the session sandbox ID (server-side field-level update, race-safe).
+         * Set the session sandbox ID.
+         *
+         * This is a targeted update that modifies only the sandbox ID field,
+         * leaving other session fields untouched. Use this instead of the full
+         * update RPC when you only need to change the sandbox assignment.
          *
-         * Unlike the full update RPC, this atomically modifies only spec.sandbox_id
-         * without touching other fields. This eliminates the lost-update race
-         * between sandbox_manager and GenerateSessionSubject, which both run in
-         * parallel during agent execution.
+         * @internal
+         * Server-side field-level update, race-safe. Atomically modifies only
+         * spec.sandbox_id without touching other fields. Eliminates the lost-update
+         * race between sandbox_manager and GenerateSessionSubject, which both run
+         * in parallel during agent execution.
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.updateSandboxId
          */