@stigmer/protos 0.0.69 → 0.0.70

package/ai/stigmer/agentic/workflowinstance/v1/command_pb.d.ts

@@ -6,8 +6,9 @@ import type { WorkflowInstanceIdSchema } from "./io_pb";
  */
 export declare const file_ai_stigmer_agentic_workflowinstance_v1_command: GenFile;
 /**
- * WorkflowInstanceCommandController handles write operations (Create, Update, Delete) for WorkflowInstance resources.
+ * WorkflowInstanceCommandController handles write operations for workflow instances.
  *
+ * @internal
  * This service provides the CUD (Create, Update, Delete) operations following the
  * Command-Query Separation pattern. All RPCs that modify state go through this controller.
  *
@@ -23,6 +24,8 @@ export declare const file_ai_stigmer_agentic_workflowinstance_v1_command: GenFil
 export declare const WorkflowInstanceCommandController: GenService<{
     /**
      * Create or update a workflow instance.
+     *
+     * @internal
      * The authorization and state-operation are determined depending on whether the workflow instance
      * is going to be created or updated which is determined as part of the request execution.
      *
@@ -34,10 +37,9 @@ export declare const WorkflowInstanceCommandController: GenService<{
         output: typeof WorkflowInstanceSchema;
     };
     /**
-     * Create a new workflow instance.
-     *
-     * Creates a configured deployment of a Workflow template with environment bindings.
+     * Create a workflow instance.
      *
+     * @internal
      * Input validation:
      * - metadata.org must be specified
      * - spec.workflow_id must be a valid Workflow resource ID
@@ -49,16 +51,6 @@ export declare const WorkflowInstanceCommandController: GenService<{
      * 2. User has permission to access all referenced Environment resources
      * 3. Owner scope is valid for the user's organization/identity
      *
-     * Returns:
-     * The created WorkflowInstance with:
-     * - Assigned resource ID (metadata.id)
-     * - Created timestamp (status.audit.created_at)
-     * - Initial version (status.audit.version = 1)
-     *
-     * Example:
-     * Input: WorkflowInstance with workflow_id="wfl-123", environment_refs=["env-prod"]
-     * Output: WorkflowInstance with id="wfi-abc456", created_at="2025-01-11T10:00:00Z"
-     *
      * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.create
      */
     create: {
@@ -69,30 +61,20 @@ export declare const WorkflowInstanceCommandController: GenService<{
     /**
      * Update an existing workflow instance.
      *
-     * Modifies the configuration of an existing WorkflowInstance.
-     * You can update:
-     * - spec.description (change descriptive text)
-     * - spec.environment_refs (add/remove/reorder environment bindings)
+     * @internal
+     * Mutable fields:
+     * - spec.description, spec.environment_refs
      * - metadata.labels, metadata.tags, metadata.annotations
      *
-     * You cannot update:
-     * - spec.workflow_id (must delete and recreate to change template)
-     * - metadata.id (immutable resource identifier)
-     * - metadata.org (immutable after creation)
+     * Immutable fields (must delete and recreate to change):
+     * - spec.workflow_id, metadata.id, metadata.org
      *
      * Authorization:
      * Requires "update" permission on the specific WorkflowInstance resource.
      * Field path "metadata.id" identifies which resource to authorize.
      *
-     * Versioning:
      * Each update increments status.audit.version and updates status.audit.updated_at.
      *
-     * Returns:
-     * The updated WorkflowInstance with:
-     * - Incremented version number
-     * - Updated timestamp
-     * - Modified spec fields
-     *
      * Error: PERMISSION_DENIED if user lacks update permission
      *
      * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.update
@@ -105,10 +87,8 @@ export declare const WorkflowInstanceCommandController: GenService<{
     /**
      * Delete a workflow instance.
      *
+     * @internal
      * Permanently removes a WorkflowInstance resource.
-     *
-     * Important:
-     * - Deletion is permanent and cannot be undone
      * - Does NOT delete the referenced Workflow template (templates are reusable)
      * - Does NOT delete the referenced Environment resources (environments are reusable)
      * - DOES cascade delete any dependent WorkflowExecution resources (executions belong to instance)
@@ -117,14 +97,7 @@ export declare const WorkflowInstanceCommandController: GenService<{
      * Requires "delete" permission on the specific WorkflowInstance resource.
      * Field path "value" extracts the resource ID from WorkflowInstanceId wrapper.
      *
-     * Use Cases:
-     * - Remove deprecated instances
-     * - Clean up test/dev instances
-     * - Decommission old deployment configurations
-     *
-     * Returns:
-     * The deleted WorkflowInstance (final state before deletion).
-     * Useful for audit logs and confirming what was deleted.
+     * Returns the deleted WorkflowInstance (final state before deletion).
      *
      * Error: PERMISSION_DENIED if user lacks delete permission
      * Error: NOT_FOUND if instance ID doesn't exist

package/ai/stigmer/agentic/workflowinstance/v1/command_pb.js

@@ -11,8 +11,9 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
  */
 export const file_ai_stigmer_agentic_workflowinstance_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_workflowinstance_v1_api, file_ai_stigmer_agentic_workflowinstance_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
- * WorkflowInstanceCommandController handles write operations (Create, Update, Delete) for WorkflowInstance resources.
+ * WorkflowInstanceCommandController handles write operations for workflow instances.
  *
+ * @internal
  * This service provides the CUD (Create, Update, Delete) operations following the
  * Command-Query Separation pattern. All RPCs that modify state go through this controller.
  *

package/ai/stigmer/agentic/workflowinstance/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4IAA4I;AAC5I,oBAAoB;AAKpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,8CAA8C,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,whCAAwhC,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEnwC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAoHzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4IAA4I;AAC5I,oBAAoB;AAKpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,8CAA8C,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,whCAAwhC,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAEnwC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAwFzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflowinstance/v1/io_pb.d.ts

@@ -7,21 +7,19 @@ import type { Message } from "@bufbuild/protobuf";
  */
 export declare const file_ai_stigmer_agentic_workflowinstance_v1_io: GenFile;
 /**
- * WorkflowInstanceId wraps a workflow instance identifier for RPC operations.
+ * WorkflowInstanceId wraps a workflow instance identifier.
  *
+ * @internal
  * Used as input to RPCs that operate on a single instance:
  * - get: Retrieve a specific instance by ID
  * - delete: Remove a specific instance by ID
- *
- * Format: Resource ID string (e.g., "wfi-abc123")
- * Validation: Required field (must not be empty)
+ * Format: Resource ID string (e.g., "wfi_abc123")
  *
  * @generated from message ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceId
  */
 export type WorkflowInstanceId = Message<"ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceId"> & {
     /**
-     * The workflow instance resource ID.
-     * Example: "wfi-abc123"
+     * Workflow instance resource ID.
      *
      * @generated from field: string value = 1;
      */
@@ -33,14 +31,14 @@ export type WorkflowInstanceId = Message<"ai.stigmer.agentic.workflowinstance.v1
  */
 export declare const WorkflowInstanceIdSchema: GenMessage<WorkflowInstanceId>;
 /**
- * GetWorkflowInstancesByWorkflowRequest retrieves all instances of a specific Workflow template.
+ * GetWorkflowInstancesByWorkflowRequest retrieves all instances of a specific workflow template.
  *
+ * @internal
  * This allows you to find all configured deployments of a given Workflow.
  * For example, a "deploy-to-cloud" Workflow might have instances:
  * - "prod-deploy" (with production environments)
  * - "staging-deploy" (with staging environments)
  * - "dev-deploy" (with development environments)
- *
  * Supports pagination for efficient retrieval of large result sets.
  *
  * @generated from message ai.stigmer.agentic.workflowinstance.v1.GetWorkflowInstancesByWorkflowRequest
@@ -49,24 +47,11 @@ export type GetWorkflowInstancesByWorkflowRequest = Message<"ai.stigmer.agentic.
     /**
      * Workflow template ID to filter by.
      *
-     * Returns all WorkflowInstance resources where spec.workflow_id matches this value.
-     * Format: Workflow resource ID (e.g., "wfl-abc123")
-     * Validation: Required field
-     *
      * @generated from field: string workflow_id = 1;
      */
     workflowId: string;
     /**
-     * Pagination options for controlling result set size and pages.
-     *
-     * Includes:
-     * - page_size: Maximum number of instances per page
-     * - page_token: Token from previous response for next page
-     *
-     * Example pagination flow:
-     * 1. Request with page_info.page_size = 20
-     * 2. Response includes page_token = "next_page_token_here"
-     * 3. Subsequent request with page_info.page_token = "next_page_token_here"
+     * Pagination options for result set control.
      *
      * @generated from field: ai.stigmer.commons.rpc.PageInfo page_info = 2;
      */
@@ -80,19 +65,11 @@ export declare const GetWorkflowInstancesByWorkflowRequestSchema: GenMessage<Get
 /**
  * WorkflowInstanceList contains a paginated list of workflow instances.
  *
- * Returned by list and query operations. Includes pagination metadata
- * to support iterating through large result sets.
- *
  * @generated from message ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceList
  */
 export type WorkflowInstanceList = Message<"ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceList"> & {
     /**
-     * Total number of pages available in the full result set.
-     *
-     * Use this to determine if there are more pages to fetch.
-     * If total_pages > current_page, more results are available.
-     *
-     * Example: If total_pages = 5, you can fetch up to 5 pages of results.
+     * Total number of pages in the result set.
      *
      * @generated from field: int32 total_pages = 1;
      */
@@ -100,14 +77,6 @@ export type WorkflowInstanceList = Message<"ai.stigmer.agentic.workflowinstance.
     /**
      * Workflow instances in the current page.
      *
-     * The number of entries is controlled by the page_size parameter
-     * in the request. May be fewer than page_size on the last page.
-     *
-     * Each entry is a complete WorkflowInstance resource with:
-     * - api_version, kind, metadata
-     * - spec (workflow_id, description, environment_refs)
-     * - status (audit information)
-     *
      * @generated from field: repeated ai.stigmer.agentic.workflowinstance.v1.WorkflowInstance entries = 2;
      */
     entries: WorkflowInstance[];

package/ai/stigmer/agentic/workflowinstance/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,uIAAuI;AACvI,oBAAoB;AAQpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,ogBAAogB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwBxoB;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA4CjE;;;GAGG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAsD,aAAa,CACzH,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAuCjE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,uIAAuI;AACvI,oBAAoB;AAQpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,ogBAAogB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAsBxoB;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA+BjE;;;GAGG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAsD,aAAa,CACzH,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAuBjE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflowinstance/v1/query_connect.d.ts

@@ -1,6 +1,7 @@
 /**
- * WorkflowInstanceQueryController handles read operations (Get, List, Search) for WorkflowInstance resources.
+ * WorkflowInstanceQueryController handles read operations for workflow instances.
  *
+ * @internal
  * This service provides all query operations following the Command-Query Separation pattern.
  * All RPCs that read state without modifying it go through this controller.
  *
@@ -19,17 +20,9 @@ export declare const WorkflowInstanceQueryController: {
         /**
          * Get a single workflow instance by ID.
          *
+         * @internal
          * Retrieves a specific WorkflowInstance using its unique resource identifier.
          *
-         * Input:
-         * WorkflowInstanceId with the instance ID (e.g., "wfi-abc123")
-         *
-         * Returns:
-         * Complete WorkflowInstance resource with:
-         * - api_version, kind, metadata
-         * - spec (workflow_id, description, environment_refs)
-         * - status (audit information: created_at, updated_at, version)
-         *
          * Authorization:
          * Requires "get" permission on the specific WorkflowInstance.
          * Field path "value" extracts the resource ID from WorkflowInstanceId wrapper.
@@ -37,11 +30,6 @@ export declare const WorkflowInstanceQueryController: {
          * - Instance owner scope (organization or identity_account)
          * - User's IAM policies
          *
-         * Use Cases:
-         * - Retrieve instance configuration before executing
-         * - View instance details in UI
-         * - Fetch instance for editing/updating
-         *
          * Error: PERMISSION_DENIED if user lacks get permission
          * Error: NOT_FOUND if instance ID doesn't exist
          *
@@ -54,28 +42,11 @@ export declare const WorkflowInstanceQueryController: {
             readonly kind: any;
         };
         /**
-         * Get all instances of a specific workflow template.
-         *
-         * Retrieves all WorkflowInstance resources that reference a specific Workflow template.
-         * Useful for discovering all configured deployments of a workflow.
-         *
-         * Example Use Case:
-         * Workflow "deploy-to-cloud" (wfl-123) has instances:
-         * - "prod-deploy" (wfi-abc) - Production deployment with aws-prod-env
-         * - "staging-deploy" (wfi-def) - Staging deployment with aws-staging-env
-         * - "dev-deploy" (wfi-ghi) - Development deployment with aws-dev-env
-         *
-         * Input:
-         * GetWorkflowInstancesByWorkflowRequest with:
-         * - workflow_id: Workflow template ID to filter by
-         * - page_info: Pagination settings (page_size, page_token)
+         * Get all workflow instances that use a specific workflow template.
          *
-         * Returns:
-         * WorkflowInstanceList with:
-         * - total_pages: Total number of pages available
-         * - entries: Array of WorkflowInstance resources in current page
+         * Returns a paginated list of instances that reference the given workflow ID.
          *
-         * Authorization:
+         * @internal
          * Authorization is handled in handler via FGA query for authorized workflow_instance_ids,
          * then filtered by workflow_id. This ensures users only see instances they have access to,
          * even if the parent workflow is shared across organizations.
@@ -98,34 +69,16 @@ export declare const WorkflowInstanceQueryController: {
             readonly kind: any;
         };
         /**
-         * Get a workflow instance by flexible reference (ID or slug).
-         *
-         * Retrieves a WorkflowInstance using ApiResourceReference which supports multiple lookup methods:
-         * - By ID: {id: "wfi-abc123"}
-         * - By slug: {slug: "prod-deploy"}
-         * - By name: {name: "Production Deploy"}
-         *
-         * Input:
-         * ApiResourceReference with one of: id, slug, or name
-         *
-         * Returns:
-         * Complete WorkflowInstance resource matching the reference.
-         *
-         * Authorization:
-         * Uses custom authorization logic in the handler.
-         * Allows for flexible authorization based on reference type and context.
-         * Typical checks:
-         * - User has get permission on the resolved instance
-         * - Instance owner scope matches user's organization/identity
+         * Get a workflow instance by reference (ID or slug).
          *
-         * Use Cases:
-         * - User-friendly lookups by slug instead of opaque IDs
-         * - CLI commands using human-readable names
-         * - API integrations using stable slugs
+         * @internal
+         * Custom authorization in handler — checks both direct resource access
+         * and organization-level visibility permissions.
          *
-         * Example:
-         * Input: ApiResourceReference{slug: "prod-deploy"}
-         * Output: WorkflowInstance with metadata.slug = "prod-deploy"
+         * Supports lookup by:
+         * - ID: {id: "wfi_abc123"}
+         * - Slug: {slug: "prod-deploy"}
+         * - Name: {name: "Production Deploy"}
          *
          * Error: PERMISSION_DENIED if user lacks access
          * Error: NOT_FOUND if reference doesn't resolve to an instance

package/ai/stigmer/agentic/workflowinstance/v1/query_connect.js

@@ -4,8 +4,9 @@
 // @ts-nocheck
 import { MethodKind } from "@bufbuild/protobuf";
 /**
- * WorkflowInstanceQueryController handles read operations (Get, List, Search) for WorkflowInstance resources.
+ * WorkflowInstanceQueryController handles read operations for workflow instances.
  *
+ * @internal
  * This service provides all query operations following the Command-Query Separation pattern.
  * All RPCs that read state without modifying it go through this controller.
  *
@@ -24,17 +25,9 @@ export const WorkflowInstanceQueryController = {
         /**
          * Get a single workflow instance by ID.
          *
+         * @internal
          * Retrieves a specific WorkflowInstance using its unique resource identifier.
          *
-         * Input:
-         * WorkflowInstanceId with the instance ID (e.g., "wfi-abc123")
-         *
-         * Returns:
-         * Complete WorkflowInstance resource with:
-         * - api_version, kind, metadata
-         * - spec (workflow_id, description, environment_refs)
-         * - status (audit information: created_at, updated_at, version)
-         *
          * Authorization:
          * Requires "get" permission on the specific WorkflowInstance.
          * Field path "value" extracts the resource ID from WorkflowInstanceId wrapper.
@@ -42,11 +35,6 @@ export const WorkflowInstanceQueryController = {
          * - Instance owner scope (organization or identity_account)
          * - User's IAM policies
          *
-         * Use Cases:
-         * - Retrieve instance configuration before executing
-         * - View instance details in UI
-         * - Fetch instance for editing/updating
-         *
          * Error: PERMISSION_DENIED if user lacks get permission
          * Error: NOT_FOUND if instance ID doesn't exist
          *
@@ -59,28 +47,11 @@ export const WorkflowInstanceQueryController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Get all instances of a specific workflow template.
-         *
-         * Retrieves all WorkflowInstance resources that reference a specific Workflow template.
-         * Useful for discovering all configured deployments of a workflow.
-         *
-         * Example Use Case:
-         * Workflow "deploy-to-cloud" (wfl-123) has instances:
-         * - "prod-deploy" (wfi-abc) - Production deployment with aws-prod-env
-         * - "staging-deploy" (wfi-def) - Staging deployment with aws-staging-env
-         * - "dev-deploy" (wfi-ghi) - Development deployment with aws-dev-env
-         *
-         * Input:
-         * GetWorkflowInstancesByWorkflowRequest with:
-         * - workflow_id: Workflow template ID to filter by
-         * - page_info: Pagination settings (page_size, page_token)
+         * Get all workflow instances that use a specific workflow template.
          *
-         * Returns:
-         * WorkflowInstanceList with:
-         * - total_pages: Total number of pages available
-         * - entries: Array of WorkflowInstance resources in current page
+         * Returns a paginated list of instances that reference the given workflow ID.
          *
-         * Authorization:
+         * @internal
          * Authorization is handled in handler via FGA query for authorized workflow_instance_ids,
          * then filtered by workflow_id. This ensures users only see instances they have access to,
          * even if the parent workflow is shared across organizations.
@@ -103,34 +74,16 @@ export const WorkflowInstanceQueryController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Get a workflow instance by flexible reference (ID or slug).
-         *
-         * Retrieves a WorkflowInstance using ApiResourceReference which supports multiple lookup methods:
-         * - By ID: {id: "wfi-abc123"}
-         * - By slug: {slug: "prod-deploy"}
-         * - By name: {name: "Production Deploy"}
-         *
-         * Input:
-         * ApiResourceReference with one of: id, slug, or name
-         *
-         * Returns:
-         * Complete WorkflowInstance resource matching the reference.
-         *
-         * Authorization:
-         * Uses custom authorization logic in the handler.
-         * Allows for flexible authorization based on reference type and context.
-         * Typical checks:
-         * - User has get permission on the resolved instance
-         * - Instance owner scope matches user's organization/identity
+         * Get a workflow instance by reference (ID or slug).
          *
-         * Use Cases:
-         * - User-friendly lookups by slug instead of opaque IDs
-         * - CLI commands using human-readable names
-         * - API integrations using stable slugs
+         * @internal
+         * Custom authorization in handler — checks both direct resource access
+         * and organization-level visibility permissions.
          *
-         * Example:
-         * Input: ApiResourceReference{slug: "prod-deploy"}
-         * Output: WorkflowInstance with metadata.slug = "prod-deploy"
+         * Supports lookup by:
+         * - ID: {id: "wfi_abc123"}
+         * - Slug: {slug: "prod-deploy"}
+         * - Name: {name: "Production Deploy"}
          *
          * Error: PERMISSION_DENIED if user lacks access
          * Error: NOT_FOUND if reference doesn't resolve to an instance

package/ai/stigmer/agentic/workflowinstance/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAMd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8BG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAqCG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,qCAAqC;YACxC,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAkCG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAMd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;WAiBG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,qCAAqC;YACxC,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/workflowinstance/v1/query_pb.d.ts

@@ -7,8 +7,9 @@ import type { ApiResourceReferenceSchema } from "../../../commons/apiresource/io
  */
 export declare const file_ai_stigmer_agentic_workflowinstance_v1_query: GenFile;
 /**
- * WorkflowInstanceQueryController handles read operations (Get, List, Search) for WorkflowInstance resources.
+ * WorkflowInstanceQueryController handles read operations for workflow instances.
  *
+ * @internal
  * This service provides all query operations following the Command-Query Separation pattern.
  * All RPCs that read state without modifying it go through this controller.
  *
@@ -25,17 +26,9 @@ export declare const WorkflowInstanceQueryController: GenService<{
     /**
      * Get a single workflow instance by ID.
      *
+     * @internal
      * Retrieves a specific WorkflowInstance using its unique resource identifier.
      *
-     * Input:
-     * WorkflowInstanceId with the instance ID (e.g., "wfi-abc123")
-     *
-     * Returns:
-     * Complete WorkflowInstance resource with:
-     * - api_version, kind, metadata
-     * - spec (workflow_id, description, environment_refs)
-     * - status (audit information: created_at, updated_at, version)
-     *
      * Authorization:
      * Requires "get" permission on the specific WorkflowInstance.
      * Field path "value" extracts the resource ID from WorkflowInstanceId wrapper.
@@ -43,11 +36,6 @@ export declare const WorkflowInstanceQueryController: GenService<{
      * - Instance owner scope (organization or identity_account)
      * - User's IAM policies
      *
-     * Use Cases:
-     * - Retrieve instance configuration before executing
-     * - View instance details in UI
-     * - Fetch instance for editing/updating
-     *
      * Error: PERMISSION_DENIED if user lacks get permission
      * Error: NOT_FOUND if instance ID doesn't exist
      *
@@ -59,28 +47,11 @@ export declare const WorkflowInstanceQueryController: GenService<{
         output: typeof WorkflowInstanceSchema;
     };
     /**
-     * Get all instances of a specific workflow template.
-     *
-     * Retrieves all WorkflowInstance resources that reference a specific Workflow template.
-     * Useful for discovering all configured deployments of a workflow.
-     *
-     * Example Use Case:
-     * Workflow "deploy-to-cloud" (wfl-123) has instances:
-     * - "prod-deploy" (wfi-abc) - Production deployment with aws-prod-env
-     * - "staging-deploy" (wfi-def) - Staging deployment with aws-staging-env
-     * - "dev-deploy" (wfi-ghi) - Development deployment with aws-dev-env
-     *
-     * Input:
-     * GetWorkflowInstancesByWorkflowRequest with:
-     * - workflow_id: Workflow template ID to filter by
-     * - page_info: Pagination settings (page_size, page_token)
+     * Get all workflow instances that use a specific workflow template.
      *
-     * Returns:
-     * WorkflowInstanceList with:
-     * - total_pages: Total number of pages available
-     * - entries: Array of WorkflowInstance resources in current page
+     * Returns a paginated list of instances that reference the given workflow ID.
      *
-     * Authorization:
+     * @internal
      * Authorization is handled in handler via FGA query for authorized workflow_instance_ids,
      * then filtered by workflow_id. This ensures users only see instances they have access to,
      * even if the parent workflow is shared across organizations.
@@ -102,34 +73,16 @@ export declare const WorkflowInstanceQueryController: GenService<{
         output: typeof WorkflowInstanceListSchema;
     };
     /**
-     * Get a workflow instance by flexible reference (ID or slug).
-     *
-     * Retrieves a WorkflowInstance using ApiResourceReference which supports multiple lookup methods:
-     * - By ID: {id: "wfi-abc123"}
-     * - By slug: {slug: "prod-deploy"}
-     * - By name: {name: "Production Deploy"}
-     *
-     * Input:
-     * ApiResourceReference with one of: id, slug, or name
-     *
-     * Returns:
-     * Complete WorkflowInstance resource matching the reference.
-     *
-     * Authorization:
-     * Uses custom authorization logic in the handler.
-     * Allows for flexible authorization based on reference type and context.
-     * Typical checks:
-     * - User has get permission on the resolved instance
-     * - Instance owner scope matches user's organization/identity
+     * Get a workflow instance by reference (ID or slug).
      *
-     * Use Cases:
-     * - User-friendly lookups by slug instead of opaque IDs
-     * - CLI commands using human-readable names
-     * - API integrations using stable slugs
+     * @internal
+     * Custom authorization in handler — checks both direct resource access
+     * and organization-level visibility permissions.
      *
-     * Example:
-     * Input: ApiResourceReference{slug: "prod-deploy"}
-     * Output: WorkflowInstance with metadata.slug = "prod-deploy"
+     * Supports lookup by:
+     * - ID: {id: "wfi_abc123"}
+     * - Slug: {slug: "prod-deploy"}
+     * - Name: {name: "Production Deploy"}
      *
      * Error: PERMISSION_DENIED if user lacks access
      * Error: NOT_FOUND if reference doesn't resolve to an instance

package/ai/stigmer/agentic/workflowinstance/v1/query_pb.js

@@ -12,8 +12,9 @@ import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from
  */
 export const file_ai_stigmer_agentic_workflowinstance_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_workflowinstance_v1_api, file_ai_stigmer_agentic_workflowinstance_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options]);
 /**
- * WorkflowInstanceQueryController handles read operations (Get, List, Search) for WorkflowInstance resources.
+ * WorkflowInstanceQueryController handles read operations for workflow instances.
  *
+ * @internal
  * This service provides all query operations following the Command-Query Separation pattern.
  * All RPCs that read state without modifying it go through this controller.
  *

package/ai/stigmer/agentic/workflowinstance/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,0IAA0I;AAC1I,oBAAoB;AAKpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,8CAA8C,EAAE,MAAM,SAAS,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,q0BAAq0B,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAExlC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAwHvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,0IAA0I;AAC1I,oBAAoB;AAKpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,UAAU,CAAC;AAE3E,OAAO,EAAE,8CAA8C,EAAE,MAAM,SAAS,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,q0BAAq0B,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,gEAAgE,CAAC,CAAC,CAAC;AAExlC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAwEvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}