@stigmer/protos 0.0.69 → 0.0.71

package/ai/stigmer/search/v1/query_pb.d.ts

@@ -5,20 +5,26 @@ import type { SearchRequestSchema, SearchResponseSchema } from "./io_pb";
  */
 export declare const file_ai_stigmer_search_v1_query: GenFile;
 /**
- * SearchService provides unified search across all API resources.
+ * SearchService provides unified search and discovery across API resources.
  *
- * This is a CQRS Query Service operating on the read-side of the system.
- * It queries multiple domain aggregates (Agent, Skill, McpServer, Workflow)
- * and returns display-optimized projections. It does not modify state.
+ * A single RPC handles listing, searching, and discovering resources.
+ * The behavior depends on the combination of request parameters:
+ * specify kinds to filter by resource type, provide a query for full-text
+ * search, or leave both empty to list all accessible resources.
+ *
+ * Results only include resources the caller has permission to view.
+ *
+ * @internal
+ * This is a CQRS Query Service on the read-side. It queries multiple domain
+ * aggregates (Agent, Skill, McpServer, Workflow) and returns display-optimized
+ * projections. It does not modify state.
  *
- * Architectural Note:
  * Search is cross-aggregate query infrastructure, not a domain bounded context.
  * It lives in the query layer (CQRS read-side), not the domain layer.
  * Therefore, it does not have an api_resource_kind option like domain services.
  *
- * Authorization Model:
- * Unlike domain services that use declarative authorization options,
- * SearchService handles authorization programmatically in the handler:
+ * Authorization is handled programmatically in the handler (not via
+ * declarative authorization options like domain services):
  * 1. Call FGA to get authorized resource IDs per requested kind
  * 2. Apply filters (org, query, exclude_public) against authorized set
  * 3. Return only resources the caller has can_view permission on
@@ -39,25 +45,25 @@ export declare const SearchService: GenService<{
      * This is the unified entry point for list, search, and discover operations.
      * The behavior is determined by the combination of request parameters:
      *
-     * | Operation | kinds     | query | org     | Behavior                              |
-     * |-----------|-----------|-------|---------|---------------------------------------|
-     * | List      | [X]       | ""    | "acme"  | All X in org, sorted by created_at    |
-     * | List All  | [X]       | ""    | ""      | All accessible X, sorted by created_at|
-     * | Search    | [X]       | "..."  | ""      | Search X by query, sorted by relevance|
-     * | Search Org| [X]       | "..."  | "acme"  | Search X in org, sorted by relevance  |
-     * | Discover  | []        | "..."  | ""      | Search all kinds, sorted by relevance |
+     * | Operation  | kinds   | query | org    | Behavior                               |
+     * |------------|---------|-------|--------|----------------------------------------|
+     * | List       | [X]     | ""    | "acme" | All X in org, sorted by created_at     |
+     * | List All   | [X]     | ""    | ""     | All accessible X, sorted by created_at |
+     * | Search     | [X]     | "..." | ""     | Search X by query, sorted by relevance |
+     * | Search Org | [X]     | "..." | "acme" | Search X in org, sorted by relevance   |
+     * | Discover   | []      | "..." | ""     | Search all kinds, sorted by relevance  |
      *
      * Sort Order:
      * - With query: Results sorted by relevance score (descending)
      * - Without query: Results sorted by created_at (descending, newer first)
      *
-     * Authorization:
-     * Returns only resources the caller has can_view permission on.
-     * The handler queries FGA per kind to get authorized IDs, then applies filters.
-     *
      * Pagination:
      * Use page.num (1-indexed) and page.size to paginate results.
-     * Response includes total_count and total_pages for UI pagination controls.
+     * Response includes total_count and total_pages for pagination controls.
+     *
+     * @internal
+     * Authorization: Returns only resources the caller has can_view permission on.
+     * The handler queries FGA per kind to get authorized IDs, then applies filters.
      *
      * @generated from rpc ai.stigmer.search.v1.SearchService.search
      */

package/ai/stigmer/search/v1/query_pb.js

@@ -9,20 +9,26 @@ import { file_ai_stigmer_search_v1_io } from "./io_pb";
  */
 export const file_ai_stigmer_search_v1_query = /*@__PURE__*/ fileDesc("CiBhaS9zdGlnbWVyL3NlYXJjaC92MS9xdWVyeS5wcm90bxIUYWkuc3RpZ21lci5zZWFyY2gudjEyagoNU2VhcmNoU2VydmljZRJZCgZzZWFyY2gSIy5haS5zdGlnbWVyLnNlYXJjaC52MS5TZWFyY2hSZXF1ZXN0GiQuYWkuc3RpZ21lci5zZWFyY2gudjEuU2VhcmNoUmVzcG9uc2UiBNC4GAFiBnByb3RvMw", [file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options, file_ai_stigmer_search_v1_io]);
 /**
- * SearchService provides unified search across all API resources.
+ * SearchService provides unified search and discovery across API resources.
  *
- * This is a CQRS Query Service operating on the read-side of the system.
- * It queries multiple domain aggregates (Agent, Skill, McpServer, Workflow)
- * and returns display-optimized projections. It does not modify state.
+ * A single RPC handles listing, searching, and discovering resources.
+ * The behavior depends on the combination of request parameters:
+ * specify kinds to filter by resource type, provide a query for full-text
+ * search, or leave both empty to list all accessible resources.
+ *
+ * Results only include resources the caller has permission to view.
+ *
+ * @internal
+ * This is a CQRS Query Service on the read-side. It queries multiple domain
+ * aggregates (Agent, Skill, McpServer, Workflow) and returns display-optimized
+ * projections. It does not modify state.
  *
- * Architectural Note:
  * Search is cross-aggregate query infrastructure, not a domain bounded context.
  * It lives in the query layer (CQRS read-side), not the domain layer.
  * Therefore, it does not have an api_resource_kind option like domain services.
  *
- * Authorization Model:
- * Unlike domain services that use declarative authorization options,
- * SearchService handles authorization programmatically in the handler:
+ * Authorization is handled programmatically in the handler (not via
+ * declarative authorization options like domain services):
  * 1. Call FGA to get authorized resource IDs per requested kind
  * 2. Apply filters (org, query, exclude_public) against authorized set
  * 3. Return only resources the caller has can_view permission on

package/ai/stigmer/search/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,sGAAsG;AACtG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,gEAAgE,EAAE,MAAM,2DAA2D,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAEvD;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAY,aAAa,CACnE,QAAQ,CAAC,wOAAwO,EAAE,CAAC,gEAAgE,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAEvV;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,aAAa,GAkCrB,aAAa,CAChB,WAAW,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,sGAAsG;AACtG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,gEAAgE,EAAE,MAAM,2DAA2D,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAEvD;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAY,aAAa,CACnE,QAAQ,CAAC,wOAAwO,EAAE,CAAC,gEAAgE,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAEvV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,MAAM,aAAa,GAkCrB,aAAa,CAChB,WAAW,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/tenancy/organization/v1/api_pb.d.ts

@@ -9,6 +9,8 @@ import type { Message } from "@bufbuild/protobuf";
 export declare const file_ai_stigmer_tenancy_organization_v1_api: GenFile;
 /**
  * Organization is the top-level container for all Stigmer resources.
+ *
+ * @internal
  * Similar to GitHub organizations, all agents, workflows, sessions, and other
  * resources are scoped under an organization. This enables multi-tenancy and
  * proper resource isolation.
@@ -17,31 +19,31 @@ export declare const file_ai_stigmer_tenancy_organization_v1_api: GenFile;
  */
 export type Organization = Message<"ai.stigmer.tenancy.organization.v1.Organization"> & {
     /**
-     * api-version (tenancy.stigmer.ai/v1)
+     * API version for this resource type.
      *
      * @generated from field: string api_version = 1;
      */
     apiVersion: string;
     /**
-     * resource kind
+     * Resource kind identifier.
      *
      * @generated from field: string kind = 2;
      */
     kind: string;
     /**
-     * metadata
+     * Resource metadata including name, organization, and labels.
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceMetadata metadata = 3;
      */
     metadata?: ApiResourceMetadata;
     /**
-     * spec
+     * Configurable properties: description, logo, and management mode.
      *
      * @generated from field: ai.stigmer.tenancy.organization.v1.OrganizationSpec spec = 4;
      */
     spec?: OrganizationSpec;
     /**
-     * status
+     * System-managed audit state.
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceAuditStatus status = 5;
      */

package/ai/stigmer/tenancy/organization/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/api_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,0CAA0C,CAAC;AAExG,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,4CAA4C,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,whCAAwhC,EAAE,CAAC,4CAA4C,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA+C3sC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/api_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,0CAA0C,CAAC;AAExG,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,4CAA4C,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,whCAAwhC,EAAE,CAAC,4CAA4C,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAiD3sC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/tenancy/organization/v1/command_connect.d.ts

@@ -1,5 +1,5 @@
 /**
- * OrganizationCommandController provides write operations for organizations
+ * OrganizationCommandController handles write operations for organizations.
  *
  * @generated from service ai.stigmer.tenancy.organization.v1.OrganizationCommandController
  */
@@ -8,6 +8,8 @@ export declare const OrganizationCommandController: {
     readonly methods: {
         /**
          * Create or update an organization.
+         *
+         * @internal
          * The authorization and state-operation are determined depending on whether the organization
          * is going to be created or updated which is determined as part of the request execution.
          *
@@ -20,9 +22,11 @@ export declare const OrganizationCommandController: {
             readonly kind: any;
         };
         /**
-         * Create a new organization
-         * No authorization required - any authenticated user can create an organization
-         * The creator automatically becomes the owner of the organization
+         * Create an organization.
+         *
+         * @internal
+         * No authorization required — any authenticated user can create an organization.
+         * The creator automatically becomes the owner of the organization.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.create
          */
@@ -33,8 +37,10 @@ export declare const OrganizationCommandController: {
             readonly kind: any;
         };
         /**
-         * Update an existing organization
-         * Requires: Organization admin permission (can_edit)
+         * Update an existing organization.
+         *
+         * @internal
+         * Authorization: Requires can_edit permission on the organization.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.update
          */
@@ -45,9 +51,11 @@ export declare const OrganizationCommandController: {
             readonly kind: any;
         };
         /**
-         * Delete an organization
-         * Requires: Organization owner permission (can_delete)
-         * Note: This will cascade delete all resources under the organization
+         * Delete an organization.
+         *
+         * @internal
+         * Authorization: Requires can_delete permission on the organization.
+         * This will cascade-delete all resources under the organization.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.delete
          */

package/ai/stigmer/tenancy/organization/v1/command_connect.js

@@ -4,7 +4,7 @@
 // @ts-nocheck
 import { MethodKind } from "@bufbuild/protobuf";
 /**
- * OrganizationCommandController provides write operations for organizations
+ * OrganizationCommandController handles write operations for organizations.
  *
  * @generated from service ai.stigmer.tenancy.organization.v1.OrganizationCommandController
  */
@@ -13,6 +13,8 @@ export const OrganizationCommandController = {
     methods: {
         /**
          * Create or update an organization.
+         *
+         * @internal
          * The authorization and state-operation are determined depending on whether the organization
          * is going to be created or updated which is determined as part of the request execution.
          *
@@ -25,9 +27,11 @@ export const OrganizationCommandController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Create a new organization
-         * No authorization required - any authenticated user can create an organization
-         * The creator automatically becomes the owner of the organization
+         * Create an organization.
+         *
+         * @internal
+         * No authorization required — any authenticated user can create an organization.
+         * The creator automatically becomes the owner of the organization.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.create
          */
@@ -38,8 +42,10 @@ export const OrganizationCommandController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Update an existing organization
-         * Requires: Organization admin permission (can_edit)
+         * Update an existing organization.
+         *
+         * @internal
+         * Authorization: Requires can_edit permission on the organization.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.update
          */
@@ -50,9 +56,11 @@ export const OrganizationCommandController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Delete an organization
-         * Requires: Organization owner permission (can_delete)
-         * Note: This will cascade delete all resources under the organization
+         * Delete an organization.
+         *
+         * @internal
+         * Authorization: Requires can_delete permission on the organization.
+         * This will cascade-delete all resources under the organization.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.delete
          */

package/ai/stigmer/tenancy/organization/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,oIAAoI;AACpI,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;WAMG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/command_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,oIAAoI;AACpI,oBAAoB;AACpB,cAAc;AAGd,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/tenancy/organization/v1/command_pb.d.ts

@@ -6,13 +6,15 @@ import type { OrganizationIdSchema } from "./io_pb";
  */
 export declare const file_ai_stigmer_tenancy_organization_v1_command: GenFile;
 /**
- * OrganizationCommandController provides write operations for organizations
+ * OrganizationCommandController handles write operations for organizations.
  *
  * @generated from service ai.stigmer.tenancy.organization.v1.OrganizationCommandController
  */
 export declare const OrganizationCommandController: GenService<{
     /**
      * Create or update an organization.
+     *
+     * @internal
      * The authorization and state-operation are determined depending on whether the organization
      * is going to be created or updated which is determined as part of the request execution.
      *
@@ -24,9 +26,11 @@ export declare const OrganizationCommandController: GenService<{
         output: typeof OrganizationSchema;
     };
     /**
-     * Create a new organization
-     * No authorization required - any authenticated user can create an organization
-     * The creator automatically becomes the owner of the organization
+     * Create an organization.
+     *
+     * @internal
+     * No authorization required — any authenticated user can create an organization.
+     * The creator automatically becomes the owner of the organization.
      *
      * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.create
      */
@@ -36,8 +40,10 @@ export declare const OrganizationCommandController: GenService<{
         output: typeof OrganizationSchema;
     };
     /**
-     * Update an existing organization
-     * Requires: Organization admin permission (can_edit)
+     * Update an existing organization.
+     *
+     * @internal
+     * Authorization: Requires can_edit permission on the organization.
      *
      * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.update
      */
@@ -47,9 +53,11 @@ export declare const OrganizationCommandController: GenService<{
         output: typeof OrganizationSchema;
     };
     /**
-     * Delete an organization
-     * Requires: Organization owner permission (can_delete)
-     * Note: This will cascade delete all resources under the organization
+     * Delete an organization.
+     *
+     * @internal
+     * Authorization: Requires can_delete permission on the organization.
+     * This will cascade-delete all resources under the organization.
      *
      * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.delete
      */

package/ai/stigmer/tenancy/organization/v1/command_pb.js

@@ -11,7 +11,7 @@ import { file_ai_stigmer_tenancy_organization_v1_io } from "./io_pb";
  */
 export const file_ai_stigmer_tenancy_organization_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options, file_ai_stigmer_tenancy_organization_v1_api, file_ai_stigmer_tenancy_organization_v1_io]);
 /**
- * OrganizationCommandController provides write operations for organizations
+ * OrganizationCommandController handles write operations for organizations.
  *
  * @generated from service ai.stigmer.tenancy.organization.v1.OrganizationCommandController
  */

package/ai/stigmer/tenancy/organization/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ,OAAO,EAAE,2CAA2C,EAAE,MAAM,UAAU,CAAC;AAEvE,OAAO,EAAE,0CAA0C,EAAE,MAAM,SAAS,CAAC;AAErE;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,o6BAAo6B,EAAE,CAAC,uDAAuD,EAAE,gEAAgE,EAAE,2CAA2C,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEvoC;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAgDrC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/command_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAC9H,OAAO,EAAE,gEAAgE,EAAE,MAAM,8DAA8D,CAAC;AAEhJ,OAAO,EAAE,2CAA2C,EAAE,MAAM,UAAU,CAAC;AAEvE,OAAO,EAAE,0CAA0C,EAAE,MAAM,SAAS,CAAC;AAErE;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,o6BAAo6B,EAAE,CAAC,uDAAuD,EAAE,gEAAgE,EAAE,2CAA2C,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEvoC;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAwDrC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/tenancy/organization/v1/enum_pb.d.ts

@@ -6,12 +6,12 @@ export declare const file_ai_stigmer_tenancy_organization_v1_enum: GenFile;
 /**
  * ManagementMode defines how an organization is operated.
  *
+ * @internal
+ * Immutable after organization creation.
  * - self_managed: User signed up directly, manages the org via Stigmer UI/CLI/API.
  * - platform_managed: Created programmatically by an external platform (e.g., Planton Cloud)
  *   via an IdentityProvider. Operated by the platform on behalf of its users.
  *
- * This field is immutable after organization creation.
- *
  * @generated from enum ai.stigmer.tenancy.organization.v1.ManagementMode
  */
 export declare enum ManagementMode {
@@ -20,10 +20,14 @@ export declare enum ManagementMode {
      */
     management_mode_unspecified = 0,
     /**
+     * Organization created and operated directly by users via Stigmer UI, CLI, or API.
+     *
      * @generated from enum value: self_managed = 1;
      */
     self_managed = 1,
     /**
+     * Organization created programmatically by an external platform via an IdentityProvider.
+     *
      * @generated from enum value: platform_managed = 2;
      */
     platform_managed = 2

package/ai/stigmer/tenancy/organization/v1/enum_pb.js

@@ -9,12 +9,12 @@ export const file_ai_stigmer_tenancy_organization_v1_enum = /*@__PURE__*/ fileDe
 /**
  * ManagementMode defines how an organization is operated.
  *
+ * @internal
+ * Immutable after organization creation.
  * - self_managed: User signed up directly, manages the org via Stigmer UI/CLI/API.
  * - platform_managed: Created programmatically by an external platform (e.g., Planton Cloud)
  *   via an IdentityProvider. Operated by the platform on behalf of its users.
  *
- * This field is immutable after organization creation.
- *
  * @generated from enum ai.stigmer.tenancy.organization.v1.ManagementMode
  */
 export var ManagementMode;
@@ -24,10 +24,14 @@ export var ManagementMode;
      */
     ManagementMode[ManagementMode["management_mode_unspecified"] = 0] = "management_mode_unspecified";
     /**
+     * Organization created and operated directly by users via Stigmer UI, CLI, or API.
+     *
      * @generated from enum value: self_managed = 1;
      */
     ManagementMode[ManagementMode["self_managed"] = 1] = "self_managed";
     /**
+     * Organization created programmatically by an external platform via an IdentityProvider.
+     *
      * @generated from enum value: platform_managed = 2;
      */
     ManagementMode[ManagementMode["platform_managed"] = 2] = "platform_managed";

package/ai/stigmer/tenancy/organization/v1/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,qPAAqP,CAAC,CAAC;AAElQ;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,cAeX;AAfD,WAAY,cAAc;IACxB;;OAEG;IACH,iGAA+B,CAAA;IAE/B;;OAEG;IACH,mEAAgB,CAAA;IAEhB;;OAEG;IACH,2EAAoB,CAAA;AACtB,CAAC,EAfW,cAAc,KAAd,cAAc,QAezB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,qPAAqP,CAAC,CAAC;AAElQ;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,cAmBX;AAnBD,WAAY,cAAc;IACxB;;OAEG;IACH,iGAA+B,CAAA;IAE/B;;;;OAIG;IACH,mEAAgB,CAAA;IAEhB;;;;OAIG;IACH,2EAAoB,CAAA;AACtB,CAAC,EAnBW,cAAc,KAAd,cAAc,QAmBzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/tenancy/organization/v1/io_pb.d.ts

@@ -7,12 +7,14 @@ import type { Message } from "@bufbuild/protobuf";
  */
 export declare const file_ai_stigmer_tenancy_organization_v1_io: GenFile;
 /**
- * List of organizations (unbounded)
+ * List of organizations.
  *
  * @generated from message ai.stigmer.tenancy.organization.v1.Organizations
  */
 export type Organizations = Message<"ai.stigmer.tenancy.organization.v1.Organizations"> & {
     /**
+     * Organization resources in this list.
+     *
      * @generated from field: repeated ai.stigmer.tenancy.organization.v1.Organization entries = 1;
      */
     entries: Organization[];
@@ -23,19 +25,19 @@ export type Organizations = Message<"ai.stigmer.tenancy.organization.v1.Organiza
  */
 export declare const OrganizationsSchema: GenMessage<Organizations>;
 /**
- * Response for paginated list query
+ * Response for a paginated organization list query.
  *
  * @generated from message ai.stigmer.tenancy.organization.v1.OrganizationList
  */
 export type OrganizationList = Message<"ai.stigmer.tenancy.organization.v1.OrganizationList"> & {
     /**
-     * total number of pages
+     * Total number of pages.
      *
      * @generated from field: int32 total_pages = 1;
      */
     totalPages: number;
     /**
-     * organizations in current page
+     * Organizations in the current page.
      *
      * @generated from field: repeated ai.stigmer.tenancy.organization.v1.Organization entries = 2;
      */
@@ -47,13 +49,13 @@ export type OrganizationList = Message<"ai.stigmer.tenancy.organization.v1.Organ
  */
 export declare const OrganizationListSchema: GenMessage<OrganizationList>;
 /**
- * Wrapper for organization id
+ * OrganizationId wraps an organization identifier.
  *
  * @generated from message ai.stigmer.tenancy.organization.v1.OrganizationId
  */
 export type OrganizationId = Message<"ai.stigmer.tenancy.organization.v1.OrganizationId"> & {
     /**
-     * organization id (UUID format)
+     * Organization identifier.
      *
      * @generated from field: string value = 1;
      */

package/ai/stigmer/tenancy/organization/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAE5F,OAAO,EAAE,2CAA2C,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,soBAAsoB,EAAE,CAAC,sCAAsC,EAAE,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AActwB;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAuB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAgB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAwB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAE5F,OAAO,EAAE,2CAA2C,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,soBAAsoB,EAAE,CAAC,sCAAsC,EAAE,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgBtwB;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAuB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAgB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAwB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/tenancy/organization/v1/query_connect.d.ts

@@ -1,5 +1,5 @@
 /**
- * OrganizationQueryController provides read operations for organizations
+ * OrganizationQueryController handles read operations for organizations.
  *
  * @generated from service ai.stigmer.tenancy.organization.v1.OrganizationQueryController
  */
@@ -7,8 +7,10 @@ export declare const OrganizationQueryController: {
     readonly typeName: "ai.stigmer.tenancy.organization.v1.OrganizationQueryController";
     readonly methods: {
         /**
-         * Get an organization by ID
-         * Requires: User must be a member of the organization (can_view)
+         * Get an organization by ID.
+         *
+         * @internal
+         * Authorization: Requires can_view permission on the organization.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.get
          */
@@ -19,9 +21,10 @@ export declare const OrganizationQueryController: {
             readonly kind: any;
         };
         /**
-         * Find organizations with pagination and filtering
-         * Requires: Platform admin permission
-         * This is for administrative purposes only
+         * List organizations with pagination and filtering.
+         *
+         * @internal
+         * Authorization: Requires platform admin permission. Administrative use only.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.find
          */
@@ -32,9 +35,11 @@ export declare const OrganizationQueryController: {
             readonly kind: any;
         };
         /**
-         * Find organizations the authenticated user is a member of
-         * Authorization handled in handler via IAM Policy listAuthorizedResourceIds
-         * Returns only organizations the caller has access to
+         * Find organizations the authenticated user is a member of.
+         * Returns only organizations the caller has access to.
+         *
+         * @internal
+         * Authorization handled in handler via IAM Policy listAuthorizedResourceIds.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.findMyOrganizations
          */
@@ -47,6 +52,8 @@ export declare const OrganizationQueryController: {
         /**
          * Look up a platform-managed organization by its external platform coordinates.
          * Returns the Stigmer organization mapped to the given IdentityProvider + external org ID.
+         *
+         * @internal
          * Authorization: custom — checks can_view on the referenced IdentityProvider.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.getByExternalOrgId

package/ai/stigmer/tenancy/organization/v1/query_connect.js

@@ -4,7 +4,7 @@
 // @ts-nocheck
 import { Empty, MethodKind } from "@bufbuild/protobuf";
 /**
- * OrganizationQueryController provides read operations for organizations
+ * OrganizationQueryController handles read operations for organizations.
  *
  * @generated from service ai.stigmer.tenancy.organization.v1.OrganizationQueryController
  */
@@ -12,8 +12,10 @@ export const OrganizationQueryController = {
     typeName: "ai.stigmer.tenancy.organization.v1.OrganizationQueryController",
     methods: {
         /**
-         * Get an organization by ID
-         * Requires: User must be a member of the organization (can_view)
+         * Get an organization by ID.
+         *
+         * @internal
+         * Authorization: Requires can_view permission on the organization.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.get
          */
@@ -24,9 +26,10 @@ export const OrganizationQueryController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Find organizations with pagination and filtering
-         * Requires: Platform admin permission
-         * This is for administrative purposes only
+         * List organizations with pagination and filtering.
+         *
+         * @internal
+         * Authorization: Requires platform admin permission. Administrative use only.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.find
          */
@@ -37,9 +40,11 @@ export const OrganizationQueryController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Find organizations the authenticated user is a member of
-         * Authorization handled in handler via IAM Policy listAuthorizedResourceIds
-         * Returns only organizations the caller has access to
+         * Find organizations the authenticated user is a member of.
+         * Returns only organizations the caller has access to.
+         *
+         * @internal
+         * Authorization handled in handler via IAM Policy listAuthorizedResourceIds.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.findMyOrganizations
          */
@@ -52,6 +57,8 @@ export const OrganizationQueryController = {
         /**
          * Look up a platform-managed organization by its external platform coordinates.
          * Returns the Stigmer organization mapped to the given IdentityProvider + external org ID.
+         *
+         * @internal
          * Authorization: custom — checks can_view on the referenced IdentityProvider.
          *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.getByExternalOrgId

package/ai/stigmer/tenancy/organization/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,kIAAkI;AAClI,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;;WAKG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,kIAAkI;AAClI,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}