@stigmer/protos 1.0.3 → 2.0.0

package/ai/stigmer/agentic/session/v1/enum_pb.js

@@ -5,7 +5,7 @@ import { enumDesc, fileDesc } from "@bufbuild/protobuf/codegenv1";
 /**
  * Describes the file ai/stigmer/agentic/session/v1/enum.proto.
  */
-export const file_ai_stigmer_agentic_session_v1_enum = /*@__PURE__*/ fileDesc("CihhaS9zdGlnbWVyL2FnZW50aWMvc2Vzc2lvbi92MS9lbnVtLnByb3RvEh1haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MSpZChBHaXRXcml0ZUJhY2tNb2RlEiMKH0dJVF9XUklURV9CQUNLX01PREVfVU5TUEVDSUZJRUQQABIgChxHSVRfV1JJVEVfQkFDS19CUkFOQ0hfQU5EX1BSEAEqSgoHSGFybmVzcxIXChNIQVJORVNTX1VOU1BFQ0lGSUVEEAASEgoOSEFSTkVTU19OQVRJVkUQARISCg5IQVJORVNTX0NVUlNPUhACKlcKCkN1cnNvck1vZGUSGwoXQ1VSU09SX01PREVfVU5TUEVDSUZJRUQQABIVChFDVVJTT1JfTU9ERV9MT0NBTBABEhUKEUNVUlNPUl9NT0RFX0NMT1VEEAJiBnByb3RvMw");
+export const file_ai_stigmer_agentic_session_v1_enum = /*@__PURE__*/ fileDesc("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");
 /**
  * GitWriteBackMode controls the platform's git workflow for a git-backed workspace entry.
  *
@@ -92,6 +92,57 @@ export var Harness;
  * Describes the enum ai.stigmer.agentic.session.v1.Harness.
  */
 export const HarnessSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_session_v1_enum, 1);
+/**
+ * ExecutionTarget specifies where session activities are executed.
+ *
+ * Determines whether the runner that processes agent activities lives on the
+ * client's machine (desktop app or CLI) or in a cloud-provisioned sandbox.
+ * Set at session creation time and immutable once an execution has run —
+ * workspace state may not be portable between local and cloud environments.
+ *
+ * @internal
+ * The control plane uses this field in dispatch to decide whether to route
+ * activities to a client-polled per-session queue (LOCAL) or provision a
+ * cloud sandbox (CLOUD). Both use task queues named "session:{session_id}".
+ * The difference is who provides the runner: the client (LOCAL) or the
+ * server (CLOUD).
+ *
+ * @generated from enum ai.stigmer.agentic.session.v1.ExecutionTarget
+ */
+export var ExecutionTarget;
+(function (ExecutionTarget) {
+    /**
+     * Platform default — server decides based on deployment context.
+     *
+     * @internal
+     * Resolves to LOCAL for OSS/self-hosted, CLOUD for managed cloud service.
+     *
+     * @generated from enum value: EXECUTION_TARGET_UNSPECIFIED = 0;
+     */
+    ExecutionTarget[ExecutionTarget["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * Client's embedded runner handles activities.
+     *
+     * Desktop app or CLI spawns a local runner process that polls the
+     * session's task queue. No server-side provisioning needed.
+     *
+     * @generated from enum value: EXECUTION_TARGET_LOCAL = 1;
+     */
+    ExecutionTarget[ExecutionTarget["LOCAL"] = 1] = "LOCAL";
+    /**
+     * Server provisions a cloud sandbox for execution.
+     *
+     * The control plane triggers EnsureSessionSandbox to create an isolated
+     * environment with a runner polling the session's task queue.
+     *
+     * @generated from enum value: EXECUTION_TARGET_CLOUD = 2;
+     */
+    ExecutionTarget[ExecutionTarget["CLOUD"] = 2] = "CLOUD";
+})(ExecutionTarget || (ExecutionTarget = {}));
+/**
+ * Describes the enum ai.stigmer.agentic.session.v1.ExecutionTarget.
+ */
+export const ExecutionTargetSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_session_v1_enum, 2);
 /**
  * CursorMode selects the Cursor SDK agent type for sessions using
  * HARNESS_CURSOR.
@@ -150,5 +201,5 @@ export var CursorMode;
 /**
  * Describes the enum ai.stigmer.agentic.session.v1.CursorMode.
  */
-export const CursorModeSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_session_v1_enum, 2);
+export const CursorModeSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_session_v1_enum, 3);
 //# sourceMappingURL=enum_pb.js.map

package/ai/stigmer/agentic/session/v1/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uHAAuH;AACvH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,ocAAoc,CAAC,CAAC;AAEjd;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,gBAyBX;AAzBD,WAAY,gBAAgB;IAC1B;;;;;;;;OAQG;IACH,6GAAmC,CAAA;IAEnC;;;;;;;;;;;OAWG;IACH,uGAAgC,CAAA;AAClC,CAAC,EAzBW,gBAAgB,KAAhB,gBAAgB,QAyB3B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA8B,aAAa,CAC5E,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAN,IAAY,OA2BX;AA3BD,WAAY,OAAO;IACjB;;;;OAIG;IACH,mDAAe,CAAA;IAEf;;;;;;;OAOG;IACH,yCAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yCAAU,CAAA;AACZ,CAAC,EA3BW,OAAO,KAAP,OAAO,QA2BlB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB,aAAa,CAC1D,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAN,IAAY,UAgCX;AAhCD,WAAY,UAAU;IACpB;;;;;OAKG;IACH,yDAAe,CAAA;IAEf;;;;;;;;;OASG;IACH,6CAAS,CAAA;IAET;;;;;;;;;OASG;IACH,6CAAS,CAAA;AACX,CAAC,EAhCW,UAAU,KAAV,UAAU,QAgCrB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwB,aAAa,CAChE,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uHAAuH;AACvH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,qlBAAqlB,CAAC,CAAC;AAElmB;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,gBAyBX;AAzBD,WAAY,gBAAgB;IAC1B;;;;;;;;OAQG;IACH,6GAAmC,CAAA;IAEnC;;;;;;;;;;;OAWG;IACH,uGAAgC,CAAA;AAClC,CAAC,EAzBW,gBAAgB,KAAhB,gBAAgB,QAyB3B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA8B,aAAa,CAC5E,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAN,IAAY,OA2BX;AA3BD,WAAY,OAAO;IACjB;;;;OAIG;IACH,mDAAe,CAAA;IAEf;;;;;;;OAOG;IACH,yCAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yCAAU,CAAA;AACZ,CAAC,EA3BW,OAAO,KAAP,OAAO,QA2BlB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB,aAAa,CAC1D,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAN,IAAY,eA8BX;AA9BD,WAAY,eAAe;IACzB;;;;;;;OAOG;IACH,mEAAe,CAAA;IAEf;;;;;;;OAOG;IACH,uDAAS,CAAA;IAET;;;;;;;OAOG;IACH,uDAAS,CAAA;AACX,CAAC,EA9BW,eAAe,KAAf,eAAe,QA8B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAN,IAAY,UAgCX;AAhCD,WAAY,UAAU;IACpB;;;;;OAKG;IACH,yDAAe,CAAA;IAEf;;;;;;;;;OASG;IACH,6CAAS,CAAA;IAET;;;;;;;;;OASG;IACH,6CAAS,CAAA;AACX,CAAC,EAhCW,UAAU,KAAV,UAAU,QAgCrB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwB,aAAa,CAChE,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/spec_pb.d.ts

@@ -1,6 +1,6 @@
 import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
 import type { McpServerUsage } from "../../agent/v1/spec_pb.js";
-import type { CursorMode, Harness } from "./enum_pb.js";
+import type { CursorMode, ExecutionTarget, Harness } from "./enum_pb.js";
 import type { WorkspaceEntry } from "./workspace_pb.js";
 import type { ApiResourceReference } from "../../../commons/apiresource/io_pb.js";
 import type { Message } from "@bufbuild/protobuf";
@@ -36,24 +36,27 @@ export type SessionSpec = Message<"ai.stigmer.agentic.session.v1.SessionSpec"> &
      */
     subject: string;
     /**
-     * Thread ID that carries the conversation history across executions.
+     * Harness-specific state identifier for conversation continuity.
      *
-     * @internal
-     * Generated on first execution, persists across all executions.
+     * Populated after the first execution completes; empty until then.
+     * Each harness uses this field differently:
      *
-     * @generated from field: string thread_id = 3;
-     */
-    threadId: string;
-    /**
-     * Deprecated: sandbox lifecycle is now managed at the Runner level via
-     * the stigmer.ai/sandbox-id metadata label on the Runner resource.
-     * Existing sessions may still have this field populated; new sessions
-     * should not set it.
+     * - NATIVE: LangGraph thread ID, derived deterministically as
+     *   "thread-{session_id}" by the EnsureThread activity. Stored here
+     *   so the immutability sentinel works uniformly across harnesses.
+     *
+     * - CURSOR: Cursor SDK agent ID (e.g., "agent-xxx" or "bc-xxx")
+     *   returned by Agent.create(). Used for Agent.resume() on
+     *   subsequent executions.
+     *
+     * @internal
+     * Also serves as the immutability sentinel: when non-empty, the
+     * session's harness and cursor_mode cannot be changed — each harness
+     * owns its conversation state independently.
      *
-     * @generated from field: string sandbox_id = 4 [deprecated = true];
-     * @deprecated
+     * @generated from field: string harness_state_id = 3;
      */
-    sandboxId: string;
+    harnessStateId: string;
     /**
      * Custom key-value pairs for client-specific information.
      *
@@ -91,25 +94,6 @@ export type SessionSpec = Message<"ai.stigmer.agentic.session.v1.SessionSpec"> &
      * @generated from field: repeated ai.stigmer.agentic.agent.v1.McpServerUsage mcp_server_usages = 7;
      */
     mcpServerUsages: McpServerUsage[];
-    /**
-     * Runner that executes work for this session.
-     *
-     * When set, all executions in this session route to this runner's task queue.
-     * When empty, the platform auto-creates an ephemeral cloud runner on first
-     * execution and sets this field.
-     *
-     * For persistent runners (user-created via CLI/desktop), this is set by the
-     * session composer when the user picks their runner. For cloud executions,
-     * this is set automatically by the system.
-     *
-     * @internal
-     * The execution workflow reads this field to resolve the Temporal task queue
-     * for scheduling activities. When empty, the workflow calls the
-     * RunnerLauncher to spawn an ephemeral runner and populates this field.
-     *
-     * @generated from field: string runner_id = 9;
-     */
-    runnerId: string;
     /**
      * Skills to inject into this session's context.
      *
@@ -128,7 +112,7 @@ export type SessionSpec = Message<"ai.stigmer.agentic.session.v1.SessionSpec"> &
      *
      * Determines which Temporal activity type is dispatched when an
      * AgentExecution is created in this session:
-     * - NATIVE (default): ExecuteGraphton activity -> Stigmer native worker
+     * - NATIVE (default): ExecuteDeepAgent activity -> Stigmer unified runner
      * - CURSOR: ExecuteCursor activity -> TypeScript/Cursor SDK worker
      *
      * The harness affects which tools the agent has, how conversation state
@@ -163,6 +147,24 @@ export type SessionSpec = Message<"ai.stigmer.agentic.session.v1.SessionSpec"> &
      * @generated from field: ai.stigmer.agentic.session.v1.CursorMode cursor_mode = 11;
      */
     cursorMode: CursorMode;
+    /**
+     * Where session activities are executed — local client or cloud sandbox.
+     *
+     * Determines dispatch routing: LOCAL means the client's embedded runner
+     * (desktop app or CLI) polls the session's task queue; CLOUD means the
+     * server provisions a sandbox with a runner.
+     *
+     * Set by the client at session creation:
+     * - Desktop/CLI set LOCAL (they run an embedded runner)
+     * - Web console sets CLOUD (or UNSPECIFIED → server defaults to CLOUD)
+     * - Customer SDK sets whatever fits their architecture
+     *
+     * Immutable once an execution has run — workspace state may not be
+     * portable between local and cloud environments.
+     *
+     * @generated from field: ai.stigmer.agentic.session.v1.ExecutionTarget execution_target = 12;
+     */
+    executionTarget: ExecutionTarget;
 };
 /**
  * Describes the message ai.stigmer.agentic.session.v1.SessionSpec.

package/ai/stigmer/agentic/session/v1/spec_pb.js

@@ -11,7 +11,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/session/v1/spec.proto.
  */
-export const file_ai_stigmer_agentic_session_v1_spec = /*@__PURE__*/ fileDesc("CihhaS9zdGlnbWVyL2FnZW50aWMvc2Vzc2lvbi92MS9zcGVjLnByb3RvEh1haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MSLOBgoLU2Vzc2lvblNwZWMSGQoRYWdlbnRfaW5zdGFuY2VfaWQYASABKAkSDwoHc3ViamVjdBgCIAEoCRIRCgl0aHJlYWRfaWQYAyABKAkSFgoKc2FuZGJveF9pZBgEIAEoCUICGAESSgoIbWV0YWRhdGEYBSADKAsyOC5haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MS5TZXNzaW9uU3BlYy5NZXRhZGF0YUVudHJ5EkgKEXdvcmtzcGFjZV9lbnRyaWVzGAYgAygLMi0uYWkuc3RpZ21lci5hZ2VudGljLnNlc3Npb24udjEuV29ya3NwYWNlRW50cnkS2QEKEW1jcF9zZXJ2ZXJfdXNhZ2VzGAcgAygLMisuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50LnYxLk1jcFNlcnZlclVzYWdlQpABukiMAZIBiAEihQG6AYEBCh5zZXNzaW9uX21jcF9zZXJ2ZXJfdXNhZ2VzLmtpbmQSP21jcF9zZXJ2ZXJfdXNhZ2VzIG11c3QgcmVmZXJlbmNlIHJlc291cmNlcyB3aXRoIGtpbmQ9bWNwX3NlcnZlchoedGhpcy5tY3Bfc2VydmVyX3JlZi5raW5kID09IDQ0EhEKCXJ1bm5lcl9pZBgJIAEoCRK4AQoKc2tpbGxfcmVmcxgIIAMoCzI0LmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZVJlZmVyZW5jZUJuukhnkgFkImK6AV8KF3Nlc3Npb25fc2tpbGxfcmVmcy5raW5kEjNza2lsbF9yZWZzIG11c3QgcmVmZXJlbmNlIHJlc291cmNlcyB3aXRoIGtpbmQ9c2tpbGwaD3RoaXMua2luZCA9PSA0M+CFLCsSNwoHaGFybmVzcxgKIAEoDjImLmFpLnN0aWdtZXIuYWdlbnRpYy5zZXNzaW9uLnYxLkhhcm5lc3MSPgoLY3Vyc29yX21vZGUYCyABKA4yKS5haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MS5DdXJzb3JNb2RlGi8KDU1ldGFkYXRhRW50cnkSCwoDa2V5GAEgASgJEg0KBXZhbHVlGAIgASgJOgI4AWIGcHJvdG8z", [file_ai_stigmer_agentic_agent_v1_spec, file_ai_stigmer_agentic_session_v1_enum, file_ai_stigmer_agentic_session_v1_workspace, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_session_v1_spec = /*@__PURE__*/ fileDesc("CihhaS9zdGlnbWVyL2FnZW50aWMvc2Vzc2lvbi92MS9zcGVjLnByb3RvEh1haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MSL0BgoLU2Vzc2lvblNwZWMSGQoRYWdlbnRfaW5zdGFuY2VfaWQYASABKAkSDwoHc3ViamVjdBgCIAEoCRIYChBoYXJuZXNzX3N0YXRlX2lkGAMgASgJEkoKCG1ldGFkYXRhGAUgAygLMjguYWkuc3RpZ21lci5hZ2VudGljLnNlc3Npb24udjEuU2Vzc2lvblNwZWMuTWV0YWRhdGFFbnRyeRJIChF3b3Jrc3BhY2VfZW50cmllcxgGIAMoCzItLmFpLnN0aWdtZXIuYWdlbnRpYy5zZXNzaW9uLnYxLldvcmtzcGFjZUVudHJ5EtkBChFtY3Bfc2VydmVyX3VzYWdlcxgHIAMoCzIrLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudC52MS5NY3BTZXJ2ZXJVc2FnZUKQAbpIjAGSAYgBIoUBugGBAQoec2Vzc2lvbl9tY3Bfc2VydmVyX3VzYWdlcy5raW5kEj9tY3Bfc2VydmVyX3VzYWdlcyBtdXN0IHJlZmVyZW5jZSByZXNvdXJjZXMgd2l0aCBraW5kPW1jcF9zZXJ2ZXIaHnRoaXMubWNwX3NlcnZlcl9yZWYua2luZCA9PSA0NBK4AQoKc2tpbGxfcmVmcxgIIAMoCzI0LmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZVJlZmVyZW5jZUJuukhnkgFkImK6AV8KF3Nlc3Npb25fc2tpbGxfcmVmcy5raW5kEjNza2lsbF9yZWZzIG11c3QgcmVmZXJlbmNlIHJlc291cmNlcyB3aXRoIGtpbmQ9c2tpbGwaD3RoaXMua2luZCA9PSA0M+CFLCsSNwoHaGFybmVzcxgKIAEoDjImLmFpLnN0aWdtZXIuYWdlbnRpYy5zZXNzaW9uLnYxLkhhcm5lc3MSPgoLY3Vyc29yX21vZGUYCyABKA4yKS5haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MS5DdXJzb3JNb2RlEkgKEGV4ZWN1dGlvbl90YXJnZXQYDCABKA4yLi5haS5zdGlnbWVyLmFnZW50aWMuc2Vzc2lvbi52MS5FeGVjdXRpb25UYXJnZXQaLwoNTWV0YWRhdGFFbnRyeRILCgNrZXkYASABKAkSDQoFdmFsdWUYAiABKAk6AjgBYgZwcm90bzM", [file_ai_stigmer_agentic_agent_v1_spec, file_ai_stigmer_agentic_session_v1_enum, file_ai_stigmer_agentic_session_v1_workspace, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.session.v1.SessionSpec.
  * Use `create(SessionSpecSchema)` to create a new message.

package/ai/stigmer/agentic/session/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uHAAuH;AACvH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,2BAA2B,CAAC;AAElF,OAAO,EAAE,uCAAuC,EAAE,MAAM,cAAc,CAAC;AAEvE,OAAO,EAAE,4CAA4C,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,0tCAA0tC,EAAE,CAAC,qCAAqC,EAAE,uCAAuC,EAAE,4CAA4C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuK99C;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uHAAuH;AACvH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,2BAA2B,CAAC;AAElF,OAAO,EAAE,uCAAuC,EAAE,MAAM,cAAc,CAAC;AAEvE,OAAO,EAAE,4CAA4C,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,6wCAA6wC,EAAE,CAAC,qCAAqC,EAAE,uCAAuC,EAAE,4CAA4C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwKjhD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflow/v1/command_connect.d.ts

@@ -48,6 +48,28 @@ export declare const WorkflowCommandController: {
             readonly O: any;
             readonly kind: any;
         };
+        /**
+         * Update the visibility of an existing workflow.
+         *
+         * This is a targeted metadata update — it only modifies metadata.visibility,
+         * leaving spec, status, and other metadata fields untouched. Use this to
+         * make a workflow publicly accessible or to revoke public access without
+         * sending the entire workflow resource (avoiding read-modify-write races).
+         *
+         * @internal
+         * Authorization: Requires can_edit permission on the workflow resource.
+         * Visibility transitions trigger FGA tuple management in Cloud mode:
+         * - PRIVATE → PUBLIC: creates workflow#viewer@identity_account:* tuple
+         * - PUBLIC → PRIVATE: deletes the wildcard viewer tuple
+         *
+         * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.updateVisibility
+         */
+        readonly updateVisibility: {
+            readonly name: "updateVisibility";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
         /**
          * Delete a workflow.
          *
@@ -89,5 +111,27 @@ export declare const WorkflowCommandController: {
             readonly O: any;
             readonly kind: any;
         };
+        /**
+         * Assign or move a tag to a specific workflow version.
+         *
+         * Tags are human-readable pointers to immutable versions. Calling this
+         * with an existing tag name moves it from the previous version to the
+         * specified version. Common tags: "stable", "production", "v2.0".
+         *
+         * @internal
+         * Authorization: Requires can_edit permission on the workflow resource.
+         * The handler validates that the version_hash exists in the workflow's
+         * audit history before assigning the tag.
+         *
+         * @since Workflow Versioning
+         *
+         * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.tagVersion
+         */
+        readonly tagVersion: {
+            readonly name: "tagVersion";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
     };
 };

package/ai/stigmer/agentic/workflow/v1/command_connect.js

@@ -4,8 +4,10 @@
 // @ts-nocheck
 import { Workflow } from "./api_pbjs";
 import { MethodKind } from "@bufbuild/protobuf";
+import { UpdateVisibilityInput } from "../../../commons/apiresource/io_pbjs";
 import { WorkflowId } from "./io_pbjs";
 import { ServerlessWorkflowValidation } from "./serverless/validation_pbjs";
+import { TagWorkflowVersionInput } from "./version_pbjs";
 /**
  * WorkflowCommandController handles write operations for workflows.
  *
@@ -56,6 +58,28 @@ export const WorkflowCommandController = {
             O: Workflow,
             kind: MethodKind.Unary,
         },
+        /**
+         * Update the visibility of an existing workflow.
+         *
+         * This is a targeted metadata update — it only modifies metadata.visibility,
+         * leaving spec, status, and other metadata fields untouched. Use this to
+         * make a workflow publicly accessible or to revoke public access without
+         * sending the entire workflow resource (avoiding read-modify-write races).
+         *
+         * @internal
+         * Authorization: Requires can_edit permission on the workflow resource.
+         * Visibility transitions trigger FGA tuple management in Cloud mode:
+         * - PRIVATE → PUBLIC: creates workflow#viewer@identity_account:* tuple
+         * - PUBLIC → PRIVATE: deletes the wildcard viewer tuple
+         *
+         * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.updateVisibility
+         */
+        updateVisibility: {
+            name: "updateVisibility",
+            I: UpdateVisibilityInput,
+            O: Workflow,
+            kind: MethodKind.Unary,
+        },
         /**
          * Delete a workflow.
          *
@@ -97,6 +121,28 @@ export const WorkflowCommandController = {
             O: ServerlessWorkflowValidation,
             kind: MethodKind.Unary,
         },
+        /**
+         * Assign or move a tag to a specific workflow version.
+         *
+         * Tags are human-readable pointers to immutable versions. Calling this
+         * with an existing tag name moves it from the previous version to the
+         * specified version. Common tags: "stable", "production", "v2.0".
+         *
+         * @internal
+         * Authorization: Requires can_edit permission on the workflow resource.
+         * The handler validates that the version_hash exists in the workflow's
+         * audit history before assigning the tag.
+         *
+         * @since Workflow Versioning
+         *
+         * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.tagVersion
+         */
+        tagVersion: {
+            name: "tagVersion",
+            I: TagWorkflowVersionInput,
+            O: Workflow,
+            kind: MethodKind.Unary,
+        },
     }
 };
 //# sourceMappingURL=command_connect.js.map

package/ai/stigmer/agentic/workflow/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/workflow/v1/command_pb.d.ts

@@ -2,6 +2,8 @@ import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
 import type { WorkflowSchema } from "./api_pb.js";
 import type { WorkflowIdSchema } from "./io_pb.js";
 import type { ServerlessWorkflowValidationSchema } from "./serverless/validation_pb.js";
+import type { TagWorkflowVersionInputSchema } from "./version_pb.js";
+import type { UpdateVisibilityInputSchema } from "../../../commons/apiresource/io_pb.js";
 /**
  * Describes the file ai/stigmer/agentic/workflow/v1/command.proto.
  */
@@ -51,6 +53,27 @@ export declare const WorkflowCommandController: GenService<{
         input: typeof WorkflowSchema;
         output: typeof WorkflowSchema;
     };
+    /**
+     * Update the visibility of an existing workflow.
+     *
+     * This is a targeted metadata update — it only modifies metadata.visibility,
+     * leaving spec, status, and other metadata fields untouched. Use this to
+     * make a workflow publicly accessible or to revoke public access without
+     * sending the entire workflow resource (avoiding read-modify-write races).
+     *
+     * @internal
+     * Authorization: Requires can_edit permission on the workflow resource.
+     * Visibility transitions trigger FGA tuple management in Cloud mode:
+     * - PRIVATE → PUBLIC: creates workflow#viewer@identity_account:* tuple
+     * - PUBLIC → PRIVATE: deletes the wildcard viewer tuple
+     *
+     * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.updateVisibility
+     */
+    updateVisibility: {
+        methodKind: "unary";
+        input: typeof UpdateVisibilityInputSchema;
+        output: typeof WorkflowSchema;
+    };
     /**
      * Delete a workflow.
      *
@@ -90,4 +113,25 @@ export declare const WorkflowCommandController: GenService<{
         input: typeof WorkflowSchema;
         output: typeof ServerlessWorkflowValidationSchema;
     };
+    /**
+     * Assign or move a tag to a specific workflow version.
+     *
+     * Tags are human-readable pointers to immutable versions. Calling this
+     * with an existing tag name moves it from the previous version to the
+     * specified version. Common tags: "stable", "production", "v2.0".
+     *
+     * @internal
+     * Authorization: Requires can_edit permission on the workflow resource.
+     * The handler validates that the version_hash exists in the workflow's
+     * audit history before assigning the tag.
+     *
+     * @since Workflow Versioning
+     *
+     * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.tagVersion
+     */
+    tagVersion: {
+        methodKind: "unary";
+        input: typeof TagWorkflowVersionInputSchema;
+        output: typeof WorkflowSchema;
+    };
 }>;

package/ai/stigmer/agentic/workflow/v1/command_pb.js

@@ -5,12 +5,14 @@ import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
 import { file_ai_stigmer_agentic_workflow_v1_api } from "./api_pb.js";
 import { file_ai_stigmer_agentic_workflow_v1_io } from "./io_pb.js";
 import { file_ai_stigmer_agentic_workflow_v1_serverless_validation } from "./serverless/validation_pb.js";
+import { file_ai_stigmer_agentic_workflow_v1_version } from "./version_pb.js";
+import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb.js";
 import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb.js";
 import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
 /**
  * Describes the file ai/stigmer/agentic/workflow/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_workflow_v1_command = /*@__PURE__*/ fileDesc("CixhaS9zdGlnbWVyL2FnZW50aWMvd29ya2Zsb3cvdjEvY29tbWFuZC5wcm90bxIeYWkuc3RpZ21lci5hZ2VudGljLndvcmtmbG93LnYxMqkGChlXb3JrZmxvd0NvbW1hbmRDb250cm9sbGVyElsKBWFwcGx5EiguYWkuc3RpZ21lci5hZ2VudGljLndvcmtmbG93LnYxLldvcmtmbG93GiguYWkuc3RpZ21lci5hZ2VudGljLndvcmtmbG93LnYxLldvcmtmbG93EqoBCgZjcmVhdGUSKC5haS5zdGlnbWVyLmFnZW50aWMud29ya2Zsb3cudjEuV29ya2Zsb3caKC5haS5zdGlnbWVyLmFnZW50aWMud29ya2Zsb3cudjEuV29ya2Zsb3ciTMK4GEgIBxAeIgxtZXRhZGF0YS5vcmcqNHVuYXV0aG9yaXplZCB0byBjcmVhdGUgd29ya2Zsb3cgaW4gdGhpcyBvcmdhbml6YXRpb24SlAEKBnVwZGF0ZRIoLmFpLnN0aWdtZXIuYWdlbnRpYy53b3JrZmxvdy52MS5Xb3JrZmxvdxooLmFpLnN0aWdtZXIuYWdlbnRpYy53b3JrZmxvdy52MS5Xb3JrZmxvdyI2wrgYMggCEDIiC21ldGFkYXRhLmlkKh91bmF1dGhvcml6ZWQgdG8gdXBkYXRlIHdvcmtmbG93EpABCgZkZWxldGUSKi5haS5zdGlnbWVyLmFnZW50aWMud29ya2Zsb3cudjEuV29ya2Zsb3dJZBooLmFpLnN0aWdtZXIuYWdlbnRpYy53b3JrZmxvdy52MS5Xb3JrZmxvdyIwwrgYLAgDEDIiBXZhbHVlKh91bmF1dGhvcml6ZWQgdG8gZGVsZXRlIHdvcmtmbG93EtEBCgx2YWxpZGF0ZVNwZWMSKC5haS5zdGlnbWVyLmFnZW50aWMud29ya2Zsb3cudjEuV29ya2Zsb3caRy5haS5zdGlnbWVyLmFnZW50aWMud29ya2Zsb3cudjEuc2VydmVybGVzcy5TZXJ2ZXJsZXNzV29ya2Zsb3dWYWxpZGF0aW9uIk7CuBhKCAcQHiIMbWV0YWRhdGEub3JnKjZ1bmF1dGhvcml6ZWQgdG8gdmFsaWRhdGUgd29ya2Zsb3cgaW4gdGhpcyBvcmdhbml6YXRpb24aBKD/KzJiBnByb3RvMw", [file_ai_stigmer_agentic_workflow_v1_api, file_ai_stigmer_agentic_workflow_v1_io, file_ai_stigmer_agentic_workflow_v1_serverless_validation, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+export const file_ai_stigmer_agentic_workflow_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_workflow_v1_api, file_ai_stigmer_agentic_workflow_v1_io, file_ai_stigmer_agentic_workflow_v1_serverless_validation, file_ai_stigmer_agentic_workflow_v1_version, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
 /**
  * WorkflowCommandController handles write operations for workflows.
  *

package/ai/stigmer/agentic/workflow/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,uCAAuC,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,YAAY,CAAC;AAEpE,OAAO,EAAE,yDAAyD,EAAE,MAAM,+BAA+B,CAAC;AAC1G,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,grCAAgrC,EAAE,CAAC,uCAAuC,EAAE,sCAAsC,EAAE,yDAAyD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEh7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GA+EjC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,uCAAuC,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,YAAY,CAAC;AAEpE,OAAO,EAAE,yDAAyD,EAAE,MAAM,+BAA+B,CAAC;AAE1G,OAAO,EAAE,2CAA2C,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,gpDAAgpD,EAAE,CAAC,uCAAuC,EAAE,sCAAsC,EAAE,yDAAyD,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr+D;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAyHjC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflow/v1/query_connect.d.ts

@@ -18,8 +18,12 @@ export declare const WorkflowQueryController: {
             readonly kind: any;
         };
         /**
-         * Get a workflow by its organization-scoped reference (org/slug).
-         * Resolves a human-readable reference like "stigmer/deploy" to the full Workflow resource.
+         * Get a workflow by its organization-scoped reference (org/slug) with version support.
+         *
+         * Version resolution (via ApiResourceReference.version field):
+         * - Empty/"latest" → Returns the current version
+         * - Tag name (e.g., "stable", "v1.0") → Resolves to the version with this tag
+         * - SHA256 hash (64 hex chars) → Returns the exact immutable version
          *
          * @internal
          * Custom authorization in handler — checks both direct resource access
@@ -33,5 +37,45 @@ export declare const WorkflowQueryController: {
             readonly O: any;
             readonly kind: any;
         };
+        /**
+         * List version history for a workflow.
+         *
+         * Returns all historical versions ordered by applied_at (newest first).
+         * Each entry includes the version hash, applied timestamp, actor, tag,
+         * git provenance, and the validated CNCF YAML for historical access.
+         *
+         * @internal
+         * Authorization is handled in the handler after resolving the workflow.
+         * (Input uses org+slug, not workflow ID, so proto-level auth cannot work)
+         *
+         * @since Workflow Versioning
+         *
+         * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowQueryController.listVersions
+         */
+        readonly listVersions: {
+            readonly name: "listVersions";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get a specific historical version of a workflow by its content hash.
+         *
+         * Used by the runner (to hydrate execution from a pinned version) and
+         * the execution viewer (to render the graph for historical executions).
+         *
+         * @internal
+         * Authorization uses can_view on the workflow resource.
+         *
+         * @since Workflow Versioning
+         *
+         * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowQueryController.getVersion
+         */
+        readonly getVersion: {
+            readonly name: "getVersion";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
     };
 };

package/ai/stigmer/agentic/workflow/v1/query_connect.js

@@ -6,6 +6,7 @@ import { WorkflowId } from "./io_pbjs";
 import { Workflow } from "./api_pbjs";
 import { MethodKind } from "@bufbuild/protobuf";
 import { ApiResourceReference } from "../../../commons/apiresource/io_pbjs";
+import { GetWorkflowVersionInput, ListWorkflowVersionsInput, ListWorkflowVersionsResponse, WorkflowVersionEntry } from "./version_pbjs";
 /**
  * WorkflowQueryController handles read operations for workflows.
  *
@@ -26,8 +27,12 @@ export const WorkflowQueryController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Get a workflow by its organization-scoped reference (org/slug).
-         * Resolves a human-readable reference like "stigmer/deploy" to the full Workflow resource.
+         * Get a workflow by its organization-scoped reference (org/slug) with version support.
+         *
+         * Version resolution (via ApiResourceReference.version field):
+         * - Empty/"latest" → Returns the current version
+         * - Tag name (e.g., "stable", "v1.0") → Resolves to the version with this tag
+         * - SHA256 hash (64 hex chars) → Returns the exact immutable version
          *
          * @internal
          * Custom authorization in handler — checks both direct resource access
@@ -41,6 +46,46 @@ export const WorkflowQueryController = {
             O: Workflow,
             kind: MethodKind.Unary,
         },
+        /**
+         * List version history for a workflow.
+         *
+         * Returns all historical versions ordered by applied_at (newest first).
+         * Each entry includes the version hash, applied timestamp, actor, tag,
+         * git provenance, and the validated CNCF YAML for historical access.
+         *
+         * @internal
+         * Authorization is handled in the handler after resolving the workflow.
+         * (Input uses org+slug, not workflow ID, so proto-level auth cannot work)
+         *
+         * @since Workflow Versioning
+         *
+         * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowQueryController.listVersions
+         */
+        listVersions: {
+            name: "listVersions",
+            I: ListWorkflowVersionsInput,
+            O: ListWorkflowVersionsResponse,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Get a specific historical version of a workflow by its content hash.
+         *
+         * Used by the runner (to hydrate execution from a pinned version) and
+         * the execution viewer (to render the graph for historical executions).
+         *
+         * @internal
+         * Authorization uses can_view on the workflow resource.
+         *
+         * @since Workflow Versioning
+         *
+         * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowQueryController.getVersion
+         */
+        getVersion: {
+            name: "getVersion",
+            I: GetWorkflowVersionInput,
+            O: WorkflowVersionEntry,
+            kind: MethodKind.Unary,
+        },
     }
 };
 //# sourceMappingURL=query_connect.js.map

package/ai/stigmer/agentic/workflow/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAExI;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/workflow/v1/query_pb.d.ts

@@ -1,6 +1,7 @@
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
 import type { WorkflowSchema } from "./api_pb.js";
 import type { WorkflowIdSchema } from "./io_pb.js";
+import type { GetWorkflowVersionInputSchema, ListWorkflowVersionsInputSchema, ListWorkflowVersionsResponseSchema, WorkflowVersionEntrySchema } from "./version_pb.js";
 import type { ApiResourceReferenceSchema } from "../../../commons/apiresource/io_pb.js";
 /**
  * Describes the file ai/stigmer/agentic/workflow/v1/query.proto.
@@ -23,8 +24,12 @@ export declare const WorkflowQueryController: GenService<{
         output: typeof WorkflowSchema;
     };
     /**
-     * Get a workflow by its organization-scoped reference (org/slug).
-     * Resolves a human-readable reference like "stigmer/deploy" to the full Workflow resource.
+     * Get a workflow by its organization-scoped reference (org/slug) with version support.
+     *
+     * Version resolution (via ApiResourceReference.version field):
+     * - Empty/"latest" → Returns the current version
+     * - Tag name (e.g., "stable", "v1.0") → Resolves to the version with this tag
+     * - SHA256 hash (64 hex chars) → Returns the exact immutable version
      *
      * @internal
      * Custom authorization in handler — checks both direct resource access
@@ -37,4 +42,42 @@ export declare const WorkflowQueryController: GenService<{
         input: typeof ApiResourceReferenceSchema;
         output: typeof WorkflowSchema;
     };
+    /**
+     * List version history for a workflow.
+     *
+     * Returns all historical versions ordered by applied_at (newest first).
+     * Each entry includes the version hash, applied timestamp, actor, tag,
+     * git provenance, and the validated CNCF YAML for historical access.
+     *
+     * @internal
+     * Authorization is handled in the handler after resolving the workflow.
+     * (Input uses org+slug, not workflow ID, so proto-level auth cannot work)
+     *
+     * @since Workflow Versioning
+     *
+     * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowQueryController.listVersions
+     */
+    listVersions: {
+        methodKind: "unary";
+        input: typeof ListWorkflowVersionsInputSchema;
+        output: typeof ListWorkflowVersionsResponseSchema;
+    };
+    /**
+     * Get a specific historical version of a workflow by its content hash.
+     *
+     * Used by the runner (to hydrate execution from a pinned version) and
+     * the execution viewer (to render the graph for historical executions).
+     *
+     * @internal
+     * Authorization uses can_view on the workflow resource.
+     *
+     * @since Workflow Versioning
+     *
+     * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowQueryController.getVersion
+     */
+    getVersion: {
+        methodKind: "unary";
+        input: typeof GetWorkflowVersionInputSchema;
+        output: typeof WorkflowVersionEntrySchema;
+    };
 }>;