@stigmer/protos 3.0.9-dev.20260615153829 → 3.1.0

package/ai/stigmer/agentic/agentexecution/v1/filereview_pb.d.ts

@@ -0,0 +1,796 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { DiffCompleteness, FileCaptureClass, FileChangeKind, FileChangeSetStatus, FileDecisionAction, FileDecisionOrigin, FileDecisionScope, FileReviewBlockReason, FileReviewEventType, FileReviewFailureKind, SnapshotKind } from "./enum_pb.js";
+import type { FileContent, ToolCallOutputRef } from "./message_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/agentexecution/v1/filereview.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentexecution_v1_filereview: GenFile;
+/**
+ * The set of file deltas produced by one agent turn, reviewed and reconciled
+ * as a unit.
+ *
+ * A FileChangeSet has no identity or lifecycle independent of the turn that
+ * produced it: it is born when the turn captures its baseline and dies when its
+ * decisions are reconciled into the workspace. It is therefore a computed
+ * projection on AgentExecutionStatus (field file_change_sets), mirroring
+ * pending_approvals — recomputed on every status write from the file_review
+ * event ledger, never merged, so it is always consistent with the authoritative
+ * stream.
+ *
+ * @internal
+ *
+ * Server-authored: the runner never sends this; it is derived server-side in
+ * both editions through one projection seam. status and decisions are DERIVED
+ * folds over the ledger, not stored-mutable state. A terminal execution
+ * projects no actionable review (the workflow that would reconcile is gone),
+ * mirroring the phase-aware pending_approvals rule.
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.FileChangeSet
+ */
+export type FileChangeSet = Message<"ai.stigmer.agentic.agentexecution.v1.FileChangeSet"> & {
+    /**
+     * Stable id of this change set, unique per turn. The correlation key a
+     * FileDecision and every ledger event reference. Never a content hash.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Id of the turn that produced this change set.
+     *
+     * @generated from field: string turn_id = 2;
+     */
+    turnId: string;
+    /**
+     * Harness that produced the edits: "cursor" | "deep-agent". Carried for audit
+     * and so the reconcile adapter knows which harness lifecycle authored the set.
+     *
+     * @generated from field: string harness_id = 3;
+     */
+    harnessId: string;
+    /**
+     * Current state of the change set, DERIVED from the file_review ledger (a fold
+     * over the events for this change set). See FileChangeSetStatus.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileChangeSetStatus status = 4;
+     */
+    status: FileChangeSetStatus;
+    /**
+     * Workspace state captured at turn start — the "before" the authoritative
+     * diff is computed against.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.SnapshotRef baseline_snapshot = 5;
+     */
+    baselineSnapshot?: SnapshotRef;
+    /**
+     * Workspace state captured at the turn boundary — the "after". The authoritative
+     * diff is diff(baseline_snapshot, candidate_snapshot); no streamed args, no
+     * pre-execution proposal is ever authoritative.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.SnapshotRef candidate_snapshot = 6;
+     */
+    candidateSnapshot?: SnapshotRef;
+    /**
+     * Workspace state derived after decisions (the exact bytes to reconcile to).
+     * Empty until the change set is decided. Reconcile verifies the filesystem
+     * hashes against this snapshot.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.SnapshotRef approved_snapshot = 7;
+     */
+    approvedSnapshot?: SnapshotRef;
+    /**
+     * The per-file deltas in this change set (the rendered review surface).
+     *
+     * @generated from field: repeated ai.stigmer.agentic.agentexecution.v1.CapturedFileChange changes = 8;
+     */
+    changes: CapturedFileChange[];
+    /**
+     * Canonical digest over the ordered change manifest. ENFORCEMENT only: lets
+     * the reconcile refuse to apply a manifest that differs from what was
+     * reviewed. Never a correlation key.
+     *
+     * @generated from field: string aggregate_digest = 9;
+     */
+    aggregateDigest: string;
+    /**
+     * Whether the rendered diff is complete enough to approve safely, a rollup
+     * over the per-file changes. COMPLETE is approvable as-is; BINARY_SUMMARY_ONLY
+     * (binary is the set's only blocker) is keepable in one shot via an
+     * acknowledged CHANGE_SET approve; PARTIAL_BLOCKED must be resolved per file.
+     * An honest UI/audit signal — the backend gate re-derives keep-all from the
+     * per-file changes, never trusting this value. See DiffCompleteness.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.DiffCompleteness diff_completeness = 10;
+     */
+    diffCompleteness: DiffCompleteness;
+    /**
+     * Human decisions on this change set, a DERIVED fold over the FILE_DECIDED
+     * events in the ledger (never stored-mutable). Ordered by decision time.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.agentexecution.v1.FileDecision decisions = 11;
+     */
+    decisions: FileDecision[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.FileChangeSet.
+ * Use `create(FileChangeSetSchema)` to create a new message.
+ */
+export declare const FileChangeSetSchema: GenMessage<FileChangeSet>;
+/**
+ * One file's delta within a FileChangeSet.
+ *
+ * Reuses FileContent (inline-or-offload) for before/after and ToolCallOutputRef
+ * for the offloadable unified diff — no parallel blob/artifact types. This is
+ * the apply-then-review successor to the tool-call-coupled FileChange in
+ * message.proto; the two coexist until the legacy file-change coupling is
+ * deleted, at which point this message takes the canonical FileChange name.
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.CapturedFileChange
+ */
+export type CapturedFileChange = Message<"ai.stigmer.agentic.agentexecution.v1.CapturedFileChange"> & {
+    /**
+     * Stable id of this file change within its set. The correlation key a
+     * FILE-scoped FileDecision references. Never a content hash.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Path before the change (workspace-root-relative). Empty for ADD.
+     *
+     * @generated from field: string path_before = 2;
+     */
+    pathBefore: string;
+    /**
+     * Path after the change (workspace-root-relative). Empty for DELETE; differs
+     * from path_before for RENAME.
+     *
+     * @generated from field: string path_after = 3;
+     */
+    pathAfter: string;
+    /**
+     * The per-file outcome. See FileChangeKind.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileChangeKind kind = 4;
+     */
+    kind: FileChangeKind;
+    /**
+     * How this file was captured (git-tracked vs ignored vs non-git/CAS), which
+     * governs which substrate holds its before/after bytes. See FileCaptureClass.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileCaptureClass capture_class = 5;
+     */
+    captureClass: FileCaptureClass;
+    /**
+     * Pre-edit content. Empty for ADD. Large bodies offloaded via FileContent.ref.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileContent before = 6;
+     */
+    before?: FileContent;
+    /**
+     * Post-edit content. Empty for DELETE. Large bodies offloaded via FileContent.ref.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileContent after = 7;
+     */
+    after?: FileContent;
+    /**
+     * SHA-256 of the pre-edit bytes. ENFORCEMENT digest (the reconcile compares
+     * against the on-disk baseline). Empty for ADD.
+     *
+     * @generated from field: string before_sha256 = 8;
+     */
+    beforeSha256: string;
+    /**
+     * SHA-256 of the post-edit bytes. ENFORCEMENT digest (the reconcile applies
+     * only these exact bytes). Empty for DELETE.
+     *
+     * @generated from field: string after_sha256 = 9;
+     */
+    afterSha256: string;
+    /**
+     * Offloadable unified diff artifact for this file. The rendered hunks; large
+     * diffs spill to artifact storage via the same envelope tool output uses.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.ToolCallOutputRef unified_diff = 10;
+     */
+    unifiedDiff?: ToolCallOutputRef;
+    /**
+     * False when this file's diff is incomplete (elided, truncated, or not
+     * capturable). A change set with any diff_complete == false cannot be
+     * approved as complete — the structural guard against approving an
+     * unreviewable change.
+     *
+     * @generated from field: bool diff_complete = 11;
+     */
+    diffComplete: boolean;
+    /**
+     * Canonical digest of (path, kind, before, after) for this file. ENFORCEMENT
+     * only — the per-file analogue of aggregate_digest. Never a correlation key.
+     *
+     * @generated from field: string file_digest = 12;
+     */
+    fileDigest: string;
+    /**
+     * The honest cause this file's diff is not fully reviewable, set by the runner
+     * only when diff_complete == false (otherwise UNSPECIFIED). INFORMATIONAL
+     * provenance for the review UI — never an enforcement input and never folded
+     * into file_digest/aggregate_digest. Binary changes are conveyed by
+     * FileContent.is_binary, not here. See FileReviewBlockReason.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileReviewBlockReason blocked_reason = 13;
+     */
+    blockedReason: FileReviewBlockReason;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.CapturedFileChange.
+ * Use `create(CapturedFileChangeSchema)` to create a new message.
+ */
+export declare const CapturedFileChangeSchema: GenMessage<CapturedFileChange>;
+/**
+ * An immutable pointer to a captured workspace state.
+ *
+ * One of git / cas is set per kind; HYBRID carries both (git-tracked files via
+ * the tree ref, ignored/non-git files via the CAS manifest). Snapshots are
+ * captured by the runner and are idempotent under Temporal retries.
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.SnapshotRef
+ */
+export type SnapshotRef = Message<"ai.stigmer.agentic.agentexecution.v1.SnapshotRef"> & {
+    /**
+     * Which substrate holds this snapshot. See SnapshotKind.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.SnapshotKind kind = 1;
+     */
+    kind: SnapshotKind;
+    /**
+     * Git no-commit tree reference; set when kind is GIT_TREE_REF or HYBRID.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.GitTreeRef git = 2;
+     */
+    git?: GitTreeRef;
+    /**
+     * Content-addressed manifest reference for ignored/non-git paths; set when
+     * kind is CAS_MANIFEST or HYBRID. See doc 06 (CAS lands in Phase 3).
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.CasManifestRef cas = 3;
+     */
+    cas?: CasManifestRef;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.SnapshotRef.
+ * Use `create(SnapshotRefSchema)` to create a new message.
+ */
+export declare const SnapshotRefSchema: GenMessage<SnapshotRef>;
+/**
+ * A git no-commit tree snapshot (write-tree + a stigmer-namespaced ref).
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.GitTreeRef
+ */
+export type GitTreeRef = Message<"ai.stigmer.agentic.agentexecution.v1.GitTreeRef"> & {
+    /**
+     * The tree object id produced by git write-tree.
+     *
+     * @generated from field: string tree_oid = 1;
+     */
+    treeOid: string;
+    /**
+     * The ref the snapshot is pinned under, e.g.
+     * "refs/stigmer/{execution}/{baseline|candidate|approved}". Keeps the
+     * snapshot reachable (un-GC'd) without a commit on any user branch.
+     *
+     * @generated from field: string ref = 2;
+     */
+    ref: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.GitTreeRef.
+ * Use `create(GitTreeRefSchema)` to create a new message.
+ */
+export declare const GitTreeRefSchema: GenMessage<GitTreeRef>;
+/**
+ * A content-addressed snapshot manifest for paths git cannot capture
+ * (gitignored or non-git workspaces).
+ *
+ * @internal
+ * Realized in Phase 3 (CAS). Present in the contract now so the snapshot shape
+ * is stable before producers exist.
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.CasManifestRef
+ */
+export type CasManifestRef = Message<"ai.stigmer.agentic.agentexecution.v1.CasManifestRef"> & {
+    /**
+     * Digest of the manifest listing each captured path and its blob digest.
+     *
+     * @generated from field: string manifest_digest = 1;
+     */
+    manifestDigest: string;
+    /**
+     * Storage URI of the manifest artifact.
+     *
+     * @generated from field: string artifact_uri = 2;
+     */
+    artifactUri: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.CasManifestRef.
+ * Use `create(CasManifestRefSchema)` to create a new message.
+ */
+export declare const CasManifestRefSchema: GenMessage<CasManifestRef>;
+/**
+ * One human decision on a change set or a single file within it.
+ *
+ * Bound to content by expected_digest: the runner's reconcile applies the
+ * decision only when the target's current digest still matches what the user
+ * saw, so "what you approve is what gets applied". expected_digest is an
+ * ENFORCEMENT gate, never a correlation key — correlation is by change_set_id
+ * (+ file_change_id for FILE scope).
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.FileDecision
+ */
+export type FileDecision = Message<"ai.stigmer.agentic.agentexecution.v1.FileDecision"> & {
+    /**
+     * Stable id of this decision.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * The change set this decision targets (correlation key).
+     *
+     * @generated from field: string change_set_id = 2;
+     */
+    changeSetId: string;
+    /**
+     * Whether the decision applies to the whole change set or one file. HUNK is
+     * intentionally deferred. See FileDecisionScope.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileDecisionScope scope = 3;
+     */
+    scope: FileDecisionScope;
+    /**
+     * The CapturedFileChange this decision targets; set only when scope is FILE
+     * (correlation key). Empty for CHANGE_SET scope.
+     *
+     * @generated from field: string file_change_id = 4;
+     */
+    fileChangeId: string;
+    /**
+     * Approve or reject. See FileDecisionAction.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileDecisionAction action = 5;
+     */
+    action: FileDecisionAction;
+    /**
+     * The digest of the content the reviewer actually saw. ENFORCEMENT gate: the
+     * reconcile refuses to apply if the target's current digest differs. Never a
+     * correlation key.
+     *
+     * @generated from field: string expected_digest = 6;
+     */
+    expectedDigest: string;
+    /**
+     * Identity of the reviewer (principal). Empty when not attributed.
+     *
+     * @generated from field: string reviewer_id = 7;
+     */
+    reviewerId: string;
+    /**
+     * ISO 8601 timestamp when the decision was made.
+     *
+     * @generated from field: string decided_at = 8;
+     */
+    decidedAt: string;
+    /**
+     * Optional free-text comment supplied with the decision (audit trail).
+     *
+     * @generated from field: string reason = 9;
+     */
+    reason: string;
+    /**
+     * True when this APPROVE consciously kept a change whose diff could not be
+     * fully reviewed (a binary file — no text diff, but exact reconcilable bytes).
+     * Audit provenance only: it records that a human explicitly acknowledged the
+     * limitation. Never an enforcement input or a correlation key, and never
+     * folded into any digest.
+     *
+     * @generated from field: bool acknowledge_unreviewable = 10;
+     */
+    acknowledgeUnreviewable: boolean;
+    /**
+     * Which authority authored this decision: a human reviewer (USER; also the
+     * reading for UNSPECIFIED pre-origin records) or the approved-command
+     * auto-keep policy (DD-28). Audit provenance only — never enforcement, never
+     * correlation, never folded into any digest. See FileDecisionOrigin.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileDecisionOrigin origin = 11;
+     */
+    origin: FileDecisionOrigin;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.FileDecision.
+ * Use `create(FileDecisionSchema)` to create a new message.
+ */
+export declare const FileDecisionSchema: GenMessage<FileDecision>;
+/**
+ * The baseline workspace state captured at turn start.
+ *
+ * @internal
+ * Authored by the runner's turn-begin capture activity. The first event of a
+ * change set's lifecycle; carries the change set's stable identity so the
+ * projection can materialize the set before any candidate exists.
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.FileReviewBaselineCaptured
+ */
+export type FileReviewBaselineCaptured = Message<"ai.stigmer.agentic.agentexecution.v1.FileReviewBaselineCaptured"> & {
+    /**
+     * Stable id of the change set this baseline opens.
+     *
+     * @generated from field: string change_set_id = 1;
+     */
+    changeSetId: string;
+    /**
+     * The turn that produced it.
+     *
+     * @generated from field: string turn_id = 2;
+     */
+    turnId: string;
+    /**
+     * The harness that produced it ("cursor" | "deep-agent").
+     *
+     * @generated from field: string harness_id = 3;
+     */
+    harnessId: string;
+    /**
+     * The captured baseline state.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.SnapshotRef baseline_snapshot = 4;
+     */
+    baselineSnapshot?: SnapshotRef;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.FileReviewBaselineCaptured.
+ * Use `create(FileReviewBaselineCapturedSchema)` to create a new message.
+ */
+export declare const FileReviewBaselineCapturedSchema: GenMessage<FileReviewBaselineCaptured>;
+/**
+ * The runner's turn facts backing the approved-command auto-keep policy
+ * (DD-28): its assertion that EVERY mutation in the candidate was produced by
+ * executed shell commands the human had already authorized, with the consent
+ * evidence the backend can verify.
+ *
+ * @internal
+ *
+ * Presence of this message on a candidate asserts the runner-owned turn facts
+ * the server cannot derive (tool calls carry no turn marker): the turn executed
+ * zero file-tool (write/delete) calls, zero MCP tools, and delegated zero
+ * sub-agents — its only mutation source was consented commands. These facts
+ * carry the SAME trust level as the captured bytes themselves. What the runner
+ * can NEVER assert is the consent: the backend verifies every claimed row below
+ * against the server-authored approval record before authoring the policy
+ * decision, so a runner cannot mint authorization it was never given. Absent
+ * on any turn that does not qualify — the set then reviews manually, exactly
+ * as before this field existed (fail-closed).
+ *
+ * @since File-Change HITL Redesign (DD-28 approved-command auto-keep)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.TurnCommandProvenance
+ */
+export type TurnCommandProvenance = Message<"ai.stigmer.agentic.agentexecution.v1.TurnCommandProvenance"> & {
+    /**
+     * Ids of the transcript tool calls whose SERVER-AUTHORED approval_action
+     * (written only by SubmitApproval, preserved against runner writes)
+     * authorizes this turn's executed commands: the approved gate row for a
+     * per-command grant, or the APPROVE_ALL row whose category lease covered the
+     * command. Exact-id lookup — never a content or fuzzy match. Empty only when
+     * authorized_by_auto_approve_all carries the consent instead.
+     *
+     * @generated from field: repeated string consent_tool_call_ids = 1;
+     */
+    consentToolCallIds: string[];
+    /**
+     * True when the commands ran ungated under the pre-armed
+     * spec.auto_approve_all global bypass (there is no per-command consent row to
+     * cite). The backend verifies this against the spec field it owns.
+     *
+     * @generated from field: bool authorized_by_auto_approve_all = 2;
+     */
+    authorizedByAutoApproveAll: boolean;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.TurnCommandProvenance.
+ * Use `create(TurnCommandProvenanceSchema)` to create a new message.
+ */
+export declare const TurnCommandProvenanceSchema: GenMessage<TurnCommandProvenance>;
+/**
+ * The candidate workspace state captured at the turn boundary, carrying the
+ * computed authoritative diff.
+ *
+ * @internal
+ * Authored by the runner's turn-boundary capture activity. Large before/after
+ * bodies are offloaded (FileContent.ref) before this event is persisted.
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.FileReviewCandidateCaptured
+ */
+export type FileReviewCandidateCaptured = Message<"ai.stigmer.agentic.agentexecution.v1.FileReviewCandidateCaptured"> & {
+    /**
+     * The change set this candidate closes.
+     *
+     * @generated from field: string change_set_id = 1;
+     */
+    changeSetId: string;
+    /**
+     * The captured candidate state.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.SnapshotRef candidate_snapshot = 2;
+     */
+    candidateSnapshot?: SnapshotRef;
+    /**
+     * The authoritative per-file diff (diff of baseline → candidate).
+     *
+     * @generated from field: repeated ai.stigmer.agentic.agentexecution.v1.CapturedFileChange changes = 3;
+     */
+    changes: CapturedFileChange[];
+    /**
+     * Canonical digest over the ordered manifest (enforcement).
+     *
+     * @generated from field: string aggregate_digest = 4;
+     */
+    aggregateDigest: string;
+    /**
+     * The runner-derived completeness rollup for this candidate: COMPLETE when
+     * every file is reviewable, BINARY_SUMMARY_ONLY when binary files are the only
+     * blocker, else PARTIAL_BLOCKED. See DiffCompleteness.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.DiffCompleteness diff_completeness = 5;
+     */
+    diffCompleteness: DiffCompleteness;
+    /**
+     * The runner's approved-command turn facts (DD-28). When present AND the
+     * backend's verification passes, the set is auto-kept by a policy-origin
+     * FILE_DECIDED instead of arming the review gate. Absent → manual review.
+     * See TurnCommandProvenance.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.TurnCommandProvenance command_provenance = 6;
+     */
+    commandProvenance?: TurnCommandProvenance;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.FileReviewCandidateCaptured.
+ * Use `create(FileReviewCandidateCapturedSchema)` to create a new message.
+ */
+export declare const FileReviewCandidateCapturedSchema: GenMessage<FileReviewCandidateCaptured>;
+/**
+ * The result of reconciling approved decisions into the workspace.
+ *
+ * @internal
+ * Authored by the runner's reconcile activity after decisions land. Idempotent:
+ * it reconciles to an exact approved snapshot and verifies hashes, so re-running
+ * converges.
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.FileReviewReconciled
+ */
+export type FileReviewReconciled = Message<"ai.stigmer.agentic.agentexecution.v1.FileReviewReconciled"> & {
+    /**
+     * The change set that was reconciled.
+     *
+     * @generated from field: string change_set_id = 1;
+     */
+    changeSetId: string;
+    /**
+     * The exact workspace state reconciled to and hash-verified.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.SnapshotRef approved_snapshot = 2;
+     */
+    approvedSnapshot?: SnapshotRef;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.FileReviewReconciled.
+ * Use `create(FileReviewReconciledSchema)` to create a new message.
+ */
+export declare const FileReviewReconciledSchema: GenMessage<FileReviewReconciled>;
+/**
+ * A terminal failure in the file-review lifecycle.
+ *
+ * @internal
+ * Authored by the runner. A DIFF_UNREVIEWABLE failure blocks the change set
+ * from becoming approvable (the diff cannot be shown completely); the others
+ * record capture/reconcile/verification failures for audit and resume.
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.FileReviewFailure
+ */
+export type FileReviewFailure = Message<"ai.stigmer.agentic.agentexecution.v1.FileReviewFailure"> & {
+    /**
+     * The change set the failure pertains to.
+     *
+     * @generated from field: string change_set_id = 1;
+     */
+    changeSetId: string;
+    /**
+     * The precise failure mode. event_type buckets this as FAILED; this carries
+     * the fidelity. See FileReviewFailureKind.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileReviewFailureKind kind = 2;
+     */
+    kind: FileReviewFailureKind;
+    /**
+     * Human-readable detail for the audit trail. Never affects control flow.
+     *
+     * @generated from field: string detail = 3;
+     */
+    detail: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.FileReviewFailure.
+ * Use `create(FileReviewFailureSchema)` to create a new message.
+ */
+export declare const FileReviewFailureSchema: GenMessage<FileReviewFailure>;
+/**
+ * An immutable event in the file-review lifecycle.
+ *
+ * The payload is a closed oneof so each event type is type-safe and
+ * self-documenting, mirroring ApprovalEvent. event_type is the coarse bucket;
+ * the payload carries fidelity.
+ *
+ * @internal
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.FileReviewEvent
+ */
+export type FileReviewEvent = Message<"ai.stigmer.agentic.agentexecution.v1.FileReviewEvent"> & {
+    /**
+     * Unique id of this event, deterministic by design: derived from
+     * change_set_id + scope id + event_type. The permanent idempotency key for
+     * append-only authoring, so re-deriving or re-authoring never duplicates an
+     * event.
+     *
+     * @generated from field: string event_id = 1;
+     */
+    eventId: string;
+    /**
+     * Correlation id shared by every event for one change set.
+     *
+     * @generated from field: string change_set_id = 2;
+     */
+    changeSetId: string;
+    /**
+     * Coarse lifecycle bucket of this event. See FileReviewEventType.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileReviewEventType event_type = 3;
+     */
+    eventType: FileReviewEventType;
+    /**
+     * ISO 8601 timestamp of the event.
+     *
+     * @generated from field: string timestamp = 4;
+     */
+    timestamp: string;
+    /**
+     * Who produced the event: "system"/"runner" for capture and reconcile,
+     * "user" for decisions.
+     *
+     * @generated from field: string actor = 5;
+     */
+    actor: string;
+    /**
+     * Typed payload, selected by event_type.
+     *
+     * @generated from oneof ai.stigmer.agentic.agentexecution.v1.FileReviewEvent.payload
+     */
+    payload: {
+        /**
+         * Set when event_type == BASELINE_CAPTURED.
+         *
+         * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileReviewBaselineCaptured baseline_captured = 6;
+         */
+        value: FileReviewBaselineCaptured;
+        case: "baselineCaptured";
+    } | {
+        /**
+         * Set when event_type == CANDIDATE_CAPTURED.
+         *
+         * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileReviewCandidateCaptured candidate_captured = 7;
+         */
+        value: FileReviewCandidateCaptured;
+        case: "candidateCaptured";
+    } | {
+        /**
+         * Set when event_type == FILE_DECIDED — authored by SubmitFileDecision.
+         *
+         * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileDecision file_decided = 8;
+         */
+        value: FileDecision;
+        case: "fileDecided";
+    } | {
+        /**
+         * Set when event_type == RECONCILED.
+         *
+         * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileReviewReconciled reconciled = 9;
+         */
+        value: FileReviewReconciled;
+        case: "reconciled";
+    } | {
+        /**
+         * Set when event_type == FAILED.
+         *
+         * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileReviewFailure failed = 10;
+         */
+        value: FileReviewFailure;
+        case: "failed";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.FileReviewEvent.
+ * Use `create(FileReviewEventSchema)` to create a new message.
+ */
+export declare const FileReviewEventSchema: GenMessage<FileReviewEvent>;
+/**
+ * The ordered sequence of file-review events for a single agent execution.
+ *
+ * Persisted on AgentExecutionStatus.file_review_event_stream as a
+ * server-authored, append-only record. FileChangeSet is the projection of this
+ * stream; the stream is the source of truth.
+ *
+ * @internal
+ *
+ * Field ownership (one writer per event type):
+ *   - BASELINE_CAPTURED / CANDIDATE_CAPTURED / RECONCILED / FAILED events are
+ *     authored by the runner's capture and reconcile activities, which
+ *     CONTRIBUTE them on the UpdateStatus payload; the server folds them into
+ *     this server-owned stream append-only, by event_id.
+ *   - FILE_DECIDED events are authored by the SubmitFileDecision handler,
+ *     carrying reviewer_id and the user's comment. A runner-sent FILE_DECIDED is
+ *     dropped — the runner can never forge a human decision.
+ *
+ * Every append is keyed by the deterministic FileReviewEvent.event_id, so the
+ * stream is idempotent under retries and an existing event is never overwritten.
+ * The stored stream is server-owned: preserved in place across UpdateStatus
+ * writes and only ever extended by the fold above and by SubmitFileDecision.
+ *
+ * @since File-Change HITL Redesign (Phase 1)
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.FileReviewEventStream
+ */
+export type FileReviewEventStream = Message<"ai.stigmer.agentic.agentexecution.v1.FileReviewEventStream"> & {
+    /**
+     * AgentExecution.metadata.id this stream belongs to.
+     *
+     * @generated from field: string execution_id = 1;
+     */
+    executionId: string;
+    /**
+     * Events in lifecycle order.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.agentexecution.v1.FileReviewEvent events = 2;
+     */
+    events: FileReviewEvent[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.FileReviewEventStream.
+ * Use `create(FileReviewEventStreamSchema)` to create a new message.
+ */
+export declare const FileReviewEventStreamSchema: GenMessage<FileReviewEventStream>;