@stigmer/protos 3.0.9-dev.20260616060535 → 3.1.0

package/ai/stigmer/agentic/agentexecution/v1/api_pb.d.ts

@@ -1,8 +1,9 @@
 import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
-import type { PendingApproval } from "./approval_pb.js";
+import type { ApprovalEventStream, PendingApproval } from "./approval_pb.js";
 import type { ExecutionArtifact } from "./artifact_pb.js";
 import type { ContextInfo, ResolvedExecutionContext } from "./context_pb.js";
 import type { ExecutionPhase } from "./enum_pb.js";
+import type { FileChangeSet, FileReviewEventStream } from "./filereview_pb.js";
 import type { AgentMessage } from "./message_pb.js";
 import type { AgentExecutionSpec } from "./spec_pb.js";
 import type { SubAgentExecution } from "./subagent_pb.js";
@@ -198,6 +199,41 @@ export type AgentExecutionStatus = Message<"ai.stigmer.agentic.agentexecution.v1
      * @generated from field: repeated ai.stigmer.agentic.agentexecution.v1.PendingApproval pending_approvals = 16;
      */
     pendingApprovals: PendingApproval[];
+    /**
+     * Server-authored, append-only record of every approval request and decision.
+     *
+     * @internal
+     *
+     * This is the persisted form of the append-only stream that is the target
+     * single source of truth for approvals (see ApprovalEventStream in
+     * approval.proto). It is NOT yet read by any surface: pending_approvals is
+     * still projected from the authoritative message scan, and the UI/SDK read
+     * that. The stream coexists as a parallel, independently-authored record so
+     * that (1) the message-scan vs event-stream projection parity check becomes a
+     * real cross-writer regression guard rather than a tautology, and (2) the
+     * approval audit trail — who decided, when, with what comment — has a home,
+     * since the flat ToolCall.approval_action / approval_decided_at fields cannot
+     * capture a decision comment at all.
+     *
+     * Field ownership (one writer per event type):
+     *   - REQUESTED events are authored by the UpdateStatus handlers when a tool
+     *     call enters WAITING_APPROVAL (seeded once from the message scan for
+     *     executions that predate this field).
+     *   - Decision events (APPROVED / REJECTED / SKIPPED) are authored by the
+     *     SubmitApproval handler, carrying decided_by and the user's comment.
+     *
+     * Every append is keyed by the deterministic ApprovalEvent.event_id, so the
+     * stream is idempotent under retries and the rich decision event (authored in
+     * the same operation that records the decision on the message scan) can never
+     * be duplicated or overwritten by a coarse re-derivation.
+     *
+     * Because it is server-only, the agent-runner never sends it; it is preserved
+     * across UpdateStatus writes automatically (the merge starts from the loaded
+     * execution and only replaces runner-owned fields).
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.ApprovalEventStream approval_event_stream = 22;
+     */
+    approvalEventStream?: ApprovalEventStream;
     /**
      * Context window utilization and summarization tracking.
      *
@@ -286,6 +322,50 @@ export type AgentExecutionStatus = Message<"ai.stigmer.agentic.agentexecution.v1
      * @generated from field: google.protobuf.Struct structured_output = 21;
      */
     structuredOutput?: JsonObject;
+    /**
+     * Server-computed projection of file change sets awaiting or completing
+     * review for this execution.
+     *
+     * @internal
+     *
+     * Recomputed on every status write from file_review_event_stream (never
+     * merged), so it is always consistent with the authoritative ledger — exactly
+     * as pending_approvals is recomputed from the message scan / approval stream.
+     * Empty until the runner's capture activity authors events (Phase 2). A
+     * terminal execution projects no actionable review. See FileChangeSet.
+     *
+     * Field 23: appended after approval_event_stream (22), the prior maximum.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.agentexecution.v1.FileChangeSet file_change_sets = 23;
+     */
+    fileChangeSets: FileChangeSet[];
+    /**
+     * Server-owned, append-only record of every file-review event (baseline /
+     * candidate capture, file decisions, reconcile, failures).
+     *
+     * @internal
+     *
+     * The persisted source of truth that file_change_sets is projected from — a
+     * sibling of approval_event_stream for the file-review lifecycle (the
+     * ApprovalEvent oneof is closed, so file events cannot ride it). Appends are
+     * keyed by the deterministic FileReviewEvent.event_id, so the stream is
+     * idempotent under retries.
+     *
+     * Write contract (one writer per event type): the runner CONTRIBUTES its
+     * capture/reconcile events (BASELINE_CAPTURED / CANDIDATE_CAPTURED /
+     * RECONCILED / FAILED) by carrying them here on UpdateStatus; the server folds
+     * them into the stored stream append-only, by event_id, on the freshly-loaded
+     * execution under the write lock. The runner can never replace an existing
+     * event and never authors FILE_DECIDED (the server drops a runner-sent
+     * decision); FILE_DECIDED is authored solely by SubmitFileDecision. The stored
+     * stream is otherwise preserved in place across writes. See
+     * FileReviewEventStream.
+     *
+     * Field 24: appended after file_change_sets (23), the prior maximum.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.FileReviewEventStream file_review_event_stream = 24;
+     */
+    fileReviewEventStream?: FileReviewEventStream;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.AgentExecutionStatus.

package/ai/stigmer/agentic/agentexecution/v1/api_pb.js

@@ -6,6 +6,7 @@ import { file_ai_stigmer_agentic_agentexecution_v1_approval } from "./approval_p
 import { file_ai_stigmer_agentic_agentexecution_v1_artifact } from "./artifact_pb.js";
 import { file_ai_stigmer_agentic_agentexecution_v1_context } from "./context_pb.js";
 import { file_ai_stigmer_agentic_agentexecution_v1_enum } from "./enum_pb.js";
+import { file_ai_stigmer_agentic_agentexecution_v1_filereview } from "./filereview_pb.js";
 import { file_ai_stigmer_agentic_agentexecution_v1_message } from "./message_pb.js";
 import { file_ai_stigmer_agentic_agentexecution_v1_spec } from "./spec_pb.js";
 import { file_ai_stigmer_agentic_agentexecution_v1_subagent } from "./subagent_pb.js";
@@ -19,7 +20,7 @@ import { file_google_protobuf_struct } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/api.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_api = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_approval, file_ai_stigmer_agentic_agentexecution_v1_artifact, file_ai_stigmer_agentic_agentexecution_v1_context, file_ai_stigmer_agentic_agentexecution_v1_enum, file_ai_stigmer_agentic_agentexecution_v1_message, file_ai_stigmer_agentic_agentexecution_v1_spec, file_ai_stigmer_agentic_agentexecution_v1_subagent, file_ai_stigmer_agentic_agentexecution_v1_todo, file_ai_stigmer_agentic_agentexecution_v1_usage, file_ai_stigmer_agentic_agentexecution_v1_writeback, file_ai_stigmer_commons_apiresource_metadata, file_ai_stigmer_commons_apiresource_status, file_buf_validate_validate, file_google_protobuf_struct]);
+export const file_ai_stigmer_agentic_agentexecution_v1_api = /*@__PURE__*/ fileDesc("Ci5haS9zdGlnbWVyL2FnZW50aWMvYWdlbnRleGVjdXRpb24vdjEvYXBpLnByb3RvEiRhaS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEiywIKDkFnZW50RXhlY3V0aW9uEjEKC2FwaV92ZXJzaW9uGAEgASgJQhy6SBlyFwoVYWdlbnRpYy5zdGlnbWVyLmFpL3YxEiMKBGtpbmQYAiABKAlCFbpIEnIQCg5BZ2VudEV4ZWN1dGlvbhJNCghtZXRhZGF0YRgDIAEoCzIzLmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZU1ldGFkYXRhQga6SAPIAQESRgoEc3BlYxgEIAEoCzI4LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5BZ2VudEV4ZWN1dGlvblNwZWMSSgoGc3RhdHVzGAUgASgLMjouYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkFnZW50RXhlY3V0aW9uU3RhdHVzIsELChRBZ2VudEV4ZWN1dGlvblN0YXR1cxI/CgVhdWRpdBhjIAEoCzIwLmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZUF1ZGl0EkQKCG1lc3NhZ2VzGAEgAygLMjIuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkFnZW50TWVzc2FnZRJNCgVwaGFzZRgCIAEoDjI0LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5FeGVjdXRpb25QaGFzZUIIukgFggECEAESVQoUc3ViX2FnZW50X2V4ZWN1dGlvbnMYBCADKAsyNy5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuU3ViQWdlbnRFeGVjdXRpb24SDQoFZXJyb3IYBiABKAkSEgoKc3RhcnRlZF9hdBgHIAEoCRIUCgxjb21wbGV0ZWRfYXQYCCABKAkSVAoFdG9kb3MYCSADKAsyRS5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuQWdlbnRFeGVjdXRpb25TdGF0dXMuVG9kb3NFbnRyeRIWCg5jYWxsYmFja190b2tlbhgKIAEoDBJYChByZXNvbHZlZF9jb250ZXh0GAwgASgLMj4uYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLlJlc29sdmVkRXhlY3V0aW9uQ29udGV4dBJQChFwZW5kaW5nX2FwcHJvdmFscxgQIAMoCzI1LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5QZW5kaW5nQXBwcm92YWwSWAoVYXBwcm92YWxfZXZlbnRfc3RyZWFtGBYgASgLMjkuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkFwcHJvdmFsRXZlbnRTdHJlYW0SRwoMY29udGV4dF9pbmZvGA4gASgLMjEuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkNvbnRleHRJbmZvEkoKCWFydGlmYWN0cxgPIAMoCzI3LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5FeGVjdXRpb25BcnRpZmFjdBJXChV3b3Jrc3BhY2Vfd3JpdGVfYmFja3MYESADKAsyOC5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuV29ya3NwYWNlV3JpdGVCYWNrEksKDnNldHVwX3Byb2dyZXNzGBIgASgLMjMuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLlNldHVwUHJvZ3Jlc3MSVAoPc3RyZWFtaW5nX3VzYWdlGBQgASgLMjsuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLlN0cmVhbWluZ1VzYWdlU3VtbWFyeRIyChFzdHJ1Y3R1cmVkX291dHB1dBgVIAEoCzIXLmdvb2dsZS5wcm90b2J1Zi5TdHJ1Y3QSTQoQZmlsZV9jaGFuZ2Vfc2V0cxgXIAMoCzIzLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5GaWxlQ2hhbmdlU2V0El0KGGZpbGVfcmV2aWV3X2V2ZW50X3N0cmVhbRgYIAEoCzI7LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5GaWxlUmV2aWV3RXZlbnRTdHJlYW0aXAoKVG9kb3NFbnRyeRILCgNrZXkYASABKAkSPQoFdmFsdWUYAiABKAsyLi5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuVG9kb0l0ZW06AjgBIiYKDVNldHVwUHJvZ3Jlc3MSFQoNY3VycmVudF9waGFzZRgBIAEoCWIGcHJvdG8z", [file_ai_stigmer_agentic_agentexecution_v1_approval, file_ai_stigmer_agentic_agentexecution_v1_artifact, file_ai_stigmer_agentic_agentexecution_v1_context, file_ai_stigmer_agentic_agentexecution_v1_enum, file_ai_stigmer_agentic_agentexecution_v1_filereview, file_ai_stigmer_agentic_agentexecution_v1_message, file_ai_stigmer_agentic_agentexecution_v1_spec, file_ai_stigmer_agentic_agentexecution_v1_subagent, file_ai_stigmer_agentic_agentexecution_v1_todo, file_ai_stigmer_agentic_agentexecution_v1_usage, file_ai_stigmer_agentic_agentexecution_v1_writeback, file_ai_stigmer_commons_apiresource_metadata, file_ai_stigmer_commons_apiresource_status, file_buf_validate_validate, file_google_protobuf_struct]);
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.AgentExecution.
  * Use `create(AgentExecutionSchema)` to create a new message.

package/ai/stigmer/agentic/agentexecution/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,iDAAiD,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,iDAAiD,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,+CAA+C,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAE,mDAAmD,EAAE,MAAM,mBAAmB,CAAC;AAExF,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,ksEAAksE,EAAE,CAAC,kDAAkD,EAAE,kDAAkD,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,kDAAkD,EAAE,8CAA8C,EAAE,+CAA+C,EAAE,mDAAmD,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAgD51F;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AAkPhE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AAuBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,iDAAiD,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,oDAAoD,EAAE,MAAM,oBAAoB,CAAC;AAE1F,OAAO,EAAE,iDAAiD,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,+CAA+C,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAE,mDAAmD,EAAE,MAAM,mBAAmB,CAAC;AAExF,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,kiFAAkiF,EAAE,CAAC,kDAAkD,EAAE,kDAAkD,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,oDAAoD,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,kDAAkD,EAAE,8CAA8C,EAAE,+CAA+C,EAAE,mDAAmD,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAgDlvG;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AAoUhE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AAuBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/approval_pb.d.ts

@@ -1,5 +1,5 @@
 import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
-import type { ToolKind } from "./enum_pb.js";
+import type { ApprovalAction, ApprovalEventType, ApprovalPolicySource, ApprovalRetractionReason, ToolKind } from "./enum_pb.js";
 import type { Message } from "@bufbuild/protobuf";
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/approval.proto.
@@ -168,6 +168,16 @@ export type PendingApproval = Message<"ai.stigmer.agentic.agentexecution.v1.Pend
      * @generated from field: ai.stigmer.agentic.agentexecution.v1.ToolKind tool_kind = 13;
      */
     toolKind: ToolKind;
+    /**
+     * Policy layer that gated this tool call, copied from
+     * ToolCall.approval_policy_source by the server-side projection (exactly as
+     * tool_kind above is). Lets the approval surface explain WHY the tool requires
+     * approval (e.g. "required by agent override") without a client-side lookup.
+     * See ApprovalPolicySource.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.ApprovalPolicySource approval_policy_source = 15;
+     */
+    approvalPolicySource: ApprovalPolicySource;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.PendingApproval.
@@ -230,3 +240,317 @@ export type ChildApprovalNotification = Message<"ai.stigmer.agentic.agentexecuti
  * Use `create(ChildApprovalNotificationSchema)` to create a new message.
  */
 export declare const ChildApprovalNotificationSchema: GenMessage<ChildApprovalNotification>;
+/**
+ * A tool call requesting approval — the "ask" recorded when a gated tool call
+ * enters WAITING_APPROVAL.
+ *
+ * Carries the same display-facing field set as PendingApproval so a REQUESTED
+ * event can fully reconstruct the pending-approval projection without joining
+ * back to the originating ToolCall (which, for workflow-parent approvals, is not
+ * co-located with the approval).
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.ApprovalRequest
+ */
+export type ApprovalRequest = Message<"ai.stigmer.agentic.agentexecution.v1.ApprovalRequest"> & {
+    /**
+     * Correlation id shared by every event for this approval. Equal to
+     * tool_call_id by a deliberate decision (see the file header); the reserved
+     * seam for a future independent id, not a temporary placeholder.
+     *
+     * @generated from field: string approval_request_id = 1;
+     */
+    approvalRequestId: string;
+    /**
+     * Harness tool-call id of the gated call. Matches ToolCall.id; the bridge
+     * between today's message scan and the event stream.
+     *
+     * @generated from field: string tool_call_id = 2;
+     */
+    toolCallId: string;
+    /**
+     * ISO 8601 timestamp when approval was requested. Copied from
+     * ToolCall.approval_requested_at.
+     *
+     * @generated from field: string requested_at = 3;
+     */
+    requestedAt: string;
+    /**
+     * Name of the tool requiring approval. Matches ToolCall.name.
+     *
+     * @generated from field: string tool_name = 4;
+     */
+    toolName: string;
+    /**
+     * Human-readable approval message for display. Copied from
+     * ToolCall.approval_message (placeholders already resolved).
+     *
+     * @generated from field: string message = 5;
+     */
+    message: string;
+    /**
+     * Sanitized preview of tool arguments. Copied from ToolCall.args_preview.
+     *
+     * @generated from field: string args_preview = 6;
+     */
+    argsPreview: string;
+    /**
+     * True if this approval originates from a sub-agent.
+     *
+     * @generated from field: bool from_sub_agent = 7;
+     */
+    fromSubAgent: boolean;
+    /**
+     * Name of the sub-agent when from_sub_agent is true; empty otherwise.
+     *
+     * @generated from field: string sub_agent_name = 8;
+     */
+    subAgentName: string;
+    /**
+     * Concise subject of the sub-agent's task when from_sub_agent is true; empty
+     * otherwise. Copied from SubAgentExecution.subject.
+     *
+     * @generated from field: string sub_agent_subject = 9;
+     */
+    subAgentSubject: string;
+    /**
+     * Slug of the MCP server providing this tool; empty for built-in tools.
+     * Copied from ToolCall.mcp_server_slug.
+     *
+     * @generated from field: string mcp_server_slug = 10;
+     */
+    mcpServerSlug: string;
+    /**
+     * Harness-agnostic tool category. Copied from ToolCall.tool_kind.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.ToolKind tool_kind = 11;
+     */
+    toolKind: ToolKind;
+    /**
+     * Policy layer that gated this call. Copied from
+     * ToolCall.approval_policy_source so the event-stream projection reconstructs
+     * the same PendingApproval as the message scan. See ApprovalPolicySource.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.ApprovalPolicySource approval_policy_source = 13;
+     */
+    approvalPolicySource: ApprovalPolicySource;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalRequest.
+ * Use `create(ApprovalRequestSchema)` to create a new message.
+ */
+export declare const ApprovalRequestSchema: GenMessage<ApprovalRequest>;
+/**
+ * The platform's withdrawal of an in-flight approval request — the system-actored
+ * terminal transition of the approval lifecycle, authored when a gated call
+ * becomes unreachable before any user decision (its sub-agent went terminal, or
+ * it was superseded on resume) while the execution is still live.
+ *
+ * It is distinct from ApprovalDecision (the three user actions). Terminal-execution
+ * gate-exits (cancel / fail / terminate) are NOT modeled here — a terminal
+ * execution simply has zero pending approvals by projection — so this event is
+ * reserved for the in-flight, per-call orphan case. See APPROVAL_EVENT_TYPE_RETRACTED.
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.ApprovalRetraction
+ */
+export type ApprovalRetraction = Message<"ai.stigmer.agentic.agentexecution.v1.ApprovalRetraction"> & {
+    /**
+     * Correlates this retraction to its ApprovalRequest.
+     *
+     * @generated from field: string approval_request_id = 1;
+     */
+    approvalRequestId: string;
+    /**
+     * Why the platform withdrew the request. Audit-trail metadata only; never
+     * affects control flow. See ApprovalRetractionReason.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.ApprovalRetractionReason reason = 2;
+     */
+    reason: ApprovalRetractionReason;
+    /**
+     * ISO 8601 timestamp when the request was retracted.
+     *
+     * @generated from field: string retracted_at = 3;
+     */
+    retractedAt: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalRetraction.
+ * Use `create(ApprovalRetractionSchema)` to create a new message.
+ */
+export declare const ApprovalRetractionSchema: GenMessage<ApprovalRetraction>;
+/**
+ * A user's decision on an approval request.
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.ApprovalDecision
+ */
+export type ApprovalDecision = Message<"ai.stigmer.agentic.agentexecution.v1.ApprovalDecision"> & {
+    /**
+     * Correlates this decision to its ApprovalRequest.
+     *
+     * @generated from field: string approval_request_id = 1;
+     */
+    approvalRequestId: string;
+    /**
+     * The precise user action (APPROVE / SKIP / REJECT / APPROVE_ALL).
+     * ApprovalEvent.event_type carries the coarse bucket; this carries fidelity.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.ApprovalAction action = 2;
+     */
+    action: ApprovalAction;
+    /**
+     * ISO 8601 timestamp when the decision was made.
+     *
+     * @generated from field: string decided_at = 3;
+     */
+    decidedAt: string;
+    /**
+     * Identity of the decider (principal). Empty when not attributed.
+     *
+     * @generated from field: string decided_by = 4;
+     */
+    decidedBy: string;
+    /**
+     * Optional free-text comment supplied with the decision (e.g. a rejection
+     * reason).
+     *
+     * @generated from field: string comment = 5;
+     */
+    comment: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalDecision.
+ * Use `create(ApprovalDecisionSchema)` to create a new message.
+ */
+export declare const ApprovalDecisionSchema: GenMessage<ApprovalDecision>;
+/**
+ * An immutable event in the approval lifecycle.
+ *
+ * The payload is a closed oneof so each event type is type-safe and
+ * self-documenting: REQUESTED carries an ApprovalRequest; APPROVED / REJECTED /
+ * SKIPPED carry an ApprovalDecision; RETRACTED carries an ApprovalRetraction.
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.ApprovalEvent
+ */
+export type ApprovalEvent = Message<"ai.stigmer.agentic.agentexecution.v1.ApprovalEvent"> & {
+    /**
+     * Unique id of this event, deterministic by design: derived from
+     * tool_call_id + event_type. This is the permanent idempotency key for
+     * append-only authoring (a single approval has at most one event per type), so
+     * re-deriving or re-authoring the stream never duplicates an event.
+     *
+     * @generated from field: string event_id = 1;
+     */
+    eventId: string;
+    /**
+     * Correlation id shared by every event for one approval (request + decision).
+     *
+     * @generated from field: string approval_request_id = 2;
+     */
+    approvalRequestId: string;
+    /**
+     * Coarse lifecycle bucket of this event. See ApprovalEventType.
+     *
+     * @generated from field: ai.stigmer.agentic.agentexecution.v1.ApprovalEventType event_type = 3;
+     */
+    eventType: ApprovalEventType;
+    /**
+     * ISO 8601 timestamp of the event.
+     *
+     * @generated from field: string timestamp = 4;
+     */
+    timestamp: string;
+    /**
+     * Who produced the event: "system" for REQUESTED, "user" for decisions.
+     *
+     * @generated from field: string actor = 5;
+     */
+    actor: string;
+    /**
+     * Typed payload, selected by event_type.
+     *
+     * @generated from oneof ai.stigmer.agentic.agentexecution.v1.ApprovalEvent.payload
+     */
+    payload: {
+        /**
+         * Set when event_type == REQUESTED.
+         *
+         * @generated from field: ai.stigmer.agentic.agentexecution.v1.ApprovalRequest requested = 6;
+         */
+        value: ApprovalRequest;
+        case: "requested";
+    } | {
+        /**
+         * Set for decision events (APPROVED / REJECTED / SKIPPED).
+         *
+         * @generated from field: ai.stigmer.agentic.agentexecution.v1.ApprovalDecision decided = 7;
+         */
+        value: ApprovalDecision;
+        case: "decided";
+    } | {
+        /**
+         * Set when event_type == RETRACTED — the platform withdrew the request
+         * before any user decision. See ApprovalRetraction.
+         *
+         * @generated from field: ai.stigmer.agentic.agentexecution.v1.ApprovalRetraction retracted = 8;
+         */
+        value: ApprovalRetraction;
+        case: "retracted";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalEvent.
+ * Use `create(ApprovalEventSchema)` to create a new message.
+ */
+export declare const ApprovalEventSchema: GenMessage<ApprovalEvent>;
+/**
+ * The ordered sequence of approval events for a single agent execution.
+ *
+ * Persisted on AgentExecutionStatus.approval_event_stream as a server-authored,
+ * append-only record that coexists with the authoritative message scan. The
+ * scan still feeds pending_approvals and the UI; this stream is the parallel,
+ * independently-written ledger that (1) turns the projection parity check into a
+ * real cross-writer guard and (2) holds the approval audit trail (decided_by +
+ * comment) the flat ToolCall fields cannot.
+ *
+ * The lifecycle is total: every REQUESTED is eventually resolved by a decision
+ * (APPROVED / REJECTED / SKIPPED) or by a RETRACTED event the reconciler authors
+ * when an in-flight gated call becomes unreachable without a decision. Combined
+ * with the projection treating a terminal execution as zero pending approvals,
+ * this makes ComputePendingApprovalsFromEvents over this stream agree with the
+ * message scan after every write — the equality property the eventual
+ * source-of-truth flip rides on. The source of truth does not flip in this
+ * phase; the scan remains authoritative and is retained as the permanent
+ * cross-writer guard.
+ *
+ * Appends are keyed by the deterministic ApprovalEvent.event_id: REQUESTED and
+ * RETRACTED events are authored by the UpdateStatus / SubmitApproval reconciler
+ * (REQUESTED seeded once from the scan for executions predating the field),
+ * decision events by SubmitApproval (with decided_by and comment). Authoring the
+ * rich decision event in the same operation that records the decision on the
+ * scan guarantees it can never be duplicated or clobbered by a coarse
+ * re-derivation.
+ *
+ * @generated from message ai.stigmer.agentic.agentexecution.v1.ApprovalEventStream
+ */
+export type ApprovalEventStream = Message<"ai.stigmer.agentic.agentexecution.v1.ApprovalEventStream"> & {
+    /**
+     * AgentExecution.metadata.id this stream belongs to.
+     *
+     * @generated from field: string execution_id = 1;
+     */
+    executionId: string;
+    /**
+     * Events in lifecycle order.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.agentexecution.v1.ApprovalEvent events = 2;
+     */
+    events: ApprovalEvent[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalEventStream.
+ * Use `create(ApprovalEventStreamSchema)` to create a new message.
+ */
+export declare const ApprovalEventStreamSchema: GenMessage<ApprovalEventStream>;

package/ai/stigmer/agentic/agentexecution/v1/approval_pb.js

@@ -6,7 +6,7 @@ import { file_ai_stigmer_agentic_agentexecution_v1_enum } from "./enum_pb.js";
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/approval.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_approval = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_enum]);
+export const file_ai_stigmer_agentic_agentexecution_v1_approval = /*@__PURE__*/ fileDesc("CjNhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRleGVjdXRpb24vdjEvYXBwcm92YWwucHJvdG8SJGFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MSLLAwoPUGVuZGluZ0FwcHJvdmFsEhQKDHRvb2xfY2FsbF9pZBgBIAEoCRIRCgl0b29sX25hbWUYAiABKAkSDwoHbWVzc2FnZRgDIAEoCRIUCgxhcmdzX3ByZXZpZXcYBCABKAkSFAoMcmVxdWVzdGVkX2F0GAUgASgJEhYKDmZyb21fc3ViX2FnZW50GAYgASgIEhYKDnN1Yl9hZ2VudF9uYW1lGAcgASgJEhcKD21jcF9zZXJ2ZXJfc2x1ZxgIIAEoCRIZChFzdWJfYWdlbnRfc3ViamVjdBgJIAEoCRIXCg9hZ2VudF9yYXRpb25hbGUYCiABKAkSFgoOYnJhbmNoX2F0X2RlbnkYCyABKAkSGAoQaGVhZF9zaGFfYXRfZGVueRgMIAEoCRJBCgl0b29sX2tpbmQYDSABKA4yLi5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuVG9vbEtpbmQSWgoWYXBwcm92YWxfcG9saWN5X3NvdXJjZRgPIAEoDjI6LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5BcHByb3ZhbFBvbGljeVNvdXJjZUoECA4QDyKDAQoZQ2hpbGRBcHByb3ZhbE5vdGlmaWNhdGlvbhIUCgxleGVjdXRpb25faWQYASABKAkSUAoRcGVuZGluZ19hcHByb3ZhbHMYAiADKAsyNS5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuUGVuZGluZ0FwcHJvdmFsIp0DCg9BcHByb3ZhbFJlcXVlc3QSGwoTYXBwcm92YWxfcmVxdWVzdF9pZBgBIAEoCRIUCgx0b29sX2NhbGxfaWQYAiABKAkSFAoMcmVxdWVzdGVkX2F0GAMgASgJEhEKCXRvb2xfbmFtZRgEIAEoCRIPCgdtZXNzYWdlGAUgASgJEhQKDGFyZ3NfcHJldmlldxgGIAEoCRIWCg5mcm9tX3N1Yl9hZ2VudBgHIAEoCBIWCg5zdWJfYWdlbnRfbmFtZRgIIAEoCRIZChFzdWJfYWdlbnRfc3ViamVjdBgJIAEoCRIXCg9tY3Bfc2VydmVyX3NsdWcYCiABKAkSQQoJdG9vbF9raW5kGAsgASgOMi4uYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLlRvb2xLaW5kEloKFmFwcHJvdmFsX3BvbGljeV9zb3VyY2UYDSABKA4yOi5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuQXBwcm92YWxQb2xpY3lTb3VyY2VKBAgMEA0ilwEKEkFwcHJvdmFsUmV0cmFjdGlvbhIbChNhcHByb3ZhbF9yZXF1ZXN0X2lkGAEgASgJEk4KBnJlYXNvbhgCIAEoDjI+LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5BcHByb3ZhbFJldHJhY3Rpb25SZWFzb24SFAoMcmV0cmFjdGVkX2F0GAMgASgJIq4BChBBcHByb3ZhbERlY2lzaW9uEhsKE2FwcHJvdmFsX3JlcXVlc3RfaWQYASABKAkSRAoGYWN0aW9uGAIgASgOMjQuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkFwcHJvdmFsQWN0aW9uEhIKCmRlY2lkZWRfYXQYAyABKAkSEgoKZGVjaWRlZF9ieRgEIAEoCRIPCgdjb21tZW50GAUgASgJIp4DCg1BcHByb3ZhbEV2ZW50EhAKCGV2ZW50X2lkGAEgASgJEhsKE2FwcHJvdmFsX3JlcXVlc3RfaWQYAiABKAkSSwoKZXZlbnRfdHlwZRgDIAEoDjI3LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5BcHByb3ZhbEV2ZW50VHlwZRIRCgl0aW1lc3RhbXAYBCABKAkSDQoFYWN0b3IYBSABKAkSSgoJcmVxdWVzdGVkGAYgASgLMjUuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkFwcHJvdmFsUmVxdWVzdEgAEkkKB2RlY2lkZWQYByABKAsyNi5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuQXBwcm92YWxEZWNpc2lvbkgAEk0KCXJldHJhY3RlZBgIIAEoCzI4LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5BcHByb3ZhbFJldHJhY3Rpb25IAEIJCgdwYXlsb2FkInAKE0FwcHJvdmFsRXZlbnRTdHJlYW0SFAoMZXhlY3V0aW9uX2lkGAEgASgJEkMKBmV2ZW50cxgCIAMoCzIzLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5BcHByb3ZhbEV2ZW50YgZwcm90bzM", [file_ai_stigmer_agentic_agentexecution_v1_enum]);
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.PendingApproval.
  * Use `create(PendingApprovalSchema)` to create a new message.
@@ -17,4 +17,29 @@ export const PendingApprovalSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_a
  * Use `create(ChildApprovalNotificationSchema)` to create a new message.
  */
 export const ChildApprovalNotificationSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_approval, 1);
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalRequest.
+ * Use `create(ApprovalRequestSchema)` to create a new message.
+ */
+export const ApprovalRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_approval, 2);
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalRetraction.
+ * Use `create(ApprovalRetractionSchema)` to create a new message.
+ */
+export const ApprovalRetractionSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_approval, 3);
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalDecision.
+ * Use `create(ApprovalDecisionSchema)` to create a new message.
+ */
+export const ApprovalDecisionSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_approval, 4);
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalEvent.
+ * Use `create(ApprovalEventSchema)` to create a new message.
+ */
+export const ApprovalEventSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_approval, 5);
+/**
+ * Describes the message ai.stigmer.agentic.agentexecution.v1.ApprovalEventStream.
+ * Use `create(ApprovalEventStreamSchema)` to create a new message.
+ */
+export const ApprovalEventStreamSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_approval, 6);
 //# sourceMappingURL=approval_pb.js.map

package/ai/stigmer/agentic/agentexecution/v1/approval_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/approval_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAG9E;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,8xBAA8xB,EAAE,CAAC,8CAA8C,CAAC,CAAC,CAAC;AAmL71B;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAuDrE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"approval_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/approval_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAG9E;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,ykFAAykF,EAAE,CAAC,8CAA8C,CAAC,CAAC,CAAC;AA8LxoF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAuDrE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AA4GrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAuCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AA8CrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAmFrE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAgDrE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/artifact_pb.d.ts

@@ -58,17 +58,13 @@ export type ExecutionArtifact = Message<"ai.stigmer.agentic.agentexecution.v1.Ex
      * Storage location in R2.
      * Format: "artifacts/{execution_id}/{filename}"
      *
+     * Clients resolve a download URL on demand from this stable key (via
+     * getArtifactDownloadUrl) — there is deliberately no persisted URL, since a
+     * pre-signed URL would expire while the reference does not.
+     *
      * @generated from field: string storage_key = 5;
      */
     storageKey: string;
-    /**
-     * Pre-signed URL for downloading the artifact.
-     * Expires after a configured period (default: 7 days).
-     * Clients can call the refresh endpoint to get a new URL if expired.
-     *
-     * @generated from field: string download_url = 6;
-     */
-    downloadUrl: string;
     /**
      * ISO 8601 timestamp when the artifact was created.
      * Example: "2026-02-13T10:30:00Z"

package/ai/stigmer/agentic/agentexecution/v1/artifact_pb.js

@@ -7,7 +7,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/artifact.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_artifact = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_enum, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agentexecution_v1_artifact = /*@__PURE__*/ fileDesc("CjNhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRleGVjdXRpb24vdjEvYXJ0aWZhY3QucHJvdG8SJGFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MSKEAgoRRXhlY3V0aW9uQXJ0aWZhY3QSDAoEbmFtZRgBIAEoCRIUCgxzYW5kYm94X3BhdGgYAiABKAkSUwoEa2luZBgDIAEoDjI7LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5FeGVjdXRpb25BcnRpZmFjdEtpbmRCCLpIBYIBAhABEhIKCnNpemVfYnl0ZXMYBCABKAMSEwoLc3RvcmFnZV9rZXkYBSABKAkSEgoKY3JlYXRlZF9hdBgHIAEoCRISCgpleHBpcmVzX2F0GAggASgJEg8KB2VudHJpZXMYCSADKAkSFAoMY29udGVudF9oYXNoGAogASgJYgZwcm90bzM", [file_ai_stigmer_agentic_agentexecution_v1_enum, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.ExecutionArtifact.
  * Use `create(ExecutionArtifactSchema)` to create a new message.

package/ai/stigmer/agentic/agentexecution/v1/artifact_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/artifact_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,kgBAAkgB,EAAE,CAAC,8CAA8C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA2H7lB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"artifact_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/artifact_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,qeAAqe,EAAE,CAAC,8CAA8C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAsHhkB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/command_connect.d.ts

@@ -114,6 +114,45 @@ export declare const AgentExecutionCommandController: {
             readonly O: any;
             readonly kind: any;
         };
+        /**
+         * Submit a keep/discard decision on a file change set (or a single file).
+         *
+         * Records a FILE_DECIDED event in the append-only file_review stream;
+         * FileChangeSet.decisions is the derived projection. The runner reconciles
+         * the approved bytes (Phase 2) — this RPC records the decision and enforces
+         * that expected_digest still matches the captured content the user reviewed.
+         *
+         * ## Preconditions
+         *
+         * - Execution must exist and be non-terminal
+         * - change_set_id must match a status.file_change_sets[].id; for FILE scope,
+         *   file_change_id must match a CapturedFileChange.id within it
+         * - expected_digest must match the target's current digest
+         * - User must have can_edit permission on the execution
+         *
+         * @internal
+         *
+         * ## Error Conditions
+         *
+         * - NOT_FOUND: Execution doesn't exist
+         * - FAILED_PRECONDITION: Execution terminal, or change set/file not found
+         * - INVALID_ARGUMENT: scope/action UNSPECIFIED, missing file_change_id for
+         *   FILE scope, or expected_digest mismatch
+         * - PERMISSION_DENIED: User lacks can_edit permission
+         *
+         * ## Idempotency
+         *
+         * Re-submitting the same decision (same change set, scope, target) is a no-op
+         * and returns the current state — appends are keyed by FileReviewEvent.event_id.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentexecution.v1.AgentExecutionCommandController.submitFileDecision
+         */
+        readonly submitFileDecision: {
+            readonly name: "submitFileDecision";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
         /**
          * Cancel a running agent execution gracefully.
          *