@stigmer/protos 3.1.12 → 3.1.14

package/ai/stigmer/agentic/agent/v1/command_connect.d.ts

@@ -71,16 +71,22 @@ export declare const AgentCommandController: {
          * Delete an agent.
          *
          * Deletion also removes the agent's system-managed default instance and
-         * every AgentShare referencing the agent, so a later agent created at the
-         * same org/slug starts clean. Personal instances and sessions are not
-         * deleted.
+         * every AgentShare in the agent's own organization referencing it, so a
+         * later agent created at the same org/slug starts clean. Personal
+         * instances, sessions, and other organizations' shares of this agent are
+         * not deleted — external shares stop resolving instead.
          *
          * @internal
          * Cascade order is children-before-parent so a mid-failure retry
-         * converges. Shares are matched by spec.agent_ref (org + agent slug) —
-         * leaving them behind would silently rebind a stale share (audience, link
-         * token, bound credentials) to whatever agent is later created at that
-         * slug. Cloud additionally cleans each cascaded child's FGA tuples.
+         * converges. Shares are matched by spec.agent_ref (org + agent slug) and
+         * scoped to the agent's own org — leaving same-org shares behind would
+         * silently rebind a stale share (audience, link token, bound
+         * credentials) to whatever agent is later created at that slug, while
+         * cascading ANOTHER org's share would make delete a cross-principal
+         * destructive action (decision 013). Cross-org shares instead fail
+         * closed via the dangling-ref check and the status.agent_id pin; their
+         * owning orgs clean up their own rows. Cloud additionally cleans each
+         * cascaded child's FGA tuples.
          *
          * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.delete
          */

package/ai/stigmer/agentic/agent/v1/command_connect.js

@@ -79,16 +79,22 @@ export const AgentCommandController = {
          * Delete an agent.
          *
          * Deletion also removes the agent's system-managed default instance and
-         * every AgentShare referencing the agent, so a later agent created at the
-         * same org/slug starts clean. Personal instances and sessions are not
-         * deleted.
+         * every AgentShare in the agent's own organization referencing it, so a
+         * later agent created at the same org/slug starts clean. Personal
+         * instances, sessions, and other organizations' shares of this agent are
+         * not deleted — external shares stop resolving instead.
          *
          * @internal
          * Cascade order is children-before-parent so a mid-failure retry
-         * converges. Shares are matched by spec.agent_ref (org + agent slug) —
-         * leaving them behind would silently rebind a stale share (audience, link
-         * token, bound credentials) to whatever agent is later created at that
-         * slug. Cloud additionally cleans each cascaded child's FGA tuples.
+         * converges. Shares are matched by spec.agent_ref (org + agent slug) and
+         * scoped to the agent's own org — leaving same-org shares behind would
+         * silently rebind a stale share (audience, link token, bound
+         * credentials) to whatever agent is later created at that slug, while
+         * cascading ANOTHER org's share would make delete a cross-principal
+         * destructive action (decision 013). Cross-org shares instead fail
+         * closed via the dangling-ref check and the status.agent_id pin; their
+         * owning orgs clean up their own rows. Cloud additionally cleans each
+         * cascaded child's FGA tuples.
          *
          * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.delete
          */

package/ai/stigmer/agentic/agent/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agent/v1/command_pb.d.ts

@@ -73,16 +73,22 @@ export declare const AgentCommandController: GenService<{
      * Delete an agent.
      *
      * Deletion also removes the agent's system-managed default instance and
-     * every AgentShare referencing the agent, so a later agent created at the
-     * same org/slug starts clean. Personal instances and sessions are not
-     * deleted.
+     * every AgentShare in the agent's own organization referencing it, so a
+     * later agent created at the same org/slug starts clean. Personal
+     * instances, sessions, and other organizations' shares of this agent are
+     * not deleted — external shares stop resolving instead.
      *
      * @internal
      * Cascade order is children-before-parent so a mid-failure retry
-     * converges. Shares are matched by spec.agent_ref (org + agent slug) —
-     * leaving them behind would silently rebind a stale share (audience, link
-     * token, bound credentials) to whatever agent is later created at that
-     * slug. Cloud additionally cleans each cascaded child's FGA tuples.
+     * converges. Shares are matched by spec.agent_ref (org + agent slug) and
+     * scoped to the agent's own org — leaving same-org shares behind would
+     * silently rebind a stale share (audience, link token, bound
+     * credentials) to whatever agent is later created at that slug, while
+     * cascading ANOTHER org's share would make delete a cross-principal
+     * destructive action (decision 013). Cross-org shares instead fail
+     * closed via the dangling-ref check and the status.agent_id pin; their
+     * owning orgs clean up their own rows. Cloud additionally cleans each
+     * cascaded child's FGA tuples.
      *
      * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.delete
      */

package/ai/stigmer/agentic/agent/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,wiCAAwiC,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE/wC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAgF9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,wiCAAwiC,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE/wC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAsF9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/api_pb.d.ts

@@ -0,0 +1,68 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { AgentChannelSpec } from "./spec_pb.js";
+import type { AgentChannelStatus } from "./status_pb.js";
+import type { ApiResourceMetadata } from "../../../commons/apiresource/metadata_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/api.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentchannel_v1_api: GenFile;
+/**
+ * AgentChannel connects an agent to an external messaging platform so people can chat with it where they already work.
+ *
+ * A channel is a distribution channel like AgentShare, but for push-based
+ * messaging platforms: the provider (Slack today) delivers user messages
+ * to a Stigmer webhook, and Stigmer calls the provider's API to deliver
+ * the agent's replies. The connection records which agent serves the
+ * channel, whether serving is enabled, and provider selection; the
+ * workspace identity and credential references produced by the install
+ * flow live in status. Deleting the channel tears the connection down;
+ * disabling pauses serving while preserving the install.
+ *
+ * @internal
+ * Sibling of AgentShare (decision 001): one kind per target, provider
+ * variance in spec.provider_config. metadata.org is the billing org
+ * (decision 001 D-b). N channels per agent; the defaults resolver does
+ * NOT default the slug to the agent slug (org+slug is unique and channels
+ * are N-per-agent — P7), standard derive-from-name applies. The overview.md
+ * file provides the SDK-facing description and example YAML.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.AgentChannel
+ */
+export type AgentChannel = Message<"ai.stigmer.agentic.agentchannel.v1.AgentChannel"> & {
+    /**
+     * API version for this resource type.
+     *
+     * @generated from field: string api_version = 1;
+     */
+    apiVersion: string;
+    /**
+     * Resource kind identifier.
+     *
+     * @generated from field: string kind = 2;
+     */
+    kind: string;
+    /**
+     * Resource metadata including name, organization, and labels.
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceMetadata metadata = 3;
+     */
+    metadata?: ApiResourceMetadata;
+    /**
+     * Configurable properties: referenced agent, enablement, and provider selection.
+     *
+     * @generated from field: ai.stigmer.agentic.agentchannel.v1.AgentChannelSpec spec = 4;
+     */
+    spec?: AgentChannelSpec;
+    /**
+     * System-managed state: install lifecycle, provider install facts, credential reference, and audit trail.
+     *
+     * @generated from field: ai.stigmer.agentic.agentchannel.v1.AgentChannelStatus status = 5;
+     */
+    status?: AgentChannelStatus;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.AgentChannel.
+ * Use `create(AgentChannelSchema)` to create a new message.
+ */
+export declare const AgentChannelSchema: GenMessage<AgentChannel>;

package/ai/stigmer/agentic/agentchannel/v1/api_pb.js

@@ -0,0 +1,18 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentchannel/v1/api.proto (package ai.stigmer.agentic.agentchannel.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_agentchannel_v1_spec } from "./spec_pb.js";
+import { file_ai_stigmer_agentic_agentchannel_v1_status } from "./status_pb.js";
+import { file_ai_stigmer_commons_apiresource_metadata } from "../../../commons/apiresource/metadata_pb.js";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/api.proto.
+ */
+export const file_ai_stigmer_agentic_agentchannel_v1_api = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentchannel_v1_spec, file_ai_stigmer_agentic_agentchannel_v1_status, file_ai_stigmer_commons_apiresource_metadata, file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.AgentChannel.
+ * Use `create(AgentChannelSchema)` to create a new message.
+ */
+export const AgentChannelSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_api, 0);
+//# sourceMappingURL=api_pb.js.map

package/ai/stigmer/agentic/agentchannel/v1/api_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,cAAc,CAAC;AAE5E,OAAO,EAAE,8CAA8C,EAAE,MAAM,gBAAgB,CAAC;AAEhF,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,wiBAAwiB,EAAE,CAAC,4CAA4C,EAAE,8CAA8C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6D/tB;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/command_connect.d.ts

@@ -0,0 +1,139 @@
+/**
+ * AgentChannelCommandController handles write operations for agent channels.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController
+ */
+export declare const AgentChannelCommandController: {
+    readonly typeName: "ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController";
+    readonly methods: {
+        /**
+         * Create or update an agent channel.
+         *
+         * @internal
+         * The authorization and state-operation are determined depending on
+         * whether the channel is going to be created or updated, resolved as
+         * part of request execution. status is preserved verbatim (the install
+         * flow is its sole writer).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.apply
+         */
+        readonly apply: {
+            readonly name: "apply";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Create an agent channel.
+         *
+         * Connecting an agent to a channel is a billing-affecting decision:
+         * conversations arriving over the channel consume the connection-owning
+         * organization's credits.
+         *
+         * @internal
+         * Authorization: requires can_edit on the REFERENCED AGENT
+         * (spec.agent_ref), checked in-handler — same bar as AgentShare create,
+         * since connecting a channel broadens who can chat with the agent
+         * runtime. Standard org-scoped create tuples (owner = creator) for the
+         * channel itself; no visibility tuples (channel admission is app-level).
+         * Invariant enforced here: metadata.org must equal spec.agent_ref.org.
+         * status.install_state is initialized to pending_install.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.create
+         */
+        readonly create: {
+            readonly name: "create";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Update an existing agent channel.
+         *
+         * Replaces the spec wholesale. The slug, referenced agent, and provider
+         * arm are immutable; status (install facts, credential reference) is
+         * never touched by updates.
+         *
+         * @internal
+         * Authorization: requires can_edit permission on the agent channel.
+         * Provider-arm immutability (a slack channel cannot become whatsapp) is
+         * enforced in-handler: the install state, credentials, and delivery
+         * records are all provider-shaped.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.update
+         */
+        readonly update: {
+            readonly name: "update";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Start the provider install flow for an agent channel.
+         *
+         * Returns the provider authorization URL to redirect the installing
+         * user to, plus the single-use state that completeInstall verifies.
+         *
+         * @internal
+         * Authorization: requires can_edit on the agent channel — installing
+         * grants a workspace access to the agent runtime, the same bar as
+         * enabling. Generates and persists the single-use state (pending-state
+         * pattern from MCP OAuth). Cloud-first runtime: the OSS edition stores
+         * channel resources but returns FAILED_PRECONDITION here (documented
+         * posture, decision 001 D-g / T02 §0-b).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.initiateInstall
+         */
+        readonly initiateInstall: {
+            readonly name: "initiateInstall";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Complete the provider install flow for an agent channel.
+         *
+         * Called by the console after the provider's consent redirect, with the
+         * state from initiateInstall and the provider's authorization code. On
+         * success the channel's status carries the install facts and the
+         * channel begins serving (subject to spec.enabled).
+         *
+         * @internal
+         * Authorization: requires can_edit on the agent channel — the same bar
+         * as initiateInstall (the two halves of one flow). The handler consumes
+         * the state atomically, exchanges the code, stores credentials in the
+         * system-managed Environment, records the grant, and writes the status
+         * facts (sole writer). The OSS edition returns FAILED_PRECONDITION
+         * (documented posture, decision 001 D-g / T02 §0-b).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.completeInstall
+         */
+        readonly completeInstall: {
+            readonly name: "completeInstall";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Delete an agent channel.
+         *
+         * Full teardown of the connection: inbound events for the workspace stop
+         * resolving, pending deliveries are abandoned, and the credentials
+         * environment is deleted with the grant. To pause serving while keeping
+         * the install, update the channel with enabled=false instead.
+         *
+         * @internal
+         * Authorization: requires can_delete permission on the agent channel.
+         * The referenced agent is untouched. Teardown cascade (managed env +
+         * grant deletion) mirrors McpServer disconnectOAuth.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.delete
+         */
+        readonly delete: {
+            readonly name: "delete";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/agentic/agentchannel/v1/command_connect.js

@@ -0,0 +1,147 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentchannel/v1/command.proto (package ai.stigmer.agentic.agentchannel.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { AgentChannel } from "./api_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+import { AgentChannelId, CompleteChannelInstallInput, InitiateChannelInstallInput, InitiateChannelInstallOutput } from "./io_pbjs";
+/**
+ * AgentChannelCommandController handles write operations for agent channels.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController
+ */
+export const AgentChannelCommandController = {
+    typeName: "ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController",
+    methods: {
+        /**
+         * Create or update an agent channel.
+         *
+         * @internal
+         * The authorization and state-operation are determined depending on
+         * whether the channel is going to be created or updated, resolved as
+         * part of request execution. status is preserved verbatim (the install
+         * flow is its sole writer).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.apply
+         */
+        apply: {
+            name: "apply",
+            I: AgentChannel,
+            O: AgentChannel,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Create an agent channel.
+         *
+         * Connecting an agent to a channel is a billing-affecting decision:
+         * conversations arriving over the channel consume the connection-owning
+         * organization's credits.
+         *
+         * @internal
+         * Authorization: requires can_edit on the REFERENCED AGENT
+         * (spec.agent_ref), checked in-handler — same bar as AgentShare create,
+         * since connecting a channel broadens who can chat with the agent
+         * runtime. Standard org-scoped create tuples (owner = creator) for the
+         * channel itself; no visibility tuples (channel admission is app-level).
+         * Invariant enforced here: metadata.org must equal spec.agent_ref.org.
+         * status.install_state is initialized to pending_install.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.create
+         */
+        create: {
+            name: "create",
+            I: AgentChannel,
+            O: AgentChannel,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Update an existing agent channel.
+         *
+         * Replaces the spec wholesale. The slug, referenced agent, and provider
+         * arm are immutable; status (install facts, credential reference) is
+         * never touched by updates.
+         *
+         * @internal
+         * Authorization: requires can_edit permission on the agent channel.
+         * Provider-arm immutability (a slack channel cannot become whatsapp) is
+         * enforced in-handler: the install state, credentials, and delivery
+         * records are all provider-shaped.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.update
+         */
+        update: {
+            name: "update",
+            I: AgentChannel,
+            O: AgentChannel,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Start the provider install flow for an agent channel.
+         *
+         * Returns the provider authorization URL to redirect the installing
+         * user to, plus the single-use state that completeInstall verifies.
+         *
+         * @internal
+         * Authorization: requires can_edit on the agent channel — installing
+         * grants a workspace access to the agent runtime, the same bar as
+         * enabling. Generates and persists the single-use state (pending-state
+         * pattern from MCP OAuth). Cloud-first runtime: the OSS edition stores
+         * channel resources but returns FAILED_PRECONDITION here (documented
+         * posture, decision 001 D-g / T02 §0-b).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.initiateInstall
+         */
+        initiateInstall: {
+            name: "initiateInstall",
+            I: InitiateChannelInstallInput,
+            O: InitiateChannelInstallOutput,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Complete the provider install flow for an agent channel.
+         *
+         * Called by the console after the provider's consent redirect, with the
+         * state from initiateInstall and the provider's authorization code. On
+         * success the channel's status carries the install facts and the
+         * channel begins serving (subject to spec.enabled).
+         *
+         * @internal
+         * Authorization: requires can_edit on the agent channel — the same bar
+         * as initiateInstall (the two halves of one flow). The handler consumes
+         * the state atomically, exchanges the code, stores credentials in the
+         * system-managed Environment, records the grant, and writes the status
+         * facts (sole writer). The OSS edition returns FAILED_PRECONDITION
+         * (documented posture, decision 001 D-g / T02 §0-b).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.completeInstall
+         */
+        completeInstall: {
+            name: "completeInstall",
+            I: CompleteChannelInstallInput,
+            O: AgentChannel,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Delete an agent channel.
+         *
+         * Full teardown of the connection: inbound events for the workspace stop
+         * resolving, pending deliveries are abandoned, and the credentials
+         * environment is deleted with the grant. To pause serving while keeping
+         * the install, update the channel with enabled=false instead.
+         *
+         * @internal
+         * Authorization: requires can_delete permission on the agent channel.
+         * The referenced agent is untouched. Teardown cascade (managed env +
+         * grant deletion) mirrors McpServer disconnectOAuth.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.delete
+         */
+        delete: {
+            name: "delete",
+            I: AgentChannelId,
+            O: AgentChannel,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=command_connect.js.map

package/ai/stigmer/agentic/agentchannel/v1/command_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,oIAAoI;AACpI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAEnI;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/command_pb.d.ts

@@ -0,0 +1,137 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { AgentChannelSchema } from "./api_pb.js";
+import type { AgentChannelIdSchema, CompleteChannelInstallInputSchema, InitiateChannelInstallInputSchema, InitiateChannelInstallOutputSchema } from "./io_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/command.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentchannel_v1_command: GenFile;
+/**
+ * AgentChannelCommandController handles write operations for agent channels.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController
+ */
+export declare const AgentChannelCommandController: GenService<{
+    /**
+     * Create or update an agent channel.
+     *
+     * @internal
+     * The authorization and state-operation are determined depending on
+     * whether the channel is going to be created or updated, resolved as
+     * part of request execution. status is preserved verbatim (the install
+     * flow is its sole writer).
+     *
+     * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.apply
+     */
+    apply: {
+        methodKind: "unary";
+        input: typeof AgentChannelSchema;
+        output: typeof AgentChannelSchema;
+    };
+    /**
+     * Create an agent channel.
+     *
+     * Connecting an agent to a channel is a billing-affecting decision:
+     * conversations arriving over the channel consume the connection-owning
+     * organization's credits.
+     *
+     * @internal
+     * Authorization: requires can_edit on the REFERENCED AGENT
+     * (spec.agent_ref), checked in-handler — same bar as AgentShare create,
+     * since connecting a channel broadens who can chat with the agent
+     * runtime. Standard org-scoped create tuples (owner = creator) for the
+     * channel itself; no visibility tuples (channel admission is app-level).
+     * Invariant enforced here: metadata.org must equal spec.agent_ref.org.
+     * status.install_state is initialized to pending_install.
+     *
+     * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.create
+     */
+    create: {
+        methodKind: "unary";
+        input: typeof AgentChannelSchema;
+        output: typeof AgentChannelSchema;
+    };
+    /**
+     * Update an existing agent channel.
+     *
+     * Replaces the spec wholesale. The slug, referenced agent, and provider
+     * arm are immutable; status (install facts, credential reference) is
+     * never touched by updates.
+     *
+     * @internal
+     * Authorization: requires can_edit permission on the agent channel.
+     * Provider-arm immutability (a slack channel cannot become whatsapp) is
+     * enforced in-handler: the install state, credentials, and delivery
+     * records are all provider-shaped.
+     *
+     * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.update
+     */
+    update: {
+        methodKind: "unary";
+        input: typeof AgentChannelSchema;
+        output: typeof AgentChannelSchema;
+    };
+    /**
+     * Start the provider install flow for an agent channel.
+     *
+     * Returns the provider authorization URL to redirect the installing
+     * user to, plus the single-use state that completeInstall verifies.
+     *
+     * @internal
+     * Authorization: requires can_edit on the agent channel — installing
+     * grants a workspace access to the agent runtime, the same bar as
+     * enabling. Generates and persists the single-use state (pending-state
+     * pattern from MCP OAuth). Cloud-first runtime: the OSS edition stores
+     * channel resources but returns FAILED_PRECONDITION here (documented
+     * posture, decision 001 D-g / T02 §0-b).
+     *
+     * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.initiateInstall
+     */
+    initiateInstall: {
+        methodKind: "unary";
+        input: typeof InitiateChannelInstallInputSchema;
+        output: typeof InitiateChannelInstallOutputSchema;
+    };
+    /**
+     * Complete the provider install flow for an agent channel.
+     *
+     * Called by the console after the provider's consent redirect, with the
+     * state from initiateInstall and the provider's authorization code. On
+     * success the channel's status carries the install facts and the
+     * channel begins serving (subject to spec.enabled).
+     *
+     * @internal
+     * Authorization: requires can_edit on the agent channel — the same bar
+     * as initiateInstall (the two halves of one flow). The handler consumes
+     * the state atomically, exchanges the code, stores credentials in the
+     * system-managed Environment, records the grant, and writes the status
+     * facts (sole writer). The OSS edition returns FAILED_PRECONDITION
+     * (documented posture, decision 001 D-g / T02 §0-b).
+     *
+     * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.completeInstall
+     */
+    completeInstall: {
+        methodKind: "unary";
+        input: typeof CompleteChannelInstallInputSchema;
+        output: typeof AgentChannelSchema;
+    };
+    /**
+     * Delete an agent channel.
+     *
+     * Full teardown of the connection: inbound events for the workspace stop
+     * resolving, pending deliveries are abandoned, and the credentials
+     * environment is deleted with the grant. To pause serving while keeping
+     * the install, update the channel with enabled=false instead.
+     *
+     * @internal
+     * Authorization: requires can_delete permission on the agent channel.
+     * The referenced agent is untouched. Teardown cascade (managed env +
+     * grant deletion) mirrors McpServer disconnectOAuth.
+     *
+     * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.delete
+     */
+    delete: {
+        methodKind: "unary";
+        input: typeof AgentChannelIdSchema;
+        output: typeof AgentChannelSchema;
+    };
+}>;

package/ai/stigmer/agentic/agentchannel/v1/command_pb.js

@@ -0,0 +1,19 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentchannel/v1/command.proto (package ai.stigmer.agentic.agentchannel.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_agentchannel_v1_api } from "./api_pb.js";
+import { file_ai_stigmer_agentic_agentchannel_v1_io } from "./io_pb.js";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb.js";
+import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/command.proto.
+ */
+export const file_ai_stigmer_agentic_agentchannel_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentchannel_v1_api, file_ai_stigmer_agentic_agentchannel_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+/**
+ * AgentChannelCommandController handles write operations for agent channels.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController
+ */
+export const AgentChannelCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_agentchannel_v1_command, 0);
+//# sourceMappingURL=command_pb.js.map