@stigmer/protos 3.1.16 → 3.2.0

package/ai/stigmer/agentic/agentchannel/v1/status_pb.js

@@ -7,7 +7,7 @@ import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/agentic/agentchannel/v1/status.proto.
  */
-export const file_ai_stigmer_agentic_agentchannel_v1_status = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_status, file_google_protobuf_timestamp]);
+export const file_ai_stigmer_agentic_agentchannel_v1_status = /*@__PURE__*/ fileDesc("Ci9haS9zdGlnbWVyL2FnZW50aWMvYWdlbnRjaGFubmVsL3YxL3N0YXR1cy5wcm90bxIiYWkuc3RpZ21lci5hZ2VudGljLmFnZW50Y2hhbm5lbC52MSL5AgoSQWdlbnRDaGFubmVsU3RhdHVzElMKDWluc3RhbGxfc3RhdGUYASABKA4yPC5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRjaGFubmVsLnYxLkFnZW50Q2hhbm5lbEluc3RhbGxTdGF0ZRJHCgVzbGFjaxgCIAEoCzI2LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEuU2xhY2tJbnN0YWxsU3RhdHVzSAASTQoId2hhdHNhcHAYBCABKAsyOS5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRjaGFubmVsLnYxLldoYXRzQXBwSW5zdGFsbFN0YXR1c0gAEiIKGmNyZWRlbnRpYWxzX2Vudmlyb25tZW50X2lkGAMgASgJEj8KBWF1ZGl0GGMgASgLMjAuYWkuc3RpZ21lci5jb21tb25zLmFwaXJlc291cmNlLkFwaVJlc291cmNlQXVkaXRCEQoPcHJvdmlkZXJfc3RhdHVzItABChJTbGFja0luc3RhbGxTdGF0dXMSDwoHdGVhbV9pZBgBIAEoCRIRCgl0ZWFtX25hbWUYAiABKAkSEwoLYm90X3VzZXJfaWQYAyABKAkSFgoOZ3JhbnRlZF9zY29wZXMYBCADKAkSHwoXaW5zdGFsbGVyX3NsYWNrX3VzZXJfaWQYBSABKAkSMAoMaW5zdGFsbGVkX2F0GAYgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBIWCg5jaGFubmVsX2FwcF9pZBgHIAEoCSKvAQoVV2hhdHNBcHBJbnN0YWxsU3RhdHVzEhcKD3Bob25lX251bWJlcl9pZBgBIAEoCRIcChRkaXNwbGF5X3Bob25lX251bWJlchgCIAEoCRIVCg12ZXJpZmllZF9uYW1lGAMgASgJEhYKDmNoYW5uZWxfYXBwX2lkGAQgASgJEjAKDGluc3RhbGxlZF9hdBgFIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXAqeAoYQWdlbnRDaGFubmVsSW5zdGFsbFN0YXRlEisKJ2FnZW50X2NoYW5uZWxfaW5zdGFsbF9zdGF0ZV91bnNwZWNpZmllZBAAEhMKD3BlbmRpbmdfaW5zdGFsbBABEg0KCWluc3RhbGxlZBACEgsKB3Jldm9rZWQQA2IGcHJvdG8z", [file_ai_stigmer_commons_apiresource_status, file_google_protobuf_timestamp]);
 /**
  * Describes the message ai.stigmer.agentic.agentchannel.v1.AgentChannelStatus.
  * Use `create(AgentChannelStatusSchema)` to create a new message.
@@ -18,6 +18,11 @@ export const AgentChannelStatusSchema = /*@__PURE__*/ messageDesc(file_ai_stigme
  * Use `create(SlackInstallStatusSchema)` to create a new message.
  */
 export const SlackInstallStatusSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_status, 1);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.WhatsAppInstallStatus.
+ * Use `create(WhatsAppInstallStatusSchema)` to create a new message.
+ */
+export const WhatsAppInstallStatusSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_status, 2);
 /**
  * AgentChannelInstallState tracks the provider install lifecycle.
  *

package/ai/stigmer/agentic/agentchannel/v1/status_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,46BAA46B,EAAE,CAAC,0CAA0C,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAiEvgC;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA2DjE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAEjE;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,wBAgCX;AAhCD,WAAY,wBAAwB;IAClC;;;;OAIG;IACH,6IAA2C,CAAA;IAE3C;;;;;OAKG;IACH,6FAAmB,CAAA;IAEnB;;;;;OAKG;IACH,iFAAa,CAAA;IAEb;;;;;;OAMG;IACH,6EAAW,CAAA;AACb,CAAC,EAhCW,wBAAwB,KAAxB,wBAAwB,QAgCnC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAsC,aAAa,CAC5F,QAAQ,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,kyCAAkyC,EAAE,CAAC,0CAA0C,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAyE73C;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA4EjE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAiEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAEjE;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,wBAgCX;AAhCD,WAAY,wBAAwB;IAClC;;;;OAIG;IACH,6IAA2C,CAAA;IAE3C;;;;;OAKG;IACH,6FAAmB,CAAA;IAEnB;;;;;OAKG;IACH,iFAAa,CAAA;IAEb;;;;;;OAMG;IACH,6EAAW,CAAA;AACb,CAAC,EAhCW,wBAAwB,KAAxB,wBAAwB,QAgCnC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAsC,aAAa,CAC5F,QAAQ,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/channelapp/v1/api_pb.d.ts

@@ -0,0 +1,68 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { ChannelAppSpec } from "./spec_pb.js";
+import type { ApiResourceMetadata } from "../../../commons/apiresource/metadata_pb.js";
+import type { ApiResourceAuditStatus } from "../../../commons/apiresource/status_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/channelapp/v1/api.proto.
+ */
+export declare const file_ai_stigmer_agentic_channelapp_v1_api: GenFile;
+/**
+ * ChannelApp registers your own messaging-platform app (e.g. a Slack app) for serving agent channels.
+ *
+ * By default, agent channels install through the platform's shared
+ * Stigmer app. A ChannelApp lets an organization bring its own provider
+ * app instead: the bot carries the app's own name and icon, and because
+ * each provider app is a distinct bot identity, multiple agents can
+ * serve the same workspace side by side. One ChannelApp can be
+ * referenced by many AgentChannel connections via spec.app_ref.
+ *
+ * @internal
+ * T04 item 2 (channel strategy tasks/T03_4). Structural sibling of
+ * OAuthApp (kind 22) — an org-owned credential holder with encrypted
+ * inline secrets — but a different trust surface: OAuthApp models
+ * user-authorization OAuth (authorize/token/userinfo URLs); a ChannelApp
+ * carries webhook signing secrets and install credentials, so it is a
+ * separate kind in the agentic group, never a reuse. Provider variance
+ * is a oneof (the AgentChannelSpec.provider_config idiom); WhatsApp
+ * (T05) extends the oneof, touching zero kinds.
+ *
+ * @generated from message ai.stigmer.agentic.channelapp.v1.ChannelApp
+ */
+export type ChannelApp = Message<"ai.stigmer.agentic.channelapp.v1.ChannelApp"> & {
+    /**
+     * API version for this resource type.
+     *
+     * @generated from field: string api_version = 1;
+     */
+    apiVersion: string;
+    /**
+     * Resource kind identifier.
+     *
+     * @generated from field: string kind = 2;
+     */
+    kind: string;
+    /**
+     * Resource metadata including name, organization, and labels.
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceMetadata metadata = 3;
+     */
+    metadata?: ApiResourceMetadata;
+    /**
+     * Provider app credentials and configuration (desired state).
+     *
+     * @generated from field: ai.stigmer.agentic.channelapp.v1.ChannelAppSpec spec = 4;
+     */
+    spec?: ChannelAppSpec;
+    /**
+     * System-managed state including audit trail.
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceAuditStatus status = 5;
+     */
+    status?: ApiResourceAuditStatus;
+};
+/**
+ * Describes the message ai.stigmer.agentic.channelapp.v1.ChannelApp.
+ * Use `create(ChannelAppSchema)` to create a new message.
+ */
+export declare const ChannelAppSchema: GenMessage<ChannelApp>;

package/ai/stigmer/agentic/channelapp/v1/api_pb.js

@@ -0,0 +1,18 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/channelapp/v1/api.proto (package ai.stigmer.agentic.channelapp.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_channelapp_v1_spec } from "./spec_pb.js";
+import { file_ai_stigmer_commons_apiresource_metadata } from "../../../commons/apiresource/metadata_pb.js";
+import { file_ai_stigmer_commons_apiresource_status } from "../../../commons/apiresource/status_pb.js";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/channelapp/v1/api.proto.
+ */
+export const file_ai_stigmer_agentic_channelapp_v1_api = /*@__PURE__*/ fileDesc("CiphaS9zdGlnbWVyL2FnZW50aWMvY2hhbm5lbGFwcC92MS9hcGkucHJvdG8SIGFpLnN0aWdtZXIuYWdlbnRpYy5jaGFubmVsYXBwLnYxIrcCCgpDaGFubmVsQXBwEjEKC2FwaV92ZXJzaW9uGAEgASgJQhy6SBlyFwoVYWdlbnRpYy5zdGlnbWVyLmFpL3YxEh8KBGtpbmQYAiABKAlCEbpIDnIMCgpDaGFubmVsQXBwEk0KCG1ldGFkYXRhGAMgASgLMjMuYWkuc3RpZ21lci5jb21tb25zLmFwaXJlc291cmNlLkFwaVJlc291cmNlTWV0YWRhdGFCBrpIA8gBARI+CgRzcGVjGAQgASgLMjAuYWkuc3RpZ21lci5hZ2VudGljLmNoYW5uZWxhcHAudjEuQ2hhbm5lbEFwcFNwZWMSRgoGc3RhdHVzGAUgASgLMjYuYWkuc3RpZ21lci5jb21tb25zLmFwaXJlc291cmNlLkFwaVJlc291cmNlQXVkaXRTdGF0dXNiBnByb3RvMw", [file_ai_stigmer_agentic_channelapp_v1_spec, file_ai_stigmer_commons_apiresource_metadata, file_ai_stigmer_commons_apiresource_status, file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.agentic.channelapp.v1.ChannelApp.
+ * Use `create(ChannelAppSchema)` to create a new message.
+ */
+export const ChannelAppSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_channelapp_v1_api, 0);
+//# sourceMappingURL=api_pb.js.map

package/ai/stigmer/agentic/channelapp/v1/api_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,whBAAwhB,EAAE,CAAC,0CAA0C,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6DzsB;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/channelapp/v1/command_connect.d.ts

@@ -0,0 +1,93 @@
+/**
+ * ChannelAppCommandController handles write operations for channel apps.
+ *
+ * @internal
+ * ChannelApps hold provider secrets (client_secret, signing_secret) and
+ * are always org-private. There is no updateVisibility RPC — public
+ * visibility is intentionally unsupported to prevent credential leakage
+ * (the OAuthApp posture).
+ *
+ * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController
+ */
+export declare const ChannelAppCommandController: {
+    readonly typeName: "ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController";
+    readonly methods: {
+        /**
+         * Create or update a channel app.
+         *
+         * If the resource does not exist, creates a new channel app.
+         * If the resource exists, updates the existing channel app. Sending
+         * the redaction marker for a secret field preserves the stored value.
+         *
+         * @internal
+         * The authorization and state-operation are determined depending on
+         * whether the channel app is going to be created or updated, resolved
+         * as part of request execution.
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.apply
+         */
+        readonly apply: {
+            readonly name: "apply";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Create a channel app.
+         *
+         * The creator's organization owns the channel app. The creator is
+         * granted the owner role automatically.
+         *
+         * @internal
+         * Authorization: requires can_create_channel_app permission in the
+         * organization (admin-gated like can_create_oauth_app — the resource
+         * holds org-wide webhook credentials).
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.create
+         */
+        readonly create: {
+            readonly name: "create";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Update an existing channel app.
+         *
+         * Sending the redaction marker for a secret field preserves the
+         * stored value; the provider arm is immutable.
+         *
+         * @internal
+         * Authorization: requires can_edit permission on the channel_app
+         * resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.update
+         */
+        readonly update: {
+            readonly name: "update";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Delete a channel app.
+         *
+         * Deletion is blocked while any AgentChannel references this app via
+         * spec.app_ref — disconnect or delete those channels first.
+         *
+         * @internal
+         * Authorization: requires can_delete permission on the channel_app
+         * resource. The referencing-channels block mirrors OAuthApp's
+         * referencing-mcp-servers check and fails with FAILED_PRECONDITION
+         * naming a referencing channel.
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.delete
+         */
+        readonly delete: {
+            readonly name: "delete";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/agentic/channelapp/v1/command_connect.js

@@ -0,0 +1,101 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/channelapp/v1/command.proto (package ai.stigmer.agentic.channelapp.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { ChannelApp } from "./api_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+import { ApiResourceDeleteInput } from "../../../commons/apiresource/io_pbjs";
+/**
+ * ChannelAppCommandController handles write operations for channel apps.
+ *
+ * @internal
+ * ChannelApps hold provider secrets (client_secret, signing_secret) and
+ * are always org-private. There is no updateVisibility RPC — public
+ * visibility is intentionally unsupported to prevent credential leakage
+ * (the OAuthApp posture).
+ *
+ * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController
+ */
+export const ChannelAppCommandController = {
+    typeName: "ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController",
+    methods: {
+        /**
+         * Create or update a channel app.
+         *
+         * If the resource does not exist, creates a new channel app.
+         * If the resource exists, updates the existing channel app. Sending
+         * the redaction marker for a secret field preserves the stored value.
+         *
+         * @internal
+         * The authorization and state-operation are determined depending on
+         * whether the channel app is going to be created or updated, resolved
+         * as part of request execution.
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.apply
+         */
+        apply: {
+            name: "apply",
+            I: ChannelApp,
+            O: ChannelApp,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Create a channel app.
+         *
+         * The creator's organization owns the channel app. The creator is
+         * granted the owner role automatically.
+         *
+         * @internal
+         * Authorization: requires can_create_channel_app permission in the
+         * organization (admin-gated like can_create_oauth_app — the resource
+         * holds org-wide webhook credentials).
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.create
+         */
+        create: {
+            name: "create",
+            I: ChannelApp,
+            O: ChannelApp,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Update an existing channel app.
+         *
+         * Sending the redaction marker for a secret field preserves the
+         * stored value; the provider arm is immutable.
+         *
+         * @internal
+         * Authorization: requires can_edit permission on the channel_app
+         * resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.update
+         */
+        update: {
+            name: "update",
+            I: ChannelApp,
+            O: ChannelApp,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Delete a channel app.
+         *
+         * Deletion is blocked while any AgentChannel references this app via
+         * spec.app_ref — disconnect or delete those channels first.
+         *
+         * @internal
+         * Authorization: requires can_delete permission on the channel_app
+         * resource. The referencing-channels block mirrors OAuthApp's
+         * referencing-mcp-servers check and fails with FAILED_PRECONDITION
+         * naming a referencing channel.
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.delete
+         */
+        delete: {
+            name: "delete",
+            I: ApiResourceDeleteInput,
+            O: ChannelApp,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=command_connect.js.map

package/ai/stigmer/agentic/channelapp/v1/command_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,8DAA8D;IACxE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/channelapp/v1/command_pb.d.ts

@@ -0,0 +1,93 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { ChannelAppSchema } from "./api_pb.js";
+import type { ApiResourceDeleteInputSchema } from "../../../commons/apiresource/io_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/channelapp/v1/command.proto.
+ */
+export declare const file_ai_stigmer_agentic_channelapp_v1_command: GenFile;
+/**
+ * ChannelAppCommandController handles write operations for channel apps.
+ *
+ * @internal
+ * ChannelApps hold provider secrets (client_secret, signing_secret) and
+ * are always org-private. There is no updateVisibility RPC — public
+ * visibility is intentionally unsupported to prevent credential leakage
+ * (the OAuthApp posture).
+ *
+ * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController
+ */
+export declare const ChannelAppCommandController: GenService<{
+    /**
+     * Create or update a channel app.
+     *
+     * If the resource does not exist, creates a new channel app.
+     * If the resource exists, updates the existing channel app. Sending
+     * the redaction marker for a secret field preserves the stored value.
+     *
+     * @internal
+     * The authorization and state-operation are determined depending on
+     * whether the channel app is going to be created or updated, resolved
+     * as part of request execution.
+     *
+     * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.apply
+     */
+    apply: {
+        methodKind: "unary";
+        input: typeof ChannelAppSchema;
+        output: typeof ChannelAppSchema;
+    };
+    /**
+     * Create a channel app.
+     *
+     * The creator's organization owns the channel app. The creator is
+     * granted the owner role automatically.
+     *
+     * @internal
+     * Authorization: requires can_create_channel_app permission in the
+     * organization (admin-gated like can_create_oauth_app — the resource
+     * holds org-wide webhook credentials).
+     *
+     * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.create
+     */
+    create: {
+        methodKind: "unary";
+        input: typeof ChannelAppSchema;
+        output: typeof ChannelAppSchema;
+    };
+    /**
+     * Update an existing channel app.
+     *
+     * Sending the redaction marker for a secret field preserves the
+     * stored value; the provider arm is immutable.
+     *
+     * @internal
+     * Authorization: requires can_edit permission on the channel_app
+     * resource.
+     *
+     * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.update
+     */
+    update: {
+        methodKind: "unary";
+        input: typeof ChannelAppSchema;
+        output: typeof ChannelAppSchema;
+    };
+    /**
+     * Delete a channel app.
+     *
+     * Deletion is blocked while any AgentChannel references this app via
+     * spec.app_ref — disconnect or delete those channels first.
+     *
+     * @internal
+     * Authorization: requires can_delete permission on the channel_app
+     * resource. The referencing-channels block mirrors OAuthApp's
+     * referencing-mcp-servers check and fails with FAILED_PRECONDITION
+     * naming a referencing channel.
+     *
+     * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.delete
+     */
+    delete: {
+        methodKind: "unary";
+        input: typeof ApiResourceDeleteInputSchema;
+        output: typeof ChannelAppSchema;
+    };
+}>;

package/ai/stigmer/agentic/channelapp/v1/command_pb.js

@@ -0,0 +1,25 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/channelapp/v1/command.proto (package ai.stigmer.agentic.channelapp.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_channelapp_v1_api } from "./api_pb.js";
+import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb.js";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb.js";
+import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/channelapp/v1/command.proto.
+ */
+export const file_ai_stigmer_agentic_channelapp_v1_command = /*@__PURE__*/ fileDesc("Ci5haS9zdGlnbWVyL2FnZW50aWMvY2hhbm5lbGFwcC92MS9jb21tYW5kLnByb3RvEiBhaS5zdGlnbWVyLmFnZW50aWMuY2hhbm5lbGFwcC52MTKOBQobQ2hhbm5lbEFwcENvbW1hbmRDb250cm9sbGVyEmMKBWFwcGx5EiwuYWkuc3RpZ21lci5hZ2VudGljLmNoYW5uZWxhcHAudjEuQ2hhbm5lbEFwcBosLmFpLnN0aWdtZXIuYWdlbnRpYy5jaGFubmVsYXBwLnYxLkNoYW5uZWxBcHAStQEKBmNyZWF0ZRIsLmFpLnN0aWdtZXIuYWdlbnRpYy5jaGFubmVsYXBwLnYxLkNoYW5uZWxBcHAaLC5haS5zdGlnbWVyLmFnZW50aWMuY2hhbm5lbGFwcC52MS5DaGFubmVsQXBwIk/CuBhLCB8QHiIMbWV0YWRhdGEub3JnKjd1bmF1dGhvcml6ZWQgdG8gY3JlYXRlIGNoYW5uZWwgYXBwIGluIHRoaXMgb3JnYW5pemF0aW9uEp8BCgZ1cGRhdGUSLC5haS5zdGlnbWVyLmFnZW50aWMuY2hhbm5lbGFwcC52MS5DaGFubmVsQXBwGiwuYWkuc3RpZ21lci5hZ2VudGljLmNoYW5uZWxhcHAudjEuQ2hhbm5lbEFwcCI5wrgYNQgCEDAiC21ldGFkYXRhLmlkKiJ1bmF1dGhvcml6ZWQgdG8gdXBkYXRlIGNoYW5uZWwgYXBwEqkBCgZkZWxldGUSNi5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VEZWxldGVJbnB1dBosLmFpLnN0aWdtZXIuYWdlbnRpYy5jaGFubmVsYXBwLnYxLkNoYW5uZWxBcHAiOcK4GDUIAxAwIgtyZXNvdXJjZV9pZCoidW5hdXRob3JpemVkIHRvIGRlbGV0ZSBjaGFubmVsIGFwcBoEoP8rMGIGcHJvdG8z", [file_ai_stigmer_agentic_channelapp_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+/**
+ * ChannelAppCommandController handles write operations for channel apps.
+ *
+ * @internal
+ * ChannelApps hold provider secrets (client_secret, signing_secret) and
+ * are always org-private. There is no updateVisibility RPC — public
+ * visibility is intentionally unsupported to prevent credential leakage
+ * (the OAuthApp posture).
+ *
+ * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController
+ */
+export const ChannelAppCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_channelapp_v1_command, 0);
+//# sourceMappingURL=command_pb.js.map

package/ai/stigmer/agentic/channelapp/v1/command_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,s+BAAs+B,EAAE,CAAC,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE7qC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,2BAA2B,GA0EnC,aAAa,CAChB,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/channelapp/v1/io_pb.d.ts

@@ -0,0 +1,44 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { ChannelApp } from "./api_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/channelapp/v1/io.proto.
+ */
+export declare const file_ai_stigmer_agentic_channelapp_v1_io: GenFile;
+/**
+ * ChannelApps contains a list of channel app resources.
+ *
+ * @generated from message ai.stigmer.agentic.channelapp.v1.ChannelApps
+ */
+export type ChannelApps = Message<"ai.stigmer.agentic.channelapp.v1.ChannelApps"> & {
+    /**
+     * Channel app entries.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.channelapp.v1.ChannelApp entries = 1;
+     */
+    entries: ChannelApp[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.channelapp.v1.ChannelApps.
+ * Use `create(ChannelAppsSchema)` to create a new message.
+ */
+export declare const ChannelAppsSchema: GenMessage<ChannelApps>;
+/**
+ * ListChannelAppsByOrgInput specifies the organization whose channel
+ * apps should be returned.
+ *
+ * @generated from message ai.stigmer.agentic.channelapp.v1.ListChannelAppsByOrgInput
+ */
+export type ListChannelAppsByOrgInput = Message<"ai.stigmer.agentic.channelapp.v1.ListChannelAppsByOrgInput"> & {
+    /**
+     * Organization slug to list channel apps for.
+     *
+     * @generated from field: string org = 1;
+     */
+    org: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.channelapp.v1.ListChannelAppsByOrgInput.
+ * Use `create(ListChannelAppsByOrgInputSchema)` to create a new message.
+ */
+export declare const ListChannelAppsByOrgInputSchema: GenMessage<ListChannelAppsByOrgInput>;

package/ai/stigmer/agentic/channelapp/v1/io_pb.js

@@ -0,0 +1,21 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/channelapp/v1/io.proto (package ai.stigmer.agentic.channelapp.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_channelapp_v1_api } from "./api_pb.js";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/channelapp/v1/io.proto.
+ */
+export const file_ai_stigmer_agentic_channelapp_v1_io = /*@__PURE__*/ fileDesc("CilhaS9zdGlnbWVyL2FnZW50aWMvY2hhbm5lbGFwcC92MS9pby5wcm90bxIgYWkuc3RpZ21lci5hZ2VudGljLmNoYW5uZWxhcHAudjEiTAoLQ2hhbm5lbEFwcHMSPQoHZW50cmllcxgBIAMoCzIsLmFpLnN0aWdtZXIuYWdlbnRpYy5jaGFubmVsYXBwLnYxLkNoYW5uZWxBcHAiMQoZTGlzdENoYW5uZWxBcHBzQnlPcmdJbnB1dBIUCgNvcmcYASABKAlCB7pIBHICEAFiBnByb3RvMw", [file_ai_stigmer_agentic_channelapp_v1_api, file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.agentic.channelapp.v1.ChannelApps.
+ * Use `create(ChannelAppsSchema)` to create a new message.
+ */
+export const ChannelAppsSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_channelapp_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.agentic.channelapp.v1.ListChannelAppsByOrgInput.
+ * Use `create(ListChannelAppsByOrgInputSchema)` to create a new message.
+ */
+export const ListChannelAppsByOrgInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_channelapp_v1_io, 1);
+//# sourceMappingURL=io_pb.js.map

package/ai/stigmer/agentic/channelapp/v1/io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,gSAAgS,EAAE,CAAC,yCAAyC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgBtX;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAiB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/channelapp/v1/query_connect.d.ts

@@ -0,0 +1,70 @@
+/**
+ * ChannelAppQueryController handles read operations for channel apps.
+ *
+ * @internal
+ * Every response passes through secret redaction — client_secret and
+ * signing_secret are replaced with the redaction marker. Runtime
+ * consumers that need the real values (installer, webhook receiver)
+ * read the repo directly, the documented OAuthAppResolutionService
+ * exception.
+ *
+ * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController
+ */
+export declare const ChannelAppQueryController: {
+    readonly typeName: "ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController";
+    readonly methods: {
+        /**
+         * Get a channel app by its unique identifier.
+         *
+         * Secret fields are redacted in the response.
+         *
+         * @internal
+         * Authorization: requires can_view permission on the channel_app
+         * resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.get
+         */
+        readonly get: {
+            readonly name: "get";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get a channel app by its organization-scoped reference (org/slug).
+         *
+         * Secret fields are redacted in the response.
+         *
+         * @internal
+         * Custom authorization in handler — checks both direct resource access
+         * and organization-level visibility permissions (the OAuthApp pattern).
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.getByReference
+         */
+        readonly getByReference: {
+            readonly name: "getByReference";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * List all channel apps belonging to an organization.
+         *
+         * Returns every ChannelApp whose metadata.org matches the input org,
+         * with secret fields redacted. Typically a small set, so results are
+         * not paginated.
+         *
+         * @internal
+         * Authorization: requires can_view permission on the organization
+         * resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.listByOrg
+         */
+        readonly listByOrg: {
+            readonly name: "listByOrg";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};