@stigmer/protos 3.1.17 → 3.2.0

package/ai/stigmer/agentic/agentchannel/v1/command_connect.d.ts

@@ -71,16 +71,31 @@ export declare const AgentChannelCommandController: {
         /**
          * Start the provider install flow for an agent channel.
          *
-         * Returns the provider authorization URL to redirect the installing
-         * user to, plus the single-use state that completeInstall verifies.
+         * For redirect-installed providers (Slack) the output carries the
+         * provider authorization URL to redirect the installing user to, plus
+         * the single-use state that completeInstall verifies. For
+         * direct-installed providers (WhatsApp) the install runs to completion
+         * inside this RPC and the output carries completed=true instead.
+         *
+         * Refusals a client should branch on carry a google.rpc.ErrorInfo
+         * detail (domain "stigmer.ai") on the standard grpc-status-details-bin
+         * trailer, alongside the human-readable FAILED_PRECONDITION message:
+         *
+         *   - WHATSAPP_NUMBER_ALREADY_CONNECTED — the WhatsApp Business number
+         *     already serves an agent through this channel app (one agent per
+         *     number per app). Metadata: display_phone_number (the occupied
+         *     number), channel_app_id (the serving app).
          *
          * @internal
          * Authorization: requires can_edit on the agent channel — installing
          * grants a workspace access to the agent runtime, the same bar as
-         * enabling. Generates and persists the single-use state (pending-state
-         * pattern from MCP OAuth). Cloud-first runtime: the OSS edition stores
-         * channel resources but returns FAILED_PRECONDITION here (documented
-         * posture, decision 001 D-g / T02 §0-b).
+         * enabling. Redirect style generates and persists the single-use state
+         * (pending-state pattern from MCP OAuth); direct style validates
+         * against the provider, persists the status, and maps the
+         * duplicate-number refusal (the completeInstall duplicate-workspace
+         * mechanism). Cloud-first runtime: the OSS edition stores channel
+         * resources but returns FAILED_PRECONDITION here (documented posture,
+         * decision 001 D-g / T02 §0-b).
          *
          * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.initiateInstall
          */
@@ -98,6 +113,22 @@ export declare const AgentChannelCommandController: {
          * success the channel's status carries the install facts and the
          * channel begins serving (subject to spec.enabled).
          *
+         * Refusals a client should branch on carry a google.rpc.ErrorInfo
+         * detail (domain "stigmer.ai") on the standard grpc-status-details-bin
+         * trailer, alongside the human-readable FAILED_PRECONDITION message:
+         *
+         *   - SLACK_WORKSPACE_ALREADY_CONNECTED — the workspace already hosts
+         *     an agent through this serving app (one agent per workspace per
+         *     app). Metadata: team_name (the occupied workspace),
+         *     channel_app_id (the serving app; empty = platform app).
+         *   - CHANNEL_INSTALL_STATE_INVALID — the state parameter is missing,
+         *     expired, or replayed; restart the install.
+         *   - SLACK_ENTERPRISE_INSTALL_UNSUPPORTED — an Enterprise Grid
+         *     org-wide install was attempted; install into a single workspace.
+         *
+         * Other refusals (unconfigured deployment, provider-refused code
+         * exchange) carry no reason — their message is the interface.
+         *
          * @internal
          * Authorization: requires can_edit on the agent channel — the same bar
          * as initiateInstall (the two halves of one flow). The handler consumes

package/ai/stigmer/agentic/agentchannel/v1/command_connect.js

@@ -78,16 +78,31 @@ export const AgentChannelCommandController = {
         /**
          * Start the provider install flow for an agent channel.
          *
-         * Returns the provider authorization URL to redirect the installing
-         * user to, plus the single-use state that completeInstall verifies.
+         * For redirect-installed providers (Slack) the output carries the
+         * provider authorization URL to redirect the installing user to, plus
+         * the single-use state that completeInstall verifies. For
+         * direct-installed providers (WhatsApp) the install runs to completion
+         * inside this RPC and the output carries completed=true instead.
+         *
+         * Refusals a client should branch on carry a google.rpc.ErrorInfo
+         * detail (domain "stigmer.ai") on the standard grpc-status-details-bin
+         * trailer, alongside the human-readable FAILED_PRECONDITION message:
+         *
+         *   - WHATSAPP_NUMBER_ALREADY_CONNECTED — the WhatsApp Business number
+         *     already serves an agent through this channel app (one agent per
+         *     number per app). Metadata: display_phone_number (the occupied
+         *     number), channel_app_id (the serving app).
          *
          * @internal
          * Authorization: requires can_edit on the agent channel — installing
          * grants a workspace access to the agent runtime, the same bar as
-         * enabling. Generates and persists the single-use state (pending-state
-         * pattern from MCP OAuth). Cloud-first runtime: the OSS edition stores
-         * channel resources but returns FAILED_PRECONDITION here (documented
-         * posture, decision 001 D-g / T02 §0-b).
+         * enabling. Redirect style generates and persists the single-use state
+         * (pending-state pattern from MCP OAuth); direct style validates
+         * against the provider, persists the status, and maps the
+         * duplicate-number refusal (the completeInstall duplicate-workspace
+         * mechanism). Cloud-first runtime: the OSS edition stores channel
+         * resources but returns FAILED_PRECONDITION here (documented posture,
+         * decision 001 D-g / T02 §0-b).
          *
          * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.initiateInstall
          */
@@ -105,6 +120,22 @@ export const AgentChannelCommandController = {
          * success the channel's status carries the install facts and the
          * channel begins serving (subject to spec.enabled).
          *
+         * Refusals a client should branch on carry a google.rpc.ErrorInfo
+         * detail (domain "stigmer.ai") on the standard grpc-status-details-bin
+         * trailer, alongside the human-readable FAILED_PRECONDITION message:
+         *
+         *   - SLACK_WORKSPACE_ALREADY_CONNECTED — the workspace already hosts
+         *     an agent through this serving app (one agent per workspace per
+         *     app). Metadata: team_name (the occupied workspace),
+         *     channel_app_id (the serving app; empty = platform app).
+         *   - CHANNEL_INSTALL_STATE_INVALID — the state parameter is missing,
+         *     expired, or replayed; restart the install.
+         *   - SLACK_ENTERPRISE_INSTALL_UNSUPPORTED — an Enterprise Grid
+         *     org-wide install was attempted; install into a single workspace.
+         *
+         * Other refusals (unconfigured deployment, provider-refused code
+         * exchange) carry no reason — their message is the interface.
+         *
          * @internal
          * Authorization: requires can_edit on the agent channel — the same bar
          * as initiateInstall (the two halves of one flow). The handler consumes

package/ai/stigmer/agentic/agentchannel/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,oIAAoI;AACpI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAEnI;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,oIAAoI;AACpI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAEnI;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8BG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAiCG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/command_pb.d.ts

@@ -73,16 +73,31 @@ export declare const AgentChannelCommandController: GenService<{
     /**
      * Start the provider install flow for an agent channel.
      *
-     * Returns the provider authorization URL to redirect the installing
-     * user to, plus the single-use state that completeInstall verifies.
+     * For redirect-installed providers (Slack) the output carries the
+     * provider authorization URL to redirect the installing user to, plus
+     * the single-use state that completeInstall verifies. For
+     * direct-installed providers (WhatsApp) the install runs to completion
+     * inside this RPC and the output carries completed=true instead.
+     *
+     * Refusals a client should branch on carry a google.rpc.ErrorInfo
+     * detail (domain "stigmer.ai") on the standard grpc-status-details-bin
+     * trailer, alongside the human-readable FAILED_PRECONDITION message:
+     *
+     *   - WHATSAPP_NUMBER_ALREADY_CONNECTED — the WhatsApp Business number
+     *     already serves an agent through this channel app (one agent per
+     *     number per app). Metadata: display_phone_number (the occupied
+     *     number), channel_app_id (the serving app).
      *
      * @internal
      * Authorization: requires can_edit on the agent channel — installing
      * grants a workspace access to the agent runtime, the same bar as
-     * enabling. Generates and persists the single-use state (pending-state
-     * pattern from MCP OAuth). Cloud-first runtime: the OSS edition stores
-     * channel resources but returns FAILED_PRECONDITION here (documented
-     * posture, decision 001 D-g / T02 §0-b).
+     * enabling. Redirect style generates and persists the single-use state
+     * (pending-state pattern from MCP OAuth); direct style validates
+     * against the provider, persists the status, and maps the
+     * duplicate-number refusal (the completeInstall duplicate-workspace
+     * mechanism). Cloud-first runtime: the OSS edition stores channel
+     * resources but returns FAILED_PRECONDITION here (documented posture,
+     * decision 001 D-g / T02 §0-b).
      *
      * @generated from rpc ai.stigmer.agentic.agentchannel.v1.AgentChannelCommandController.initiateInstall
      */
@@ -99,6 +114,22 @@ export declare const AgentChannelCommandController: GenService<{
      * success the channel's status carries the install facts and the
      * channel begins serving (subject to spec.enabled).
      *
+     * Refusals a client should branch on carry a google.rpc.ErrorInfo
+     * detail (domain "stigmer.ai") on the standard grpc-status-details-bin
+     * trailer, alongside the human-readable FAILED_PRECONDITION message:
+     *
+     *   - SLACK_WORKSPACE_ALREADY_CONNECTED — the workspace already hosts
+     *     an agent through this serving app (one agent per workspace per
+     *     app). Metadata: team_name (the occupied workspace),
+     *     channel_app_id (the serving app; empty = platform app).
+     *   - CHANNEL_INSTALL_STATE_INVALID — the state parameter is missing,
+     *     expired, or replayed; restart the install.
+     *   - SLACK_ENTERPRISE_INSTALL_UNSUPPORTED — an Enterprise Grid
+     *     org-wide install was attempted; install into a single workspace.
+     *
+     * Other refusals (unconfigured deployment, provider-refused code
+     * exchange) carry no reason — their message is the interface.
+     *
      * @internal
      * Authorization: requires can_edit on the agent channel — the same bar
      * as initiateInstall (the two halves of one flow). The handler consumes

package/ai/stigmer/agentic/agentchannel/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,0CAA0C,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,y8CAAy8C,EAAE,CAAC,2CAA2C,EAAE,0CAA0C,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEtpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GA4HrC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,0CAA0C,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,y8CAAy8C,EAAE,CAAC,2CAA2C,EAAE,0CAA0C,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEtpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GA2JrC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/delivery_pb.d.ts

@@ -103,6 +103,14 @@ export type ChannelDelivery = Message<"ai.stigmer.agentic.agentchannel.v1.Channe
          */
         value: SlackDeliveryContext;
         case: "slack";
+    } | {
+        /**
+         * WhatsApp delivery context.
+         *
+         * @generated from field: ai.stigmer.agentic.agentchannel.v1.WhatsAppDeliveryContext whatsapp = 16;
+         */
+        value: WhatsAppDeliveryContext;
+        case: "whatsapp";
     } | {
         case: undefined;
         value?: undefined;
@@ -167,6 +175,38 @@ export type SlackDeliveryContext = Message<"ai.stigmer.agentic.agentchannel.v1.S
  * Use `create(SlackDeliveryContextSchema)` to create a new message.
  */
 export declare const SlackDeliveryContextSchema: GenMessage<SlackDeliveryContext>;
+/**
+ * WhatsAppDeliveryContext carries what the WhatsApp deliverer needs to
+ * send the reply through the Meta Cloud API.
+ *
+ * @internal
+ * No placeholder field: WhatsApp cannot edit a sent message, so there is
+ * no "thinking" message to update (the Slack chat.update UX has no
+ * analog). No credentials either — the deliverer loads the channel by
+ * agent_channel_id and resolves the access token from its ChannelApp
+ * (DD-WA-3), the SlackOutboundDeliverer channel-load pattern.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.WhatsAppDeliveryContext
+ */
+export type WhatsAppDeliveryContext = Message<"ai.stigmer.agentic.agentchannel.v1.WhatsAppDeliveryContext"> & {
+    /**
+     * Phone number ID the reply sends FROM (the business number).
+     *
+     * @generated from field: string phone_number_id = 1;
+     */
+    phoneNumberId: string;
+    /**
+     * WhatsApp user id (wa_id) the reply sends TO.
+     *
+     * @generated from field: string recipient_wa_id = 2;
+     */
+    recipientWaId: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.WhatsAppDeliveryContext.
+ * Use `create(WhatsAppDeliveryContextSchema)` to create a new message.
+ */
+export declare const WhatsAppDeliveryContextSchema: GenMessage<WhatsAppDeliveryContext>;
 /**
  * ChannelDeliveryStatus is the delivery record lifecycle.
  *

package/ai/stigmer/agentic/agentchannel/v1/delivery_pb.js

@@ -6,7 +6,7 @@ import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/agentic/agentchannel/v1/delivery.proto.
  */
-export const file_ai_stigmer_agentic_agentchannel_v1_delivery = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp]);
+export const file_ai_stigmer_agentic_agentchannel_v1_delivery = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp]);
 /**
  * Describes the message ai.stigmer.agentic.agentchannel.v1.ChannelDelivery.
  * Use `create(ChannelDeliverySchema)` to create a new message.
@@ -17,6 +17,11 @@ export const ChannelDeliverySchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_a
  * Use `create(SlackDeliveryContextSchema)` to create a new message.
  */
 export const SlackDeliveryContextSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_delivery, 1);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.WhatsAppDeliveryContext.
+ * Use `create(WhatsAppDeliveryContextSchema)` to create a new message.
+ */
+export const WhatsAppDeliveryContextSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_delivery, 2);
 /**
  * ChannelDeliveryStatus is the delivery record lifecycle.
  *

package/ai/stigmer/agentic/agentchannel/v1/delivery_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"delivery_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/delivery_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8nCAA8nC,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;AAuI7qC;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AAoCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AAEnE;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,qBAmCX;AAnCD,WAAY,qBAAqB;IAC/B;;;;OAIG;IACH,+HAAuC,CAAA;IAEvC;;;;OAIG;IACH,uEAAW,CAAA;IAEX;;;;OAIG;IACH,6EAAc,CAAA;IAEd;;;;OAIG;IACH,2EAAa,CAAA;IAEb;;;;OAIG;IACH,qEAAU,CAAA;AACZ,CAAC,EAnCW,qBAAqB,KAArB,qBAAqB,QAmChC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"delivery_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/delivery_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,i1CAAi1C,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;AA+Ih4C;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AAoCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AA+BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AAEnE;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,qBAmCX;AAnCD,WAAY,qBAAqB;IAC/B;;;;OAIG;IACH,+HAAuC,CAAA;IAEvC;;;;OAIG;IACH,uEAAW,CAAA;IAEX;;;;OAIG;IACH,6EAAc,CAAA;IAEd;;;;OAIG;IACH,2EAAa,CAAA;IAEb;;;;OAIG;IACH,qEAAU,CAAA;AACZ,CAAC,EAnCW,qBAAqB,KAArB,qBAAqB,QAmChC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/io_pb.d.ts

@@ -141,22 +141,27 @@ export declare const InitiateChannelInstallInputSchema: GenMessage<InitiateChann
 /**
  * Output of the initiate-install RPC.
  *
- * The caller redirects the user to authorization_url; the provider
+ * Two install styles share this output. For redirect-installed providers
+ * (Slack) the caller redirects the user to authorization_url; the provider
  * redirects back to the console, which completes the install with the
- * completeInstall RPC.
+ * completeInstall RPC. For direct-installed providers (WhatsApp) the
+ * install completes inside this RPC: completed is true and there is
+ * nothing to redirect to — refresh the channel to see its install facts.
  *
  * @generated from message ai.stigmer.agentic.agentchannel.v1.InitiateChannelInstallOutput
  */
 export type InitiateChannelInstallOutput = Message<"ai.stigmer.agentic.agentchannel.v1.InitiateChannelInstallOutput"> & {
     /**
      * Provider authorization URL to redirect the installing user to
-     * (for Slack: the "Add to Slack" consent screen).
+     * (for Slack: the "Add to Slack" consent screen). Empty when the
+     * install completed directly.
      *
      * @generated from field: string authorization_url = 1;
      */
     authorizationUrl: string;
     /**
      * Single-use opaque state parameter bound to this install attempt.
+     * Empty when the install completed directly.
      *
      * @internal
      * Persisted server-side (PendingOAuthStateDocument pattern) and consumed
@@ -165,6 +170,20 @@ export type InitiateChannelInstallOutput = Message<"ai.stigmer.agentic.agentchan
      * @generated from field: string state = 2;
      */
     state: string;
+    /**
+     * True when the install completed synchronously inside this RPC
+     * (direct-installed providers). Clients branch on this field — never on
+     * provider knowledge of their own — so the server stays the single
+     * source of install-style truth.
+     *
+     * @internal
+     * DD-WA-1b. The seam behind it is the sealed ChannelInstaller split:
+     * AuthorizationRedirectInstaller populates authorization_url + state;
+     * DirectInstaller populates completed.
+     *
+     * @generated from field: bool completed = 3;
+     */
+    completed: boolean;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentchannel.v1.InitiateChannelInstallOutput.

package/ai/stigmer/agentic/agentchannel/v1/io_pb.js

@@ -8,7 +8,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agentchannel/v1/io.proto.
  */
-export const file_ai_stigmer_agentic_agentchannel_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentchannel_v1_api, file_ai_stigmer_commons_rpc_pagination, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agentchannel_v1_io = /*@__PURE__*/ fileDesc("CithaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRjaGFubmVsL3YxL2lvLnByb3RvEiJhaS5zdGlnbWVyLmFnZW50aWMuYWdlbnRjaGFubmVsLnYxIicKDkFnZW50Q2hhbm5lbElkEhUKBXZhbHVlGAEgASgJQga6SAPIAQEifAoeR2V0QWdlbnRDaGFubmVsc0J5QWdlbnRSZXF1ZXN0EhgKCGFnZW50X2lkGAEgASgJQga6SAPIAQESMwoJcGFnZV9pbmZvGAIgASgLMiAuYWkuc3RpZ21lci5jb21tb25zLnJwYy5QYWdlSW5mbxILCgNvcmcYAyABKAkiaAoQQWdlbnRDaGFubmVsTGlzdBITCgt0b3RhbF9jb3VudBgBIAEoBRI/CgVpdGVtcxgCIAMoCzIwLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEuQWdlbnRDaGFubmVsIu4BChhMaXN0QWdlbnRDaGFubmVsc1JlcXVlc3QSFAoDb3JnGAEgASgJQge6SARyAhABElgKBmxhYmVscxgCIAMoCzJILmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEuTGlzdEFnZW50Q2hhbm5lbHNSZXF1ZXN0LkxhYmVsc0VudHJ5EjMKCXBhZ2VfaW5mbxgDIAEoCzIgLmFpLnN0aWdtZXIuY29tbW9ucy5ycGMuUGFnZUluZm8aLQoLTGFiZWxzRW50cnkSCwoDa2V5GAEgASgJEg0KBXZhbHVlGAIgASgJOgI4ASI6ChtJbml0aWF0ZUNoYW5uZWxJbnN0YWxsSW5wdXQSGwoLcmVzb3VyY2VfaWQYASABKAlCBrpIA8gBASJbChxJbml0aWF0ZUNoYW5uZWxJbnN0YWxsT3V0cHV0EhkKEWF1dGhvcml6YXRpb25fdXJsGAEgASgJEg0KBXN0YXRlGAIgASgJEhEKCWNvbXBsZXRlZBgDIAEoCCJnChtDb21wbGV0ZUNoYW5uZWxJbnN0YWxsSW5wdXQSGwoLcmVzb3VyY2VfaWQYASABKAlCBrpIA8gBARIVCgVzdGF0ZRgCIAEoCUIGukgDyAEBEhQKBGNvZGUYAyABKAlCBrpIA8gBAWIGcHJvdG8z", [file_ai_stigmer_agentic_agentchannel_v1_api, file_ai_stigmer_commons_rpc_pagination, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agentchannel.v1.AgentChannelId.
  * Use `create(AgentChannelIdSchema)` to create a new message.

package/ai/stigmer/agentic/agentchannel/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qmCAAqmC,EAAE,CAAC,2CAA2C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgBruC;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAwC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAuB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA8B7D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAgB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAgC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAiC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,8nCAA8nC,EAAE,CAAC,2CAA2C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgB9vC;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAwC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAuB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA8B7D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAgB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAoD7D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAiC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/spec_pb.d.ts

@@ -9,8 +9,9 @@ export declare const file_ai_stigmer_agentic_agentchannel_v1_spec: GenFile;
  * AgentChannelSpec defines the configurable properties of an agent channel.
  *
  * The spec is deliberately small: which agent serves the channel, whether
- * serving is enabled, and which provider the channel targets. Workspace
- * identity and credentials are produced by the install flow and live in
+ * serving is enabled, which provider the channel targets, and which
+ * environments supply the agent's tool credentials. Workspace identity and
+ * provider credentials are produced by the install flow and live in
  * status — a declarative apply can never clobber them.
  *
  * @internal
@@ -69,10 +70,69 @@ export type AgentChannelSpec = Message<"ai.stigmer.agentic.agentchannel.v1.Agent
          */
         value: SlackChannelConfig;
         case: "slack";
+    } | {
+        /**
+         * WhatsApp Business number connection (Meta Cloud API).
+         *
+         * @generated from field: ai.stigmer.agentic.agentchannel.v1.WhatsAppChannelConfig whatsapp = 6;
+         */
+        value: WhatsAppChannelConfig;
+        case: "whatsapp";
     } | {
         case: undefined;
         value?: undefined;
     };
+    /**
+     * References to Environment resources whose values are provided to
+     * conversations on this channel.
+     *
+     * This is how a tool-using agent becomes chattable over a channel: bind
+     * an org-shared environment holding the needed credentials (for example
+     * a read-only API token), and channel executions receive its values at
+     * runtime. The agent and its default instance stay untouched.
+     *
+     * @internal
+     * The AgentShareSpec.environment_refs analog (decision 011: sharing is
+     * a channel — both connection kinds carry their own credentials).
+     * Resolved in the channel's org through the org-shared environment
+     * resolution seam (EnvironmentRuntimeResolutionService /
+     * OrgSharedEnvironmentPolicy): each referenced environment must be
+     * visibility_org in the channel's org, or the merge skips it with a
+     * diagnostic. Merged at channel execution-context build time only,
+     * lowest priority (instance refs and runtime_env override on key
+     * conflicts) — never bound to the agent's system-managed default
+     * instance. No write-time existence or visibility check, matching the
+     * share: enforcement lives solely at runtime resolution, which fails
+     * closed. Unlike the share there is no audience CEL — channels have no
+     * audience concept, and the same-org invariant (agent_ref.org ==
+     * metadata.org) already scopes resolution.
+     *
+     * @generated from field: repeated ai.stigmer.commons.apiresource.ApiResourceReference environment_refs = 4;
+     */
+    environmentRefs: ApiResourceReference[];
+    /**
+     * Reference to the ChannelApp this channel installs through.
+     *
+     * For Slack, absent means the channel uses the platform's shared
+     * Stigmer app — the zero-setup default. Set it to install through your
+     * own provider app instead: the bot carries the app's name and icon,
+     * and each app is its own bot identity, so multiple agents can serve
+     * one workspace. For WhatsApp the reference is required — every
+     * WhatsApp channel installs through your own Meta app (DD-WA-2).
+     *
+     * @internal
+     * T04 item 2. Invariants (enforced in handlers of both editions):
+     * app_ref.org must equal metadata.org (secrets never cross orgs — the
+     * agent_ref rule), and the ref is immutable while install_state ==
+     * installed (the workspace granted THAT app; switching apps requires
+     * re-install, so pending/revoked channels may rebind freely). No
+     * write-time existence or provider-match check, matching the
+     * environment_refs posture: the install flow resolves the app and
+     * fails closed on a missing or wrong-provider reference.
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference app_ref = 5;
+     */
+    appRef?: ApiResourceReference;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentchannel.v1.AgentChannelSpec.
@@ -100,3 +160,41 @@ export type SlackChannelConfig = Message<"ai.stigmer.agentic.agentchannel.v1.Sla
  * Use `create(SlackChannelConfigSchema)` to create a new message.
  */
 export declare const SlackChannelConfigSchema: GenMessage<SlackChannelConfig>;
+/**
+ * WhatsAppChannelConfig selects WhatsApp as the channel provider and names
+ * the WhatsApp Business phone number the channel serves.
+ *
+ * WhatsApp channels install through your own Meta app registered as a
+ * ChannelApp: `spec.app_ref` is required for this provider (there is no
+ * shared platform WhatsApp app). Installing validates the number against
+ * the Meta Cloud API and records the observed facts in status.
+ *
+ * @internal
+ * DD-WA-2: unlike Slack, WhatsApp v1 is BYO-only — app_ref presence is
+ * enforced in the create/update/apply handlers of both editions (the
+ * oneof-conditional rule does not fit a field-level CEL). phone_number_id
+ * lives in SPEC because it is genuinely user-declared (a WABA holds many
+ * numbers; the owner picks which one this agent serves) — the P1
+ * honest-modeling rule, not an exception to it. The install flow echoes it
+ * into status.whatsapp as the routing/uniqueness fact, mirroring
+ * status.slack.team_id.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.WhatsAppChannelConfig
+ */
+export type WhatsAppChannelConfig = Message<"ai.stigmer.agentic.agentchannel.v1.WhatsAppChannelConfig"> & {
+    /**
+     * Phone number ID of the WhatsApp Business number this channel serves,
+     * from Meta's WhatsApp Manager (API Setup), e.g. "106540352242922".
+     *
+     * This is the Cloud API's identifier for the number — not the phone
+     * number itself.
+     *
+     * @generated from field: string phone_number_id = 1;
+     */
+    phoneNumberId: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.WhatsAppChannelConfig.
+ * Use `create(WhatsAppChannelConfigSchema)` to create a new message.
+ */
+export declare const WhatsAppChannelConfigSchema: GenMessage<WhatsAppChannelConfig>;

package/ai/stigmer/agentic/agentchannel/v1/spec_pb.js

@@ -8,7 +8,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agentchannel/v1/spec.proto.
  */
-export const file_ai_stigmer_agentic_agentchannel_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agentchannel_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agentchannel.v1.AgentChannelSpec.
  * Use `create(AgentChannelSpecSchema)` to create a new message.
@@ -19,4 +19,9 @@ export const AgentChannelSpecSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_
  * Use `create(SlackChannelConfigSchema)` to create a new message.
  */
 export const SlackChannelConfigSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_spec, 1);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.WhatsAppChannelConfig.
+ * Use `create(WhatsAppChannelConfigSchema)` to create a new message.
+ */
+export const WhatsAppChannelConfigSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_spec, 2);
 //# sourceMappingURL=spec_pb.js.map

package/ai/stigmer/agentic/agentchannel/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,yjBAAyjB,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuE/rB;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAoB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,8vCAA8vC,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAqIp4C;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAoB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAoC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/status_pb.d.ts

@@ -43,6 +43,14 @@ export type AgentChannelStatus = Message<"ai.stigmer.agentic.agentchannel.v1.Age
          */
         value: SlackInstallStatus;
         case: "slack";
+    } | {
+        /**
+         * WhatsApp Business number install facts.
+         *
+         * @generated from field: ai.stigmer.agentic.agentchannel.v1.WhatsAppInstallStatus whatsapp = 4;
+         */
+        value: WhatsAppInstallStatus;
+        case: "whatsapp";
     } | {
         case: undefined;
         value?: undefined;
@@ -123,12 +131,91 @@ export type SlackInstallStatus = Message<"ai.stigmer.agentic.agentchannel.v1.Sla
      * @generated from field: google.protobuf.Timestamp installed_at = 6;
      */
     installedAt?: Timestamp;
+    /**
+     * ID of the ChannelApp the install went through; empty for installs
+     * of the platform's shared Stigmer app.
+     *
+     * @internal
+     * Written by the install completion path from the resolved
+     * spec.app_ref (sole writer, like every install fact). Discriminates
+     * routing and workspace uniqueness once multiple apps can serve one
+     * workspace: lookups key on (team_id, channel_app_id) and the
+     * partial-unique installed index is compound over both (decision 007
+     * as amended by T04 item 2). Existing platform installs predate the
+     * field; a missing value means the platform app — no backfill.
+     *
+     * @generated from field: string channel_app_id = 7;
+     */
+    channelAppId: string;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentchannel.v1.SlackInstallStatus.
  * Use `create(SlackInstallStatusSchema)` to create a new message.
  */
 export declare const SlackInstallStatusSchema: GenMessage<SlackInstallStatus>;
+/**
+ * WhatsAppInstallStatus holds the facts observed when a WhatsApp Business
+ * number was connected through the Meta Cloud API.
+ *
+ * @internal
+ * Written by the direct-install path (sole writer, DD-WA-1): the installer
+ * validates spec.whatsapp.phone_number_id against the Graph API and echoes
+ * it here alongside the observed display facts. The echo is deliberate —
+ * routing and uniqueness read STATUS (the install fact), mirroring
+ * status.slack.team_id, so a later spec edit can never silently re-route
+ * live traffic; the number binding changes only through a re-install.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.WhatsAppInstallStatus
+ */
+export type WhatsAppInstallStatus = Message<"ai.stigmer.agentic.agentchannel.v1.WhatsAppInstallStatus"> & {
+    /**
+     * Phone number ID the install validated and bound, e.g. "106540352242922".
+     *
+     * @internal
+     * The inbound routing key: the webhook receiver resolves the
+     * AgentChannel from the event payload's metadata.phone_number_id. One
+     * INSTALLED channel per (phone_number_id, channel_app_id), enforced by
+     * a compound partial-unique index on installed rows — the
+     * status.slack.team_id mechanism (decision 007) applied to WhatsApp.
+     *
+     * @generated from field: string phone_number_id = 1;
+     */
+    phoneNumberId: string;
+    /**
+     * Human-readable phone number at install time, e.g. "+1 555 025 3483".
+     *
+     * @generated from field: string display_phone_number = 2;
+     */
+    displayPhoneNumber: string;
+    /**
+     * WhatsApp Business verified display name of the number at install time.
+     *
+     * @generated from field: string verified_name = 3;
+     */
+    verifiedName: string;
+    /**
+     * ID of the ChannelApp the install went through. Always set for
+     * WhatsApp — every WhatsApp channel installs through your own Meta app.
+     *
+     * @internal
+     * Same discriminator role as SlackInstallStatus.channel_app_id; never
+     * empty because WhatsApp has no platform app (DD-WA-2).
+     *
+     * @generated from field: string channel_app_id = 4;
+     */
+    channelAppId: string;
+    /**
+     * When the install completed.
+     *
+     * @generated from field: google.protobuf.Timestamp installed_at = 5;
+     */
+    installedAt?: Timestamp;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.WhatsAppInstallStatus.
+ * Use `create(WhatsAppInstallStatusSchema)` to create a new message.
+ */
+export declare const WhatsAppInstallStatusSchema: GenMessage<WhatsAppInstallStatus>;
 /**
  * AgentChannelInstallState tracks the provider install lifecycle.
  *