@stigmer/protos 3.1.6 → 3.1.8

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js

@@ -10,14 +10,15 @@ import { ApiResourceReference } from "../../../commons/apiresource/io_pbjs";
  * ExecutionContextQueryController handles read operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - All read operations check can_view on parent agent_execution or workflow_execution
+ * Authorization: All RPCs use is_skip_authorization with handler-level auth.
+ * In cloud, the handler performs a direct FGA check: can_view on
+ * execution_context:<metadata.id>, against the owner tuple written at creation
+ * time by the create pipeline. OSS enforces no authorization.
  *
- * The handler loads the ExecutionContext, extracts the execution_id from spec,
- * and verifies the caller has permission on whichever parent type matches.
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Secret handling: values with is_secret=true are returned in plaintext on OSS
+ * (single-user local, no encryption). On cloud they are redacted for user-class
+ * callers on every read RPC; only getByExecutionId can return decrypted values,
+ * and only to runner-class credentials (see that RPC's comment).
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController
  */
@@ -28,7 +29,8 @@ export const ExecutionContextQueryController = {
          * Get an ExecutionContext by ID.
          *
          * @internal
-         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+         * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+         * Secret values are redacted on cloud.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.get
          */
@@ -42,7 +44,8 @@ export const ExecutionContextQueryController = {
          * Get an ExecutionContext by reference (slug-based lookup).
          *
          * @internal
-         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+         * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+         * Secret values are redacted on cloud.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByReference
          */
@@ -57,9 +60,16 @@ export const ExecutionContextQueryController = {
          *
          * @internal
          * Primary lookup method used by runners to retrieve the merged environment
-         * variables during workflow/agent execution. The returned context contains
-         * decrypted secrets for runner consumption.
-         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+         * variables during workflow/agent execution and MCP discovery.
+         * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+         *
+         * Secret handling (cloud): the decrypt path is gated by caller credential
+         * class, not by FGA — runners authenticate as the user who owns the
+         * execution, so permissions cannot tell them apart. Callers presenting a
+         * platform-minted runner token (token_type of sandbox, workflow_sandbox,
+         * connect_sandbox, or embedded_runner) receive decrypted secret values;
+         * every other caller (user JWT, SDK, console) receives the same redaction
+         * as get/getByReference.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
          */

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/query_pb.d.ts

@@ -10,14 +10,15 @@ export declare const file_ai_stigmer_agentic_executioncontext_v1_query: GenFile;
  * ExecutionContextQueryController handles read operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - All read operations check can_view on parent agent_execution or workflow_execution
+ * Authorization: All RPCs use is_skip_authorization with handler-level auth.
+ * In cloud, the handler performs a direct FGA check: can_view on
+ * execution_context:<metadata.id>, against the owner tuple written at creation
+ * time by the create pipeline. OSS enforces no authorization.
  *
- * The handler loads the ExecutionContext, extracts the execution_id from spec,
- * and verifies the caller has permission on whichever parent type matches.
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Secret handling: values with is_secret=true are returned in plaintext on OSS
+ * (single-user local, no encryption). On cloud they are redacted for user-class
+ * callers on every read RPC; only getByExecutionId can return decrypted values,
+ * and only to runner-class credentials (see that RPC's comment).
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController
  */
@@ -26,7 +27,8 @@ export declare const ExecutionContextQueryController: GenService<{
      * Get an ExecutionContext by ID.
      *
      * @internal
-     * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+     * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+     * Secret values are redacted on cloud.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.get
      */
@@ -39,7 +41,8 @@ export declare const ExecutionContextQueryController: GenService<{
      * Get an ExecutionContext by reference (slug-based lookup).
      *
      * @internal
-     * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+     * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+     * Secret values are redacted on cloud.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByReference
      */
@@ -53,9 +56,16 @@ export declare const ExecutionContextQueryController: GenService<{
      *
      * @internal
      * Primary lookup method used by runners to retrieve the merged environment
-     * variables during workflow/agent execution. The returned context contains
-     * decrypted secrets for runner consumption.
-     * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+     * variables during workflow/agent execution and MCP discovery.
+     * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+     *
+     * Secret handling (cloud): the decrypt path is gated by caller credential
+     * class, not by FGA — runners authenticate as the user who owns the
+     * execution, so permissions cannot tell them apart. Callers presenting a
+     * platform-minted runner token (token_type of sandbox, workflow_sandbox,
+     * connect_sandbox, or embedded_runner) receive decrypted secret values;
+     * every other caller (user JWT, SDK, console) receives the same redaction
+     * as get/getByReference.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
      */

package/ai/stigmer/agentic/executioncontext/v1/query_pb.js

@@ -15,14 +15,15 @@ export const file_ai_stigmer_agentic_executioncontext_v1_query = /*@__PURE__*/ f
  * ExecutionContextQueryController handles read operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - All read operations check can_view on parent agent_execution or workflow_execution
+ * Authorization: All RPCs use is_skip_authorization with handler-level auth.
+ * In cloud, the handler performs a direct FGA check: can_view on
+ * execution_context:<metadata.id>, against the owner tuple written at creation
+ * time by the create pipeline. OSS enforces no authorization.
  *
- * The handler loads the ExecutionContext, extracts the execution_id from spec,
- * and verifies the caller has permission on whichever parent type matches.
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Secret handling: values with is_secret=true are returned in plaintext on OSS
+ * (single-user local, no encryption). On cloud they are redacted for user-class
+ * callers on every read RPC; only getByExecutionId can return decrypted values,
+ * and only to runner-class credentials (see that RPC's comment).
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController
  */

package/ai/stigmer/agentic/executioncontext/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,0vBAA0vB,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEv/B;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GA2CvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,0vBAA0vB,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEv/B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAoDvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts

@@ -448,6 +448,26 @@ export type McpServerAuth = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerAu
      * @generated from field: string discovery_url = 7;
      */
     discoveryUrl: string;
+    /**
+     * Whether the server's endpoint rejects manually-entered static tokens.
+     *
+     * Some hosted MCP endpoints (e.g. Notion, Monday) only accept an access
+     * token obtained through their OAuth flow — a personal API token or PAT
+     * pasted into the credential form is rejected with a 401. For these servers
+     * OAuth is not merely the preferred path, it is the only path that works.
+     *
+     * When true, the connect surfaces present OAuth as the sole credential
+     * option and suppress the "enter token manually" affordance, so users are
+     * never sent down a path that cannot succeed. When false (the default), a
+     * static token remains a valid alternative — appropriate for API-key servers
+     * (e.g. Tavily) and for vendor endpoints that also accept a PAT (e.g.
+     * GitHub). This is a structural fact about the endpoint, not observable from
+     * the spec shape alone (an OAuth-only server and a PAT-capable server can
+     * have identical auth blocks), so it must be declared explicitly.
+     *
+     * @generated from field: bool oauth_only = 10;
+     */
+    oauthOnly: boolean;
 };
 /**
  * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServerAuth.

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js

@@ -9,7 +9,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/mcpserver/v1/spec.proto.
  */
-export const file_ai_stigmer_agentic_mcpserver_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_mcpserver_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.mcpserver.v1.McpServerSpec.
  * Use `create(McpServerSpecSchema)` to create a new message.

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,glEAAglE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgJnwE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAwG5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgJ7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6H5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/command_connect.d.ts

@@ -68,9 +68,17 @@ export declare const SessionCommandController: {
         /**
          * Delete a session.
          *
+         * Deletion cascades to the session's agent executions. Billing usage
+         * records are immutable and unaffected — they carry their own copies of
+         * the session and execution identifiers.
+         *
+         * Fails with FAILED_PRECONDITION while any agent execution in the
+         * session is still active (pending, in progress, waiting for approval,
+         * or paused); cancel it or wait for it to finish first.
+         *
          * @internal
-         * Restricted to platform operators to preserve the billing and audit trail.
-         * Regular users (including session owners) cannot delete sessions.
+         * Requires can_delete on the session (owner-only — sessions are personal
+         * resources, so org admins have no implicit delete access).
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.delete
          */

package/ai/stigmer/agentic/session/v1/command_connect.js

@@ -75,9 +75,17 @@ export const SessionCommandController = {
         /**
          * Delete a session.
          *
+         * Deletion cascades to the session's agent executions. Billing usage
+         * records are immutable and unaffected — they carry their own copies of
+         * the session and execution identifiers.
+         *
+         * Fails with FAILED_PRECONDITION while any agent execution in the
+         * session is still active (pending, in progress, waiting for approval,
+         * or paused); cancel it or wait for it to finish first.
+         *
          * @internal
-         * Restricted to platform operators to preserve the billing and audit trail.
-         * Regular users (including session owners) cannot delete sessions.
+         * Requires can_delete on the session (owner-only — sessions are personal
+         * resources, so org admins have no implicit delete access).
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.delete
          */

package/ai/stigmer/agentic/session/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/session/v1/command_pb.d.ts

@@ -69,9 +69,17 @@ export declare const SessionCommandController: GenService<{
     /**
      * Delete a session.
      *
+     * Deletion cascades to the session's agent executions. Billing usage
+     * records are immutable and unaffected — they carry their own copies of
+     * the session and execution identifiers.
+     *
+     * Fails with FAILED_PRECONDITION while any agent execution in the
+     * session is still active (pending, in progress, waiting for approval,
+     * or paused); cancel it or wait for it to finish first.
+     *
      * @internal
-     * Restricted to platform operators to preserve the billing and audit trail.
-     * Regular users (including session owners) cannot delete sessions.
+     * Requires can_delete on the session (owner-only — sessions are personal
+     * resources, so org admins have no implicit delete access).
      *
      * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.delete
      */

package/ai/stigmer/agentic/session/v1/command_pb.js

@@ -9,7 +9,7 @@ import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc
 /**
  * Describes the file ai/stigmer/agentic/session/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_session_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_ai_stigmer_agentic_session_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+export const file_ai_stigmer_agentic_session_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_ai_stigmer_agentic_session_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
 /**
  * SessionCommandController handles write operations for agent sessions.
  *

package/ai/stigmer/agentic/session/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0HAA0H;AAC1H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,soCAAsoC,EAAE,CAAC,sCAAsC,EAAE,qCAAqC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEz0C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAsEhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0HAA0H;AAC1H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,6lCAA6lC,EAAE,CAAC,sCAAsC,EAAE,qCAAqC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEhyC;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GA8EhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/io_pb.d.ts

@@ -92,17 +92,17 @@ export type ListSessionsRequest = Message<"ai.stigmer.agentic.session.v1.ListSes
  */
 export declare const ListSessionsRequestSchema: GenMessage<ListSessionsRequest>;
 /**
- * ListSessionsByAgentRequest lists all sessions for a specific agent.
+ * ListSessionsByAgentInstanceRequest lists all sessions for a specific agent instance.
  *
- * @generated from message ai.stigmer.agentic.session.v1.ListSessionsByAgentRequest
+ * @generated from message ai.stigmer.agentic.session.v1.ListSessionsByAgentInstanceRequest
  */
-export type ListSessionsByAgentRequest = Message<"ai.stigmer.agentic.session.v1.ListSessionsByAgentRequest"> & {
+export type ListSessionsByAgentInstanceRequest = Message<"ai.stigmer.agentic.session.v1.ListSessionsByAgentInstanceRequest"> & {
     /**
-     * Agent ID to filter by.
+     * Agent instance ID to filter by.
      *
-     * @generated from field: string agent_id = 1;
+     * @generated from field: string agent_instance_id = 1;
      */
-    agentId: string;
+    agentInstanceId: string;
     /**
      * Maximum number of sessions to return per page.
      *
@@ -117,10 +117,10 @@ export type ListSessionsByAgentRequest = Message<"ai.stigmer.agentic.session.v1.
     pageToken: string;
 };
 /**
- * Describes the message ai.stigmer.agentic.session.v1.ListSessionsByAgentRequest.
- * Use `create(ListSessionsByAgentRequestSchema)` to create a new message.
+ * Describes the message ai.stigmer.agentic.session.v1.ListSessionsByAgentInstanceRequest.
+ * Use `create(ListSessionsByAgentInstanceRequestSchema)` to create a new message.
  */
-export declare const ListSessionsByAgentRequestSchema: GenMessage<ListSessionsByAgentRequest>;
+export declare const ListSessionsByAgentInstanceRequestSchema: GenMessage<ListSessionsByAgentInstanceRequest>;
 /**
  * UpdateSessionSubjectRequest sets the conversation title for a session.
  *

package/ai/stigmer/agentic/session/v1/io_pb.js

@@ -7,7 +7,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/session/v1/io.proto.
  */
-export const file_ai_stigmer_agentic_session_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_session_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.session.v1.SessionId.
  * Use `create(SessionIdSchema)` to create a new message.
@@ -29,10 +29,10 @@ export const SessionListSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agent
  */
 export const ListSessionsRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_session_v1_io, 3);
 /**
- * Describes the message ai.stigmer.agentic.session.v1.ListSessionsByAgentRequest.
- * Use `create(ListSessionsByAgentRequestSchema)` to create a new message.
+ * Describes the message ai.stigmer.agentic.session.v1.ListSessionsByAgentInstanceRequest.
+ * Use `create(ListSessionsByAgentInstanceRequestSchema)` to create a new message.
  */
-export const ListSessionsByAgentRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_session_v1_io, 4);
+export const ListSessionsByAgentInstanceRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_session_v1_io, 4);
 /**
  * Describes the message ai.stigmer.agentic.session.v1.UpdateSessionSubjectRequest.
  * Use `create(UpdateSessionSubjectRequestSchema)` to create a new message.

package/ai/stigmer/agentic/session/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qHAAqH;AACrH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,ooBAAooB,EAAE,CAAC,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAcvtB;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAcxD;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB,aAAa,CAC7D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAuBxD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA4BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qHAAqH;AACrH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,0pBAA0pB,EAAE,CAAC,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAc7uB;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAcxD;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB,aAAa,CAC7D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAuBxD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAmD,aAAa,CACnH,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA4BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/query_connect.d.ts

@@ -32,15 +32,16 @@ export declare const SessionQueryController: {
             readonly kind: any;
         };
         /**
-         * List all sessions for a specific agent.
+         * List all sessions for a specific agent instance.
          *
          * @internal
-         * Authorization is handled in-handler via FGA-filtered queries.
+         * Authorization is handled in handler via FGA query for authorized
+         * session_ids, then filtered by agent_instance_id.
          *
-         * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgent
+         * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgentInstance
          */
-        readonly listByAgent: {
-            readonly name: "listByAgent";
+        readonly listByAgentInstance: {
+            readonly name: "listByAgentInstance";
             readonly I: any;
             readonly O: any;
             readonly kind: any;

package/ai/stigmer/agentic/session/v1/query_connect.js

@@ -2,7 +2,7 @@
 // @generated from file ai/stigmer/agentic/session/v1/query.proto (package ai.stigmer.agentic.session.v1, syntax proto3)
 /* eslint-disable */
 // @ts-nocheck
-import { ListSessionsByAgentRequest, ListSessionsRequest, SessionId, SessionList } from "./io_pbjs";
+import { ListSessionsByAgentInstanceRequest, ListSessionsRequest, SessionId, SessionList } from "./io_pbjs";
 import { Session } from "./api_pbjs";
 import { MethodKind } from "@bufbuild/protobuf";
 /**
@@ -39,16 +39,17 @@ export const SessionQueryController = {
             kind: MethodKind.Unary,
         },
         /**
-         * List all sessions for a specific agent.
+         * List all sessions for a specific agent instance.
          *
          * @internal
-         * Authorization is handled in-handler via FGA-filtered queries.
+         * Authorization is handled in handler via FGA query for authorized
+         * session_ids, then filtered by agent_instance_id.
          *
-         * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgent
+         * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgentInstance
          */
-        listByAgent: {
-            name: "listByAgent",
-            I: ListSessionsByAgentRequest,
+        listByAgentInstance: {
+            name: "listByAgentInstance",
+            I: ListSessionsByAgentInstanceRequest,
             O: SessionList,
             kind: MethodKind.Unary,
         },

package/ai/stigmer/agentic/session/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wHAAwH;AACxH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wHAAwH;AACxH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC5G,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,kCAAkC;YACrC,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/session/v1/query_pb.d.ts

@@ -1,6 +1,6 @@
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
 import type { SessionSchema } from "./api_pb.js";
-import type { ListSessionsByAgentRequestSchema, ListSessionsRequestSchema, SessionIdSchema, SessionListSchema } from "./io_pb.js";
+import type { ListSessionsByAgentInstanceRequestSchema, ListSessionsRequestSchema, SessionIdSchema, SessionListSchema } from "./io_pb.js";
 /**
  * Describes the file ai/stigmer/agentic/session/v1/query.proto.
  */
@@ -35,16 +35,17 @@ export declare const SessionQueryController: GenService<{
         output: typeof SessionListSchema;
     };
     /**
-     * List all sessions for a specific agent.
+     * List all sessions for a specific agent instance.
      *
      * @internal
-     * Authorization is handled in-handler via FGA-filtered queries.
+     * Authorization is handled in handler via FGA query for authorized
+     * session_ids, then filtered by agent_instance_id.
      *
-     * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgent
+     * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgentInstance
      */
-    listByAgent: {
+    listByAgentInstance: {
         methodKind: "unary";
-        input: typeof ListSessionsByAgentRequestSchema;
+        input: typeof ListSessionsByAgentInstanceRequestSchema;
         output: typeof SessionListSchema;
     };
 }>;

package/ai/stigmer/agentic/session/v1/query_pb.js

@@ -9,7 +9,7 @@ import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc
 /**
  * Describes the file ai/stigmer/agentic/session/v1/query.proto.
  */
-export const file_ai_stigmer_agentic_session_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_ai_stigmer_agentic_session_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+export const file_ai_stigmer_agentic_session_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_ai_stigmer_agentic_session_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
 /**
  * SessionQueryController handles read operations for agent sessions.
  *

package/ai/stigmer/agentic/session/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,yoBAAyoB,EAAE,CAAC,sCAAsC,EAAE,qCAAqC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE50B;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAqC9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,gqBAAgqB,EAAE,CAAC,sCAAsC,EAAE,qCAAqC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEn2B;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAsC9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflow/v1/command_connect.d.ts

@@ -84,18 +84,22 @@ export declare const WorkflowCommandController: {
         /**
          * Validate a workflow spec without persisting it.
          *
-         * Runs the same two-layer validation pipeline used by create/update:
-         *   Layer 1: Proto field constraints (buf validate / protovalidate)
-         *   Layer 2: Temporal-based structural validation (Go activity: proto → YAML → Zigflow)
-         *
-         * Returns ServerlessWorkflowValidation with:
-         *   - VALID: Workflow structure passed all checks
-         *   - INVALID: User error (bad structure, missing fields, unknown task kinds)
-         *   - FAILED: System error (Temporal unavailable, converter crash)
-         *
-         * This RPC does NOT persist, authorize, or create instances. It is a
-         * pure validation endpoint suitable for iterative authoring workflows
-         * where the caller needs fast feedback before committing.
+         * Runs the same two validation layers as create/update, but never throws for a
+         * user-fixable spec problem: it always returns a structured
+         * ServerlessWorkflowValidation the caller can render field-by-field.
+         *   Layer 1: proto field constraints (buf validate / protovalidate)
+         *   Layer 2: in-process structural validation (proto → CNCF YAML plus
+         *            structural, cross-reference, model, and budget checks)
+         *
+         * Result states:
+         *   - VALID: workflow structure passed all checks
+         *   - INVALID: user error (bad structure, missing fields, unknown task kinds)
+         *   - FAILED: internal validation fault (reserved; not a user error)
+         *
+         * gRPC errors are limited to input that cannot be validated at all (a missing
+         * workflow or spec) and to genuine internal faults. This RPC does NOT persist,
+         * authorize, or create instances. It is a pure validation endpoint suitable for
+         * iterative authoring where the caller needs fast feedback before committing.
          *
          * @internal
          * Authorization: Uses the same permission as create — caller must have

package/ai/stigmer/agentic/workflow/v1/command_connect.js

@@ -94,18 +94,22 @@ export const WorkflowCommandController = {
         /**
          * Validate a workflow spec without persisting it.
          *
-         * Runs the same two-layer validation pipeline used by create/update:
-         *   Layer 1: Proto field constraints (buf validate / protovalidate)
-         *   Layer 2: Temporal-based structural validation (Go activity: proto → YAML → Zigflow)
-         *
-         * Returns ServerlessWorkflowValidation with:
-         *   - VALID: Workflow structure passed all checks
-         *   - INVALID: User error (bad structure, missing fields, unknown task kinds)
-         *   - FAILED: System error (Temporal unavailable, converter crash)
-         *
-         * This RPC does NOT persist, authorize, or create instances. It is a
-         * pure validation endpoint suitable for iterative authoring workflows
-         * where the caller needs fast feedback before committing.
+         * Runs the same two validation layers as create/update, but never throws for a
+         * user-fixable spec problem: it always returns a structured
+         * ServerlessWorkflowValidation the caller can render field-by-field.
+         *   Layer 1: proto field constraints (buf validate / protovalidate)
+         *   Layer 2: in-process structural validation (proto → CNCF YAML plus
+         *            structural, cross-reference, model, and budget checks)
+         *
+         * Result states:
+         *   - VALID: workflow structure passed all checks
+         *   - INVALID: user error (bad structure, missing fields, unknown task kinds)
+         *   - FAILED: internal validation fault (reserved; not a user error)
+         *
+         * gRPC errors are limited to input that cannot be validated at all (a missing
+         * workflow or spec) and to genuine internal faults. This RPC does NOT persist,
+         * authorize, or create instances. It is a pure validation endpoint suitable for
+         * iterative authoring where the caller needs fast feedback before committing.
          *
          * @internal
          * Authorization: Uses the same permission as create — caller must have

package/ai/stigmer/agentic/workflow/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflow/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}