@stigmer/protos 3.1.7 → 3.1.8

package/ai/stigmer/agentic/agent/v1/query_pb.d.ts

@@ -1,6 +1,6 @@
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
 import type { AgentSchema } from "./api_pb.js";
-import type { AgentIdSchema, GetDefaultAgentRequestSchema } from "./io_pb.js";
+import type { AgentIdSchema, GetDefaultAgentRequestSchema, GetSharedProfileRequestSchema, SharedAgentProfileSchema } from "./io_pb.js";
 import type { ApiResourceReferenceSchema } from "../../../commons/apiresource/io_pb.js";
 /**
  * Describes the file ai/stigmer/agentic/agent/v1/query.proto.
@@ -57,4 +57,69 @@ export declare const AgentQueryController: GenService<{
         input: typeof GetDefaultAgentRequestSchema;
         output: typeof AgentSchema;
     };
+    /**
+     * Get the public profile of a shared agent by its org/slug reference.
+     *
+     * This is the resolution path for the hosted chat page: anonymous
+     * visitors (no Stigmer account, no token) resolve a shared link to the
+     * trimmed SharedAgentProfile — never the full Agent, whose spec carries
+     * the system prompt, environment declarations, and MCP wiring.
+     *
+     * Returns NOT_FOUND when the agent does not exist, is not shared
+     * (spec.sharing.enabled is false/unset), is shared with the org
+     * audience (spec.sharing.audience is org — anonymous callers must not be
+     * able to distinguish an org-internal share from a nonexistent agent; use
+     * getSharedProfileForMember instead), or the share link is locked and
+     * link_token does not match the agent's current
+     * status.share_link_token. The cases are deliberately
+     * indistinguishable so an unshared, revoked, or rotated agent URL leaks
+     * nothing — unlike getByReference, which returns PERMISSION_DENIED for
+     * an existing but unauthorized agent. Returns INVALID_ARGUMENT when org
+     * is empty: org+slug is the shared URL's identity, and cross-org slug
+     * matching on a public endpoint would enable enumeration.
+     *
+     * @internal
+     * Public by design (no authentication): enforcement is the app-level
+     * sharing gate in the handler, not FGA — see AgentSharing in spec.proto
+     * for why sharing writes no visibility tuples.
+     *
+     * @generated from rpc ai.stigmer.agentic.agent.v1.AgentQueryController.getSharedProfile
+     */
+    getSharedProfile: {
+        methodKind: "unary";
+        input: typeof GetSharedProfileRequestSchema;
+        output: typeof SharedAgentProfileSchema;
+    };
+    /**
+     * Get the profile of a shared agent as a signed-in organization member.
+     *
+     * This is the resolution path for the hosted chat page when an agent is
+     * shared with the org audience (spec.sharing.audience is org): the public
+     * getSharedProfile deliberately returns NOT_FOUND for such agents, so a
+     * signed-in member resolves the same trimmed SharedAgentProfile through
+     * this authenticated RPC instead. Also resolves public-audience shares,
+     * so an authenticated caller can use one resolution path for any share.
+     *
+     * Returns NOT_FOUND when the agent does not exist, is not shared, the
+     * caller is not a member of the owning organization, or the share is a
+     * public-audience share locked with a link token (this tokenless path
+     * must not reveal a killed link's profile) — the cases are deliberately
+     * indistinguishable so a share URL leaks nothing to non-members.
+     * Returns INVALID_ARGUMENT when org is empty.
+     *
+     * @internal
+     * Custom authorization in handler — requires authentication (not
+     * is_public), then an app-level organization#member FGA check for org
+     * shares. No standard resource_kind/permission config: the sharing gate
+     * is app-level by design (see AgentSharing in spec.proto), and membership
+     * is checked live on every call so revoked members lose access
+     * immediately.
+     *
+     * @generated from rpc ai.stigmer.agentic.agent.v1.AgentQueryController.getSharedProfileForMember
+     */
+    getSharedProfileForMember: {
+        methodKind: "unary";
+        input: typeof ApiResourceReferenceSchema;
+        output: typeof SharedAgentProfileSchema;
+    };
 }>;

package/ai/stigmer/agentic/agent/v1/query_pb.js

@@ -10,7 +10,7 @@ import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc
 /**
  * Describes the file ai/stigmer/agentic/agent/v1/query.proto.
  */
-export const file_ai_stigmer_agentic_agent_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agent_v1_api, file_ai_stigmer_agentic_agent_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+export const file_ai_stigmer_agentic_agent_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agent_v1_api, file_ai_stigmer_agentic_agent_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
 /**
  * AgentQueryController handles read operations for AI agents.
  *

package/ai/stigmer/agentic/agent/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oHAAoH;AACpH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,omBAAomB,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE30B;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GA8C5B,aAAa,CAChB,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oHAAoH;AACpH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,y8BAAy8B,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEhrC;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GA+G5B,aAAa,CAChB,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agent/v1/spec_pb.d.ts

@@ -1,4 +1,4 @@
-import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
 import type { EnvVarDeclaration } from "../../environment/v1/spec_pb.js";
 import type { ApiResourceReference } from "../../../commons/apiresource/io_pb.js";
 import type { Message } from "@bufbuild/protobuf";
@@ -64,12 +64,155 @@ export type AgentSpec = Message<"ai.stigmer.agentic.agent.v1.AgentSpec"> & {
     env: {
         [key: string]: EnvVarDeclaration;
     };
+    /**
+     * Sharing configuration for the agent's hosted chat experience.
+     *
+     * Controls who can chat with the running agent over its hosted link: anyone
+     * with the link (public audience) or signed-in members of the owning
+     * organization (org audience). This is a distinct consent from
+     * metadata.visibility: visibility governs who can READ the agent blueprint
+     * (marketplace), while sharing governs who can CHAT with the agent runtime.
+     * Conversations over a shared link consume the owning organization's
+     * credits, so enabling sharing is an explicit, billing-affecting decision.
+     *
+     * Unset is equivalent to sharing disabled.
+     *
+     * @internal
+     * Declarative spec semantics apply: update/apply replace this field like
+     * any other spec field, so a manifest that omits sharing revokes an active
+     * share (fails closed). Console and CLI toggle it via the targeted
+     * updateSharing RPC instead of a full-resource write. Enforcement is
+     * app-level in the getSharedProfile handler — sharing deliberately writes
+     * NO FGA visibility tuples, because a public wildcard viewer tuple would
+     * expose the full blueprint (instructions included) to any authenticated
+     * account via getByReference, conflating the two consents.
+     *
+     * @generated from field: ai.stigmer.agentic.agent.v1.AgentSharing sharing = 8;
+     */
+    sharing?: AgentSharing;
 };
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.AgentSpec.
  * Use `create(AgentSpecSchema)` to create a new message.
  */
 export declare const AgentSpecSchema: GenMessage<AgentSpec>;
+/**
+ * AgentSharing controls access to an agent's hosted chat experience —
+ * anyone with the link (public audience) or org members only (org audience).
+ *
+ * When enabled with the public audience, the agent's trimmed profile becomes
+ * resolvable through the public getSharedProfile RPC and the hosted chat
+ * page can serve visitors without Stigmer accounts. When enabled with the
+ * org audience, only signed-in members of the owning organization can
+ * resolve the profile (getSharedProfileForMember) and chat. When disabled
+ * (or unset), the shared link behaves as if the agent does not exist
+ * (NOT_FOUND).
+ *
+ * This message is intentionally a wrapper so later phases can add fields
+ * (usage caps, expiry) without a breaking change.
+ *
+ * @generated from message ai.stigmer.agentic.agent.v1.AgentSharing
+ */
+export type AgentSharing = Message<"ai.stigmer.agentic.agent.v1.AgentSharing"> & {
+    /**
+     * Whether hosted-chat access for the configured audience is enabled.
+     *
+     * @generated from field: bool enabled = 1;
+     */
+    enabled: boolean;
+    /**
+     * Origins permitted to embed this agent's chat widget.
+     *
+     * Each entry is an exact web origin (scheme://host[:port]) with no path,
+     * for example "https://docs.example.com". An empty list allows embedding
+     * from any site; listing origins restricts embedding to those sites. The
+     * first-party hosted chat page is always exempt.
+     *
+     * @internal
+     * Enforced since T04 against the embed_origin the widget reports at
+     * mintGuestToken time (stamped into the guest JWT as a claim) and
+     * re-validated against this live list by the guest create-time gate
+     * (SharedSessionBlueprintAccess) on every session/execution create — the
+     * same gate that re-checks sharing.enabled, so revocation latency is
+     * identical (immediate). Unframed hosted-page visitors report no origin
+     * and are exempt by construction. Exact origins only — loosening to
+     * wildcards later is a non-breaking change, tightening would not be.
+     *
+     * @generated from field: repeated string allowed_origins = 2;
+     */
+    allowedOrigins: string[];
+    /**
+     * Owner-customizable copy shown to visitors when a launch-gate limit
+     * refuses their message. Unset fields fall back to platform defaults.
+     *
+     * @internal
+     * Resolved server-side at the refusal point and carried in the gRPC
+     * status description — deliberately NOT surfaced on SharedAgentProfile
+     * and NOT mapped client-side, so the copy reaches every client (web,
+     * embed, CLI) through the existing error-message path.
+     *
+     * @generated from field: ai.stigmer.agentic.agent.v1.AgentSharingMessages messages = 3;
+     */
+    messages?: AgentSharingMessages;
+    /**
+     * Who can chat with the shared agent. Unspecified means public
+     * (anyone with the link), so pre-existing shares keep their behavior.
+     *
+     * To keep an agent org-only, audience must be present in every apply:
+     * update/apply replace spec.sharing wholesale, so a manifest that sets
+     * enabled without audience resets the share to public.
+     *
+     * @internal
+     * Org audience is enforced cloud-side only (org membership is a
+     * multi-tenant IAM concept): the guest mint and public profile handlers
+     * treat audience=org as NOT_FOUND, and the create-time blueprint gate
+     * admits authenticated org members via an app-level FGA member check
+     * (no visibility tuples written — same posture as the sharing flag).
+     * The OSS single-user server stores and echoes the field.
+     *
+     * @generated from field: ai.stigmer.agentic.agent.v1.AgentSharingAudience audience = 4;
+     */
+    audience: AgentSharingAudience;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agent.v1.AgentSharing.
+ * Use `create(AgentSharingSchema)` to create a new message.
+ */
+export declare const AgentSharingSchema: GenMessage<AgentSharing>;
+/**
+ * AgentSharingMessages holds owner-customizable visitor-facing copy for
+ * shared-agent limit refusals.
+ *
+ * Empty fields mean "use the platform default". Plain text only; rendered
+ * verbatim in the visitor's chat surface.
+ *
+ * @generated from message ai.stigmer.agentic.agent.v1.AgentSharingMessages
+ */
+export type AgentSharingMessages = Message<"ai.stigmer.agentic.agent.v1.AgentSharingMessages"> & {
+    /**
+     * Shown when a visitor or the org exceeds the message rate limit.
+     *
+     * @generated from field: string rate_limited = 1;
+     */
+    rateLimited: string;
+    /**
+     * Shown when the org's credits are exhausted (sharing fails closed).
+     *
+     * @generated from field: string unavailable = 2;
+     */
+    unavailable: string;
+    /**
+     * Shown when a conversation hits its turn limit or inactivity timeout.
+     *
+     * @generated from field: string conversation_ended = 3;
+     */
+    conversationEnded: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agent.v1.AgentSharingMessages.
+ * Use `create(AgentSharingMessagesSchema)` to create a new message.
+ */
+export declare const AgentSharingMessagesSchema: GenMessage<AgentSharingMessages>;
 /**
  * SubAgent defines a specialized agent that the parent can delegate to.
  *
@@ -258,3 +401,41 @@ export type ToolApprovalOverride = Message<"ai.stigmer.agentic.agent.v1.ToolAppr
  * Use `create(ToolApprovalOverrideSchema)` to create a new message.
  */
 export declare const ToolApprovalOverrideSchema: GenMessage<ToolApprovalOverride>;
+/**
+ * AgentSharingAudience selects who can chat with a shared agent over its
+ * hosted link.
+ *
+ * Unspecified is treated as public for backward compatibility: every share
+ * created before the audience field existed is an anyone-with-link share.
+ *
+ * @generated from enum ai.stigmer.agentic.agent.v1.AgentSharingAudience
+ */
+export declare enum AgentSharingAudience {
+    /**
+     * Treated as public (backward compatibility with pre-audience shares).
+     *
+     * @generated from enum value: agent_sharing_audience_unspecified = 0;
+     */
+    unspecified = 0,
+    /**
+     * Anyone with the link can chat — no Stigmer account required.
+     * Visitors are anonymous guests; suitable only for knowledge that is
+     * safe to expose to the entire internet.
+     *
+     * @generated from enum value: agent_sharing_audience_public = 1;
+     */
+    public = 1,
+    /**
+     * Only signed-in members of the owning organization can chat.
+     * Membership is checked on every conversation turn, so access ends the
+     * moment a member leaves the organization. The right mode for
+     * org-internal knowledge agents.
+     *
+     * @generated from enum value: agent_sharing_audience_org = 2;
+     */
+    org = 2
+}
+/**
+ * Describes the enum ai.stigmer.agentic.agent.v1.AgentSharingAudience.
+ */
+export declare const AgentSharingAudienceSchema: GenEnum<AgentSharingAudience>;

package/ai/stigmer/agentic/agent/v1/spec_pb.js

@@ -1,7 +1,7 @@
 // @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
 // @generated from file ai/stigmer/agentic/agent/v1/spec.proto (package ai.stigmer.agentic.agent.v1, syntax proto3)
 /* eslint-disable */
-import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
 import { file_ai_stigmer_agentic_environment_v1_spec } from "../../environment/v1/spec_pb.js";
 import { file_ai_stigmer_commons_apiresource_field_options } from "../../../commons/apiresource/field_options_pb.js";
 import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb.js";
@@ -9,30 +9,79 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agent/v1/spec.proto.
  */
-export const file_ai_stigmer_agentic_agent_v1_spec = /*@__PURE__*/ fileDesc("CiZhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnQvdjEvc3BlYy5wcm90bxIbYWkuc3RpZ21lci5hZ2VudGljLmFnZW50LnYxIrAFCglBZ2VudFNwZWMSEwoLZGVzY3JpcHRpb24YASABKAkSEAoIaWNvbl91cmwYAiABKAkSHQoMaW5zdHJ1Y3Rpb25zGAMgASgJQge6SARyAhAKEs4BChFtY3Bfc2VydmVyX3VzYWdlcxgEIAMoCzIrLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudC52MS5NY3BTZXJ2ZXJVc2FnZUKFAbpIgQGSAX4ifLoBeQoWbWNwX3NlcnZlcl91c2FnZXMua2luZBI/bWNwX3NlcnZlcl91c2FnZXMgbXVzdCByZWZlcmVuY2UgcmVzb3VyY2VzIHdpdGgga2luZD1tY3Bfc2VydmVyGh50aGlzLm1jcF9zZXJ2ZXJfcmVmLmtpbmQgPT0gNDQSsAEKCnNraWxsX3JlZnMYBSADKAsyNC5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VSZWZlcmVuY2VCZrpIX5IBXCJaugFXCg9za2lsbF9yZWZzLmtpbmQSM3NraWxsX3JlZnMgbXVzdCByZWZlcmVuY2UgcmVzb3VyY2VzIHdpdGgga2luZD1za2lsbBoPdGhpcy5raW5kID09IDQz4IUsKxI5CgpzdWJfYWdlbnRzGAYgAygLMiUuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50LnYxLlN1YkFnZW50EjwKA2VudhgHIAMoCzIvLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudC52MS5BZ2VudFNwZWMuRW52RW50cnkaYAoIRW52RW50cnkSCwoDa2V5GAEgASgJEkMKBXZhbHVlGAIgASgLMjQuYWkuc3RpZ21lci5hZ2VudGljLmVudmlyb25tZW50LnYxLkVudlZhckRlY2xhcmF0aW9uOgI4ASLbAgoIU3ViQWdlbnQSFAoEbmFtZRgBIAEoCUIGukgDyAEBEhMKC2Rlc2NyaXB0aW9uGAIgASgJEh0KDGluc3RydWN0aW9ucxgDIAEoCUIHukgEcgIQChI6CgptY3BfYWNjZXNzGAQgAygLMiYuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50LnYxLk1jcEFjY2VzcxKwAQoKc2tpbGxfcmVmcxgFIAMoCzI0LmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZVJlZmVyZW5jZUJmukhfkgFcIlq6AVcKD3NraWxsX3JlZnMua2luZBIzc2tpbGxfcmVmcyBtdXN0IHJlZmVyZW5jZSByZXNvdXJjZXMgd2l0aCBraW5kPXNraWxsGg90aGlzLmtpbmQgPT0gNDPghSwrEhYKDm1vZGVsX292ZXJyaWRlGAYgASgJItUBCg5NY3BTZXJ2ZXJVc2FnZRJYCg5tY3Bfc2VydmVyX3JlZhgBIAEoCzI0LmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZVJlZmVyZW5jZUIKukgDyAEB4IUsLBIVCg1lbmFibGVkX3Rvb2xzGAIgAygJElIKF3Rvb2xfYXBwcm92YWxfb3ZlcnJpZGVzGAMgAygLMjEuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50LnYxLlRvb2xBcHByb3ZhbE92ZXJyaWRlIj4KCU1jcEFjY2VzcxIaCgptY3Bfc2VydmVyGAEgASgJQga6SAPIAQESFQoNZW5hYmxlZF90b29scxgCIAMoCSJeChRUb29sQXBwcm92YWxPdmVycmlkZRIaCgl0b29sX25hbWUYASABKAlCB7pIBHICEAESGQoRcmVxdWlyZXNfYXBwcm92YWwYAiABKAgSDwoHbWVzc2FnZRgDIAEoCWIGcHJvdG8z", [file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agent_v1_spec = /*@__PURE__*/ fileDesc("CiZhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnQvdjEvc3BlYy5wcm90bxIbYWkuc3RpZ21lci5hZ2VudGljLmFnZW50LnYxIuwFCglBZ2VudFNwZWMSEwoLZGVzY3JpcHRpb24YASABKAkSEAoIaWNvbl91cmwYAiABKAkSHQoMaW5zdHJ1Y3Rpb25zGAMgASgJQge6SARyAhAKEs4BChFtY3Bfc2VydmVyX3VzYWdlcxgEIAMoCzIrLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudC52MS5NY3BTZXJ2ZXJVc2FnZUKFAbpIgQGSAX4ifLoBeQoWbWNwX3NlcnZlcl91c2FnZXMua2luZBI/bWNwX3NlcnZlcl91c2FnZXMgbXVzdCByZWZlcmVuY2UgcmVzb3VyY2VzIHdpdGgga2luZD1tY3Bfc2VydmVyGh50aGlzLm1jcF9zZXJ2ZXJfcmVmLmtpbmQgPT0gNDQSsAEKCnNraWxsX3JlZnMYBSADKAsyNC5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VSZWZlcmVuY2VCZrpIX5IBXCJaugFXCg9za2lsbF9yZWZzLmtpbmQSM3NraWxsX3JlZnMgbXVzdCByZWZlcmVuY2UgcmVzb3VyY2VzIHdpdGgga2luZD1za2lsbBoPdGhpcy5raW5kID09IDQz4IUsKxI5CgpzdWJfYWdlbnRzGAYgAygLMiUuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50LnYxLlN1YkFnZW50EjwKA2VudhgHIAMoCzIvLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudC52MS5BZ2VudFNwZWMuRW52RW50cnkSOgoHc2hhcmluZxgIIAEoCzIpLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudC52MS5BZ2VudFNoYXJpbmcaYAoIRW52RW50cnkSCwoDa2V5GAEgASgJEkMKBXZhbHVlGAIgASgLMjQuYWkuc3RpZ21lci5hZ2VudGljLmVudmlyb25tZW50LnYxLkVudlZhckRlY2xhcmF0aW9uOgI4ASLcAwoMQWdlbnRTaGFyaW5nEg8KB2VuYWJsZWQYASABKAgSsAIKD2FsbG93ZWRfb3JpZ2lucxgCIAMoCUKWArpIkgKSAY4CECAiiQK6AYUCChZhbGxvd2VkX29yaWdpbnMuZm9ybWF0Em5hbGxvd2VkX29yaWdpbnMgZW50cmllcyBtdXN0IGJlIGV4YWN0IHdlYiBvcmlnaW5zIGxpa2UgaHR0cHM6Ly9leGFtcGxlLmNvbSAobm8gcGF0aCwgcXVlcnksIG9yIHRyYWlsaW5nIHNsYXNoKRp7dGhpcy5tYXRjaGVzKCdeaHR0cHM/Oi8vW0EtWmEtejAtOV0oW0EtWmEtejAtOS1dKltBLVphLXowLTldKT8oXFwuW0EtWmEtejAtOV0oW0EtWmEtejAtOS1dKltBLVphLXowLTldKT8pKig6WzAtOV17MSw1fSk/JCcpEkMKCG1lc3NhZ2VzGAMgASgLMjEuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50LnYxLkFnZW50U2hhcmluZ01lc3NhZ2VzEkMKCGF1ZGllbmNlGAQgASgOMjEuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50LnYxLkFnZW50U2hhcmluZ0F1ZGllbmNlInsKFEFnZW50U2hhcmluZ01lc3NhZ2VzEh4KDHJhdGVfbGltaXRlZBgBIAEoCUIIukgFcgMYrAISHQoLdW5hdmFpbGFibGUYAiABKAlCCLpIBXIDGKwCEiQKEmNvbnZlcnNhdGlvbl9lbmRlZBgDIAEoCUIIukgFcgMYrAIi2wIKCFN1YkFnZW50EhQKBG5hbWUYASABKAlCBrpIA8gBARITCgtkZXNjcmlwdGlvbhgCIAEoCRIdCgxpbnN0cnVjdGlvbnMYAyABKAlCB7pIBHICEAoSOgoKbWNwX2FjY2VzcxgEIAMoCzImLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudC52MS5NY3BBY2Nlc3MSsAEKCnNraWxsX3JlZnMYBSADKAsyNC5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VSZWZlcmVuY2VCZrpIX5IBXCJaugFXCg9za2lsbF9yZWZzLmtpbmQSM3NraWxsX3JlZnMgbXVzdCByZWZlcmVuY2UgcmVzb3VyY2VzIHdpdGgga2luZD1za2lsbBoPdGhpcy5raW5kID09IDQz4IUsKxIWCg5tb2RlbF9vdmVycmlkZRgGIAEoCSLVAQoOTWNwU2VydmVyVXNhZ2USWAoObWNwX3NlcnZlcl9yZWYYASABKAsyNC5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VSZWZlcmVuY2VCCrpIA8gBAeCFLCwSFQoNZW5hYmxlZF90b29scxgCIAMoCRJSChd0b29sX2FwcHJvdmFsX292ZXJyaWRlcxgDIAMoCzIxLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudC52MS5Ub29sQXBwcm92YWxPdmVycmlkZSI+CglNY3BBY2Nlc3MSGgoKbWNwX3NlcnZlchgBIAEoCUIGukgDyAEBEhUKDWVuYWJsZWRfdG9vbHMYAiADKAkiXgoUVG9vbEFwcHJvdmFsT3ZlcnJpZGUSGgoJdG9vbF9uYW1lGAEgASgJQge6SARyAhABEhkKEXJlcXVpcmVzX2FwcHJvdmFsGAIgASgIEg8KB21lc3NhZ2UYAyABKAkqgQEKFEFnZW50U2hhcmluZ0F1ZGllbmNlEiYKImFnZW50X3NoYXJpbmdfYXVkaWVuY2VfdW5zcGVjaWZpZWQQABIhCh1hZ2VudF9zaGFyaW5nX2F1ZGllbmNlX3B1YmxpYxABEh4KGmFnZW50X3NoYXJpbmdfYXVkaWVuY2Vfb3JnEAJiBnByb3RvMw", [file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.AgentSpec.
  * Use `create(AgentSpecSchema)` to create a new message.
  */
 export const AgentSpecSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 0);
+/**
+ * Describes the message ai.stigmer.agentic.agent.v1.AgentSharing.
+ * Use `create(AgentSharingSchema)` to create a new message.
+ */
+export const AgentSharingSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 1);
+/**
+ * Describes the message ai.stigmer.agentic.agent.v1.AgentSharingMessages.
+ * Use `create(AgentSharingMessagesSchema)` to create a new message.
+ */
+export const AgentSharingMessagesSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 2);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.SubAgent.
  * Use `create(SubAgentSchema)` to create a new message.
  */
-export const SubAgentSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 1);
+export const SubAgentSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 3);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.McpServerUsage.
  * Use `create(McpServerUsageSchema)` to create a new message.
  */
-export const McpServerUsageSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 2);
+export const McpServerUsageSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 4);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.McpAccess.
  * Use `create(McpAccessSchema)` to create a new message.
  */
-export const McpAccessSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 3);
+export const McpAccessSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 5);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.ToolApprovalOverride.
  * Use `create(ToolApprovalOverrideSchema)` to create a new message.
  */
-export const ToolApprovalOverrideSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 4);
+export const ToolApprovalOverrideSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 6);
+/**
+ * AgentSharingAudience selects who can chat with a shared agent over its
+ * hosted link.
+ *
+ * Unspecified is treated as public for backward compatibility: every share
+ * created before the audience field existed is an anyone-with-link share.
+ *
+ * @generated from enum ai.stigmer.agentic.agent.v1.AgentSharingAudience
+ */
+export var AgentSharingAudience;
+(function (AgentSharingAudience) {
+    /**
+     * Treated as public (backward compatibility with pre-audience shares).
+     *
+     * @generated from enum value: agent_sharing_audience_unspecified = 0;
+     */
+    AgentSharingAudience[AgentSharingAudience["unspecified"] = 0] = "unspecified";
+    /**
+     * Anyone with the link can chat — no Stigmer account required.
+     * Visitors are anonymous guests; suitable only for knowledge that is
+     * safe to expose to the entire internet.
+     *
+     * @generated from enum value: agent_sharing_audience_public = 1;
+     */
+    AgentSharingAudience[AgentSharingAudience["public"] = 1] = "public";
+    /**
+     * Only signed-in members of the owning organization can chat.
+     * Membership is checked on every conversation turn, so access ends the
+     * moment a member leaves the organization. The right mode for
+     * org-internal knowledge agents.
+     *
+     * @generated from enum value: agent_sharing_audience_org = 2;
+     */
+    AgentSharingAudience[AgentSharingAudience["org"] = 2] = "org";
+})(AgentSharingAudience || (AgentSharingAudience = {}));
+/**
+ * Describes the enum ai.stigmer.agentic.agent.v1.AgentSharingAudience.
+ */
+export const AgentSharingAudienceSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_agent_v1_spec, 0);
 //# sourceMappingURL=spec_pb.js.map

package/ai/stigmer/agentic/agent/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,08DAA08D,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkE7nE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAgDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAiDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,g/FAAg/F,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6FnqG;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoFxD;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAkCxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAgDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAiDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,oBA0BX;AA1BD,WAAY,oBAAoB;IAC9B;;;;OAIG;IACH,6EAAe,CAAA;IAEf;;;;;;OAMG;IACH,mEAAU,CAAA;IAEV;;;;;;;OAOG;IACH,6DAAO,CAAA;AACT,CAAC,EA1BW,oBAAoB,KAApB,oBAAoB,QA0B/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agent/v1/status_pb.d.ts

@@ -26,6 +26,31 @@ export type AgentStatus = Message<"ai.stigmer.agentic.agent.v1.AgentStatus"> & {
      * @generated from field: string default_instance_id = 1;
      */
     defaultInstanceId: string;
+    /**
+     * Rotatable token protecting the agent's public share link.
+     *
+     * Empty means the hosted chat link is the plain `/chat/<org>/<slug>` —
+     * the behavior of every share created before this field existed. When
+     * set, the link only resolves with the matching `?k=<token>` query
+     * parameter; the rotateShareLink RPC generates a fresh value, killing
+     * the old link immediately. Applies to public-audience shares only
+     * (org-audience access is governed by live membership instead).
+     *
+     * @internal
+     * Server-generated (rotateShareLink is the sole writer) and deliberately
+     * in status, not spec.sharing: status survives every apply/update
+     * verbatim in both editions, so a routine manifest apply can never wipe
+     * the token and silently fail open to the guessable URL. Enforced with
+     * the allowed_origins pattern — validated at guest mint, stamped into
+     * the guest JWT, and re-validated against this live value on every
+     * session/execution create, so rotation revokes live guest tokens on
+     * their next message. Not a security boundary: rate limits and the org
+     * credit cap remain the abuse controls; this is a traffic lever for
+     * over-shared links.
+     *
+     * @generated from field: string share_link_token = 2;
+     */
+    shareLinkToken: string;
 };
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.AgentStatus.

package/ai/stigmer/agentic/agent/v1/status_pb.js

@@ -6,7 +6,7 @@ import { file_ai_stigmer_commons_apiresource_status } from "../../../commons/api
 /**
  * Describes the file ai/stigmer/agentic/agent/v1/status.proto.
  */
-export const file_ai_stigmer_agentic_agent_v1_status = /*@__PURE__*/ fileDesc("CihhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnQvdjEvc3RhdHVzLnByb3RvEhthaS5zdGlnbWVyLmFnZW50aWMuYWdlbnQudjEiawoLQWdlbnRTdGF0dXMSPwoFYXVkaXQYYyABKAsyMC5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VBdWRpdBIbChNkZWZhdWx0X2luc3RhbmNlX2lkGAEgASgJYgZwcm90bzM", [file_ai_stigmer_commons_apiresource_status]);
+export const file_ai_stigmer_agentic_agent_v1_status = /*@__PURE__*/ fileDesc("CihhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnQvdjEvc3RhdHVzLnByb3RvEhthaS5zdGlnbWVyLmFnZW50aWMuYWdlbnQudjEihQEKC0FnZW50U3RhdHVzEj8KBWF1ZGl0GGMgASgLMjAuYWkuc3RpZ21lci5jb21tb25zLmFwaXJlc291cmNlLkFwaVJlc291cmNlQXVkaXQSGwoTZGVmYXVsdF9pbnN0YW5jZV9pZBgBIAEoCRIYChBzaGFyZV9saW5rX3Rva2VuGAIgASgJYgZwcm90bzM", [file_ai_stigmer_commons_apiresource_status]);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.AgentStatus.
  * Use `create(AgentStatusSchema)` to create a new message.

package/ai/stigmer/agentic/agent/v1/status_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qHAAqH;AACrH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAGvG;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,6PAA6P,EAAE,CAAC,0CAA0C,CAAC,CAAC,CAAC;AA0BxT;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qHAAqH;AACrH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAGvG;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,iSAAiS,EAAE,CAAC,0CAA0C,CAAC,CAAC,CAAC;AAoD5V;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/command_connect.d.ts

@@ -264,23 +264,26 @@ export declare const AgentExecutionCommandController: {
             readonly kind: any;
         };
         /**
-         * Recover a failed agent execution from the last checkpoint.
+         * Recover a failed agent execution.
          *
-         * Resumes execution from the last checkpoint. Completed work is preserved -
-         * successful tool calls are NOT re-executed.
+         * Retries the failed run. Completed work is preserved - successful tool
+         * calls are NOT re-executed.
          *
          * @internal
-         * Temporal Equivalent: `temporal workflow reset --workflow-id <id> --type LastWorkflowTask`
-         * Uses LangGraph checkpoint for state restoration.
+         * Terminates the previous Temporal workflow (NOT_FOUND tolerated) and starts
+         * a fresh one; continuity comes from the session's harness state (LangGraph
+         * thread checkpoint / harness_state_id), not from Temporal history. A
+         * Temporal reset cannot work here: the runner activity RETURNS its FAILED
+         * result, so a reset replays the preserved failure instead of re-dispatching.
          *
          * ## Behavior
          *
          * 1. Validates execution is in FAILED phase (recoverable)
-         * 2. Uses Temporal ResetWorkflow to resume from last checkpoint
-         * 3. Activity re-invoked with same thread_id
+         * 2. Terminates the previous workflow and recreates the execution environment
+         * 3. Starts a fresh workflow; the activity is re-invoked with the same thread_id
          * 4. LangGraph loads from checkpoint automatically
          * 5. Execution transitions from FAILED to IN_PROGRESS phase
-         * 6. Agent continues from where it failed
+         * 6. Agent retries from where it failed
          *
          * ## Preconditions
          *

package/ai/stigmer/agentic/agentexecution/v1/command_connect.js

@@ -272,23 +272,26 @@ export const AgentExecutionCommandController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Recover a failed agent execution from the last checkpoint.
+         * Recover a failed agent execution.
          *
-         * Resumes execution from the last checkpoint. Completed work is preserved -
-         * successful tool calls are NOT re-executed.
+         * Retries the failed run. Completed work is preserved - successful tool
+         * calls are NOT re-executed.
          *
          * @internal
-         * Temporal Equivalent: `temporal workflow reset --workflow-id <id> --type LastWorkflowTask`
-         * Uses LangGraph checkpoint for state restoration.
+         * Terminates the previous Temporal workflow (NOT_FOUND tolerated) and starts
+         * a fresh one; continuity comes from the session's harness state (LangGraph
+         * thread checkpoint / harness_state_id), not from Temporal history. A
+         * Temporal reset cannot work here: the runner activity RETURNS its FAILED
+         * result, so a reset replays the preserved failure instead of re-dispatching.
          *
          * ## Behavior
          *
          * 1. Validates execution is in FAILED phase (recoverable)
-         * 2. Uses Temporal ResetWorkflow to resume from last checkpoint
-         * 3. Activity re-invoked with same thread_id
+         * 2. Terminates the previous workflow and recreates the execution environment
+         * 3. Starts a fresh workflow; the activity is re-invoked with the same thread_id
          * 4. LangGraph loads from checkpoint automatically
          * 5. Execution transitions from FAILED to IN_PROGRESS phase
-         * 6. Agent continues from where it failed
+         * 6. Agent retries from where it failed
          *
          * ## Preconditions
          *

package/ai/stigmer/agentic/agentexecution/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wIAAwI;AACxI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC7T,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,sEAAsE;IAChF,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,+BAA+B;YAClC,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAuCG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAgCG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4CG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAoDG;QACH,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,CAAC,EAAE,4BAA4B;YAC/B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA+CG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAmDG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2CG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAoCG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wIAAwI;AACxI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC7T,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,sEAAsE;IAChF,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,+BAA+B;YAClC,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAuCG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAgCG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4CG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAoDG;QACH,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,CAAC,EAAE,4BAA4B;YAC/B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAkDG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAmDG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2CG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAoCG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/command_pb.d.ts

@@ -262,23 +262,26 @@ export declare const AgentExecutionCommandController: GenService<{
         output: typeof AgentExecutionSchema;
     };
     /**
-     * Recover a failed agent execution from the last checkpoint.
+     * Recover a failed agent execution.
      *
-     * Resumes execution from the last checkpoint. Completed work is preserved -
-     * successful tool calls are NOT re-executed.
+     * Retries the failed run. Completed work is preserved - successful tool
+     * calls are NOT re-executed.
      *
      * @internal
-     * Temporal Equivalent: `temporal workflow reset --workflow-id <id> --type LastWorkflowTask`
-     * Uses LangGraph checkpoint for state restoration.
+     * Terminates the previous Temporal workflow (NOT_FOUND tolerated) and starts
+     * a fresh one; continuity comes from the session's harness state (LangGraph
+     * thread checkpoint / harness_state_id), not from Temporal history. A
+     * Temporal reset cannot work here: the runner activity RETURNS its FAILED
+     * result, so a reset replays the preserved failure instead of re-dispatching.
      *
      * ## Behavior
      *
      * 1. Validates execution is in FAILED phase (recoverable)
-     * 2. Uses Temporal ResetWorkflow to resume from last checkpoint
-     * 3. Activity re-invoked with same thread_id
+     * 2. Terminates the previous workflow and recreates the execution environment
+     * 3. Starts a fresh workflow; the activity is re-invoked with the same thread_id
      * 4. LangGraph loads from checkpoint automatically
      * 5. Execution transitions from FAILED to IN_PROGRESS phase
-     * 6. Agent continues from where it failed
+     * 6. Agent retries from where it failed
      *
      * ## Preconditions
      *

package/ai/stigmer/agentic/agentexecution/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,6CAA6C,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAE1E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,6kGAA6kG,EAAE,CAAC,6CAA6C,EAAE,4CAA4C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEt0G;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAkcvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,6CAA6C,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAE1E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,6kGAA6kG,EAAE,CAAC,6CAA6C,EAAE,4CAA4C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEt0G;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAqcvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}