@stigmer/protos 3.1.7 → 3.1.9

package/ai/stigmer/agentic/environment/v1/command_pb.js

@@ -10,7 +10,7 @@ import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc
 /**
  * Describes the file ai/stigmer/agentic/environment/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_environment_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_agentic_environment_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+export const file_ai_stigmer_agentic_environment_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_api, file_ai_stigmer_agentic_environment_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
 /**
  * EnvironmentCommandController handles write operations for environments.
  *

package/ai/stigmer/agentic/environment/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,6iDAA6iD,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEhyD;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAwFpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,gzDAAgzD,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEniE;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAmHpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/query_connect.d.ts

@@ -2,14 +2,15 @@
  * ExecutionContextQueryController handles read operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - All read operations check can_view on parent agent_execution or workflow_execution
+ * Authorization: All RPCs use is_skip_authorization with handler-level auth.
+ * In cloud, the handler performs a direct FGA check: can_view on
+ * execution_context:<metadata.id>, against the owner tuple written at creation
+ * time by the create pipeline. OSS enforces no authorization.
  *
- * The handler loads the ExecutionContext, extracts the execution_id from spec,
- * and verifies the caller has permission on whichever parent type matches.
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Secret handling: values with is_secret=true are returned in plaintext on OSS
+ * (single-user local, no encryption). On cloud they are redacted for user-class
+ * callers on every read RPC; only getByExecutionId can return decrypted values,
+ * and only to runner-class credentials (see that RPC's comment).
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController
  */
@@ -20,7 +21,8 @@ export declare const ExecutionContextQueryController: {
          * Get an ExecutionContext by ID.
          *
          * @internal
-         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+         * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+         * Secret values are redacted on cloud.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.get
          */
@@ -34,7 +36,8 @@ export declare const ExecutionContextQueryController: {
          * Get an ExecutionContext by reference (slug-based lookup).
          *
          * @internal
-         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+         * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+         * Secret values are redacted on cloud.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByReference
          */
@@ -49,9 +52,16 @@ export declare const ExecutionContextQueryController: {
          *
          * @internal
          * Primary lookup method used by runners to retrieve the merged environment
-         * variables during workflow/agent execution. The returned context contains
-         * decrypted secrets for runner consumption.
-         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+         * variables during workflow/agent execution and MCP discovery.
+         * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+         *
+         * Secret handling (cloud): the decrypt path is gated by caller credential
+         * class, not by FGA — runners authenticate as the user who owns the
+         * execution, so permissions cannot tell them apart. Callers presenting a
+         * platform-minted runner token (token_type of sandbox, workflow_sandbox,
+         * connect_sandbox, or embedded_runner) receive decrypted secret values;
+         * every other caller (user JWT, SDK, console) receives the same redaction
+         * as get/getByReference.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
          */

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js

@@ -10,14 +10,15 @@ import { ApiResourceReference } from "../../../commons/apiresource/io_pbjs";
  * ExecutionContextQueryController handles read operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - All read operations check can_view on parent agent_execution or workflow_execution
+ * Authorization: All RPCs use is_skip_authorization with handler-level auth.
+ * In cloud, the handler performs a direct FGA check: can_view on
+ * execution_context:<metadata.id>, against the owner tuple written at creation
+ * time by the create pipeline. OSS enforces no authorization.
  *
- * The handler loads the ExecutionContext, extracts the execution_id from spec,
- * and verifies the caller has permission on whichever parent type matches.
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Secret handling: values with is_secret=true are returned in plaintext on OSS
+ * (single-user local, no encryption). On cloud they are redacted for user-class
+ * callers on every read RPC; only getByExecutionId can return decrypted values,
+ * and only to runner-class credentials (see that RPC's comment).
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController
  */
@@ -28,7 +29,8 @@ export const ExecutionContextQueryController = {
          * Get an ExecutionContext by ID.
          *
          * @internal
-         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+         * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+         * Secret values are redacted on cloud.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.get
          */
@@ -42,7 +44,8 @@ export const ExecutionContextQueryController = {
          * Get an ExecutionContext by reference (slug-based lookup).
          *
          * @internal
-         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+         * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+         * Secret values are redacted on cloud.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByReference
          */
@@ -57,9 +60,16 @@ export const ExecutionContextQueryController = {
          *
          * @internal
          * Primary lookup method used by runners to retrieve the merged environment
-         * variables during workflow/agent execution. The returned context contains
-         * decrypted secrets for runner consumption.
-         * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+         * variables during workflow/agent execution and MCP discovery.
+         * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+         *
+         * Secret handling (cloud): the decrypt path is gated by caller credential
+         * class, not by FGA — runners authenticate as the user who owns the
+         * execution, so permissions cannot tell them apart. Callers presenting a
+         * platform-minted runner token (token_type of sandbox, workflow_sandbox,
+         * connect_sandbox, or embedded_runner) receive decrypted secret values;
+         * every other caller (user JWT, SDK, console) receives the same redaction
+         * as get/getByReference.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
          */

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/query_pb.d.ts

@@ -10,14 +10,15 @@ export declare const file_ai_stigmer_agentic_executioncontext_v1_query: GenFile;
  * ExecutionContextQueryController handles read operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - All read operations check can_view on parent agent_execution or workflow_execution
+ * Authorization: All RPCs use is_skip_authorization with handler-level auth.
+ * In cloud, the handler performs a direct FGA check: can_view on
+ * execution_context:<metadata.id>, against the owner tuple written at creation
+ * time by the create pipeline. OSS enforces no authorization.
  *
- * The handler loads the ExecutionContext, extracts the execution_id from spec,
- * and verifies the caller has permission on whichever parent type matches.
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Secret handling: values with is_secret=true are returned in plaintext on OSS
+ * (single-user local, no encryption). On cloud they are redacted for user-class
+ * callers on every read RPC; only getByExecutionId can return decrypted values,
+ * and only to runner-class credentials (see that RPC's comment).
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController
  */
@@ -26,7 +27,8 @@ export declare const ExecutionContextQueryController: GenService<{
      * Get an ExecutionContext by ID.
      *
      * @internal
-     * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+     * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+     * Secret values are redacted on cloud.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.get
      */
@@ -39,7 +41,8 @@ export declare const ExecutionContextQueryController: GenService<{
      * Get an ExecutionContext by reference (slug-based lookup).
      *
      * @internal
-     * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+     * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+     * Secret values are redacted on cloud.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByReference
      */
@@ -53,9 +56,16 @@ export declare const ExecutionContextQueryController: GenService<{
      *
      * @internal
      * Primary lookup method used by runners to retrieve the merged environment
-     * variables during workflow/agent execution. The returned context contains
-     * decrypted secrets for runner consumption.
-     * Handler-level derived auth: checks can_view on parent agent_execution or workflow_execution.
+     * variables during workflow/agent execution and MCP discovery.
+     * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
+     *
+     * Secret handling (cloud): the decrypt path is gated by caller credential
+     * class, not by FGA — runners authenticate as the user who owns the
+     * execution, so permissions cannot tell them apart. Callers presenting a
+     * platform-minted runner token (token_type of sandbox, workflow_sandbox,
+     * connect_sandbox, or embedded_runner) receive decrypted secret values;
+     * every other caller (user JWT, SDK, console) receives the same redaction
+     * as get/getByReference.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
      */

package/ai/stigmer/agentic/executioncontext/v1/query_pb.js

@@ -15,14 +15,15 @@ export const file_ai_stigmer_agentic_executioncontext_v1_query = /*@__PURE__*/ f
  * ExecutionContextQueryController handles read operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - All read operations check can_view on parent agent_execution or workflow_execution
+ * Authorization: All RPCs use is_skip_authorization with handler-level auth.
+ * In cloud, the handler performs a direct FGA check: can_view on
+ * execution_context:<metadata.id>, against the owner tuple written at creation
+ * time by the create pipeline. OSS enforces no authorization.
  *
- * The handler loads the ExecutionContext, extracts the execution_id from spec,
- * and verifies the caller has permission on whichever parent type matches.
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Secret handling: values with is_secret=true are returned in plaintext on OSS
+ * (single-user local, no encryption). On cloud they are redacted for user-class
+ * callers on every read RPC; only getByExecutionId can return decrypted values,
+ * and only to runner-class credentials (see that RPC's comment).
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController
  */

package/ai/stigmer/agentic/executioncontext/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,0vBAA0vB,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEv/B;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GA2CvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,0vBAA0vB,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEv/B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAoDvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/command_connect.d.ts

@@ -68,9 +68,17 @@ export declare const SessionCommandController: {
         /**
          * Delete a session.
          *
+         * Deletion cascades to the session's agent executions. Billing usage
+         * records are immutable and unaffected — they carry their own copies of
+         * the session and execution identifiers.
+         *
+         * Fails with FAILED_PRECONDITION while any agent execution in the
+         * session is still active (pending, in progress, waiting for approval,
+         * or paused); cancel it or wait for it to finish first.
+         *
          * @internal
-         * Restricted to platform operators to preserve the billing and audit trail.
-         * Regular users (including session owners) cannot delete sessions.
+         * Requires can_delete on the session (owner-only — sessions are personal
+         * resources, so org admins have no implicit delete access).
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.delete
          */

package/ai/stigmer/agentic/session/v1/command_connect.js

@@ -75,9 +75,17 @@ export const SessionCommandController = {
         /**
          * Delete a session.
          *
+         * Deletion cascades to the session's agent executions. Billing usage
+         * records are immutable and unaffected — they carry their own copies of
+         * the session and execution identifiers.
+         *
+         * Fails with FAILED_PRECONDITION while any agent execution in the
+         * session is still active (pending, in progress, waiting for approval,
+         * or paused); cancel it or wait for it to finish first.
+         *
          * @internal
-         * Restricted to platform operators to preserve the billing and audit trail.
-         * Regular users (including session owners) cannot delete sessions.
+         * Requires can_delete on the session (owner-only — sessions are personal
+         * resources, so org admins have no implicit delete access).
          *
          * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.delete
          */

package/ai/stigmer/agentic/session/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/session/v1/command_pb.d.ts

@@ -69,9 +69,17 @@ export declare const SessionCommandController: GenService<{
     /**
      * Delete a session.
      *
+     * Deletion cascades to the session's agent executions. Billing usage
+     * records are immutable and unaffected — they carry their own copies of
+     * the session and execution identifiers.
+     *
+     * Fails with FAILED_PRECONDITION while any agent execution in the
+     * session is still active (pending, in progress, waiting for approval,
+     * or paused); cancel it or wait for it to finish first.
+     *
      * @internal
-     * Restricted to platform operators to preserve the billing and audit trail.
-     * Regular users (including session owners) cannot delete sessions.
+     * Requires can_delete on the session (owner-only — sessions are personal
+     * resources, so org admins have no implicit delete access).
      *
      * @generated from rpc ai.stigmer.agentic.session.v1.SessionCommandController.delete
      */

package/ai/stigmer/agentic/session/v1/command_pb.js

@@ -9,7 +9,7 @@ import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc
 /**
  * Describes the file ai/stigmer/agentic/session/v1/command.proto.
  */
-export const file_ai_stigmer_agentic_session_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_ai_stigmer_agentic_session_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+export const file_ai_stigmer_agentic_session_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_ai_stigmer_agentic_session_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
 /**
  * SessionCommandController handles write operations for agent sessions.
  *

package/ai/stigmer/agentic/session/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0HAA0H;AAC1H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,soCAAsoC,EAAE,CAAC,sCAAsC,EAAE,qCAAqC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEz0C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAsEhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0HAA0H;AAC1H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,6lCAA6lC,EAAE,CAAC,sCAAsC,EAAE,qCAAqC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEhyC;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GA8EhC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/io_pb.d.ts

@@ -92,17 +92,17 @@ export type ListSessionsRequest = Message<"ai.stigmer.agentic.session.v1.ListSes
  */
 export declare const ListSessionsRequestSchema: GenMessage<ListSessionsRequest>;
 /**
- * ListSessionsByAgentRequest lists all sessions for a specific agent.
+ * ListSessionsByAgentInstanceRequest lists all sessions for a specific agent instance.
  *
- * @generated from message ai.stigmer.agentic.session.v1.ListSessionsByAgentRequest
+ * @generated from message ai.stigmer.agentic.session.v1.ListSessionsByAgentInstanceRequest
  */
-export type ListSessionsByAgentRequest = Message<"ai.stigmer.agentic.session.v1.ListSessionsByAgentRequest"> & {
+export type ListSessionsByAgentInstanceRequest = Message<"ai.stigmer.agentic.session.v1.ListSessionsByAgentInstanceRequest"> & {
     /**
-     * Agent ID to filter by.
+     * Agent instance ID to filter by.
      *
-     * @generated from field: string agent_id = 1;
+     * @generated from field: string agent_instance_id = 1;
      */
-    agentId: string;
+    agentInstanceId: string;
     /**
      * Maximum number of sessions to return per page.
      *
@@ -117,10 +117,10 @@ export type ListSessionsByAgentRequest = Message<"ai.stigmer.agentic.session.v1.
     pageToken: string;
 };
 /**
- * Describes the message ai.stigmer.agentic.session.v1.ListSessionsByAgentRequest.
- * Use `create(ListSessionsByAgentRequestSchema)` to create a new message.
+ * Describes the message ai.stigmer.agentic.session.v1.ListSessionsByAgentInstanceRequest.
+ * Use `create(ListSessionsByAgentInstanceRequestSchema)` to create a new message.
  */
-export declare const ListSessionsByAgentRequestSchema: GenMessage<ListSessionsByAgentRequest>;
+export declare const ListSessionsByAgentInstanceRequestSchema: GenMessage<ListSessionsByAgentInstanceRequest>;
 /**
  * UpdateSessionSubjectRequest sets the conversation title for a session.
  *

package/ai/stigmer/agentic/session/v1/io_pb.js

@@ -7,7 +7,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/session/v1/io.proto.
  */
-export const file_ai_stigmer_agentic_session_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_session_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.session.v1.SessionId.
  * Use `create(SessionIdSchema)` to create a new message.
@@ -29,10 +29,10 @@ export const SessionListSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agent
  */
 export const ListSessionsRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_session_v1_io, 3);
 /**
- * Describes the message ai.stigmer.agentic.session.v1.ListSessionsByAgentRequest.
- * Use `create(ListSessionsByAgentRequestSchema)` to create a new message.
+ * Describes the message ai.stigmer.agentic.session.v1.ListSessionsByAgentInstanceRequest.
+ * Use `create(ListSessionsByAgentInstanceRequestSchema)` to create a new message.
  */
-export const ListSessionsByAgentRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_session_v1_io, 4);
+export const ListSessionsByAgentInstanceRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_session_v1_io, 4);
 /**
  * Describes the message ai.stigmer.agentic.session.v1.UpdateSessionSubjectRequest.
  * Use `create(UpdateSessionSubjectRequestSchema)` to create a new message.

package/ai/stigmer/agentic/session/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qHAAqH;AACrH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,ooBAAooB,EAAE,CAAC,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAcvtB;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAcxD;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB,aAAa,CAC7D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAuBxD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA4BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qHAAqH;AACrH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,0pBAA0pB,EAAE,CAAC,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAc7uB;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAcxD;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB,aAAa,CAC7D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAuBxD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAmD,aAAa,CACnH,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA4BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/session/v1/query_connect.d.ts

@@ -32,15 +32,16 @@ export declare const SessionQueryController: {
             readonly kind: any;
         };
         /**
-         * List all sessions for a specific agent.
+         * List all sessions for a specific agent instance.
          *
          * @internal
-         * Authorization is handled in-handler via FGA-filtered queries.
+         * Authorization is handled in handler via FGA query for authorized
+         * session_ids, then filtered by agent_instance_id.
          *
-         * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgent
+         * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgentInstance
          */
-        readonly listByAgent: {
-            readonly name: "listByAgent";
+        readonly listByAgentInstance: {
+            readonly name: "listByAgentInstance";
             readonly I: any;
             readonly O: any;
             readonly kind: any;

package/ai/stigmer/agentic/session/v1/query_connect.js

@@ -2,7 +2,7 @@
 // @generated from file ai/stigmer/agentic/session/v1/query.proto (package ai.stigmer.agentic.session.v1, syntax proto3)
 /* eslint-disable */
 // @ts-nocheck
-import { ListSessionsByAgentRequest, ListSessionsRequest, SessionId, SessionList } from "./io_pbjs";
+import { ListSessionsByAgentInstanceRequest, ListSessionsRequest, SessionId, SessionList } from "./io_pbjs";
 import { Session } from "./api_pbjs";
 import { MethodKind } from "@bufbuild/protobuf";
 /**
@@ -39,16 +39,17 @@ export const SessionQueryController = {
             kind: MethodKind.Unary,
         },
         /**
-         * List all sessions for a specific agent.
+         * List all sessions for a specific agent instance.
          *
          * @internal
-         * Authorization is handled in-handler via FGA-filtered queries.
+         * Authorization is handled in handler via FGA query for authorized
+         * session_ids, then filtered by agent_instance_id.
          *
-         * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgent
+         * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgentInstance
          */
-        listByAgent: {
-            name: "listByAgent",
-            I: ListSessionsByAgentRequest,
+        listByAgentInstance: {
+            name: "listByAgentInstance",
+            I: ListSessionsByAgentInstanceRequest,
             O: SessionList,
             kind: MethodKind.Unary,
         },

package/ai/stigmer/agentic/session/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wHAAwH;AACxH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wHAAwH;AACxH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC5G,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,OAAO;YACV,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,kCAAkC;YACrC,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/session/v1/query_pb.d.ts

@@ -1,6 +1,6 @@
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
 import type { SessionSchema } from "./api_pb.js";
-import type { ListSessionsByAgentRequestSchema, ListSessionsRequestSchema, SessionIdSchema, SessionListSchema } from "./io_pb.js";
+import type { ListSessionsByAgentInstanceRequestSchema, ListSessionsRequestSchema, SessionIdSchema, SessionListSchema } from "./io_pb.js";
 /**
  * Describes the file ai/stigmer/agentic/session/v1/query.proto.
  */
@@ -35,16 +35,17 @@ export declare const SessionQueryController: GenService<{
         output: typeof SessionListSchema;
     };
     /**
-     * List all sessions for a specific agent.
+     * List all sessions for a specific agent instance.
      *
      * @internal
-     * Authorization is handled in-handler via FGA-filtered queries.
+     * Authorization is handled in handler via FGA query for authorized
+     * session_ids, then filtered by agent_instance_id.
      *
-     * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgent
+     * @generated from rpc ai.stigmer.agentic.session.v1.SessionQueryController.listByAgentInstance
      */
-    listByAgent: {
+    listByAgentInstance: {
         methodKind: "unary";
-        input: typeof ListSessionsByAgentRequestSchema;
+        input: typeof ListSessionsByAgentInstanceRequestSchema;
         output: typeof SessionListSchema;
     };
 }>;

package/ai/stigmer/agentic/session/v1/query_pb.js

@@ -9,7 +9,7 @@ import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc
 /**
  * Describes the file ai/stigmer/agentic/session/v1/query.proto.
  */
-export const file_ai_stigmer_agentic_session_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_ai_stigmer_agentic_session_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+export const file_ai_stigmer_agentic_session_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_session_v1_api, file_ai_stigmer_agentic_session_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
 /**
  * SessionQueryController handles read operations for agent sessions.
  *

package/ai/stigmer/agentic/session/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,yoBAAyoB,EAAE,CAAC,sCAAsC,EAAE,qCAAqC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE50B;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAqC9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/session/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,gqBAAgqB,EAAE,CAAC,sCAAsC,EAAE,qCAAqC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEn2B;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAsC9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflow/v1/command_connect.d.ts

@@ -84,18 +84,22 @@ export declare const WorkflowCommandController: {
         /**
          * Validate a workflow spec without persisting it.
          *
-         * Runs the same two-layer validation pipeline used by create/update:
-         *   Layer 1: Proto field constraints (buf validate / protovalidate)
-         *   Layer 2: Temporal-based structural validation (Go activity: proto → YAML → Zigflow)
-         *
-         * Returns ServerlessWorkflowValidation with:
-         *   - VALID: Workflow structure passed all checks
-         *   - INVALID: User error (bad structure, missing fields, unknown task kinds)
-         *   - FAILED: System error (Temporal unavailable, converter crash)
-         *
-         * This RPC does NOT persist, authorize, or create instances. It is a
-         * pure validation endpoint suitable for iterative authoring workflows
-         * where the caller needs fast feedback before committing.
+         * Runs the same two validation layers as create/update, but never throws for a
+         * user-fixable spec problem: it always returns a structured
+         * ServerlessWorkflowValidation the caller can render field-by-field.
+         *   Layer 1: proto field constraints (buf validate / protovalidate)
+         *   Layer 2: in-process structural validation (proto → CNCF YAML plus
+         *            structural, cross-reference, model, and budget checks)
+         *
+         * Result states:
+         *   - VALID: workflow structure passed all checks
+         *   - INVALID: user error (bad structure, missing fields, unknown task kinds)
+         *   - FAILED: internal validation fault (reserved; not a user error)
+         *
+         * gRPC errors are limited to input that cannot be validated at all (a missing
+         * workflow or spec) and to genuine internal faults. This RPC does NOT persist,
+         * authorize, or create instances. It is a pure validation endpoint suitable for
+         * iterative authoring where the caller needs fast feedback before committing.
          *
          * @internal
          * Authorization: Uses the same permission as create — caller must have