@stigmer/protos 3.1.8 → 3.1.9

package/ai/stigmer/agentic/agentshare/v1/query_connect.d.ts

@@ -0,0 +1,133 @@
+/**
+ * AgentShareQueryController handles read operations for agent shares.
+ *
+ * @generated from service ai.stigmer.agentic.agentshare.v1.AgentShareQueryController
+ */
+export declare const AgentShareQueryController: {
+    readonly typeName: "ai.stigmer.agentic.agentshare.v1.AgentShareQueryController";
+    readonly methods: {
+        /**
+         * Get a single agent share by ID.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.get
+         */
+        readonly get: {
+            readonly name: "get";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get an agent share by its organization-scoped reference (org/slug).
+         *
+         * @internal
+         * Custom authorization in handler — checks both direct resource access
+         * and organization-level visibility permissions.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByReference
+         */
+        readonly getByReference: {
+            readonly name: "getByReference";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get all shares of a specific agent.
+         * Returns only shares the caller has access to.
+         *
+         * This is how the Share dialog and CLI resolve an agent's existing
+         * share regardless of its slug (a renamed share keeps working).
+         *
+         * @internal
+         * Authorization is handled in-handler: FGA-filtered in cloud, unrestricted
+         * in OSS (single-user edition).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByAgent
+         */
+        readonly getByAgent: {
+            readonly name: "getByAgent";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * List agent shares with optional label filtering.
+         *
+         * @internal
+         * Authorization is handled in-handler via FGA-filtered queries (cloud)
+         * or unrestricted store queries (OSS).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.list
+         */
+        readonly list: {
+            readonly name: "list";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get the public profile of a shared agent by the share's org/slug.
+         *
+         * This is the resolution path for the hosted chat page: anonymous
+         * visitors (no Stigmer account, no token) resolve a shared link to the
+         * trimmed SharedAgentProfile — never the full Agent, whose spec carries
+         * the system prompt, environment declarations, and MCP wiring.
+         *
+         * Returns NOT_FOUND when the share does not exist, is disabled, has the
+         * org audience (anonymous callers must not be able to distinguish an
+         * org-internal share from a nonexistent one; use
+         * getSharedProfileForMember instead), or the share link is locked and
+         * link_token does not match the share's current status.share_link_token.
+         * The cases are deliberately indistinguishable so an unshared, revoked,
+         * or rotated URL leaks nothing. Returns INVALID_ARGUMENT when org is
+         * empty: org+slug is the shared URL's identity, and cross-org slug
+         * matching on a public endpoint would enable enumeration.
+         *
+         * @internal
+         * Public by design (no authentication): enforcement is the app-level
+         * sharing gate in the handler, not FGA — see AgentShareSpec for why a
+         * share writes no visibility tuples.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfile
+         */
+        readonly getSharedProfile: {
+            readonly name: "getSharedProfile";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get the profile of a shared agent as a signed-in organization member.
+         *
+         * This is the resolution path for the hosted chat page when a share has
+         * the org audience: the public getSharedProfile deliberately returns
+         * NOT_FOUND for such shares, so a signed-in member resolves the same
+         * trimmed SharedAgentProfile through this authenticated RPC instead.
+         * Also resolves public-audience shares, so an authenticated caller can
+         * use one resolution path for any share.
+         *
+         * Returns NOT_FOUND when the share does not exist, is disabled, the
+         * caller is not a member of the sharing organization, or the share is a
+         * public-audience share locked with a link token (this tokenless path
+         * must not reveal a killed link's profile) — the cases are deliberately
+         * indistinguishable so a share URL leaks nothing to non-members.
+         * Returns INVALID_ARGUMENT when org is empty.
+         *
+         * @internal
+         * Custom authorization in handler — requires authentication (not
+         * is_public), then an app-level organization#member FGA check for org
+         * shares. No standard resource_kind/permission config: the sharing gate
+         * is app-level by design (see AgentShareSpec), and membership is checked
+         * live on every call so revoked members lose access immediately.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfileForMember
+         */
+        readonly getSharedProfileForMember: {
+            readonly name: "getSharedProfileForMember";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/agentic/agentshare/v1/query_connect.js

@@ -0,0 +1,142 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentshare/v1/query.proto (package ai.stigmer.agentic.agentshare.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { AgentShareId, AgentShareList, GetAgentSharesByAgentRequest, GetSharedProfileRequest, ListAgentSharesRequest, SharedAgentProfile } from "./io_pbjs";
+import { AgentShare } from "./api_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+import { ApiResourceReference } from "../../../commons/apiresource/io_pbjs";
+/**
+ * AgentShareQueryController handles read operations for agent shares.
+ *
+ * @generated from service ai.stigmer.agentic.agentshare.v1.AgentShareQueryController
+ */
+export const AgentShareQueryController = {
+    typeName: "ai.stigmer.agentic.agentshare.v1.AgentShareQueryController",
+    methods: {
+        /**
+         * Get a single agent share by ID.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.get
+         */
+        get: {
+            name: "get",
+            I: AgentShareId,
+            O: AgentShare,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Get an agent share by its organization-scoped reference (org/slug).
+         *
+         * @internal
+         * Custom authorization in handler — checks both direct resource access
+         * and organization-level visibility permissions.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByReference
+         */
+        getByReference: {
+            name: "getByReference",
+            I: ApiResourceReference,
+            O: AgentShare,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Get all shares of a specific agent.
+         * Returns only shares the caller has access to.
+         *
+         * This is how the Share dialog and CLI resolve an agent's existing
+         * share regardless of its slug (a renamed share keeps working).
+         *
+         * @internal
+         * Authorization is handled in-handler: FGA-filtered in cloud, unrestricted
+         * in OSS (single-user edition).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByAgent
+         */
+        getByAgent: {
+            name: "getByAgent",
+            I: GetAgentSharesByAgentRequest,
+            O: AgentShareList,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * List agent shares with optional label filtering.
+         *
+         * @internal
+         * Authorization is handled in-handler via FGA-filtered queries (cloud)
+         * or unrestricted store queries (OSS).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.list
+         */
+        list: {
+            name: "list",
+            I: ListAgentSharesRequest,
+            O: AgentShareList,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Get the public profile of a shared agent by the share's org/slug.
+         *
+         * This is the resolution path for the hosted chat page: anonymous
+         * visitors (no Stigmer account, no token) resolve a shared link to the
+         * trimmed SharedAgentProfile — never the full Agent, whose spec carries
+         * the system prompt, environment declarations, and MCP wiring.
+         *
+         * Returns NOT_FOUND when the share does not exist, is disabled, has the
+         * org audience (anonymous callers must not be able to distinguish an
+         * org-internal share from a nonexistent one; use
+         * getSharedProfileForMember instead), or the share link is locked and
+         * link_token does not match the share's current status.share_link_token.
+         * The cases are deliberately indistinguishable so an unshared, revoked,
+         * or rotated URL leaks nothing. Returns INVALID_ARGUMENT when org is
+         * empty: org+slug is the shared URL's identity, and cross-org slug
+         * matching on a public endpoint would enable enumeration.
+         *
+         * @internal
+         * Public by design (no authentication): enforcement is the app-level
+         * sharing gate in the handler, not FGA — see AgentShareSpec for why a
+         * share writes no visibility tuples.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfile
+         */
+        getSharedProfile: {
+            name: "getSharedProfile",
+            I: GetSharedProfileRequest,
+            O: SharedAgentProfile,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Get the profile of a shared agent as a signed-in organization member.
+         *
+         * This is the resolution path for the hosted chat page when a share has
+         * the org audience: the public getSharedProfile deliberately returns
+         * NOT_FOUND for such shares, so a signed-in member resolves the same
+         * trimmed SharedAgentProfile through this authenticated RPC instead.
+         * Also resolves public-audience shares, so an authenticated caller can
+         * use one resolution path for any share.
+         *
+         * Returns NOT_FOUND when the share does not exist, is disabled, the
+         * caller is not a member of the sharing organization, or the share is a
+         * public-audience share locked with a link token (this tokenless path
+         * must not reveal a killed link's profile) — the cases are deliberately
+         * indistinguishable so a share URL leaks nothing to non-members.
+         * Returns INVALID_ARGUMENT when org is empty.
+         *
+         * @internal
+         * Custom authorization in handler — requires authentication (not
+         * is_public), then an app-level organization#member FGA check for org
+         * shares. No standard resource_kind/permission config: the sharing gate
+         * is app-level by design (see AgentShareSpec), and membership is checked
+         * live on every call so revoked members lose access immediately.
+         *
+         * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfileForMember
+         */
+        getSharedProfileForMember: {
+            name: "getSharedProfileForMember",
+            I: ApiResourceReference,
+            O: SharedAgentProfile,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=query_connect.js.map

package/ai/stigmer/agentic/agentshare/v1/query_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC5J,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,4BAA4B;YAC/B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;WAyBG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/query_pb.d.ts

@@ -0,0 +1,132 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { AgentShareSchema } from "./api_pb.js";
+import type { AgentShareIdSchema, AgentShareListSchema, GetAgentSharesByAgentRequestSchema, GetSharedProfileRequestSchema, ListAgentSharesRequestSchema, SharedAgentProfileSchema } from "./io_pb.js";
+import type { ApiResourceReferenceSchema } from "../../../commons/apiresource/io_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentshare/v1/query.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentshare_v1_query: GenFile;
+/**
+ * AgentShareQueryController handles read operations for agent shares.
+ *
+ * @generated from service ai.stigmer.agentic.agentshare.v1.AgentShareQueryController
+ */
+export declare const AgentShareQueryController: GenService<{
+    /**
+     * Get a single agent share by ID.
+     *
+     * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.get
+     */
+    get: {
+        methodKind: "unary";
+        input: typeof AgentShareIdSchema;
+        output: typeof AgentShareSchema;
+    };
+    /**
+     * Get an agent share by its organization-scoped reference (org/slug).
+     *
+     * @internal
+     * Custom authorization in handler — checks both direct resource access
+     * and organization-level visibility permissions.
+     *
+     * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByReference
+     */
+    getByReference: {
+        methodKind: "unary";
+        input: typeof ApiResourceReferenceSchema;
+        output: typeof AgentShareSchema;
+    };
+    /**
+     * Get all shares of a specific agent.
+     * Returns only shares the caller has access to.
+     *
+     * This is how the Share dialog and CLI resolve an agent's existing
+     * share regardless of its slug (a renamed share keeps working).
+     *
+     * @internal
+     * Authorization is handled in-handler: FGA-filtered in cloud, unrestricted
+     * in OSS (single-user edition).
+     *
+     * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByAgent
+     */
+    getByAgent: {
+        methodKind: "unary";
+        input: typeof GetAgentSharesByAgentRequestSchema;
+        output: typeof AgentShareListSchema;
+    };
+    /**
+     * List agent shares with optional label filtering.
+     *
+     * @internal
+     * Authorization is handled in-handler via FGA-filtered queries (cloud)
+     * or unrestricted store queries (OSS).
+     *
+     * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.list
+     */
+    list: {
+        methodKind: "unary";
+        input: typeof ListAgentSharesRequestSchema;
+        output: typeof AgentShareListSchema;
+    };
+    /**
+     * Get the public profile of a shared agent by the share's org/slug.
+     *
+     * This is the resolution path for the hosted chat page: anonymous
+     * visitors (no Stigmer account, no token) resolve a shared link to the
+     * trimmed SharedAgentProfile — never the full Agent, whose spec carries
+     * the system prompt, environment declarations, and MCP wiring.
+     *
+     * Returns NOT_FOUND when the share does not exist, is disabled, has the
+     * org audience (anonymous callers must not be able to distinguish an
+     * org-internal share from a nonexistent one; use
+     * getSharedProfileForMember instead), or the share link is locked and
+     * link_token does not match the share's current status.share_link_token.
+     * The cases are deliberately indistinguishable so an unshared, revoked,
+     * or rotated URL leaks nothing. Returns INVALID_ARGUMENT when org is
+     * empty: org+slug is the shared URL's identity, and cross-org slug
+     * matching on a public endpoint would enable enumeration.
+     *
+     * @internal
+     * Public by design (no authentication): enforcement is the app-level
+     * sharing gate in the handler, not FGA — see AgentShareSpec for why a
+     * share writes no visibility tuples.
+     *
+     * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfile
+     */
+    getSharedProfile: {
+        methodKind: "unary";
+        input: typeof GetSharedProfileRequestSchema;
+        output: typeof SharedAgentProfileSchema;
+    };
+    /**
+     * Get the profile of a shared agent as a signed-in organization member.
+     *
+     * This is the resolution path for the hosted chat page when a share has
+     * the org audience: the public getSharedProfile deliberately returns
+     * NOT_FOUND for such shares, so a signed-in member resolves the same
+     * trimmed SharedAgentProfile through this authenticated RPC instead.
+     * Also resolves public-audience shares, so an authenticated caller can
+     * use one resolution path for any share.
+     *
+     * Returns NOT_FOUND when the share does not exist, is disabled, the
+     * caller is not a member of the sharing organization, or the share is a
+     * public-audience share locked with a link token (this tokenless path
+     * must not reveal a killed link's profile) — the cases are deliberately
+     * indistinguishable so a share URL leaks nothing to non-members.
+     * Returns INVALID_ARGUMENT when org is empty.
+     *
+     * @internal
+     * Custom authorization in handler — requires authentication (not
+     * is_public), then an app-level organization#member FGA check for org
+     * shares. No standard resource_kind/permission config: the sharing gate
+     * is app-level by design (see AgentShareSpec), and membership is checked
+     * live on every call so revoked members lose access immediately.
+     *
+     * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfileForMember
+     */
+    getSharedProfileForMember: {
+        methodKind: "unary";
+        input: typeof ApiResourceReferenceSchema;
+        output: typeof SharedAgentProfileSchema;
+    };
+}>;

package/ai/stigmer/agentic/agentshare/v1/query_pb.js

@@ -0,0 +1,20 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentshare/v1/query.proto (package ai.stigmer.agentic.agentshare.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_agentshare_v1_api } from "./api_pb.js";
+import { file_ai_stigmer_agentic_agentshare_v1_io } from "./io_pb.js";
+import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb.js";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb.js";
+import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentshare/v1/query.proto.
+ */
+export const file_ai_stigmer_agentic_agentshare_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentshare_v1_api, file_ai_stigmer_agentic_agentshare_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+/**
+ * AgentShareQueryController handles read operations for agent shares.
+ *
+ * @generated from service ai.stigmer.agentic.agentshare.v1.AgentShareQueryController
+ */
+export const AgentShareQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_agentshare_v1_query, 0);
+//# sourceMappingURL=query_pb.js.map

package/ai/stigmer/agentic/agentshare/v1/query_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,yuCAAyuC,EAAE,CAAC,yCAAyC,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE19C;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAsHjC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/spec_pb.d.ts

@@ -0,0 +1,208 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { ApiResourceReference } from "../../../commons/apiresource/io_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/agentshare/v1/spec.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentshare_v1_spec: GenFile;
+/**
+ * AgentShareSpec defines the configurable properties of an agent share.
+ *
+ * A share is a distribution channel for an agent's hosted chat experience.
+ * It carries its own audience, embed origins, visitor-facing messages, and
+ * tool credentials — all independent of the agent blueprint it references.
+ *
+ * @internal
+ * Sharing is channel configuration, not agent behavior (decision 011):
+ * applying an agent manifest never touches a share, and the share has its
+ * own writer, lifecycle, and change cadence. Guest admission is enforced
+ * app-level in the shared-profile/mint/create-time gates — a share writes
+ * NO FGA visibility tuples, because a public wildcard viewer tuple would
+ * expose the referenced agent's full blueprint (instructions included) to
+ * any authenticated account, conflating blueprint visibility with chat
+ * access. The overview.md file provides the SDK-facing description and
+ * example YAML.
+ *
+ * @generated from message ai.stigmer.agentic.agentshare.v1.AgentShareSpec
+ */
+export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShareSpec"> & {
+    /**
+     * Reference to the agent this share distributes.
+     *
+     * @internal
+     * Phase A invariant: agent_ref.org must equal metadata.org — the sharing
+     * org is the billing org (decision 001 generalized), and guest tool
+     * credentials resolve in the share's org (secrets never cross orgs).
+     * Enforced in the create/update/apply handlers of both editions;
+     * cross-org shares are Phase B (decision 012).
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference agent_ref = 1;
+     */
+    agentRef?: ApiResourceReference;
+    /**
+     * Whether hosted-chat access for the configured audience is enabled.
+     *
+     * Disabling is a config-preserving pause: the share keeps its origins,
+     * messages, credentials, and link token, but the hosted link answers
+     * NOT_FOUND until re-enabled. Delete the share instead for a full
+     * teardown.
+     *
+     * @generated from field: bool enabled = 2;
+     */
+    enabled: boolean;
+    /**
+     * Who can chat over this share. Unspecified means public (anyone with
+     * the link), so a manifest that omits audience creates a public share.
+     *
+     * To keep a share org-only, audience must be present in every apply:
+     * update/apply replace the spec wholesale, so a manifest that sets
+     * enabled without audience resets the share to public.
+     *
+     * @internal
+     * Org audience is enforced cloud-side only (org membership is a
+     * multi-tenant IAM concept): the guest mint and public profile handlers
+     * treat audience=org as NOT_FOUND, and the create-time blueprint gate
+     * admits authenticated org members via an app-level FGA member check
+     * (no visibility tuples written). The OSS single-user server stores and
+     * echoes the field.
+     *
+     * @generated from field: ai.stigmer.agentic.agentshare.v1.AgentShareAudience audience = 3;
+     */
+    audience: AgentShareAudience;
+    /**
+     * Origins permitted to embed this share's chat widget.
+     *
+     * Each entry is an exact web origin (scheme://host[:port]) with no path,
+     * for example "https://docs.example.com". An empty list allows embedding
+     * from any site; listing origins restricts embedding to those sites. The
+     * first-party hosted chat page is always exempt.
+     *
+     * @internal
+     * Enforced since T04 against the embed_origin the widget reports at
+     * mintGuestToken time (stamped into the guest JWT as a claim) and
+     * re-validated against this live list by the guest create-time gate
+     * (SharedSessionBlueprintAccess) on every session/execution create — the
+     * same gate that re-checks enabled, so revocation latency is identical
+     * (immediate). Unframed hosted-page visitors report no origin and are
+     * exempt by construction. Exact origins only — loosening to wildcards
+     * later is a non-breaking change, tightening would not be.
+     *
+     * @generated from field: repeated string allowed_origins = 4;
+     */
+    allowedOrigins: string[];
+    /**
+     * Owner-customizable copy shown to visitors when a launch-gate limit
+     * refuses their message. Unset fields fall back to platform defaults.
+     *
+     * @internal
+     * Resolved server-side at the refusal point and carried in the gRPC
+     * status description — deliberately NOT surfaced on SharedAgentProfile
+     * and NOT mapped client-side, so the copy reaches every client (web,
+     * embed, CLI) through the existing error-message path.
+     *
+     * @generated from field: ai.stigmer.agentic.agentshare.v1.AgentShareMessages messages = 5;
+     */
+    messages?: AgentShareMessages;
+    /**
+     * References to Environment resources whose values are provided to guest
+     * conversations on this share.
+     *
+     * This is how a tool-using agent becomes chattable over a share link:
+     * bind an org-shared environment holding the needed credentials (for
+     * example a read-only API token), and guest executions receive its
+     * values at runtime. The agent and its default instance stay untouched.
+     * Valid on public-audience shares only.
+     *
+     * @internal
+     * Resolved in the share's org through the org-shared environment
+     * resolution seam (EnvironmentRuntimeResolutionService /
+     * OrgSharedEnvironmentPolicy — decision 006): each referenced environment
+     * must be visibility_org in the share's org, or the merge skips it with
+     * a diagnostic. Merged at guest execution-context build time only —
+     * never bound to the agent's system-managed default instance, which is
+     * recreated empty on lifecycle events and shared by every org member's
+     * casual chat (decision 011). Org-audience shares reject this field via
+     * the message-level CEL rule: member sessions carry no share linkage in
+     * Phase A, so bound credentials would silently never apply.
+     *
+     * @generated from field: repeated ai.stigmer.commons.apiresource.ApiResourceReference environment_refs = 6;
+     */
+    environmentRefs: ApiResourceReference[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentshare.v1.AgentShareSpec.
+ * Use `create(AgentShareSpecSchema)` to create a new message.
+ */
+export declare const AgentShareSpecSchema: GenMessage<AgentShareSpec>;
+/**
+ * AgentShareMessages holds owner-customizable visitor-facing copy for
+ * shared-agent limit refusals.
+ *
+ * Empty fields mean "use the platform default". Plain text only; rendered
+ * verbatim in the visitor's chat surface.
+ *
+ * @generated from message ai.stigmer.agentic.agentshare.v1.AgentShareMessages
+ */
+export type AgentShareMessages = Message<"ai.stigmer.agentic.agentshare.v1.AgentShareMessages"> & {
+    /**
+     * Shown when a visitor or the org exceeds the message rate limit.
+     *
+     * @generated from field: string rate_limited = 1;
+     */
+    rateLimited: string;
+    /**
+     * Shown when the share cannot serve the conversation — the org's credits
+     * are exhausted or the agent's tools are not ready (fails closed).
+     *
+     * @generated from field: string unavailable = 2;
+     */
+    unavailable: string;
+    /**
+     * Shown when a conversation hits its turn limit or inactivity timeout.
+     *
+     * @generated from field: string conversation_ended = 3;
+     */
+    conversationEnded: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentshare.v1.AgentShareMessages.
+ * Use `create(AgentShareMessagesSchema)` to create a new message.
+ */
+export declare const AgentShareMessagesSchema: GenMessage<AgentShareMessages>;
+/**
+ * AgentShareAudience selects who can chat over a share's hosted link.
+ *
+ * Unspecified is treated as public: a share created without an explicit
+ * audience is an anyone-with-link share.
+ *
+ * @generated from enum ai.stigmer.agentic.agentshare.v1.AgentShareAudience
+ */
+export declare enum AgentShareAudience {
+    /**
+     * Treated as public (audience omitted).
+     *
+     * @generated from enum value: agent_share_audience_unspecified = 0;
+     */
+    unspecified = 0,
+    /**
+     * Anyone with the link can chat — no Stigmer account required.
+     * Visitors are anonymous guests; suitable only for knowledge that is
+     * safe to expose to the entire internet.
+     *
+     * @generated from enum value: agent_share_audience_public = 1;
+     */
+    public = 1,
+    /**
+     * Only signed-in members of the sharing organization can chat.
+     * Membership is checked on every conversation turn, so access ends the
+     * moment a member leaves the organization. The right mode for
+     * org-internal knowledge agents.
+     *
+     * @generated from enum value: agent_share_audience_org = 2;
+     */
+    org = 2
+}
+/**
+ * Describes the enum ai.stigmer.agentic.agentshare.v1.AgentShareAudience.
+ */
+export declare const AgentShareAudienceSchema: GenEnum<AgentShareAudience>;