@stigmer/protos 3.10.0 → 3.11.1-dev.20260812192248

package/ai/stigmer/agentic/agentchannel/v1/outbound_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"outbound_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/outbound_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,gDAAgD,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AAExF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,6hDAA6hD,EAAE,CAAC,gDAAgD,EAAE,kDAAkD,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA0NlrD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AAEnE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAN,IAAY,mBAoCX;AApCD,WAAY,mBAAmB;IAC7B;;;;OAIG;IACH,uGAA6B,CAAA;IAE7B;;;;OAIG;IACH,6EAAgB,CAAA;IAEhB;;;;OAIG;IACH,uFAAqB,CAAA;IAErB;;;;OAIG;IACH,6EAAgB,CAAA;IAEhB;;;;;OAKG;IACH,iFAAkB,CAAA;AACpB,CAAC,EApCW,mBAAmB,KAAnB,mBAAmB,QAoC9B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAiC,aAAa,CAClF,QAAQ,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AAEhE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAN,IAAY,qBAoDX;AApDD,WAAY,qBAAqB;IAC/B;;;;OAIG;IACH,+HAAuC,CAAA;IAEvC;;;;;OAKG;IACH,iGAAwB,CAAA;IAExB;;;;;OAKG;IACH,yEAAY,CAAA;IAEZ;;;;;;;;;;OAUG;IACH,yEAAY,CAAA;IAEZ;;;;;;;;;;;;;OAaG;IACH,+EAAe,CAAA;AACjB,CAAC,EApDW,qBAAqB,KAArB,qBAAqB,QAoDhC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"outbound_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/outbound_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,gDAAgD,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AAExF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8qDAA8qD,EAAE,CAAC,gDAAgD,EAAE,kDAAkD,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA4Pn0D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AAEnE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAN,IAAY,mBAoCX;AApCD,WAAY,mBAAmB;IAC7B;;;;OAIG;IACH,uGAA6B,CAAA;IAE7B;;;;OAIG;IACH,6EAAgB,CAAA;IAEhB;;;;OAIG;IACH,uFAAqB,CAAA;IAErB;;;;OAIG;IACH,6EAAgB,CAAA;IAEhB;;;;;OAKG;IACH,iFAAkB,CAAA;AACpB,CAAC,EApCW,mBAAmB,KAAnB,mBAAmB,QAoC9B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAiC,aAAa,CAClF,QAAQ,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AAEhE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAN,IAAY,qBAoDX;AApDD,WAAY,qBAAqB;IAC/B;;;;OAIG;IACH,+HAAuC,CAAA;IAEvC;;;;;OAKG;IACH,iGAAwB,CAAA;IAExB;;;;;OAKG;IACH,yEAAY,CAAA;IAEZ;;;;;;;;;;OAUG;IACH,yEAAY,CAAA;IAEZ;;;;;;;;;;;;;OAaG;IACH,+EAAe,CAAA;AACjB,CAAC,EApDW,qBAAqB,KAArB,qBAAqB,QAoDhC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/io_pb.d.ts

@@ -1305,9 +1305,9 @@ export type GetSessionUsageReportOutput = Message<"ai.stigmer.agentic.agentexecu
  */
 export declare const GetSessionUsageReportOutputSchema: GenMessage<GetSessionUsageReportOutput>;
 /**
- * GetAgentUsageReportInput requests a usage report for a specific agent.
- * Aggregates cost and token data across all sessions for the agent within
- * a time range.
+ * GetAgentUsageReportInput requests a usage report for a specific agent
+ * within one organization. Aggregates cost and token data across the org's
+ * sessions of the agent within a time range.
  *
  * @generated from message ai.stigmer.agentic.agentexecution.v1.GetAgentUsageReportInput
  */
@@ -1344,6 +1344,14 @@ export type GetAgentUsageReportInput = Message<"ai.stigmer.agentic.agentexecutio
      * @generated from field: string page_token = 5;
      */
     pageToken: string;
+    /**
+     * Organization scope for the report: usage of this agent within this
+     * organization. Only executions belonging to this organization are
+     * aggregated. The caller must hold can_view on the organization.
+     *
+     * @generated from field: string org_id = 6;
+     */
+    orgId: string;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.GetAgentUsageReportInput.

package/ai/stigmer/agentic/agentexecution/v1/io_pb.js

@@ -10,7 +10,7 @@ import { file_google_protobuf_duration } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/io.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_api, file_ai_stigmer_agentic_agentexecution_v1_enum, file_ai_stigmer_agentic_agentexecution_v1_usage, file_buf_validate_validate, file_google_protobuf_duration]);
+export const file_ai_stigmer_agentic_agentexecution_v1_io = /*@__PURE__*/ fileDesc("Ci1haS9zdGlnbWVyL2FnZW50aWMvYWdlbnRleGVjdXRpb24vdjEvaW8ucHJvdG8SJGFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MSIpChBBZ2VudEV4ZWN1dGlvbklkEhUKBXZhbHVlGAEgASgJQga6SAPIAQEiIgoJU2Vzc2lvbklkEhUKBXZhbHVlGAEgASgJQga6SAPIAQEicAoSQWdlbnRFeGVjdXRpb25MaXN0EhMKC3RvdGFsX3BhZ2VzGAEgASgFEkUKB2VudHJpZXMYAiADKAsyNC5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuQWdlbnRFeGVjdXRpb24iowEKGkxpc3RBZ2VudEV4ZWN1dGlvbnNSZXF1ZXN0EhEKCXBhZ2Vfc2l6ZRgBIAEoBRISCgpwYWdlX3Rva2VuGAIgASgJEkMKBXBoYXNlGAMgASgOMjQuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkV4ZWN1dGlvblBoYXNlEgwKBHRhZ3MYBCADKAkSCwoDb3JnGAUgASgJImgKI0xpc3RBZ2VudEV4ZWN1dGlvbnNCeVNlc3Npb25SZXF1ZXN0EhoKCnNlc3Npb25faWQYASABKAlCBrpIA8gBARIRCglwYWdlX3NpemUYAiABKAUSEgoKcGFnZV90b2tlbhgDIAEoCSKUAQofQWdlbnRFeGVjdXRpb25VcGRhdGVTdGF0dXNJbnB1dBIdCgxleGVjdXRpb25faWQYASABKAlCB7pIBHICEAESUgoGc3RhdHVzGAIgASgLMjouYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkFnZW50RXhlY3V0aW9uU3RhdHVzQga6SAPIAQEiewoUVXBkYXRlU3RhdHVzUmVzcG9uc2USTAoGc2lnbmFsGAEgASgOMjwuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkV4ZWN1dGlvbkNvbnRyb2xTaWduYWwSFQoNc2lnbmFsX3JlYXNvbhgCIAEoCSK8AQoTU3VibWl0QXBwcm92YWxJbnB1dBIjChJhZ2VudF9leGVjdXRpb25faWQYASABKAlCB7pIBHICEAESHQoMdG9vbF9jYWxsX2lkGAIgASgJQge6SARyAhABElAKBmFjdGlvbhgDIAEoDjI0LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5BcHByb3ZhbEFjdGlvbkIKukgHggEEEAEgABIPCgdjb21tZW50GAQgASgJImQKFEFwcHJvdmFsRGVjaXNpb25MaXN0EkwKCWRlY2lzaW9ucxgBIAMoCzI5LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5TdWJtaXRBcHByb3ZhbElucHV0IvQCChdTdWJtaXRGaWxlRGVjaXNpb25JbnB1dBIjChJhZ2VudF9leGVjdXRpb25faWQYASABKAlCB7pIBHICEAESHgoNY2hhbmdlX3NldF9pZBgCIAEoCUIHukgEcgIQARJSCgVzY29wZRgDIAEoDjI3LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5GaWxlRGVjaXNpb25TY29wZUIKukgHggEEEAEgABIWCg5maWxlX2NoYW5nZV9pZBgEIAEoCRJUCgZhY3Rpb24YBSABKA4yOC5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuRmlsZURlY2lzaW9uQWN0aW9uQgq6SAeCAQQQASAAEiAKD2V4cGVjdGVkX2RpZ2VzdBgGIAEoCUIHukgEcgIQARIOCgZyZWFzb24YByABKAkSIAoYYWNrbm93bGVkZ2VfdW5yZXZpZXdhYmxlGAggASgIIkAKGUNhbmNlbEFnZW50RXhlY3V0aW9uSW5wdXQSEwoCaWQYASABKAlCB7pIBHICEAESDgoGcmVhc29uGAIgASgJIkMKHFRlcm1pbmF0ZUFnZW50RXhlY3V0aW9uSW5wdXQSEwoCaWQYASABKAlCB7pIBHICEAESDgoGcmVhc29uGAIgASgJIjEKGlJlY292ZXJBZ2VudEV4ZWN1dGlvbklucHV0EhMKAmlkGAEgASgJQge6SARyAhABIj8KGFBhdXNlQWdlbnRFeGVjdXRpb25JbnB1dBITCgJpZBgBIAEoCUIHukgEcgIQARIOCgZyZWFzb24YAiABKAkiMAoZUmVzdW1lQWdlbnRFeGVjdXRpb25JbnB1dBITCgJpZBgBIAEoCUIHukgEcgIQASKqAgoXVXBsb2FkQXR0YWNobWVudFJlcXVlc3QS3wEKCGZpbGVuYW1lGAEgASgJQswBukjIAboBwAEKInVwbG9hZF9hdHRhY2htZW50LmZpbGVuYW1lLm5vX3BhdGgSTmZpbGVuYW1lIG11c3QgYmUgYSBiYXJlIGZpbGVuYW1lIHdpdGhvdXQgcGF0aCBzZXBhcmF0b3JzIG9yIHRyYXZlcnNhbCBzZWdtZW50cxpKIXRoaXMuY29udGFpbnMoJy8nKSAmJiAhdGhpcy5jb250YWlucygnXFwnKSAmJiB0aGlzICE9ICcuJyAmJiB0aGlzICE9ICcuLidyAhABEhcKB2NvbnRlbnQYAiABKAxCBrpIA8gBARIUCgxjb250ZW50X3R5cGUYAyABKAkiLwoYVXBsb2FkQXR0YWNobWVudFJlc3BvbnNlEhMKC3N0b3JhZ2Vfa2V5GAEgASgJInMKHUdldEFydGlmYWN0RG93bmxvYWRVcmxSZXF1ZXN0Eh0KDGV4ZWN1dGlvbl9pZBgBIAEoCUIHukgEcgIQARIcCgtzdG9yYWdlX2tleRgCIAEoCUIHukgEcgIQARIVCg1hc19hdHRhY2htZW50GAMgASgIIkoKHkdldEFydGlmYWN0RG93bmxvYWRVcmxSZXNwb25zZRIUCgxkb3dubG9hZF91cmwYASABKAkSEgoKZXhwaXJlc19hdBgCIAEoCSJ/ChlHZXRBcnRpZmFjdENvbnRlbnRSZXF1ZXN0Eh0KDGV4ZWN1dGlvbl9pZBgBIAEoCUIHukgEcgIQARIcCgtzdG9yYWdlX2tleRgCIAEoCUIHukgEcgIQARIRCgltYXhfYnl0ZXMYAyABKAMSEgoKZW50cnlfcGF0aBgEIAEoCSJwChpHZXRBcnRpZmFjdENvbnRlbnRSZXNwb25zZRIPCgdjb250ZW50GAEgASgMEhQKDGNvbnRlbnRfdHlwZRgCIAEoCRIYChB0b3RhbF9zaXplX2J5dGVzGAMgASgDEhEKCXRydW5jYXRlZBgEIAEoCCI9ChxHZXRFeGVjdXRpb25Vc2FnZVJlcG9ydElucHV0Eh0KDGV4ZWN1dGlvbl9pZBgBIAEoCUIHukgEcgIQASK5AQodR2V0RXhlY3V0aW9uVXNhZ2VSZXBvcnRPdXRwdXQSTQoJYWdncmVnYXRlGAEgASgLMjouYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLlVzYWdlUmVwb3J0QWdncmVnYXRlEkkKD21vZGVsX2JyZWFrZG93bhgCIAMoCzIwLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5Nb2RlbFVzYWdlIjkKGkdldFNlc3Npb25Vc2FnZVJlcG9ydElucHV0EhsKCnNlc3Npb25faWQYASABKAlCB7pIBHICEAEihAMKG0dldFNlc3Npb25Vc2FnZVJlcG9ydE91dHB1dBISCgpzZXNzaW9uX2lkGAEgASgJEhcKD2V4ZWN1dGlvbl9jb3VudBgCIAEoBRJPCgt0b3RhbF91c2FnZRgDIAEoCzI6LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5Vc2FnZVJlcG9ydEFnZ3JlZ2F0ZRJPCgpleGVjdXRpb25zGAQgAygLMjsuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkV4ZWN1dGlvblVzYWdlU3VtbWFyeRJJCg9tb2RlbF9icmVha2Rvd24YBSADKAsyMC5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuTW9kZWxVc2FnZRIaChJmaXJzdF9leGVjdXRpb25fYXQYBiABKAkSGQoRbGFzdF9leGVjdXRpb25fYXQYByABKAkSFAoMaXNfZXN0aW1hdGVkGAggASgIIpkBChhHZXRBZ2VudFVzYWdlUmVwb3J0SW5wdXQSGQoIYWdlbnRfaWQYASABKAlCB7pIBHICEAESEQoJZnJvbV9kYXRlGAIgASgJEg8KB3RvX2RhdGUYAyABKAkSEQoJcGFnZV9zaXplGAQgASgFEhIKCnBhZ2VfdG9rZW4YBSABKAkSFwoGb3JnX2lkGAYgASgJQge6SARyAhABIpkDChlHZXRBZ2VudFVzYWdlUmVwb3J0T3V0cHV0EhAKCGFnZW50X2lkGAEgASgJEhIKCmFnZW50X25hbWUYAiABKAkSTwoLdG90YWxfdXNhZ2UYAyABKAsyOi5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuVXNhZ2VSZXBvcnRBZ2dyZWdhdGUSSQoPbW9kZWxfYnJlYWtkb3duGAQgAygLMjAuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLk1vZGVsVXNhZ2USSwoIc2Vzc2lvbnMYBSADKAsyOS5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuU2Vzc2lvblVzYWdlU3VtbWFyeRIWCg50b3RhbF9zZXNzaW9ucxgGIAEoBRIYChB0b3RhbF9leGVjdXRpb25zGAcgASgFEiIKGnRvdGFsX2JpbGxhYmxlX2Nvc3RfbWljcm9zGAggASgDEhcKD25leHRfcGFnZV90b2tlbhgJIAEoCSJnChZHZXRPcmdVc2FnZVJlcG9ydElucHV0EhcKBm9yZ19pZBgBIAEoCUIHukgEcgIQARIaCglmcm9tX2RhdGUYAiABKAlCB7pIBHICEAESGAoHdG9fZGF0ZRgDIAEoCUIHukgEcgIQASLVAwoXR2V0T3JnVXNhZ2VSZXBvcnRPdXRwdXQSDgoGb3JnX2lkGAEgASgJEhQKDHRvdGFsX2FnZW50cxgCIAEoBRIWCg50b3RhbF9zZXNzaW9ucxgDIAEoBRIYChB0b3RhbF9leGVjdXRpb25zGAQgASgFEiIKGnRvdGFsX2JpbGxhYmxlX2Nvc3RfbWljcm9zGAUgASgDEkkKD21vZGVsX2JyZWFrZG93bhgGIAMoCzIwLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5Nb2RlbFVzYWdlElMKEnRvcF9hZ2VudHNfYnlfY29zdBgHIAMoCzI3LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5BZ2VudFVzYWdlU3VtbWFyeRJJCgtkYWlseV9jb3N0cxgIIAMoCzI0LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5EYWlseUNvc3RFbnRyeRJTChFoYXJuZXNzX2JyZWFrZG93bhgJIAMoCzI4LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGV4ZWN1dGlvbi52MS5IYXJuZXNzQ29zdFN1bW1hcnkizgIKFUV4ZWN1dGlvblVzYWdlU3VtbWFyeRIUCgxleGVjdXRpb25faWQYASABKAkSEgoKc3RhcnRlZF9hdBgCIAEoCRIUCgxjb21wbGV0ZWRfYXQYAyABKAkSFAoMaW5wdXRfdG9rZW5zGAQgASgDEhUKDW91dHB1dF90b2tlbnMYBSABKAMSHwoXY2FjaGVfcmVhZF9pbnB1dF90b2tlbnMYBiABKAMSHAoUYmlsbGFibGVfY29zdF9taWNyb3MYByABKAMSFQoNcHJpbWFyeV9tb2RlbBgIIAEoCRIXCg9zdWJfYWdlbnRfY291bnQYCSABKAUSQwoFcGhhc2UYCiABKA4yNC5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuRXhlY3V0aW9uUGhhc2USFAoMaXNfZXN0aW1hdGVkGAsgASgIIq0BChNTZXNzaW9uVXNhZ2VTdW1tYXJ5EhIKCnNlc3Npb25faWQYASABKAkSFwoPZXhlY3V0aW9uX2NvdW50GAIgASgFEhQKDHRvdGFsX3Rva2VucxgDIAEoAxIcChRiaWxsYWJsZV9jb3N0X21pY3JvcxgEIAEoAxIaChJmaXJzdF9leGVjdXRpb25fYXQYBSABKAkSGQoRbGFzdF9leGVjdXRpb25fYXQYBiABKAkihgEKEUFnZW50VXNhZ2VTdW1tYXJ5EhAKCGFnZW50X2lkGAEgASgJEhIKCmFnZW50X25hbWUYAiABKAkSFwoPZXhlY3V0aW9uX2NvdW50GAMgASgFEhQKDHRvdGFsX3Rva2VucxgEIAEoAxIcChRiaWxsYWJsZV9jb3N0X21pY3JvcxgFIAEoAyJrCg5EYWlseUNvc3RFbnRyeRIMCgRkYXRlGAEgASgJEhcKD2V4ZWN1dGlvbl9jb3VudBgCIAEoBRIUCgx0b3RhbF90b2tlbnMYAyABKAMSHAoUYmlsbGFibGVfY29zdF9taWNyb3MYBCABKAMicAoSSGFybmVzc0Nvc3RTdW1tYXJ5Eg8KB2hhcm5lc3MYASABKAkSHAoUYmlsbGFibGVfY29zdF9taWNyb3MYAiABKAMSEgoKY2FsbF9jb3VudBgDIAEoBRIXCg9leGVjdXRpb25fY291bnQYBCABKAUikwEKH0dldEFnZW50RXhlY3V0aW9uU3VtbWFyeVJlcXVlc3QSFAoDb3JnGAEgASgJQge6SARyAhABEloKC3RpbWVfd2luZG93GAIgASgOMkUuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkFnZW50RXhlY3V0aW9uU3VtbWFyeVRpbWVXaW5kb3ciygIKFUFnZW50RXhlY3V0aW9uU3VtbWFyeRIUCgxhY3RpdmVfY291bnQYASABKAUSYgoMcGhhc2VfY291bnRzGAIgAygLMkwuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50ZXhlY3V0aW9uLnYxLkFnZW50RXhlY3V0aW9uU3VtbWFyeS5QaGFzZUNvdW50c0VudHJ5Ei8KDGF2Z19kdXJhdGlvbhgDIAEoCzIZLmdvb2dsZS5wcm90b2J1Zi5EdXJhdGlvbhJSChJ0b3BfZmFpbGluZ19hZ2VudHMYBCADKAsyNi5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRleGVjdXRpb24udjEuQWdlbnRGYWlsdXJlUmFuaxoyChBQaGFzZUNvdW50c0VudHJ5EgsKA2tleRgBIAEoBRINCgV2YWx1ZRgCIAEoBToCOAEiUQoQQWdlbnRGYWlsdXJlUmFuaxISCgphZ2VudF9zbHVnGAEgASgJEhIKCmFnZW50X25hbWUYAiABKAkSFQoNZmFpbHVyZV9jb3VudBgDIAEoBSqdAgofQWdlbnRFeGVjdXRpb25TdW1tYXJ5VGltZVdpbmRvdxIzCi9BR0VOVF9FWEVDVVRJT05fU1VNTUFSWV9USU1FX1dJTkRPV19VTlNQRUNJRklFRBAAEjAKLEFHRU5UX0VYRUNVVElPTl9TVU1NQVJZX1RJTUVfV0lORE9XX0xBU1RfMjRIEAESLworQUdFTlRfRVhFQ1VUSU9OX1NVTU1BUllfVElNRV9XSU5ET1dfTEFTVF83RBACEjAKLEFHRU5UX0VYRUNVVElPTl9TVU1NQVJZX1RJTUVfV0lORE9XX0xBU1RfMzBEEAMSMAosQUdFTlRfRVhFQ1VUSU9OX1NVTU1BUllfVElNRV9XSU5ET1dfQUxMX1RJTUUQBGIGcHJvdG8z", [file_ai_stigmer_agentic_agentexecution_v1_api, file_ai_stigmer_agentic_agentexecution_v1_enum, file_ai_stigmer_agentic_agentexecution_v1_usage, file_buf_validate_validate, file_google_protobuf_duration]);
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.AgentExecutionId.
  * Use `create(AgentExecutionIdSchema)` to create a new message.

package/ai/stigmer/agentic/agentexecution/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,6CAA6C,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,+CAA+C,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAGvE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,y/PAAy/P,EAAE,CAAC,6CAA6C,EAAE,8CAA8C,EAAE,+CAA+C,EAAE,0BAA0B,EAAE,6BAA6B,CAAC,CAAC,CAAC;AAcntQ;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAc/D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAuB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAuD/D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA8B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAoD,aAAa,CACrH,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA4B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA+B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA2D/D;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAqB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAgG/D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAwE/D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAmFhE;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA6DhE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAiFhE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAuDhE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAwFhE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA4BhE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAoGhE;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAyChE;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAyHhE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA2DhE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAgBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAuBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAiBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAuEhE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAgDhE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA2EhE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAkChE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA2EhE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAsFhE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAoDhE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA6ChE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAqChE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAyChE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA4BhE;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAqDhE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAiChE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAN,IAAY,+BAyBX;AAzBD,WAAY,+BAA+B;IACzC;;OAEG;IACH,mGAAe,CAAA;IAEf;;OAEG;IACH,6FAAY,CAAA;IAEZ;;OAEG;IACH,2FAAW,CAAA;IAEX;;OAEG;IACH,6FAAY,CAAA;IAEZ;;OAEG;IACH,6FAAY,CAAA;AACd,CAAC,EAzBW,+BAA+B,KAA/B,+BAA+B,QAyB1C;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAA6C,aAAa,CAC1G,QAAQ,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,6CAA6C,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,+CAA+C,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAGvE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,0hQAA0hQ,EAAE,CAAC,6CAA6C,EAAE,8CAA8C,EAAE,+CAA+C,EAAE,0BAA0B,EAAE,6BAA6B,CAAC,CAAC,CAAC;AAcpvQ;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAc/D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAuB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAuD/D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA8B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAoD,aAAa,CACrH,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA4B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA+B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA2D/D;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAqB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAgG/D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAwE/D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAmFhE;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA6DhE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAiFhE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAuDhE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAwFhE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA4BhE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAoGhE;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAyChE;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAyHhE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA2DhE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAgBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAuBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAiBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAuEhE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAyDhE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA2EhE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAkChE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA2EhE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAsFhE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAoDhE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA6ChE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAqChE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAyChE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA4BhE;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAqDhE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAiChE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAN,IAAY,+BAyBX;AAzBD,WAAY,+BAA+B;IACzC;;OAEG;IACH,mGAAe,CAAA;IAEf;;OAEG;IACH,6FAAY,CAAA;IAEZ;;OAEG;IACH,2FAAW,CAAA;IAEX;;OAEG;IACH,6FAAY,CAAA;IAEZ;;OAEG;IACH,6FAAY,CAAA;AACd,CAAC,EAzBW,+BAA+B,KAA/B,+BAA+B,QAyB1C;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAA6C,aAAa,CAC1G,QAAQ,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/query_connect.d.ts

@@ -189,13 +189,21 @@ export declare const AgentExecutionQueryController: {
             readonly kind: any;
         };
         /**
-         * Get a usage report for an agent.
+         * Get a usage report for an agent within an organization.
          *
-         * Returns aggregated tokens, cost, and per-session breakdown with pagination.
+         * Returns aggregated tokens, cost, and per-session breakdown for one
+         * organization's executions of the agent. Requires can_view on the
+         * organization named in org_id; executions outside that organization are
+         * never included, so the report is the per-agent drill-down of
+         * getOrgUsageReport.
          *
          * @internal
-         * Not consumed by any UI. Authorization model TBD — when a product need
-         * arises, this should likely be org-scoped (usage of agent X within org Y).
+         * Org-scoped by design (oss#389). Agent can_view is a consumption
+         * permission — public agents grant it to every authenticated account via
+         * the FGA wildcard — so gating on the agent would leak cross-tenant usage.
+         * Gating on the organization also keeps other tenants' sessions of a
+         * shared agent out of the report. Consumed by the CLI (`stigmer usage
+         * agent`).
          *
          * @generated from rpc ai.stigmer.agentic.agentexecution.v1.AgentExecutionQueryController.getAgentUsageReport
          */

package/ai/stigmer/agentic/agentexecution/v1/query_connect.js

@@ -196,13 +196,21 @@ export const AgentExecutionQueryController = {
             kind: MethodKind.Unary,
         },
         /**
-         * Get a usage report for an agent.
+         * Get a usage report for an agent within an organization.
          *
-         * Returns aggregated tokens, cost, and per-session breakdown with pagination.
+         * Returns aggregated tokens, cost, and per-session breakdown for one
+         * organization's executions of the agent. Requires can_view on the
+         * organization named in org_id; executions outside that organization are
+         * never included, so the report is the per-agent drill-down of
+         * getOrgUsageReport.
          *
          * @internal
-         * Not consumed by any UI. Authorization model TBD — when a product need
-         * arises, this should likely be org-scoped (usage of agent X within org Y).
+         * Org-scoped by design (oss#389). Agent can_view is a consumption
+         * permission — public agents grant it to every authenticated account via
+         * the FGA wildcard — so gating on the agent would leak cross-tenant usage.
+         * Gating on the organization also keeps other tenants' sessions of a
+         * shared agent out of the report. Consumed by the CLI (`stigmer usage
+         * agent`).
          *
          * @generated from rpc ai.stigmer.agentic.agentexecution.v1.AgentExecutionQueryController.getAgentUsageReport
          */

package/ai/stigmer/agentic/agentexecution/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,mCAAmC,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5gB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,mCAAmC;YACtC,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,eAAe;SACjC;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAmDG;QACH,sBAAsB,EAAE;YACtB,IAAI,EAAE,wBAAwB;YAC9B,CAAC,EAAE,6BAA6B;YAChC,CAAC,EAAE,8BAA8B;YACjC,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAwCG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,4BAA4B;YAC/B,CAAC,EAAE,6BAA6B;YAChC,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,qBAAqB,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,2BAA2B;YAC9B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,+BAA+B;YAClC,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,mCAAmC,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5gB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,mCAAmC;YACtC,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,eAAe;SACjC;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAmDG;QACH,sBAAsB,EAAE;YACtB,IAAI,EAAE,wBAAwB;YAC9B,CAAC,EAAE,6BAA6B;YAChC,CAAC,EAAE,8BAA8B;YACjC,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAwCG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,4BAA4B;YAC/B,CAAC,EAAE,6BAA6B;YAChC,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,qBAAqB,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,2BAA2B;YAC9B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;WAkBG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,+BAA+B;YAClC,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/query_pb.d.ts

@@ -186,13 +186,21 @@ export declare const AgentExecutionQueryController: GenService<{
         output: typeof GetSessionUsageReportOutputSchema;
     };
     /**
-     * Get a usage report for an agent.
+     * Get a usage report for an agent within an organization.
      *
-     * Returns aggregated tokens, cost, and per-session breakdown with pagination.
+     * Returns aggregated tokens, cost, and per-session breakdown for one
+     * organization's executions of the agent. Requires can_view on the
+     * organization named in org_id; executions outside that organization are
+     * never included, so the report is the per-agent drill-down of
+     * getOrgUsageReport.
      *
      * @internal
-     * Not consumed by any UI. Authorization model TBD — when a product need
-     * arises, this should likely be org-scoped (usage of agent X within org Y).
+     * Org-scoped by design (oss#389). Agent can_view is a consumption
+     * permission — public agents grant it to every authenticated account via
+     * the FGA wildcard — so gating on the agent would leak cross-tenant usage.
+     * Gating on the organization also keeps other tenants' sessions of a
+     * shared agent out of the report. Consumed by the CLI (`stigmer usage
+     * agent`).
      *
      * @generated from rpc ai.stigmer.agentic.agentexecution.v1.AgentExecutionQueryController.getAgentUsageReport
      */

package/ai/stigmer/agentic/agentexecution/v1/query_pb.js

@@ -9,7 +9,7 @@ import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/query.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_api, file_ai_stigmer_agentic_agentexecution_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+export const file_ai_stigmer_agentic_agentexecution_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_api, file_ai_stigmer_agentic_agentexecution_v1_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
 /**
  * AgentExecutionQueryController handles read operations for agent executions.
  *

package/ai/stigmer/agentic/agentexecution/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,6CAA6C,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,o9FAAo9F,EAAE,CAAC,6CAA6C,EAAE,4CAA4C,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAErqG;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAyOrC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,6CAA6C,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,0hGAA0hG,EAAE,CAAC,6CAA6C,EAAE,4CAA4C,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE3uG;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAiPrC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/command_connect.d.ts

@@ -2,13 +2,22 @@
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
- *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
- *
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Every write RPC uses is_skip_authorization with a real handler-level check
+ * (the framework's declarative FGA options cannot express any of these):
+ *   - create: the caller-class differs by transport. Internal in-process
+ *     pipeline calls (agent execution, workflow execution, workflow recovery,
+ *     MCP connect) are trusted — the parent operation already authorized the
+ *     run against its session-or-org, and the EC is created before that parent
+ *     is persisted, so it carries no resource to re-check. External callers
+ *     must hold can_create_execution_in on metadata.org (the same bar that
+ *     gates creating an execution in the org; held by members and guests).
+ *     A declarative org option cannot encode the internal/external split.
+ *   - apply: intentionally unannotated router — it delegates to create
+ *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
+ *     pipeline runs under create's handler, authorization included.
+ *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
+ *     per the execution_context FGA model). The FGA target is the loaded
+ *     resource, so it cannot be a declarative method option.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -19,8 +28,9 @@ export declare const ExecutionContextCommandController: {
          * Create or update an ExecutionContext.
          *
          * @internal
-         * The authorization and state-operation are determined depending on whether the execution context
-         * is going to be created or updated which is determined as part of the request execution.
+         * Router only: delegates to create when the resource does not exist and
+         * fails with ALREADY_EXISTS when it does (no update RPC). Authorization is
+         * inherited from the delegated create pipeline.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.apply
          */
@@ -34,8 +44,13 @@ export declare const ExecutionContextCommandController: {
          * Create a new ExecutionContext for an execution.
          *
          * @internal
-         * Called by execution pipeline on behalf of the user.
-         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
+         * Called by the execution pipelines (agent execution, workflow execution,
+         * workflow recovery, MCP connect) as sub-steps, and reachable directly by
+         * API clients. is_skip_authorization because the caller-class split cannot
+         * be a declarative option: the create handler trusts internal in-process
+         * calls (already authorized upstream) and requires external callers to hold
+         * can_create_execution_in on metadata.org. The pipeline additionally grants
+         * the caller the owner tuple, which gates all subsequent reads and delete.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
          */
@@ -49,8 +64,10 @@ export declare const ExecutionContextCommandController: {
          * Delete an ExecutionContext.
          *
          * @internal
-         * Called when execution completes. Handler-level derived auth: checks can_edit
-         * on parent agent_execution or workflow_execution.
+         * Called when execution completes. Handler-level auth (the FGA target is the
+         * loaded resource, so it cannot be a declarative option): caller must have
+         * can_edit on execution_context:<id>, which the FGA model resolves to the
+         * owner written at create time.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
          */

package/ai/stigmer/agentic/executioncontext/v1/command_connect.js

@@ -9,13 +9,22 @@ import { ApiResourceDeleteInput } from "../../../commons/apiresource/io_pbjs";
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
- *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
- *
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Every write RPC uses is_skip_authorization with a real handler-level check
+ * (the framework's declarative FGA options cannot express any of these):
+ *   - create: the caller-class differs by transport. Internal in-process
+ *     pipeline calls (agent execution, workflow execution, workflow recovery,
+ *     MCP connect) are trusted — the parent operation already authorized the
+ *     run against its session-or-org, and the EC is created before that parent
+ *     is persisted, so it carries no resource to re-check. External callers
+ *     must hold can_create_execution_in on metadata.org (the same bar that
+ *     gates creating an execution in the org; held by members and guests).
+ *     A declarative org option cannot encode the internal/external split.
+ *   - apply: intentionally unannotated router — it delegates to create
+ *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
+ *     pipeline runs under create's handler, authorization included.
+ *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
+ *     per the execution_context FGA model). The FGA target is the loaded
+ *     resource, so it cannot be a declarative method option.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -26,8 +35,9 @@ export const ExecutionContextCommandController = {
          * Create or update an ExecutionContext.
          *
          * @internal
-         * The authorization and state-operation are determined depending on whether the execution context
-         * is going to be created or updated which is determined as part of the request execution.
+         * Router only: delegates to create when the resource does not exist and
+         * fails with ALREADY_EXISTS when it does (no update RPC). Authorization is
+         * inherited from the delegated create pipeline.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.apply
          */
@@ -41,8 +51,13 @@ export const ExecutionContextCommandController = {
          * Create a new ExecutionContext for an execution.
          *
          * @internal
-         * Called by execution pipeline on behalf of the user.
-         * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
+         * Called by the execution pipelines (agent execution, workflow execution,
+         * workflow recovery, MCP connect) as sub-steps, and reachable directly by
+         * API clients. is_skip_authorization because the caller-class split cannot
+         * be a declarative option: the create handler trusts internal in-process
+         * calls (already authorized upstream) and requires external callers to hold
+         * can_create_execution_in on metadata.org. The pipeline additionally grants
+         * the caller the owner tuple, which gates all subsequent reads and delete.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
          */
@@ -56,8 +71,10 @@ export const ExecutionContextCommandController = {
          * Delete an ExecutionContext.
          *
          * @internal
-         * Called when execution completes. Handler-level derived auth: checks can_edit
-         * on parent agent_execution or workflow_execution.
+         * Called when execution completes. Handler-level auth (the FGA target is the
+         * loaded resource, so it cannot be a declarative option): caller must have
+         * can_edit on execution_context:<id>, which the FGA model resolves to the
+         * owner written at create time.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
          */

package/ai/stigmer/agentic/executioncontext/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;;;;;;WASG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/command_pb.d.ts

@@ -9,13 +9,22 @@ export declare const file_ai_stigmer_agentic_executioncontext_v1_command: GenFil
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
- *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
- *
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Every write RPC uses is_skip_authorization with a real handler-level check
+ * (the framework's declarative FGA options cannot express any of these):
+ *   - create: the caller-class differs by transport. Internal in-process
+ *     pipeline calls (agent execution, workflow execution, workflow recovery,
+ *     MCP connect) are trusted — the parent operation already authorized the
+ *     run against its session-or-org, and the EC is created before that parent
+ *     is persisted, so it carries no resource to re-check. External callers
+ *     must hold can_create_execution_in on metadata.org (the same bar that
+ *     gates creating an execution in the org; held by members and guests).
+ *     A declarative org option cannot encode the internal/external split.
+ *   - apply: intentionally unannotated router — it delegates to create
+ *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
+ *     pipeline runs under create's handler, authorization included.
+ *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
+ *     per the execution_context FGA model). The FGA target is the loaded
+ *     resource, so it cannot be a declarative method option.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -24,8 +33,9 @@ export declare const ExecutionContextCommandController: GenService<{
      * Create or update an ExecutionContext.
      *
      * @internal
-     * The authorization and state-operation are determined depending on whether the execution context
-     * is going to be created or updated which is determined as part of the request execution.
+     * Router only: delegates to create when the resource does not exist and
+     * fails with ALREADY_EXISTS when it does (no update RPC). Authorization is
+     * inherited from the delegated create pipeline.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.apply
      */
@@ -38,8 +48,13 @@ export declare const ExecutionContextCommandController: GenService<{
      * Create a new ExecutionContext for an execution.
      *
      * @internal
-     * Called by execution pipeline on behalf of the user.
-     * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
+     * Called by the execution pipelines (agent execution, workflow execution,
+     * workflow recovery, MCP connect) as sub-steps, and reachable directly by
+     * API clients. is_skip_authorization because the caller-class split cannot
+     * be a declarative option: the create handler trusts internal in-process
+     * calls (already authorized upstream) and requires external callers to hold
+     * can_create_execution_in on metadata.org. The pipeline additionally grants
+     * the caller the owner tuple, which gates all subsequent reads and delete.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
      */
@@ -52,8 +67,10 @@ export declare const ExecutionContextCommandController: GenService<{
      * Delete an ExecutionContext.
      *
      * @internal
-     * Called when execution completes. Handler-level derived auth: checks can_edit
-     * on parent agent_execution or workflow_execution.
+     * Called when execution completes. Handler-level auth (the FGA target is the
+     * loaded resource, so it cannot be a declarative option): caller must have
+     * can_edit on execution_context:<id>, which the FGA model resolves to the
+     * owner written at create time.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
      */

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js

@@ -14,13 +14,22 @@ export const file_ai_stigmer_agentic_executioncontext_v1_command = /*@__PURE__*/
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
- *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
- *
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Every write RPC uses is_skip_authorization with a real handler-level check
+ * (the framework's declarative FGA options cannot express any of these):
+ *   - create: the caller-class differs by transport. Internal in-process
+ *     pipeline calls (agent execution, workflow execution, workflow recovery,
+ *     MCP connect) are trusted — the parent operation already authorized the
+ *     run against its session-or-org, and the EC is created before that parent
+ *     is persisted, so it carries no resource to re-check. External callers
+ *     must hold can_create_execution_in on metadata.org (the same bar that
+ *     gates creating an execution in the org; held by members and guests).
+ *     A declarative org option cannot encode the internal/external split.
+ *   - apply: intentionally unannotated router — it delegates to create
+ *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
+ *     pipeline runs under create's handler, authorization included.
+ *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
+ *     per the execution_context FGA model). The FGA target is the loaded
+ *     resource, so it cannot be a declarative method option.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,4sBAA4sB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEz5B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,iCAAiC,GA2CzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,4sBAA4sB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEz5B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAmDzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/query_connect.d.ts

@@ -56,12 +56,14 @@ export declare const ExecutionContextQueryController: {
          * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
          *
          * Secret handling (cloud): the decrypt path is gated by caller credential
-         * class, not by FGA — runners authenticate as the user who owns the
-         * execution, so permissions cannot tell them apart. Callers presenting a
-         * platform-minted runner token (token_type of sandbox, workflow_sandbox,
-         * connect_sandbox, or embedded_runner) receive decrypted secret values;
-         * every other caller (user JWT, SDK, console) receives the same redaction
-         * as get/getByReference.
+         * class AND scope, not by FGA — runners authenticate as the user who owns
+         * the execution, so permissions cannot tell them apart. Callers presenting
+         * a platform-minted runner token (token_type of sandbox, workflow_sandbox,
+         * or connect_sandbox) whose scope claim binds it to this very execution
+         * receive decrypted secret values. The unscoped embedded_runner bootstrap
+         * credential is refused; desktop runners exchange it for a scoped token
+         * via getRunnerScopedToken before reading. Every other caller (user JWT,
+         * SDK, console) receives the same redaction as get/getByReference.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
          */

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js

@@ -64,12 +64,14 @@ export const ExecutionContextQueryController = {
          * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
          *
          * Secret handling (cloud): the decrypt path is gated by caller credential
-         * class, not by FGA — runners authenticate as the user who owns the
-         * execution, so permissions cannot tell them apart. Callers presenting a
-         * platform-minted runner token (token_type of sandbox, workflow_sandbox,
-         * connect_sandbox, or embedded_runner) receive decrypted secret values;
-         * every other caller (user JWT, SDK, console) receives the same redaction
-         * as get/getByReference.
+         * class AND scope, not by FGA — runners authenticate as the user who owns
+         * the execution, so permissions cannot tell them apart. Callers presenting
+         * a platform-minted runner token (token_type of sandbox, workflow_sandbox,
+         * or connect_sandbox) whose scope claim binds it to this very execution
+         * receive decrypted secret values. The unscoped embedded_runner bootstrap
+         * credential is refused; desktop runners exchange it for a scoped token
+         * via getRunnerScopedToken before reading. Every other caller (user JWT,
+         * SDK, console) receives the same redaction as get/getByReference.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
          */

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/query_pb.d.ts

@@ -60,12 +60,14 @@ export declare const ExecutionContextQueryController: GenService<{
      * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
      *
      * Secret handling (cloud): the decrypt path is gated by caller credential
-     * class, not by FGA — runners authenticate as the user who owns the
-     * execution, so permissions cannot tell them apart. Callers presenting a
-     * platform-minted runner token (token_type of sandbox, workflow_sandbox,
-     * connect_sandbox, or embedded_runner) receive decrypted secret values;
-     * every other caller (user JWT, SDK, console) receives the same redaction
-     * as get/getByReference.
+     * class AND scope, not by FGA — runners authenticate as the user who owns
+     * the execution, so permissions cannot tell them apart. Callers presenting
+     * a platform-minted runner token (token_type of sandbox, workflow_sandbox,
+     * or connect_sandbox) whose scope claim binds it to this very execution
+     * receive decrypted secret values. The unscoped embedded_runner bootstrap
+     * credential is refused; desktop runners exchange it for a scoped token
+     * via getRunnerScopedToken before reading. Every other caller (user JWT,
+     * SDK, console) receives the same redaction as get/getByReference.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
      */

package/ai/stigmer/agentic/executioncontext/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,0vBAA0vB,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEv/B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAoDvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,0vBAA0vB,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEv/B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAsDvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}