@stigmer/protos 3.11.1-dev.20260812192248 → 3.12.0

package/ai/stigmer/activity/v1/io_pb.d.ts

@@ -83,6 +83,10 @@ export type ListRecentActivityRequest = Message<"ai.stigmer.activity.v1.ListRece
      * When empty, results span every organization the caller has resource
      * access in.
      *
+     * On the OSS edition the filter is a no-op: the server is single-tenant,
+     * so org scoping has nothing to narrow — matching the per-kind OSS list
+     * RPCs this feed summarizes.
+     *
      * @generated from field: string org = 2;
      */
     org: string;

package/ai/stigmer/activity/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uGAAuG;AACvG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAY,aAAa,CAClE,QAAQ,CAAC,odAAod,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;AAoDngB;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;AAoCjD;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;AAiBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uGAAuG;AACvG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAY,aAAa,CAClE,QAAQ,CAAC,odAAod,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;AAoDngB;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;AAwCjD;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;AAiBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/activity/v1/query_connect.d.ts

@@ -24,8 +24,10 @@ export declare const ActivityQueryController: {
          * sessions and workflow executions. On the hosted edition, per-resource
          * authorization filtering is applied server-side (FGA `can_view`
          * enumeration for both kinds — the same permission the per-kind `get`
-         * RPCs enforce, so every listed entry is openable by construction). The
-         * OSS server does not currently implement this RPC (stigmer#461).
+         * RPCs enforce, so every listed entry is openable by construction). On
+         * the OSS edition the server is single-tenant: the caller owns every
+         * stored resource, so there is no authorization set to enumerate and the
+         * request's org is a no-op (stigmer#461).
          *
          * @internal
          * Authorization is handled in-handler: the FGA id enumeration is the only

package/ai/stigmer/activity/v1/query_connect.js

@@ -30,8 +30,10 @@ export const ActivityQueryController = {
          * sessions and workflow executions. On the hosted edition, per-resource
          * authorization filtering is applied server-side (FGA `can_view`
          * enumeration for both kinds — the same permission the per-kind `get`
-         * RPCs enforce, so every listed entry is openable by construction). The
-         * OSS server does not currently implement this RPC (stigmer#461).
+         * RPCs enforce, so every listed entry is openable by construction). On
+         * the OSS edition the server is single-tenant: the caller owns every
+         * stored resource, so there is no authorization set to enumerate and the
+         * request's org is a no-op (stigmer#461).
          *
          * @internal
          * Authorization is handled in-handler: the FGA id enumeration is the only

package/ai/stigmer/activity/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0GAA0G;AAC1G,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,gDAAgD;IAC1D,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;WAgBG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0GAA0G;AAC1G,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,gDAAgD;IAC1D,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;WAkBG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/activity/v1/query_pb.d.ts

@@ -28,8 +28,10 @@ export declare const ActivityQueryController: GenService<{
      * sessions and workflow executions. On the hosted edition, per-resource
      * authorization filtering is applied server-side (FGA `can_view`
      * enumeration for both kinds — the same permission the per-kind `get`
-     * RPCs enforce, so every listed entry is openable by construction). The
-     * OSS server does not currently implement this RPC (stigmer#461).
+     * RPCs enforce, so every listed entry is openable by construction). On
+     * the OSS edition the server is single-tenant: the caller owns every
+     * stored resource, so there is no authorization set to enumerate and the
+     * request's org is a no-op (stigmer#461).
      *
      * @internal
      * Authorization is handled in-handler: the FGA id enumeration is the only

package/ai/stigmer/activity/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0GAA0G;AAC1G,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG;;GAEG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAY,aAAa,CACrE,QAAQ,CAAC,kTAAkT,EAAE,CAAC,8BAA8B,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE7Y;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAuB/B,aAAa,CAChB,WAAW,CAAC,iCAAiC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/activity/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0GAA0G;AAC1G,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG;;GAEG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAY,aAAa,CACrE,QAAQ,CAAC,kTAAkT,EAAE,CAAC,8BAA8B,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE7Y;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAyB/B,aAAa,CAChB,WAAW,CAAC,iCAAiC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agent/v1/spec_pb.d.ts

@@ -64,13 +64,6 @@ export type AgentSpec = Message<"ai.stigmer.agentic.agent.v1.AgentSpec"> & {
     env: {
         [key: string]: EnvVarDeclaration;
     };
-    /**
-     * Datastores this agent can use.
-     * Each entry must reference a Datastore resource by slug.
-     *
-     * @generated from field: repeated ai.stigmer.agentic.agent.v1.DatastoreUsage datastore_usages = 9;
-     */
-    datastoreUsages: DatastoreUsage[];
 };
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.AgentSpec.
@@ -196,40 +189,6 @@ export type McpServerUsage = Message<"ai.stigmer.agentic.agent.v1.McpServerUsage
  * Use `create(McpServerUsageSchema)` to create a new message.
  */
 export declare const McpServerUsageSchema: GenMessage<McpServerUsage>;
-/**
- * DatastoreUsage declares that this agent uses a Datastore resource.
- *
- * Attaching a datastore gives the agent the built-in record tools
- * (find_records, insert_record, update_record, delete_record,
- * describe_datastore) for it. What each caller may actually do is
- * governed by the datastore's own authorization block, resolved per
- * request from the verified sender or principal behind the session.
- *
- * @internal
- * Usage-wrapper idiom (McpServerUsage precedent) so per-usage fields
- * (approval tightening, verb caps, collection subsets — recorded growth
- * slots) land additively. The usage edge is authorization-bearing for
- * session-bound runner credentials (DD-006 SD-1): the record RPCs
- * resolve reach through it live, per call, fail-closed. The runner
- * synthesizes one bridge MCP attachment with an injected execution
- * credential and empty approval maps — record tools are approval-free
- * by construction.
- *
- * @generated from message ai.stigmer.agentic.agent.v1.DatastoreUsage
- */
-export type DatastoreUsage = Message<"ai.stigmer.agentic.agent.v1.DatastoreUsage"> & {
-    /**
-     * Reference to the Datastore resource.
-     *
-     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference datastore_ref = 1;
-     */
-    datastoreRef?: ApiResourceReference;
-};
-/**
- * Describes the message ai.stigmer.agentic.agent.v1.DatastoreUsage.
- * Use `create(DatastoreUsageSchema)` to create a new message.
- */
-export declare const DatastoreUsageSchema: GenMessage<DatastoreUsage>;
 /**
  * McpAccess grants a sub-agent access to one of the parent's MCP servers.
  *

package/ai/stigmer/agentic/agent/v1/spec_pb.js

@@ -9,7 +9,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agent/v1/spec.proto.
  */
-export const file_ai_stigmer_agentic_agent_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agent_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_environment_v1_spec, file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.AgentSpec.
  * Use `create(AgentSpecSchema)` to create a new message.
@@ -25,19 +25,14 @@ export const SubAgentSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_
  * Use `create(McpServerUsageSchema)` to create a new message.
  */
 export const McpServerUsageSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 2);
-/**
- * Describes the message ai.stigmer.agentic.agent.v1.DatastoreUsage.
- * Use `create(DatastoreUsageSchema)` to create a new message.
- */
-export const DatastoreUsageSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 3);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.McpAccess.
  * Use `create(McpAccessSchema)` to create a new message.
  */
-export const McpAccessSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 4);
+export const McpAccessSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 3);
 /**
  * Describes the message ai.stigmer.agentic.agent.v1.ToolApprovalOverride.
  * Use `create(ToolApprovalOverrideSchema)` to create a new message.
  */
-export const ToolApprovalOverrideSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 5);
+export const ToolApprovalOverrideSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agent_v1_spec, 4);
 //# sourceMappingURL=spec_pb.js.map

package/ai/stigmer/agentic/agent/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,43EAA43E,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA0E/iF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA4DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAgCxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,8/DAA8/D,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkEjrE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA4DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_command_connect.d.ts

@@ -4,10 +4,9 @@
  *
  * @internal
  * proactive-messaging DD-002 D2: the runtime messaging surface beside
- * the AgentChannel resource controllers — the
- * DatastoreRecordCommandController-beside-DatastoreCommandController
- * split, so resource CRUD and runtime traffic never mix. Dual-audience
- * by token-class dispatch (the RecordReach shape): the agent's
+ * the AgentChannel resource controllers — a dedicated runtime service
+ * next to the resource CRUD service, so resource CRUD and runtime
+ * traffic never mix. Dual-audience by token-class dispatch: the agent's
  * send_channel_message tool calls with a session-scoped sandbox token;
  * direct principals (console, CLI, SDK) call with their own identity.
  *

package/ai/stigmer/agentic/agentchannel/v1/message_command_connect.js

@@ -10,10 +10,9 @@ import { MethodKind } from "@bufbuild/protobuf";
  *
  * @internal
  * proactive-messaging DD-002 D2: the runtime messaging surface beside
- * the AgentChannel resource controllers — the
- * DatastoreRecordCommandController-beside-DatastoreCommandController
- * split, so resource CRUD and runtime traffic never mix. Dual-audience
- * by token-class dispatch (the RecordReach shape): the agent's
+ * the AgentChannel resource controllers — a dedicated runtime service
+ * next to the resource CRUD service, so resource CRUD and runtime
+ * traffic never mix. Dual-audience by token-class dispatch: the agent's
  * send_channel_message tool calls with a session-scoped sandbox token;
  * direct principals (console, CLI, SDK) call with their own identity.
  *

package/ai/stigmer/agentic/agentchannel/v1/message_command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"message_command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_command_pb.d.ts

@@ -10,10 +10,9 @@ export declare const file_ai_stigmer_agentic_agentchannel_v1_message_command: Ge
  *
  * @internal
  * proactive-messaging DD-002 D2: the runtime messaging surface beside
- * the AgentChannel resource controllers — the
- * DatastoreRecordCommandController-beside-DatastoreCommandController
- * split, so resource CRUD and runtime traffic never mix. Dual-audience
- * by token-class dispatch (the RecordReach shape): the agent's
+ * the AgentChannel resource controllers — a dedicated runtime service
+ * next to the resource CRUD service, so resource CRUD and runtime
+ * traffic never mix. Dual-audience by token-class dispatch: the agent's
  * send_channel_message tool calls with a session-scoped sandbox token;
  * direct principals (console, CLI, SDK) call with their own identity.
  *

package/ai/stigmer/agentic/agentchannel/v1/message_command_pb.js

@@ -15,10 +15,9 @@ export const file_ai_stigmer_agentic_agentchannel_v1_message_command = /*@__PURE
  *
  * @internal
  * proactive-messaging DD-002 D2: the runtime messaging surface beside
- * the AgentChannel resource controllers — the
- * DatastoreRecordCommandController-beside-DatastoreCommandController
- * split, so resource CRUD and runtime traffic never mix. Dual-audience
- * by token-class dispatch (the RecordReach shape): the agent's
+ * the AgentChannel resource controllers — a dedicated runtime service
+ * next to the resource CRUD service, so resource CRUD and runtime
+ * traffic never mix. Dual-audience by token-class dispatch: the agent's
  * send_channel_message tool calls with a session-scoped sandbox token;
  * direct principals (console, CLI, SDK) call with their own identity.
  *

package/ai/stigmer/agentic/agentchannel/v1/message_command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,uDAAuD,GAAY,aAAa,CAC3F,QAAQ,CAAC,oYAAoY,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5iB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GA6BvC,aAAa,CAChB,WAAW,CAAC,uDAAuD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"message_command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,uDAAuD,GAAY,aAAa,CAC3F,QAAQ,CAAC,oYAAoY,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5iB;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,+BAA+B,GA6BvC,aAAa,CAChB,WAAW,CAAC,uDAAuD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_io_pb.d.ts

@@ -9,8 +9,7 @@ export declare const file_ai_stigmer_agentic_agentchannel_v1_message_io: GenFile
  *
  * @internal
  * proactive-messaging DD-002 D4, amended: channel + org are separate
- * fields (the FindRecordsRequest slug/org precedent), never a
- * slug-or-id union. Dispatch mirrors the datastore record surface:
+ * fields, never a slug-or-id union. Dispatch is token-class-driven:
  * session-bound runner credentials leave both empty and the server
  * derives them from the session's serving channel; direct principals
  * (console, CLI, SDK) set them. Ambiguity — the caller's agent has more

package/ai/stigmer/agentic/agentchannel/v1/message_io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uIAAuI;AACvI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,opEAAopE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAkD/rE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAyCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAgBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwDrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAsCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwGrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAmBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,EAAE,CAAC,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,kBA8BX;AA9BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,mEAAY,CAAA;IAEZ;;;;OAIG;IACH,+DAAU,CAAA;IAEV;;;;;;OAMG;IACH,iEAAW,CAAA;AACb,CAAC,EA9BW,kBAAkB,KAAlB,kBAAkB,QA8B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"message_io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uIAAuI;AACvI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,opEAAopE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAiD/rE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAyCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAgBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwDrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAsCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwGrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAmBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,EAAE,CAAC,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,kBA8BX;AA9BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,mEAAY,CAAA;IAEZ;;;;OAIG;IACH,+DAAU,CAAA;IAEV;;;;;;OAMG;IACH,iEAAW,CAAA;AACb,CAAC,EA9BW,kBAAkB,KAAlB,kBAAkB,QA8B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_query_connect.d.ts

@@ -5,8 +5,7 @@
  * @internal
  * proactive-messaging DD-003 D6: the query sibling of
  * ChannelMessageCommandController — runtime messaging traffic (the send
- * and its supporting reads) stays off the resource CRUD surface, the
- * datastore-domain split applied consistently.
+ * and its supporting reads) stays off the resource CRUD surface.
  *
  * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
  */

package/ai/stigmer/agentic/agentchannel/v1/message_query_connect.js

@@ -11,8 +11,7 @@ import { MethodKind } from "@bufbuild/protobuf";
  * @internal
  * proactive-messaging DD-003 D6: the query sibling of
  * ChannelMessageCommandController — runtime messaging traffic (the send
- * and its supporting reads) stays off the resource CRUD surface, the
- * datastore-domain split applied consistently.
+ * and its supporting reads) stays off the resource CRUD surface.
  *
  * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
  */

package/ai/stigmer/agentic/agentchannel/v1/message_query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC/H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;WAmBG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,qBAAqB,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"message_query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC/H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;WAmBG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,qBAAqB,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_query_pb.d.ts

@@ -11,8 +11,7 @@ export declare const file_ai_stigmer_agentic_agentchannel_v1_message_query: GenF
  * @internal
  * proactive-messaging DD-003 D6: the query sibling of
  * ChannelMessageCommandController — runtime messaging traffic (the send
- * and its supporting reads) stays off the resource CRUD surface, the
- * datastore-domain split applied consistently.
+ * and its supporting reads) stays off the resource CRUD surface.
  *
  * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
  */

package/ai/stigmer/agentic/agentchannel/v1/message_query_pb.js

@@ -16,8 +16,7 @@ export const file_ai_stigmer_agentic_agentchannel_v1_message_query = /*@__PURE__
  * @internal
  * proactive-messaging DD-003 D6: the query sibling of
  * ChannelMessageCommandController — runtime messaging traffic (the send
- * and its supporting reads) stays off the resource CRUD surface, the
- * datastore-domain split applied consistently.
+ * and its supporting reads) stays off the resource CRUD surface.
  *
  * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
  */

package/ai/stigmer/agentic/agentchannel/v1/message_query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"message_query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,qDAAqD,GAAY,aAAa,CACzF,QAAQ,CAAC,kkBAAkkB,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1uB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAoDrC,aAAa,CAChB,WAAW,CAAC,qDAAqD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"message_query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,qDAAqD,GAAY,aAAa,CACzF,QAAQ,CAAC,kkBAAkkB,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1uB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAoDrC,aAAa,CAChB,WAAW,CAAC,qDAAqD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/spec_pb.d.ts

@@ -38,27 +38,6 @@ export type AgentInstanceSpec = Message<"ai.stigmer.agentic.agentinstance.v1.Age
      * @generated from field: repeated ai.stigmer.commons.apiresource.ApiResourceReference environment_refs = 3;
      */
     environmentRefs: ApiResourceReference[];
-    /**
-     * Data partition this instance's record operations are scoped to, for
-     * every datastore the agent uses. Unset means the shared "default"
-     * partition.
-     *
-     * Instances declaring the same label share records (e.g. the prod
-     * instances of two agents on one datastore); a different label is a
-     * fully isolated dataset (e.g. a dev instance whose test records
-     * never touch prod).
-     *
-     * @internal
-     * DD-010: the record RPCs derive the partition from the session's
-     * resolved instance — server-side, per call, never from tool
-     * arguments — so the label (not the instance id, which changes when
-     * default instances are recreated) is the durable partition key.
-     * One label per instance in v1; a per-datastore map is a recorded
-     * additive growth slot.
-     *
-     * @generated from field: string datastore_partition = 4;
-     */
-    datastorePartition: string;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentinstance.v1.AgentInstanceSpec.

package/ai/stigmer/agentic/agentinstance/v1/spec_pb.js

@@ -8,7 +8,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agentinstance/v1/spec.proto.
  */
-export const file_ai_stigmer_agentic_agentinstance_v1_spec = /*@__PURE__*/ fileDesc("Ci5haS9zdGlnbWVyL2FnZW50aWMvYWdlbnRpbnN0YW5jZS92MS9zcGVjLnByb3RvEiNhaS5zdGlnbWVyLmFnZW50aWMuYWdlbnRpbnN0YW5jZS52MSLSAgoRQWdlbnRJbnN0YW5jZVNwZWMSGQoIYWdlbnRfaWQYASABKAlCB7pIBHICEAESEwoLZGVzY3JpcHRpb24YAiABKAkSyAEKEGVudmlyb25tZW50X3JlZnMYAyADKAsyNC5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VSZWZlcmVuY2VCeLpIcZIBbiJsugFpChVlbnZpcm9ubWVudF9yZWZzLmtpbmQSP2Vudmlyb25tZW50X3JlZnMgbXVzdCByZWZlcmVuY2UgcmVzb3VyY2VzIHdpdGgga2luZD1lbnZpcm9ubWVudBoPdGhpcy5raW5kID09IDUz4IUsNRJCChNkYXRhc3RvcmVfcGFydGl0aW9uGAQgASgJQiW6SCJyIBg/MhxeJHxeW2Etel1bYS16MC05LV0qW2EtejAtOV0kYgZwcm90bzM", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agentinstance_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agentinstance.v1.AgentInstanceSpec.
  * Use `create(AgentInstanceSpecSchema)` to create a new message.

package/ai/stigmer/agentic/agentinstance/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,qkBAAqkB,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6D3sB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,8gBAA8gB,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuCppB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.d.ts

@@ -280,13 +280,6 @@ export declare enum ApiResourceKind {
      * @generated from enum value: channel_app = 48;
      */
     channel_app = 48,
-    /**
-     * Declared collections of typed business records with role-aware access
-     * grants; agents read and write records through grant-checked tools.
-     *
-     * @generated from enum value: datastore = 49;
-     */
-    datastore = 49,
     /**
      * Multi-step orchestration defining how agents collaborate on a task.
      *

package/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.js

@@ -8,7 +8,7 @@ import { file_google_protobuf_descriptor } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind.proto.
  */
-export const file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_group, file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, file_google_protobuf_descriptor]);
+export const file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_group, file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, file_google_protobuf_descriptor]);
 /**
  * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.ApiResourceKindMeta.
  * Use `create(ApiResourceKindMetaSchema)` to create a new message.
@@ -225,13 +225,6 @@ export var ApiResourceKind;
      * @generated from enum value: channel_app = 48;
      */
     ApiResourceKind[ApiResourceKind["channel_app"] = 48] = "channel_app";
-    /**
-     * Declared collections of typed business records with role-aware access
-     * grants; agents read and write records through grant-checked tools.
-     *
-     * @generated from enum value: datastore = 49;
-     */
-    ApiResourceKind[ApiResourceKind["datastore"] = 49] = "datastore";
     /**
      * Multi-step orchestration defining how agents collaborate on a task.
      *

package/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_resource_kind_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sKAAsK;AACtK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAExF,OAAO,EAAE,sEAAsE,EAAE,MAAM,4BAA4B,CAAC;AAEpH,OAAO,EAAE,wEAAwE,EAAE,MAAM,8BAA8B,CAAC;AAExH,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,qEAAqE,GAAY,aAAa,CACzG,QAAQ,CAAC,ssIAAssI,EAAE,CAAC,sEAAsE,EAAE,wEAAwE,EAAE,+BAA+B,CAAC,CAAC,CAAC;AAwEx4I;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,CAAN,IAAY,kBAcX;AAdD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,uDAAM,CAAA;AACR,CAAC,EAdW,kBAAkB,KAAlB,kBAAkB,QAc7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,CAAN,IAAY,YAmBX;AAnBD,WAAY,YAAY;IACtB;;OAEG;IACH,yFAA6B,CAAA;IAE7B;;;;OAIG;IACH,6DAAe,CAAA;IAEf;;;;OAIG;IACH,2DAAc,CAAA;AAChB,CAAC,EAnBW,YAAY,KAAZ,YAAY,QAmBvB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,aAAa,CACpE,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eAaX;AAbD,WAAY,eAAe;IACzB;;OAEG;IACH,uGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,2DAAW,CAAA;AACb,CAAC,EAbW,eAAe,KAAf,eAAe,QAa1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,CAAN,IAAY,eAoNX;AApND,WAAY,eAAe;IACzB;;;;OAIG;IACH,+FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qFAAwB,CAAA;IAExB;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,8EAAqB,CAAA;IAErB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,gEAAc,CAAA;IAEd;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;;;;;;;;OAWG;IACH,sEAAiB,CAAA;IAEjB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,0EAAmB,CAAA;IAEnB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,wEAAkB,CAAA;IAElB;;;;;OAKG;IACH,oEAAgB,CAAA;IAEhB;;;;;OAKG;IACH,gEAAc,CAAA;IAEd;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,kFAAuB,CAAA;IAEvB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,4DAAY,CAAA;AACd,CAAC,EApNW,eAAe,KAAf,eAAe,QAoN1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAwD,aAAa,CACzF,OAAO,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_resource_kind_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sKAAsK;AACtK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAExF,OAAO,EAAE,sEAAsE,EAAE,MAAM,4BAA4B,CAAC;AAEpH,OAAO,EAAE,wEAAwE,EAAE,MAAM,8BAA8B,CAAC;AAExH,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,qEAAqE,GAAY,aAAa,CACzG,QAAQ,CAAC,goIAAgoI,EAAE,CAAC,sEAAsE,EAAE,wEAAwE,EAAE,+BAA+B,CAAC,CAAC,CAAC;AAwEl0I;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,CAAN,IAAY,kBAcX;AAdD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,uDAAM,CAAA;AACR,CAAC,EAdW,kBAAkB,KAAlB,kBAAkB,QAc7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,CAAN,IAAY,YAmBX;AAnBD,WAAY,YAAY;IACtB;;OAEG;IACH,yFAA6B,CAAA;IAE7B;;;;OAIG;IACH,6DAAe,CAAA;IAEf;;;;OAIG;IACH,2DAAc,CAAA;AAChB,CAAC,EAnBW,YAAY,KAAZ,YAAY,QAmBvB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,aAAa,CACpE,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eAaX;AAbD,WAAY,eAAe;IACzB;;OAEG;IACH,uGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,2DAAW,CAAA;AACb,CAAC,EAbW,eAAe,KAAf,eAAe,QAa1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,CAAN,IAAY,eA4MX;AA5MD,WAAY,eAAe;IACzB;;;;OAIG;IACH,+FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qFAAwB,CAAA;IAExB;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,8EAAqB,CAAA;IAErB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,gEAAc,CAAA;IAEd;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;;;;;;;;OAWG;IACH,sEAAiB,CAAA;IAEjB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,0EAAmB,CAAA;IAEnB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,wEAAkB,CAAA;IAElB;;;;;OAKG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,kFAAuB,CAAA;IAEvB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,4DAAY,CAAA;AACd,CAAC,EA5MW,eAAe,KAAf,eAAe,QA4M1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAwD,aAAa,CACzF,OAAO,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/platformclient/v1/command_connect.d.ts

@@ -26,6 +26,10 @@ export declare const PlatformClientCommandController: {
          * The creator's organization owns the platform client. The creator is granted
          * the owner role automatically.
          *
+         * The slug `system-share-client` is platform-reserved (it identifies the org's
+         * system-managed share client) and is rejected with INVALID_ARGUMENT — including
+         * when derived from the resource name.
+         *
          * @internal
          * Authorization: Requires can_create_platform_client permission in the organization.
          *

package/ai/stigmer/iam/platformclient/v1/command_connect.js

@@ -34,6 +34,10 @@ export const PlatformClientCommandController = {
          * The creator's organization owns the platform client. The creator is granted
          * the owner role automatically.
          *
+         * The slug `system-share-client` is platform-reserved (it identifies the org's
+         * system-managed share client) and is rejected with INVALID_ARGUMENT — including
+         * when derived from the resource name.
+         *
          * @internal
          * Authorization: Requires can_create_platform_client permission in the organization.
          *

package/ai/stigmer/iam/platformclient/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;WAkBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/iam/platformclient/v1/command_pb.d.ts

@@ -32,6 +32,10 @@ export declare const PlatformClientCommandController: GenService<{
      * The creator's organization owns the platform client. The creator is granted
      * the owner role automatically.
      *
+     * The slug `system-share-client` is platform-reserved (it identifies the org's
+     * system-managed share client) and is rejected with INVALID_ARGUMENT — including
+     * when derived from the resource name.
+     *
      * @internal
      * Authorization: Requires can_create_platform_client permission in the organization.
      *

package/ai/stigmer/iam/platformclient/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAEtE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,yqCAAyqC,EAAE,CAAC,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,EAAE,yCAAyC,EAAE,wCAAwC,CAAC,CAAC,CAAC;AAE15C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GA0EvC,aAAa,CAChB,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAEtE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,yqCAAyqC,EAAE,CAAC,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,EAAE,yCAAyC,EAAE,wCAAwC,CAAC,CAAC,CAAC;AAE15C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GA8EvC,aAAa,CAChB,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/v1/enum_pb.d.ts

@@ -195,30 +195,6 @@ export declare enum IamPermission {
      * @generated from enum value: can_manage_model_pricing = 32;
      */
     can_manage_model_pricing = 32,
-    /**
-     * Resource-level permission to reach a datastore's record RPCs.
-     *
-     * @internal
-     * Layer 1 of the datastore's two-layer authorization model: gates
-     * "may this principal touch this datastore's records at all" for
-     * direct platform principals (console, CLI, SDK, workflow executions).
-     * Checked in-handler via RequestAuthorizationService — the record RPCs
-     * are slug-addressed and carry is_skip_authorization, so the
-     * declarative interceptor never runs for them. Session-bound runner
-     * credentials do NOT pass through this permission — they take the
-     * usage-edge reach chain (agent's datastore_usages + org match) in
-     * domain logic. Layer 2 (role/verb/scope grants) always runs in
-     * datastore domain logic in both editions.
-     *
-     * @generated from enum value: can_use_records = 33;
-     */
-    can_use_records = 33,
-    /**
-     * Organization-level permission to create datastores.
-     *
-     * @generated from enum value: can_create_datastore = 34;
-     */
-    can_create_datastore = 34,
     /**
      * Platform-level permission to manage Cursor accounts: the managed
      * Cursor teams (admin keys, member execution keys, org assignments)
@@ -242,7 +218,19 @@ export declare enum IamPermission {
      *
      * @generated from enum value: can_participate = 36;
      */
-    can_participate = 36
+    can_participate = 36,
+    /**
+     * Platform-level permission to introduce or change labels in the
+     * reserved stigmer.ai/* key namespace through client-facing write
+     * boundaries. Gated to platform operators (the seeding machine
+     * account): reserved labels carry platform semantics — most
+     * critically stigmer.ai/default-agent, which selects the platform
+     * default agent served to every organization — so ordinary requests
+     * may echo or remove them but never write them (cloud#320).
+     *
+     * @generated from enum value: can_write_reserved_labels = 37;
+     */
+    can_write_reserved_labels = 37
 }
 /**
  * Describes the enum ai.stigmer.iam.v1.IamPermission.