@stigmer/protos 3.12.0 → 3.12.2

package/ai/stigmer/agentic/agent/v1/api_pb.d.ts

@@ -11,7 +11,6 @@ export declare const file_ai_stigmer_agentic_agent_v1_api: GenFile;
  * Agent defines an AI assistant's identity, tools, skills, and delegation model.
  *
  * @internal
- * Uses Graphton configuration for state management.
  *
  * @generated from message ai.stigmer.agentic.agent.v1.Agent
  */

package/ai/stigmer/agentic/agent/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kHAAkH;AAClH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,EAAE,uCAAuC,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAY,aAAa,CACxE,QAAQ,CAAC,6dAA6d,EAAE,CAAC,qCAAqC,EAAE,uCAAuC,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA+CtoB;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB,aAAa,CACzD,WAAW,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kHAAkH;AAClH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,EAAE,uCAAuC,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAY,aAAa,CACxE,QAAQ,CAAC,6dAA6d,EAAE,CAAC,qCAAqC,EAAE,uCAAuC,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA8CtoB;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB,aAAa,CACzD,WAAW,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agent/v1/spec_pb.d.ts

@@ -158,16 +158,24 @@ export type McpServerUsage = Message<"ai.stigmer.agentic.agent.v1.McpServerUsage
      * Only names from discovered_capabilities.tools are valid here.
      * Do NOT include names from discovered_capabilities.resource_templates —
      * resource templates are read-only data endpoints, not callable tools.
-     * A name the server does not expose (including a resource template name)
-     * is warned and ignored at execution: the runner enforces the INTERSECTION
-     * with the server's live toolset, so a stale or mistyped entry narrows the
-     * toolset but never widens it or fails the run.
      *
-     * Enforcement: the native (deep-agent) harness filters the discovered
-     * toolset before it reaches the model; the Cursor harness cannot hide a
-     * server's tools (its SDK config has no allow-list field), so its HITL
-     * hook permanently denies calls to non-enabled tools instead — the model
-     * may still see the tool listed, but every call is refused.
+     * Enforcement is two-layered:
+     *   - Apply time: agent create/update/apply rejects (INVALID_ARGUMENT) any
+     *     name the referenced server's discovered_capabilities.tools does not
+     *     contain, with the valid names in the error. The check is skipped when
+     *     the server has no discovered capabilities yet (never connected) —
+     *     there is nothing authoritative to validate against in that window.
+     *   - Execution time: the runner enforces the INTERSECTION with the
+     *     server's live toolset — an unknown name (possible when the manifest
+     *     was applied before the server's first connect, or when the toolset
+     *     changed since) is warned in the runner log and ignored, so a stale
+     *     entry narrows the toolset but never widens it or fails the run.
+     *
+     * Per-harness runtime enforcement: the native (deep-agent) harness filters
+     * the discovered toolset before it reaches the model; the Cursor harness
+     * cannot hide a server's tools (its SDK config has no allow-list field),
+     * so its HITL hook permanently denies calls to non-enabled tools instead —
+     * the model may still see the tool listed, but every call is refused.
      *
      * @generated from field: repeated string enabled_tools = 2;
      */

package/ai/stigmer/agentic/agent/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,8/DAA8/D,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkEjrE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA4DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,8/DAA8/D,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkEjrE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA8DxD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoExD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AA+BxD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAoDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/api_pb.d.ts

@@ -1,7 +1,7 @@
 import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
 import type { ApprovalEventStream, PendingApproval } from "./approval_pb.js";
 import type { ExecutionArtifact } from "./artifact_pb.js";
-import type { ContextInfo, ResolvedExecutionContext } from "./context_pb.js";
+import type { ContextInfo } from "./context_pb.js";
 import type { ExecutionPhase } from "./enum_pb.js";
 import type { FileChangeProgress, FileChangeSet, FileReviewEventStream } from "./filereview_pb.js";
 import type { AgentMessage } from "./message_pb.js";
@@ -145,14 +145,14 @@ export type AgentExecutionStatus = Message<"ai.stigmer.agentic.agentexecution.v1
      * @internal
      *
      * When this AgentExecution is triggered from a Temporal activity, the
-     * calling activity passes its task token here. The agent-runner completes
+     * calling activity passes its task token here. The runner completes
      * the external activity when the execution finishes.
      *
      * Token Handshake Pattern:
      * 1. External activity extracts token and stores in AgentExecution.status
      * 2. Activity returns activity.ErrResultPending (paused, thread freed)
      * 3. Agent executes (seconds to minutes)
-     * 4. On completion: agent-runner completes external activity via token
+     * 4. On completion: the runner completes the external activity via token
      *
      * Why in Status (not Spec):
      * - System-generated by Temporal, not user-provided
@@ -166,14 +166,6 @@ export type AgentExecutionStatus = Message<"ai.stigmer.agentic.agentexecution.v1
      * @generated from field: bytes callback_token = 10;
      */
     callbackToken: Uint8Array;
-    /**
-     * Resolved execution context showing what resources the agent had access to.
-     * Populated once before streaming begins, after all resources are resolved.
-     * Immutable after initial population - represents the "snapshot" of resolved state.
-     *
-     * @generated from field: ai.stigmer.agentic.agentexecution.v1.ResolvedExecutionContext resolved_context = 12;
-     */
-    resolvedContext?: ResolvedExecutionContext;
     /**
      * Active pending approval requests for this execution.
      *
@@ -194,7 +186,7 @@ export type AgentExecutionStatus = Message<"ai.stigmer.agentic.agentexecution.v1
      * state machine, no merge logic, no forward-only enforcement needed.
      *
      * Lifecycle:
-     * 1. Agent-runner sets ToolCall.status = WAITING_APPROVAL on the message
+     * 1. The runner sets ToolCall.status = WAITING_APPROVAL on the message
      * 2. UpdateStatus handler recomputes this field, entry appears
      * 3. Phase changes to EXECUTION_WAITING_FOR_APPROVAL
      * 4. User submits decisions via SubmitApproval RPC (one per tool call)
@@ -231,7 +223,7 @@ export type AgentExecutionStatus = Message<"ai.stigmer.agentic.agentexecution.v1
      * the same operation that records the decision on the message scan) can never
      * be duplicated or overwritten by a coarse re-derivation.
      *
-     * Because it is server-only, the agent-runner never sends it; it is preserved
+     * Because it is server-only, the runner never sends it; it is preserved
      * across UpdateStatus writes automatically (the merge starts from the loaded
      * execution and only replaces runner-owned fields).
      *
@@ -293,7 +285,7 @@ export type AgentExecutionStatus = Message<"ai.stigmer.agentic.agentexecution.v1
      */
     workspaceWriteBacks: WorkspaceWriteBack[];
     /**
-     * Real-time setup progress reported by the agent-runner during EXECUTION_PENDING.
+     * Real-time setup progress reported by the runner during EXECUTION_PENDING.
      * Populated progressively as the worker completes setup steps (sandbox init,
      * workspace provisioning, skill loading, MCP server connection, etc.).
      * Only meaningful while phase == EXECUTION_PENDING. Cleared by the server

package/ai/stigmer/agentic/agentexecution/v1/api_pb.js

@@ -20,7 +20,7 @@ import { file_google_protobuf_struct } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/api.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_api = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_approval, file_ai_stigmer_agentic_agentexecution_v1_artifact, file_ai_stigmer_agentic_agentexecution_v1_context, file_ai_stigmer_agentic_agentexecution_v1_enum, file_ai_stigmer_agentic_agentexecution_v1_filereview, file_ai_stigmer_agentic_agentexecution_v1_message, file_ai_stigmer_agentic_agentexecution_v1_spec, file_ai_stigmer_agentic_agentexecution_v1_subagent, file_ai_stigmer_agentic_agentexecution_v1_todo, file_ai_stigmer_agentic_agentexecution_v1_usage, file_ai_stigmer_agentic_agentexecution_v1_writeback, file_ai_stigmer_commons_apiresource_metadata, file_ai_stigmer_commons_apiresource_status, file_buf_validate_validate, file_google_protobuf_struct]);
+export const file_ai_stigmer_agentic_agentexecution_v1_api = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_approval, file_ai_stigmer_agentic_agentexecution_v1_artifact, file_ai_stigmer_agentic_agentexecution_v1_context, file_ai_stigmer_agentic_agentexecution_v1_enum, file_ai_stigmer_agentic_agentexecution_v1_filereview, file_ai_stigmer_agentic_agentexecution_v1_message, file_ai_stigmer_agentic_agentexecution_v1_spec, file_ai_stigmer_agentic_agentexecution_v1_subagent, file_ai_stigmer_agentic_agentexecution_v1_todo, file_ai_stigmer_agentic_agentexecution_v1_usage, file_ai_stigmer_agentic_agentexecution_v1_writeback, file_ai_stigmer_commons_apiresource_metadata, file_ai_stigmer_commons_apiresource_status, file_buf_validate_validate, file_google_protobuf_struct]);
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.AgentExecution.
  * Use `create(AgentExecutionSchema)` to create a new message.

package/ai/stigmer/agentic/agentexecution/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,iDAAiD,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,oDAAoD,EAAE,MAAM,oBAAoB,CAAC;AAE1F,OAAO,EAAE,iDAAiD,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,+CAA+C,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAE,mDAAmD,EAAE,MAAM,mBAAmB,CAAC;AAExF,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,wpFAAwpF,EAAE,CAAC,kDAAkD,EAAE,kDAAkD,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,oDAAoD,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,kDAAkD,EAAE,8CAA8C,EAAE,+CAA+C,EAAE,mDAAmD,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAoDx2G;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AA0VhE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AAuBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,iDAAiD,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,oDAAoD,EAAE,MAAM,oBAAoB,CAAC;AAE1F,OAAO,EAAE,iDAAiD,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,kDAAkD,EAAE,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,+CAA+C,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAE,mDAAmD,EAAE,MAAM,mBAAmB,CAAC;AAExF,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,gkFAAgkF,EAAE,CAAC,kDAAkD,EAAE,kDAAkD,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,oDAAoD,EAAE,iDAAiD,EAAE,8CAA8C,EAAE,kDAAkD,EAAE,8CAA8C,EAAE,+CAA+C,EAAE,mDAAmD,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAoDhxG;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AAiVhE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;AAuBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/approval_pb.d.ts

@@ -22,7 +22,7 @@ export declare const file_ai_stigmer_agentic_agentexecution_v1_approval: GenFile
  *
  * Lifecycle:
  * 1. Tool with requires_approval=true is about to execute
- * 2. Agent-runner sets ToolCall.status = WAITING_APPROVAL on the message
+ * 2. The runner sets ToolCall.status = WAITING_APPROVAL on the message
  * 3. Server recomputes pending_approvals, entry appears
  * 4. User calls SubmitApproval RPC with their decision
  * 5. Agent resumes, ToolCall.status advances, next recompute drops the entry

package/ai/stigmer/agentic/agentexecution/v1/command_connect.d.ts

@@ -43,7 +43,7 @@ export declare const AgentExecutionCommandController: {
          * Update an agent execution's status.
          *
          * @internal
-         * Used by agent-runner to send progressive status updates (messages,
+         * Used by the runner to send progressive status updates (messages,
          * tool_calls, phase, etc.). The runner authenticates as the triggering user,
          * who owns the execution through the session ownership chain.
          * Optimized for frequent status updates and merges status fields with
@@ -461,7 +461,7 @@ export declare const AgentExecutionCommandController: {
          * 1. Client calls uploadAttachment with file content
          * 2. Server uploads to storage, returns storage_key
          * 3. Client creates AgentExecution with Attachment using storage_key
-         * 4. Agent-runner downloads attachment content when execution starts
+         * 4. The runner downloads attachment content when execution starts
          *
          * @since Artifact Lifecycle (Attachments & Artifacts)
          *

package/ai/stigmer/agentic/agentexecution/v1/command_connect.js

@@ -51,7 +51,7 @@ export const AgentExecutionCommandController = {
          * Update an agent execution's status.
          *
          * @internal
-         * Used by agent-runner to send progressive status updates (messages,
+         * Used by the runner to send progressive status updates (messages,
          * tool_calls, phase, etc.). The runner authenticates as the triggering user,
          * who owns the execution through the session ownership chain.
          * Optimized for frequent status updates and merges status fields with
@@ -469,7 +469,7 @@ export const AgentExecutionCommandController = {
          * 1. Client calls uploadAttachment with file content
          * 2. Server uploads to storage, returns storage_key
          * 3. Client creates AgentExecution with Attachment using storage_key
-         * 4. Agent-runner downloads attachment content when execution starts
+         * 4. The runner downloads attachment content when execution starts
          *
          * @since Artifact Lifecycle (Attachments & Artifacts)
          *

package/ai/stigmer/agentic/agentexecution/v1/command_pb.d.ts

@@ -47,7 +47,7 @@ export declare const AgentExecutionCommandController: GenService<{
      * Update an agent execution's status.
      *
      * @internal
-     * Used by agent-runner to send progressive status updates (messages,
+     * Used by the runner to send progressive status updates (messages,
      * tool_calls, phase, etc.). The runner authenticates as the triggering user,
      * who owns the execution through the session ownership chain.
      * Optimized for frequent status updates and merges status fields with
@@ -456,7 +456,7 @@ export declare const AgentExecutionCommandController: GenService<{
      * 1. Client calls uploadAttachment with file content
      * 2. Server uploads to storage, returns storage_key
      * 3. Client creates AgentExecution with Attachment using storage_key
-     * 4. Agent-runner downloads attachment content when execution starts
+     * 4. The runner downloads attachment content when execution starts
      *
      * @since Artifact Lifecycle (Attachments & Artifacts)
      *

package/ai/stigmer/agentic/agentexecution/v1/context_pb.d.ts

@@ -5,141 +5,6 @@ import type { Message } from "@bufbuild/protobuf";
  * Describes the file ai/stigmer/agentic/agentexecution/v1/context.proto.
  */
 export declare const file_ai_stigmer_agentic_agentexecution_v1_context: GenFile;
-/**
- * ResolvedExecutionContext captures the resolved configuration state at execution time.
- * Populated once after all resources are resolved, before the agent begins processing.
- *
- * ## Purpose
- *
- * Provides visibility into what the agent actually had access to during execution:
- * - Which environment variables were available (keys only, not values for security)
- * - Which MCP servers were configured and their resolution status
- * - Which skills were injected into the agent's context
- *
- * This enables:
- * - **Debugging**: Understanding what environment/tools were available when investigating failures
- * - **Auditing**: Tracking what resources each execution consumed
- * - **Security review**: Verifying which secrets (by key name only) were exposed
- * - **UX transparency**: Showing users what their agent can access
- *
- * ## Timing
- *
- * Populated in execute_graphton.py after Steps 3-5 complete (skills, env vars, MCP servers)
- * but before the streaming loop begins. This represents the "snapshot" of resolved state.
- * Once set, this field is immutable for the remainder of the execution.
- *
- * ## Security Considerations
- *
- * - Environment values are NEVER included (only keys)
- * - MCP server credentials are not exposed
- * - This is safe to include in status responses to clients
- *
- * @generated from message ai.stigmer.agentic.agentexecution.v1.ResolvedExecutionContext
- */
-export type ResolvedExecutionContext = Message<"ai.stigmer.agentic.agentexecution.v1.ResolvedExecutionContext"> & {
-    /**
-     * Environment variable keys available to the agent (NOT values for security).
-     * Represents the merged result of: template env_spec + instance environment_refs + runtime_env.
-     * Keys are sorted alphabetically for consistent ordering and deterministic comparison.
-     * Examples: ["API_KEY", "DATABASE_URL", "LOG_LEVEL"]
-     *
-     * @generated from field: repeated string environment_keys = 1;
-     */
-    environmentKeys: string[];
-    /**
-     * MCP servers referenced by the agent and their resolution status.
-     * Key: MCP server slug (e.g., "github-mcp", "slack-mcp")
-     * Value: Resolution status including success/failure and diagnostic information
-     *
-     * Note: This tracks configuration resolution, not runtime connection status.
-     * A server showing resolved=true means it was found and transformed successfully;
-     * actual WebSocket/stdio connection happens later in the Graphton runtime.
-     *
-     * @generated from field: map<string, ai.stigmer.agentic.agentexecution.v1.McpServerResolutionStatus> mcp_servers = 2;
-     */
-    mcpServers: {
-        [key: string]: McpServerResolutionStatus;
-    };
-    /**
-     * Names of skills injected into the agent's system prompt.
-     * Each skill's SKILL.md content is appended to the instructions.
-     * Sorted alphabetically for consistent ordering and deterministic comparison.
-     * Examples: ["code-review", "docker-expert", "kubernetes-operator"]
-     *
-     * @generated from field: repeated string skill_names = 3;
-     */
-    skillNames: string[];
-    /**
-     * Skills that were available but excluded from the system prompt because
-     * they were not relevant to the current execution context.
-     * Enables visibility into the filtering decision for debugging and tuning.
-     * Sorted alphabetically for consistent ordering and deterministic comparison.
-     *
-     * When smart context filtering is active, this captures skills that were
-     * configured on the agent but scored below the relevance threshold for the
-     * current user message. Empty when all skills are included (no filtering).
-     *
-     * @generated from field: repeated string excluded_skill_names = 4;
-     */
-    excludedSkillNames: string[];
-};
-/**
- * Describes the message ai.stigmer.agentic.agentexecution.v1.ResolvedExecutionContext.
- * Use `create(ResolvedExecutionContextSchema)` to create a new message.
- */
-export declare const ResolvedExecutionContextSchema: GenMessage<ResolvedExecutionContext>;
-/**
- * McpServerResolutionStatus captures the resolution outcome for a single MCP server.
- * Provides richer information than a simple boolean for better debugging and visibility.
- *
- * ## Resolution vs Connection
- *
- * This tracks whether the MCP server definition was successfully loaded and configured,
- * NOT whether the runtime connection succeeded. Resolution includes:
- * - Looking up the McpServer resource by reference
- * - Transforming the server config (resolving env var placeholders)
- * - Determining which tools to enable
- *
- * Runtime connection (WebSocket/stdio) happens later and is not tracked here.
- *
- * @generated from message ai.stigmer.agentic.agentexecution.v1.McpServerResolutionStatus
- */
-export type McpServerResolutionStatus = Message<"ai.stigmer.agentic.agentexecution.v1.McpServerResolutionStatus"> & {
-    /**
-     * Whether the MCP server was successfully resolved and configured.
-     * true: Server found, config transformed, ready for runtime connection
-     * false: Resolution failed (server not found, missing env var, invalid config)
-     *
-     * @generated from field: bool resolved = 1;
-     */
-    resolved: boolean;
-    /**
-     * Human-readable status message explaining the resolution outcome.
-     * For success: "Configured successfully"
-     * For failure: Describes what went wrong
-     * Examples:
-     *   - "Configured successfully"
-     *   - "Server not found"
-     *   - "Missing required environment variable: GITHUB_TOKEN"
-     *   - "Invalid server configuration: missing command"
-     *
-     * @generated from field: string message = 2;
-     */
-    message: string;
-    /**
-     * Number of tools enabled from this MCP server.
-     * Reflects the intersection of server's available tools and enabled_tools config.
-     * 0 if resolution failed, server has no tools, or all tools disabled.
-     *
-     * @generated from field: int32 enabled_tool_count = 3;
-     */
-    enabledToolCount: number;
-};
-/**
- * Describes the message ai.stigmer.agentic.agentexecution.v1.McpServerResolutionStatus.
- * Use `create(McpServerResolutionStatusSchema)` to create a new message.
- */
-export declare const McpServerResolutionStatusSchema: GenMessage<McpServerResolutionStatus>;
 /**
  * SummarizationEvent records a single summarization occurrence during execution.
  *

package/ai/stigmer/agentic/agentexecution/v1/context_pb.js

@@ -6,25 +6,15 @@ import { file_ai_stigmer_agentic_agentexecution_v1_enum } from "./enum_pb.js";
 /**
  * Describes the file ai/stigmer/agentic/agentexecution/v1/context.proto.
  */
-export const file_ai_stigmer_agentic_agentexecution_v1_context = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_enum]);
-/**
- * Describes the message ai.stigmer.agentic.agentexecution.v1.ResolvedExecutionContext.
- * Use `create(ResolvedExecutionContextSchema)` to create a new message.
- */
-export const ResolvedExecutionContextSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_context, 0);
-/**
- * Describes the message ai.stigmer.agentic.agentexecution.v1.McpServerResolutionStatus.
- * Use `create(McpServerResolutionStatusSchema)` to create a new message.
- */
-export const McpServerResolutionStatusSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_context, 1);
+export const file_ai_stigmer_agentic_agentexecution_v1_context = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_agentexecution_v1_enum]);
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.SummarizationEvent.
  * Use `create(SummarizationEventSchema)` to create a new message.
  */
-export const SummarizationEventSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_context, 2);
+export const SummarizationEventSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_context, 0);
 /**
  * Describes the message ai.stigmer.agentic.agentexecution.v1.ContextInfo.
  * Use `create(ContextInfoSchema)` to create a new message.
  */
-export const ContextInfoSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_context, 3);
+export const ContextInfoSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentexecution_v1_context, 1);
 //# sourceMappingURL=context_pb.js.map

package/ai/stigmer/agentic/agentexecution/v1/context_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"context_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/context_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAG9E;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,4kDAA4kD,EAAE,CAAC,8CAA8C,CAAC,CAAC,CAAC;AAkF3oD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoDpE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AA8IpE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoIpE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"context_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/context_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAG9E;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,kiCAAkiC,EAAE,CAAC,8CAA8C,CAAC,CAAC,CAAC;AA8IjmC;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAoIpE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentexecution/v1/message_pb.d.ts

@@ -221,7 +221,7 @@ export type ToolCall = Message<"ai.stigmer.agentic.agentexecution.v1.ToolCall">
     /**
      * Sanitized preview of tool arguments for UI display.
      * Sensitive values (passwords, tokens, keys) are redacted.
-     * Populated at tool call creation time by the agent-runner.
+     * Populated at tool call creation time by the runner.
      * Used by the server-side ComputePendingApprovals projection
      * and by CLI/UI for inline argument visibility.
      *

package/ai/stigmer/agentic/agentexecution/v1/spec_pb.d.ts

@@ -100,10 +100,25 @@ export type AgentExecutionSpec = Message<"ai.stigmer.agentic.agentexecution.v1.A
     executionConfig?: ExecutionConfig;
     /**
      * Runtime environment variables and secrets (execution-scoped).
-     * These values are only available for this specific execution.
-     * Use case: B2B integrations where secrets are injected at runtime (e.g., Plant & Cloud).
-     * These values are stored in ExecutionContext and deleted when execution completes.
-     * Merge priority: Agent defaults < Environment < runtime_env (highest)
+     * These values are only available for this specific execution and take the
+     * highest merge priority, overriding values from Environments bound via
+     * environment_refs. A key must be declared in Agent.spec.env to survive the
+     * merge: the agent env map is a declaration whitelist (name + is_secret +
+     * optional), never a value source — undeclared keys are dropped.
+     * Use case: B2B integrations where secrets are injected at runtime per call.
+     * These values are consumed into the ExecutionContext (deleted when the
+     * execution completes) and cleared from the persisted execution.
+     *
+     * @internal
+     * Merge priority (lowest to highest): resolved Environment values — from the
+     * creating schedule's or agent_call task's environment_refs (when present),
+     * then the instance's environment_refs; a later ref wins — then runtime_env
+     * (this field). The merged map is filtered to the keys declared in
+     * Agent.spec.env (no filtering when the agent declares none); a missing
+     * required key only logs a warning — the run is not failed. The merge is
+     * owned by backend/libs/go/envmerge and the agentexecution controller's
+     * executionContextBuilder, and asserted by
+     * test/conformance/src/suites-execution/envmerge.conformance.test.ts.
      *
      * @generated from field: map<string, ai.stigmer.agentic.executioncontext.v1.ExecutionValue> runtime_env = 5;
      */
@@ -641,7 +656,7 @@ export declare const ContextManagementConfigSchema: GenMessage<ContextManagement
  * 1. Client calls uploadAttachment RPC with file content
  * 2. Server returns a storage_key
  * 3. Client creates execution with Attachment containing that storage_key
- * 4. Agent-runner downloads file from storage and injects into sandbox
+ * 4. The runner downloads file from storage and injects into sandbox
  *
  * ## Mount Path
  *

package/ai/stigmer/agentic/agentexecution/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,gDAAgD,EAAE,MAAM,sCAAsC,CAAC;AAExG,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,qqGAAqqG,EAAE,CAAC,8CAA8C,EAAE,gDAAgD,EAAE,uCAAuC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA8Vx5G;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA0LjE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAsGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAiGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA+CjE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentexecution/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8CAA8C,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,gDAAgD,EAAE,MAAM,sCAAsC,CAAC;AAExG,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,qqGAAqqG,EAAE,CAAC,8CAA8C,EAAE,gDAAgD,EAAE,uCAAuC,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA6Wx5G;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA0LjE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAsGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAiGjE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AA+CjE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/api_pb.d.ts

@@ -11,7 +11,6 @@ export declare const file_ai_stigmer_agentic_agentinstance_v1_api: GenFile;
  * AgentInstance defines a configured deployment of an Agent template.
  *
  * @internal
- * Uses Graphton configuration for state management.
  *
  * @generated from message ai.stigmer.agentic.agentinstance.v1.AgentInstance
  */

package/ai/stigmer/agentic/agentinstance/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,6CAA6C,EAAE,MAAM,cAAc,CAAC;AAE7E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,gjBAAgjB,EAAE,CAAC,6CAA6C,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAkDpuB;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,6CAA6C,EAAE,MAAM,cAAc,CAAC;AAE7E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,gjBAAgjB,EAAE,CAAC,6CAA6C,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAiDpuB;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_connect.d.ts

@@ -47,6 +47,14 @@ export declare const AgentInstanceCommandController: {
          * @internal
          * Replaces the entire instance configuration including metadata, spec, and secrets.
          * No individual field updates — always provide complete state.
+         *
+         * Mutable fields:
+         * - spec.description, spec.environment_refs
+         * - metadata.name, metadata.labels, metadata.tags, metadata.annotations
+         *
+         * Immutable fields (must delete and recreate to change):
+         * - spec.agent_id, metadata.id, metadata.org
+         *
          * Authorization: Only owner can update (can_edit permission).
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.update

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js

@@ -55,6 +55,14 @@ export const AgentInstanceCommandController = {
          * @internal
          * Replaces the entire instance configuration including metadata, spec, and secrets.
          * No individual field updates — always provide complete state.
+         *
+         * Mutable fields:
+         * - spec.description, spec.environment_refs
+         * - metadata.name, metadata.labels, metadata.tags, metadata.annotations
+         *
+         * Immutable fields (must delete and recreate to change):
+         * - spec.agent_id, metadata.id, metadata.org
+         *
          * Authorization: Only owner can update (can_edit permission).
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.update

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_pb.d.ts

@@ -51,6 +51,14 @@ export declare const AgentInstanceCommandController: GenService<{
      * @internal
      * Replaces the entire instance configuration including metadata, spec, and secrets.
      * No individual field updates — always provide complete state.
+     *
+     * Mutable fields:
+     * - spec.description, spec.environment_refs
+     * - metadata.name, metadata.labels, metadata.tags, metadata.annotations
+     *
+     * Immutable fields (must delete and recreate to change):
+     * - spec.agent_id, metadata.id, metadata.org
+     *
      * Authorization: Only owner can update (can_edit permission).
      *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.update

package/ai/stigmer/agentic/agentinstance/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8sCAA8sC,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr8C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAwFtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8sCAA8sC,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr8C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAgGtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/spec_pb.d.ts

@@ -99,8 +99,14 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
      * (SharedSessionBlueprintAccess) on every session/execution create — the
      * same gate that re-checks enabled, so revocation latency is identical
      * (immediate). Unframed hosted-page visitors report no origin and are
-     * exempt by construction. Exact origins only — loosening to wildcards
-     * later is a non-breaking change, tightening would not be.
+     * exempt by construction. Since stigmer-cloud#341 both gates cross-check
+     * the self-report against the request's browser-enforced Origin header
+     * (SharingRequestOriginPolicy): for direct SDK embeds the header is the
+     * authoritative origin — a lying or omitted embed_origin no longer
+     * bypasses this list — while requests from Stigmer's own hosted page
+     * keep the widget's browser-authentic self-report as the embedder
+     * signal. Exact origins only — loosening to wildcards later is a
+     * non-breaking change, tightening would not be.
      *
      * @generated from field: repeated string allowed_origins = 4;
      */

package/ai/stigmer/agentic/agentshare/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,oDAAoD,EAAE,MAAM,0CAA0C,CAAC;AAChH,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qjEAAqjE,EAAE,CAAC,oDAAoD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA6KjvE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAmC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBA0BX;AA1BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;;;OAMG;IACH,+DAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yDAAO,CAAA;AACT,CAAC,EA1BW,kBAAkB,KAAlB,kBAAkB,QA0B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,oDAAoD,EAAE,MAAM,0CAA0C,CAAC;AAChH,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qjEAAqjE,EAAE,CAAC,oDAAoD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmLjvE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAmC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBA0BX;AA1BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;;;OAMG;IACH,+DAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yDAAO,CAAA;AACT,CAAC,EA1BW,kBAAkB,KAAlB,kBAAkB,QA0B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/artifact/v1/api_pb.d.ts

@@ -15,7 +15,7 @@ export declare const file_ai_stigmer_agentic_artifact_v1_api: GenFile;
  * Follows the standard Stigmer resource pattern:
  * api_version + kind + metadata + spec + status.
  *
- * Artifacts are created by the workflow-runner or agent-runner when task
+ * Artifacts are created by the runner when task
  * outputs exceed the auto-promotion threshold or when the workflow author
  * explicitly declares an artifact (Phase 1).
  *

package/ai/stigmer/agentic/artifact/v1/command_connect.d.ts

@@ -4,7 +4,7 @@
  * @internal
  * Follows the Command-Query Separation (CQS) pattern.
  *
- * These RPCs are system-level — used by the workflow-runner and agent-runner
+ * These RPCs are system-level — used by the runner (stigmer-runner)
  * to persist task outputs. They are NOT exposed to end users or the SDK.
  *
  * Artifact creation flow:

package/ai/stigmer/agentic/artifact/v1/command_connect.js

@@ -12,7 +12,7 @@ import { ApiResourceId } from "../../../commons/apiresource/io_pbjs";
  * @internal
  * Follows the Command-Query Separation (CQS) pattern.
  *
- * These RPCs are system-level — used by the workflow-runner and agent-runner
+ * These RPCs are system-level — used by the runner (stigmer-runner)
  * to persist task outputs. They are NOT exposed to end users or the SDK.
  *
  * Artifact creation flow:

package/ai/stigmer/agentic/artifact/v1/command_pb.d.ts

@@ -12,7 +12,7 @@ export declare const file_ai_stigmer_agentic_artifact_v1_command: GenFile;
  * @internal
  * Follows the Command-Query Separation (CQS) pattern.
  *
- * These RPCs are system-level — used by the workflow-runner and agent-runner
+ * These RPCs are system-level — used by the runner (stigmer-runner)
  * to persist task outputs. They are NOT exposed to end users or the SDK.
  *
  * Artifact creation flow: