@stigmer/protos 3.12.2 → 3.12.4

package/ai/stigmer/agentic/agentinstance/v1/command_connect.d.ts

@@ -9,10 +9,6 @@ export declare const AgentInstanceCommandController: {
         /**
          * Create or update an agent instance.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on whether the agent instance
-         * is going to be created or updated which is determined as part of the request execution.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.apply
          */
         readonly apply: {
@@ -27,12 +23,6 @@ export declare const AgentInstanceCommandController: {
          * Public agents allow any authenticated user to create instances (cross-org allowed).
          * Private agents restrict instance creation to org members and the agent owner.
          *
-         * @internal
-         * Provide organization_id in metadata.org, and complete spec with configuration and secrets.
-         * Authorization: FGA can_create_instance on parent agent (handler-level).
-         * FGA is the single source of truth — no hardcoded org-matching rules.
-         * Agents are blueprints with zero secrets; instances are personal resources in the caller's org.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */
         readonly create: {
@@ -44,19 +34,6 @@ export declare const AgentInstanceCommandController: {
         /**
          * Update an existing agent instance.
          *
-         * @internal
-         * Replaces the entire instance configuration including metadata, spec, and secrets.
-         * No individual field updates — always provide complete state.
-         *
-         * Mutable fields:
-         * - spec.description, spec.environment_refs
-         * - metadata.name, metadata.labels, metadata.tags, metadata.annotations
-         *
-         * Immutable fields (must delete and recreate to change):
-         * - spec.agent_id, metadata.id, metadata.org
-         *
-         * Authorization: Only owner can update (can_edit permission).
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.update
          */
         readonly update: {
@@ -76,14 +53,6 @@ export declare const AgentInstanceCommandController: {
          * executions against this instance. Sessions remain personal regardless of
          * instance visibility (conversation privacy is preserved).
          *
-         * @internal
-         * Authorization: Requires can_edit permission on the agent instance.
-         * Visibility transitions trigger FGA tuple management in Cloud mode:
-         * - PRIVATE → ORG: creates agent_instance#viewer@organization:<org>#member
-         * - PRIVATE → PUBLIC: creates agent_instance#viewer@identity_account:*
-         * - ORG → PRIVATE: deletes the org member viewer tuple
-         * - PUBLIC → PRIVATE: deletes the wildcard viewer tuple
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.updateVisibility
          */
         readonly updateVisibility: {
@@ -95,9 +64,6 @@ export declare const AgentInstanceCommandController: {
         /**
          * Delete an agent instance.
          *
-         * @internal
-         * Authorization: Only owner can delete (can_delete permission).
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.delete
          */
         readonly delete: {

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js

@@ -17,10 +17,6 @@ export const AgentInstanceCommandController = {
         /**
          * Create or update an agent instance.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on whether the agent instance
-         * is going to be created or updated which is determined as part of the request execution.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.apply
          */
         apply: {
@@ -35,12 +31,6 @@ export const AgentInstanceCommandController = {
          * Public agents allow any authenticated user to create instances (cross-org allowed).
          * Private agents restrict instance creation to org members and the agent owner.
          *
-         * @internal
-         * Provide organization_id in metadata.org, and complete spec with configuration and secrets.
-         * Authorization: FGA can_create_instance on parent agent (handler-level).
-         * FGA is the single source of truth — no hardcoded org-matching rules.
-         * Agents are blueprints with zero secrets; instances are personal resources in the caller's org.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */
         create: {
@@ -52,19 +42,6 @@ export const AgentInstanceCommandController = {
         /**
          * Update an existing agent instance.
          *
-         * @internal
-         * Replaces the entire instance configuration including metadata, spec, and secrets.
-         * No individual field updates — always provide complete state.
-         *
-         * Mutable fields:
-         * - spec.description, spec.environment_refs
-         * - metadata.name, metadata.labels, metadata.tags, metadata.annotations
-         *
-         * Immutable fields (must delete and recreate to change):
-         * - spec.agent_id, metadata.id, metadata.org
-         *
-         * Authorization: Only owner can update (can_edit permission).
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.update
          */
         update: {
@@ -84,14 +61,6 @@ export const AgentInstanceCommandController = {
          * executions against this instance. Sessions remain personal regardless of
          * instance visibility (conversation privacy is preserved).
          *
-         * @internal
-         * Authorization: Requires can_edit permission on the agent instance.
-         * Visibility transitions trigger FGA tuple management in Cloud mode:
-         * - PRIVATE → ORG: creates agent_instance#viewer@organization:<org>#member
-         * - PRIVATE → PUBLIC: creates agent_instance#viewer@identity_account:*
-         * - ORG → PRIVATE: deletes the org member viewer tuple
-         * - PUBLIC → PRIVATE: deletes the wildcard viewer tuple
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.updateVisibility
          */
         updateVisibility: {
@@ -103,9 +72,6 @@ export const AgentInstanceCommandController = {
         /**
          * Delete an agent instance.
          *
-         * @internal
-         * Authorization: Only owner can delete (can_delete permission).
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.delete
          */
         delete: {

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_pb.d.ts

@@ -15,10 +15,6 @@ export declare const AgentInstanceCommandController: GenService<{
     /**
      * Create or update an agent instance.
      *
-     * @internal
-     * The authorization and state-operation are determined depending on whether the agent instance
-     * is going to be created or updated which is determined as part of the request execution.
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.apply
      */
     apply: {
@@ -32,12 +28,6 @@ export declare const AgentInstanceCommandController: GenService<{
      * Public agents allow any authenticated user to create instances (cross-org allowed).
      * Private agents restrict instance creation to org members and the agent owner.
      *
-     * @internal
-     * Provide organization_id in metadata.org, and complete spec with configuration and secrets.
-     * Authorization: FGA can_create_instance on parent agent (handler-level).
-     * FGA is the single source of truth — no hardcoded org-matching rules.
-     * Agents are blueprints with zero secrets; instances are personal resources in the caller's org.
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
      */
     create: {
@@ -48,19 +38,6 @@ export declare const AgentInstanceCommandController: GenService<{
     /**
      * Update an existing agent instance.
      *
-     * @internal
-     * Replaces the entire instance configuration including metadata, spec, and secrets.
-     * No individual field updates — always provide complete state.
-     *
-     * Mutable fields:
-     * - spec.description, spec.environment_refs
-     * - metadata.name, metadata.labels, metadata.tags, metadata.annotations
-     *
-     * Immutable fields (must delete and recreate to change):
-     * - spec.agent_id, metadata.id, metadata.org
-     *
-     * Authorization: Only owner can update (can_edit permission).
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.update
      */
     update: {
@@ -79,14 +56,6 @@ export declare const AgentInstanceCommandController: GenService<{
      * executions against this instance. Sessions remain personal regardless of
      * instance visibility (conversation privacy is preserved).
      *
-     * @internal
-     * Authorization: Requires can_edit permission on the agent instance.
-     * Visibility transitions trigger FGA tuple management in Cloud mode:
-     * - PRIVATE → ORG: creates agent_instance#viewer@organization:<org>#member
-     * - PRIVATE → PUBLIC: creates agent_instance#viewer@identity_account:*
-     * - ORG → PRIVATE: deletes the org member viewer tuple
-     * - PUBLIC → PRIVATE: deletes the wildcard viewer tuple
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.updateVisibility
      */
     updateVisibility: {
@@ -97,9 +66,6 @@ export declare const AgentInstanceCommandController: GenService<{
     /**
      * Delete an agent instance.
      *
-     * @internal
-     * Authorization: Only owner can delete (can_delete permission).
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.delete
      */
     delete: {

package/ai/stigmer/agentic/agentinstance/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8sCAA8sC,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr8C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAgGtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8sCAA8sC,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr8C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GA8DtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/io_pb.d.ts

@@ -50,12 +50,6 @@ export type GetAgentInstancesByAgentRequest = Message<"ai.stigmer.agentic.agenti
      * only by the caller's view permissions, which for a member of several
      * organizations spans all of them.
      *
-     * @internal
-     * Optional by design: the OSS server resolves an agent's default instance
-     * through this RPC with no org (downstream/agentinstance client), and
-     * pre-existing callers rely on the permission-bounded behavior. Filtering
-     * happens in the query/list step of each edition's handler.
-     *
      * @generated from field: string org = 3;
      */
     org: string;
@@ -104,9 +98,6 @@ export type ListAgentInstancesRequest = Message<"ai.stigmer.agentic.agentinstanc
     /**
      * Filter by metadata labels. AND semantics: all labels must match.
      *
-     * @internal
-     * Example: {"stigmer.ai/personal": "true"} returns only personal agent instances.
-     *
      * @generated from field: map<string, string> labels = 2;
      */
     labels: {

package/ai/stigmer/agentic/agentinstance/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,ozBAAozB,EAAE,CAAC,4CAA4C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgBr7B;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAyC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAuB9D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAiC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,ozBAAozB,EAAE,CAAC,4CAA4C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgBr7B;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAmC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAuB9D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/query_connect.d.ts

@@ -21,10 +21,6 @@ export declare const AgentInstanceQueryController: {
          * Get all instances of a specific agent template.
          * Returns only instances the caller has access to.
          *
-         * @internal
-         * Authorization is handled in handler via FGA query for authorized agent_instance_ids,
-         * then filtered by agent_id.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceQueryController.getByAgent
          */
         readonly getByAgent: {
@@ -36,9 +32,6 @@ export declare const AgentInstanceQueryController: {
         /**
          * Get an agent instance by its organization-scoped reference (org/slug).
          *
-         * @internal
-         * Custom authorization in handler.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceQueryController.getByReference
          */
         readonly getByReference: {
@@ -50,10 +43,6 @@ export declare const AgentInstanceQueryController: {
         /**
          * List agent instances with optional label filtering.
          *
-         * @internal
-         * Authorization is handled in-handler via FGA-filtered queries (cloud)
-         * or unrestricted store queries (OSS).
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceQueryController.list
          */
         readonly list: {

package/ai/stigmer/agentic/agentinstance/v1/query_connect.js

@@ -29,10 +29,6 @@ export const AgentInstanceQueryController = {
          * Get all instances of a specific agent template.
          * Returns only instances the caller has access to.
          *
-         * @internal
-         * Authorization is handled in handler via FGA query for authorized agent_instance_ids,
-         * then filtered by agent_id.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceQueryController.getByAgent
          */
         getByAgent: {
@@ -44,9 +40,6 @@ export const AgentInstanceQueryController = {
         /**
          * Get an agent instance by its organization-scoped reference (org/slug).
          *
-         * @internal
-         * Custom authorization in handler.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceQueryController.getByReference
          */
         getByReference: {
@@ -58,10 +51,6 @@ export const AgentInstanceQueryController = {
         /**
          * List agent instances with optional label filtering.
          *
-         * @internal
-         * Authorization is handled in-handler via FGA-filtered queries (cloud)
-         * or unrestricted store queries (OSS).
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceQueryController.list
          */
         list: {

package/ai/stigmer/agentic/agentinstance/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,oIAAoI;AACpI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAC3H,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,+BAA+B;YAClC,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,oIAAoI;AACpI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAC3H,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,+BAA+B;YAClC,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/query_pb.d.ts

@@ -26,10 +26,6 @@ export declare const AgentInstanceQueryController: GenService<{
      * Get all instances of a specific agent template.
      * Returns only instances the caller has access to.
      *
-     * @internal
-     * Authorization is handled in handler via FGA query for authorized agent_instance_ids,
-     * then filtered by agent_id.
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceQueryController.getByAgent
      */
     getByAgent: {
@@ -40,9 +36,6 @@ export declare const AgentInstanceQueryController: GenService<{
     /**
      * Get an agent instance by its organization-scoped reference (org/slug).
      *
-     * @internal
-     * Custom authorization in handler.
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceQueryController.getByReference
      */
     getByReference: {
@@ -53,10 +46,6 @@ export declare const AgentInstanceQueryController: GenService<{
     /**
      * List agent instances with optional label filtering.
      *
-     * @internal
-     * Authorization is handled in-handler via FGA-filtered queries (cloud)
-     * or unrestricted store queries (OSS).
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceQueryController.list
      */
     list: {

package/ai/stigmer/agentic/agentinstance/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,y7BAAy7B,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEhrC;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAqDpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,y7BAAy7B,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEhrC;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GA0CpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/spec_pb.d.ts

@@ -8,10 +8,6 @@ export declare const file_ai_stigmer_agentic_agentinstance_v1_spec: GenFile;
 /**
  * AgentInstanceSpec defines the configurable properties of an agent instance.
  *
- * @internal
- * This is the "Instance" layer — stateful configuration with secrets.
- * The overview.md file provides the SDK-facing description and example YAML.
- *
  * @generated from message ai.stigmer.agentic.agentinstance.v1.AgentInstanceSpec
  */
 export type AgentInstanceSpec = Message<"ai.stigmer.agentic.agentinstance.v1.AgentInstanceSpec"> & {
@@ -30,11 +26,6 @@ export type AgentInstanceSpec = Message<"ai.stigmer.agentic.agentinstance.v1.Age
     /**
      * References to Environment resources providing secrets and configuration at runtime.
      *
-     * @internal
-     * Environments are merged in order: later environments override earlier ones.
-     * Example: [base-env, aws-prod-env, github-team-env]
-     * This allows layering of configurations (base → specific overrides).
-     *
      * @generated from field: repeated ai.stigmer.commons.apiresource.ApiResourceReference environment_refs = 3;
      */
     environmentRefs: ApiResourceReference[];

package/ai/stigmer/agentic/agentinstance/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,8gBAA8gB,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuCppB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,8gBAA8gB,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA8BppB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/api_pb.d.ts

@@ -18,12 +18,6 @@ export declare const file_ai_stigmer_agentic_agentshare_v1_api: GenFile;
  * configuration. The referenced agent is never modified by share
  * operations.
  *
- * @internal
- * Promoted from Agent.spec.sharing (decision 011): sharing is channel
- * configuration with its own writer, lifecycle, and — in Phase B — its own
- * billing org per channel. metadata.slug appears in the hosted chat URL,
- * defaults to the referenced agent's slug, and is unique per org.
- *
  * @generated from message ai.stigmer.agentic.agentshare.v1.AgentShare
  */
 export type AgentShare = Message<"ai.stigmer.agentic.agentshare.v1.AgentShare"> & {

package/ai/stigmer/agentic/agentshare/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,4CAA4C,EAAE,MAAM,gBAAgB,CAAC;AAE9E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,khBAAkhB,EAAE,CAAC,0CAA0C,EAAE,4CAA4C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA+DrsB;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,4CAA4C,EAAE,MAAM,gBAAgB,CAAC;AAE9E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,khBAAkhB,EAAE,CAAC,0CAA0C,EAAE,4CAA4C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAyDrsB;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/command_connect.d.ts

@@ -9,12 +9,6 @@ export declare const AgentShareCommandController: {
         /**
          * Create or update an agent share.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on
-         * whether the share is going to be created or updated, which is resolved
-         * as part of the request execution. The share slug defaults to the
-         * referenced agent's slug when omitted.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.apply
          */
         readonly apply: {
@@ -29,16 +23,6 @@ export declare const AgentShareCommandController: {
          * Enabling a share is a billing-affecting decision: conversations over
          * the hosted link consume the sharing organization's credits.
          *
-         * @internal
-         * Authorization: requires can_edit on the REFERENCED AGENT
-         * (spec.agent_ref), checked in-handler — the same bar as the former
-         * updateSharing RPC, since creating a channel broadens who can chat with
-         * the agent runtime. The standard org-scoped create tuples (owner =
-         * creator) are written for the share itself; no visibility tuples are
-         * written for visitors (guest admission is app-level by design — see
-         * AgentShareSpec). Phase A invariant enforced here: metadata.org must
-         * equal spec.agent_ref.org.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.create
          */
         readonly create: {
@@ -54,11 +38,6 @@ export declare const AgentShareCommandController: {
          * share to public, and one that omits environment_refs unbinds them
          * (fails closed). The slug and referenced agent are immutable.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the agent share.
-         * status.share_link_token is preserved verbatim (rotateShareLink is its
-         * sole writer).
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.update
          */
         readonly update: {
@@ -80,12 +59,6 @@ export declare const AgentShareCommandController: {
          * reset it. Rotation affects public-audience shares only; org-audience
          * access is governed by live org membership instead.
          *
-         * @internal
-         * Authorization: requires can_edit on the agent share — the same bar as
-         * update, since both control shared-link access. The handler is the sole
-         * writer of status.share_link_token (server-generated entropy; clients
-         * never supply the token).
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.rotateShareLink
          */
         readonly rotateShareLink: {
@@ -103,10 +76,6 @@ export declare const AgentShareCommandController: {
          * while keeping configuration, update the share with enabled=false
          * instead.
          *
-         * @internal
-         * Authorization: requires can_delete permission on the agent share. The
-         * referenced agent is untouched.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.delete
          */
         readonly delete: {

package/ai/stigmer/agentic/agentshare/v1/command_connect.js

@@ -16,12 +16,6 @@ export const AgentShareCommandController = {
         /**
          * Create or update an agent share.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on
-         * whether the share is going to be created or updated, which is resolved
-         * as part of the request execution. The share slug defaults to the
-         * referenced agent's slug when omitted.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.apply
          */
         apply: {
@@ -36,16 +30,6 @@ export const AgentShareCommandController = {
          * Enabling a share is a billing-affecting decision: conversations over
          * the hosted link consume the sharing organization's credits.
          *
-         * @internal
-         * Authorization: requires can_edit on the REFERENCED AGENT
-         * (spec.agent_ref), checked in-handler — the same bar as the former
-         * updateSharing RPC, since creating a channel broadens who can chat with
-         * the agent runtime. The standard org-scoped create tuples (owner =
-         * creator) are written for the share itself; no visibility tuples are
-         * written for visitors (guest admission is app-level by design — see
-         * AgentShareSpec). Phase A invariant enforced here: metadata.org must
-         * equal spec.agent_ref.org.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.create
          */
         create: {
@@ -61,11 +45,6 @@ export const AgentShareCommandController = {
          * share to public, and one that omits environment_refs unbinds them
          * (fails closed). The slug and referenced agent are immutable.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the agent share.
-         * status.share_link_token is preserved verbatim (rotateShareLink is its
-         * sole writer).
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.update
          */
         update: {
@@ -87,12 +66,6 @@ export const AgentShareCommandController = {
          * reset it. Rotation affects public-audience shares only; org-audience
          * access is governed by live org membership instead.
          *
-         * @internal
-         * Authorization: requires can_edit on the agent share — the same bar as
-         * update, since both control shared-link access. The handler is the sole
-         * writer of status.share_link_token (server-generated entropy; clients
-         * never supply the token).
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.rotateShareLink
          */
         rotateShareLink: {
@@ -110,10 +83,6 @@ export const AgentShareCommandController = {
          * while keeping configuration, update the share with enabled=false
          * instead.
          *
-         * @internal
-         * Authorization: requires can_delete permission on the agent share. The
-         * referenced agent is untouched.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.delete
          */
         delete: {

package/ai/stigmer/agentic/agentshare/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,8DAA8D;IACxE,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,8DAA8D;IACxE,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/command_pb.d.ts

@@ -14,12 +14,6 @@ export declare const AgentShareCommandController: GenService<{
     /**
      * Create or update an agent share.
      *
-     * @internal
-     * The authorization and state-operation are determined depending on
-     * whether the share is going to be created or updated, which is resolved
-     * as part of the request execution. The share slug defaults to the
-     * referenced agent's slug when omitted.
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.apply
      */
     apply: {
@@ -33,16 +27,6 @@ export declare const AgentShareCommandController: GenService<{
      * Enabling a share is a billing-affecting decision: conversations over
      * the hosted link consume the sharing organization's credits.
      *
-     * @internal
-     * Authorization: requires can_edit on the REFERENCED AGENT
-     * (spec.agent_ref), checked in-handler — the same bar as the former
-     * updateSharing RPC, since creating a channel broadens who can chat with
-     * the agent runtime. The standard org-scoped create tuples (owner =
-     * creator) are written for the share itself; no visibility tuples are
-     * written for visitors (guest admission is app-level by design — see
-     * AgentShareSpec). Phase A invariant enforced here: metadata.org must
-     * equal spec.agent_ref.org.
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.create
      */
     create: {
@@ -57,11 +41,6 @@ export declare const AgentShareCommandController: GenService<{
      * share to public, and one that omits environment_refs unbinds them
      * (fails closed). The slug and referenced agent are immutable.
      *
-     * @internal
-     * Authorization: requires can_edit permission on the agent share.
-     * status.share_link_token is preserved verbatim (rotateShareLink is its
-     * sole writer).
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.update
      */
     update: {
@@ -82,12 +61,6 @@ export declare const AgentShareCommandController: GenService<{
      * reset it. Rotation affects public-audience shares only; org-audience
      * access is governed by live org membership instead.
      *
-     * @internal
-     * Authorization: requires can_edit on the agent share — the same bar as
-     * update, since both control shared-link access. The handler is the sole
-     * writer of status.share_link_token (server-generated entropy; clients
-     * never supply the token).
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.rotateShareLink
      */
     rotateShareLink: {
@@ -104,10 +77,6 @@ export declare const AgentShareCommandController: GenService<{
      * while keeping configuration, update the share with enabled=false
      * instead.
      *
-     * @internal
-     * Authorization: requires can_delete permission on the agent share. The
-     * referenced agent is untouched.
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareCommandController.delete
      */
     delete: {

package/ai/stigmer/agentic/agentshare/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,smCAAsmC,EAAE,CAAC,yCAAyC,EAAE,wCAAwC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE/yC;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAyGnC,aAAa,CAChB,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,smCAAsmC,EAAE,CAAC,yCAAyC,EAAE,wCAAwC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE/yC;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GA0EnC,aAAa,CAChB,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/io_pb.d.ts

@@ -50,12 +50,6 @@ export type GetAgentSharesByAgentRequest = Message<"ai.stigmer.agentic.agentshar
      * only by the caller's view permissions, which for a member of several
      * organizations spans all of them.
      *
-     * @internal
-     * Optional by design: the field must stay empty-tolerant because
-     * pre-existing callers (and cross-org administrative flows) rely on the
-     * permission-bounded behavior. Filtering happens in the query/list step
-     * of each edition's handler, never client-side.
-     *
      * @generated from field: string org = 3;
      */
     org: string;
@@ -149,12 +143,6 @@ export declare const RotateShareLinkInputSchema: GenMessage<RotateShareLinkInput
  * Identifies the share by the org and slug from the hosted chat URL, plus
  * the link token when the share URL carries one.
  *
- * @internal
- * org emptiness is validated in the handler (INVALID_ARGUMENT) rather than
- * the proto to keep the anonymous path's existing error contract: org+slug
- * is the shared URL's identity, and cross-org slug matching on a public
- * endpoint would enable enumeration.
- *
  * @generated from message ai.stigmer.agentic.agentshare.v1.GetSharedProfileRequest
  */
 export type GetSharedProfileRequest = Message<"ai.stigmer.agentic.agentshare.v1.GetSharedProfileRequest"> & {