@stigmer/protos 3.12.2 → 3.12.4

package/ai/stigmer/agentic/channelapp/v1/command_connect.js

@@ -8,12 +8,6 @@ import { ApiResourceDeleteInput } from "../../../commons/apiresource/io_pbjs";
 /**
  * ChannelAppCommandController handles write operations for channel apps.
  *
- * @internal
- * ChannelApps hold provider secrets (client_secret, signing_secret) and
- * are always org-private. There is no updateVisibility RPC — public
- * visibility is intentionally unsupported to prevent credential leakage
- * (the OAuthApp posture).
- *
  * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController
  */
 export const ChannelAppCommandController = {
@@ -26,11 +20,6 @@ export const ChannelAppCommandController = {
          * If the resource exists, updates the existing channel app. Sending
          * the redaction marker for a secret field preserves the stored value.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on
-         * whether the channel app is going to be created or updated, resolved
-         * as part of request execution.
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.apply
          */
         apply: {
@@ -45,11 +34,6 @@ export const ChannelAppCommandController = {
          * The creator's organization owns the channel app. The creator is
          * granted the owner role automatically.
          *
-         * @internal
-         * Authorization: requires can_create_channel_app permission in the
-         * organization (admin-gated like can_create_oauth_app — the resource
-         * holds org-wide webhook credentials).
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.create
          */
         create: {
@@ -64,10 +48,6 @@ export const ChannelAppCommandController = {
          * Sending the redaction marker for a secret field preserves the
          * stored value; the provider arm is immutable.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the channel_app
-         * resource.
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.update
          */
         update: {
@@ -82,12 +62,6 @@ export const ChannelAppCommandController = {
          * Deletion is blocked while any AgentChannel references this app via
          * spec.app_ref — disconnect or delete those channels first.
          *
-         * @internal
-         * Authorization: requires can_delete permission on the channel_app
-         * resource. The referencing-channels block mirrors OAuthApp's
-         * referencing-mcp-servers check and fails with FAILED_PRECONDITION
-         * naming a referencing channel.
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.delete
          */
         delete: {

package/ai/stigmer/agentic/channelapp/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,8DAA8D;IACxE,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,8DAA8D;IACxE,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,UAAU;YACb,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/channelapp/v1/command_pb.d.ts

@@ -8,12 +8,6 @@ export declare const file_ai_stigmer_agentic_channelapp_v1_command: GenFile;
 /**
  * ChannelAppCommandController handles write operations for channel apps.
  *
- * @internal
- * ChannelApps hold provider secrets (client_secret, signing_secret) and
- * are always org-private. There is no updateVisibility RPC — public
- * visibility is intentionally unsupported to prevent credential leakage
- * (the OAuthApp posture).
- *
  * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController
  */
 export declare const ChannelAppCommandController: GenService<{
@@ -24,11 +18,6 @@ export declare const ChannelAppCommandController: GenService<{
      * If the resource exists, updates the existing channel app. Sending
      * the redaction marker for a secret field preserves the stored value.
      *
-     * @internal
-     * The authorization and state-operation are determined depending on
-     * whether the channel app is going to be created or updated, resolved
-     * as part of request execution.
-     *
      * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.apply
      */
     apply: {
@@ -42,11 +31,6 @@ export declare const ChannelAppCommandController: GenService<{
      * The creator's organization owns the channel app. The creator is
      * granted the owner role automatically.
      *
-     * @internal
-     * Authorization: requires can_create_channel_app permission in the
-     * organization (admin-gated like can_create_oauth_app — the resource
-     * holds org-wide webhook credentials).
-     *
      * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.create
      */
     create: {
@@ -60,10 +44,6 @@ export declare const ChannelAppCommandController: GenService<{
      * Sending the redaction marker for a secret field preserves the
      * stored value; the provider arm is immutable.
      *
-     * @internal
-     * Authorization: requires can_edit permission on the channel_app
-     * resource.
-     *
      * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.update
      */
     update: {
@@ -77,12 +57,6 @@ export declare const ChannelAppCommandController: GenService<{
      * Deletion is blocked while any AgentChannel references this app via
      * spec.app_ref — disconnect or delete those channels first.
      *
-     * @internal
-     * Authorization: requires can_delete permission on the channel_app
-     * resource. The referencing-channels block mirrors OAuthApp's
-     * referencing-mcp-servers check and fails with FAILED_PRECONDITION
-     * naming a referencing channel.
-     *
      * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController.delete
      */
     delete: {

package/ai/stigmer/agentic/channelapp/v1/command_pb.js

@@ -13,12 +13,6 @@ export const file_ai_stigmer_agentic_channelapp_v1_command = /*@__PURE__*/ fileD
 /**
  * ChannelAppCommandController handles write operations for channel apps.
  *
- * @internal
- * ChannelApps hold provider secrets (client_secret, signing_secret) and
- * are always org-private. There is no updateVisibility RPC — public
- * visibility is intentionally unsupported to prevent credential leakage
- * (the OAuthApp posture).
- *
  * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppCommandController
  */
 export const ChannelAppCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_channelapp_v1_command, 0);

package/ai/stigmer/agentic/channelapp/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,s+BAAs+B,EAAE,CAAC,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE7qC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,2BAA2B,GA0EnC,aAAa,CAChB,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,s+BAAs+B,EAAE,CAAC,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE7qC;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAsDnC,aAAa,CAChB,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/channelapp/v1/query_connect.d.ts

@@ -1,13 +1,6 @@
 /**
  * ChannelAppQueryController handles read operations for channel apps.
  *
- * @internal
- * Every response passes through secret redaction — client_secret and
- * signing_secret are replaced with the redaction marker. Runtime
- * consumers that need the real values (installer, webhook receiver)
- * read the repo directly, the documented OAuthAppResolutionService
- * exception.
- *
  * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController
  */
 export declare const ChannelAppQueryController: {
@@ -18,10 +11,6 @@ export declare const ChannelAppQueryController: {
          *
          * Secret fields are redacted in the response.
          *
-         * @internal
-         * Authorization: requires can_view permission on the channel_app
-         * resource.
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.get
          */
         readonly get: {
@@ -35,10 +24,6 @@ export declare const ChannelAppQueryController: {
          *
          * Secret fields are redacted in the response.
          *
-         * @internal
-         * Custom authorization in handler — checks both direct resource access
-         * and organization-level visibility permissions (the OAuthApp pattern).
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.getByReference
          */
         readonly getByReference: {
@@ -54,10 +39,6 @@ export declare const ChannelAppQueryController: {
          * with secret fields redacted. Typically a small set, so results are
          * not paginated.
          *
-         * @internal
-         * Authorization: requires can_view permission on the organization
-         * resource.
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.listByOrg
          */
         readonly listByOrg: {

package/ai/stigmer/agentic/channelapp/v1/query_connect.js

@@ -9,13 +9,6 @@ import { ChannelApps, ListChannelAppsByOrgInput } from "./io_pbjs";
 /**
  * ChannelAppQueryController handles read operations for channel apps.
  *
- * @internal
- * Every response passes through secret redaction — client_secret and
- * signing_secret are replaced with the redaction marker. Runtime
- * consumers that need the real values (installer, webhook receiver)
- * read the repo directly, the documented OAuthAppResolutionService
- * exception.
- *
  * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController
  */
 export const ChannelAppQueryController = {
@@ -26,10 +19,6 @@ export const ChannelAppQueryController = {
          *
          * Secret fields are redacted in the response.
          *
-         * @internal
-         * Authorization: requires can_view permission on the channel_app
-         * resource.
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.get
          */
         get: {
@@ -43,10 +32,6 @@ export const ChannelAppQueryController = {
          *
          * Secret fields are redacted in the response.
          *
-         * @internal
-         * Custom authorization in handler — checks both direct resource access
-         * and organization-level visibility permissions (the OAuthApp pattern).
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.getByReference
          */
         getByReference: {
@@ -62,10 +47,6 @@ export const ChannelAppQueryController = {
          * with secret fields redacted. Typically a small set, so results are
          * not paginated.
          *
-         * @internal
-         * Authorization: requires can_view permission on the organization
-         * resource.
-         *
          * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.listByOrg
          */
         listByOrg: {

package/ai/stigmer/agentic/channelapp/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;WAMG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/channelapp/v1/query_pb.d.ts

@@ -9,13 +9,6 @@ export declare const file_ai_stigmer_agentic_channelapp_v1_query: GenFile;
 /**
  * ChannelAppQueryController handles read operations for channel apps.
  *
- * @internal
- * Every response passes through secret redaction — client_secret and
- * signing_secret are replaced with the redaction marker. Runtime
- * consumers that need the real values (installer, webhook receiver)
- * read the repo directly, the documented OAuthAppResolutionService
- * exception.
- *
  * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController
  */
 export declare const ChannelAppQueryController: GenService<{
@@ -24,10 +17,6 @@ export declare const ChannelAppQueryController: GenService<{
      *
      * Secret fields are redacted in the response.
      *
-     * @internal
-     * Authorization: requires can_view permission on the channel_app
-     * resource.
-     *
      * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.get
      */
     get: {
@@ -40,10 +29,6 @@ export declare const ChannelAppQueryController: GenService<{
      *
      * Secret fields are redacted in the response.
      *
-     * @internal
-     * Custom authorization in handler — checks both direct resource access
-     * and organization-level visibility permissions (the OAuthApp pattern).
-     *
      * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.getByReference
      */
     getByReference: {
@@ -58,10 +43,6 @@ export declare const ChannelAppQueryController: GenService<{
      * with secret fields redacted. Typically a small set, so results are
      * not paginated.
      *
-     * @internal
-     * Authorization: requires can_view permission on the organization
-     * resource.
-     *
      * @generated from rpc ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController.listByOrg
      */
     listByOrg: {

package/ai/stigmer/agentic/channelapp/v1/query_pb.js

@@ -14,13 +14,6 @@ export const file_ai_stigmer_agentic_channelapp_v1_query = /*@__PURE__*/ fileDes
 /**
  * ChannelAppQueryController handles read operations for channel apps.
  *
- * @internal
- * Every response passes through secret redaction — client_secret and
- * signing_secret are replaced with the redaction marker. Runtime
- * consumers that need the real values (installer, webhook receiver)
- * read the repo directly, the documented OAuthAppResolutionService
- * exception.
- *
  * @generated from service ai.stigmer.agentic.channelapp.v1.ChannelAppQueryController
  */
 export const ChannelAppQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_channelapp_v1_query, 0);

package/ai/stigmer/agentic/channelapp/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,yxBAAyxB,EAAE,CAAC,yCAAyC,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1gC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAmDjC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,yxBAAyxB,EAAE,CAAC,yCAAyC,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1gC;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAuCjC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/channelapp/v1/spec_pb.d.ts

@@ -11,27 +11,12 @@ export declare const file_ai_stigmer_agentic_channelapp_v1_spec: GenFile;
  * ChannelApp always matches the provider of the channels that reference
  * it.
  *
- * @internal
- * Provider variance is config-shaped, not lifecycle-shaped — one kind,
- * a validated oneof (the AgentChannelSpec.provider_config precedent).
- * Secrets are inline spec fields encrypted at rest and redacted in every
- * response (the OAuthAppSpec.client_secret pipeline, both editions) —
- * NOT managed-environment refs: app credentials are user-authored
- * configuration entered in one motion with the resource, unlike
- * install-produced tokens (decision 004's split, amended for BYO).
- * The resource is always visibility_private; there is no updateVisibility
- * RPC.
- *
  * @generated from message ai.stigmer.agentic.channelapp.v1.ChannelAppSpec
  */
 export type ChannelAppSpec = Message<"ai.stigmer.agentic.channelapp.v1.ChannelAppSpec"> & {
     /**
      * Provider this app belongs to. Exactly one must be specified.
      *
-     * @internal
-     * Adding a provider extends this oneof; it touches zero kinds (the
-     * pattern WhatsApp proved in T05).
-     *
      * @generated from oneof ai.stigmer.agentic.channelapp.v1.ChannelAppSpec.provider_config
      */
     providerConfig: {
@@ -69,14 +54,6 @@ export declare const ChannelAppSpecSchema: GenMessage<ChannelAppSpec>;
  * redirect URL and this ChannelApp's events webhook URL — the console
  * shows both, along with a ready-to-paste app manifest.
  *
- * @internal
- * No api_app_id and no redirect/webhook URLs here: webhook attribution
- * is by the per-app request path (/webhook/slack/{channelAppId}), chosen
- * over envelope api_app_id sniffing because Slack's url_verification
- * handshake carries no app identity and the raw body must verify before
- * any parse. The redirect URI is platform-derived, mirroring OAuthApp's
- * deliberate omission.
- *
  * @generated from message ai.stigmer.agentic.channelapp.v1.SlackChannelAppConfig
  */
 export type SlackChannelAppConfig = Message<"ai.stigmer.agentic.channelapp.v1.SlackChannelAppConfig"> & {
@@ -114,16 +91,6 @@ export declare const SlackChannelAppConfigSchema: GenMessage<SlackChannelAppConf
  * The app's webhook must be configured with this ChannelApp's events URL
  * and verify token — the console shows both after the app is registered.
  *
- * @internal
- * DD-WA-3: every WhatsApp credential is per-app authored (Meta's Cloud
- * API has no per-install OAuth), so they all live here — no managed
- * Environment, no OAuthGrant row; AgentChannelStatus.credentials_environment_id
- * stays empty for WhatsApp channels. Webhook attribution is by the per-app
- * request path (/webhook/whatsapp/{channelAppId}), matching Slack's
- * per-app URL posture: Meta's GET verification handshake carries no app
- * identity, and the POST signature (X-Hub-Signature-256, HMAC over the
- * raw body with app_secret) must verify before any parse.
- *
  * @generated from message ai.stigmer.agentic.channelapp.v1.WhatsAppChannelAppConfig
  */
 export type WhatsAppChannelAppConfig = Message<"ai.stigmer.agentic.channelapp.v1.WhatsAppChannelAppConfig"> & {

package/ai/stigmer/agentic/channelapp/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,8tBAA8tB,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAmDzwB;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA8C7D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA0D7D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/channelapp/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,8tBAA8tB,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAoCzwB;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAsC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAgD7D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/api_pb.d.ts

@@ -10,8 +10,6 @@ export declare const file_ai_stigmer_agentic_environment_v1_api: GenFile;
 /**
  * Environment stores configuration and secrets as key-value pairs for runtime use by agents and workflow instances.
  *
- * @internal
- *
  * @generated from message ai.stigmer.agentic.environment.v1.Environment
  */
 export type Environment = Message<"ai.stigmer.agentic.environment.v1.Environment"> & {
@@ -30,9 +28,6 @@ export type Environment = Message<"ai.stigmer.agentic.environment.v1.Environment
     /**
      * Resource metadata including name, organization, visibility, and labels.
      *
-     * @internal
-     * Environments are typically PRIVATE visibility to prevent secret exposure.
-     *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceMetadata metadata = 3;
      */
     metadata?: ApiResourceMetadata;

package/ai/stigmer/agentic/environment/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,giBAAgiB,EAAE,CAAC,2CAA2C,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAiDltB;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,giBAAgiB,EAAE,CAAC,2CAA2C,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA4CltB;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/command_connect.d.ts

@@ -9,11 +9,6 @@ export declare const EnvironmentCommandController: {
         /**
          * Create or update an environment.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on whether the
-         * environment is going to be created or updated, which is resolved as part of
-         * the request execution.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.apply
          */
         readonly apply: {
@@ -25,13 +20,6 @@ export declare const EnvironmentCommandController: {
         /**
          * Create an environment.
          *
-         * @internal
-         * Authorization:
-         * - Organization-scoped environments: Caller must have can_create_environment
-         *   permission in the organization.
-         * - Platform-scoped environments: Caller must be a platform operator
-         *   (handled automatically by common auth step).
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.create
          */
         readonly create: {
@@ -43,9 +31,6 @@ export declare const EnvironmentCommandController: {
         /**
          * Update an existing environment.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.update
          */
         readonly update: {
@@ -65,15 +50,6 @@ export declare const EnvironmentCommandController: {
          * Secret values are revealed only to the environment's creator, at
          * every visibility level.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         * public/platform levels are rejected via the kind's VisibilityConfig
-         * (supports_org only) — secret values must never be resolvable across the
-         * org boundary. Personal (stigmer.ai/personal) and OAuth-managed
-         * (stigmer.ai/managed) environments reject visibility changes entirely:
-         * sharing a personal credential bag or per-user OAuth tokens must be
-         * impossible, not merely discouraged.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.updateVisibility
          */
         readonly updateVisibility: {
@@ -85,9 +61,6 @@ export declare const EnvironmentCommandController: {
         /**
          * Delete an environment.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.delete
          */
         readonly delete: {
@@ -100,10 +73,6 @@ export declare const EnvironmentCommandController: {
          * Add or update specific variables in an environment.
          * Existing variables not included in the request are preserved unchanged.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         * Server-side merge — secret values are re-encrypted on write.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.updateVariables
          */
         readonly updateVariables: {
@@ -116,9 +85,6 @@ export declare const EnvironmentCommandController: {
          * Remove specific variables from an environment by key.
          * Keys that do not exist are silently ignored.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.removeVariables
          */
         readonly removeVariables: {

package/ai/stigmer/agentic/environment/v1/command_connect.js

@@ -17,11 +17,6 @@ export const EnvironmentCommandController = {
         /**
          * Create or update an environment.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on whether the
-         * environment is going to be created or updated, which is resolved as part of
-         * the request execution.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.apply
          */
         apply: {
@@ -33,13 +28,6 @@ export const EnvironmentCommandController = {
         /**
          * Create an environment.
          *
-         * @internal
-         * Authorization:
-         * - Organization-scoped environments: Caller must have can_create_environment
-         *   permission in the organization.
-         * - Platform-scoped environments: Caller must be a platform operator
-         *   (handled automatically by common auth step).
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.create
          */
         create: {
@@ -51,9 +39,6 @@ export const EnvironmentCommandController = {
         /**
          * Update an existing environment.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.update
          */
         update: {
@@ -73,15 +58,6 @@ export const EnvironmentCommandController = {
          * Secret values are revealed only to the environment's creator, at
          * every visibility level.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         * public/platform levels are rejected via the kind's VisibilityConfig
-         * (supports_org only) — secret values must never be resolvable across the
-         * org boundary. Personal (stigmer.ai/personal) and OAuth-managed
-         * (stigmer.ai/managed) environments reject visibility changes entirely:
-         * sharing a personal credential bag or per-user OAuth tokens must be
-         * impossible, not merely discouraged.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.updateVisibility
          */
         updateVisibility: {
@@ -93,9 +69,6 @@ export const EnvironmentCommandController = {
         /**
          * Delete an environment.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.delete
          */
         delete: {
@@ -108,10 +81,6 @@ export const EnvironmentCommandController = {
          * Add or update specific variables in an environment.
          * Existing variables not included in the request are preserved unchanged.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         * Server-side merge — secret values are re-encrypted on write.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.updateVariables
          */
         updateVariables: {
@@ -124,9 +93,6 @@ export const EnvironmentCommandController = {
          * Remove specific variables from an environment by key.
          * Keys that do not exist are silently ignored.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the environment resource.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.removeVariables
          */
         removeVariables: {

package/ai/stigmer/agentic/environment/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,kIAAkI;AAClI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,WAAW,CAAC;AAEjG;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;;;;;;WASG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;WAqBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,iCAAiC;YACpC,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,iCAAiC;YACpC,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,kIAAkI;AAClI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,WAAW,CAAC;AAEjG;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,iCAAiC;YACpC,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,iCAAiC;YACpC,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}