@stigmer/protos 3.12.2 → 3.12.4

package/ai/stigmer/iam/iampolicy/v1/command_pb.d.ts

@@ -33,29 +33,6 @@ export declare const IamPolicyCommandController: GenService<{
      * Creates a single IAM policy that grants a principal access to a resource with a specific relation.
      * This is the fundamental operation for establishing permissions.
      *
-     * @internal
-     * The operation:
-     * 1. Validates the input (principal, resource, relation are all valid)
-     * 2. Checks for duplicates (skips if the exact policy already exists, idempotent)
-     * 3. Creates the policy in the database with auto-generated ID and metadata
-     * 4. Writes the corresponding tuple to OpenFGA (where authorization is enforced)
-     *
-     * Authorization:
-     * - Caller must have 'can_grant_access' permission on the RESOURCE being shared
-     * - This ensures only resource owners/admins can grant access to their resources
-     *
-     * Example:
-     * Input:
-     *   principal: {kind: "identity_account", id: "ia_alice-123"}
-     *   resource: {kind: "organization", id: "org_demo-456"}
-     *   relation: "viewer"
-     * Result:
-     *   Created IamPolicy with auto-generated ID (e.g., "iamp_01HQ...")
-     *   Alice can view (but not modify) the organization
-     *
-     * Input: IamPolicySpec containing principal, resource, and relation
-     * Output: The created IamPolicy with generated ID and metadata
-     *
      * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyCommandController.create
      */
     create: {
@@ -69,31 +46,6 @@ export declare const IamPolicyCommandController: GenService<{
      * Removes an existing IAM policy by matching the principal, resource, and relation.
      * This is a surgical operation — it removes one specific policy without affecting others.
      *
-     * @internal
-     * The operation:
-     * 1. Finds the policy by matching principal+resource+relation
-     * 2. Removes it from the database
-     * 3. Deletes the corresponding tuple from OpenFGA
-     * 4. If no matching policy exists, the operation is idempotent (no error)
-     *
-     * Authorization:
-     * - Caller must have 'can_grant_access' permission on the RESOURCE referenced in the policy
-     *
-     * Use Cases:
-     * - Revoking a specific permission from a user
-     * - Removing access after a team member leaves
-     * - Cleaning up individual policies
-     *
-     * Example:
-     * Input:
-     *   principal: {kind: "identity_account", id: "ia_alice-123"}
-     *   resource: {kind: "organization", id: "org_demo-456"}
-     *   relation: "viewer"
-     * Result: The policy granting Alice viewer access to the organization is deleted
-     *
-     * Input: IamPolicySpec identifying the policy to delete (principal, resource, relation)
-     * Output: The deleted IamPolicy object (for audit/confirmation purposes)
-     *
      * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyCommandController.delete
      */
     delete: {
@@ -107,41 +59,6 @@ export declare const IamPolicyCommandController: GenService<{
      * Creates IAM policies during resource creation when standard authorization cannot work yet
      * because no tuples exist.
      *
-     * @internal
-     * Solves the chicken-and-egg problem where creating the first policy for a resource
-     * requires authorization, but authorization requires that first policy.
-     *
-     * The operation:
-     * 1. Validates that caller has can_bootstrap_iam permission on platform:stigmer
-     * 2. Validates the input (principal, resource, relation are all valid)
-     * 3. Checks for duplicates (skips if the exact policy already exists, idempotent)
-     * 4. Creates the policy in the database with auto-generated ID and metadata
-     * 5. Writes the corresponding tuple to OpenFGA (where authorization is enforced)
-     *
-     * Authorization:
-     * - Caller must have 'can_bootstrap_iam' permission on platform:stigmer
-     * - This is typically only called by resource creation handlers running as machine accounts
-     *
-     * Use Cases:
-     * - Creating scope links (agent#organization@organization:acme) during agent creation
-     * - Creating owner relations (agent#owner@identity_account:alice) during agent creation
-     * - Establishing initial authorization tuples for any newly created resource
-     *
-     * Example:
-     * Input:
-     *   principal: {kind: "organization", id: "org_demo-123"}
-     *   resource: {kind: "agent", id: "agt_abc-456"}
-     *   relation: "organization"
-     * Result:
-     *   Created IamPolicy establishing agent's organization scope
-     *   Subsequent IAM policy operations can now use standard authorization
-     *
-     * Note: After the bootstrap policies are created, subsequent IAM policy modifications
-     * must use the standard 'create' RPC which requires 'can_grant_access' permission.
-     *
-     * Input: IamPolicySpec containing principal, resource, and relation
-     * Output: The created IamPolicy with generated ID and metadata
-     *
      * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyCommandController.bootstrapPolicy
      */
     bootstrapPolicy: {
@@ -154,34 +71,6 @@ export declare const IamPolicyCommandController: GenService<{
      *
      * Removes all IAM policies associated with a deleted resource.
      *
-     * @internal
-     * Performs bidirectional cleanup:
-     * 1. Policies where resource is the TARGET (policies granting access TO this resource)
-     * 2. Policies where resource is the PRINCIPAL (policies where this resource HAS access)
-     *
-     * The operation:
-     * 1. Validates can_bootstrap_iam permission on platform:stigmer
-     * 2. Finds all policies where resource_id appears (as principal OR resource)
-     * 3. Deletes all matching policies from MongoDB
-     * 4. Removes all corresponding tuples from OpenFGA
-     * 5. Returns Empty (idempotent if no policies exist)
-     *
-     * Authorization:
-     * - Caller must have 'can_bootstrap_iam' permission on platform:stigmer
-     * - This is typically only granted to platform services
-     *
-     * Use Cases:
-     * - Resource deletion cleanup
-     * - Preventing orphaned FGA tuples
-     * - Maintaining authorization system integrity
-     *
-     * Example:
-     * Input: {kind: "organization", id: "org_demo-123"}
-     * Result: All policies referencing org_demo-123 are deleted
-     *
-     * Input: ApiResourceRef with resource kind and ID
-     * Output: Empty (google.protobuf.Empty)
-     *
      * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyCommandController.cleanupResourcePolicies
      */
     cleanupResourcePolicies: {
@@ -196,27 +85,6 @@ export declare const IamPolicyCommandController: GenService<{
      * resources within the given organization, including policies on the organization
      * itself and on child resources (environments, agents, etc.).
      *
-     * @internal
-     * The operation:
-     * 1. Validates the input (identity_account_id and organization_id are present)
-     * 2. Authorizes caller (can_grant_access on the organization)
-     * 3. Loads all policies where the user is principal within the org scope
-     * 4. Deletes all matching policies from MongoDB
-     * 5. Removes all corresponding tuples from OpenFGA
-     *
-     * Authorization:
-     * - Caller must have 'can_grant_access' permission on the organization
-     * - System flows running as the platform machine account cannot satisfy this
-     *   check (the machine account holds no org-scoped grants by design) and must
-     *   use bootstrapRevokeOrgAccess instead
-     *
-     * Use Cases:
-     * - Removing a member from an organization
-     * - Offboarding a user from all org resources in one operation
-     *
-     * Input: RevokeOrgAccessInput with identity_account_id and organization_id
-     * Output: Empty (google.protobuf.Empty)
-     *
      * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyCommandController.revokeOrgAccess
      */
     revokeOrgAccess: {
@@ -231,36 +99,6 @@ export declare const IamPolicyCommandController: GenService<{
      * authorized by can_bootstrap_iam on platform:stigmer instead of
      * can_grant_access on the organization.
      *
-     * @internal
-     * Exists because system flows execute the revoke as the platform machine
-     * account, which by design holds no org-scoped grants. The system channel does
-     * NOT bypass authorization — it authenticates as the machine account, which
-     * can only satisfy platform-scoped permissions. revokeOrgAccess therefore
-     * always fails with PERMISSION_DENIED on the system channel; this RPC is the
-     * sanctioned path, mirroring how bootstrapPolicy is the system-path twin of
-     * create (see https://github.com/stigmer/stigmer/issues/332).
-     *
-     * The operation (identical to revokeOrgAccess after authorization):
-     * 1. Validates can_bootstrap_iam permission on platform:stigmer
-     * 2. Loads all policies where the identity account is principal within the org
-     *    scope, plus policies directly on the organization itself
-     * 3. Deletes all matching policies from MongoDB
-     * 4. Removes all corresponding tuples from OpenFGA (idempotent if none exist)
-     *
-     * Authorization:
-     * - Caller must have 'can_bootstrap_iam' permission on platform:stigmer
-     * - This is typically only granted to platform services (machine accounts)
-     *
-     * Use Cases:
-     * - Federated account deprovisioning (deprovisionFederatedAccount's revoke step)
-     * - Any platform-driven offboarding that runs under system credentials
-     *
-     * End-user member removal must use revokeOrgAccess, which checks
-     * can_grant_access on the organization.
-     *
-     * Input: RevokeOrgAccessInput with identity_account_id and organization_id
-     * Output: Empty (google.protobuf.Empty)
-     *
      * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyCommandController.bootstrapRevokeOrgAccess
      */
     bootstrapRevokeOrgAccess: {

package/ai/stigmer/iam/iampolicy/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,0+CAA0+C,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,mCAAmC,EAAE,qCAAqC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAE5uD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAkPlC,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,0+CAA0+C,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,mCAAmC,EAAE,qCAAqC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAE5uD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAgFlC,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/iampolicy/v1/io_pb.d.ts

@@ -486,9 +486,6 @@ export type CheckMyPermissionInput = Message<"ai.stigmer.iam.iampolicy.v1.CheckM
     /**
      * The permission to check (e.g., "can_edit", "can_grant_access").
      *
-     * @internal
-     * This is the FGA relation checked against the resource object.
-     *
      * @generated from field: string relation = 2;
      */
     relation: string;

package/ai/stigmer/iam/iampolicy/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iHAAiH;AACjH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAY,aAAa,CACvE,QAAQ,CAAC,qmIAAqmI,EAAE,CAAC,oCAAoC,EAAE,qCAAqC,EAAE,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAoF1wI;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAgCtD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAgBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAgBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAiBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AA8BtD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAiBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAuBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAqCvD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAuBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AA2CvD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAqCvD;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAqCvD;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAuBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iHAAiH;AACjH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,qCAAqC,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAY,aAAa,CACvE,QAAQ,CAAC,qmIAAqmI,EAAE,CAAC,oCAAoC,EAAE,qCAAqC,EAAE,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAoF1wI;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAgCtD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAgBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAgBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAiBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AAuBtD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;AA8BtD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAiBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAuBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAqCvD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAuBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAwCvD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAqCvD;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAqCvD;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAuBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAgBvD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC"}

package/ai/stigmer/iam/iampolicy/v1/query_connect.d.ts

@@ -11,9 +11,6 @@ export declare const IamPolicyQueryController: {
          *
          * Returns the full IAM policy including its principal, resource, and relation binding.
          *
-         * @internal
-         * Authorization: Requires can_view_access permission.
-         *
          * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyQueryController.get
          */
         readonly get: {
@@ -40,11 +37,6 @@ export declare const IamPolicyQueryController: {
          * Input: CheckMyPermissionInput with resource, relation, and optional contextual policies
          * Output: CheckAuthorizationResult with is_authorized boolean
          *
-         * @internal
-         * Skips standard authorization because authorizing this RPC via IAM would
-         * recurse into IAM. Authentication is still required; the handler anchors
-         * the FGA check to the caller's identity account.
-         *
          * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyQueryController.checkMyPermission
          */
         readonly checkMyPermission: {
@@ -74,11 +66,6 @@ export declare const IamPolicyQueryController: {
          * Input: CheckAuthorizationInput with policy spec and optional contextual policies
          * Output: CheckAuthorizationResult with is_authorized boolean
          *
-         * @internal
-         * Skips standard authorization to avoid IAM-authorizing-IAM recursion.
-         * The handler enforces principal trust instead: the caller must either BE
-         * the principal being checked, or be a machine (system) account.
-         *
          * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyQueryController.checkAuthorization
          */
         readonly checkAuthorization: {

package/ai/stigmer/iam/iampolicy/v1/query_connect.js

@@ -18,9 +18,6 @@ export const IamPolicyQueryController = {
          *
          * Returns the full IAM policy including its principal, resource, and relation binding.
          *
-         * @internal
-         * Authorization: Requires can_view_access permission.
-         *
          * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyQueryController.get
          */
         get: {
@@ -47,11 +44,6 @@ export const IamPolicyQueryController = {
          * Input: CheckMyPermissionInput with resource, relation, and optional contextual policies
          * Output: CheckAuthorizationResult with is_authorized boolean
          *
-         * @internal
-         * Skips standard authorization because authorizing this RPC via IAM would
-         * recurse into IAM. Authentication is still required; the handler anchors
-         * the FGA check to the caller's identity account.
-         *
          * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyQueryController.checkMyPermission
          */
         checkMyPermission: {
@@ -81,11 +73,6 @@ export const IamPolicyQueryController = {
          * Input: CheckAuthorizationInput with policy spec and optional contextual policies
          * Output: CheckAuthorizationResult with is_authorized boolean
          *
-         * @internal
-         * Skips standard authorization to avoid IAM-authorizing-IAM recursion.
-         * The handler enforces principal trust instead: the caller must either BE
-         * the principal being checked, or be a machine (system) account.
-         *
          * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyQueryController.checkAuthorization
          */
         checkAuthorization: {

package/ai/stigmer/iam/iampolicy/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,oHAAoH;AACpH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,WAAW,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,eAAe,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAC;AAC7X,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;;;;;;WASG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,8BAA8B;YACjC,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,0BAA0B,EAAE;YAC1B,IAAI,EAAE,4BAA4B;YAClC,CAAC,EAAE,+BAA+B;YAClC,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,6BAA6B,EAAE;YAC7B,IAAI,EAAE,+BAA+B;YACrC,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,6BAA6B;YAChC,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,oHAAoH;AACpH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,WAAW,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,eAAe,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAC;AAC7X,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;;;WAMG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,8BAA8B;YACjC,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,0BAA0B,EAAE;YAC1B,IAAI,EAAE,4BAA4B;YAClC,CAAC,EAAE,+BAA+B;YAClC,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,6BAA6B,EAAE;YAC7B,IAAI,EAAE,+BAA+B;YACrC,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,6BAA6B;YAChC,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/iam/iampolicy/v1/query_pb.d.ts

@@ -16,9 +16,6 @@ export declare const IamPolicyQueryController: GenService<{
      *
      * Returns the full IAM policy including its principal, resource, and relation binding.
      *
-     * @internal
-     * Authorization: Requires can_view_access permission.
-     *
      * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyQueryController.get
      */
     get: {
@@ -44,11 +41,6 @@ export declare const IamPolicyQueryController: GenService<{
      * Input: CheckMyPermissionInput with resource, relation, and optional contextual policies
      * Output: CheckAuthorizationResult with is_authorized boolean
      *
-     * @internal
-     * Skips standard authorization because authorizing this RPC via IAM would
-     * recurse into IAM. Authentication is still required; the handler anchors
-     * the FGA check to the caller's identity account.
-     *
      * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyQueryController.checkMyPermission
      */
     checkMyPermission: {
@@ -77,11 +69,6 @@ export declare const IamPolicyQueryController: GenService<{
      * Input: CheckAuthorizationInput with policy spec and optional contextual policies
      * Output: CheckAuthorizationResult with is_authorized boolean
      *
-     * @internal
-     * Skips standard authorization to avoid IAM-authorizing-IAM recursion.
-     * The handler enforces principal trust instead: the caller must either BE
-     * the principal being checked, or be a machine (system) account.
-     *
      * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyQueryController.checkAuthorization
      */
     checkAuthorization: {

package/ai/stigmer/iam/iampolicy/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oHAAoH;AACpH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,i7DAAi7D,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,mCAAmC,CAAC,CAAC,CAAC;AAEhnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAwLhC,aAAa,CAChB,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oHAAoH;AACpH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,i7DAAi7D,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,mCAAmC,CAAC,CAAC,CAAC;AAEhnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GA2KhC,aAAa,CAChB,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/iampolicy/v1/spec_pb.d.ts

@@ -39,10 +39,6 @@ export type IamPolicySpec = Message<"ai.stigmer.iam.iampolicy.v1.IamPolicySpec">
      * Maps to a role_code from ai.stigmer.iam.v1.IamRole.
      * Examples: "admin", "editor", "viewer", "owner", "member"
      *
-     * @internal
-     * This is the FGA relation in the authorization tuple:
-     * principal.kind:principal.id#principal.relation@resource.kind:resource.id#relation
-     *
      * @generated from field: string relation = 3;
      */
     relation: string;
@@ -91,9 +87,6 @@ export type ApiResourceRef = Message<"ai.stigmer.iam.iampolicy.v1.ApiResourceRef
      * This field qualifies HOW the principal relates to this resource reference,
      * NOT the permission being granted (that's IamPolicySpec.relation).
      *
-     * @internal
-     * In OpenFGA tuple notation: team:tm-123#member (as the subject of the tuple)
-     *
      * @generated from field: string relation = 3;
      */
     relation: string;

package/ai/stigmer/iam/iampolicy/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,kfAAkf,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAgD7hB;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAmDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mHAAmH;AACnH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAY,aAAa,CACzE,QAAQ,CAAC,kfAAkf,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AA4C7hB;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;AAgDxD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/identityaccount/v1/command_connect.d.ts

@@ -9,11 +9,6 @@ export declare const IdentityAccountCommandController: {
         /**
          * Create a new identity account.
          *
-         * @internal
-         * System-level RPC used by federated account creation and bootstrap migrations.
-         * No FGA authorization — called via inProcessChannelAsSystem (machine account).
-         * The handler's createAuthorizationTuples step writes the self-ownership tuple after creation.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.create
          */
         readonly create: {
@@ -25,9 +20,6 @@ export declare const IdentityAccountCommandController: {
         /**
          * Update an existing identity account.
          *
-         * @internal
-         * Authorization: Requires can_edit permission on the identity account resource.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.update
          */
         readonly update: {
@@ -39,9 +31,6 @@ export declare const IdentityAccountCommandController: {
         /**
          * Delete an identity account.
          *
-         * @internal
-         * Authorization: Requires can_delete permission on the identity account resource.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.delete
          */
         readonly delete: {

package/ai/stigmer/iam/identityaccount/v1/command_connect.js

@@ -16,11 +16,6 @@ export const IdentityAccountCommandController = {
         /**
          * Create a new identity account.
          *
-         * @internal
-         * System-level RPC used by federated account creation and bootstrap migrations.
-         * No FGA authorization — called via inProcessChannelAsSystem (machine account).
-         * The handler's createAuthorizationTuples step writes the self-ownership tuple after creation.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.create
          */
         create: {
@@ -32,9 +27,6 @@ export const IdentityAccountCommandController = {
         /**
          * Update an existing identity account.
          *
-         * @internal
-         * Authorization: Requires can_edit permission on the identity account resource.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.update
          */
         update: {
@@ -46,9 +38,6 @@ export const IdentityAccountCommandController = {
         /**
          * Delete an identity account.
          *
-         * @internal
-         * Authorization: Requires can_delete permission on the identity account resource.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.delete
          */
         delete: {

package/ai/stigmer/iam/identityaccount/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,kIAAkI;AAClI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,gCAAgC,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AAE1I;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,sBAAsB,EAAE;YACtB,IAAI,EAAE,wBAAwB;YAC9B,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,sBAAsB,EAAE;YACtB,IAAI,EAAE,wBAAwB;YAC9B,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,2BAA2B,EAAE;YAC3B,IAAI,EAAE,6BAA6B;YACnC,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,kIAAkI;AAClI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,gCAAgC,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AAE1I;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,sBAAsB,EAAE;YACtB,IAAI,EAAE,wBAAwB;YAC9B,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,sBAAsB,EAAE;YACtB,IAAI,EAAE,wBAAwB;YAC9B,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,2BAA2B,EAAE;YAC3B,IAAI,EAAE,6BAA6B;YACnC,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/iam/identityaccount/v1/command_pb.d.ts

@@ -15,11 +15,6 @@ export declare const IdentityAccountCommandController: GenService<{
     /**
      * Create a new identity account.
      *
-     * @internal
-     * System-level RPC used by federated account creation and bootstrap migrations.
-     * No FGA authorization — called via inProcessChannelAsSystem (machine account).
-     * The handler's createAuthorizationTuples step writes the self-ownership tuple after creation.
-     *
      * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.create
      */
     create: {
@@ -30,9 +25,6 @@ export declare const IdentityAccountCommandController: GenService<{
     /**
      * Update an existing identity account.
      *
-     * @internal
-     * Authorization: Requires can_edit permission on the identity account resource.
-     *
      * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.update
      */
     update: {
@@ -43,9 +35,6 @@ export declare const IdentityAccountCommandController: GenService<{
     /**
      * Delete an identity account.
      *
-     * @internal
-     * Authorization: Requires can_delete permission on the identity account resource.
-     *
      * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.delete
      */
     delete: {

package/ai/stigmer/iam/identityaccount/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,0zDAA0zD,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,0CAA0C,EAAE,yCAAyC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAEjiE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAkHxC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,0zDAA0zD,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,0CAA0C,EAAE,yCAAyC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAEjiE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAuGxC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/identityaccount/v1/enum_pb.d.ts

@@ -6,9 +6,6 @@ export declare const file_ai_stigmer_iam_identityaccount_v1_enum: GenFile;
 /**
  * IdentityAccountProvisioningMode defines how an identity account was created.
  *
- * @internal
- * Unspecified is the default for legacy accounts created before this enum was introduced.
- *
  * @generated from enum ai.stigmer.iam.identityaccount.v1.IdentityAccountProvisioningMode
  */
 export declare enum IdentityAccountProvisioningMode {

package/ai/stigmer/iam/identityaccount/v1/enum_pb.js

@@ -9,9 +9,6 @@ export const file_ai_stigmer_iam_identityaccount_v1_enum = /*@__PURE__*/ fileDes
 /**
  * IdentityAccountProvisioningMode defines how an identity account was created.
  *
- * @internal
- * Unspecified is the default for legacy accounts created before this enum was introduced.
- *
  * @generated from enum ai.stigmer.iam.identityaccount.v1.IdentityAccountProvisioningMode
  */
 export var IdentityAccountProvisioningMode;

package/ai/stigmer/iam/identityaccount/v1/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,gUAAgU,CAAC,CAAC;AAE7U;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,+BA6CX;AA7CD,WAAY,+BAA+B;IACzC;;;;OAIG;IACH,yKAAkD,CAAA;IAElD;;;;OAIG;IACH,yFAAU,CAAA;IAEV;;;;OAIG;IACH,+FAAa,CAAA;IAEb;;;;OAIG;IACH,2FAAW,CAAA;IAEX;;;;;;;;;;;;;;OAcG;IACH,2GAAmB,CAAA;AACrB,CAAC,EA7CW,+BAA+B,KAA/B,+BAA+B,QA6C1C;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAA6C,aAAa,CAC1G,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,gUAAgU,CAAC,CAAC;AAE7U;;;;GAIG;AACH,MAAM,CAAN,IAAY,+BA6CX;AA7CD,WAAY,+BAA+B;IACzC;;;;OAIG;IACH,yKAAkD,CAAA;IAElD;;;;OAIG;IACH,yFAAU,CAAA;IAEV;;;;OAIG;IACH,+FAAa,CAAA;IAEb;;;;OAIG;IACH,2FAAW,CAAA;IAEX;;;;;;;;;;;;;;OAcG;IACH,2GAAmB,CAAA;AACrB,CAAC,EA7CW,+BAA+B,KAA/B,+BAA+B,QA6C1C;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAA6C,aAAa,CAC1G,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/identityaccount/v1/query_connect.d.ts

@@ -22,9 +22,6 @@ export declare const IdentityAccountQueryController: {
          *
          * Returns the full identity account for the caller based on the auth header.
          *
-         * @internal
-         * Scoped to the caller's own account, so authorization is skipped.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.whoAmI
          */
         readonly whoAmI: {
@@ -82,21 +79,6 @@ export declare const IdentityAccountQueryController: {
         /**
          * Get lightweight actor information for an identity account.
          *
-         * @internal
-         * This RPC is specifically designed to break circular dependency loops in audit actor resolution.
-         * When converting IdentityAccount entities to proto responses, the audit info (created_by, updated_by)
-         * needs actor details. If we use the standard get() RPC, it triggers a full entity-to-proto conversion
-         * including audit actors, which can create infinite recursion if audit actors reference IdentityAccounts.
-         *
-         * This dedicated endpoint:
-         * - Returns ONLY the lightweight ApiResourceAuditActor (id + avatar)
-         * - Does NOT include full audit trail in the response
-         * - Accesses entity data directly without recursive proto conversion
-         * - Is used by ApiResourceAuditActorCacheProxy to safely populate Redis cache
-         * - Prevents StackOverflowError when Redis cache is empty or cleared
-         *
-         * Restricted to platform operators only as this is an internal cache-population mechanism.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getActorInfo
          */
         readonly getActorInfo: {

package/ai/stigmer/iam/identityaccount/v1/query_connect.js

@@ -30,9 +30,6 @@ export const IdentityAccountQueryController = {
          *
          * Returns the full identity account for the caller based on the auth header.
          *
-         * @internal
-         * Scoped to the caller's own account, so authorization is skipped.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.whoAmI
          */
         whoAmI: {
@@ -90,21 +87,6 @@ export const IdentityAccountQueryController = {
         /**
          * Get lightweight actor information for an identity account.
          *
-         * @internal
-         * This RPC is specifically designed to break circular dependency loops in audit actor resolution.
-         * When converting IdentityAccount entities to proto responses, the audit info (created_by, updated_by)
-         * needs actor details. If we use the standard get() RPC, it triggers a full entity-to-proto conversion
-         * including audit actors, which can create infinite recursion if audit actors reference IdentityAccounts.
-         *
-         * This dedicated endpoint:
-         * - Returns ONLY the lightweight ApiResourceAuditActor (id + avatar)
-         * - Does NOT include full audit trail in the response
-         * - Accesses entity data directly without recursive proto conversion
-         * - Is used by ApiResourceAuditActorCacheProxy to safely populate Redis cache
-         * - Prevents StackOverflowError when Redis cache is empty or cleared
-         *
-         * Restricted to platform operators only as this is an internal cache-population mechanism.
-         *
          * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getActorInfo
          */
         getActorInfo: {

package/ai/stigmer/iam/identityaccount/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAEjF;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAEjF;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/iam/identityaccount/v1/query_pb.d.ts

@@ -28,9 +28,6 @@ export declare const IdentityAccountQueryController: GenService<{
      *
      * Returns the full identity account for the caller based on the auth header.
      *
-     * @internal
-     * Scoped to the caller's own account, so authorization is skipped.
-     *
      * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.whoAmI
      */
     whoAmI: {
@@ -84,21 +81,6 @@ export declare const IdentityAccountQueryController: GenService<{
     /**
      * Get lightweight actor information for an identity account.
      *
-     * @internal
-     * This RPC is specifically designed to break circular dependency loops in audit actor resolution.
-     * When converting IdentityAccount entities to proto responses, the audit info (created_by, updated_by)
-     * needs actor details. If we use the standard get() RPC, it triggers a full entity-to-proto conversion
-     * including audit actors, which can create infinite recursion if audit actors reference IdentityAccounts.
-     *
-     * This dedicated endpoint:
-     * - Returns ONLY the lightweight ApiResourceAuditActor (id + avatar)
-     * - Does NOT include full audit trail in the response
-     * - Accesses entity data directly without recursive proto conversion
-     * - Is used by ApiResourceAuditActorCacheProxy to safely populate Redis cache
-     * - Prevents StackOverflowError when Redis cache is empty or cleared
-     *
-     * Restricted to platform operators only as this is an internal cache-population mechanism.
-     *
      * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getActorInfo
      */
     getActorInfo: {

package/ai/stigmer/iam/identityaccount/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AAEjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,88CAA88C,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,0CAA0C,EAAE,0CAA0C,EAAE,yCAAyC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAEjuD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GA8FtC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AAEjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,88CAA88C,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,0CAA0C,EAAE,0CAA0C,EAAE,yCAAyC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAEjuD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GA4EtC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}