@stigmer/protos 3.12.3 → 3.12.4

package/ai/stigmer/agentic/agentshare/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,knCAAknC,EAAE,CAAC,yCAAyC,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgBhvC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAyC3D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAuB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AA8B3D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAoB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AA0C3D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AA6D3D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,knCAAknC,EAAE,CAAC,yCAAyC,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgBhvC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAmC3D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAuB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AA8B3D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAoB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAoC3D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AA6D3D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/query_connect.d.ts

@@ -20,10 +20,6 @@ export declare const AgentShareQueryController: {
         /**
          * Get an agent share by its organization-scoped reference (org/slug).
          *
-         * @internal
-         * Custom authorization in handler — checks both direct resource access
-         * and organization-level visibility permissions.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByReference
          */
         readonly getByReference: {
@@ -40,10 +36,6 @@ export declare const AgentShareQueryController: {
          * This is how the Share dialog and CLI resolve an agent's existing
          * share regardless of its slug (a renamed share keeps working).
          *
-         * @internal
-         * Authorization is handled in-handler: FGA-filtered in cloud, unrestricted
-         * in OSS (single-user edition).
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByAgent
          */
         readonly getByAgent: {
@@ -55,10 +47,6 @@ export declare const AgentShareQueryController: {
         /**
          * List agent shares with optional label filtering.
          *
-         * @internal
-         * Authorization is handled in-handler via FGA-filtered queries (cloud)
-         * or unrestricted store queries (OSS).
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.list
          */
         readonly list: {
@@ -85,11 +73,6 @@ export declare const AgentShareQueryController: {
          * empty: org+slug is the shared URL's identity, and cross-org slug
          * matching on a public endpoint would enable enumeration.
          *
-         * @internal
-         * Public by design (no authentication): enforcement is the app-level
-         * sharing gate in the handler, not FGA — see AgentShareSpec for why a
-         * share writes no visibility tuples.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfile
          */
         readonly getSharedProfile: {
@@ -115,13 +98,6 @@ export declare const AgentShareQueryController: {
          * indistinguishable so a share URL leaks nothing to non-members.
          * Returns INVALID_ARGUMENT when org is empty.
          *
-         * @internal
-         * Custom authorization in handler — requires authentication (not
-         * is_public), then an app-level organization#member FGA check for org
-         * shares. No standard resource_kind/permission config: the sharing gate
-         * is app-level by design (see AgentShareSpec), and membership is checked
-         * live on every call so revoked members lose access immediately.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfileForMember
          */
         readonly getSharedProfileForMember: {

package/ai/stigmer/agentic/agentshare/v1/query_connect.js

@@ -28,10 +28,6 @@ export const AgentShareQueryController = {
         /**
          * Get an agent share by its organization-scoped reference (org/slug).
          *
-         * @internal
-         * Custom authorization in handler — checks both direct resource access
-         * and organization-level visibility permissions.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByReference
          */
         getByReference: {
@@ -48,10 +44,6 @@ export const AgentShareQueryController = {
          * This is how the Share dialog and CLI resolve an agent's existing
          * share regardless of its slug (a renamed share keeps working).
          *
-         * @internal
-         * Authorization is handled in-handler: FGA-filtered in cloud, unrestricted
-         * in OSS (single-user edition).
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByAgent
          */
         getByAgent: {
@@ -63,10 +55,6 @@ export const AgentShareQueryController = {
         /**
          * List agent shares with optional label filtering.
          *
-         * @internal
-         * Authorization is handled in-handler via FGA-filtered queries (cloud)
-         * or unrestricted store queries (OSS).
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.list
          */
         list: {
@@ -93,11 +81,6 @@ export const AgentShareQueryController = {
          * empty: org+slug is the shared URL's identity, and cross-org slug
          * matching on a public endpoint would enable enumeration.
          *
-         * @internal
-         * Public by design (no authentication): enforcement is the app-level
-         * sharing gate in the handler, not FGA — see AgentShareSpec for why a
-         * share writes no visibility tuples.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfile
          */
         getSharedProfile: {
@@ -123,13 +106,6 @@ export const AgentShareQueryController = {
          * indistinguishable so a share URL leaks nothing to non-members.
          * Returns INVALID_ARGUMENT when org is empty.
          *
-         * @internal
-         * Custom authorization in handler — requires authentication (not
-         * is_public), then an app-level organization#member FGA check for org
-         * shares. No standard resource_kind/permission config: the sharing gate
-         * is app-level by design (see AgentShareSpec), and membership is checked
-         * live on every call so revoked members lose access immediately.
-         *
          * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfileForMember
          */
         getSharedProfileForMember: {

package/ai/stigmer/agentic/agentshare/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC5J,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,4BAA4B;YAC/B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;WAyBG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC5J,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,4BAA4B;YAC/B,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;WAkBG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,kBAAkB;YACrB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/query_pb.d.ts

@@ -25,10 +25,6 @@ export declare const AgentShareQueryController: GenService<{
     /**
      * Get an agent share by its organization-scoped reference (org/slug).
      *
-     * @internal
-     * Custom authorization in handler — checks both direct resource access
-     * and organization-level visibility permissions.
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByReference
      */
     getByReference: {
@@ -44,10 +40,6 @@ export declare const AgentShareQueryController: GenService<{
      * This is how the Share dialog and CLI resolve an agent's existing
      * share regardless of its slug (a renamed share keeps working).
      *
-     * @internal
-     * Authorization is handled in-handler: FGA-filtered in cloud, unrestricted
-     * in OSS (single-user edition).
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getByAgent
      */
     getByAgent: {
@@ -58,10 +50,6 @@ export declare const AgentShareQueryController: GenService<{
     /**
      * List agent shares with optional label filtering.
      *
-     * @internal
-     * Authorization is handled in-handler via FGA-filtered queries (cloud)
-     * or unrestricted store queries (OSS).
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.list
      */
     list: {
@@ -87,11 +75,6 @@ export declare const AgentShareQueryController: GenService<{
      * empty: org+slug is the shared URL's identity, and cross-org slug
      * matching on a public endpoint would enable enumeration.
      *
-     * @internal
-     * Public by design (no authentication): enforcement is the app-level
-     * sharing gate in the handler, not FGA — see AgentShareSpec for why a
-     * share writes no visibility tuples.
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfile
      */
     getSharedProfile: {
@@ -116,13 +99,6 @@ export declare const AgentShareQueryController: GenService<{
      * indistinguishable so a share URL leaks nothing to non-members.
      * Returns INVALID_ARGUMENT when org is empty.
      *
-     * @internal
-     * Custom authorization in handler — requires authentication (not
-     * is_public), then an app-level organization#member FGA check for org
-     * shares. No standard resource_kind/permission config: the sharing gate
-     * is app-level by design (see AgentShareSpec), and membership is checked
-     * live on every call so revoked members lose access immediately.
-     *
      * @generated from rpc ai.stigmer.agentic.agentshare.v1.AgentShareQueryController.getSharedProfileForMember
      */
     getSharedProfileForMember: {

package/ai/stigmer/agentic/agentshare/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,yuCAAyuC,EAAE,CAAC,yCAAyC,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE19C;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAuHjC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAEtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,yuCAAyuC,EAAE,CAAC,yCAAyC,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE19C;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GA+FjC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/spec_pb.d.ts

@@ -13,17 +13,6 @@ export declare const file_ai_stigmer_agentic_agentshare_v1_spec: GenFile;
  * It carries its own audience, embed origins, visitor-facing messages, and
  * tool credentials — all independent of the agent blueprint it references.
  *
- * @internal
- * Sharing is channel configuration, not agent behavior (decision 011):
- * applying an agent manifest never touches a share, and the share has its
- * own writer, lifecycle, and change cadence. Guest admission is enforced
- * app-level in the shared-profile/mint/create-time gates — a share writes
- * NO FGA visibility tuples, because a public wildcard viewer tuple would
- * expose the referenced agent's full blueprint (instructions included) to
- * any authenticated account, conflating blueprint visibility with chat
- * access. The overview.md file provides the SDK-facing description and
- * example YAML.
- *
  * @generated from message ai.stigmer.agentic.agentshare.v1.AgentShareSpec
  */
 export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShareSpec"> & {
@@ -35,22 +24,6 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
      * org, billed to this share's org, with tool credentials bound from this
      * share's org. Cross-org shares must have a public audience.
      *
-     * @internal
-     * Cross-org contract (decision 013): making an agent visibility_public
-     * IS the origin org's consent to external shares — enforced app-level in
-     * both editions' defaults resolvers (spec-level CEL cannot see
-     * metadata.org), together with the public-audience-only rule and the
-     * dependency-publicness sweep (every skill/MCP the agent declares must be
-     * visibility_public, refused loudly naming blockers). The sharing org is
-     * always the billing org (decision 001 generalized) and guest tool
-     * credentials resolve in the share's org (secrets never cross orgs —
-     * org A's environments are structurally unreachable from org B's
-     * executions via OrgSharedEnvironmentPolicy). The agent's public
-     * visibility is re-verified on every guest turn, at the shared profile,
-     * and at guest mint, so revoking visibility kills external channels on
-     * the visitor's next message. status.agent_id pins the resolved agent
-     * against slug-reuse rebind.
-     *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference agent_ref = 1;
      */
     agentRef?: ApiResourceReference;
@@ -73,14 +46,6 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
      * update/apply replace the spec wholesale, so a manifest that sets
      * enabled without audience resets the share to public.
      *
-     * @internal
-     * Org audience is enforced cloud-side only (org membership is a
-     * multi-tenant IAM concept): the guest mint and public profile handlers
-     * treat audience=org as NOT_FOUND, and the create-time blueprint gate
-     * admits authenticated org members via an app-level FGA member check
-     * (no visibility tuples written). The OSS single-user server stores and
-     * echoes the field.
-     *
      * @generated from field: ai.stigmer.agentic.agentshare.v1.AgentShareAudience audience = 3;
      */
     audience: AgentShareAudience;
@@ -92,22 +57,6 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
      * from any site; listing origins restricts embedding to those sites. The
      * first-party hosted chat page is always exempt.
      *
-     * @internal
-     * Enforced since T04 against the embed_origin the widget reports at
-     * mintGuestToken time (stamped into the guest JWT as a claim) and
-     * re-validated against this live list by the guest create-time gate
-     * (SharedSessionBlueprintAccess) on every session/execution create — the
-     * same gate that re-checks enabled, so revocation latency is identical
-     * (immediate). Unframed hosted-page visitors report no origin and are
-     * exempt by construction. Since stigmer-cloud#341 both gates cross-check
-     * the self-report against the request's browser-enforced Origin header
-     * (SharingRequestOriginPolicy): for direct SDK embeds the header is the
-     * authoritative origin — a lying or omitted embed_origin no longer
-     * bypasses this list — while requests from Stigmer's own hosted page
-     * keep the widget's browser-authentic self-report as the embedder
-     * signal. Exact origins only — loosening to wildcards later is a
-     * non-breaking change, tightening would not be.
-     *
      * @generated from field: repeated string allowed_origins = 4;
      */
     allowedOrigins: string[];
@@ -115,12 +64,6 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
      * Owner-customizable copy shown to visitors when a launch-gate limit
      * refuses their message. Unset fields fall back to platform defaults.
      *
-     * @internal
-     * Resolved server-side at the refusal point and carried in the gRPC
-     * status description — deliberately NOT surfaced on SharedAgentProfile
-     * and NOT mapped client-side, so the copy reaches every client (web,
-     * embed, CLI) through the existing error-message path.
-     *
      * @generated from field: ai.stigmer.agentic.agentshare.v1.AgentShareMessages messages = 5;
      */
     messages?: AgentShareMessages;
@@ -134,18 +77,6 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
      * values at runtime. The agent and its default instance stay untouched.
      * Valid on public-audience shares only.
      *
-     * @internal
-     * Resolved in the share's org through the org-shared environment
-     * resolution seam (EnvironmentRuntimeResolutionService /
-     * OrgSharedEnvironmentPolicy — decision 006): each referenced environment
-     * must be visibility_org in the share's org, or the merge skips it with
-     * a diagnostic. Merged at guest execution-context build time only —
-     * never bound to the agent's system-managed default instance, which is
-     * recreated empty on lifecycle events and shared by every org member's
-     * casual chat (decision 011). Org-audience shares reject this field via
-     * the message-level CEL rule: member sessions carry no share linkage in
-     * Phase A, so bound credentials would silently never apply.
-     *
      * @generated from field: repeated ai.stigmer.commons.apiresource.ApiResourceReference environment_refs = 6;
      */
     environmentRefs: ApiResourceReference[];
@@ -159,19 +90,6 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
      * guest turn may spend, never raise it past the platform profile.
      * Valid on public-audience shares only.
      *
-     * @internal
-     * DD-018 D-2's second embedder (stigmer/stigmer#360). This is the
-     * OWNER's stored config, not the guest's: the guest scope step still
-     * discards caller-supplied execution_config unconditionally, then
-     * merges this field — loaded server-side from the share — over the
-     * platform guest profile (GuestAgentExecutionCreateScopeStep, the
-     * promise recorded on GuestExecutionProfileProperties). The trust
-     * posture is unchanged. Org-audience shares reject the field via the
-     * message-level CEL rule for the same reason as environment_refs:
-     * member sessions carry no share linkage, so it would be stored but
-     * silently never applied. Enforcement is cloud-only — guest runtime
-     * is a cloud concept; OSS stores and echoes the field.
-     *
      * @generated from field: ai.stigmer.agentic.agentexecution.v1.RunConfig run_config = 7;
      */
     runConfig?: RunConfig;

package/ai/stigmer/agentic/agentshare/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,oDAAoD,EAAE,MAAM,0CAA0C,CAAC;AAChH,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qjEAAqjE,EAAE,CAAC,oDAAoD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmLjvE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAmC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBA0BX;AA1BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;;;OAMG;IACH,+DAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yDAAO,CAAA;AACT,CAAC,EA1BW,kBAAkB,KAAlB,kBAAkB,QA0B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,oDAAoD,EAAE,MAAM,0CAA0C,CAAC;AAChH,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,qjEAAqjE,EAAE,CAAC,oDAAoD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAiGjvE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAmC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBA0BX;AA1BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;;;OAMG;IACH,+DAAU,CAAA;IAEV;;;;;;;OAOG;IACH,yDAAO,CAAA;AACT,CAAC,EA1BW,kBAAkB,KAAlB,kBAAkB,QA0B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/status_pb.d.ts

@@ -27,18 +27,6 @@ export type AgentShareStatus = Message<"ai.stigmer.agentic.agentshare.v1.AgentSh
      * immediately. Applies to public-audience shares only (org-audience
      * access is governed by live membership instead).
      *
-     * @internal
-     * Server-generated (rotateShareLink is the sole writer) and deliberately
-     * in status, not spec: status survives every apply/update verbatim in
-     * both editions, so a routine manifest apply can never wipe the token
-     * and silently fail open to the guessable URL. Enforced with the
-     * allowed_origins pattern — validated at guest mint, stamped into the
-     * guest JWT, and re-validated against this live value on every
-     * session/execution create, so rotation revokes live guest tokens on
-     * their next message. Not a security boundary: rate limits and the org
-     * credit cap remain the abuse controls; this is a traffic lever for
-     * over-shared links.
-     *
      * @generated from field: string share_link_token = 1;
      */
     shareLinkToken: string;
@@ -50,20 +38,6 @@ export type AgentShareStatus = Message<"ai.stigmer.agentic.agentshare.v1.AgentSh
      * is later created at the same org/slug, the share stops resolving
      * instead of silently attaching to the new agent.
      *
-     * @internal
-     * Server-owned rebind guard (decision 013): agent_ref is org+slug, and
-     * slugs are reusable after delete — without the pin, a stale share's
-     * audience, link token, and bound credentials would transfer to whatever
-     * agent later claims the slug. Stamped once at create (the defaults
-     * resolver already loads the referenced agent); immutable like agent_ref
-     * itself; in status so no apply can wipe or forge it (the
-     * share_link_token posture). Every share-resolution gate (shared
-     * profile, guest mint, create-time gate, runner elevation) verifies it
-     * WHEN PRESENT; shares created before this field exists carry an empty
-     * pin and are tolerated — the same-org delete cascade already guarantees
-     * a same-org share never outlives its agent, so no backfill is needed.
-     * Cross-org shares (Phase B) always carry the pin.
-     *
      * @generated from field: string agent_id = 2;
      */
     agentId: string;

package/ai/stigmer/agentic/agentshare/v1/status_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAGvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,qSAAqS,EAAE,CAAC,0CAA0C,CAAC,CAAC,CAAC;AAoEhW;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentshare/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAGvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,qSAAqS,EAAE,CAAC,0CAA0C,CAAC,CAAC,CAAC;AA0ChW;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/artifact/v1/api_pb.d.ts

@@ -11,27 +11,6 @@ export declare const file_ai_stigmer_agentic_artifact_v1_api: GenFile;
 /**
  * Artifact represents a persisted blob produced during execution.
  *
- * @internal
- * Follows the standard Stigmer resource pattern:
- * api_version + kind + metadata + spec + status.
- *
- * Artifacts are created by the runner when task
- * outputs exceed the auto-promotion threshold or when the workflow author
- * explicitly declares an artifact (Phase 1).
- *
- * The content blob is stored externally (local filesystem in OSS, S3 in Cloud).
- * The Artifact resource holds metadata and a content hash that references
- * the blob in the content-addressable store.
- *
- * Artifact lifecycle:
- * 1. Runner calls create() with spec + content bytes
- * 2. Backend hashes content, stores blob, creates metadata record
- * 3. Runner replaces inline task output with artifact reference
- * 4. Clients retrieve artifact via get() or download via getDownloadUrl()
- * 5. Background GC deletes expired artifacts based on retention policy
- *
- * @since T07 (Artifact Store)
- *
  * @generated from message ai.stigmer.agentic.artifact.v1.Artifact
  */
 export type Artifact = Message<"ai.stigmer.agentic.artifact.v1.Artifact"> & {
@@ -50,17 +29,6 @@ export type Artifact = Message<"ai.stigmer.agentic.artifact.v1.Artifact"> & {
     /**
      * Resource metadata including name, organization, visibility, and labels.
      *
-     * @internal
-     * Naming Pattern:
-     * - ID Format: "art_{unique-suffix}" (auto-generated)
-     * - Name Format: display_name from spec (e.g., "analyze_code — output.json")
-     * - Org: inherited from the producing execution's organization
-     *
-     * Labels:
-     * - source_type: "workflow_execution" or "agent_execution"
-     * - source_id: the execution ID that produced this artifact
-     * - task_name: the task that produced this artifact (if applicable)
-     *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceMetadata metadata = 3;
      */
     metadata?: ApiResourceMetadata;
@@ -85,12 +53,6 @@ export declare const ArtifactSchema: GenMessage<Artifact>;
 /**
  * ArtifactStatus contains system-managed state for an artifact.
  *
- * @internal
- * Populated by the backend at creation time and updated by the GC job.
- * Users cannot modify status fields directly.
- *
- * @since T07 (Artifact Store)
- *
  * @generated from message ai.stigmer.agentic.artifact.v1.ArtifactStatus
  */
 export type ArtifactStatus = Message<"ai.stigmer.agentic.artifact.v1.ArtifactStatus"> & {
@@ -103,22 +65,12 @@ export type ArtifactStatus = Message<"ai.stigmer.agentic.artifact.v1.ArtifactSta
     /**
      * SHA-256 hash of the artifact content, hex-encoded (64 characters).
      *
-     * @internal
-     * Used as the blob storage key in the content-addressable store.
-     * Two artifacts with identical content share the same blob.
-     * The hash is computed by the backend at creation time and verified
-     * on download to ensure integrity.
-     *
      * @generated from field: string content_hash = 1;
      */
     contentHash: string;
     /**
      * Size of the artifact content in bytes.
      *
-     * @internal
-     * Set at creation time. Used by the UI to display file sizes and
-     * by the GC job to track storage consumption per organization.
-     *
      * @generated from field: int64 size_bytes = 2;
      */
     sizeBytes: bigint;
@@ -132,15 +84,6 @@ export type ArtifactStatus = Message<"ai.stigmer.agentic.artifact.v1.ArtifactSta
      * ISO 8601 timestamp when this artifact expires and becomes eligible
      * for garbage collection.
      *
-     * @internal
-     * Computed at creation time from spec.retention.ttl_days:
-     * - ttl_days > 0: created_at + ttl_days
-     * - ttl_days == 0: created_at + org_default_retention_days
-     * - ttl_days == -1: empty (permanent, never expires)
-     *
-     * The GC job scans for artifacts where expires_at < now() and
-     * transitions them to storage_state_deleted.
-     *
      * @generated from field: string expires_at = 4;
      */
     expiresAt: string;

package/ai/stigmer/agentic/artifact/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/artifact/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAyBpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,syBAAsyB,EAAE,CAAC,wCAAwC,EAAE,wCAAwC,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA4E//B;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAsE1D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/artifact/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAyBpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,syBAAsyB,EAAE,CAAC,wCAAwC,EAAE,wCAAwC,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA4C//B;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,aAAa,CAC/D,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AA6C1D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/artifact/v1/command_connect.d.ts

@@ -1,22 +1,6 @@
 /**
  * ArtifactCommandController handles write operations for Artifact resources.
  *
- * @internal
- * Follows the Command-Query Separation (CQS) pattern.
- *
- * These RPCs are system-level — used by the runner (stigmer-runner)
- * to persist task outputs. They are NOT exposed to end users or the SDK.
- *
- * Artifact creation flow:
- * 1. Runner detects output exceeding auto-promotion threshold (256KB)
- * 2. Runner calls create() with spec (metadata) + content (bytes)
- * 3. Backend hashes content, deduplicates, stores blob, creates record
- * 4. Runner receives Artifact with ID and status
- * 5. Runner replaces inline task output with artifact reference
- * 6. Runner includes artifact_created event in next updateStatus call
- *
- * @since T07 (Artifact Store)
- *
  * @generated from service ai.stigmer.agentic.artifact.v1.ArtifactCommandController
  */
 export declare const ArtifactCommandController: {
@@ -32,21 +16,6 @@ export declare const ArtifactCommandController: {
          * 4. Creates Artifact metadata record with status populated
          * 5. Returns the created Artifact
          *
-         * @internal
-         * Authorization: skip_authorization (system-level RPC, called by runners)
-         * The runner authenticates via service identity, not user credentials.
-         *
-         * Idempotent by content hash: creating the same content twice returns
-         * two distinct Artifact metadata records pointing to the same blob.
-         * This is intentional — different tasks may independently produce the
-         * same content, and each needs its own provenance trail.
-         *
-         * Error Cases:
-         *
-         * - INVALID_ARGUMENT: spec or content is missing/invalid
-         * - RESOURCE_EXHAUSTED: content exceeds 50MB limit
-         * - INTERNAL: blob storage write failure
-         *
          * @generated from rpc ai.stigmer.agentic.artifact.v1.ArtifactCommandController.create
          */
         readonly create: {
@@ -63,14 +32,6 @@ export declare const ArtifactCommandController: {
          * If other artifacts reference the same content hash, the blob is
          * retained until all references are deleted.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the artifact.
-         *
-         * Error Cases:
-         *
-         * - NOT_FOUND: Artifact with given ID doesn't exist
-         * - PERMISSION_DENIED: User lacks can_edit permission
-         *
          * @generated from rpc ai.stigmer.agentic.artifact.v1.ArtifactCommandController.delete
          */
         readonly delete: {

package/ai/stigmer/agentic/artifact/v1/command_connect.js

@@ -9,22 +9,6 @@ import { ApiResourceId } from "../../../commons/apiresource/io_pbjs";
 /**
  * ArtifactCommandController handles write operations for Artifact resources.
  *
- * @internal
- * Follows the Command-Query Separation (CQS) pattern.
- *
- * These RPCs are system-level — used by the runner (stigmer-runner)
- * to persist task outputs. They are NOT exposed to end users or the SDK.
- *
- * Artifact creation flow:
- * 1. Runner detects output exceeding auto-promotion threshold (256KB)
- * 2. Runner calls create() with spec (metadata) + content (bytes)
- * 3. Backend hashes content, deduplicates, stores blob, creates record
- * 4. Runner receives Artifact with ID and status
- * 5. Runner replaces inline task output with artifact reference
- * 6. Runner includes artifact_created event in next updateStatus call
- *
- * @since T07 (Artifact Store)
- *
  * @generated from service ai.stigmer.agentic.artifact.v1.ArtifactCommandController
  */
 export const ArtifactCommandController = {
@@ -40,21 +24,6 @@ export const ArtifactCommandController = {
          * 4. Creates Artifact metadata record with status populated
          * 5. Returns the created Artifact
          *
-         * @internal
-         * Authorization: skip_authorization (system-level RPC, called by runners)
-         * The runner authenticates via service identity, not user credentials.
-         *
-         * Idempotent by content hash: creating the same content twice returns
-         * two distinct Artifact metadata records pointing to the same blob.
-         * This is intentional — different tasks may independently produce the
-         * same content, and each needs its own provenance trail.
-         *
-         * Error Cases:
-         *
-         * - INVALID_ARGUMENT: spec or content is missing/invalid
-         * - RESOURCE_EXHAUSTED: content exceeds 50MB limit
-         * - INTERNAL: blob storage write failure
-         *
          * @generated from rpc ai.stigmer.agentic.artifact.v1.ArtifactCommandController.create
          */
         create: {
@@ -71,14 +40,6 @@ export const ArtifactCommandController = {
          * If other artifacts reference the same content hash, the blob is
          * retained until all references are deleted.
          *
-         * @internal
-         * Authorization: requires can_edit permission on the artifact.
-         *
-         * Error Cases:
-         *
-         * - NOT_FOUND: Artifact with given ID doesn't exist
-         * - PERMISSION_DENIED: User lacks can_edit permission
-         *
          * @generated from rpc ai.stigmer.agentic.artifact.v1.ArtifactCommandController.delete
          */
         delete: {

package/ai/stigmer/agentic/artifact/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/artifact/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/artifact/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}