@stigmer/protos 3.12.3 → 3.12.4

package/ai/stigmer/agentic/environment/v1/command_pb.d.ts

@@ -15,11 +15,6 @@ export declare const EnvironmentCommandController: GenService<{
     /**
      * Create or update an environment.
      *
-     * @internal
-     * The authorization and state-operation are determined depending on whether the
-     * environment is going to be created or updated, which is resolved as part of
-     * the request execution.
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.apply
      */
     apply: {
@@ -30,13 +25,6 @@ export declare const EnvironmentCommandController: GenService<{
     /**
      * Create an environment.
      *
-     * @internal
-     * Authorization:
-     * - Organization-scoped environments: Caller must have can_create_environment
-     *   permission in the organization.
-     * - Platform-scoped environments: Caller must be a platform operator
-     *   (handled automatically by common auth step).
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.create
      */
     create: {
@@ -47,9 +35,6 @@ export declare const EnvironmentCommandController: GenService<{
     /**
      * Update an existing environment.
      *
-     * @internal
-     * Authorization: requires can_edit permission on the environment resource.
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.update
      */
     update: {
@@ -68,15 +53,6 @@ export declare const EnvironmentCommandController: GenService<{
      * Secret values are revealed only to the environment's creator, at
      * every visibility level.
      *
-     * @internal
-     * Authorization: requires can_edit permission on the environment resource.
-     * public/platform levels are rejected via the kind's VisibilityConfig
-     * (supports_org only) — secret values must never be resolvable across the
-     * org boundary. Personal (stigmer.ai/personal) and OAuth-managed
-     * (stigmer.ai/managed) environments reject visibility changes entirely:
-     * sharing a personal credential bag or per-user OAuth tokens must be
-     * impossible, not merely discouraged.
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.updateVisibility
      */
     updateVisibility: {
@@ -87,9 +63,6 @@ export declare const EnvironmentCommandController: GenService<{
     /**
      * Delete an environment.
      *
-     * @internal
-     * Authorization: requires can_edit permission on the environment resource.
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.delete
      */
     delete: {
@@ -101,10 +74,6 @@ export declare const EnvironmentCommandController: GenService<{
      * Add or update specific variables in an environment.
      * Existing variables not included in the request are preserved unchanged.
      *
-     * @internal
-     * Authorization: requires can_edit permission on the environment resource.
-     * Server-side merge — secret values are re-encrypted on write.
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.updateVariables
      */
     updateVariables: {
@@ -116,9 +85,6 @@ export declare const EnvironmentCommandController: GenService<{
      * Remove specific variables from an environment by key.
      * Keys that do not exist are silently ignored.
      *
-     * @internal
-     * Authorization: requires can_edit permission on the environment resource.
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentCommandController.removeVariables
      */
     removeVariables: {

package/ai/stigmer/agentic/environment/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,gzDAAgzD,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEniE;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAmHpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,gzDAAgzD,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEniE;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAiFpC,aAAa,CAChB,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/io_pb.d.ts

@@ -28,11 +28,6 @@ export declare const EnvironmentIdSchema: GenMessage<EnvironmentId>;
 /**
  * Input for retrieving a single unredacted secret value from an environment.
  *
- * @internal
- * Single-key retrieval by design: limits blast radius if intercepted,
- * enables per-key audit trails, and matches the industry-standard
- * "reveal" UX pattern (AWS, GitHub, 1Password).
- *
  * @generated from message ai.stigmer.agentic.environment.v1.EnvironmentSecretValueInput
  */
 export type EnvironmentSecretValueInput = Message<"ai.stigmer.agentic.environment.v1.EnvironmentSecretValueInput"> & {
@@ -69,9 +64,6 @@ export type ListEnvironmentsRequest = Message<"ai.stigmer.agentic.environment.v1
     /**
      * Filter by metadata labels. AND semantics: the resource must match all provided labels.
      *
-     * @internal
-     * Example: {"stigmer.ai/personal": "true"} returns only personal environments.
-     *
      * @generated from field: map<string, string> labels = 2;
      */
     labels: {
@@ -117,10 +109,6 @@ export declare const EnvironmentListSchema: GenMessage<EnvironmentList>;
  * Request to add or update specific variables in an environment.
  * Existing variables not included in this request are preserved.
  *
- * @internal
- * Server-side merge. For secret variables the new value replaces the old
- * one and is re-encrypted server-side.
- *
  * @generated from message ai.stigmer.agentic.environment.v1.UpdateEnvironmentVariablesRequest
  */
 export type UpdateEnvironmentVariablesRequest = Message<"ai.stigmer.agentic.environment.v1.UpdateEnvironmentVariablesRequest"> & {

package/ai/stigmer/agentic/environment/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,2CAA2C,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,qtCAAqtC,EAAE,CAAC,0CAA0C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgBj4C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4B5D;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAiC5D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAuB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4B5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAuB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,2CAA2C,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,qtCAAqtC,EAAE,CAAC,0CAA0C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgBj4C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAuB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA8B5D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAuB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAwB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAuB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/query_connect.d.ts

@@ -9,9 +9,6 @@ export declare const EnvironmentQueryController: {
         /**
          * Get an environment by ID.
          *
-         * @internal
-         * Authorization: requires can_view permission on the environment resource.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.get
          */
         readonly get: {
@@ -24,10 +21,6 @@ export declare const EnvironmentQueryController: {
          * Get an environment by its organization-scoped reference (org/slug).
          * Resolves a human-readable reference like "acme/aws-prod" to the full Environment resource.
          *
-         * @internal
-         * Custom authorization in handler — checks both direct resource access
-         * and organization-level visibility permissions.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.getByReference
          */
         readonly getByReference: {
@@ -40,9 +33,6 @@ export declare const EnvironmentQueryController: {
          * Get the unredacted value of a single secret key in an environment.
          * Returns the EnvironmentValue with the decrypted value for exactly one key.
          *
-         * @internal
-         * Creator-only: FGA authorization grants can_read_secrets via the creator relation.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.getSecretValue
          */
         readonly getSecretValue: {
@@ -55,10 +45,6 @@ export declare const EnvironmentQueryController: {
          * List environments with optional label filtering.
          * Secret values are redacted in the response.
          *
-         * @internal
-         * Authorization is handled in-handler via FGA-filtered queries (cloud)
-         * or unrestricted store queries (OSS).
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.list
          */
         readonly list: {

package/ai/stigmer/agentic/environment/v1/query_connect.js

@@ -18,9 +18,6 @@ export const EnvironmentQueryController = {
         /**
          * Get an environment by ID.
          *
-         * @internal
-         * Authorization: requires can_view permission on the environment resource.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.get
          */
         get: {
@@ -33,10 +30,6 @@ export const EnvironmentQueryController = {
          * Get an environment by its organization-scoped reference (org/slug).
          * Resolves a human-readable reference like "acme/aws-prod" to the full Environment resource.
          *
-         * @internal
-         * Custom authorization in handler — checks both direct resource access
-         * and organization-level visibility permissions.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.getByReference
          */
         getByReference: {
@@ -49,9 +42,6 @@ export const EnvironmentQueryController = {
          * Get the unredacted value of a single secret key in an environment.
          * Returns the EnvironmentValue with the decrypted value for exactly one key.
          *
-         * @internal
-         * Creator-only: FGA authorization grants can_read_secrets via the creator relation.
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.getSecretValue
          */
         getSecretValue: {
@@ -64,10 +54,6 @@ export const EnvironmentQueryController = {
          * List environments with optional label filtering.
          * Secret values are redacted in the response.
          *
-         * @internal
-         * Authorization is handled in-handler via FGA-filtered queries (cloud)
-         * or unrestricted store queries (OSS).
-         *
          * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.list
          */
         list: {

package/ai/stigmer/agentic/environment/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,8DAA8D;IACxE,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,8DAA8D;IACxE,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,WAAW;YACd,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/environment/v1/query_pb.d.ts

@@ -16,9 +16,6 @@ export declare const EnvironmentQueryController: GenService<{
     /**
      * Get an environment by ID.
      *
-     * @internal
-     * Authorization: requires can_view permission on the environment resource.
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.get
      */
     get: {
@@ -30,10 +27,6 @@ export declare const EnvironmentQueryController: GenService<{
      * Get an environment by its organization-scoped reference (org/slug).
      * Resolves a human-readable reference like "acme/aws-prod" to the full Environment resource.
      *
-     * @internal
-     * Custom authorization in handler — checks both direct resource access
-     * and organization-level visibility permissions.
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.getByReference
      */
     getByReference: {
@@ -45,9 +38,6 @@ export declare const EnvironmentQueryController: GenService<{
      * Get the unredacted value of a single secret key in an environment.
      * Returns the EnvironmentValue with the decrypted value for exactly one key.
      *
-     * @internal
-     * Creator-only: FGA authorization grants can_read_secrets via the creator relation.
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.getSecretValue
      */
     getSecretValue: {
@@ -59,10 +49,6 @@ export declare const EnvironmentQueryController: GenService<{
      * List environments with optional label filtering.
      * Secret values are redacted in the response.
      *
-     * @internal
-     * Authorization is handled in-handler via FGA-filtered queries (cloud)
-     * or unrestricted store queries (OSS).
-     *
      * @generated from rpc ai.stigmer.agentic.environment.v1.EnvironmentQueryController.list
      */
     list: {

package/ai/stigmer/agentic/environment/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,2CAA2C,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,o+BAAo+B,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEpwC;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GA0DlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,0CAA0C,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,yCAAyC,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAE,2CAA2C,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,o+BAAo+B,EAAE,CAAC,0CAA0C,EAAE,yCAAyC,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEpwC;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GA4ClC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/environment/v1/spec_pb.d.ts

@@ -7,9 +7,6 @@ export declare const file_ai_stigmer_agentic_environment_v1_spec: GenFile;
 /**
  * EnvironmentSpec defines the configurable properties of an environment.
  *
- * @internal
- * The overview.md file provides the SDK-facing description and example YAML.
- *
  * @generated from message ai.stigmer.agentic.environment.v1.EnvironmentSpec
  */
 export type EnvironmentSpec = Message<"ai.stigmer.agentic.environment.v1.EnvironmentSpec"> & {
@@ -43,21 +40,12 @@ export type EnvironmentValue = Message<"ai.stigmer.agentic.environment.v1.Enviro
     /**
      * The configuration or secret string.
      *
-     * @internal
-     * When is_secret is true the value is encrypted at rest and redacted in logs.
-     * When is_secret is false the value is stored as plaintext.
-     * Value can be empty when pre-declaring keys whose values are injected at runtime.
-     *
      * @generated from field: string value = 1;
      */
     value: string;
     /**
      * Whether this value should be treated as a secret.
      *
-     * @internal
-     * When true: encrypted at rest, redacted in logs, requires can_read_secrets to reveal.
-     * When false: stored as plaintext, visible in audit logs.
-     *
      * @generated from field: bool is_secret = 2;
      */
     isSecret: boolean;
@@ -88,10 +76,6 @@ export type EnvVarDeclaration = Message<"ai.stigmer.agentic.environment.v1.EnvVa
     /**
      * Whether the resolved value should be treated as a secret.
      *
-     * @internal
-     * When true: encrypted at rest, redacted in logs and Temporal history.
-     * When false: stored as plaintext, visible in audit logs.
-     *
      * @generated from field: bool is_secret = 1;
      */
     isSecret: boolean;
@@ -105,12 +89,6 @@ export type EnvVarDeclaration = Message<"ai.stigmer.agentic.environment.v1.EnvVa
     /**
      * Whether this variable is optional.
      *
-     * @internal
-     * When false (default): the execution pipeline rejects a run if this
-     * variable is missing from the user's environment.
-     * When true: a missing value is acceptable (the MCP server or agent
-     * degrades gracefully without it).
-     *
      * @generated from field: bool optional = 3;
      */
     optional: boolean;

package/ai/stigmer/agentic/environment/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,qmBAAqmB,CAAC,CAAC;AA2BlnB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAuC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/environment/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,qmBAAqmB,CAAC,CAAC;AAwBlnB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAqC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/api_pb.d.ts

@@ -10,10 +10,6 @@ export declare const file_ai_stigmer_agentic_executioncontext_v1_api: GenFile;
 /**
  * Ephemeral runtime configuration and secrets scoped to a single execution.
  *
- * @internal
- * Created by the execution engine at start, deleted when execution completes.
- * Used for B2B scenarios where secrets are injected at runtime.
- *
  * @generated from message ai.stigmer.agentic.executioncontext.v1.ExecutionContext
  */
 export type ExecutionContext = Message<"ai.stigmer.agentic.executioncontext.v1.ExecutionContext"> & {

package/ai/stigmer/agentic/executioncontext/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,gDAAgD,EAAE,MAAM,cAAc,CAAC;AAEhF,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,wkBAAwkB,EAAE,CAAC,gDAAgD,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgD/vB;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,gDAAgD,EAAE,MAAM,cAAc,CAAC;AAEhF,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,wkBAAwkB,EAAE,CAAC,gDAAgD,EAAE,4CAA4C,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA4C/vB;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/command_connect.d.ts

@@ -1,24 +1,6 @@
 /**
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
- * @internal
- * Every write RPC uses is_skip_authorization with a real handler-level check
- * (the framework's declarative FGA options cannot express any of these):
- *   - create: the caller-class differs by transport. Internal in-process
- *     pipeline calls (agent execution, workflow execution, workflow recovery,
- *     MCP connect) are trusted — the parent operation already authorized the
- *     run against its session-or-org, and the EC is created before that parent
- *     is persisted, so it carries no resource to re-check. External callers
- *     must hold can_create_execution_in on metadata.org (the same bar that
- *     gates creating an execution in the org; held by members and guests).
- *     A declarative org option cannot encode the internal/external split.
- *   - apply: intentionally unannotated router — it delegates to create
- *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
- *     pipeline runs under create's handler, authorization included.
- *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
- *     per the execution_context FGA model). The FGA target is the loaded
- *     resource, so it cannot be a declarative method option.
- *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
 export declare const ExecutionContextCommandController: {
@@ -27,11 +9,6 @@ export declare const ExecutionContextCommandController: {
         /**
          * Create or update an ExecutionContext.
          *
-         * @internal
-         * Router only: delegates to create when the resource does not exist and
-         * fails with ALREADY_EXISTS when it does (no update RPC). Authorization is
-         * inherited from the delegated create pipeline.
-         *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.apply
          */
         readonly apply: {
@@ -43,15 +20,6 @@ export declare const ExecutionContextCommandController: {
         /**
          * Create a new ExecutionContext for an execution.
          *
-         * @internal
-         * Called by the execution pipelines (agent execution, workflow execution,
-         * workflow recovery, MCP connect) as sub-steps, and reachable directly by
-         * API clients. is_skip_authorization because the caller-class split cannot
-         * be a declarative option: the create handler trusts internal in-process
-         * calls (already authorized upstream) and requires external callers to hold
-         * can_create_execution_in on metadata.org. The pipeline additionally grants
-         * the caller the owner tuple, which gates all subsequent reads and delete.
-         *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
          */
         readonly create: {
@@ -63,12 +31,6 @@ export declare const ExecutionContextCommandController: {
         /**
          * Delete an ExecutionContext.
          *
-         * @internal
-         * Called when execution completes. Handler-level auth (the FGA target is the
-         * loaded resource, so it cannot be a declarative option): caller must have
-         * can_edit on execution_context:<id>, which the FGA model resolves to the
-         * owner written at create time.
-         *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
          */
         readonly delete: {

package/ai/stigmer/agentic/executioncontext/v1/command_connect.js

@@ -8,24 +8,6 @@ import { ApiResourceDeleteInput } from "../../../commons/apiresource/io_pbjs";
 /**
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
- * @internal
- * Every write RPC uses is_skip_authorization with a real handler-level check
- * (the framework's declarative FGA options cannot express any of these):
- *   - create: the caller-class differs by transport. Internal in-process
- *     pipeline calls (agent execution, workflow execution, workflow recovery,
- *     MCP connect) are trusted — the parent operation already authorized the
- *     run against its session-or-org, and the EC is created before that parent
- *     is persisted, so it carries no resource to re-check. External callers
- *     must hold can_create_execution_in on metadata.org (the same bar that
- *     gates creating an execution in the org; held by members and guests).
- *     A declarative org option cannot encode the internal/external split.
- *   - apply: intentionally unannotated router — it delegates to create
- *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
- *     pipeline runs under create's handler, authorization included.
- *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
- *     per the execution_context FGA model). The FGA target is the loaded
- *     resource, so it cannot be a declarative method option.
- *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
 export const ExecutionContextCommandController = {
@@ -34,11 +16,6 @@ export const ExecutionContextCommandController = {
         /**
          * Create or update an ExecutionContext.
          *
-         * @internal
-         * Router only: delegates to create when the resource does not exist and
-         * fails with ALREADY_EXISTS when it does (no update RPC). Authorization is
-         * inherited from the delegated create pipeline.
-         *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.apply
          */
         apply: {
@@ -50,15 +27,6 @@ export const ExecutionContextCommandController = {
         /**
          * Create a new ExecutionContext for an execution.
          *
-         * @internal
-         * Called by the execution pipelines (agent execution, workflow execution,
-         * workflow recovery, MCP connect) as sub-steps, and reachable directly by
-         * API clients. is_skip_authorization because the caller-class split cannot
-         * be a declarative option: the create handler trusts internal in-process
-         * calls (already authorized upstream) and requires external callers to hold
-         * can_create_execution_in on metadata.org. The pipeline additionally grants
-         * the caller the owner tuple, which gates all subsequent reads and delete.
-         *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
          */
         create: {
@@ -70,12 +38,6 @@ export const ExecutionContextCommandController = {
         /**
          * Delete an ExecutionContext.
          *
-         * @internal
-         * Called when execution completes. Handler-level auth (the FGA target is the
-         * loaded resource, so it cannot be a declarative option): caller must have
-         * can_edit on execution_context:<id>, which the FGA model resolves to the
-         * owner written at create time.
-         *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
          */
         delete: {

package/ai/stigmer/agentic/executioncontext/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;;;;;;WASG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/command_pb.d.ts

@@ -8,35 +8,12 @@ export declare const file_ai_stigmer_agentic_executioncontext_v1_command: GenFil
 /**
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
- * @internal
- * Every write RPC uses is_skip_authorization with a real handler-level check
- * (the framework's declarative FGA options cannot express any of these):
- *   - create: the caller-class differs by transport. Internal in-process
- *     pipeline calls (agent execution, workflow execution, workflow recovery,
- *     MCP connect) are trusted — the parent operation already authorized the
- *     run against its session-or-org, and the EC is created before that parent
- *     is persisted, so it carries no resource to re-check. External callers
- *     must hold can_create_execution_in on metadata.org (the same bar that
- *     gates creating an execution in the org; held by members and guests).
- *     A declarative org option cannot encode the internal/external split.
- *   - apply: intentionally unannotated router — it delegates to create
- *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
- *     pipeline runs under create's handler, authorization included.
- *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
- *     per the execution_context FGA model). The FGA target is the loaded
- *     resource, so it cannot be a declarative method option.
- *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
 export declare const ExecutionContextCommandController: GenService<{
     /**
      * Create or update an ExecutionContext.
      *
-     * @internal
-     * Router only: delegates to create when the resource does not exist and
-     * fails with ALREADY_EXISTS when it does (no update RPC). Authorization is
-     * inherited from the delegated create pipeline.
-     *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.apply
      */
     apply: {
@@ -47,15 +24,6 @@ export declare const ExecutionContextCommandController: GenService<{
     /**
      * Create a new ExecutionContext for an execution.
      *
-     * @internal
-     * Called by the execution pipelines (agent execution, workflow execution,
-     * workflow recovery, MCP connect) as sub-steps, and reachable directly by
-     * API clients. is_skip_authorization because the caller-class split cannot
-     * be a declarative option: the create handler trusts internal in-process
-     * calls (already authorized upstream) and requires external callers to hold
-     * can_create_execution_in on metadata.org. The pipeline additionally grants
-     * the caller the owner tuple, which gates all subsequent reads and delete.
-     *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
      */
     create: {
@@ -66,12 +34,6 @@ export declare const ExecutionContextCommandController: GenService<{
     /**
      * Delete an ExecutionContext.
      *
-     * @internal
-     * Called when execution completes. Handler-level auth (the FGA target is the
-     * loaded resource, so it cannot be a declarative option): caller must have
-     * can_edit on execution_context:<id>, which the FGA model resolves to the
-     * owner written at create time.
-     *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
      */
     delete: {

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js

@@ -13,24 +13,6 @@ export const file_ai_stigmer_agentic_executioncontext_v1_command = /*@__PURE__*/
 /**
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
- * @internal
- * Every write RPC uses is_skip_authorization with a real handler-level check
- * (the framework's declarative FGA options cannot express any of these):
- *   - create: the caller-class differs by transport. Internal in-process
- *     pipeline calls (agent execution, workflow execution, workflow recovery,
- *     MCP connect) are trusted — the parent operation already authorized the
- *     run against its session-or-org, and the EC is created before that parent
- *     is persisted, so it carries no resource to re-check. External callers
- *     must hold can_create_execution_in on metadata.org (the same bar that
- *     gates creating an execution in the org; held by members and guests).
- *     A declarative org option cannot encode the internal/external split.
- *   - apply: intentionally unannotated router — it delegates to create
- *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
- *     pipeline runs under create's handler, authorization included.
- *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
- *     per the execution_context FGA model). The FGA target is the loaded
- *     resource, so it cannot be a declarative method option.
- *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
 export const ExecutionContextCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_executioncontext_v1_command, 0);

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,4sBAA4sB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEz5B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAmDzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,4sBAA4sB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEz5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GA+BzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/io_pb.d.ts

@@ -23,19 +23,12 @@ export declare const ExecutionContextIdSchema: GenMessage<ExecutionContextId>;
 /**
  * Input for looking up an ExecutionContext by its parent execution ID.
  *
- * @internal
- * Primary lookup method used by runners to retrieve merged environment
- * variables during execution.
- *
  * @generated from message ai.stigmer.agentic.executioncontext.v1.ExecutionContextExecutionIdInput
  */
 export type ExecutionContextExecutionIdInput = Message<"ai.stigmer.agentic.executioncontext.v1.ExecutionContextExecutionIdInput"> & {
     /**
      * AgentExecution or WorkflowExecution ID to look up.
      *
-     * @internal
-     * Must match the execution_id field in ExecutionContextSpec.
-     *
      * @generated from field: string execution_id = 1;
      */
     executionId: string;

package/ai/stigmer/agentic/executioncontext/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uIAAuI;AACvI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,yRAAyR,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAcpU;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAuBjE;;;GAGG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAiD,aAAa,CAC/G,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uIAAuI;AACvI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,yRAAyR,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAcpU;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;AAgBjE;;;GAGG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAiD,aAAa,CAC/G,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}