@stigmer/protos 3.12.3 → 3.12.4

package/ai/stigmer/iam/platformclient/v1/token_pb.d.ts

@@ -141,29 +141,6 @@ export type MintGuestTokenRequest = Message<"ai.stigmer.iam.platformclient.v1.Mi
      * literal value "null" reports a framed page whose parent origin could not
      * be determined (opaque origin).
      *
-     * @internal
-     * Validated at mint against the share's spec.allowed_origins: empty list
-     * admits any origin; a non-empty list refuses PERMISSION_DENIED for
-     * unlisted origins and for "null". An empty field always passes for
-     * hosted-page and non-browser requests (the anyone-with-link hosted
-     * page). The validated value is stamped into the guest JWT as the
-     * embed_origin claim and re-validated against the live list by the
-     * guest create-time gate.
-     *
-     * The hosted server cross-checks this field against the request's
-     * browser-enforced Origin header (stigmer-cloud#341). When the header
-     * is a third-party origin (a direct SDK embed), the header is
-     * authoritative: a non-empty field that disagrees with it is refused
-     * PERMISSION_DENIED naming both origins, and an empty field resolves
-     * to the header instead of the hosted-page exemption. When the header
-     * is Stigmer's own hosted-page origin, this self-report is the only
-     * embedder signal (the iframe'd page's RPCs carry Stigmer's origin) —
-     * the widget code derives it from browser-authentic sources the
-     * embedder cannot alter. Non-browser callers send no Origin header and
-     * keep the self-report semantics; they gain nothing by omitting it
-     * since the hosted link is anyone-with-link (decision 001) — rate
-     * limits and the billing gate remain the API guards.
-     *
      * @generated from field: string embed_origin = 4;
      */
     embedOrigin: string;
@@ -173,15 +150,6 @@ export type MintGuestTokenRequest = Message<"ai.stigmer.iam.platformclient.v1.Mi
      * Required when the share link has been locked with rotateShareLink;
      * ignored for plain share links.
      *
-     * @internal
-     * Validated at mint against the share's live status.share_link_token
-     * (mismatch or absence answers the same NOT_FOUND as a disabled share,
-     * so a killed link is indistinguishable from a nonexistent one). The
-     * validated value is stamped into the guest JWT as the link_token claim
-     * and re-validated against the live value by the guest create-time gate
-     * on every session/execution create — rotation therefore revokes live
-     * guest tokens on their next message, exactly like disabling the share.
-     *
      * @generated from field: string link_token = 5;
      */
     linkToken: string;
@@ -283,11 +251,6 @@ export declare const PlatformClientTokenController: GenService<{
      * is not on the list are refused PERMISSION_DENIED (see the
      * allowed_origins field docs in spec.proto for the exact semantics).
      *
-     * @internal
-     * This RPC is public — no Bearer token is required. The caller authenticates
-     * by providing client_id + client_secret in the request body. The handler
-     * validates these credentials as business logic, not via the auth interceptor.
-     *
      * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientTokenController.mintUserToken
      */
     mintUserToken: {
@@ -302,13 +265,6 @@ export declare const PlatformClientTokenController: GenService<{
      * PlatformClient and guest identity account lazily, and returns a short-lived
      * Stigmer-signed JWT scoped to that org.
      *
-     * @internal
-     * Public — no Bearer token. No PlatformClient credentials. The handler gates
-     * on an enabled public-audience share (NOT_FOUND when disabled or missing)
-     * and stamps the resolved share's id into the guest JWT as the share_id
-     * claim — the create-time gate re-reads the live share by that id on every
-     * session/execution create (decision 011 D6).
-     *
      * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientTokenController.mintGuestToken
      */
     mintGuestToken: {

package/ai/stigmer/iam/platformclient/v1/token_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,omDAAomD,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwE3rD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAyF9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAwC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAkErC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,omDAAomD,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwE3rD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAyD9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAwC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAsDrC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/v1/enum_pb.d.ts

@@ -210,12 +210,6 @@ export declare enum IamPermission {
      * conversations: reply to customers as the business, take over and
      * hand back the control token, and clear the attention flag.
      *
-     * @internal
-     * channel-conversations DD-010: computed from the participant role on
-     * agent_channel. Deliberately distinct from can_edit — "may talk to
-     * this channel's customers" and "may configure this channel" are
-     * different powers, and the ISC pilot's trainers hold only the first.
-     *
      * @generated from enum value: can_participate = 36;
      */
     can_participate = 36,
@@ -230,7 +224,18 @@ export declare enum IamPermission {
      *
      * @generated from enum value: can_write_reserved_labels = 37;
      */
-    can_write_reserved_labels = 37
+    can_write_reserved_labels = 37,
+    /**
+     * Platform-level permission to view platform provider standing: the
+     * canary-probe verdicts (health, billing/auth rejections, latency) for
+     * the platform's own LLM provider accounts. Read-only and gated to
+     * platform operators — provider account health is platform-internal,
+     * never org-visible. Deliberately distinct from the manage-class
+     * platform permissions: the standing console only observes (cloud#447).
+     *
+     * @generated from enum value: can_view_provider_standing = 38;
+     */
+    can_view_provider_standing = 38
 }
 /**
  * Describes the enum ai.stigmer.iam.v1.IamPermission.
@@ -284,13 +289,6 @@ export declare enum IamRole {
      * conversations and speak to its customers as the business (reply, take
      * over, hand back, clear attention). Not a channel configurator.
      *
-     * @internal
-     * channel-conversations DD-010. Grantable only on agent_channel — the
-     * second kind-scoped role after organization's admin/member; the
-     * grantable_roles subsetting is the mechanism, not a new one. Team
-     * usersets ([team#member]) are the named widening the day a team FGA
-     * type lands.
-     *
      * @generated from enum value: participant = 5;
      */
     participant = 5

package/ai/stigmer/iam/v1/enum_pb.js

@@ -5,7 +5,7 @@ import { enumDesc, fileDesc } from "@bufbuild/protobuf/codegenv1";
 /**
  * Describes the file ai/stigmer/iam/v1/enum.proto.
  */
-export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("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");
+export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("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");
 /**
  * IamPermission defines the permissions checked by the authorization
  * interceptor before an RPC handler executes.
@@ -214,12 +214,6 @@ export var IamPermission;
      * conversations: reply to customers as the business, take over and
      * hand back the control token, and clear the attention flag.
      *
-     * @internal
-     * channel-conversations DD-010: computed from the participant role on
-     * agent_channel. Deliberately distinct from can_edit — "may talk to
-     * this channel's customers" and "may configure this channel" are
-     * different powers, and the ISC pilot's trainers hold only the first.
-     *
      * @generated from enum value: can_participate = 36;
      */
     IamPermission[IamPermission["can_participate"] = 36] = "can_participate";
@@ -235,6 +229,17 @@ export var IamPermission;
      * @generated from enum value: can_write_reserved_labels = 37;
      */
     IamPermission[IamPermission["can_write_reserved_labels"] = 37] = "can_write_reserved_labels";
+    /**
+     * Platform-level permission to view platform provider standing: the
+     * canary-probe verdicts (health, billing/auth rejections, latency) for
+     * the platform's own LLM provider accounts. Read-only and gated to
+     * platform operators — provider account health is platform-internal,
+     * never org-visible. Deliberately distinct from the manage-class
+     * platform permissions: the standing console only observes (cloud#447).
+     *
+     * @generated from enum value: can_view_provider_standing = 38;
+     */
+    IamPermission[IamPermission["can_view_provider_standing"] = 38] = "can_view_provider_standing";
 })(IamPermission || (IamPermission = {}));
 /**
  * Describes the enum ai.stigmer.iam.v1.IamPermission.
@@ -289,13 +294,6 @@ export var IamRole;
      * conversations and speak to its customers as the business (reply, take
      * over, hand back, clear attention). Not a channel configurator.
      *
-     * @internal
-     * channel-conversations DD-010. Grantable only on agent_channel — the
-     * second kind-scoped role after organization's admin/member; the
-     * grantable_roles subsetting is the mechanism, not a new one. Team
-     * usersets ([team#member]) are the named widening the day a team FGA
-     * type lands.
-     *
      * @generated from enum value: participant = 5;
      */
     IamRole[IamRole["participant"] = 5] = "participant";

package/ai/stigmer/iam/v1/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/iam/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+FAA+F;AAC/F,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAY,aAAa,CAC/D,QAAQ,CAAC,45CAA45C,CAAC,CAAC;AAEz6C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,aAwPX;AAxPD,WAAY,aAAa;IACvB;;OAEG;IACH,+DAAe,CAAA;IAEf;;;;OAIG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,6DAAc,CAAA;IAEd;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,uEAAmB,CAAA;IAEnB;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,+EAAuB,CAAA;IAEvB;;OAEG;IACH,6EAAsB,CAAA;IAEtB;;OAEG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;OAEG;IACH,sEAAmB,CAAA;IAEnB;;OAEG;IACH,sFAA2B,CAAA;IAE3B;;OAEG;IACH,gGAAgC,CAAA;IAEhC;;OAEG;IACH,kFAAyB,CAAA;IAEzB;;OAEG;IACH,8FAA+B,CAAA;IAE/B;;;;OAIG;IACH,wFAA4B,CAAA;IAE5B;;OAEG;IACH,gFAAwB,CAAA;IAExB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;OAEG;IACH,kGAAiC,CAAA;IAEjC;;;;OAIG;IACH,kFAAyB,CAAA;IAEzB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,8EAAuB,CAAA;IAEvB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;;;;OAKG;IACH,wFAA4B,CAAA;IAE5B;;;;;;;;;;;OAWG;IACH,sFAA2B,CAAA;IAE3B;;;;;;OAMG;IACH,sFAA2B,CAAA;IAE3B;;;;;;;OAOG;IACH,0FAA6B,CAAA;IAE7B;;;;;;;;OAQG;IACH,8FAA+B,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,wEAAoB,CAAA;IAEpB;;;;;;;;;;OAUG;IACH,4FAA8B,CAAA;AAChC,CAAC,EAxPW,aAAa,KAAb,aAAa,QAwPxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,OAiDX;AAjDD,WAAY,OAAO;IACjB;;OAEG;IACH,qEAAwB,CAAA;IAExB;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;;;;;;;;;;OAaG;IACH,mDAAe,CAAA;AACjB,CAAC,EAjDW,OAAO,KAAP,OAAO,QAiDlB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB,aAAa,CAC1D,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/iam/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+FAA+F;AAC/F,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAY,aAAa,CAC/D,QAAQ,CAAC,s8CAAs8C,CAAC,CAAC;AAEn9C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,aA8PX;AA9PD,WAAY,aAAa;IACvB;;OAEG;IACH,+DAAe,CAAA;IAEf;;;;OAIG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,6DAAc,CAAA;IAEd;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,uEAAmB,CAAA;IAEnB;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,+EAAuB,CAAA;IAEvB;;OAEG;IACH,6EAAsB,CAAA;IAEtB;;OAEG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;OAEG;IACH,sEAAmB,CAAA;IAEnB;;OAEG;IACH,sFAA2B,CAAA;IAE3B;;OAEG;IACH,gGAAgC,CAAA;IAEhC;;OAEG;IACH,kFAAyB,CAAA;IAEzB;;OAEG;IACH,8FAA+B,CAAA;IAE/B;;;;OAIG;IACH,wFAA4B,CAAA;IAE5B;;OAEG;IACH,gFAAwB,CAAA;IAExB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;OAEG;IACH,kGAAiC,CAAA;IAEjC;;;;OAIG;IACH,kFAAyB,CAAA;IAEzB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,8EAAuB,CAAA;IAEvB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;;;;OAKG;IACH,wFAA4B,CAAA;IAE5B;;;;;;;;;;;OAWG;IACH,sFAA2B,CAAA;IAE3B;;;;;;OAMG;IACH,sFAA2B,CAAA;IAE3B;;;;;;;OAOG;IACH,0FAA6B,CAAA;IAE7B;;;;;;;;OAQG;IACH,8FAA+B,CAAA;IAE/B;;;;;;OAMG;IACH,wEAAoB,CAAA;IAEpB;;;;;;;;;;OAUG;IACH,4FAA8B,CAAA;IAE9B;;;;;;;;;OASG;IACH,8FAA+B,CAAA;AACjC,CAAC,EA9PW,aAAa,KAAb,aAAa,QA8PxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,OA0CX;AA1CD,WAAY,OAAO;IACjB;;OAEG;IACH,qEAAwB,CAAA;IAExB;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;;;OAMG;IACH,mDAAe,CAAA;AACjB,CAAC,EA1CW,OAAO,KAAP,OAAO,QA0ClB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB,aAAa,CAC1D,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/cursoraccount/v1/command_connect.d.ts

@@ -8,13 +8,6 @@
  * the resource holds provider key material and per-member spend, which
  * are platform-internal and never org-visible.
  *
- * @internal
- * Cloud-only. The OSS Go server does not implement this service — in the
- * OSS edition Cursor credentials are the user's own (BYOK env var), so
- * there is nothing to manage. Handlers refuse writes when secret
- * encryption is not enabled on the deployment (FAILED_PRECONDITION):
- * silently persisting plaintext keys is never acceptable for this store.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController
  */
 export declare const CursorAccountCommandController: {

package/ai/stigmer/platform/cursoraccount/v1/command_connect.js

@@ -15,13 +15,6 @@ import { MethodKind } from "@bufbuild/protobuf";
  * the resource holds provider key material and per-member spend, which
  * are platform-internal and never org-visible.
  *
- * @internal
- * Cloud-only. The OSS Go server does not implement this service — in the
- * OSS edition Cursor credentials are the user's own (BYOK env var), so
- * there is nothing to manage. Handlers refuse writes when secret
- * encryption is not enabled on the deployment (FAILED_PRECONDITION):
- * silently persisting plaintext keys is never acceptable for this store.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController
  */
 export const CursorAccountCommandController = {

package/ai/stigmer/platform/cursoraccount/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wIAAwI;AACxI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC/M,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,qEAAqE;IAC/E,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,qBAAqB,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,8BAA8B;YACjC,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wIAAwI;AACxI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC/M,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,qEAAqE;IAC/E,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,qBAAqB,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,8BAA8B;YACjC,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/platform/cursoraccount/v1/command_pb.d.ts

@@ -15,13 +15,6 @@ export declare const file_ai_stigmer_platform_cursoraccount_v1_command: GenFile;
  * the resource holds provider key material and per-member spend, which
  * are platform-internal and never org-visible.
  *
- * @internal
- * Cloud-only. The OSS Go server does not implement this service — in the
- * OSS edition Cursor credentials are the user's own (BYOK env var), so
- * there is nothing to manage. Handlers refuse writes when secret
- * encryption is not enabled on the deployment (FAILED_PRECONDITION):
- * silently persisting plaintext keys is never acceptable for this store.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController
  */
 export declare const CursorAccountCommandController: GenService<{

package/ai/stigmer/platform/cursoraccount/v1/command_pb.js

@@ -19,13 +19,6 @@ export const file_ai_stigmer_platform_cursoraccount_v1_command = /*@__PURE__*/ f
  * the resource holds provider key material and per-member spend, which
  * are platform-internal and never org-visible.
  *
- * @internal
- * Cloud-only. The OSS Go server does not implement this service — in the
- * OSS edition Cursor credentials are the user's own (BYOK env var), so
- * there is nothing to manage. Handlers refuse writes when secret
- * encryption is not enabled on the deployment (FAILED_PRECONDITION):
- * silently persisting plaintext keys is never acceptable for this store.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController
  */
 export const CursorAccountCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_platform_cursoraccount_v1_command, 0);

package/ai/stigmer/platform/cursoraccount/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,wDAAwD,EAAE,MAAM,wBAAwB,CAAC;AAElG,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,s2DAAs2D,EAAE,CAAC,0CAA0C,EAAE,wDAAwD,EAAE,4CAA4C,CAAC,CAAC,CAAC;AAEzgE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAyEtC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,wDAAwD,EAAE,MAAM,wBAAwB,CAAC;AAElG,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,s2DAAs2D,EAAE,CAAC,0CAA0C,EAAE,wDAAwD,EAAE,4CAA4C,CAAC,CAAC,CAAC;AAEzgE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAyEtC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/cursoraccount/v1/query_connect.d.ts

@@ -6,9 +6,6 @@
  * reveals team structure and per-member spend, which are
  * platform-internal.
  *
- * @internal
- * Cloud-only; not implemented by the OSS Go server.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController
  */
 export declare const CursorAccountQueryController: {

package/ai/stigmer/platform/cursoraccount/v1/query_connect.js

@@ -12,9 +12,6 @@ import { MethodKind } from "@bufbuild/protobuf";
  * reveals team structure and per-member spend, which are
  * platform-internal.
  *
- * @internal
- * Cloud-only; not implemented by the OSS Go server.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController
  */
 export const CursorAccountQueryController = {

package/ai/stigmer/platform/cursoraccount/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,mEAAmE;IAC7E,OAAO,EAAE;QACP;;;;;WAKG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,mEAAmE;IAC7E,OAAO,EAAE;QACP;;;;;WAKG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/platform/cursoraccount/v1/query_pb.d.ts

@@ -12,9 +12,6 @@ export declare const file_ai_stigmer_platform_cursoraccount_v1_query: GenFile;
  * reveals team structure and per-member spend, which are
  * platform-internal.
  *
- * @internal
- * Cloud-only; not implemented by the OSS Go server.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController
  */
 export declare const CursorAccountQueryController: GenService<{

package/ai/stigmer/platform/cursoraccount/v1/query_pb.js

@@ -16,9 +16,6 @@ export const file_ai_stigmer_platform_cursoraccount_v1_query = /*@__PURE__*/ fil
  * reveals team structure and per-member spend, which are
  * platform-internal.
  *
- * @internal
- * Cloud-only; not implemented by the OSS Go server.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController
  */
 export const CursorAccountQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_platform_cursoraccount_v1_query, 0);

package/ai/stigmer/platform/cursoraccount/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,gvBAAgvB,EAAE,CAAC,0CAA0C,EAAE,4CAA4C,CAAC,CAAC,CAAC;AAEz1B;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAyBpC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,gvBAAgvB,EAAE,CAAC,0CAA0C,EAAE,4CAA4C,CAAC,CAAC,CAAC;AAEz1B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAyBpC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/github/v1/service_connect.d.ts

@@ -6,13 +6,6 @@
  * authorize URL construction and the authorization-code-for-token
  * exchange so callers do not handle OAuth details directly.
  *
- * @internal
- * This is a platform utility service — not a domain resource.
- * The backend protects the client_secret during the token exchange
- * and constructs the authorize URL with the registered client_id and
- * redirect_uri so the frontend never needs those values.
- * Tokens are ephemeral — returned to the caller and never persisted.
- *
  * @generated from service ai.stigmer.platform.github.v1.GitHubService
  */
 export declare const GitHubService: {
@@ -25,11 +18,6 @@ export declare const GitHubService: {
          * CSRF protection. After the user authorizes, GitHub redirects back
          * to your redirect_uri with an authorization code.
          *
-         * @internal
-         * The backend constructs the URL with the registered client_id, requested
-         * scopes, and the state parameter. Authorization is skipped because this
-         * is a pre-authentication step.
-         *
          * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.getOAuthAuthorizeUrl
          */
         readonly getOAuthAuthorizeUrl: {
@@ -45,12 +33,6 @@ export declare const GitHubService: {
          * redirect. Pass the code, the state from the original authorize request,
          * and the same redirect_uri. Returns an access token for GitHub API calls.
          *
-         * @internal
-         * The backend performs the token exchange using the client_secret, which
-         * must never be exposed to the frontend. The returned access_token is NOT
-         * stored by the backend — the caller is responsible for persisting it and
-         * including it in subsequent requests that need GitHub access.
-         *
          * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.exchangeOAuthCode
          */
         readonly exchangeOAuthCode: {

package/ai/stigmer/platform/github/v1/service_connect.js

@@ -12,13 +12,6 @@ import { MethodKind } from "@bufbuild/protobuf";
  * authorize URL construction and the authorization-code-for-token
  * exchange so callers do not handle OAuth details directly.
  *
- * @internal
- * This is a platform utility service — not a domain resource.
- * The backend protects the client_secret during the token exchange
- * and constructs the authorize URL with the registered client_id and
- * redirect_uri so the frontend never needs those values.
- * Tokens are ephemeral — returned to the caller and never persisted.
- *
  * @generated from service ai.stigmer.platform.github.v1.GitHubService
  */
 export const GitHubService = {
@@ -31,11 +24,6 @@ export const GitHubService = {
          * CSRF protection. After the user authorizes, GitHub redirects back
          * to your redirect_uri with an authorization code.
          *
-         * @internal
-         * The backend constructs the URL with the registered client_id, requested
-         * scopes, and the state parameter. Authorization is skipped because this
-         * is a pre-authentication step.
-         *
          * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.getOAuthAuthorizeUrl
          */
         getOAuthAuthorizeUrl: {
@@ -51,12 +39,6 @@ export const GitHubService = {
          * redirect. Pass the code, the state from the original authorize request,
          * and the same redirect_uri. Returns an access token for GitHub API calls.
          *
-         * @internal
-         * The backend performs the token exchange using the client_secret, which
-         * must never be exposed to the frontend. The returned access_token is NOT
-         * stored by the backend — the caller is responsible for persisting it and
-         * including it in subsequent requests that need GitHub access.
-         *
          * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.exchangeOAuthCode
          */
         exchangeOAuthCode: {

package/ai/stigmer/platform/github/v1/service_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"service_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/github/v1/service_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAChJ,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,6CAA6C;IACvD,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"service_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/github/v1/service_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAChJ,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,6CAA6C;IACvD,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/platform/github/v1/service_pb.d.ts

@@ -13,9 +13,6 @@ export type GetOAuthAuthorizeUrlRequest = Message<"ai.stigmer.platform.github.v1
     /**
      * Callback URI that GitHub redirects to after the user authorizes.
      *
-     * @internal
-     * Must match one of the callback URLs registered on the GitHub App.
-     *
      * @generated from field: string redirect_uri = 1;
      */
     redirectUri: string;
@@ -71,9 +68,6 @@ export type ExchangeOAuthCodeRequest = Message<"ai.stigmer.platform.github.v1.Ex
     /**
      * Redirect URI used in the original authorize request.
      *
-     * @internal
-     * GitHub requires this to match the value from the authorize step.
-     *
      * @generated from field: string redirect_uri = 3;
      */
     redirectUri: string;
@@ -121,13 +115,6 @@ export declare const ExchangeOAuthCodeResponseSchema: GenMessage<ExchangeOAuthCo
  * authorize URL construction and the authorization-code-for-token
  * exchange so callers do not handle OAuth details directly.
  *
- * @internal
- * This is a platform utility service — not a domain resource.
- * The backend protects the client_secret during the token exchange
- * and constructs the authorize URL with the registered client_id and
- * redirect_uri so the frontend never needs those values.
- * Tokens are ephemeral — returned to the caller and never persisted.
- *
  * @generated from service ai.stigmer.platform.github.v1.GitHubService
  */
 export declare const GitHubService: GenService<{
@@ -138,11 +125,6 @@ export declare const GitHubService: GenService<{
      * CSRF protection. After the user authorizes, GitHub redirects back
      * to your redirect_uri with an authorization code.
      *
-     * @internal
-     * The backend constructs the URL with the registered client_id, requested
-     * scopes, and the state parameter. Authorization is skipped because this
-     * is a pre-authentication step.
-     *
      * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.getOAuthAuthorizeUrl
      */
     getOAuthAuthorizeUrl: {
@@ -157,12 +139,6 @@ export declare const GitHubService: GenService<{
      * redirect. Pass the code, the state from the original authorize request,
      * and the same redirect_uri. Returns an access token for GitHub API calls.
      *
-     * @internal
-     * The backend performs the token exchange using the client_secret, which
-     * must never be exposed to the frontend. The returned access_token is NOT
-     * stored by the backend — the caller is responsible for persisting it and
-     * including it in subsequent requests that need GitHub access.
-     *
      * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.exchangeOAuthCode
      */
     exchangeOAuthCode: {

package/ai/stigmer/platform/github/v1/service_pb.js

@@ -36,13 +36,6 @@ export const ExchangeOAuthCodeResponseSchema = /*@__PURE__*/ messageDesc(file_ai
  * authorize URL construction and the authorization-code-for-token
  * exchange so callers do not handle OAuth details directly.
  *
- * @internal
- * This is a platform utility service — not a domain resource.
- * The backend protects the client_secret during the token exchange
- * and constructs the authorize URL with the registered client_id and
- * redirect_uri so the frontend never needs those values.
- * Tokens are ephemeral — returned to the caller and never persisted.
- *
  * @generated from service ai.stigmer.platform.github.v1.GitHubService
  */
 export const GitHubService = /*@__PURE__*/ serviceDesc(file_ai_stigmer_platform_github_v1_service, 0);

package/ai/stigmer/platform/github/v1/service_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"service_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/github/v1/service_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0HAA0H;AAC1H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,o8BAAo8B,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmB3hC;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAwB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAiC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA8B7D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,aAAa,GAwCrB,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"service_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/github/v1/service_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0HAA0H;AAC1H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,o8BAAo8B,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgB3hC;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAwB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA8B7D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA8B7D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GA6BrB,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/providerstanding/v1/io_pb.d.ts

@@ -0,0 +1,102 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/platform/providerstanding/v1/io.proto.
+ */
+export declare const file_ai_stigmer_platform_providerstanding_v1_io: GenFile;
+/**
+ * Input for the provider standing view. Empty by design: this is a
+ * platform-operator surface over a tiny per-provider collection (one row
+ * per platform LLM provider account).
+ *
+ * @generated from message ai.stigmer.platform.providerstanding.v1.GetProviderStandingViewInput
+ */
+export type GetProviderStandingViewInput = Message<"ai.stigmer.platform.providerstanding.v1.GetProviderStandingViewInput"> & {};
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.GetProviderStandingViewInput.
+ * Use `create(GetProviderStandingViewInputSchema)` to create a new message.
+ */
+export declare const GetProviderStandingViewInputSchema: GenMessage<GetProviderStandingViewInput>;
+/**
+ * The latest observed standing of one platform LLM provider account — the
+ * most recent canary-probe verdict, upserted per provider by the hourly
+ * probe (cloud#370). Deliberately a lightweight status snapshot, not an
+ * API resource: platform provider accounts have no resource surface, and
+ * the console page is a read-only mirror of what the probe already
+ * records (design ruling on cloud#370, carried into cloud#447).
+ *
+ * @generated from message ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry
+ */
+export type ProviderStandingEntry = Message<"ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry"> & {
+    /**
+     * Lowercase provider name ("anthropic", "openai"). Cursor is
+     * deliberately absent — CursorAccount sync owns that provider's health.
+     *
+     * @generated from field: string provider = 1;
+     */
+    provider: string;
+    /**
+     * The probe's verdict, as the lowercase label the probe persists and
+     * stamps on its metric — one vocabulary across the DB, the alerts, and
+     * this surface. Closed set today: "healthy", "platform_billing",
+     * "platform_auth", "unclassified_error", "unreachable",
+     * "not_configured". A string rather than a proto enum by design: the
+     * standing vocabulary is owned by the probe's classifier, and consoles
+     * must render an unknown future label gracefully instead of failing to
+     * decode it.
+     *
+     * @generated from field: string status = 2;
+     */
+    status: string;
+    /**
+     * Upstream HTTP status; 0 when the request never completed or was not
+     * attempted.
+     *
+     * @generated from field: uint32 http_status = 3;
+     */
+    httpStatus: number;
+    /**
+     * Canary round-trip latency; 0 when not attempted.
+     *
+     * @generated from field: uint64 latency_ms = 4;
+     */
+    latencyMs: bigint;
+    /**
+     * Bounded, sanitized upstream error text for the operator surface;
+     * empty when healthy.
+     *
+     * @generated from field: string error_summary = 5;
+     */
+    errorSummary: string;
+    /**
+     * When the probe last ran for this provider. A stale value is itself a
+     * signal — the probe-silence alert's UI twin: the console flags entries
+     * whose probe has not reported recently.
+     *
+     * @generated from field: google.protobuf.Timestamp checked_at = 6;
+     */
+    checkedAt?: Timestamp;
+};
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry.
+ * Use `create(ProviderStandingEntrySchema)` to create a new message.
+ */
+export declare const ProviderStandingEntrySchema: GenMessage<ProviderStandingEntry>;
+/**
+ * The provider standing view: the latest verdict for every provider the
+ * probe tracks.
+ *
+ * @generated from message ai.stigmer.platform.providerstanding.v1.ProviderStandingView
+ */
+export type ProviderStandingView = Message<"ai.stigmer.platform.providerstanding.v1.ProviderStandingView"> & {
+    /**
+     * @generated from field: repeated ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry providers = 1;
+     */
+    providers: ProviderStandingEntry[];
+};
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.ProviderStandingView.
+ * Use `create(ProviderStandingViewSchema)` to create a new message.
+ */
+export declare const ProviderStandingViewSchema: GenMessage<ProviderStandingView>;

package/ai/stigmer/platform/providerstanding/v1/io_pb.js

@@ -0,0 +1,25 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/platform/providerstanding/v1/io.proto (package ai.stigmer.platform.providerstanding.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file ai/stigmer/platform/providerstanding/v1/io.proto.
+ */
+export const file_ai_stigmer_platform_providerstanding_v1_io = /*@__PURE__*/ fileDesc("CjBhaS9zdGlnbWVyL3BsYXRmb3JtL3Byb3ZpZGVyc3RhbmRpbmcvdjEvaW8ucHJvdG8SJ2FpLnN0aWdtZXIucGxhdGZvcm0ucHJvdmlkZXJzdGFuZGluZy52MSIeChxHZXRQcm92aWRlclN0YW5kaW5nVmlld0lucHV0IqkBChVQcm92aWRlclN0YW5kaW5nRW50cnkSEAoIcHJvdmlkZXIYASABKAkSDgoGc3RhdHVzGAIgASgJEhMKC2h0dHBfc3RhdHVzGAMgASgNEhIKCmxhdGVuY3lfbXMYBCABKAQSFQoNZXJyb3Jfc3VtbWFyeRgFIAEoCRIuCgpjaGVja2VkX2F0GAYgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcCJpChRQcm92aWRlclN0YW5kaW5nVmlldxJRCglwcm92aWRlcnMYASADKAsyPi5haS5zdGlnbWVyLnBsYXRmb3JtLnByb3ZpZGVyc3RhbmRpbmcudjEuUHJvdmlkZXJTdGFuZGluZ0VudHJ5YgZwcm90bzM", [file_google_protobuf_timestamp]);
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.GetProviderStandingViewInput.
+ * Use `create(GetProviderStandingViewInputSchema)` to create a new message.
+ */
+export const GetProviderStandingViewInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_providerstanding_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry.
+ * Use `create(ProviderStandingEntrySchema)` to create a new message.
+ */
+export const ProviderStandingEntrySchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_providerstanding_v1_io, 1);
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.ProviderStandingView.
+ * Use `create(ProviderStandingViewSchema)` to create a new message.
+ */
+export const ProviderStandingViewSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_providerstanding_v1_io, 2);
+//# sourceMappingURL=io_pb.js.map

package/ai/stigmer/platform/providerstanding/v1/io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/providerstanding/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,qiBAAqiB,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;AAYplB;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAoElE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAelE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}