@stigmer/protos 3.12.3 → 3.12.5

package/ai/stigmer/platform/cursoraccount/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,mEAAmE;IAC7E,OAAO,EAAE;QACP;;;;;WAKG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,mEAAmE;IAC7E,OAAO,EAAE;QACP;;;;;WAKG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/platform/cursoraccount/v1/query_pb.d.ts

@@ -12,9 +12,6 @@ export declare const file_ai_stigmer_platform_cursoraccount_v1_query: GenFile;
  * reveals team structure and per-member spend, which are
  * platform-internal.
  *
- * @internal
- * Cloud-only; not implemented by the OSS Go server.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController
  */
 export declare const CursorAccountQueryController: GenService<{

package/ai/stigmer/platform/cursoraccount/v1/query_pb.js

@@ -16,9 +16,6 @@ export const file_ai_stigmer_platform_cursoraccount_v1_query = /*@__PURE__*/ fil
  * reveals team structure and per-member spend, which are
  * platform-internal.
  *
- * @internal
- * Cloud-only; not implemented by the OSS Go server.
- *
  * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController
  */
 export const CursorAccountQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_platform_cursoraccount_v1_query, 0);

package/ai/stigmer/platform/cursoraccount/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,gvBAAgvB,EAAE,CAAC,0CAA0C,EAAE,4CAA4C,CAAC,CAAC,CAAC;AAEz1B;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAyBpC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,gvBAAgvB,EAAE,CAAC,0CAA0C,EAAE,4CAA4C,CAAC,CAAC,CAAC;AAEz1B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAyBpC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/github/v1/service_connect.d.ts

@@ -6,13 +6,6 @@
  * authorize URL construction and the authorization-code-for-token
  * exchange so callers do not handle OAuth details directly.
  *
- * @internal
- * This is a platform utility service — not a domain resource.
- * The backend protects the client_secret during the token exchange
- * and constructs the authorize URL with the registered client_id and
- * redirect_uri so the frontend never needs those values.
- * Tokens are ephemeral — returned to the caller and never persisted.
- *
  * @generated from service ai.stigmer.platform.github.v1.GitHubService
  */
 export declare const GitHubService: {
@@ -25,11 +18,6 @@ export declare const GitHubService: {
          * CSRF protection. After the user authorizes, GitHub redirects back
          * to your redirect_uri with an authorization code.
          *
-         * @internal
-         * The backend constructs the URL with the registered client_id, requested
-         * scopes, and the state parameter. Authorization is skipped because this
-         * is a pre-authentication step.
-         *
          * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.getOAuthAuthorizeUrl
          */
         readonly getOAuthAuthorizeUrl: {
@@ -45,12 +33,6 @@ export declare const GitHubService: {
          * redirect. Pass the code, the state from the original authorize request,
          * and the same redirect_uri. Returns an access token for GitHub API calls.
          *
-         * @internal
-         * The backend performs the token exchange using the client_secret, which
-         * must never be exposed to the frontend. The returned access_token is NOT
-         * stored by the backend — the caller is responsible for persisting it and
-         * including it in subsequent requests that need GitHub access.
-         *
          * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.exchangeOAuthCode
          */
         readonly exchangeOAuthCode: {

package/ai/stigmer/platform/github/v1/service_connect.js

@@ -12,13 +12,6 @@ import { MethodKind } from "@bufbuild/protobuf";
  * authorize URL construction and the authorization-code-for-token
  * exchange so callers do not handle OAuth details directly.
  *
- * @internal
- * This is a platform utility service — not a domain resource.
- * The backend protects the client_secret during the token exchange
- * and constructs the authorize URL with the registered client_id and
- * redirect_uri so the frontend never needs those values.
- * Tokens are ephemeral — returned to the caller and never persisted.
- *
  * @generated from service ai.stigmer.platform.github.v1.GitHubService
  */
 export const GitHubService = {
@@ -31,11 +24,6 @@ export const GitHubService = {
          * CSRF protection. After the user authorizes, GitHub redirects back
          * to your redirect_uri with an authorization code.
          *
-         * @internal
-         * The backend constructs the URL with the registered client_id, requested
-         * scopes, and the state parameter. Authorization is skipped because this
-         * is a pre-authentication step.
-         *
          * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.getOAuthAuthorizeUrl
          */
         getOAuthAuthorizeUrl: {
@@ -51,12 +39,6 @@ export const GitHubService = {
          * redirect. Pass the code, the state from the original authorize request,
          * and the same redirect_uri. Returns an access token for GitHub API calls.
          *
-         * @internal
-         * The backend performs the token exchange using the client_secret, which
-         * must never be exposed to the frontend. The returned access_token is NOT
-         * stored by the backend — the caller is responsible for persisting it and
-         * including it in subsequent requests that need GitHub access.
-         *
          * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.exchangeOAuthCode
          */
         exchangeOAuthCode: {

package/ai/stigmer/platform/github/v1/service_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"service_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/github/v1/service_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAChJ,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,6CAA6C;IACvD,OAAO,EAAE;QACP;;;;;;;;;;;;;WAaG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;WAcG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"service_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/github/v1/service_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0HAA0H;AAC1H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAChJ,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,6CAA6C;IACvD,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,2BAA2B;YAC9B,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,yBAAyB;YAC5B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/platform/github/v1/service_pb.d.ts

@@ -13,9 +13,6 @@ export type GetOAuthAuthorizeUrlRequest = Message<"ai.stigmer.platform.github.v1
     /**
      * Callback URI that GitHub redirects to after the user authorizes.
      *
-     * @internal
-     * Must match one of the callback URLs registered on the GitHub App.
-     *
      * @generated from field: string redirect_uri = 1;
      */
     redirectUri: string;
@@ -71,9 +68,6 @@ export type ExchangeOAuthCodeRequest = Message<"ai.stigmer.platform.github.v1.Ex
     /**
      * Redirect URI used in the original authorize request.
      *
-     * @internal
-     * GitHub requires this to match the value from the authorize step.
-     *
      * @generated from field: string redirect_uri = 3;
      */
     redirectUri: string;
@@ -121,13 +115,6 @@ export declare const ExchangeOAuthCodeResponseSchema: GenMessage<ExchangeOAuthCo
  * authorize URL construction and the authorization-code-for-token
  * exchange so callers do not handle OAuth details directly.
  *
- * @internal
- * This is a platform utility service — not a domain resource.
- * The backend protects the client_secret during the token exchange
- * and constructs the authorize URL with the registered client_id and
- * redirect_uri so the frontend never needs those values.
- * Tokens are ephemeral — returned to the caller and never persisted.
- *
  * @generated from service ai.stigmer.platform.github.v1.GitHubService
  */
 export declare const GitHubService: GenService<{
@@ -138,11 +125,6 @@ export declare const GitHubService: GenService<{
      * CSRF protection. After the user authorizes, GitHub redirects back
      * to your redirect_uri with an authorization code.
      *
-     * @internal
-     * The backend constructs the URL with the registered client_id, requested
-     * scopes, and the state parameter. Authorization is skipped because this
-     * is a pre-authentication step.
-     *
      * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.getOAuthAuthorizeUrl
      */
     getOAuthAuthorizeUrl: {
@@ -157,12 +139,6 @@ export declare const GitHubService: GenService<{
      * redirect. Pass the code, the state from the original authorize request,
      * and the same redirect_uri. Returns an access token for GitHub API calls.
      *
-     * @internal
-     * The backend performs the token exchange using the client_secret, which
-     * must never be exposed to the frontend. The returned access_token is NOT
-     * stored by the backend — the caller is responsible for persisting it and
-     * including it in subsequent requests that need GitHub access.
-     *
      * @generated from rpc ai.stigmer.platform.github.v1.GitHubService.exchangeOAuthCode
      */
     exchangeOAuthCode: {

package/ai/stigmer/platform/github/v1/service_pb.js

@@ -36,13 +36,6 @@ export const ExchangeOAuthCodeResponseSchema = /*@__PURE__*/ messageDesc(file_ai
  * authorize URL construction and the authorization-code-for-token
  * exchange so callers do not handle OAuth details directly.
  *
- * @internal
- * This is a platform utility service — not a domain resource.
- * The backend protects the client_secret during the token exchange
- * and constructs the authorize URL with the registered client_id and
- * redirect_uri so the frontend never needs those values.
- * Tokens are ephemeral — returned to the caller and never persisted.
- *
  * @generated from service ai.stigmer.platform.github.v1.GitHubService
  */
 export const GitHubService = /*@__PURE__*/ serviceDesc(file_ai_stigmer_platform_github_v1_service, 0);

package/ai/stigmer/platform/github/v1/service_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"service_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/github/v1/service_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0HAA0H;AAC1H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,o8BAAo8B,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmB3hC;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAwB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAiC7D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA8B7D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,aAAa,GAwCrB,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"service_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/github/v1/service_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0HAA0H;AAC1H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,o8BAAo8B,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgB3hC;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAwB7D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA8B7D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AA8B7D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;AAE7D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GA6BrB,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/providerstanding/v1/io_pb.d.ts

@@ -0,0 +1,102 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/platform/providerstanding/v1/io.proto.
+ */
+export declare const file_ai_stigmer_platform_providerstanding_v1_io: GenFile;
+/**
+ * Input for the provider standing view. Empty by design: this is a
+ * platform-operator surface over a tiny per-provider collection (one row
+ * per platform LLM provider account).
+ *
+ * @generated from message ai.stigmer.platform.providerstanding.v1.GetProviderStandingViewInput
+ */
+export type GetProviderStandingViewInput = Message<"ai.stigmer.platform.providerstanding.v1.GetProviderStandingViewInput"> & {};
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.GetProviderStandingViewInput.
+ * Use `create(GetProviderStandingViewInputSchema)` to create a new message.
+ */
+export declare const GetProviderStandingViewInputSchema: GenMessage<GetProviderStandingViewInput>;
+/**
+ * The latest observed standing of one platform LLM provider account — the
+ * most recent canary-probe verdict, upserted per provider by the hourly
+ * probe (cloud#370). Deliberately a lightweight status snapshot, not an
+ * API resource: platform provider accounts have no resource surface, and
+ * the console page is a read-only mirror of what the probe already
+ * records (design ruling on cloud#370, carried into cloud#447).
+ *
+ * @generated from message ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry
+ */
+export type ProviderStandingEntry = Message<"ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry"> & {
+    /**
+     * Lowercase provider name ("anthropic", "openai"). Cursor is
+     * deliberately absent — CursorAccount sync owns that provider's health.
+     *
+     * @generated from field: string provider = 1;
+     */
+    provider: string;
+    /**
+     * The probe's verdict, as the lowercase label the probe persists and
+     * stamps on its metric — one vocabulary across the DB, the alerts, and
+     * this surface. Closed set today: "healthy", "platform_billing",
+     * "platform_auth", "unclassified_error", "unreachable",
+     * "not_configured". A string rather than a proto enum by design: the
+     * standing vocabulary is owned by the probe's classifier, and consoles
+     * must render an unknown future label gracefully instead of failing to
+     * decode it.
+     *
+     * @generated from field: string status = 2;
+     */
+    status: string;
+    /**
+     * Upstream HTTP status; 0 when the request never completed or was not
+     * attempted.
+     *
+     * @generated from field: uint32 http_status = 3;
+     */
+    httpStatus: number;
+    /**
+     * Canary round-trip latency; 0 when not attempted.
+     *
+     * @generated from field: uint64 latency_ms = 4;
+     */
+    latencyMs: bigint;
+    /**
+     * Bounded, sanitized upstream error text for the operator surface;
+     * empty when healthy.
+     *
+     * @generated from field: string error_summary = 5;
+     */
+    errorSummary: string;
+    /**
+     * When the probe last ran for this provider. A stale value is itself a
+     * signal — the probe-silence alert's UI twin: the console flags entries
+     * whose probe has not reported recently.
+     *
+     * @generated from field: google.protobuf.Timestamp checked_at = 6;
+     */
+    checkedAt?: Timestamp;
+};
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry.
+ * Use `create(ProviderStandingEntrySchema)` to create a new message.
+ */
+export declare const ProviderStandingEntrySchema: GenMessage<ProviderStandingEntry>;
+/**
+ * The provider standing view: the latest verdict for every provider the
+ * probe tracks.
+ *
+ * @generated from message ai.stigmer.platform.providerstanding.v1.ProviderStandingView
+ */
+export type ProviderStandingView = Message<"ai.stigmer.platform.providerstanding.v1.ProviderStandingView"> & {
+    /**
+     * @generated from field: repeated ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry providers = 1;
+     */
+    providers: ProviderStandingEntry[];
+};
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.ProviderStandingView.
+ * Use `create(ProviderStandingViewSchema)` to create a new message.
+ */
+export declare const ProviderStandingViewSchema: GenMessage<ProviderStandingView>;

package/ai/stigmer/platform/providerstanding/v1/io_pb.js

@@ -0,0 +1,25 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/platform/providerstanding/v1/io.proto (package ai.stigmer.platform.providerstanding.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file ai/stigmer/platform/providerstanding/v1/io.proto.
+ */
+export const file_ai_stigmer_platform_providerstanding_v1_io = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp]);
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.GetProviderStandingViewInput.
+ * Use `create(GetProviderStandingViewInputSchema)` to create a new message.
+ */
+export const GetProviderStandingViewInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_providerstanding_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.ProviderStandingEntry.
+ * Use `create(ProviderStandingEntrySchema)` to create a new message.
+ */
+export const ProviderStandingEntrySchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_providerstanding_v1_io, 1);
+/**
+ * Describes the message ai.stigmer.platform.providerstanding.v1.ProviderStandingView.
+ * Use `create(ProviderStandingViewSchema)` to create a new message.
+ */
+export const ProviderStandingViewSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_providerstanding_v1_io, 2);
+//# sourceMappingURL=io_pb.js.map

package/ai/stigmer/platform/providerstanding/v1/io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/providerstanding/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,qiBAAqiB,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;AAYplB;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAoElE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAelE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/providerstanding/v1/query_connect.d.ts

@@ -0,0 +1,29 @@
+/**
+ * ProviderStandingQueryController serves the operator console's read-only
+ * view of platform provider standing: the canary-probe verdicts the
+ * cloud#370 detection core records hourly (health, billing/auth
+ * rejections, latency, bounded error summaries).
+ *
+ * Platform-gated and view-only: provider account health is
+ * platform-internal, never org-visible, and this surface only observes —
+ * there is nothing to CRUD (the standing model is deliberately a
+ * lightweight status, not an API resource).
+ *
+ * @generated from service ai.stigmer.platform.providerstanding.v1.ProviderStandingQueryController
+ */
+export declare const ProviderStandingQueryController: {
+    readonly typeName: "ai.stigmer.platform.providerstanding.v1.ProviderStandingQueryController";
+    readonly methods: {
+        /**
+         * Retrieve the latest probe verdict for every platform provider.
+         *
+         * @generated from rpc ai.stigmer.platform.providerstanding.v1.ProviderStandingQueryController.getProviderStandingView
+         */
+        readonly getProviderStandingView: {
+            readonly name: "getProviderStandingView";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/platform/providerstanding/v1/query_connect.js

@@ -0,0 +1,36 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/platform/providerstanding/v1/query.proto (package ai.stigmer.platform.providerstanding.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { GetProviderStandingViewInput, ProviderStandingView } from "./io_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * ProviderStandingQueryController serves the operator console's read-only
+ * view of platform provider standing: the canary-probe verdicts the
+ * cloud#370 detection core records hourly (health, billing/auth
+ * rejections, latency, bounded error summaries).
+ *
+ * Platform-gated and view-only: provider account health is
+ * platform-internal, never org-visible, and this surface only observes —
+ * there is nothing to CRUD (the standing model is deliberately a
+ * lightweight status, not an API resource).
+ *
+ * @generated from service ai.stigmer.platform.providerstanding.v1.ProviderStandingQueryController
+ */
+export const ProviderStandingQueryController = {
+    typeName: "ai.stigmer.platform.providerstanding.v1.ProviderStandingQueryController",
+    methods: {
+        /**
+         * Retrieve the latest probe verdict for every platform provider.
+         *
+         * @generated from rpc ai.stigmer.platform.providerstanding.v1.ProviderStandingQueryController.getProviderStandingView
+         */
+        getProviderStandingView: {
+            name: "getProviderStandingView",
+            I: GetProviderStandingViewInput,
+            O: ProviderStandingView,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=query_connect.js.map

package/ai/stigmer/platform/providerstanding/v1/query_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/providerstanding/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,yEAAyE;IACnF,OAAO,EAAE;QACP;;;;WAIG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,4BAA4B;YAC/B,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/platform/providerstanding/v1/query_pb.d.ts

@@ -0,0 +1,31 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { GetProviderStandingViewInputSchema, ProviderStandingViewSchema } from "./io_pb.js";
+/**
+ * Describes the file ai/stigmer/platform/providerstanding/v1/query.proto.
+ */
+export declare const file_ai_stigmer_platform_providerstanding_v1_query: GenFile;
+/**
+ * ProviderStandingQueryController serves the operator console's read-only
+ * view of platform provider standing: the canary-probe verdicts the
+ * cloud#370 detection core records hourly (health, billing/auth
+ * rejections, latency, bounded error summaries).
+ *
+ * Platform-gated and view-only: provider account health is
+ * platform-internal, never org-visible, and this surface only observes —
+ * there is nothing to CRUD (the standing model is deliberately a
+ * lightweight status, not an API resource).
+ *
+ * @generated from service ai.stigmer.platform.providerstanding.v1.ProviderStandingQueryController
+ */
+export declare const ProviderStandingQueryController: GenService<{
+    /**
+     * Retrieve the latest probe verdict for every platform provider.
+     *
+     * @generated from rpc ai.stigmer.platform.providerstanding.v1.ProviderStandingQueryController.getProviderStandingView
+     */
+    getProviderStandingView: {
+        methodKind: "unary";
+        input: typeof GetProviderStandingViewInputSchema;
+        output: typeof ProviderStandingViewSchema;
+    };
+}>;

package/ai/stigmer/platform/providerstanding/v1/query_pb.js

@@ -0,0 +1,25 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/platform/providerstanding/v1/query.proto (package ai.stigmer.platform.providerstanding.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
+import { file_ai_stigmer_platform_providerstanding_v1_io } from "./io_pb.js";
+/**
+ * Describes the file ai/stigmer/platform/providerstanding/v1/query.proto.
+ */
+export const file_ai_stigmer_platform_providerstanding_v1_query = /*@__PURE__*/ fileDesc("CjNhaS9zdGlnbWVyL3BsYXRmb3JtL3Byb3ZpZGVyc3RhbmRpbmcvdjEvcXVlcnkucHJvdG8SJ2FpLnN0aWdtZXIucGxhdGZvcm0ucHJvdmlkZXJzdGFuZGluZy52MTKKAgofUHJvdmlkZXJTdGFuZGluZ1F1ZXJ5Q29udHJvbGxlchLmAQoXZ2V0UHJvdmlkZXJTdGFuZGluZ1ZpZXcSRS5haS5zdGlnbWVyLnBsYXRmb3JtLnByb3ZpZGVyc3RhbmRpbmcudjEuR2V0UHJvdmlkZXJTdGFuZGluZ1ZpZXdJbnB1dBo9LmFpLnN0aWdtZXIucGxhdGZvcm0ucHJvdmlkZXJzdGFuZGluZy52MS5Qcm92aWRlclN0YW5kaW5nVmlldyJFwrgYQQgmEB8qMm9ubHkgcGxhdGZvcm0gb3BlcmF0b3JzIGNhbiB2aWV3IHByb3ZpZGVyIHN0YW5kaW5nMgdzdGlnbWVyYgZwcm90bzM", [file_ai_stigmer_commons_rpc_method_options, file_ai_stigmer_platform_providerstanding_v1_io]);
+/**
+ * ProviderStandingQueryController serves the operator console's read-only
+ * view of platform provider standing: the canary-probe verdicts the
+ * cloud#370 detection core records hourly (health, billing/auth
+ * rejections, latency, bounded error summaries).
+ *
+ * Platform-gated and view-only: provider account health is
+ * platform-internal, never org-visible, and this surface only observes —
+ * there is nothing to CRUD (the standing model is deliberately a
+ * lightweight status, not an API resource).
+ *
+ * @generated from service ai.stigmer.platform.providerstanding.v1.ProviderStandingQueryController
+ */
+export const ProviderStandingQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_platform_providerstanding_v1_query, 0);
+//# sourceMappingURL=query_pb.js.map

package/ai/stigmer/platform/providerstanding/v1/query_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/providerstanding/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,+CAA+C,EAAE,MAAM,YAAY,CAAC;AAE7E;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,ifAAif,EAAE,CAAC,0CAA0C,EAAE,+CAA+C,CAAC,CAAC,CAAC;AAE7lB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAWvC,aAAa,CAChB,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/v1/server_info_connect.d.ts

@@ -48,13 +48,6 @@ export declare const PlatformQueryController: {
          * an environment shares one Temporal cluster, and task queues are
          * per-session/execution and gated separately by control-plane session access.
          *
-         * @internal
-         * The minted runner access token (iss=stigmer, sub=caller identity account)
-         * is a cloud-only capability — OSS has no Cursor proxy and leaves the token
-         * fields empty. The handler degrades gracefully: if minting is unavailable
-         * (signing key unconfigured, or no caller identity), it returns the Temporal
-         * coordinates with an empty token rather than failing the runner's boot.
-         *
          * @generated from rpc ai.stigmer.platform.v1.PlatformQueryController.getRunnerBootstrapConfig
          */
         readonly getRunnerBootstrapConfig: {
@@ -80,28 +73,6 @@ export declare const PlatformQueryController: {
          * The token fields are empty when the server cannot mint (OSS, or no signing
          * key configured) — the runner falls back to its existing credential.
          *
-         * @internal
-         * Cloud mints via SandboxTokenService: an agent_execution_id yields a
-         * token_type=sandbox token carrying the execution's parent session_id (one
-         * session sandbox serves multi-turn executions); a workflow_execution_id
-         * yields token_type=workflow_sandbox carrying that id. Both are then bound by
-         * RunnerScopeVerifier on the getByExecutionId decrypt path exactly like
-         * cloud-sandbox-injected tokens (stigmer-cloud#155/#156).
-         *
-         * is_skip_authorization because the FGA target is derived from the input
-         * oneof, which the declarative interceptor cannot express — the handler
-         * enforces authorization itself (same pattern as getRunnerBootstrapConfig):
-         * the caller must present a runner-class token_type=embedded_runner
-         * credential AND pass the same can_view check getByExecutionId performs on
-         * the named execution.
-         *
-         * Two arms are exceptions to the embedded_runner rule, each gated on its
-         * own credential class and authorized against a control-plane record
-         * instead of an execution: pool_claim (token_type=pool_sandbox, authorized
-         * against the pool claim record) and renewal (token_type=sandbox /
-         * workflow_sandbox, authorized against the live sandbox record). See each
-         * arm's own doc.
-         *
          * @generated from rpc ai.stigmer.platform.v1.PlatformQueryController.getRunnerScopedToken
          */
         readonly getRunnerScopedToken: {

package/ai/stigmer/platform/v1/server_info_connect.js

@@ -54,13 +54,6 @@ export const PlatformQueryController = {
          * an environment shares one Temporal cluster, and task queues are
          * per-session/execution and gated separately by control-plane session access.
          *
-         * @internal
-         * The minted runner access token (iss=stigmer, sub=caller identity account)
-         * is a cloud-only capability — OSS has no Cursor proxy and leaves the token
-         * fields empty. The handler degrades gracefully: if minting is unavailable
-         * (signing key unconfigured, or no caller identity), it returns the Temporal
-         * coordinates with an empty token rather than failing the runner's boot.
-         *
          * @generated from rpc ai.stigmer.platform.v1.PlatformQueryController.getRunnerBootstrapConfig
          */
         getRunnerBootstrapConfig: {
@@ -86,28 +79,6 @@ export const PlatformQueryController = {
          * The token fields are empty when the server cannot mint (OSS, or no signing
          * key configured) — the runner falls back to its existing credential.
          *
-         * @internal
-         * Cloud mints via SandboxTokenService: an agent_execution_id yields a
-         * token_type=sandbox token carrying the execution's parent session_id (one
-         * session sandbox serves multi-turn executions); a workflow_execution_id
-         * yields token_type=workflow_sandbox carrying that id. Both are then bound by
-         * RunnerScopeVerifier on the getByExecutionId decrypt path exactly like
-         * cloud-sandbox-injected tokens (stigmer-cloud#155/#156).
-         *
-         * is_skip_authorization because the FGA target is derived from the input
-         * oneof, which the declarative interceptor cannot express — the handler
-         * enforces authorization itself (same pattern as getRunnerBootstrapConfig):
-         * the caller must present a runner-class token_type=embedded_runner
-         * credential AND pass the same can_view check getByExecutionId performs on
-         * the named execution.
-         *
-         * Two arms are exceptions to the embedded_runner rule, each gated on its
-         * own credential class and authorized against a control-plane record
-         * instead of an execution: pool_claim (token_type=pool_sandbox, authorized
-         * against the pool claim record) and renewal (token_type=sandbox /
-         * workflow_sandbox, authorized against the live sandbox record). See each
-         * arm's own doc.
-         *
          * @generated from rpc ai.stigmer.platform.v1.PlatformQueryController.getRunnerScopedToken
          */
         getRunnerScopedToken: {

package/ai/stigmer/platform/v1/server_info_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"server_info_connect.js","sourceRoot":"","sources":["../../../../../ai/stigmer/platform/v1/server_info_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gHAAgH;AAChH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnM,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,gDAAgD;IAC1D,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,mBAAmB;YACtB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,wBAAwB,EAAE;YACxB,IAAI,EAAE,0BAA0B;YAChC,CAAC,EAAE,6BAA6B;YAChC,CAAC,EAAE,8BAA8B;YACjC,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAwCG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"server_info_connect.js","sourceRoot":"","sources":["../../../../../ai/stigmer/platform/v1/server_info_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gHAAgH;AAChH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnM,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,gDAAgD;IAC1D,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,mBAAmB;YACtB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,wBAAwB,EAAE;YACxB,IAAI,EAAE,0BAA0B;YAChC,CAAC,EAAE,6BAA6B;YAChC,CAAC,EAAE,8BAA8B;YACjC,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;WAkBG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}