@stigmer/protos 3.12.3 → 3.12.5

package/ai/stigmer/platform/v1/server_info_pb.d.ts

@@ -83,11 +83,6 @@ export type GetRunnerBootstrapConfigOutput = Message<"ai.stigmer.platform.v1.Get
      * server with no signing key configured. The runner keeps using its existing
      * token in that case.
      *
-     * @internal
-     * iss=stigmer, sub=caller identity account, token_type=embedded_runner. The
-     * runner treats this as its proxy credential, distinct from the control-plane
-     * token it authenticated this call with, and refreshes it before expiry.
-     *
      * @generated from field: string runner_access_token = 3;
      */
     runnerAccessToken: string;
@@ -119,13 +114,6 @@ export type GetRunnerBootstrapConfigOutput = Message<"ai.stigmer.platform.v1.Get
      * without payload encryption. An explicitly env-configured key always wins
      * over this field.
      *
-     * @internal
-     * Cloud-only. Per-identity rather than platform-wide because a desktop
-     * runner must never hold the platform key: compromise of one user's machine
-     * exposes only payloads encrypted under that identity's key. The control
-     * plane's decode-only codec resolves these keys by key id, so the service
-     * can read every runner's results while runners cannot read each other's.
-     *
      * @generated from field: string payload_encryption_key = 6;
      */
     payloadEncryptionKey: string;
@@ -226,15 +214,6 @@ export declare const GetRunnerScopedTokenInputSchema: GenMessage<GetRunnerScoped
  * the control plane claims it for a session, the member presents this arm to
  * exchange that credential for the session's sandbox token.
  *
- * @internal
- * Cloud authorizes against the pool claim record, not FGA: the pool_sandboxes
- * row for the caller token's pool_member_id must be CLAIMED for exactly this
- * session_id (the DB is the authorization source). Identity and org are minted
- * from the values the claimer recorded on that row — never from the client —
- * and the TTL is the config-owned standard sandbox TTL, like every session
- * token (stigmer-cloud#256; renewal, not lifetime, carries long conversations).
- * OSS has no pool and mints nothing (empty output, presence-based contract).
- *
  * @generated from message ai.stigmer.platform.v1.PoolClaim
  */
 export type PoolClaim = Message<"ai.stigmer.platform.v1.PoolClaim"> & {
@@ -268,19 +247,6 @@ export declare const PoolClaimSchema: GenMessage<PoolClaim>;
  * claims, never from the client, so a renewed token is claim-identical to
  * the one it replaces.
  *
- * @internal
- * Cloud authorizes against the live sandbox record, not FGA (a sandbox
- * token is structurally not an FGA principal — the pool_claim posture): a
- * token_type=sandbox caller requires its session_sandboxes row to exist and
- * not be archived/deleting; a token_type=workflow_sandbox caller requires
- * the same of its workflow_sandboxes row. The record IS the revocation
- * lever: when the lifecycle reconciler reaps the sandbox, renewal dies with
- * it, so a credential's renewable lifetime is exactly its sandbox's
- * lifetime. Minted TTL is the standard sandbox TTL — every mint path uses it
- * (stigmer-cloud#256), and renewal is what makes short TTLs sufficient. OSS
- * has no signing key and mints nothing (empty output, presence-based
- * contract).
- *
  * @generated from message ai.stigmer.platform.v1.TokenRenewal
  */
 export type TokenRenewal = Message<"ai.stigmer.platform.v1.TokenRenewal"> & {};
@@ -304,11 +270,6 @@ export type GetRunnerScopedTokenOutput = Message<"ai.stigmer.platform.v1.GetRunn
      * Stigmer-signed token scoped to the requested work. The runner presents it
      * for ExecutionContext reads in place of its unscoped bootstrap token.
      *
-     * @internal
-     * iss=stigmer, sub=caller identity account, token_type=sandbox (with
-     * session_id claim) or workflow_sandbox (with workflow_execution_id claim),
-     * minted by the same SandboxTokenService that provisions cloud sandboxes.
-     *
      * @generated from field: string runner_scoped_token = 1;
      */
     runnerScopedToken: string;
@@ -413,13 +374,6 @@ export declare const PlatformQueryController: GenService<{
      * an environment shares one Temporal cluster, and task queues are
      * per-session/execution and gated separately by control-plane session access.
      *
-     * @internal
-     * The minted runner access token (iss=stigmer, sub=caller identity account)
-     * is a cloud-only capability — OSS has no Cursor proxy and leaves the token
-     * fields empty. The handler degrades gracefully: if minting is unavailable
-     * (signing key unconfigured, or no caller identity), it returns the Temporal
-     * coordinates with an empty token rather than failing the runner's boot.
-     *
      * @generated from rpc ai.stigmer.platform.v1.PlatformQueryController.getRunnerBootstrapConfig
      */
     getRunnerBootstrapConfig: {
@@ -444,28 +398,6 @@ export declare const PlatformQueryController: GenService<{
      * The token fields are empty when the server cannot mint (OSS, or no signing
      * key configured) — the runner falls back to its existing credential.
      *
-     * @internal
-     * Cloud mints via SandboxTokenService: an agent_execution_id yields a
-     * token_type=sandbox token carrying the execution's parent session_id (one
-     * session sandbox serves multi-turn executions); a workflow_execution_id
-     * yields token_type=workflow_sandbox carrying that id. Both are then bound by
-     * RunnerScopeVerifier on the getByExecutionId decrypt path exactly like
-     * cloud-sandbox-injected tokens (stigmer-cloud#155/#156).
-     *
-     * is_skip_authorization because the FGA target is derived from the input
-     * oneof, which the declarative interceptor cannot express — the handler
-     * enforces authorization itself (same pattern as getRunnerBootstrapConfig):
-     * the caller must present a runner-class token_type=embedded_runner
-     * credential AND pass the same can_view check getByExecutionId performs on
-     * the named execution.
-     *
-     * Two arms are exceptions to the embedded_runner rule, each gated on its
-     * own credential class and authorized against a control-plane record
-     * instead of an execution: pool_claim (token_type=pool_sandbox, authorized
-     * against the pool claim record) and renewal (token_type=sandbox /
-     * workflow_sandbox, authorized against the live sandbox record). See each
-     * arm's own doc.
-     *
      * @generated from rpc ai.stigmer.platform.v1.PlatformQueryController.getRunnerScopedToken
      */
     getRunnerScopedToken: {

package/ai/stigmer/platform/v1/server_info_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"server_info_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/platform/v1/server_info_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gHAAgH;AAChH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,s7DAAs7D,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAU7gE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAuB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAW1D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAgH1D;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAwD1D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AA+B1D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAqC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AA2C1D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,aAqBX;AArBD,WAAY,aAAa;IACvB;;OAEG;IACH,6FAA8B,CAAA;IAE9B;;;;;OAKG;IACH,+CAAO,CAAA;IAEP;;;;;OAKG;IACH,mDAAS,CAAA;AACX,CAAC,EArBW,aAAa,KAAb,aAAa,QAqBxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GA8F/B,aAAa,CAChB,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"server_info_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/platform/v1/server_info_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gHAAgH;AAChH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,s7DAAs7D,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAU7gE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAuB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAW1D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAoG1D;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAwD1D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAsB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAwB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAsC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,aAqBX;AArBD,WAAY,aAAa;IACvB;;OAEG;IACH,6FAA8B,CAAA;IAE9B;;;;;OAKG;IACH,+CAAO,CAAA;IAEP;;;;;OAKG;IACH,mDAAS,CAAA;AACX,CAAC,EArBW,aAAa,KAAb,aAAa,QAqBxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAiE/B,aAAa,CAChB,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/search/v1/io_pb.d.ts

@@ -16,13 +16,6 @@ export declare const file_ai_stigmer_search_v1_io: GenFile;
  * - Search: Find resources matching a text query
  * - Discover: Search across all resource kinds
  *
- * @internal
- * Examples:
- *   List agents in org:         {kinds: [agent], org: "acme", query: ""}
- *   Search agents by text:      {kinds: [agent], query: "code review"}
- *   Discover all:               {kinds: [], query: "kubernetes"}
- *   Search multiple kinds:      {kinds: [agent, skill], query: "security", org: "acme"}
- *
  * @generated from message ai.stigmer.search.v1.SearchRequest
  */
 export type SearchRequest = Message<"ai.stigmer.search.v1.SearchRequest"> & {
@@ -69,9 +62,6 @@ export type SearchRequest = Message<"ai.stigmer.search.v1.SearchRequest"> & {
      * - Empty: Search all organizations the caller has access to
      * - Non-empty: Search only within the specified organization
      *
-     * @internal
-     * Caller must have access to at least one resource in the org.
-     *
      * @generated from field: string org = 3;
      */
     org: string;
@@ -195,13 +185,6 @@ export declare const SearchResponseSchema: GenMessage<SearchResponse>;
  * This is not the full resource. To get the complete resource, call the
  * get method for that resource kind (e.g., client.agent.get()).
  *
- * @internal
- * The description field is populated by each resource's Searchable interface:
- * - Agent: spec.instructions (may be truncated)
- * - Skill: spec.description
- * - McpServer: spec.description
- * - Workflow: spec.description
- *
  * @generated from message ai.stigmer.search.v1.SearchResult
  */
 export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
@@ -223,9 +206,6 @@ export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
     /**
      * Human-readable display name of the resource.
      *
-     * @internal
-     * From metadata.name.
-     *
      * @generated from field: string name = 3;
      */
     name: string;
@@ -234,9 +214,6 @@ export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
      *
      * Lowercase alphanumeric with hyphens (e.g., "code-review-agent", "web-search").
      *
-     * @internal
-     * From metadata.slug.
-     *
      * @generated from field: string slug = 4;
      */
     slug: string;
@@ -254,9 +231,6 @@ export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
     /**
      * Organization that owns this resource (e.g., "stigmer", "acme-corp").
      *
-     * @internal
-     * From metadata.org.
-     *
      * @generated from field: string org = 6;
      */
     org: string;
@@ -265,15 +239,6 @@ export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
      *
      * May be empty if the resource has no description.
      *
-     * @internal
-     * Extracted from the resource spec via the Searchable interface.
-     * The source field varies by resource type:
-     * - Agent: spec.instructions (may be truncated)
-     * - Skill: spec.description
-     * - McpServer: spec.description
-     * - Workflow: spec.description
-     * Truncation for display is a presentation concern (CLI/UI responsibility).
-     *
      * @generated from field: string description = 7;
      */
     description: string;
@@ -289,9 +254,6 @@ export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
     /**
      * User-provided tags for categorization and filtering.
      *
-     * @internal
-     * From metadata.tags.
-     *
      * @generated from field: repeated string tags = 9;
      */
     tags: string[];
@@ -300,18 +262,12 @@ export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
      *
      * Used for sorting in list mode (when no query is provided).
      *
-     * @internal
-     * From status.audit.created_at.
-     *
      * @generated from field: google.protobuf.Timestamp created_at = 10;
      */
     createdAt?: Timestamp;
     /**
      * When the resource was last updated.
      *
-     * @internal
-     * From status.audit.updated_at.
-     *
      * @generated from field: google.protobuf.Timestamp updated_at = 11;
      */
     updatedAt?: Timestamp;

package/ai/stigmer/search/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mGAAmG;AACnG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,mEAAmE,CAAC;AAE1J,OAAO,EAAE,wCAAwC,EAAE,MAAM,sCAAsC,CAAC;AAEhG,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAY,aAAa,CAChE,QAAQ,CAAC,wzCAAwzC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAoH5hD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA8D/C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA4K/C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mGAAmG;AACnG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,mEAAmE,CAAC;AAE1J,OAAO,EAAE,wCAAwC,EAAE,MAAM,sCAAsC,CAAC;AAEhG,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAY,aAAa,CAChE,QAAQ,CAAC,wzCAAwzC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA0G5hD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA8D/C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA0I/C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/search/v1/query_connect.d.ts

@@ -8,28 +8,6 @@
  *
  * Results only include resources the caller has permission to view.
  *
- * @internal
- * This is a CQRS Query Service on the read-side. It queries multiple domain
- * aggregates (Agent, Skill, McpServer, Workflow) and returns display-optimized
- * projections. It does not modify state.
- *
- * Search is cross-aggregate query infrastructure, not a domain bounded context.
- * It lives in the query layer (CQRS read-side), not the domain layer.
- * Therefore, it does not have an api_resource_kind option like domain services.
- *
- * Authorization is handled programmatically in the handler (not via
- * declarative authorization options like domain services):
- * 1. Call FGA to get authorized resource IDs per requested kind
- * 2. Apply filters (org, query, exclude_public) against authorized set
- * 3. Return only resources the caller has can_view permission on
- *
- * Usage Patterns (all via single RPC):
- * - List agents in org:    {kinds: [agent], org: "acme", query: ""}
- * - Search agents:         {kinds: [agent], query: "security"}
- * - Search in org:         {kinds: [agent], org: "acme", query: "security"}
- * - Discover all kinds:    {kinds: [], query: "kubernetes"}
- * - Discover specific:     {kinds: [agent, skill], query: "kubernetes"}
- *
  * @generated from service ai.stigmer.search.v1.SearchService
  */
 export declare const SearchService: {
@@ -57,10 +35,6 @@ export declare const SearchService: {
          * Use page.num (1-indexed) and page.size to paginate results.
          * Response includes total_count and total_pages for pagination controls.
          *
-         * @internal
-         * Authorization: Returns only resources the caller has can_view permission on.
-         * The handler queries FGA per kind to get authorized IDs, then applies filters.
-         *
          * @generated from rpc ai.stigmer.search.v1.SearchService.search
          */
         readonly search: {

package/ai/stigmer/search/v1/query_connect.js

@@ -14,28 +14,6 @@ import { MethodKind } from "@bufbuild/protobuf";
  *
  * Results only include resources the caller has permission to view.
  *
- * @internal
- * This is a CQRS Query Service on the read-side. It queries multiple domain
- * aggregates (Agent, Skill, McpServer, Workflow) and returns display-optimized
- * projections. It does not modify state.
- *
- * Search is cross-aggregate query infrastructure, not a domain bounded context.
- * It lives in the query layer (CQRS read-side), not the domain layer.
- * Therefore, it does not have an api_resource_kind option like domain services.
- *
- * Authorization is handled programmatically in the handler (not via
- * declarative authorization options like domain services):
- * 1. Call FGA to get authorized resource IDs per requested kind
- * 2. Apply filters (org, query, exclude_public) against authorized set
- * 3. Return only resources the caller has can_view permission on
- *
- * Usage Patterns (all via single RPC):
- * - List agents in org:    {kinds: [agent], org: "acme", query: ""}
- * - Search agents:         {kinds: [agent], query: "security"}
- * - Search in org:         {kinds: [agent], org: "acme", query: "security"}
- * - Discover all kinds:    {kinds: [], query: "kubernetes"}
- * - Discover specific:     {kinds: [agent, skill], query: "kubernetes"}
- *
  * @generated from service ai.stigmer.search.v1.SearchService
  */
 export const SearchService = {
@@ -63,10 +41,6 @@ export const SearchService = {
          * Use page.num (1-indexed) and page.size to paginate results.
          * Response includes total_count and total_pages for pagination controls.
          *
-         * @internal
-         * Authorization: Returns only resources the caller has can_view permission on.
-         * The handler queries FGA per kind to get authorized IDs, then applies filters.
-         *
          * @generated from rpc ai.stigmer.search.v1.SearchService.search
          */
         search: {

package/ai/stigmer/search/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sGAAsG;AACtG,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,oCAAoC;IAC9C,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sGAAsG;AACtG,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,oCAAoC;IAC9C,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/search/v1/query_pb.d.ts

@@ -14,28 +14,6 @@ export declare const file_ai_stigmer_search_v1_query: GenFile;
  *
  * Results only include resources the caller has permission to view.
  *
- * @internal
- * This is a CQRS Query Service on the read-side. It queries multiple domain
- * aggregates (Agent, Skill, McpServer, Workflow) and returns display-optimized
- * projections. It does not modify state.
- *
- * Search is cross-aggregate query infrastructure, not a domain bounded context.
- * It lives in the query layer (CQRS read-side), not the domain layer.
- * Therefore, it does not have an api_resource_kind option like domain services.
- *
- * Authorization is handled programmatically in the handler (not via
- * declarative authorization options like domain services):
- * 1. Call FGA to get authorized resource IDs per requested kind
- * 2. Apply filters (org, query, exclude_public) against authorized set
- * 3. Return only resources the caller has can_view permission on
- *
- * Usage Patterns (all via single RPC):
- * - List agents in org:    {kinds: [agent], org: "acme", query: ""}
- * - Search agents:         {kinds: [agent], query: "security"}
- * - Search in org:         {kinds: [agent], org: "acme", query: "security"}
- * - Discover all kinds:    {kinds: [], query: "kubernetes"}
- * - Discover specific:     {kinds: [agent, skill], query: "kubernetes"}
- *
  * @generated from service ai.stigmer.search.v1.SearchService
  */
 export declare const SearchService: GenService<{
@@ -61,10 +39,6 @@ export declare const SearchService: GenService<{
      * Use page.num (1-indexed) and page.size to paginate results.
      * Response includes total_count and total_pages for pagination controls.
      *
-     * @internal
-     * Authorization: Returns only resources the caller has can_view permission on.
-     * The handler queries FGA per kind to get authorized IDs, then applies filters.
-     *
      * @generated from rpc ai.stigmer.search.v1.SearchService.search
      */
     search: {

package/ai/stigmer/search/v1/query_pb.js

@@ -18,28 +18,6 @@ export const file_ai_stigmer_search_v1_query = /*@__PURE__*/ fileDesc("CiBhaS9zd
  *
  * Results only include resources the caller has permission to view.
  *
- * @internal
- * This is a CQRS Query Service on the read-side. It queries multiple domain
- * aggregates (Agent, Skill, McpServer, Workflow) and returns display-optimized
- * projections. It does not modify state.
- *
- * Search is cross-aggregate query infrastructure, not a domain bounded context.
- * It lives in the query layer (CQRS read-side), not the domain layer.
- * Therefore, it does not have an api_resource_kind option like domain services.
- *
- * Authorization is handled programmatically in the handler (not via
- * declarative authorization options like domain services):
- * 1. Call FGA to get authorized resource IDs per requested kind
- * 2. Apply filters (org, query, exclude_public) against authorized set
- * 3. Return only resources the caller has can_view permission on
- *
- * Usage Patterns (all via single RPC):
- * - List agents in org:    {kinds: [agent], org: "acme", query: ""}
- * - Search agents:         {kinds: [agent], query: "security"}
- * - Search in org:         {kinds: [agent], org: "acme", query: "security"}
- * - Discover all kinds:    {kinds: [], query: "kubernetes"}
- * - Discover specific:     {kinds: [agent, skill], query: "kubernetes"}
- *
  * @generated from service ai.stigmer.search.v1.SearchService
  */
 export const SearchService = /*@__PURE__*/ serviceDesc(file_ai_stigmer_search_v1_query, 0);

package/ai/stigmer/search/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sGAAsG;AACtG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE1D;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAY,aAAa,CACnE,QAAQ,CAAC,wOAAwO,EAAE,CAAC,0CAA0C,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAEjU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,MAAM,aAAa,GAkCrB,aAAa,CAChB,WAAW,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sGAAsG;AACtG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE1D;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAY,aAAa,CACnE,QAAQ,CAAC,wOAAwO,EAAE,CAAC,0CAA0C,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAEjU;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GA8BrB,aAAa,CAChB,WAAW,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/tenancy/organization/v1/api_pb.d.ts

@@ -14,13 +14,6 @@ export declare const file_ai_stigmer_tenancy_organization_v1_api: GenFile;
  * resource (which is assigned a generated prefixed id), the tenancy root is
  * addressed by its slug, which is globally unique.
  *
- * @internal
- * Similar to GitHub organizations, all agents, workflows, sessions, and other
- * resources are scoped under an organization. This enables multi-tenancy and
- * proper resource isolation. Child resources reference their owning org by slug
- * (metadata.org), which is why the org's id is set to its slug rather than a
- * minted org_<ulid> (see OrganizationCommandController create pipeline).
- *
  * @generated from message ai.stigmer.tenancy.organization.v1.Organization
  */
 export type Organization = Message<"ai.stigmer.tenancy.organization.v1.Organization"> & {

package/ai/stigmer/tenancy/organization/v1/api_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,4CAA4C,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,wiBAAwiB,EAAE,CAAC,4CAA4C,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuD3tB;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/api_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,6CAA6C,CAAC;AAE3G,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,4CAA4C,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,wiBAAwiB,EAAE,CAAC,4CAA4C,EAAE,0CAA0C,EAAE,4CAA4C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAgD3tB;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/tenancy/organization/v1/command_connect.d.ts

@@ -9,10 +9,6 @@ export declare const OrganizationCommandController: {
         /**
          * Create or update an organization.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on whether the organization
-         * is going to be created or updated which is determined as part of the request execution.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.apply
          */
         readonly apply: {
@@ -24,10 +20,6 @@ export declare const OrganizationCommandController: {
         /**
          * Create an organization.
          *
-         * @internal
-         * No authorization required — any authenticated user can create an organization.
-         * The creator automatically becomes the owner of the organization.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.create
          */
         readonly create: {
@@ -39,9 +31,6 @@ export declare const OrganizationCommandController: {
         /**
          * Update an existing organization.
          *
-         * @internal
-         * Authorization: Requires can_edit permission on the organization.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.update
          */
         readonly update: {
@@ -53,10 +42,6 @@ export declare const OrganizationCommandController: {
         /**
          * Delete an organization.
          *
-         * @internal
-         * Authorization: Requires can_delete permission on the organization.
-         * This will cascade-delete all resources under the organization.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.delete
          */
         readonly delete: {

package/ai/stigmer/tenancy/organization/v1/command_connect.js

@@ -16,10 +16,6 @@ export const OrganizationCommandController = {
         /**
          * Create or update an organization.
          *
-         * @internal
-         * The authorization and state-operation are determined depending on whether the organization
-         * is going to be created or updated which is determined as part of the request execution.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.apply
          */
         apply: {
@@ -31,10 +27,6 @@ export const OrganizationCommandController = {
         /**
          * Create an organization.
          *
-         * @internal
-         * No authorization required — any authenticated user can create an organization.
-         * The creator automatically becomes the owner of the organization.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.create
          */
         create: {
@@ -46,9 +38,6 @@ export const OrganizationCommandController = {
         /**
          * Update an existing organization.
          *
-         * @internal
-         * Authorization: Requires can_edit permission on the organization.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.update
          */
         update: {
@@ -60,10 +49,6 @@ export const OrganizationCommandController = {
         /**
          * Delete an organization.
          *
-         * @internal
-         * Authorization: Requires can_delete permission on the organization.
-         * This will cascade-delete all resources under the organization.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.delete
          */
         delete: {

package/ai/stigmer/tenancy/organization/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,oIAAoI;AACpI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,oIAAoI;AACpI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,YAAY;YACf,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/tenancy/organization/v1/command_pb.d.ts

@@ -14,10 +14,6 @@ export declare const OrganizationCommandController: GenService<{
     /**
      * Create or update an organization.
      *
-     * @internal
-     * The authorization and state-operation are determined depending on whether the organization
-     * is going to be created or updated which is determined as part of the request execution.
-     *
      * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.apply
      */
     apply: {
@@ -28,10 +24,6 @@ export declare const OrganizationCommandController: GenService<{
     /**
      * Create an organization.
      *
-     * @internal
-     * No authorization required — any authenticated user can create an organization.
-     * The creator automatically becomes the owner of the organization.
-     *
      * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.create
      */
     create: {
@@ -42,9 +34,6 @@ export declare const OrganizationCommandController: GenService<{
     /**
      * Update an existing organization.
      *
-     * @internal
-     * Authorization: Requires can_edit permission on the organization.
-     *
      * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.update
      */
     update: {
@@ -55,10 +44,6 @@ export declare const OrganizationCommandController: GenService<{
     /**
      * Delete an organization.
      *
-     * @internal
-     * Authorization: Requires can_delete permission on the organization.
-     * This will cascade-delete all resources under the organization.
-     *
      * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationCommandController.delete
      */
     delete: {

package/ai/stigmer/tenancy/organization/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,0CAA0C,EAAE,MAAM,YAAY,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,o6BAAo6B,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,2CAA2C,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAwDrC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,2CAA2C,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,0CAA0C,EAAE,MAAM,YAAY,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,o6BAAo6B,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,2CAA2C,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAyCrC,aAAa,CAChB,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/tenancy/organization/v1/enum_pb.d.ts

@@ -6,12 +6,6 @@ export declare const file_ai_stigmer_tenancy_organization_v1_enum: GenFile;
 /**
  * ManagementMode defines how an organization is operated.
  *
- * @internal
- * Immutable after organization creation.
- * - self_managed: User signed up directly, manages the org via Stigmer UI/CLI/API.
- * - platform_managed: Created programmatically by an external platform (e.g., Planton)
- *   via an IdentityProvider. Operated by the platform on behalf of its users.
- *
  * @generated from enum ai.stigmer.tenancy.organization.v1.ManagementMode
  */
 export declare enum ManagementMode {

package/ai/stigmer/tenancy/organization/v1/enum_pb.js

@@ -9,12 +9,6 @@ export const file_ai_stigmer_tenancy_organization_v1_enum = /*@__PURE__*/ fileDe
 /**
  * ManagementMode defines how an organization is operated.
  *
- * @internal
- * Immutable after organization creation.
- * - self_managed: User signed up directly, manages the org via Stigmer UI/CLI/API.
- * - platform_managed: Created programmatically by an external platform (e.g., Planton)
- *   via an IdentityProvider. Operated by the platform on behalf of its users.
- *
  * @generated from enum ai.stigmer.tenancy.organization.v1.ManagementMode
  */
 export var ManagementMode;

package/ai/stigmer/tenancy/organization/v1/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,qPAAqP,CAAC,CAAC;AAElQ;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,cAmBX;AAnBD,WAAY,cAAc;IACxB;;OAEG;IACH,iGAA+B,CAAA;IAE/B;;;;OAIG;IACH,mEAAgB,CAAA;IAEhB;;;;OAIG;IACH,2EAAoB,CAAA;AACtB,CAAC,EAnBW,cAAc,KAAd,cAAc,QAmBzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/tenancy/organization/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,qPAAqP,CAAC,CAAC;AAElQ;;;;GAIG;AACH,MAAM,CAAN,IAAY,cAmBX;AAnBD,WAAY,cAAc;IACxB;;OAEG;IACH,iGAA+B,CAAA;IAE/B;;;;OAIG;IACH,mEAAgB,CAAA;IAEhB;;;;OAIG;IACH,2EAAoB,CAAA;AACtB,CAAC,EAnBW,cAAc,KAAd,cAAc,QAmBzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/tenancy/organization/v1/query_connect.d.ts

@@ -9,9 +9,6 @@ export declare const OrganizationQueryController: {
         /**
          * Get an organization by ID.
          *
-         * @internal
-         * Authorization: Requires can_view permission on the organization.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.get
          */
         readonly get: {
@@ -23,9 +20,6 @@ export declare const OrganizationQueryController: {
         /**
          * List organizations with pagination and filtering.
          *
-         * @internal
-         * Authorization: Requires platform admin permission. Administrative use only.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.find
          */
         readonly find: {
@@ -38,9 +32,6 @@ export declare const OrganizationQueryController: {
          * Find organizations the authenticated user is a member of.
          * Returns only organizations the caller has access to.
          *
-         * @internal
-         * Authorization handled in handler via IAM Policy listAuthorizedResourceIds.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.findMyOrganizations
          */
         readonly findMyOrganizations: {
@@ -53,9 +44,6 @@ export declare const OrganizationQueryController: {
          * Look up a platform-managed organization by its external platform coordinates.
          * Returns the Stigmer organization mapped to the given IdentityProvider + external org ID.
          *
-         * @internal
-         * Authorization: custom — checks can_view on the referenced IdentityProvider.
-         *
          * @generated from rpc ai.stigmer.tenancy.organization.v1.OrganizationQueryController.getByExternalOrgId
          */
         readonly getByExternalOrgId: {