@stigmer/protos 3.2.3 → 3.3.0

package/ai/stigmer/iam/v1/enum_pb.d.ts

@@ -185,7 +185,50 @@ export declare enum IamPermission {
      *
      * @generated from enum value: can_create_channel_app = 31;
      */
-    can_create_channel_app = 31
+    can_create_channel_app = 31,
+    /**
+     * Platform-level permission to view pricing governance and decide
+     * pricing-override sign-offs from the pricing feedback loop. A human
+     * operator action, kept distinct from can_execute_billing_ops (the
+     * machine account's internal billing pipeline).
+     *
+     * @generated from enum value: can_manage_model_pricing = 32;
+     */
+    can_manage_model_pricing = 32,
+    /**
+     * Resource-level permission to reach a datastore's record RPCs.
+     *
+     * @internal
+     * Layer 1 of the datastore's two-layer authorization model: gates
+     * "may this principal touch this datastore's records at all" for
+     * direct platform principals (console, CLI, SDK, workflow executions).
+     * Checked in-handler via RequestAuthorizationService — the record RPCs
+     * are slug-addressed and carry is_skip_authorization, so the
+     * declarative interceptor never runs for them. Session-bound runner
+     * credentials do NOT pass through this permission — they take the
+     * usage-edge reach chain (agent's datastore_usages + org match) in
+     * domain logic. Layer 2 (role/verb/scope grants) always runs in
+     * datastore domain logic in both editions.
+     *
+     * @generated from enum value: can_use_records = 33;
+     */
+    can_use_records = 33,
+    /**
+     * Organization-level permission to create datastores.
+     *
+     * @generated from enum value: can_create_datastore = 34;
+     */
+    can_create_datastore = 34,
+    /**
+     * Platform-level permission to manage Cursor accounts: the managed
+     * Cursor teams (admin keys, member execution keys, org assignments)
+     * that back the cursor harness. A human operator action, gated to
+     * platform operators like can_manage_model_pricing — key material and
+     * per-member spend are platform-internal, never org-visible.
+     *
+     * @generated from enum value: can_manage_cursor_accounts = 35;
+     */
+    can_manage_cursor_accounts = 35
 }
 /**
  * Describes the enum ai.stigmer.iam.v1.IamPermission.

package/ai/stigmer/iam/v1/enum_pb.js

@@ -5,7 +5,7 @@ import { enumDesc, fileDesc } from "@bufbuild/protobuf/codegenv1";
 /**
  * Describes the file ai/stigmer/iam/v1/enum.proto.
  */
-export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("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");
+export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("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");
 /**
  * IamPermission defines the permissions checked by the authorization
  * interceptor before an RPC handler executes.
@@ -190,6 +190,49 @@ export var IamPermission;
      * @generated from enum value: can_create_channel_app = 31;
      */
     IamPermission[IamPermission["can_create_channel_app"] = 31] = "can_create_channel_app";
+    /**
+     * Platform-level permission to view pricing governance and decide
+     * pricing-override sign-offs from the pricing feedback loop. A human
+     * operator action, kept distinct from can_execute_billing_ops (the
+     * machine account's internal billing pipeline).
+     *
+     * @generated from enum value: can_manage_model_pricing = 32;
+     */
+    IamPermission[IamPermission["can_manage_model_pricing"] = 32] = "can_manage_model_pricing";
+    /**
+     * Resource-level permission to reach a datastore's record RPCs.
+     *
+     * @internal
+     * Layer 1 of the datastore's two-layer authorization model: gates
+     * "may this principal touch this datastore's records at all" for
+     * direct platform principals (console, CLI, SDK, workflow executions).
+     * Checked in-handler via RequestAuthorizationService — the record RPCs
+     * are slug-addressed and carry is_skip_authorization, so the
+     * declarative interceptor never runs for them. Session-bound runner
+     * credentials do NOT pass through this permission — they take the
+     * usage-edge reach chain (agent's datastore_usages + org match) in
+     * domain logic. Layer 2 (role/verb/scope grants) always runs in
+     * datastore domain logic in both editions.
+     *
+     * @generated from enum value: can_use_records = 33;
+     */
+    IamPermission[IamPermission["can_use_records"] = 33] = "can_use_records";
+    /**
+     * Organization-level permission to create datastores.
+     *
+     * @generated from enum value: can_create_datastore = 34;
+     */
+    IamPermission[IamPermission["can_create_datastore"] = 34] = "can_create_datastore";
+    /**
+     * Platform-level permission to manage Cursor accounts: the managed
+     * Cursor teams (admin keys, member execution keys, org assignments)
+     * that back the cursor harness. A human operator action, gated to
+     * platform operators like can_manage_model_pricing — key material and
+     * per-member spend are platform-internal, never org-visible.
+     *
+     * @generated from enum value: can_manage_cursor_accounts = 35;
+     */
+    IamPermission[IamPermission["can_manage_cursor_accounts"] = 35] = "can_manage_cursor_accounts";
 })(IamPermission || (IamPermission = {}));
 /**
  * Describes the enum ai.stigmer.iam.v1.IamPermission.

package/ai/stigmer/iam/v1/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/iam/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+FAA+F;AAC/F,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAY,aAAa,CAC/D,QAAQ,CAAC,yqCAAyqC,CAAC,CAAC;AAEtrC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,aAuMX;AAvMD,WAAY,aAAa;IACvB;;OAEG;IACH,+DAAe,CAAA;IAEf;;;;OAIG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,6DAAc,CAAA;IAEd;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,uEAAmB,CAAA;IAEnB;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,+EAAuB,CAAA;IAEvB;;OAEG;IACH,6EAAsB,CAAA;IAEtB;;OAEG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;OAEG;IACH,sEAAmB,CAAA;IAEnB;;OAEG;IACH,sFAA2B,CAAA;IAE3B;;OAEG;IACH,gGAAgC,CAAA;IAEhC;;OAEG;IACH,kFAAyB,CAAA;IAEzB;;OAEG;IACH,8FAA+B,CAAA;IAE/B;;;;OAIG;IACH,wFAA4B,CAAA;IAE5B;;OAEG;IACH,gFAAwB,CAAA;IAExB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;OAEG;IACH,kGAAiC,CAAA;IAEjC;;;;OAIG;IACH,kFAAyB,CAAA;IAEzB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,8EAAuB,CAAA;IAEvB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;;;;OAKG;IACH,wFAA4B,CAAA;IAE5B;;;;;;;;;;;OAWG;IACH,sFAA2B,CAAA;IAE3B;;;;;;OAMG;IACH,sFAA2B,CAAA;AAC7B,CAAC,EAvMW,aAAa,KAAb,aAAa,QAuMxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,OAiCX;AAjCD,WAAY,OAAO;IACjB;;OAEG;IACH,qEAAwB,CAAA;IAExB;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;OAIG;IACH,yCAAU,CAAA;AACZ,CAAC,EAjCW,OAAO,KAAP,OAAO,QAiClB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB,aAAa,CAC1D,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/iam/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+FAA+F;AAC/F,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAY,aAAa,CAC/D,QAAQ,CAAC,0zCAA0zC,CAAC,CAAC;AAEv0C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,aAsPX;AAtPD,WAAY,aAAa;IACvB;;OAEG;IACH,+DAAe,CAAA;IAEf;;;;OAIG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,6DAAc,CAAA;IAEd;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,uEAAmB,CAAA;IAEnB;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,+EAAuB,CAAA;IAEvB;;OAEG;IACH,6EAAsB,CAAA;IAEtB;;OAEG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;OAEG;IACH,sEAAmB,CAAA;IAEnB;;OAEG;IACH,sFAA2B,CAAA;IAE3B;;OAEG;IACH,gGAAgC,CAAA;IAEhC;;OAEG;IACH,kFAAyB,CAAA;IAEzB;;OAEG;IACH,8FAA+B,CAAA;IAE/B;;;;OAIG;IACH,wFAA4B,CAAA;IAE5B;;OAEG;IACH,gFAAwB,CAAA;IAExB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;OAEG;IACH,kGAAiC,CAAA;IAEjC;;;;OAIG;IACH,kFAAyB,CAAA;IAEzB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,8EAAuB,CAAA;IAEvB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;;;;OAKG;IACH,wFAA4B,CAAA;IAE5B;;;;;;;;;;;OAWG;IACH,sFAA2B,CAAA;IAE3B;;;;;;OAMG;IACH,sFAA2B,CAAA;IAE3B;;;;;;;OAOG;IACH,0FAA6B,CAAA;IAE7B;;;;;;;;;;;;;;;;OAgBG;IACH,wEAAoB,CAAA;IAEpB;;;;OAIG;IACH,kFAAyB,CAAA;IAEzB;;;;;;;;OAQG;IACH,8FAA+B,CAAA;AACjC,CAAC,EAtPW,aAAa,KAAb,aAAa,QAsPxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,OAiCX;AAjCD,WAAY,OAAO;IACjB;;OAEG;IACH,qEAAwB,CAAA;IAExB;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;OAIG;IACH,yCAAU,CAAA;AACZ,CAAC,EAjCW,OAAO,KAAP,OAAO,QAiClB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB,aAAa,CAC1D,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/cursoraccount/v1/command_connect.d.ts

@@ -0,0 +1,102 @@
+/**
+ * CursorAccountCommandController handles write operations for managed
+ * Cursor accounts.
+ *
+ * Cursor accounts are not a standard API Resource — like billing, there
+ * is no api_resource_kind annotation. Every RPC is platform-gated to
+ * can_manage_cursor_accounts on platform:stigmer (human operators only):
+ * the resource holds provider key material and per-member spend, which
+ * are platform-internal and never org-visible.
+ *
+ * @internal
+ * Cloud-only. The OSS Go server does not implement this service — in the
+ * OSS edition Cursor credentials are the user's own (BYOK env var), so
+ * there is nothing to manage. Handlers refuse writes when secret
+ * encryption is not enabled on the deployment (FAILED_PRECONDITION):
+ * silently persisting plaintext keys is never acceptable for this store.
+ *
+ * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController
+ */
+export declare const CursorAccountCommandController: {
+    readonly typeName: "ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController";
+    readonly methods: {
+        /**
+         * Create or update a Cursor account (identity, admin key, org
+         * assignments, enablement, platform-default flag).
+         *
+         * The admin key is validated live against GET /teams/members before
+         * persistence; org assignments are unique across accounts and at most
+         * one account may be the platform default. Member keys are NOT written
+         * through this RPC — see addCursorMemberKey / removeCursorMemberKey.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.upsertCursorAccount
+         */
+        readonly upsertCursorAccount: {
+            readonly name: "upsertCursorAccount";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Delete a Cursor account. Refused while live sessions are pinned to
+         * its keys unless force is set (see DeleteCursorAccountInput).
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.deleteCursorAccount
+         */
+        readonly deleteCursorAccount: {
+            readonly name: "deleteCursorAccount";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Add one execution-capable member key. The key is identified via
+         * Cursor's GET /v1/me and bound to its owning team member server-side;
+         * non-user-scoped keys are rejected with Cursor's own explanation.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.addCursorMemberKey
+         */
+        readonly addCursorMemberKey: {
+            readonly name: "addCursorMemberKey";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Remove one member key. Refused while live sessions are pinned to it
+         * unless force is set (see RemoveCursorMemberKeyInput).
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.removeCursorMemberKey
+         */
+        readonly removeCursorMemberKey: {
+            readonly name: "removeCursorMemberKey";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Enable or disable one member key for new-session selection.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.setCursorMemberKeyEnabled
+         */
+        readonly setCursorMemberKeyEnabled: {
+            readonly name: "setCursorMemberKeyEnabled";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Run an on-demand roster + spend sync (the console "Sync now") and
+         * return the refreshed detail view. Same activity the hourly schedule
+         * runs; Admin API rate limits apply, so the console debounces.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.syncCursorAccount
+         */
+        readonly syncCursorAccount: {
+            readonly name: "syncCursorAccount";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/platform/cursoraccount/v1/command_connect.js

@@ -0,0 +1,110 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/platform/cursoraccount/v1/command.proto (package ai.stigmer.platform.cursoraccount.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { AddCursorMemberKeyInput, CursorAccountView, DeleteCursorAccountInput, RemoveCursorMemberKeyInput, SetCursorMemberKeyEnabledInput, SyncCursorAccountInput, UpsertCursorAccountInput } from "./io_pbjs";
+import { CursorAccount } from "./cursor_account_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * CursorAccountCommandController handles write operations for managed
+ * Cursor accounts.
+ *
+ * Cursor accounts are not a standard API Resource — like billing, there
+ * is no api_resource_kind annotation. Every RPC is platform-gated to
+ * can_manage_cursor_accounts on platform:stigmer (human operators only):
+ * the resource holds provider key material and per-member spend, which
+ * are platform-internal and never org-visible.
+ *
+ * @internal
+ * Cloud-only. The OSS Go server does not implement this service — in the
+ * OSS edition Cursor credentials are the user's own (BYOK env var), so
+ * there is nothing to manage. Handlers refuse writes when secret
+ * encryption is not enabled on the deployment (FAILED_PRECONDITION):
+ * silently persisting plaintext keys is never acceptable for this store.
+ *
+ * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController
+ */
+export const CursorAccountCommandController = {
+    typeName: "ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController",
+    methods: {
+        /**
+         * Create or update a Cursor account (identity, admin key, org
+         * assignments, enablement, platform-default flag).
+         *
+         * The admin key is validated live against GET /teams/members before
+         * persistence; org assignments are unique across accounts and at most
+         * one account may be the platform default. Member keys are NOT written
+         * through this RPC — see addCursorMemberKey / removeCursorMemberKey.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.upsertCursorAccount
+         */
+        upsertCursorAccount: {
+            name: "upsertCursorAccount",
+            I: UpsertCursorAccountInput,
+            O: CursorAccount,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Delete a Cursor account. Refused while live sessions are pinned to
+         * its keys unless force is set (see DeleteCursorAccountInput).
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.deleteCursorAccount
+         */
+        deleteCursorAccount: {
+            name: "deleteCursorAccount",
+            I: DeleteCursorAccountInput,
+            O: CursorAccount,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Add one execution-capable member key. The key is identified via
+         * Cursor's GET /v1/me and bound to its owning team member server-side;
+         * non-user-scoped keys are rejected with Cursor's own explanation.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.addCursorMemberKey
+         */
+        addCursorMemberKey: {
+            name: "addCursorMemberKey",
+            I: AddCursorMemberKeyInput,
+            O: CursorAccount,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Remove one member key. Refused while live sessions are pinned to it
+         * unless force is set (see RemoveCursorMemberKeyInput).
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.removeCursorMemberKey
+         */
+        removeCursorMemberKey: {
+            name: "removeCursorMemberKey",
+            I: RemoveCursorMemberKeyInput,
+            O: CursorAccount,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Enable or disable one member key for new-session selection.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.setCursorMemberKeyEnabled
+         */
+        setCursorMemberKeyEnabled: {
+            name: "setCursorMemberKeyEnabled",
+            I: SetCursorMemberKeyEnabledInput,
+            O: CursorAccount,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Run an on-demand roster + spend sync (the console "Sync now") and
+         * return the refreshed detail view. Same activity the hourly schedule
+         * runs; Admin API rate limits apply, so the console debounces.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.syncCursorAccount
+         */
+        syncCursorAccount: {
+            name: "syncCursorAccount",
+            I: SyncCursorAccountInput,
+            O: CursorAccountView,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=command_connect.js.map

package/ai/stigmer/platform/cursoraccount/v1/command_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wIAAwI;AACxI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC/M,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,qEAAqE;IAC/E,OAAO,EAAE;QACP;;;;;;;;;;WAUG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,mBAAmB,EAAE;YACnB,IAAI,EAAE,qBAAqB;YAC3B,CAAC,EAAE,wBAAwB;YAC3B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,qBAAqB,EAAE;YACrB,IAAI,EAAE,uBAAuB;YAC7B,CAAC,EAAE,0BAA0B;YAC7B,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,8BAA8B;YACjC,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/platform/cursoraccount/v1/command_pb.d.ts

@@ -0,0 +1,100 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { CursorAccountSchema } from "./cursor_account_pb.js";
+import type { AddCursorMemberKeyInputSchema, CursorAccountViewSchema, DeleteCursorAccountInputSchema, RemoveCursorMemberKeyInputSchema, SetCursorMemberKeyEnabledInputSchema, SyncCursorAccountInputSchema, UpsertCursorAccountInputSchema } from "./io_pb.js";
+/**
+ * Describes the file ai/stigmer/platform/cursoraccount/v1/command.proto.
+ */
+export declare const file_ai_stigmer_platform_cursoraccount_v1_command: GenFile;
+/**
+ * CursorAccountCommandController handles write operations for managed
+ * Cursor accounts.
+ *
+ * Cursor accounts are not a standard API Resource — like billing, there
+ * is no api_resource_kind annotation. Every RPC is platform-gated to
+ * can_manage_cursor_accounts on platform:stigmer (human operators only):
+ * the resource holds provider key material and per-member spend, which
+ * are platform-internal and never org-visible.
+ *
+ * @internal
+ * Cloud-only. The OSS Go server does not implement this service — in the
+ * OSS edition Cursor credentials are the user's own (BYOK env var), so
+ * there is nothing to manage. Handlers refuse writes when secret
+ * encryption is not enabled on the deployment (FAILED_PRECONDITION):
+ * silently persisting plaintext keys is never acceptable for this store.
+ *
+ * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController
+ */
+export declare const CursorAccountCommandController: GenService<{
+    /**
+     * Create or update a Cursor account (identity, admin key, org
+     * assignments, enablement, platform-default flag).
+     *
+     * The admin key is validated live against GET /teams/members before
+     * persistence; org assignments are unique across accounts and at most
+     * one account may be the platform default. Member keys are NOT written
+     * through this RPC — see addCursorMemberKey / removeCursorMemberKey.
+     *
+     * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.upsertCursorAccount
+     */
+    upsertCursorAccount: {
+        methodKind: "unary";
+        input: typeof UpsertCursorAccountInputSchema;
+        output: typeof CursorAccountSchema;
+    };
+    /**
+     * Delete a Cursor account. Refused while live sessions are pinned to
+     * its keys unless force is set (see DeleteCursorAccountInput).
+     *
+     * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.deleteCursorAccount
+     */
+    deleteCursorAccount: {
+        methodKind: "unary";
+        input: typeof DeleteCursorAccountInputSchema;
+        output: typeof CursorAccountSchema;
+    };
+    /**
+     * Add one execution-capable member key. The key is identified via
+     * Cursor's GET /v1/me and bound to its owning team member server-side;
+     * non-user-scoped keys are rejected with Cursor's own explanation.
+     *
+     * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.addCursorMemberKey
+     */
+    addCursorMemberKey: {
+        methodKind: "unary";
+        input: typeof AddCursorMemberKeyInputSchema;
+        output: typeof CursorAccountSchema;
+    };
+    /**
+     * Remove one member key. Refused while live sessions are pinned to it
+     * unless force is set (see RemoveCursorMemberKeyInput).
+     *
+     * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.removeCursorMemberKey
+     */
+    removeCursorMemberKey: {
+        methodKind: "unary";
+        input: typeof RemoveCursorMemberKeyInputSchema;
+        output: typeof CursorAccountSchema;
+    };
+    /**
+     * Enable or disable one member key for new-session selection.
+     *
+     * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.setCursorMemberKeyEnabled
+     */
+    setCursorMemberKeyEnabled: {
+        methodKind: "unary";
+        input: typeof SetCursorMemberKeyEnabledInputSchema;
+        output: typeof CursorAccountSchema;
+    };
+    /**
+     * Run an on-demand roster + spend sync (the console "Sync now") and
+     * return the refreshed detail view. Same activity the hourly schedule
+     * runs; Admin API rate limits apply, so the console debounces.
+     *
+     * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController.syncCursorAccount
+     */
+    syncCursorAccount: {
+        methodKind: "unary";
+        input: typeof SyncCursorAccountInputSchema;
+        output: typeof CursorAccountViewSchema;
+    };
+}>;

package/ai/stigmer/platform/cursoraccount/v1/command_pb.js

@@ -0,0 +1,32 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/platform/cursoraccount/v1/command.proto (package ai.stigmer.platform.cursoraccount.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
+import { file_ai_stigmer_platform_cursoraccount_v1_cursor_account } from "./cursor_account_pb.js";
+import { file_ai_stigmer_platform_cursoraccount_v1_io } from "./io_pb.js";
+/**
+ * Describes the file ai/stigmer/platform/cursoraccount/v1/command.proto.
+ */
+export const file_ai_stigmer_platform_cursoraccount_v1_command = /*@__PURE__*/ fileDesc("CjJhaS9zdGlnbWVyL3BsYXRmb3JtL2N1cnNvcmFjY291bnQvdjEvY29tbWFuZC5wcm90bxIkYWkuc3RpZ21lci5wbGF0Zm9ybS5jdXJzb3JhY2NvdW50LnYxMqYKCh5DdXJzb3JBY2NvdW50Q29tbWFuZENvbnRyb2xsZXIS0QEKE3Vwc2VydEN1cnNvckFjY291bnQSPi5haS5zdGlnbWVyLnBsYXRmb3JtLmN1cnNvcmFjY291bnQudjEuVXBzZXJ0Q3Vyc29yQWNjb3VudElucHV0GjMuYWkuc3RpZ21lci5wbGF0Zm9ybS5jdXJzb3JhY2NvdW50LnYxLkN1cnNvckFjY291bnQiRcK4GEEIIxAfKjJvbmx5IHBsYXRmb3JtIG9wZXJhdG9ycyBjYW4gbWFuYWdlIGN1cnNvciBhY2NvdW50czIHc3RpZ21lchLRAQoTZGVsZXRlQ3Vyc29yQWNjb3VudBI+LmFpLnN0aWdtZXIucGxhdGZvcm0uY3Vyc29yYWNjb3VudC52MS5EZWxldGVDdXJzb3JBY2NvdW50SW5wdXQaMy5haS5zdGlnbWVyLnBsYXRmb3JtLmN1cnNvcmFjY291bnQudjEuQ3Vyc29yQWNjb3VudCJFwrgYQQgjEB8qMm9ubHkgcGxhdGZvcm0gb3BlcmF0b3JzIGNhbiBtYW5hZ2UgY3Vyc29yIGFjY291bnRzMgdzdGlnbWVyEs8BChJhZGRDdXJzb3JNZW1iZXJLZXkSPS5haS5zdGlnbWVyLnBsYXRmb3JtLmN1cnNvcmFjY291bnQudjEuQWRkQ3Vyc29yTWVtYmVyS2V5SW5wdXQaMy5haS5zdGlnbWVyLnBsYXRmb3JtLmN1cnNvcmFjY291bnQudjEuQ3Vyc29yQWNjb3VudCJFwrgYQQgjEB8qMm9ubHkgcGxhdGZvcm0gb3BlcmF0b3JzIGNhbiBtYW5hZ2UgY3Vyc29yIGFjY291bnRzMgdzdGlnbWVyEtUBChVyZW1vdmVDdXJzb3JNZW1iZXJLZXkSQC5haS5zdGlnbWVyLnBsYXRmb3JtLmN1cnNvcmFjY291bnQudjEuUmVtb3ZlQ3Vyc29yTWVtYmVyS2V5SW5wdXQaMy5haS5zdGlnbWVyLnBsYXRmb3JtLmN1cnNvcmFjY291bnQudjEuQ3Vyc29yQWNjb3VudCJFwrgYQQgjEB8qMm9ubHkgcGxhdGZvcm0gb3BlcmF0b3JzIGNhbiBtYW5hZ2UgY3Vyc29yIGFjY291bnRzMgdzdGlnbWVyEt0BChlzZXRDdXJzb3JNZW1iZXJLZXlFbmFibGVkEkQuYWkuc3RpZ21lci5wbGF0Zm9ybS5jdXJzb3JhY2NvdW50LnYxLlNldEN1cnNvck1lbWJlcktleUVuYWJsZWRJbnB1dBozLmFpLnN0aWdtZXIucGxhdGZvcm0uY3Vyc29yYWNjb3VudC52MS5DdXJzb3JBY2NvdW50IkXCuBhBCCMQHyoyb25seSBwbGF0Zm9ybSBvcGVyYXRvcnMgY2FuIG1hbmFnZSBjdXJzb3IgYWNjb3VudHMyB3N0aWdtZXIS0QEKEXN5bmNDdXJzb3JBY2NvdW50EjwuYWkuc3RpZ21lci5wbGF0Zm9ybS5jdXJzb3JhY2NvdW50LnYxLlN5bmNDdXJzb3JBY2NvdW50SW5wdXQaNy5haS5zdGlnbWVyLnBsYXRmb3JtLmN1cnNvcmFjY291bnQudjEuQ3Vyc29yQWNjb3VudFZpZXciRcK4GEEIIxAfKjJvbmx5IHBsYXRmb3JtIG9wZXJhdG9ycyBjYW4gbWFuYWdlIGN1cnNvciBhY2NvdW50czIHc3RpZ21lcmIGcHJvdG8z", [file_ai_stigmer_commons_rpc_method_options, file_ai_stigmer_platform_cursoraccount_v1_cursor_account, file_ai_stigmer_platform_cursoraccount_v1_io]);
+/**
+ * CursorAccountCommandController handles write operations for managed
+ * Cursor accounts.
+ *
+ * Cursor accounts are not a standard API Resource — like billing, there
+ * is no api_resource_kind annotation. Every RPC is platform-gated to
+ * can_manage_cursor_accounts on platform:stigmer (human operators only):
+ * the resource holds provider key material and per-member spend, which
+ * are platform-internal and never org-visible.
+ *
+ * @internal
+ * Cloud-only. The OSS Go server does not implement this service — in the
+ * OSS edition Cursor credentials are the user's own (BYOK env var), so
+ * there is nothing to manage. Handlers refuse writes when secret
+ * encryption is not enabled on the deployment (FAILED_PRECONDITION):
+ * silently persisting plaintext keys is never acceptable for this store.
+ *
+ * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountCommandController
+ */
+export const CursorAccountCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_platform_cursoraccount_v1_command, 0);
+//# sourceMappingURL=command_pb.js.map

package/ai/stigmer/platform/cursoraccount/v1/command_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wIAAwI;AACxI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,wDAAwD,EAAE,MAAM,wBAAwB,CAAC;AAElG,OAAO,EAAE,4CAA4C,EAAE,MAAM,YAAY,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,s2DAAs2D,EAAE,CAAC,0CAA0C,EAAE,wDAAwD,EAAE,4CAA4C,CAAC,CAAC,CAAC;AAEzgE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAyEtC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}