@stigmer/protos 3.2.3 → 3.3.0

package/ai/stigmer/platform/cursoraccount/v1/cursor_account_pb.d.ts

@@ -0,0 +1,331 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/platform/cursoraccount/v1/cursor_account.proto.
+ */
+export declare const file_ai_stigmer_platform_cursoraccount_v1_cursor_account: GenFile;
+/**
+ * CursorAccount is one managed Cursor team: the platform-operator resource
+ * that replaces the single STIGMER_PROXY_CURSOR_API_KEY env var as the
+ * source of Cursor credentials for the cursor harness.
+ *
+ * One document = one Cursor team. It carries two credential classes with
+ * strictly different capabilities (verified empirically 2026-07-22, see the
+ * harness-cost-parity T04 probe note):
+ *
+ *   - the team ADMIN key ("Team API Keys" dashboard tab) — works ONLY
+ *     against the Cursor Admin API (roster, spend, usage events). It can
+ *     NEVER run executions; Cursor rejects it on execution surfaces.
+ *   - MEMBER keys (user-scoped API keys, one per team member) — the keys
+ *     the proxy injects into execution traffic. Each is validated and
+ *     bound to its owning team member via Cursor's /v1/me at save time.
+ *
+ * Consequently an account with no enabled member keys is visible but NOT
+ * routable — no execution traffic can be sent under it.
+ *
+ * Org assignment: each Stigmer organization resolves to exactly ONE
+ * account (an explicit entry in org_ids, else the single account marked
+ * is_platform_default). Load spreading happens WITHIN an account across
+ * its member keys, never across accounts — this keeps billing attribution
+ * and provider reconciliation per-team.
+ *
+ * Secrets at rest: admin_api_key and CursorMemberKey.api_key are encrypted
+ * (AES-256-GCM, "enc:v1:" prefix) before persistence and replaced with
+ * "***REDACTED***" on every read surface. Sending the redaction marker
+ * back on update means "keep the stored value" (the ChannelApp secret
+ * round-trip convention).
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorAccount
+ */
+export type CursorAccount = Message<"ai.stigmer.platform.cursoraccount.v1.CursorAccount"> & {
+    /**
+     * Unique identifier (UUID). Server-assigned on create; required on
+     * update.
+     *
+     * @generated from field: string account_id = 1;
+     */
+    accountId: string;
+    /**
+     * Human-readable name shown in the operator console (e.g. the Cursor
+     * team name, "scenar.ai team").
+     *
+     * @generated from field: string display_name = 2;
+     */
+    displayName: string;
+    /**
+     * Team Admin API key. Used exclusively for Admin API calls (roster,
+     * spend); never injected into execution traffic. Validated at save time
+     * by a live GET /teams/members call.
+     *
+     * Write: plaintext on create/rotate, or "***REDACTED***" to keep the
+     * stored value. Read: always "***REDACTED***".
+     *
+     * @generated from field: string admin_api_key = 3;
+     */
+    adminApiKey: string;
+    /**
+     * Whether this account participates in key selection. Disabled accounts
+     * stop receiving NEW sessions immediately; sessions already pinned to
+     * one of its keys keep working (the hard kill switch is revoking the
+     * key in the Cursor dashboard).
+     *
+     * @generated from field: bool enabled = 4;
+     */
+    enabled: boolean;
+    /**
+     * Marks the account that serves orgs with no explicit assignment.
+     * At most one account may be the platform default (index-enforced).
+     *
+     * @generated from field: bool is_platform_default = 5;
+     */
+    isPlatformDefault: boolean;
+    /**
+     * Stigmer organization ids explicitly served by this account. An org
+     * may appear in at most one account across the collection
+     * (unique-multikey-index-enforced).
+     *
+     * @generated from field: repeated string org_ids = 6;
+     */
+    orgIds: string[];
+    /**
+     * Execution-capable member keys. Selection picks among enabled entries
+     * (least-recently-used for new sessions, then sticky per session).
+     *
+     * @generated from field: repeated ai.stigmer.platform.cursoraccount.v1.CursorMemberKey member_keys = 7;
+     */
+    memberKeys: CursorMemberKey[];
+    /**
+     * Operator identity that created the account.
+     *
+     * @generated from field: string created_by = 8;
+     */
+    createdBy: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 9;
+     */
+    createdAt?: Timestamp;
+    /**
+     * Operator identity of the latest mutation (account fields or keys).
+     *
+     * @generated from field: string updated_by = 10;
+     */
+    updatedBy: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp updated_at = 11;
+     */
+    updatedAt?: Timestamp;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccount.
+ * Use `create(CursorAccountSchema)` to create a new message.
+ */
+export declare const CursorAccountSchema: GenMessage<CursorAccount>;
+/**
+ * CursorMemberKey is one execution-capable, user-scoped Cursor API key
+ * held by a CursorAccount.
+ *
+ * Identity binding is server-owned: at save time the key is presented to
+ * Cursor's GET /v1/me, which returns the owning member's email and user
+ * id — a team admin key pasted here fails that call with Cursor's own
+ * explanatory 401. There is no manual "which member is this" mapping to
+ * drift.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorMemberKey
+ */
+export type CursorMemberKey = Message<"ai.stigmer.platform.cursoraccount.v1.CursorMemberKey"> & {
+    /**
+     * Unique identifier (UUID) of this key entry. Server-assigned. Stable
+     * across enable/disable; referenced by session pins and usage
+     * attribution (the key material itself never leaves the proxy).
+     *
+     * @generated from field: string key_id = 1;
+     */
+    keyId: string;
+    /**
+     * The user-scoped API key. Write: plaintext on add, "***REDACTED***"
+     * never accepted here (rotation = remove + add, so the /v1/me binding
+     * can never go stale). Read: always "***REDACTED***".
+     *
+     * @generated from field: string api_key = 2;
+     */
+    apiKey: string;
+    /**
+     * Optional operator label (e.g. "zane — stigmer-prod").
+     *
+     * @generated from field: string label = 3;
+     */
+    label: string;
+    /**
+     * Email of the Cursor team member that owns this key.
+     *
+     * @generated from field: string bound_email = 4;
+     */
+    boundEmail: string;
+    /**
+     * Cursor numeric user id of the owning member, as a string.
+     *
+     * @generated from field: string bound_user_id = 5;
+     */
+    boundUserId: string;
+    /**
+     * Cursor-side name of the key (apiKeyName from /v1/me), for
+     * cross-referencing in the Cursor dashboard.
+     *
+     * @generated from field: string cursor_key_name = 6;
+     */
+    cursorKeyName: string;
+    /**
+     * Whether this key participates in selection for NEW sessions.
+     * Sessions already pinned to it keep using it (conversation continuity
+     * and end-of-session agent disposal both require the original key).
+     *
+     * @generated from field: bool enabled = 7;
+     */
+    enabled: boolean;
+    /**
+     * Operator identity that added the key.
+     *
+     * @generated from field: string added_by = 8;
+     */
+    addedBy: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp added_at = 9;
+     */
+    addedAt?: Timestamp;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorMemberKey.
+ * Use `create(CursorMemberKeySchema)` to create a new message.
+ */
+export declare const CursorMemberKeySchema: GenMessage<CursorMemberKey>;
+/**
+ * CursorTeamMember is one roster entry from the Admin API
+ * (GET /teams/members), captured by the periodic sync.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorTeamMember
+ */
+export type CursorTeamMember = Message<"ai.stigmer.platform.cursoraccount.v1.CursorTeamMember"> & {
+    /**
+     * Cursor user id (e.g. "user_..." or numeric, as returned).
+     *
+     * @generated from field: string user_id = 1;
+     */
+    userId: string;
+    /**
+     * @generated from field: string email = 2;
+     */
+    email: string;
+    /**
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * Cursor-reported role: "owner", "member", or "removed". Removed
+     * members remain in the roster response; a stored member key whose
+     * owner shows as removed is flagged for the operator and excluded
+     * from selection.
+     *
+     * @generated from field: string role = 4;
+     */
+    role: string;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorTeamMember.
+ * Use `create(CursorTeamMemberSchema)` to create a new message.
+ */
+export declare const CursorTeamMemberSchema: GenMessage<CursorTeamMember>;
+/**
+ * CursorMemberSpend is one member's spend for the current billing cycle
+ * from the Admin API (POST /teams/spend).
+ *
+ * Money follows the platform integer-micro convention: Cursor reports
+ * (possibly fractional) cents; the sync converts cents x 10,000 to
+ * micro-USD. Cursor's response schema has drifted from its docs
+ * (overallSpendCents absent, includedSpendCents undocumented) — the sync
+ * parses defensively and omits fields Cursor omits.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorMemberSpend
+ */
+export type CursorMemberSpend = Message<"ai.stigmer.platform.cursoraccount.v1.CursorMemberSpend"> & {
+    /**
+     * @generated from field: string user_id = 1;
+     */
+    userId: string;
+    /**
+     * @generated from field: string email = 2;
+     */
+    email: string;
+    /**
+     * Spend covered by the plan's included quota this cycle, micro-USD.
+     *
+     * @generated from field: int64 included_spend_usd_micros = 3;
+     */
+    includedSpendUsdMicros: bigint;
+    /**
+     * On-demand overage spend this cycle, micro-USD (Cursor "spendCents").
+     *
+     * @generated from field: int64 overage_spend_usd_micros = 4;
+     */
+    overageSpendUsdMicros: bigint;
+    /**
+     * Fraction of the member's usage allowance consumed (0..1 as reported
+     * by Cursor's totalPercentUsed; 0 when Cursor omits it — tiered teams
+     * only).
+     *
+     * @generated from field: double total_percent_used = 5;
+     */
+    totalPercentUsed: number;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorMemberSpend.
+ * Use `create(CursorMemberSpendSchema)` to create a new message.
+ */
+export declare const CursorMemberSpendSchema: GenMessage<CursorMemberSpend>;
+/**
+ * CursorAccountSyncSnapshot is the roster + spend state of one account as
+ * of one sync run. Append-only: each sync inserts a new snapshot, so the
+ * collection is a spend-over-time history; read surfaces use the latest.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorAccountSyncSnapshot
+ */
+export type CursorAccountSyncSnapshot = Message<"ai.stigmer.platform.cursoraccount.v1.CursorAccountSyncSnapshot"> & {
+    /**
+     * Account this snapshot belongs to.
+     *
+     * @generated from field: string account_id = 1;
+     */
+    accountId: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp synced_at = 2;
+     */
+    syncedAt?: Timestamp;
+    /**
+     * @generated from field: repeated ai.stigmer.platform.cursoraccount.v1.CursorTeamMember members = 3;
+     */
+    members: CursorTeamMember[];
+    /**
+     * @generated from field: repeated ai.stigmer.platform.cursoraccount.v1.CursorMemberSpend spend = 4;
+     */
+    spend: CursorMemberSpend[];
+    /**
+     * Start of the Cursor billing cycle the spend figures cover
+     * (subscriptionCycleStart).
+     *
+     * @generated from field: google.protobuf.Timestamp cycle_start = 5;
+     */
+    cycleStart?: Timestamp;
+    /**
+     * Non-empty when the sync partially failed (e.g. spend endpoint
+     * errored while roster succeeded). The snapshot still records what was
+     * fetched; the console surfaces the message.
+     *
+     * @generated from field: string sync_error = 6;
+     */
+    syncError: string;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccountSyncSnapshot.
+ * Use `create(CursorAccountSyncSnapshotSchema)` to create a new message.
+ */
+export declare const CursorAccountSyncSnapshotSchema: GenMessage<CursorAccountSyncSnapshot>;

package/ai/stigmer/platform/cursoraccount/v1/cursor_account_pb.js

@@ -0,0 +1,36 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/platform/cursoraccount/v1/cursor_account.proto (package ai.stigmer.platform.cursoraccount.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb.js";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file ai/stigmer/platform/cursoraccount/v1/cursor_account.proto.
+ */
+export const file_ai_stigmer_platform_cursoraccount_v1_cursor_account = /*@__PURE__*/ fileDesc("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", [file_buf_validate_validate, file_google_protobuf_timestamp]);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccount.
+ * Use `create(CursorAccountSchema)` to create a new message.
+ */
+export const CursorAccountSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_cursor_account, 0);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorMemberKey.
+ * Use `create(CursorMemberKeySchema)` to create a new message.
+ */
+export const CursorMemberKeySchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_cursor_account, 1);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorTeamMember.
+ * Use `create(CursorTeamMemberSchema)` to create a new message.
+ */
+export const CursorTeamMemberSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_cursor_account, 2);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorMemberSpend.
+ * Use `create(CursorMemberSpendSchema)` to create a new message.
+ */
+export const CursorMemberSpendSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_cursor_account, 3);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccountSyncSnapshot.
+ * Use `create(CursorAccountSyncSnapshotSchema)` to create a new message.
+ */
+export const CursorAccountSyncSnapshotSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_cursor_account, 4);
+//# sourceMappingURL=cursor_account_pb.js.map

package/ai/stigmer/platform/cursoraccount/v1/cursor_account_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor_account_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/cursor_account_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+IAA+I;AAC/I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,wDAAwD,GAAY,aAAa,CAC5F,QAAQ,CAAC,ssDAAssD,EAAE,CAAC,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA4HjxD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,wDAAwD,EAAE,CAAC,CAAC,CAAC;AAoF3E;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,wDAAwD,EAAE,CAAC,CAAC,CAAC;AAqC3E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,wDAAwD,EAAE,CAAC,CAAC,CAAC;AAiD3E;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,wDAAwD,EAAE,CAAC,CAAC,CAAC;AAkD3E;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,wDAAwD,EAAE,CAAC,CAAC,CAAC"}