@stigmer/protos 3.2.3 → 3.3.0

package/ai/stigmer/agentic/datastore/v1/command_pb.d.ts

@@ -0,0 +1,110 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { DatastoreSchema } from "./api_pb.js";
+import type { ApiResourceDeleteInputSchema, UpdateVisibilityInputSchema } from "../../../commons/apiresource/io_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/datastore/v1/command.proto.
+ */
+export declare const file_ai_stigmer_agentic_datastore_v1_command: GenFile;
+/**
+ * DatastoreCommandController handles write operations for datastores.
+ *
+ * @generated from service ai.stigmer.agentic.datastore.v1.DatastoreCommandController
+ */
+export declare const DatastoreCommandController: GenService<{
+    /**
+     * Create or update a datastore.
+     *
+     * @internal
+     * The authorization and state-operation are determined depending on
+     * whether the datastore is going to be created or updated, which is
+     * resolved as part of the request execution. Schema sync runs as a
+     * synchronous, gating step after persist (additive-plus change
+     * matrix); removing a non-empty collection requires the
+     * datastore.stigmer.ai/acknowledge-collection-removal annotation
+     * naming it, otherwise the request fails with FAILED_PRECONDITION.
+     *
+     * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreCommandController.apply
+     */
+    apply: {
+        methodKind: "unary";
+        input: typeof DatastoreSchema;
+        output: typeof DatastoreSchema;
+    };
+    /**
+     * Create a datastore.
+     *
+     * @internal
+     * Authorization: caller must have can_create_datastore permission in
+     * the organization. Max datastores per org is enforced as a domain
+     * validation constant in this pipeline.
+     *
+     * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreCommandController.create
+     */
+    create: {
+        methodKind: "unary";
+        input: typeof DatastoreSchema;
+        output: typeof DatastoreSchema;
+    };
+    /**
+     * Update an existing datastore.
+     *
+     * @internal
+     * Authorization: requires can_edit permission on the datastore
+     * resource. Updates are full spec replaces; the gating schema-sync
+     * step diffs against the loaded existing spec and applies the
+     * additive-plus change matrix (DD-004): no transition silently
+     * destroys or nulls record data.
+     *
+     * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreCommandController.update
+     */
+    update: {
+        methodKind: "unary";
+        input: typeof DatastoreSchema;
+        output: typeof DatastoreSchema;
+    };
+    /**
+     * Update the visibility of an existing datastore.
+     *
+     * Only modifies metadata.visibility. Datastores support two levels:
+     * private (the default) and org. Setting org shares the datastore
+     * with the owning organization for human administration; it does not
+     * change record-layer access, which is governed solely by the
+     * datastore's authorization block and agent datastore_usages.
+     *
+     * @internal
+     * Authorization: requires can_edit permission on the datastore
+     * resource. public/platform levels are rejected via the kind's
+     * VisibilityConfig (supports_org only) — business records must never
+     * be resolvable across the org boundary.
+     *
+     * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreCommandController.updateVisibility
+     */
+    updateVisibility: {
+        methodKind: "unary";
+        input: typeof UpdateVisibilityInputSchema;
+        output: typeof DatastoreSchema;
+    };
+    /**
+     * Delete a datastore and every record it holds.
+     *
+     * Deleting a non-empty datastore requires force: without it the
+     * request fails with FAILED_PRECONDITION reporting how many records
+     * across how many collections would be destroyed. A datastore
+     * referenced by any agent's datastore_usages cannot be deleted until
+     * the references are removed.
+     *
+     * @internal
+     * Authorization: requires can_edit permission on the datastore
+     * resource. The two guards (record-count acknowledgment via force;
+     * agent-reference block, never forceable) run in the delete pipeline
+     * of both editions. Record tools never delete structures — this RPC
+     * is the only path that destroys collections.
+     *
+     * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreCommandController.delete
+     */
+    delete: {
+        methodKind: "unary";
+        input: typeof ApiResourceDeleteInputSchema;
+        output: typeof DatastoreSchema;
+    };
+}>;

package/ai/stigmer/agentic/datastore/v1/command_pb.js

@@ -0,0 +1,19 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/datastore/v1/command.proto (package ai.stigmer.agentic.datastore.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_datastore_v1_api } from "./api_pb.js";
+import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb.js";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb.js";
+import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/datastore/v1/command.proto.
+ */
+export const file_ai_stigmer_agentic_datastore_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_datastore_v1_api, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+/**
+ * DatastoreCommandController handles write operations for datastores.
+ *
+ * @generated from service ai.stigmer.agentic.datastore.v1.DatastoreCommandController
+ */
+export const DatastoreCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_datastore_v1_command, 0);
+//# sourceMappingURL=command_pb.js.map

package/ai/stigmer/agentic/datastore/v1/command_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/datastore/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,ksCAAksC,EAAE,CAAC,wCAAwC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEx4C;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAiGlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/datastore/v1/io_pb.d.ts

@@ -0,0 +1,64 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Datastore } from "./api_pb.js";
+import type { PageInfo } from "../../../commons/rpc/pagination_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/datastore/v1/io.proto.
+ */
+export declare const file_ai_stigmer_agentic_datastore_v1_io: GenFile;
+/**
+ * ListDatastoresRequest specifies parameters for listing datastores.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.ListDatastoresRequest
+ */
+export type ListDatastoresRequest = Message<"ai.stigmer.agentic.datastore.v1.ListDatastoresRequest"> & {
+    /**
+     * Organization to list datastores for.
+     *
+     * @generated from field: string org = 1;
+     */
+    org: string;
+    /**
+     * Filter by metadata labels. AND semantics: the resource must match all provided labels.
+     *
+     * @generated from field: map<string, string> labels = 2;
+     */
+    labels: {
+        [key: string]: string;
+    };
+    /**
+     * Pagination options.
+     *
+     * @generated from field: ai.stigmer.commons.rpc.PageInfo page_info = 3;
+     */
+    pageInfo?: PageInfo;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.ListDatastoresRequest.
+ * Use `create(ListDatastoresRequestSchema)` to create a new message.
+ */
+export declare const ListDatastoresRequestSchema: GenMessage<ListDatastoresRequest>;
+/**
+ * DatastoreList contains a paginated list of datastores.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.DatastoreList
+ */
+export type DatastoreList = Message<"ai.stigmer.agentic.datastore.v1.DatastoreList"> & {
+    /**
+     * Total count of matching datastores.
+     *
+     * @generated from field: int32 total_count = 1;
+     */
+    totalCount: number;
+    /**
+     * Datastores in the current page.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.Datastore items = 2;
+     */
+    items: Datastore[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.DatastoreList.
+ * Use `create(DatastoreListSchema)` to create a new message.
+ */
+export declare const DatastoreListSchema: GenMessage<DatastoreList>;

package/ai/stigmer/agentic/datastore/v1/io_pb.js

@@ -0,0 +1,22 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/datastore/v1/io.proto (package ai.stigmer.agentic.datastore.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_datastore_v1_api } from "./api_pb.js";
+import { file_ai_stigmer_commons_rpc_pagination } from "../../../commons/rpc/pagination_pb.js";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/datastore/v1/io.proto.
+ */
+export const file_ai_stigmer_agentic_datastore_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_agentic_datastore_v1_api, file_ai_stigmer_commons_rpc_pagination, file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.ListDatastoresRequest.
+ * Use `create(ListDatastoresRequestSchema)` to create a new message.
+ */
+export const ListDatastoresRequestSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_datastore_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.DatastoreList.
+ * Use `create(DatastoreListSchema)` to create a new message.
+ */
+export const DatastoreListSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_datastore_v1_io, 1);
+//# sourceMappingURL=io_pb.js.map

package/ai/stigmer/agentic/datastore/v1/io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/datastore/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,wiBAAwiB,EAAE,CAAC,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA8BrqB;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAuB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/datastore/v1/query_connect.d.ts

@@ -0,0 +1,59 @@
+/**
+ * DatastoreQueryController handles read operations for datastores.
+ *
+ * @internal
+ * These RPCs read the datastore resource (spec + status), not its
+ * records. Record reads go through DatastoreRecordQueryController.
+ *
+ * @generated from service ai.stigmer.agentic.datastore.v1.DatastoreQueryController
+ */
+export declare const DatastoreQueryController: {
+    readonly typeName: "ai.stigmer.agentic.datastore.v1.DatastoreQueryController";
+    readonly methods: {
+        /**
+         * Get a datastore by ID.
+         *
+         * @internal
+         * Authorization: requires can_view permission on the datastore resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreQueryController.get
+         */
+        readonly get: {
+            readonly name: "get";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Get a datastore by its organization-scoped reference (org/slug).
+         * Resolves a human-readable reference like "acme/clinic-records" to the full Datastore resource.
+         *
+         * @internal
+         * Custom authorization in handler — checks both direct resource access
+         * and organization-level visibility permissions.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreQueryController.getByReference
+         */
+        readonly getByReference: {
+            readonly name: "getByReference";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * List datastores with optional label filtering.
+         *
+         * @internal
+         * Authorization is handled in-handler via FGA-filtered queries (cloud)
+         * or unrestricted store queries (OSS).
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreQueryController.list
+         */
+        readonly list: {
+            readonly name: "list";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/agentic/datastore/v1/query_connect.js

@@ -0,0 +1,68 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/datastore/v1/query.proto (package ai.stigmer.agentic.datastore.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { ApiResourceId, ApiResourceReference } from "../../../commons/apiresource/io_pbjs";
+import { Datastore } from "./api_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+import { DatastoreList, ListDatastoresRequest } from "./io_pbjs";
+/**
+ * DatastoreQueryController handles read operations for datastores.
+ *
+ * @internal
+ * These RPCs read the datastore resource (spec + status), not its
+ * records. Record reads go through DatastoreRecordQueryController.
+ *
+ * @generated from service ai.stigmer.agentic.datastore.v1.DatastoreQueryController
+ */
+export const DatastoreQueryController = {
+    typeName: "ai.stigmer.agentic.datastore.v1.DatastoreQueryController",
+    methods: {
+        /**
+         * Get a datastore by ID.
+         *
+         * @internal
+         * Authorization: requires can_view permission on the datastore resource.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreQueryController.get
+         */
+        get: {
+            name: "get",
+            I: ApiResourceId,
+            O: Datastore,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Get a datastore by its organization-scoped reference (org/slug).
+         * Resolves a human-readable reference like "acme/clinic-records" to the full Datastore resource.
+         *
+         * @internal
+         * Custom authorization in handler — checks both direct resource access
+         * and organization-level visibility permissions.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreQueryController.getByReference
+         */
+        getByReference: {
+            name: "getByReference",
+            I: ApiResourceReference,
+            O: Datastore,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * List datastores with optional label filtering.
+         *
+         * @internal
+         * Authorization is handled in-handler via FGA-filtered queries (cloud)
+         * or unrestricted store queries (OSS).
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreQueryController.list
+         */
+        list: {
+            name: "list",
+            I: ListDatastoresRequest,
+            O: DatastoreList,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=query_connect.js.map

package/ai/stigmer/agentic/datastore/v1/query_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/datastore/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4HAA4H;AAC5H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAEjE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/datastore/v1/query_pb.d.ts

@@ -0,0 +1,61 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { DatastoreSchema } from "./api_pb.js";
+import type { DatastoreListSchema, ListDatastoresRequestSchema } from "./io_pb.js";
+import type { ApiResourceIdSchema, ApiResourceReferenceSchema } from "../../../commons/apiresource/io_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/datastore/v1/query.proto.
+ */
+export declare const file_ai_stigmer_agentic_datastore_v1_query: GenFile;
+/**
+ * DatastoreQueryController handles read operations for datastores.
+ *
+ * @internal
+ * These RPCs read the datastore resource (spec + status), not its
+ * records. Record reads go through DatastoreRecordQueryController.
+ *
+ * @generated from service ai.stigmer.agentic.datastore.v1.DatastoreQueryController
+ */
+export declare const DatastoreQueryController: GenService<{
+    /**
+     * Get a datastore by ID.
+     *
+     * @internal
+     * Authorization: requires can_view permission on the datastore resource.
+     *
+     * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreQueryController.get
+     */
+    get: {
+        methodKind: "unary";
+        input: typeof ApiResourceIdSchema;
+        output: typeof DatastoreSchema;
+    };
+    /**
+     * Get a datastore by its organization-scoped reference (org/slug).
+     * Resolves a human-readable reference like "acme/clinic-records" to the full Datastore resource.
+     *
+     * @internal
+     * Custom authorization in handler — checks both direct resource access
+     * and organization-level visibility permissions.
+     *
+     * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreQueryController.getByReference
+     */
+    getByReference: {
+        methodKind: "unary";
+        input: typeof ApiResourceReferenceSchema;
+        output: typeof DatastoreSchema;
+    };
+    /**
+     * List datastores with optional label filtering.
+     *
+     * @internal
+     * Authorization is handled in-handler via FGA-filtered queries (cloud)
+     * or unrestricted store queries (OSS).
+     *
+     * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreQueryController.list
+     */
+    list: {
+        methodKind: "unary";
+        input: typeof ListDatastoresRequestSchema;
+        output: typeof DatastoreListSchema;
+    };
+}>;

package/ai/stigmer/agentic/datastore/v1/query_pb.js

@@ -0,0 +1,24 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/datastore/v1/query.proto (package ai.stigmer.agentic.datastore.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_datastore_v1_api } from "./api_pb.js";
+import { file_ai_stigmer_agentic_datastore_v1_io } from "./io_pb.js";
+import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb.js";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb.js";
+import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/datastore/v1/query.proto.
+ */
+export const file_ai_stigmer_agentic_datastore_v1_query = /*@__PURE__*/ fileDesc("CithaS9zdGlnbWVyL2FnZW50aWMvZGF0YXN0b3JlL3YxL3F1ZXJ5LnByb3RvEh9haS5zdGlnbWVyLmFnZW50aWMuZGF0YXN0b3JlLnYxMqMDChhEYXRhc3RvcmVRdWVyeUNvbnRyb2xsZXISkAEKA2dldBItLmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZUlkGiouYWkuc3RpZ21lci5hZ2VudGljLmRhdGFzdG9yZS52MS5EYXRhc3RvcmUiLsK4GCoIARAxIgV2YWx1ZSoddW5hdXRob3JpemVkIHRvIGdldCBkYXRhc3RvcmUSeAoOZ2V0QnlSZWZlcmVuY2USNC5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuQXBpUmVzb3VyY2VSZWZlcmVuY2UaKi5haS5zdGlnbWVyLmFnZW50aWMuZGF0YXN0b3JlLnYxLkRhdGFzdG9yZSIE0LgYARJ0CgRsaXN0EjYuYWkuc3RpZ21lci5hZ2VudGljLmRhdGFzdG9yZS52MS5MaXN0RGF0YXN0b3Jlc1JlcXVlc3QaLi5haS5zdGlnbWVyLmFnZW50aWMuZGF0YXN0b3JlLnYxLkRhdGFzdG9yZUxpc3QiBNC4GAEaBKD/KzFiBnByb3RvMw", [file_ai_stigmer_agentic_datastore_v1_api, file_ai_stigmer_agentic_datastore_v1_io, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+/**
+ * DatastoreQueryController handles read operations for datastores.
+ *
+ * @internal
+ * These RPCs read the datastore resource (spec + status), not its
+ * records. Record reads go through DatastoreRecordQueryController.
+ *
+ * @generated from service ai.stigmer.agentic.datastore.v1.DatastoreQueryController
+ */
+export const DatastoreQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_datastore_v1_query, 0);
+//# sourceMappingURL=query_pb.js.map

package/ai/stigmer/agentic/datastore/v1/query_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/datastore/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4HAA4H;AAC5H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,wqBAAwqB,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEv5B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GA2ChC,aAAa,CAChB,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/datastore/v1/record_command_connect.d.ts

@@ -0,0 +1,75 @@
+/**
+ * DatastoreRecordCommandController handles record writes for datastores.
+ *
+ * @internal
+ * Same two-layer, in-handler authorization as
+ * DatastoreRecordQueryController (see its service comment; the RPCs are
+ * slug-addressed and credential-class dispatched, hence
+ * is_skip_authorization). Writes additionally evaluate declared
+ * constraints inside the write transaction — BEGIN IMMEDIATE in OSS
+ * SQLite, FOR SHARE row locks or SERIALIZABLE in cloud Postgres — so no
+ * write commits against a stale exists check and uniques are always
+ * substrate-enforced. Violations return the constraint's declared
+ * agent-relayable message with ErrorInfo (reason CONSTRAINT_VIOLATION +
+ * constraint name): unique → ALREADY_EXISTS, check/exists →
+ * FAILED_PRECONDITION. Record tools never delete structures — dropping
+ * collections or datastores is the resource layer's guarded delete.
+ *
+ * @generated from service ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController
+ */
+export declare const DatastoreRecordCommandController: {
+    readonly typeName: "ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController";
+    readonly methods: {
+        /**
+         * Insert a record into a collection.
+         *
+         * Requires the insert verb on the collection. System fields are
+         * server-stamped; supplying them is rejected. Returns the full record
+         * envelope.
+         *
+         * @internal
+         * The only non-idempotent record operation; declared uniques are the
+         * duplicate guard (a retried insert violating a unique returns
+         * ALREADY_EXISTS, never a duplicate). Insert idempotency keys are a
+         * recorded growth path.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController.insertRecord
+         */
+        readonly insertRecord: {
+            readonly name: "insertRecord";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Update a record by id with a partial merge.
+         *
+         * Requires the update verb on the collection (own scope limits it to
+         * records the caller created). Only supplied fields change; an
+         * explicit null clears a field; constraints evaluate on the merged
+         * result. Returns the full record envelope.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController.updateRecord
+         */
+        readonly updateRecord: {
+            readonly name: "updateRecord";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Delete a record by id.
+         *
+         * Requires the delete verb on the collection (own scope limits it to
+         * records the caller created). Returns the deleted record's envelope.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController.deleteRecord
+         */
+        readonly deleteRecord: {
+            readonly name: "deleteRecord";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/agentic/datastore/v1/record_command_connect.js

@@ -0,0 +1,82 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/datastore/v1/record_command.proto (package ai.stigmer.agentic.datastore.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { DeleteRecordRequest, InsertRecordRequest, RecordEnvelope, UpdateRecordRequest } from "./record_io_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * DatastoreRecordCommandController handles record writes for datastores.
+ *
+ * @internal
+ * Same two-layer, in-handler authorization as
+ * DatastoreRecordQueryController (see its service comment; the RPCs are
+ * slug-addressed and credential-class dispatched, hence
+ * is_skip_authorization). Writes additionally evaluate declared
+ * constraints inside the write transaction — BEGIN IMMEDIATE in OSS
+ * SQLite, FOR SHARE row locks or SERIALIZABLE in cloud Postgres — so no
+ * write commits against a stale exists check and uniques are always
+ * substrate-enforced. Violations return the constraint's declared
+ * agent-relayable message with ErrorInfo (reason CONSTRAINT_VIOLATION +
+ * constraint name): unique → ALREADY_EXISTS, check/exists →
+ * FAILED_PRECONDITION. Record tools never delete structures — dropping
+ * collections or datastores is the resource layer's guarded delete.
+ *
+ * @generated from service ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController
+ */
+export const DatastoreRecordCommandController = {
+    typeName: "ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController",
+    methods: {
+        /**
+         * Insert a record into a collection.
+         *
+         * Requires the insert verb on the collection. System fields are
+         * server-stamped; supplying them is rejected. Returns the full record
+         * envelope.
+         *
+         * @internal
+         * The only non-idempotent record operation; declared uniques are the
+         * duplicate guard (a retried insert violating a unique returns
+         * ALREADY_EXISTS, never a duplicate). Insert idempotency keys are a
+         * recorded growth path.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController.insertRecord
+         */
+        insertRecord: {
+            name: "insertRecord",
+            I: InsertRecordRequest,
+            O: RecordEnvelope,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Update a record by id with a partial merge.
+         *
+         * Requires the update verb on the collection (own scope limits it to
+         * records the caller created). Only supplied fields change; an
+         * explicit null clears a field; constraints evaluate on the merged
+         * result. Returns the full record envelope.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController.updateRecord
+         */
+        updateRecord: {
+            name: "updateRecord",
+            I: UpdateRecordRequest,
+            O: RecordEnvelope,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Delete a record by id.
+         *
+         * Requires the delete verb on the collection (own scope limits it to
+         * records the caller created). Returns the deleted record's envelope.
+         *
+         * @generated from rpc ai.stigmer.agentic.datastore.v1.DatastoreRecordCommandController.deleteRecord
+         */
+        deleteRecord: {
+            name: "deleteRecord",
+            I: DeleteRecordRequest,
+            O: RecordEnvelope,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=record_command_connect.js.map

package/ai/stigmer/agentic/datastore/v1/record_command_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record_command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/datastore/v1/record_command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,qIAAqI;AACrI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACjH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;WAcG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}