@stigmer/protos 3.2.3 → 3.3.0

package/ai/stigmer/agentic/datastore/v1/spec_pb.d.ts

@@ -0,0 +1,680 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { ApiResourceRef } from "../../../iam/iampolicy/v1/spec_pb.js";
+import type { Value } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/datastore/v1/spec.proto.
+ */
+export declare const file_ai_stigmer_agentic_datastore_v1_spec: GenFile;
+/**
+ * DatastoreSpec declares typed record collections with constraints and
+ * role-aware access grants.
+ *
+ * @internal
+ * The manifest is authoritative for structure, never for living data:
+ * schema changes sync on apply (additive-plus change matrix, gating),
+ * and records enter exclusively through the record RPCs — there is no
+ * seed path (DD-010 SD-5 removed seed_records; console, agent tools,
+ * and import scripts are the population surfaces). Structural limits
+ * here are v1 guardrails — raising a max_items later is a non-breaking
+ * change. Max datastores per org (25) cannot be expressed on this
+ * message; it is a domain validation constant in the create pipelines.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.DatastoreSpec
+ */
+export type DatastoreSpec = Message<"ai.stigmer.agentic.datastore.v1.DatastoreSpec"> & {
+    /**
+     * Human-readable description of what this datastore holds.
+     *
+     * @generated from field: string description = 1;
+     */
+    description: string;
+    /**
+     * IANA timezone (e.g. "Asia/Kolkata") for constraint evaluation.
+     *
+     * Bound as the constant `tz` in check and exists constraint
+     * expressions. Optional; when unset, expressions that reference `tz`
+     * are rejected at apply time.
+     *
+     * @internal
+     * IANA-name validity is domain validation (the proto layer cannot
+     * carry a timezone database).
+     *
+     * @generated from field: string timezone = 2;
+     */
+    timezone: string;
+    /**
+     * Record-layer authorization: roles, subject bindings, and the
+     * default role for unbound callers.
+     *
+     * @generated from field: ai.stigmer.agentic.datastore.v1.DatastoreAuthorization authorization = 3;
+     */
+    authorization?: DatastoreAuthorization;
+    /**
+     * Record collections declared by this datastore.
+     *
+     * @internal
+     * Collection-name uniqueness within the datastore is domain
+     * validation (protovalidate CEL has no portable uniqueness check
+     * over message lists).
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.CollectionDeclaration collections = 4;
+     */
+    collections: CollectionDeclaration[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.DatastoreSpec.
+ * Use `create(DatastoreSpecSchema)` to create a new message.
+ */
+export declare const DatastoreSpecSchema: GenMessage<DatastoreSpec>;
+/**
+ * CollectionDeclaration is a named collection of records with typed
+ * fields, constraints, and access grants.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.CollectionDeclaration
+ */
+export type CollectionDeclaration = Message<"ai.stigmer.agentic.datastore.v1.CollectionDeclaration"> & {
+    /**
+     * Collection name, unique within the datastore.
+     *
+     * Format: lowercase snake_case (e.g. "bookings", "schedule_exceptions").
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * Human-readable description of what records in this collection represent.
+     *
+     * @generated from field: string description = 2;
+     */
+    description: string;
+    /**
+     * Typed field declarations for records in this collection.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.FieldDeclaration fields = 3;
+     */
+    fields: FieldDeclaration[];
+    /**
+     * Uniqueness constraints, enforced by substrate indexes.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.UniqueConstraint uniques = 4;
+     */
+    uniques: UniqueConstraint[];
+    /**
+     * Single-record check constraints, evaluated on every insert and update.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.CheckConstraint checks = 5;
+     */
+    checks: CheckConstraint[];
+    /**
+     * Cross-collection constraints requiring a matching record to exist.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.ExistsConstraint exists = 6;
+     */
+    exists: ExistsConstraint[];
+    /**
+     * Cross-collection constraints requiring no matching record to exist.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.ExistsConstraint not_exists = 7;
+     */
+    notExists: ExistsConstraint[];
+    /**
+     * Per-role access grants for records in this collection.
+     *
+     * Deny by default: a role with no grant on a collection has no access
+     * to it.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.DatastoreGrant grants = 8;
+     */
+    grants: DatastoreGrant[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.CollectionDeclaration.
+ * Use `create(CollectionDeclarationSchema)` to create a new message.
+ */
+export declare const CollectionDeclarationSchema: GenMessage<CollectionDeclaration>;
+/**
+ * FieldDeclaration is a typed field on a collection's records.
+ *
+ * @internal
+ * System fields (id, created_at, updated_at, created_by) are not
+ * declared — they are part of the record envelope, server-stamped, and
+ * never caller-writable. Their names are reserved below, plus `org`
+ * (the stamped tenancy column in cloud record tables) and `partition`
+ * (the DD-010 data-partition label: ambient scope set by the server,
+ * never data — not declarable, not in payloads, not filterable).
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.FieldDeclaration
+ */
+export type FieldDeclaration = Message<"ai.stigmer.agentic.datastore.v1.FieldDeclaration"> & {
+    /**
+     * Field name, unique within the collection.
+     *
+     * Format: lowercase snake_case. The record envelope's system field
+     * names (id, created_at, updated_at, created_by), `org`, and
+     * `partition` are reserved.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * Value type for this field.
+     *
+     * @generated from field: ai.stigmer.agentic.datastore.v1.FieldType type = 2;
+     */
+    type: FieldType;
+    /**
+     * Whether a value must be present on every record.
+     *
+     * Absent optional fields evaluate as null in constraint expressions.
+     *
+     * @generated from field: bool required = 3;
+     */
+    required: boolean;
+    /**
+     * Default value applied when the field is absent on insert.
+     *
+     * @internal
+     * Type compatibility between the default and the declared type is
+     * domain validation (google.protobuf.Value is untyped here).
+     *
+     * @generated from field: google.protobuf.Value default = 4;
+     */
+    default?: Value;
+    /**
+     * Allowed values for string fields.
+     *
+     * Declaring enum_values on a non-string field is rejected.
+     *
+     * @generated from field: repeated string enum_values = 5;
+     */
+    enumValues: string[];
+    /**
+     * Human-readable description, surfaced to agents via describe_datastore.
+     *
+     * @generated from field: string description = 6;
+     */
+    description: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.FieldDeclaration.
+ * Use `create(FieldDeclarationSchema)` to create a new message.
+ */
+export declare const FieldDeclarationSchema: GenMessage<FieldDeclaration>;
+/**
+ * UniqueConstraint enforces uniqueness over one or more fields,
+ * optionally limited to records matching a condition.
+ *
+ * @internal
+ * Always substrate-enforced as an index (partial index when `where` is
+ * set), never read-then-write in domain logic. Violations surface as
+ * ALREADY_EXISTS carrying the declared message.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.UniqueConstraint
+ */
+export type UniqueConstraint = Message<"ai.stigmer.agentic.datastore.v1.UniqueConstraint"> & {
+    /**
+     * Constraint name, unique within the collection.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * Declared fields whose combined values must be unique.
+     *
+     * @generated from field: repeated string fields = 2;
+     */
+    fields: string[];
+    /**
+     * Limits the constraint to records matching this condition
+     * (e.g. only `status == "confirmed"` bookings must be unique per slot).
+     *
+     * @internal
+     * Structured, never an expression — it must compile to the
+     * substrate's partial-index dialect in both editions.
+     *
+     * @generated from field: ai.stigmer.agentic.datastore.v1.UniqueWhere where = 3;
+     */
+    where?: UniqueWhere;
+    /**
+     * Error message returned on violation, written to be relayed to an
+     * end user by an agent (e.g. "that slot is already booked").
+     *
+     * @generated from field: string message = 4;
+     */
+    message: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.UniqueConstraint.
+ * Use `create(UniqueConstraintSchema)` to create a new message.
+ */
+export declare const UniqueConstraintSchema: GenMessage<UniqueConstraint>;
+/**
+ * UniqueWhere is the condition limiting a partial unique constraint.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.UniqueWhere
+ */
+export type UniqueWhere = Message<"ai.stigmer.agentic.datastore.v1.UniqueWhere"> & {
+    /**
+     * Declared field the condition tests.
+     *
+     * @generated from field: string field = 1;
+     */
+    field: string;
+    /**
+     * Value the field must equal for the constraint to apply.
+     *
+     * @generated from field: google.protobuf.Value equals = 2;
+     */
+    equals?: Value;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.UniqueWhere.
+ * Use `create(UniqueWhereSchema)` to create a new message.
+ */
+export declare const UniqueWhereSchema: GenMessage<UniqueWhere>;
+/**
+ * CheckConstraint validates a single record with a CEL expression on
+ * every insert and update.
+ *
+ * @internal
+ * Scope-fenced: expressions see only `this` (the candidate record,
+ * post-merge on updates) and the `tz` constant; the curated function
+ * additions (timeOfDay, localDate) are registered identically in cel-go
+ * and cel-java with cross-edition conformance fixtures. Evaluated in
+ * record-RPC domain logic in both editions — identical semantics,
+ * byte-identical messages. Violations surface as FAILED_PRECONDITION
+ * carrying the declared message.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.CheckConstraint
+ */
+export type CheckConstraint = Message<"ai.stigmer.agentic.datastore.v1.CheckConstraint"> & {
+    /**
+     * Constraint name, unique within the collection.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * CEL expression that must evaluate true for the record to be written.
+     *
+     * @generated from field: string expression = 2;
+     */
+    expression: string;
+    /**
+     * Optional CEL gate: the check applies only when this evaluates true.
+     *
+     * @generated from field: string when = 3;
+     */
+    when: string;
+    /**
+     * Error message returned on violation, written to be relayed to an
+     * end user by an agent.
+     *
+     * @generated from field: string message = 4;
+     */
+    message: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.CheckConstraint.
+ * Use `create(CheckConstraintSchema)` to create a new message.
+ */
+export declare const CheckConstraintSchema: GenMessage<CheckConstraint>;
+/**
+ * ExistsConstraint validates a record against another collection in the
+ * same datastore, requiring a matching record to exist (`exists`) or to
+ * not exist (`not_exists`).
+ *
+ * @internal
+ * Bounded by design: target collection in the same datastore only;
+ * `where` is CEL over exactly `this` (the candidate) and `that` (a
+ * record of the target collection), plus `tz`; one level, read-only.
+ * Evaluated inside the write transaction — BEGIN IMMEDIATE in OSS
+ * SQLite, FOR SHARE row locks or SERIALIZABLE in cloud Postgres — so no
+ * write commits against a stale check. Violations surface as
+ * FAILED_PRECONDITION carrying the declared message.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.ExistsConstraint
+ */
+export type ExistsConstraint = Message<"ai.stigmer.agentic.datastore.v1.ExistsConstraint"> & {
+    /**
+     * Constraint name, unique within the collection.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * Target collection in the same datastore.
+     *
+     * @generated from field: string collection = 2;
+     */
+    collection: string;
+    /**
+     * CEL condition matching candidate (`this`) against target records
+     * (`that`).
+     *
+     * @generated from field: string where = 3;
+     */
+    where: string;
+    /**
+     * Optional CEL gate: the constraint applies only when this evaluates
+     * true.
+     *
+     * @generated from field: string when = 4;
+     */
+    when: string;
+    /**
+     * Error message returned on violation, written to be relayed to an
+     * end user by an agent.
+     *
+     * @generated from field: string message = 5;
+     */
+    message: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.ExistsConstraint.
+ * Use `create(ExistsConstraintSchema)` to create a new message.
+ */
+export declare const ExistsConstraintSchema: GenMessage<ExistsConstraint>;
+/**
+ * DatastoreAuthorization declares the record-layer access model: roles,
+ * subject bindings, and the default role for unbound callers.
+ *
+ * @internal
+ * Evaluated in datastore domain logic in both editions — deliberately
+ * NOT part of the kind registry's AuthorizationConfig, which governs
+ * only the resource layer (who may edit the datastore itself). Agents
+ * are never record-layer subjects; they reach records through their
+ * datastore_usages, and the caller resolved here is the channel sender
+ * or platform principal behind the session.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.DatastoreAuthorization
+ */
+export type DatastoreAuthorization = Message<"ai.stigmer.agentic.datastore.v1.DatastoreAuthorization"> & {
+    /**
+     * Role names referenced by bindings and grants (e.g. "admin", "patient").
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.DatastoreRole roles = 1;
+     */
+    roles: DatastoreRole[];
+    /**
+     * Subject-to-role bindings.
+     *
+     * @internal
+     * Role-reference integrity (every binding names a declared role) is
+     * domain validation.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.DatastoreRoleBinding bindings = 2;
+     */
+    bindings: DatastoreRoleBinding[];
+    /**
+     * Role an unbound caller resolves to.
+     *
+     * Applies to channel senders with no binding and platform principals
+     * with no binding. When empty, unbound callers are denied every verb.
+     *
+     * @generated from field: string default_role = 3;
+     */
+    defaultRole: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.DatastoreAuthorization.
+ * Use `create(DatastoreAuthorizationSchema)` to create a new message.
+ */
+export declare const DatastoreAuthorizationSchema: GenMessage<DatastoreAuthorization>;
+/**
+ * DatastoreRole is a named record-layer role.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.DatastoreRole
+ */
+export type DatastoreRole = Message<"ai.stigmer.agentic.datastore.v1.DatastoreRole"> & {
+    /**
+     * Role name, referenced by bindings, grants, and default_role.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.DatastoreRole.
+ * Use `create(DatastoreRoleSchema)` to create a new message.
+ */
+export declare const DatastoreRoleSchema: GenMessage<DatastoreRole>;
+/**
+ * DatastoreRoleBinding assigns a role to a caller identity.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.DatastoreRoleBinding
+ */
+export type DatastoreRoleBinding = Message<"ai.stigmer.agentic.datastore.v1.DatastoreRoleBinding"> & {
+    /**
+     * The caller identity this binding matches.
+     *
+     * @generated from field: ai.stigmer.agentic.datastore.v1.DatastoreSubject subject = 1;
+     */
+    subject?: DatastoreSubject;
+    /**
+     * Name of a declared role.
+     *
+     * @generated from field: string role = 2;
+     */
+    role: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.DatastoreRoleBinding.
+ * Use `create(DatastoreRoleBindingSchema)` to create a new message.
+ */
+export declare const DatastoreRoleBindingSchema: GenMessage<DatastoreRoleBinding>;
+/**
+ * DatastoreSubject is a caller identity a binding matches: a
+ * channel-verified sender or a platform principal.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.DatastoreSubject
+ */
+export type DatastoreSubject = Message<"ai.stigmer.agentic.datastore.v1.DatastoreSubject"> & {
+    /**
+     * @generated from oneof ai.stigmer.agentic.datastore.v1.DatastoreSubject.kind
+     */
+    kind: {
+        /**
+         * Channel sender identity, matched against the session metadata
+         * stamped by the channel broker.
+         *
+         * @generated from field: ai.stigmer.agentic.datastore.v1.ChannelSenderSubject channel_sender = 1;
+         */
+        value: ChannelSenderSubject;
+        case: "channelSender";
+    } | {
+        /**
+         * Platform principal (an identity account today; teams later
+         * without schema change).
+         *
+         * @generated from field: ai.stigmer.iam.iampolicy.v1.ApiResourceRef principal = 2;
+         */
+        value: ApiResourceRef;
+        case: "principal";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.DatastoreSubject.
+ * Use `create(DatastoreSubjectSchema)` to create a new message.
+ */
+export declare const DatastoreSubjectSchema: GenMessage<DatastoreSubject>;
+/**
+ * ChannelSenderSubject identifies a sender on a messaging channel.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.ChannelSenderSubject
+ */
+export type ChannelSenderSubject = Message<"ai.stigmer.agentic.datastore.v1.ChannelSenderSubject"> & {
+    /**
+     * Sender identity namespace (e.g. "whatsapp_phone", "slack_user_id").
+     *
+     * @generated from field: string sender_kind = 1;
+     */
+    senderKind: string;
+    /**
+     * Sender identity value within the namespace (e.g. the E.164 number).
+     *
+     * @internal
+     * Bearer-adjacent: never logged raw, never filterable, and only ever
+     * compared against broker-stamped session metadata.
+     *
+     * @generated from field: string value = 2;
+     */
+    value: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.ChannelSenderSubject.
+ * Use `create(ChannelSenderSubjectSchema)` to create a new message.
+ */
+export declare const ChannelSenderSubjectSchema: GenMessage<ChannelSenderSubject>;
+/**
+ * DatastoreGrant gives a role a set of verbs on one collection's records.
+ *
+ * @generated from message ai.stigmer.agentic.datastore.v1.DatastoreGrant
+ */
+export type DatastoreGrant = Message<"ai.stigmer.agentic.datastore.v1.DatastoreGrant"> & {
+    /**
+     * Name of a declared role.
+     *
+     * @generated from field: string role = 1;
+     */
+    role: string;
+    /**
+     * Verbs granted to the role on this collection.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.datastore.v1.DatastoreVerb verbs = 2;
+     */
+    verbs: DatastoreVerb[];
+    /**
+     * Row scope of the grant.
+     *
+     * Defaults to all records. `own` limits update and delete (and read)
+     * to records whose server-stamped created_by matches the caller.
+     *
+     * @generated from field: ai.stigmer.agentic.datastore.v1.DatastoreGrantScope scope = 3;
+     */
+    scope: DatastoreGrantScope;
+};
+/**
+ * Describes the message ai.stigmer.agentic.datastore.v1.DatastoreGrant.
+ * Use `create(DatastoreGrantSchema)` to create a new message.
+ */
+export declare const DatastoreGrantSchema: GenMessage<DatastoreGrant>;
+/**
+ * FieldType is the value type of a declared field.
+ *
+ * @internal
+ * Canonical encodings (DD-004): date is `YYYY-MM-DD`, time is
+ * zero-padded `HH:MM[:SS]` (both lexicographically chronological),
+ * timestamp is RFC 3339 UTC. json is an escape hatch — not
+ * constrainable or filterable in v1. The value is `bool`, not
+ * `boolean`, because protoc-java emits enum constants verbatim and
+ * `boolean` is a Java reserved word.
+ *
+ * @generated from enum ai.stigmer.agentic.datastore.v1.FieldType
+ */
+export declare enum FieldType {
+    /**
+     * @generated from enum value: field_type_unspecified = 0;
+     */
+    field_type_unspecified = 0,
+    /**
+     * @generated from enum value: string = 1;
+     */
+    string = 1,
+    /**
+     * @generated from enum value: integer = 2;
+     */
+    integer = 2,
+    /**
+     * @generated from enum value: number = 3;
+     */
+    number = 3,
+    /**
+     * @generated from enum value: bool = 4;
+     */
+    bool = 4,
+    /**
+     * @generated from enum value: timestamp = 5;
+     */
+    timestamp = 5,
+    /**
+     * @generated from enum value: date = 6;
+     */
+    date = 6,
+    /**
+     * @generated from enum value: time = 7;
+     */
+    time = 7,
+    /**
+     * @generated from enum value: json = 8;
+     */
+    json = 8
+}
+/**
+ * Describes the enum ai.stigmer.agentic.datastore.v1.FieldType.
+ */
+export declare const FieldTypeSchema: GenEnum<FieldType>;
+/**
+ * DatastoreVerb is an operation a grant can allow on records.
+ *
+ * @generated from enum ai.stigmer.agentic.datastore.v1.DatastoreVerb
+ */
+export declare enum DatastoreVerb {
+    /**
+     * @generated from enum value: datastore_verb_unspecified = 0;
+     */
+    datastore_verb_unspecified = 0,
+    /**
+     * @generated from enum value: read = 1;
+     */
+    read = 1,
+    /**
+     * @generated from enum value: insert = 2;
+     */
+    insert = 2,
+    /**
+     * @generated from enum value: update = 3;
+     */
+    update = 3,
+    /**
+     * @generated from enum value: delete = 4;
+     */
+    delete = 4
+}
+/**
+ * Describes the enum ai.stigmer.agentic.datastore.v1.DatastoreVerb.
+ */
+export declare const DatastoreVerbSchema: GenEnum<DatastoreVerb>;
+/**
+ * DatastoreGrantScope is the row scope of a grant.
+ *
+ * @internal
+ * `own` resolves against the server-stamped created_by attribution
+ * only — callers can neither set nor observe it.
+ *
+ * @generated from enum ai.stigmer.agentic.datastore.v1.DatastoreGrantScope
+ */
+export declare enum DatastoreGrantScope {
+    /**
+     * Unset: treated as `all`.
+     *
+     * @generated from enum value: datastore_grant_scope_unspecified = 0;
+     */
+    datastore_grant_scope_unspecified = 0,
+    /**
+     * @generated from enum value: all = 1;
+     */
+    all = 1,
+    /**
+     * @generated from enum value: own = 2;
+     */
+    own = 2
+}
+/**
+ * Describes the enum ai.stigmer.agentic.datastore.v1.DatastoreGrantScope.
+ */
+export declare const DatastoreGrantScopeSchema: GenEnum<DatastoreGrantScope>;