@stigmer/protos 3.2.3 → 3.4.0

package/ai/stigmer/platform/cursoraccount/v1/io_pb.d.ts

@@ -0,0 +1,383 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { CursorAccount, CursorAccountSyncSnapshot, CursorMemberKey, CursorMemberSpend, CursorTeamMember } from "./cursor_account_pb.js";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/platform/cursoraccount/v1/io.proto.
+ */
+export declare const file_ai_stigmer_platform_cursoraccount_v1_io: GenFile;
+/**
+ * Input for creating or updating a CursorAccount.
+ *
+ * Create: account_id empty; admin_api_key plaintext (validated live
+ * against GET /teams/members before persistence).
+ * Update: account_id set; admin_api_key plaintext to rotate or
+ * "***REDACTED***" to keep the stored value. member_keys on the embedded
+ * account are IGNORED here — keys have their own add/remove/enable RPCs
+ * so key mutations are individually validated and audited.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.UpsertCursorAccountInput
+ */
+export type UpsertCursorAccountInput = Message<"ai.stigmer.platform.cursoraccount.v1.UpsertCursorAccountInput"> & {
+    /**
+     * @generated from field: ai.stigmer.platform.cursoraccount.v1.CursorAccount account = 1;
+     */
+    account?: CursorAccount;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.UpsertCursorAccountInput.
+ * Use `create(UpsertCursorAccountInputSchema)` to create a new message.
+ */
+export declare const UpsertCursorAccountInputSchema: GenMessage<UpsertCursorAccountInput>;
+/**
+ * Input for deleting a CursorAccount.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.DeleteCursorAccountInput
+ */
+export type DeleteCursorAccountInput = Message<"ai.stigmer.platform.cursoraccount.v1.DeleteCursorAccountInput"> & {
+    /**
+     * @generated from field: string account_id = 1;
+     */
+    accountId: string;
+    /**
+     * Deletion is refused while live sessions are pinned to this account's
+     * keys (their end-of-session agent disposal still needs the keys).
+     * Setting force overrides the guard; the orphaned pin count is logged.
+     *
+     * @generated from field: bool force = 2;
+     */
+    force: boolean;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.DeleteCursorAccountInput.
+ * Use `create(DeleteCursorAccountInputSchema)` to create a new message.
+ */
+export declare const DeleteCursorAccountInputSchema: GenMessage<DeleteCursorAccountInput>;
+/**
+ * Input for adding one member key to an account. The key is presented to
+ * Cursor's GET /v1/me before persistence; the returned identity is bound
+ * server-side. A non-user-scoped key (e.g. a team admin key) fails with
+ * Cursor's own explanatory error.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.AddCursorMemberKeyInput
+ */
+export type AddCursorMemberKeyInput = Message<"ai.stigmer.platform.cursoraccount.v1.AddCursorMemberKeyInput"> & {
+    /**
+     * @generated from field: string account_id = 1;
+     */
+    accountId: string;
+    /**
+     * Plaintext user-scoped API key. The redaction marker is not accepted:
+     * rotation is remove + add, so the identity binding can never go stale.
+     *
+     * @generated from field: string api_key = 2;
+     */
+    apiKey: string;
+    /**
+     * Optional operator label.
+     *
+     * @generated from field: string label = 3;
+     */
+    label: string;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.AddCursorMemberKeyInput.
+ * Use `create(AddCursorMemberKeyInputSchema)` to create a new message.
+ */
+export declare const AddCursorMemberKeyInputSchema: GenMessage<AddCursorMemberKeyInput>;
+/**
+ * Input for removing one member key.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.RemoveCursorMemberKeyInput
+ */
+export type RemoveCursorMemberKeyInput = Message<"ai.stigmer.platform.cursoraccount.v1.RemoveCursorMemberKeyInput"> & {
+    /**
+     * @generated from field: string account_id = 1;
+     */
+    accountId: string;
+    /**
+     * @generated from field: string key_id = 2;
+     */
+    keyId: string;
+    /**
+     * Removal is refused while live sessions are pinned to this key (the
+     * runner archives the Cursor agent with the session's key at disposal;
+     * removing it would orphan those agent handles). Setting force
+     * overrides the guard; the orphaned pin count is logged.
+     *
+     * @generated from field: bool force = 3;
+     */
+    force: boolean;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.RemoveCursorMemberKeyInput.
+ * Use `create(RemoveCursorMemberKeyInputSchema)` to create a new message.
+ */
+export declare const RemoveCursorMemberKeyInputSchema: GenMessage<RemoveCursorMemberKeyInput>;
+/**
+ * Input for enabling or disabling one member key. Disabling blocks NEW
+ * sessions immediately; pinned sessions keep working.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.SetCursorMemberKeyEnabledInput
+ */
+export type SetCursorMemberKeyEnabledInput = Message<"ai.stigmer.platform.cursoraccount.v1.SetCursorMemberKeyEnabledInput"> & {
+    /**
+     * @generated from field: string account_id = 1;
+     */
+    accountId: string;
+    /**
+     * @generated from field: string key_id = 2;
+     */
+    keyId: string;
+    /**
+     * @generated from field: bool enabled = 3;
+     */
+    enabled: boolean;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.SetCursorMemberKeyEnabledInput.
+ * Use `create(SetCursorMemberKeyEnabledInputSchema)` to create a new message.
+ */
+export declare const SetCursorMemberKeyEnabledInputSchema: GenMessage<SetCursorMemberKeyEnabledInput>;
+/**
+ * Input for an on-demand roster + spend sync of one account.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.SyncCursorAccountInput
+ */
+export type SyncCursorAccountInput = Message<"ai.stigmer.platform.cursoraccount.v1.SyncCursorAccountInput"> & {
+    /**
+     * @generated from field: string account_id = 1;
+     */
+    accountId: string;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.SyncCursorAccountInput.
+ * Use `create(SyncCursorAccountInputSchema)` to create a new message.
+ */
+export declare const SyncCursorAccountInputSchema: GenMessage<SyncCursorAccountInput>;
+/**
+ * Input for listing all accounts. Empty by design: this is a
+ * platform-operator surface over a small collection.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.ListCursorAccountsInput
+ */
+export type ListCursorAccountsInput = Message<"ai.stigmer.platform.cursoraccount.v1.ListCursorAccountsInput"> & {};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.ListCursorAccountsInput.
+ * Use `create(ListCursorAccountsInputSchema)` to create a new message.
+ */
+export declare const ListCursorAccountsInputSchema: GenMessage<ListCursorAccountsInput>;
+/**
+ * One account plus derived routing/sync facts for the console list.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorAccountSummary
+ */
+export type CursorAccountSummary = Message<"ai.stigmer.platform.cursoraccount.v1.CursorAccountSummary"> & {
+    /**
+     * The account with all key material redacted.
+     *
+     * @generated from field: ai.stigmer.platform.cursoraccount.v1.CursorAccount account = 1;
+     */
+    account?: CursorAccount;
+    /**
+     * Count of enabled member keys — 0 means "not routable", surfaced
+     * prominently in the console.
+     *
+     * @generated from field: int32 enabled_key_count = 2;
+     */
+    enabledKeyCount: number;
+    /**
+     * When the latest sync snapshot was taken; unset when never synced.
+     *
+     * @generated from field: google.protobuf.Timestamp last_synced_at = 3;
+     */
+    lastSyncedAt?: Timestamp;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccountSummary.
+ * Use `create(CursorAccountSummarySchema)` to create a new message.
+ */
+export declare const CursorAccountSummarySchema: GenMessage<CursorAccountSummary>;
+/**
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorAccountsResponse
+ */
+export type CursorAccountsResponse = Message<"ai.stigmer.platform.cursoraccount.v1.CursorAccountsResponse"> & {
+    /**
+     * @generated from field: repeated ai.stigmer.platform.cursoraccount.v1.CursorAccountSummary accounts = 1;
+     */
+    accounts: CursorAccountSummary[];
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccountsResponse.
+ * Use `create(CursorAccountsResponseSchema)` to create a new message.
+ */
+export declare const CursorAccountsResponseSchema: GenMessage<CursorAccountsResponse>;
+/**
+ * Input for the single-account detail view.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.GetCursorAccountViewInput
+ */
+export type GetCursorAccountViewInput = Message<"ai.stigmer.platform.cursoraccount.v1.GetCursorAccountViewInput"> & {
+    /**
+     * @generated from field: string account_id = 1;
+     */
+    accountId: string;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.GetCursorAccountViewInput.
+ * Use `create(GetCursorAccountViewInputSchema)` to create a new message.
+ */
+export declare const GetCursorAccountViewInputSchema: GenMessage<GetCursorAccountViewInput>;
+/**
+ * One active roster member Stigmer holds no key for, joined with their
+ * cycle spend — the operator's coverage-gap row. The spend join happens
+ * server-side by the same case-insensitive email rule as key views
+ * (computed on read, never stored) so clients never re-derive it.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorTeamMemberView
+ */
+export type CursorTeamMemberView = Message<"ai.stigmer.platform.cursoraccount.v1.CursorTeamMemberView"> & {
+    /**
+     * @generated from field: ai.stigmer.platform.cursoraccount.v1.CursorTeamMember member = 1;
+     */
+    member?: CursorTeamMember;
+    /**
+     * Spend of this member this cycle; unset when the member has no
+     * spend row.
+     *
+     * @generated from field: ai.stigmer.platform.cursoraccount.v1.CursorMemberSpend spend = 2;
+     */
+    spend?: CursorMemberSpend;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorTeamMemberView.
+ * Use `create(CursorTeamMemberViewSchema)` to create a new message.
+ */
+export declare const CursorTeamMemberViewSchema: GenMessage<CursorTeamMemberView>;
+/**
+ * One member key joined with roster + spend facts for the detail view.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyView
+ */
+export type CursorMemberKeyView = Message<"ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyView"> & {
+    /**
+     * The key entry with material redacted.
+     *
+     * @generated from field: ai.stigmer.platform.cursoraccount.v1.CursorMemberKey key = 1;
+     */
+    key?: CursorMemberKey;
+    /**
+     * @generated from field: ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyState state = 2;
+     */
+    state: CursorMemberKeyState;
+    /**
+     * Spend of the owning member this cycle; unset when the member has no
+     * spend row. (Cursor's spend endpoint drifted 2026-07-23: it now also
+     * returns removed members, with a flat totalPercentUsed=100 — the
+     * roster state above, never spend, decides "removed".)
+     *
+     * @generated from field: ai.stigmer.platform.cursoraccount.v1.CursorMemberSpend spend = 3;
+     */
+    spend?: CursorMemberSpend;
+    /**
+     * True when the usage guard excludes this key from NEW-session
+     * selection: the account declares on-demand usage disabled AND the
+     * owning member's api_percent_used has crossed the platform soft
+     * limit. Server-computed on read by the same routability predicate
+     * key selection uses (the threshold is server config — clients must
+     * render this flag, never re-derive it). Pinned sessions are not
+     * affected by the guard.
+     *
+     * @generated from field: bool usage_guard_tripped = 4;
+     */
+    usageGuardTripped: boolean;
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyView.
+ * Use `create(CursorMemberKeyViewSchema)` to create a new message.
+ */
+export declare const CursorMemberKeyViewSchema: GenMessage<CursorMemberKeyView>;
+/**
+ * Full detail view of one account: the redacted account, the latest
+ * roster/spend snapshot, and the computed key-coverage join.
+ *
+ * @generated from message ai.stigmer.platform.cursoraccount.v1.CursorAccountView
+ */
+export type CursorAccountView = Message<"ai.stigmer.platform.cursoraccount.v1.CursorAccountView"> & {
+    /**
+     * @generated from field: ai.stigmer.platform.cursoraccount.v1.CursorAccount account = 1;
+     */
+    account?: CursorAccount;
+    /**
+     * Latest sync snapshot; unset when never synced.
+     *
+     * @generated from field: ai.stigmer.platform.cursoraccount.v1.CursorAccountSyncSnapshot snapshot = 2;
+     */
+    snapshot?: CursorAccountSyncSnapshot;
+    /**
+     * Every stored member key joined with roster and spend facts.
+     *
+     * @generated from field: repeated ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyView key_views = 3;
+     */
+    keyViews: CursorMemberKeyView[];
+    /**
+     * Deprecated: superseded by members_without_keys_views, which carries
+     * the same roster entries with their spend joined server-side. Still
+     * populated (protos are published; older clients may read it); current
+     * clients must read the views field.
+     *
+     * @generated from field: repeated ai.stigmer.platform.cursoraccount.v1.CursorTeamMember members_without_keys = 4 [deprecated = true];
+     * @deprecated
+     */
+    membersWithoutKeys: CursorTeamMember[];
+    /**
+     * Active roster members (role != "removed") for whom no member key is
+     * stored — the operator's "coverage gap" list, each joined with the
+     * member's cycle spend by the same email rule as key_views.
+     *
+     * @generated from field: repeated ai.stigmer.platform.cursoraccount.v1.CursorTeamMemberView members_without_keys_views = 5;
+     */
+    membersWithoutKeysViews: CursorTeamMemberView[];
+};
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccountView.
+ * Use `create(CursorAccountViewSchema)` to create a new message.
+ */
+export declare const CursorAccountViewSchema: GenMessage<CursorAccountView>;
+/**
+ * CursorMemberKeyState classifies one stored member key against the
+ * latest roster snapshot. Computed on read (never stored) so it can
+ * not drift from its inputs.
+ *
+ * @generated from enum ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyState
+ */
+export declare enum CursorMemberKeyState {
+    /**
+     * @generated from enum value: cursor_member_key_state_unspecified = 0;
+     */
+    cursor_member_key_state_unspecified = 0,
+    /**
+     * Key owner is an active roster member.
+     *
+     * @generated from enum value: member_key_active = 1;
+     */
+    member_key_active = 1,
+    /**
+     * Key owner shows as "removed" in the roster — the key is excluded
+     * from selection and flagged for the operator.
+     *
+     * @generated from enum value: member_key_owner_removed = 2;
+     */
+    member_key_owner_removed = 2,
+    /**
+     * Key owner does not appear in the roster at all (or no sync has run
+     * yet, in which case every key reports this until the first sync).
+     *
+     * @generated from enum value: member_key_owner_unknown = 3;
+     */
+    member_key_owner_unknown = 3
+}
+/**
+ * Describes the enum ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyState.
+ */
+export declare const CursorMemberKeyStateSchema: GenEnum<CursorMemberKeyState>;

package/ai/stigmer/platform/cursoraccount/v1/io_pb.js

@@ -0,0 +1,115 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/platform/cursoraccount/v1/io.proto (package ai.stigmer.platform.cursoraccount.v1, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_platform_cursoraccount_v1_cursor_account } from "./cursor_account_pb.js";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb.js";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file ai/stigmer/platform/cursoraccount/v1/io.proto.
+ */
+export const file_ai_stigmer_platform_cursoraccount_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_platform_cursoraccount_v1_cursor_account, file_buf_validate_validate, file_google_protobuf_timestamp]);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.UpsertCursorAccountInput.
+ * Use `create(UpsertCursorAccountInputSchema)` to create a new message.
+ */
+export const UpsertCursorAccountInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.DeleteCursorAccountInput.
+ * Use `create(DeleteCursorAccountInputSchema)` to create a new message.
+ */
+export const DeleteCursorAccountInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 1);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.AddCursorMemberKeyInput.
+ * Use `create(AddCursorMemberKeyInputSchema)` to create a new message.
+ */
+export const AddCursorMemberKeyInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 2);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.RemoveCursorMemberKeyInput.
+ * Use `create(RemoveCursorMemberKeyInputSchema)` to create a new message.
+ */
+export const RemoveCursorMemberKeyInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 3);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.SetCursorMemberKeyEnabledInput.
+ * Use `create(SetCursorMemberKeyEnabledInputSchema)` to create a new message.
+ */
+export const SetCursorMemberKeyEnabledInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 4);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.SyncCursorAccountInput.
+ * Use `create(SyncCursorAccountInputSchema)` to create a new message.
+ */
+export const SyncCursorAccountInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 5);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.ListCursorAccountsInput.
+ * Use `create(ListCursorAccountsInputSchema)` to create a new message.
+ */
+export const ListCursorAccountsInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 6);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccountSummary.
+ * Use `create(CursorAccountSummarySchema)` to create a new message.
+ */
+export const CursorAccountSummarySchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 7);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccountsResponse.
+ * Use `create(CursorAccountsResponseSchema)` to create a new message.
+ */
+export const CursorAccountsResponseSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 8);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.GetCursorAccountViewInput.
+ * Use `create(GetCursorAccountViewInputSchema)` to create a new message.
+ */
+export const GetCursorAccountViewInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 9);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorTeamMemberView.
+ * Use `create(CursorTeamMemberViewSchema)` to create a new message.
+ */
+export const CursorTeamMemberViewSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 10);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyView.
+ * Use `create(CursorMemberKeyViewSchema)` to create a new message.
+ */
+export const CursorMemberKeyViewSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 11);
+/**
+ * Describes the message ai.stigmer.platform.cursoraccount.v1.CursorAccountView.
+ * Use `create(CursorAccountViewSchema)` to create a new message.
+ */
+export const CursorAccountViewSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 12);
+/**
+ * CursorMemberKeyState classifies one stored member key against the
+ * latest roster snapshot. Computed on read (never stored) so it can
+ * not drift from its inputs.
+ *
+ * @generated from enum ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyState
+ */
+export var CursorMemberKeyState;
+(function (CursorMemberKeyState) {
+    /**
+     * @generated from enum value: cursor_member_key_state_unspecified = 0;
+     */
+    CursorMemberKeyState[CursorMemberKeyState["cursor_member_key_state_unspecified"] = 0] = "cursor_member_key_state_unspecified";
+    /**
+     * Key owner is an active roster member.
+     *
+     * @generated from enum value: member_key_active = 1;
+     */
+    CursorMemberKeyState[CursorMemberKeyState["member_key_active"] = 1] = "member_key_active";
+    /**
+     * Key owner shows as "removed" in the roster — the key is excluded
+     * from selection and flagged for the operator.
+     *
+     * @generated from enum value: member_key_owner_removed = 2;
+     */
+    CursorMemberKeyState[CursorMemberKeyState["member_key_owner_removed"] = 2] = "member_key_owner_removed";
+    /**
+     * Key owner does not appear in the roster at all (or no sync has run
+     * yet, in which case every key reports this until the first sync).
+     *
+     * @generated from enum value: member_key_owner_unknown = 3;
+     */
+    CursorMemberKeyState[CursorMemberKeyState["member_key_owner_unknown"] = 3] = "member_key_owner_unknown";
+})(CursorMemberKeyState || (CursorMemberKeyState = {}));
+/**
+ * Describes the enum ai.stigmer.platform.cursoraccount.v1.CursorMemberKeyState.
+ */
+export const CursorMemberKeyStateSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_platform_cursoraccount_v1_io, 0);
+//# sourceMappingURL=io_pb.js.map

package/ai/stigmer/platform/cursoraccount/v1/io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mIAAmI;AACnI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,wDAAwD,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,opFAAopF,EAAE,CAAC,wDAAwD,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAqBzxF;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAuB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAgC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA6B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAyB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAc/D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAW/D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AA+B/D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAY/D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAc/D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAyB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AA4ChE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAiDhE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,oBA4BX;AA5BD,WAAY,oBAAoB;IAC9B;;OAEG;IACH,6HAAuC,CAAA;IAEvC;;;;OAIG;IACH,yFAAqB,CAAA;IAErB;;;;;OAKG;IACH,uGAA4B,CAAA;IAE5B;;;;;OAKG;IACH,uGAA4B,CAAA;AAC9B,CAAC,EA5BW,oBAAoB,KAApB,oBAAoB,QA4B/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/cursoraccount/v1/query_connect.d.ts

@@ -0,0 +1,44 @@
+/**
+ * CursorAccountQueryController handles read operations for managed
+ * Cursor accounts.
+ *
+ * Platform-gated like the command controller: even redacted, the resource
+ * reveals team structure and per-member spend, which are
+ * platform-internal.
+ *
+ * @internal
+ * Cloud-only; not implemented by the OSS Go server.
+ *
+ * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController
+ */
+export declare const CursorAccountQueryController: {
+    readonly typeName: "ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController";
+    readonly methods: {
+        /**
+         * List all Cursor accounts with routing/sync summaries. Key material
+         * is always redacted.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController.listCursorAccounts
+         */
+        readonly listCursorAccounts: {
+            readonly name: "listCursorAccounts";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * Retrieve one account's detail view: the redacted account, the latest
+         * roster/spend snapshot, and the computed key-coverage join (which
+         * members hold stored keys, which keys lost their owner, who has no
+         * key).
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController.getCursorAccountView
+         */
+        readonly getCursorAccountView: {
+            readonly name: "getCursorAccountView";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/platform/cursoraccount/v1/query_connect.js

@@ -0,0 +1,51 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/platform/cursoraccount/v1/query.proto (package ai.stigmer.platform.cursoraccount.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { CursorAccountsResponse, CursorAccountView, GetCursorAccountViewInput, ListCursorAccountsInput } from "./io_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * CursorAccountQueryController handles read operations for managed
+ * Cursor accounts.
+ *
+ * Platform-gated like the command controller: even redacted, the resource
+ * reveals team structure and per-member spend, which are
+ * platform-internal.
+ *
+ * @internal
+ * Cloud-only; not implemented by the OSS Go server.
+ *
+ * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController
+ */
+export const CursorAccountQueryController = {
+    typeName: "ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController",
+    methods: {
+        /**
+         * List all Cursor accounts with routing/sync summaries. Key material
+         * is always redacted.
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController.listCursorAccounts
+         */
+        listCursorAccounts: {
+            name: "listCursorAccounts",
+            I: ListCursorAccountsInput,
+            O: CursorAccountsResponse,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * Retrieve one account's detail view: the redacted account, the latest
+         * roster/spend snapshot, and the computed key-coverage join (which
+         * members hold stored keys, which keys lost their owner, who has no
+         * key).
+         *
+         * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController.getCursorAccountView
+         */
+        getCursorAccountView: {
+            name: "getCursorAccountView",
+            I: GetCursorAccountViewInput,
+            O: CursorAccountView,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=query_connect.js.map

package/ai/stigmer/platform/cursoraccount/v1/query_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/platform/cursoraccount/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,mEAAmE;IAC7E,OAAO,EAAE;QACP;;;;;WAKG;QACH,kBAAkB,EAAE;YAClB,IAAI,EAAE,oBAAoB;YAC1B,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,iBAAiB;YACpB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/platform/cursoraccount/v1/query_pb.d.ts

@@ -0,0 +1,45 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { CursorAccountsResponseSchema, CursorAccountViewSchema, GetCursorAccountViewInputSchema, ListCursorAccountsInputSchema } from "./io_pb.js";
+/**
+ * Describes the file ai/stigmer/platform/cursoraccount/v1/query.proto.
+ */
+export declare const file_ai_stigmer_platform_cursoraccount_v1_query: GenFile;
+/**
+ * CursorAccountQueryController handles read operations for managed
+ * Cursor accounts.
+ *
+ * Platform-gated like the command controller: even redacted, the resource
+ * reveals team structure and per-member spend, which are
+ * platform-internal.
+ *
+ * @internal
+ * Cloud-only; not implemented by the OSS Go server.
+ *
+ * @generated from service ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController
+ */
+export declare const CursorAccountQueryController: GenService<{
+    /**
+     * List all Cursor accounts with routing/sync summaries. Key material
+     * is always redacted.
+     *
+     * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController.listCursorAccounts
+     */
+    listCursorAccounts: {
+        methodKind: "unary";
+        input: typeof ListCursorAccountsInputSchema;
+        output: typeof CursorAccountsResponseSchema;
+    };
+    /**
+     * Retrieve one account's detail view: the redacted account, the latest
+     * roster/spend snapshot, and the computed key-coverage join (which
+     * members hold stored keys, which keys lost their owner, who has no
+     * key).
+     *
+     * @generated from rpc ai.stigmer.platform.cursoraccount.v1.CursorAccountQueryController.getCursorAccountView
+     */
+    getCursorAccountView: {
+        methodKind: "unary";
+        input: typeof GetCursorAccountViewInputSchema;
+        output: typeof CursorAccountViewSchema;
+    };
+}>;