@stigmer/protos 3.22.0 → 3.22.1-dev.20260922095755

package/ai/stigmer/agentic/agent/v1/command_connect.d.ts

@@ -44,12 +44,12 @@ export declare const AgentCommandController: {
          *
          * This is a targeted metadata update — it only modifies metadata.visibility,
          * leaving spec, status, and other metadata fields untouched. Use this to
-         * make an agent publicly accessible or to revoke public access without
-         * sending the entire agent resource (avoiding read-modify-write races).
+         * widen or narrow who can read the agent without sending the entire agent
+         * resource (avoiding read-modify-write races).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * Raising the level is refused while a skill, MCP server or agent the
+         * agent references is less visible than the requested level: what a
+         * person can run they must also be able to read.
          *
          * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.updateVisibility
          */

package/ai/stigmer/agentic/agent/v1/command_connect.js

@@ -52,12 +52,12 @@ export const AgentCommandController = {
          *
          * This is a targeted metadata update — it only modifies metadata.visibility,
          * leaving spec, status, and other metadata fields untouched. Use this to
-         * make an agent publicly accessible or to revoke public access without
-         * sending the entire agent resource (avoiding read-modify-write races).
+         * widen or narrow who can read the agent without sending the entire agent
+         * resource (avoiding read-modify-write races).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * Raising the level is refused while a skill, MCP server or agent the
+         * agent references is less visible than the requested level: what a
+         * person can run they must also be able to read.
          *
          * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.updateVisibility
          */

package/ai/stigmer/agentic/agent/v1/command_pb.d.ts

@@ -47,12 +47,12 @@ export declare const AgentCommandController: GenService<{
      *
      * This is a targeted metadata update — it only modifies metadata.visibility,
      * leaving spec, status, and other metadata fields untouched. Use this to
-     * make an agent publicly accessible or to revoke public access without
-     * sending the entire agent resource (avoiding read-modify-write races).
+     * widen or narrow who can read the agent without sending the entire agent
+     * resource (avoiding read-modify-write races).
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
+     * Raising the level is refused while a skill, MCP server or agent the
+     * agent references is less visible than the requested level: what a
+     * person can run they must also be able to read.
      *
      * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.updateVisibility
      */

package/ai/stigmer/agentic/agentinstance/v1/command_connect.d.ts

@@ -20,8 +20,10 @@ export declare const AgentInstanceCommandController: {
         /**
          * Create an agent instance.
          *
-         * Public agents allow any authenticated user to create instances (cross-org allowed).
-         * Private agents restrict instance creation to org members and the agent owner.
+         * Instance creation needs can_create_instance on the agent and
+         * can_create_agent_instance in the instance's own organization; a
+         * platform-visible agent may be instantiated from any organization its
+         * identity provider links.
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */
@@ -45,18 +47,14 @@ export declare const AgentInstanceCommandController: {
         /**
          * Update the visibility of an existing agent instance.
          *
-         * Changes who can view this instance and interact with it. Supports the
-         * full visibility spectrum: PRIVATE (owner only), ORG (all org members),
-         * or PUBLIC (all authenticated users).
+         * Changes who can view this instance and interact with it. Supports
+         * PRIVATE (owner only) and ORG (all org members); instances never take
+         * the platform level (tenant isolation).
          *
          * For agent instances, visibility controls who can create sessions and run
          * executions against this instance. Sessions remain personal regardless of
          * instance visibility (conversation privacy is preserved).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.updateVisibility
          */
         readonly updateVisibility: {

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js

@@ -28,8 +28,10 @@ export const AgentInstanceCommandController = {
         /**
          * Create an agent instance.
          *
-         * Public agents allow any authenticated user to create instances (cross-org allowed).
-         * Private agents restrict instance creation to org members and the agent owner.
+         * Instance creation needs can_create_instance on the agent and
+         * can_create_agent_instance in the instance's own organization; a
+         * platform-visible agent may be instantiated from any organization its
+         * identity provider links.
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */
@@ -53,18 +55,14 @@ export const AgentInstanceCommandController = {
         /**
          * Update the visibility of an existing agent instance.
          *
-         * Changes who can view this instance and interact with it. Supports the
-         * full visibility spectrum: PRIVATE (owner only), ORG (all org members),
-         * or PUBLIC (all authenticated users).
+         * Changes who can view this instance and interact with it. Supports
+         * PRIVATE (owner only) and ORG (all org members); instances never take
+         * the platform level (tenant isolation).
          *
          * For agent instances, visibility controls who can create sessions and run
          * executions against this instance. Sessions remain personal regardless of
          * instance visibility (conversation privacy is preserved).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.updateVisibility
          */
         updateVisibility: {

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_pb.d.ts

@@ -25,8 +25,10 @@ export declare const AgentInstanceCommandController: GenService<{
     /**
      * Create an agent instance.
      *
-     * Public agents allow any authenticated user to create instances (cross-org allowed).
-     * Private agents restrict instance creation to org members and the agent owner.
+     * Instance creation needs can_create_instance on the agent and
+     * can_create_agent_instance in the instance's own organization; a
+     * platform-visible agent may be instantiated from any organization its
+     * identity provider links.
      *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
      */
@@ -48,18 +50,14 @@ export declare const AgentInstanceCommandController: GenService<{
     /**
      * Update the visibility of an existing agent instance.
      *
-     * Changes who can view this instance and interact with it. Supports the
-     * full visibility spectrum: PRIVATE (owner only), ORG (all org members),
-     * or PUBLIC (all authenticated users).
+     * Changes who can view this instance and interact with it. Supports
+     * PRIVATE (owner only) and ORG (all org members); instances never take
+     * the platform level (tenant isolation).
      *
      * For agent instances, visibility controls who can create sessions and run
      * executions against this instance. Sessions remain personal regardless of
      * instance visibility (conversation privacy is preserved).
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.updateVisibility
      */
     updateVisibility: {

package/ai/stigmer/agentic/agentinstance/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8sCAA8sC,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr8C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAkEtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8sCAA8sC,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr8C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAgEtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/spec_pb.d.ts

@@ -19,10 +19,10 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
     /**
      * Reference to the agent this share distributes.
      *
-     * The referenced agent may live in another organization when it is
-     * marketplace-public: the share then offers that agent from this share's
-     * org, billed to this share's org, with tool credentials bound from this
-     * share's org. Cross-org shares must have a public audience.
+     * The referenced agent must live in this share's organization: a share
+     * offers an agent its own organization owns, billed to that organization,
+     * with tool credentials bound from it. To share another organization's
+     * agent, install the plugin that carries it and share the installed copy.
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference agent_ref = 1;
      */

package/ai/stigmer/agentic/mcpserver/v1/command_connect.d.ts

@@ -65,10 +65,6 @@ export declare const McpServerCommandController: {
          * Only modifies metadata.visibility, leaving spec, status, and other
          * metadata fields untouched.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.updateVisibility
          */
         readonly updateVisibility: {

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js

@@ -73,10 +73,6 @@ export const McpServerCommandController = {
          * Only modifies metadata.visibility, leaving spec, status, and other
          * metadata fields untouched.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.updateVisibility
          */
         updateVisibility: {

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_pb.d.ts

@@ -67,10 +67,6 @@ export declare const McpServerCommandController: GenService<{
      * Only modifies metadata.visibility, leaving spec, status, and other
      * metadata fields untouched.
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
-     *
      * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.updateVisibility
      */
     updateVisibility: {

package/ai/stigmer/agentic/mcpserver/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,w/FAAw/F,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEvuG;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAuNlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,w/FAAw/F,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEvuG;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAmNlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts

@@ -308,7 +308,9 @@ export type McpServerAuth = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerAu
      * When set: Stigmer uses the referenced OAuthApp's client credentials to
      * perform the OAuth authorization code flow with the vendor on behalf of
      * the user. The OAuthApp must belong to the same organization as the
-     * McpServer (or be accessible via cross-org reference).
+     * McpServer: an OAuth app holds vendor credentials and is never
+     * platform-visible, so no cross-organization reference to one is
+     * accepted.
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference oauth_app_ref = 1;
      */

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuH7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAsD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA2D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAoD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAmG5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuH7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAsD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA2D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAoD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqG5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/plugin/v1/command_connect.d.ts

@@ -42,9 +42,6 @@ export declare const PluginCommandController: {
          * Update the visibility of a plugin and of every resource it materialised.
          * Only modifies metadata.visibility on the plugin and its members.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         *
          * @generated from rpc ai.stigmer.agentic.plugin.v1.PluginCommandController.updateVisibility
          */
         readonly updateVisibility: {

package/ai/stigmer/agentic/plugin/v1/command_connect.js

@@ -50,9 +50,6 @@ export const PluginCommandController = {
          * Update the visibility of a plugin and of every resource it materialised.
          * Only modifies metadata.visibility on the plugin and its members.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         *
          * @generated from rpc ai.stigmer.agentic.plugin.v1.PluginCommandController.updateVisibility
          */
         updateVisibility: {

package/ai/stigmer/agentic/plugin/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/plugin/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wHAAwH;AACxH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,oCAAoC,EAAE,uBAAuB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACvH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;;;;;;WASG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,oCAAoC;YACvC,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/plugin/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wHAAwH;AACxH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,oCAAoC,EAAE,uBAAuB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACvH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;;;;;;WASG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,oCAAoC;YACvC,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/plugin/v1/command_pb.d.ts

@@ -46,9 +46,6 @@ export declare const PluginCommandController: GenService<{
      * Update the visibility of a plugin and of every resource it materialised.
      * Only modifies metadata.visibility on the plugin and its members.
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     *
      * @generated from rpc ai.stigmer.agentic.plugin.v1.PluginCommandController.updateVisibility
      */
     updateVisibility: {

package/ai/stigmer/agentic/plugin/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/plugin/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,aAAa,CAAC;AAEpE,OAAO,EAAE,oCAAoC,EAAE,MAAM,YAAY,CAAC;AAElE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,ikCAAikC,EAAE,CAAC,qCAAqC,EAAE,oCAAoC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1yC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAyD/B,aAAa,CAChB,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/plugin/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,aAAa,CAAC;AAEpE,OAAO,EAAE,oCAAoC,EAAE,MAAM,YAAY,CAAC;AAElE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,ikCAAikC,EAAE,CAAC,qCAAqC,EAAE,oCAAoC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1yC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAsD/B,aAAa,CAChB,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/skill/v1/command_connect.d.ts

@@ -54,12 +54,8 @@ export declare const SkillCommandController: {
         /**
          * Update the visibility of an existing skill.
          * Only modifies metadata.visibility, leaving spec, status, and other
-         * metadata fields untouched. Use this to make a skill publicly accessible
-         * or to revoke public access.
-         *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * metadata fields untouched. Use this to widen or narrow who can read
+         * the skill.
          *
          * @generated from rpc ai.stigmer.agentic.skill.v1.SkillCommandController.updateVisibility
          */

package/ai/stigmer/agentic/skill/v1/command_connect.js

@@ -62,12 +62,8 @@ export const SkillCommandController = {
         /**
          * Update the visibility of an existing skill.
          * Only modifies metadata.visibility, leaving spec, status, and other
-         * metadata fields untouched. Use this to make a skill publicly accessible
-         * or to revoke public access.
-         *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * metadata fields untouched. Use this to widen or narrow who can read
+         * the skill.
          *
          * @generated from rpc ai.stigmer.agentic.skill.v1.SkillCommandController.updateVisibility
          */

package/ai/stigmer/agentic/skill/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/skill/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,mCAAmC,EAAE,qCAAqC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1J,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;;;WAMG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,mCAAmC;YACtC,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,qCAAqC;YACxC,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/skill/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,mCAAmC,EAAE,qCAAqC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1J,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;;;WAMG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,mCAAmC;YACtC,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,qCAAqC;YACxC,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/skill/v1/command_pb.d.ts

@@ -57,12 +57,8 @@ export declare const SkillCommandController: GenService<{
     /**
      * Update the visibility of an existing skill.
      * Only modifies metadata.visibility, leaving spec, status, and other
-     * metadata fields untouched. Use this to make a skill publicly accessible
-     * or to revoke public access.
-     *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
+     * metadata fields untouched. Use this to widen or narrow who can read
+     * the skill.
      *
      * @generated from rpc ai.stigmer.agentic.skill.v1.SkillCommandController.updateVisibility
      */

package/ai/stigmer/agentic/skill/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/skill/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,qyCAAqyC,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5gD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAsE9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/skill/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,qyCAAqyC,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5gD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAkE9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflow/v1/command_connect.d.ts

@@ -44,12 +44,12 @@ export declare const WorkflowCommandController: {
          *
          * This is a targeted metadata update — it only modifies metadata.visibility,
          * leaving spec, status, and other metadata fields untouched. Use this to
-         * make a workflow publicly accessible or to revoke public access without
-         * sending the entire workflow resource (avoiding read-modify-write races).
+         * widen or narrow who can read the workflow without sending the entire
+         * workflow resource (avoiding read-modify-write races).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * Raising the level is refused while an agent an agent_call task names is
+         * less visible than the requested level: what a person can run they must
+         * also be able to read.
          *
          * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.updateVisibility
          */

package/ai/stigmer/agentic/workflow/v1/command_connect.js

@@ -54,12 +54,12 @@ export const WorkflowCommandController = {
          *
          * This is a targeted metadata update — it only modifies metadata.visibility,
          * leaving spec, status, and other metadata fields untouched. Use this to
-         * make a workflow publicly accessible or to revoke public access without
-         * sending the entire workflow resource (avoiding read-modify-write races).
+         * widen or narrow who can read the workflow without sending the entire
+         * workflow resource (avoiding read-modify-write races).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * Raising the level is refused while an agent an agent_call task names is
+         * less visible than the requested level: what a person can run they must
+         * also be able to read.
          *
          * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.updateVisibility
          */

package/ai/stigmer/agentic/workflow/v1/command_pb.d.ts

@@ -49,12 +49,12 @@ export declare const WorkflowCommandController: GenService<{
      *
      * This is a targeted metadata update — it only modifies metadata.visibility,
      * leaving spec, status, and other metadata fields untouched. Use this to
-     * make a workflow publicly accessible or to revoke public access without
-     * sending the entire workflow resource (avoiding read-modify-write races).
+     * widen or narrow who can read the workflow without sending the entire
+     * workflow resource (avoiding read-modify-write races).
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
+     * Raising the level is refused while an agent an agent_call task names is
+     * less visible than the requested level: what a person can run they must
+     * also be able to read.
      *
      * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.updateVisibility
      */

package/ai/stigmer/agentic/workflowinstance/v1/command_connect.d.ts

@@ -42,19 +42,15 @@ export declare const WorkflowInstanceCommandController: {
         /**
          * Update the visibility of an existing workflow instance.
          *
-         * Changes who can view this instance and its executions. Supports the full
-         * visibility spectrum: PRIVATE (owner only), ORG (all org members), or
-         * PUBLIC (all authenticated users).
+         * Changes who can view this instance and its executions. Supports PRIVATE
+         * (owner only) and ORG (all org members); instances never take the
+         * platform level (tenant isolation).
          *
          * For workflow instances, visibility has cascading effects on execution
          * observability: workflow executions inherit visibility from their parent
          * instance via FGA. An ORG-visible instance means all org members can see
          * all executions — zero per-execution tuples needed.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateVisibility
          */
         readonly updateVisibility: {
@@ -72,7 +68,7 @@ export declare const WorkflowInstanceCommandController: {
          * other users' run history — that requires this opt-in.
          *
          * Supported levels: PRIVATE (only the user who ran each execution) and
-         * ORGANIZATION (all org members). Public/platform are unsupported.
+         * ORGANIZATION (all org members). Platform is unsupported.
          *
          * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateExecutionVisibility
          */

package/ai/stigmer/agentic/workflowinstance/v1/command_connect.js

@@ -51,19 +51,15 @@ export const WorkflowInstanceCommandController = {
         /**
          * Update the visibility of an existing workflow instance.
          *
-         * Changes who can view this instance and its executions. Supports the full
-         * visibility spectrum: PRIVATE (owner only), ORG (all org members), or
-         * PUBLIC (all authenticated users).
+         * Changes who can view this instance and its executions. Supports PRIVATE
+         * (owner only) and ORG (all org members); instances never take the
+         * platform level (tenant isolation).
          *
          * For workflow instances, visibility has cascading effects on execution
          * observability: workflow executions inherit visibility from their parent
          * instance via FGA. An ORG-visible instance means all org members can see
          * all executions — zero per-execution tuples needed.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateVisibility
          */
         updateVisibility: {
@@ -81,7 +77,7 @@ export const WorkflowInstanceCommandController = {
          * other users' run history — that requires this opt-in.
          *
          * Supported levels: PRIVATE (only the user who ran each execution) and
-         * ORGANIZATION (all org members). Public/platform are unsupported.
+         * ORGANIZATION (all org members). Platform is unsupported.
          *
          * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateExecutionVisibility
          */

package/ai/stigmer/agentic/workflowinstance/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,kGAAkG;AAElG,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,8BAA8B,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,8BAA8B;YACjC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,kGAAkG;AAElG,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,8BAA8B,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,QAAQ,EAAE,0EAA0E;IACpF,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,8BAA8B;YACjC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/workflowinstance/v1/command_pb.d.ts

@@ -45,19 +45,15 @@ export declare const WorkflowInstanceCommandController: GenService<{
     /**
      * Update the visibility of an existing workflow instance.
      *
-     * Changes who can view this instance and its executions. Supports the full
-     * visibility spectrum: PRIVATE (owner only), ORG (all org members), or
-     * PUBLIC (all authenticated users).
+     * Changes who can view this instance and its executions. Supports PRIVATE
+     * (owner only) and ORG (all org members); instances never take the
+     * platform level (tenant isolation).
      *
      * For workflow instances, visibility has cascading effects on execution
      * observability: workflow executions inherit visibility from their parent
      * instance via FGA. An ORG-visible instance means all org members can see
      * all executions — zero per-execution tuples needed.
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
-     *
      * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateVisibility
      */
     updateVisibility: {
@@ -74,7 +70,7 @@ export declare const WorkflowInstanceCommandController: GenService<{
      * other users' run history — that requires this opt-in.
      *
      * Supported levels: PRIVATE (only the user who ran each execution) and
-     * ORGANIZATION (all org members). Public/platform are unsupported.
+     * ORGANIZATION (all org members). Platform is unsupported.
      *
      * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateExecutionVisibility
      */

package/ai/stigmer/agentic/workflowinstance/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAKpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,wnDAAwnD,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAkFzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAKpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,wnDAAwnD,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GA8EzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.js

@@ -8,7 +8,7 @@ import { file_google_protobuf_descriptor } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind.proto.
  */
-export const file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_group, file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, file_google_protobuf_descriptor]);
+export const file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind = /*@__PURE__*/ fileDesc("CkZhaS9zdGlnbWVyL2NvbW1vbnMvYXBpcmVzb3VyY2UvYXBpcmVzb3VyY2VraW5kL2FwaV9yZXNvdXJjZV9raW5kLnByb3RvEi5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuYXBpcmVzb3VyY2VraW5kIswDChNBcGlSZXNvdXJjZUtpbmRNZXRhEk8KBWdyb3VwGAEgASgOMkAuYWkuc3RpZ21lci5jb21tb25zLmFwaXJlc291cmNlLmFwaXJlc291cmNla2luZC5BcGlSZXNvdXJjZUdyb3VwElMKB3ZlcnNpb24YAiABKA4yQi5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuYXBpcmVzb3VyY2VraW5kLkFwaVJlc291cmNlVmVyc2lvbhIMCgRuYW1lGAMgASgJEhQKDGRpc3BsYXlfbmFtZRgEIAEoCRIRCglpZF9wcmVmaXgYBSABKAkSFAoMaXNfdmVyc2lvbmVkGAYgASgIEhoKEm5vdF9zZWFyY2hfaW5kZXhlZBgHIAEoCBJKCgR0aWVyGAggASgOMjwuYWkuc3RpZ21lci5jb21tb25zLmFwaXJlc291cmNlLmFwaXJlc291cmNla2luZC5SZXNvdXJjZVRpZXISWgoNYXV0aG9yaXphdGlvbhgJIAEoCzJDLmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5hcGlyZXNvdXJjZWtpbmQuQXV0aG9yaXphdGlvbkNvbmZpZypCChJBcGlSZXNvdXJjZVZlcnNpb24SJAogYXBpX3Jlc291cmNlX3ZlcnNpb25fdW5zcGVjaWZpZWQQABIGCgJ2MRABKl4KDFJlc291cmNlVGllchIdChlyZXNvdXJjZV90aWVyX3Vuc3BlY2lmaWVkEAASDwoLb3Blbl9zb3VyY2UQARIOCgpjbG91ZF9vbmx5EAISDgoKZW50ZXJwcmlzZRADKkEKD1BsYXRmb3JtSWRWYWx1ZRIhCh1wbGF0Zm9ybV9pZF92YWx1ZV91bnNwZWNpZmllZBAAEgsKB3N0aWdtZXIQASq7EwoPQXBpUmVzb3VyY2VLaW5kEh0KGWFwaV9yZXNvdXJjZV9raW5kX3Vua25vd24QABJbChRhcGlfcmVzb3VyY2VfdmVyc2lvbhABGkGq/ys9CAEQARoSQXBpUmVzb3VyY2VWZXJzaW9uIhRBUEkgUmVzb3VyY2UgVmVyc2lvbioDdmVyOAFAAkoECAUQBBI/CgppYW1fcG9saWN5EAoaL6r/KysIAhABGglJYW1Qb2xpY3kiCklBTSBQb2xpY3kqBGlhbXA4AUABSgQIAhABElAKEGlkZW50aXR5X2FjY291bnQQCxo6qv8rNggCEAEaD0lkZW50aXR5QWNjb3VudCIQSWRlbnRpdHkgQWNjb3VudCoDaWRhOAFAAUoECAQQAxI1CgdhcGlfa2V5EAwaKKr/KyQIAhABGgZBcGlLZXkiB0FQSSBLZXkqA2tleTgBQAFKBAgEEAESPwoKaW52aXRhdGlvbhAUGi+q/ysrCAIQARoKSW52aXRhdGlvbiIKSW52aXRhdGlvbioDaW52OAFAA0oECAIQARJXChFpZGVudGl0eV9wcm92aWRlchAVGkCq/ys8CAIQARoQSWRlbnRpdHlQcm92aWRlciIRSWRlbnRpdHkgUHJvdmlkZXIqA2lkcDgBQANKCAgCEAE6AgEEEkAKCW9hdXRoX2FwcBAWGjGq/ystCAIQARoIT0F1dGhBcHAiCU9BdXRoIEFwcCoEb2FwcDgBQAFKCAgCEAE6AgEEElEKD3BsYXRmb3JtX2NsaWVudBAXGjyq/ys4CAIQARoOUGxhdGZvcm1DbGllbnQiD1BsYXRmb3JtIENsaWVudCoDcGNsOAFAAkoICAIQAToCAQQSSQoMb3JnYW5pemF0aW9uEB4aN6r/KzMIAxABGgxPcmdhbml6YXRpb24iDE9yZ2FuaXphdGlvbioDb3JnQAFKCggEEAE6BAECAwQSOQoIcGxhdGZvcm0QHxorqv8rJwgDEAEaCFBsYXRmb3JtIghQbGF0Zm9ybSoDcGx0OAFAA0oECAUQBBI6CgVhZ2VudBAoGi+q/ysrCAEQARoFQWdlbnQiBUFnZW50KgNhZ3RAAUoQCAIQASoGEAEYASABOgIBBBJrCg9hZ2VudF9leGVjdXRpb24QKRpWqv8rUggBEAEaDkFnZW50RXhlY3V0aW9uIg9BZ2VudCBFeGVjdXRpb24qA2FleEABSiQIAxACGh4KB3Nlc3Npb24SB3Nlc3Npb24aCnNlc3Npb25faWQSOAoHc2Vzc2lvbhAqGiuq/ysnCAEQARoHU2Vzc2lvbiIHU2Vzc2lvbioDc2VzQAFKCAgCEAE6AgEEEjwKBXNraWxsECsaMar/Ky0IARABGgVTa2lsbCIFU2tpbGwqA3NrbDABQAFKEAgCEAEqBhABGAEgAToCAQQSSAoKbWNwX3NlcnZlchAsGjiq/ys0CAEQARoJTWNwU2VydmVyIgpNQ1AgU2VydmVyKgNtY3BAAUoQCAIQASoGEAEYASABOgIBBBJqCg5hZ2VudF9pbnN0YW5jZRAtGlaq/ytSCAEQARoNQWdlbnRJbnN0YW5jZSIOQWdlbnQgSW5zdGFuY2UqA2FpbkABSiYIAhABIhgKBWFnZW50EgVhZ2VudBoIYWdlbnRfaWQqAhgBOgIBBBJFCgthZ2VudF9zaGFyZRAuGjSq/yswCAEQARoKQWdlbnRTaGFyZSILQWdlbnQgU2hhcmUqA2FzaDgBQAFKCAgCEAE6AgEEEkwKDWFnZW50X2NoYW5uZWwQLxo5qv8rNQgBEAEaDEFnZW50Q2hhbm5lbCINQWdlbnQgQ2hhbm5lbCoDYWNoOAFAAUoJCAIQAToDAQQFEkcKC2NoYW5uZWxfYXBwEDAaNqr/KzIIARABGgpDaGFubmVsQXBwIgtDaGFubmVsIEFwcCoFY2hhcHA4AUABSggIAhABOgIBBBJFCgh3b3JrZmxvdxAyGjeq/yszCAEQARoIV29ya2Zsb3ciCFdvcmtmbG93KgN3ZmwwAUABShAIAhABKgYQARgBIAE6AgEEEnwKEXdvcmtmbG93X2luc3RhbmNlEDMaZar/K2EIARABGhBXb3JrZmxvd0luc3RhbmNlIhFXb3JrZmxvdyBJbnN0YW5jZSoDd2luQAFKLwgCEAEiIQoId29ya2Zsb3cSCHdvcmtmbG93Ggt3b3JrZmxvd19pZCoCGAE6AgEEEpYBChJ3b3JrZmxvd19leGVjdXRpb24QNBp+qv8reggBEAEaEVdvcmtmbG93RXhlY3V0aW9uIhJXb3JrZmxvdyBFeGVjdXRpb24qA3dleEABSkYIAhABIjwKEXdvcmtmbG93X2luc3RhbmNlEhF3b3JrZmxvd19pbnN0YW5jZRoUd29ya2Zsb3dfaW5zdGFuY2VfaWQ6AgEEEkoKC2Vudmlyb25tZW50EDUaOar/KzUIARABGgtFbnZpcm9ubWVudCILRW52aXJvbm1lbnQqA2VudkABSg4IAhABKgIYATABOgIBBBI9CghhcnRpZmFjdBA3Gi+q/ysrCAEQARoIQXJ0aWZhY3QiCEFydGlmYWN0KgNhcnQ4AUABSggIAhABOgIBBBJSChFleGVjdXRpb25fY29udGV4dBA2Gjuq/ys3CAEQARoQRXhlY3V0aW9uQ29udGV4dCIRRXhlY3V0aW9uIENvbnRleHQqBGVjdHhAAUoECAQQARI9CghzY2hlZHVsZRA4Gi+q/ysrCAEQARoIU2NoZWR1bGUiCFNjaGVkdWxlKgNzY2g4AUABSggIAhABOgIBBBJtCgZtZW1vcnkQORphqv8rXQgBEAEaBk1lbW9yeSIGTWVtb3J5KgNtZW04AUABSj4IAhAEIjgKEGlkZW50aXR5X2FjY291bnQSB3N1YmplY3QaG3N1YmplY3RfaWRlbnRpdHlfYWNjb3VudF9pZBI/CgZwbHVnaW4QOhozqv8rLwgBEAEaBlBsdWdpbiIGUGx1Z2luKgNwbGcwAUABShAIAhABKgYQARgBIAE6AgEEEi0KBHBsYW4QRhojqv8rHwgEEAEaBFBsYW4iBFBsYW4qA3BsbjgBQAJKBAgFEAQSRQoMc3Vic2NyaXB0aW9uEEcaM6r/Ky8IBBABGgxTdWJzY3JpcHRpb24iDFN1YnNjcmlwdGlvbioDc3ViOAFAAkoECAIQBBI2CgdsaWNlbnNlEEgaKar/KyUIBBABGgdMaWNlbnNlIgdMaWNlbnNlKgNsaWM4AUACSgQIBRAEIgQIMRAxIgQIPBA8KglkYXRhc3RvcmUqB3Byb2plY3Q6hQEKCWtpbmRfbWV0YRIhLmdvb2dsZS5wcm90b2J1Zi5FbnVtVmFsdWVPcHRpb25zGPW/BSABKAsyQy5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuYXBpcmVzb3VyY2VraW5kLkFwaVJlc291cmNlS2luZE1ldGFSCGtpbmRNZXRhQhtCGUFwaVJlc291cmNlS2luZE91dGVyQ2xhc3NiBnByb3RvMw", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_group, file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, file_google_protobuf_descriptor]);
 /**
  * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.ApiResourceKindMeta.
  * Use `create(ApiResourceKindMetaSchema)` to create a new message.

package/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_resource_kind_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sKAAsK;AACtK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAExF,OAAO,EAAE,sEAAsE,EAAE,MAAM,4BAA4B,CAAC;AAEpH,OAAO,EAAE,wEAAwE,EAAE,MAAM,8BAA8B,CAAC;AAExH,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,qEAAqE,GAAY,aAAa,CACzG,QAAQ,CAAC,sjJAAsjJ,EAAE,CAAC,sEAAsE,EAAE,wEAAwE,EAAE,+BAA+B,CAAC,CAAC,CAAC;AAwExvJ;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,CAAN,IAAY,kBAcX;AAdD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,uDAAM,CAAA;AACR,CAAC,EAdW,kBAAkB,KAAlB,kBAAkB,QAc7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,YA0BX;AA1BD,WAAY,YAAY;IACtB;;OAEG;IACH,yFAA6B,CAAA;IAE7B;;;;OAIG;IACH,6DAAe,CAAA;IAEf;;;;OAIG;IACH,2DAAc,CAAA;IAEd;;;;OAIG;IACH,2DAAc,CAAA;AAChB,CAAC,EA1BW,YAAY,KAAZ,YAAY,QA0BvB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,aAAa,CACpE,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eAaX;AAbD,WAAY,eAAe;IACzB;;OAEG;IACH,uGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,2DAAW,CAAA;AACb,CAAC,EAbW,eAAe,KAAf,eAAe,QAa1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,CAAN,IAAY,eAyPX;AAzPD,WAAY,eAAe;IACzB;;;;OAIG;IACH,+FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qFAAwB,CAAA;IAExB;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,8EAAqB,CAAA;IAErB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,gEAAc,CAAA;IAEd;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;;;;;;;;OAWG;IACH,sEAAiB,CAAA;IAEjB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,0EAAmB,CAAA;IAEnB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,wEAAkB,CAAA;IAElB;;;;;OAKG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,kFAAuB,CAAA;IAEvB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,0DAAW,CAAA;IAEX;;;;;;;OAOG;IACH,0DAAW,CAAA;IAEX;;;;;;;;OAQG;IACH,sDAAS,CAAA;IAET;;;;;;;;OAQG;IACH,sEAAiB,CAAA;IAEjB;;;;;;;;;;OAUG;IACH,4DAAY,CAAA;AACd,CAAC,EAzPW,eAAe,KAAf,eAAe,QAyP1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAwD,aAAa,CACzF,OAAO,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api_resource_kind_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sKAAsK;AACtK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAExF,OAAO,EAAE,sEAAsE,EAAE,MAAM,4BAA4B,CAAC;AAEpH,OAAO,EAAE,wEAAwE,EAAE,MAAM,8BAA8B,CAAC;AAExH,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,qEAAqE,GAAY,aAAa,CACzG,QAAQ,CAAC,oiJAAoiJ,EAAE,CAAC,sEAAsE,EAAE,wEAAwE,EAAE,+BAA+B,CAAC,CAAC,CAAC;AAwEtuJ;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,CAAN,IAAY,kBAcX;AAdD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,uDAAM,CAAA;AACR,CAAC,EAdW,kBAAkB,KAAlB,kBAAkB,QAc7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,YA0BX;AA1BD,WAAY,YAAY;IACtB;;OAEG;IACH,yFAA6B,CAAA;IAE7B;;;;OAIG;IACH,6DAAe,CAAA;IAEf;;;;OAIG;IACH,2DAAc,CAAA;IAEd;;;;OAIG;IACH,2DAAc,CAAA;AAChB,CAAC,EA1BW,YAAY,KAAZ,YAAY,QA0BvB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,aAAa,CACpE,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eAaX;AAbD,WAAY,eAAe;IACzB;;OAEG;IACH,uGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,2DAAW,CAAA;AACb,CAAC,EAbW,eAAe,KAAf,eAAe,QAa1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,CAAN,IAAY,eAyPX;AAzPD,WAAY,eAAe;IACzB;;;;OAIG;IACH,+FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qFAAwB,CAAA;IAExB;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,8EAAqB,CAAA;IAErB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,gEAAc,CAAA;IAEd;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;;;;;;;;OAWG;IACH,sEAAiB,CAAA;IAEjB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,0EAAmB,CAAA;IAEnB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,wEAAkB,CAAA;IAElB;;;;;OAKG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,kFAAuB,CAAA;IAEvB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,0DAAW,CAAA;IAEX;;;;;;;OAOG;IACH,0DAAW,CAAA;IAEX;;;;;;;;OAQG;IACH,sDAAS,CAAA;IAET;;;;;;;;OAQG;IACH,sEAAiB,CAAA;IAEjB;;;;;;;;;;OAUG;IACH,4DAAY,CAAA;AACd,CAAC,EAzPW,eAAe,KAAf,eAAe,QAyP1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAwD,aAAa,CACzF,OAAO,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.d.ts

@@ -13,23 +13,27 @@ export declare const file_ai_stigmer_commons_apiresource_apiresourcekind_authori
  *
  * - visibility_private: no visibility tuple (owner + explicit grants only)
  * - visibility_org:     resource#viewer@organization:<org>#member
- * - visibility_public:  resource#viewer@identity_account:* (conditional
- *                       wildcard gated by allow_public)
  * - visibility_platform: resource#platform_viewer@identity_provider:<idp>#platform_user
  *                       (the "private catalog" primitive: grants access to
  *                       all members of all platform_managed orgs linked to
  *                       the owning org's IdentityProvider)
  *
+ * Every level but private is bounded by an organization or by the identity
+ * provider that links a set of organizations. There is no level a resource
+ * can hold that makes it readable to every account on the server; sharing
+ * across organizations that share no identity provider is done by
+ * packaging the resource as a plugin and installing a copy.
+ *
  * Kinds WITHOUT a visibility config accept only visibility_private (or
  * unspecified) — they are personal or org-structural resources whose access
  * is fully defined by their FGA model, never by per-resource visibility
  * tuples (session, environment, executions, etc.).
  *
  * Current classification:
- * - Blueprint kinds (agent, skill, workflow, mcp_server):
- *     private, org, public, platform
+ * - Blueprint kinds (agent, skill, workflow, mcp_server, plugin):
+ *     private, org, platform
  * - Instance kinds (agent_instance, workflow_instance):
- *     private, org, public — platform is deliberately excluded to preserve
+ *     private, org — platform is deliberately excluded to preserve
  *     tenant isolation: each managed org instantiates shared blueprints
  *     inside its own boundary. (System-managed DEFAULT instances opt out of
  *     visibility entirely: their access tracks the parent blueprint
@@ -43,13 +47,6 @@ export declare const file_ai_stigmer_commons_apiresource_apiresourcekind_authori
  * @generated from message ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig
  */
 export type VisibilityConfig = Message<"ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig"> & {
-    /**
-     * Whether resources of this kind can be set to visibility_public.
-     * FGA tuple: resource#viewer@identity_account:* (gated by allow_public)
-     *
-     * @generated from field: bool supports_public = 1;
-     */
-    supportsPublic: boolean;
     /**
      * Whether resources of this kind can be set to visibility_platform.
      * FGA tuple: resource#platform_viewer@identity_provider:<idp>#platform_user
@@ -84,12 +81,12 @@ export type VisibilityConfig = Message<"ai.stigmer.commons.apiresource.apiresour
      * explicit opt-in, never a surprise.
      *
      * The flag carries a second, coupled semantic for the same kinds — the
-     * ORG FLOOR: when visibility is platform or public, the org viewer tuple
-     * is written IN ADDITION to the level's own tuple. Sharing a blueprint
-     * beyond the org must never make it less visible to the owning org's own
-     * members (org-scoped listings resolve through FGA ListObjects with the
-     * public wildcard suppressed, so the explicit org tuple is what keeps
-     * shared blueprints listable at home).
+     * ORG FLOOR: when visibility is platform, the org viewer tuple is written
+     * IN ADDITION to the level's own tuple. Sharing a blueprint beyond the
+     * org must never make it less visible to the owning org's own members
+     * (org-scoped listings resolve through FGA ListObjects on the org tuple,
+     * so the explicit org tuple is what keeps shared blueprints listable at
+     * home).
      *
      * Instance kinds deliberately leave this false: instances are personal
      * resources (configuration, secrets) that must start private, and their

package/ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.js

@@ -6,7 +6,7 @@ import { file_ai_stigmer_iam_v1_enum } from "../../../iam/v1/enum_pb.js";
 /**
  * Describes the file ai/stigmer/commons/apiresource/apiresourcekind/authorization_config.proto.
  */
-export const file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_iam_v1_enum]);
+export const file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_iam_v1_enum]);
 /**
  * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig.
  * Use `create(VisibilityConfigSchema)` to create a new message.

package/ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization_config_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yKAAyK;AACzK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,wEAAwE,GAAY,aAAa,CAC5G,QAAQ,CAAC,s0DAAs0D,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAyGl3D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAsC3F;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAgI3F;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,CAAN,IAAY,sBAiDX;AAjDD,WAAY,sBAAsB;IAChC;;OAEG;IACH,iFAAe,CAAA;IAEf;;;;;;OAMG;IACH,2EAAY,CAAA;IAEZ;;;;;;OAMG;IACH,mFAAgB,CAAA;IAEhB;;;;;;OAMG;IACH,uEAAU,CAAA;IAEV;;;;;;OAMG;IACH,+EAAc,CAAA;IAEd;;;;;OAKG;IACH,mEAAQ,CAAA;AACV,CAAC,EAjDW,sBAAsB,KAAtB,sBAAsB,QAiDjC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAoC,aAAa,CACxF,QAAQ,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAExF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,oBAwCX;AAxCD,WAAY,oBAAoB;IAC9B;;OAEG;IACH,6EAAe,CAAA;IAEf;;;;;;OAMG;IACH,mEAAU,CAAA;IAEV;;;;;;OAMG;IACH,yEAAa,CAAA;IAEb;;;;;;OAMG;IACH,+DAAQ,CAAA;IAER;;;;;OAKG;IACH,+DAAQ,CAAA;AACV,CAAC,EAxCW,oBAAoB,KAApB,oBAAoB,QAwC/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"authorization_config_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yKAAyK;AACzK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,wEAAwE,GAAY,aAAa,CAC5G,QAAQ,CAAC,k0DAAk0D,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAqG92D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAsC3F;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAgI3F;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,CAAN,IAAY,sBAiDX;AAjDD,WAAY,sBAAsB;IAChC;;OAEG;IACH,iFAAe,CAAA;IAEf;;;;;;OAMG;IACH,2EAAY,CAAA;IAEZ;;;;;;OAMG;IACH,mFAAgB,CAAA;IAEhB;;;;;;OAMG;IACH,uEAAU,CAAA;IAEV;;;;;;OAMG;IACH,+EAAc,CAAA;IAEd;;;;;OAKG;IACH,mEAAQ,CAAA;AACV,CAAC,EAjDW,sBAAsB,KAAtB,sBAAsB,QAiDjC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAoC,aAAa,CACxF,QAAQ,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAExF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,oBAwCX;AAxCD,WAAY,oBAAoB;IAC9B;;OAEG;IACH,6EAAe,CAAA;IAEf;;;;;;OAMG;IACH,mEAAU,CAAA;IAEV;;;;;;OAMG;IACH,yEAAa,CAAA;IAEb;;;;;;OAMG;IACH,+DAAQ,CAAA;IAER;;;;;OAKG;IACH,+DAAQ,CAAA;AACV,CAAC,EAxCW,oBAAoB,KAApB,oBAAoB,QAwC/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/enum_pb.d.ts

@@ -106,18 +106,20 @@ export declare const ApiResourceStateOperationTypeSchema: GenEnum<ApiResourceSta
  * - Ownership: Which organization controls/manages the resource
  * - Visibility: Who can access/use the resource
  *
- * All resources belong to an organization. Visibility determines whether
- * users outside that organization can access the resource.
+ * All resources belong to an organization. Visibility determines which
+ * users, inside that organization or in the organizations linked to it by
+ * one identity provider, can read the resource. No level reaches every
+ * account on the server.
  *
  * The visibility levels map to FGA tuples:
  * - PRIVATE: no additional viewer tuples (owner-only access)
  * - ORG: resource#viewer@organization:<org>#viewer tuple (everyone in the
  *   org — the org role hierarchy flows downward, so owners, admins, members
  *   AND read-only viewers all satisfy the organization#viewer userset)
- * - PUBLIC: resource#viewer@identity_account:* with allow_public (all users)
  * - PLATFORM: resource#platform_viewer@identity_provider:<idp>#platform_user
  *   (all members of all organizations managed by the owning org's
  *   IdentityProvider)
+ * - PUBLIC: retired; see the value's own comment.
  *
  * @generated from enum ai.stigmer.commons.apiresource.ApiResourceVisibility
  */
@@ -145,18 +147,12 @@ export declare enum ApiResourceVisibility {
      */
     visibility_private = 1,
     /**
-     * Anyone can access (read) this resource.
-     * Used for marketplace-published resources (e.g., "stigmer/web-search").
-     * Write access still requires org membership.
-     *
-     * In the cloud edition, entering this level is operator-gated
-     * (can_set_public_visibility on platform:stigmer): public listing is a
-     * curation decision, requested by the resource owner and granted by the
-     * platform team — at both doors, updateVisibility escalation and
-     * create-with-public. Leaving this level stays self-service for anyone
-     * with can_edit. The OSS edition is unguarded (the self-hosted operator
-     * owns the store).
-     * Named visibility_public to avoid Java reserved keyword conflict.
+     * Retired. This level made a resource readable to every account on the
+     * server; it is refused at create and at updateVisibility for every kind,
+     * and every stored row that held it has been moved to visibility_org.
+     * Sharing across organizations happens through plugins (a copy is
+     * installed and owned) or, between organizations linked by one identity
+     * provider, through visibility_platform.
      *
      * @generated from enum value: visibility_public = 2;
      */

package/ai/stigmer/commons/apiresource/enum_pb.js

@@ -111,18 +111,20 @@ export const ApiResourceStateOperationTypeSchema = /*@__PURE__*/ enumDesc(file_a
  * - Ownership: Which organization controls/manages the resource
  * - Visibility: Who can access/use the resource
  *
- * All resources belong to an organization. Visibility determines whether
- * users outside that organization can access the resource.
+ * All resources belong to an organization. Visibility determines which
+ * users, inside that organization or in the organizations linked to it by
+ * one identity provider, can read the resource. No level reaches every
+ * account on the server.
  *
  * The visibility levels map to FGA tuples:
  * - PRIVATE: no additional viewer tuples (owner-only access)
  * - ORG: resource#viewer@organization:<org>#viewer tuple (everyone in the
  *   org — the org role hierarchy flows downward, so owners, admins, members
  *   AND read-only viewers all satisfy the organization#viewer userset)
- * - PUBLIC: resource#viewer@identity_account:* with allow_public (all users)
  * - PLATFORM: resource#platform_viewer@identity_provider:<idp>#platform_user
  *   (all members of all organizations managed by the owning org's
  *   IdentityProvider)
+ * - PUBLIC: retired; see the value's own comment.
  *
  * @generated from enum ai.stigmer.commons.apiresource.ApiResourceVisibility
  */
@@ -151,18 +153,12 @@ export var ApiResourceVisibility;
      */
     ApiResourceVisibility[ApiResourceVisibility["visibility_private"] = 1] = "visibility_private";
     /**
-     * Anyone can access (read) this resource.
-     * Used for marketplace-published resources (e.g., "stigmer/web-search").
-     * Write access still requires org membership.
-     *
-     * In the cloud edition, entering this level is operator-gated
-     * (can_set_public_visibility on platform:stigmer): public listing is a
-     * curation decision, requested by the resource owner and granted by the
-     * platform team — at both doors, updateVisibility escalation and
-     * create-with-public. Leaving this level stays self-service for anyone
-     * with can_edit. The OSS edition is unguarded (the self-hosted operator
-     * owns the store).
-     * Named visibility_public to avoid Java reserved keyword conflict.
+     * Retired. This level made a resource readable to every account on the
+     * server; it is refused at create and at updateVisibility for every kind,
+     * and every stored row that held it has been moved to visibility_org.
+     * Sharing across organizations happens through plugins (a copy is
+     * installed and owned) or, between organizations linked by one identity
+     * provider, through visibility_platform.
      *
      * @generated from enum value: visibility_public = 2;
      */

package/ai/stigmer/commons/apiresource/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,oqBAAoqB,CAAC,CAAC;AAEjrB;;;;GAIG;AACH,MAAM,CAAN,IAAY,oBA0CX;AA1CD,WAAY,oBAAoB;IAC9B;;;;OAIG;IACH,6EAAe,CAAA;IAEf;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,iGAAyB,CAAA;AAC3B,CAAC,EA1CW,oBAAoB,KAApB,oBAAoB,QA0C/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAN,IAAY,6BA0CX;AA1CD,WAAY,6BAA6B;IACvC;;;;OAIG;IACH,mKAAiD,CAAA;IAEjD;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,iFAAQ,CAAA;IAER;;;;OAIG;IACH,qFAAU,CAAA;AACZ,CAAC,EA1CW,6BAA6B,KAA7B,6BAA6B,QA0CxC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA2C,aAAa,CACtG,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAN,IAAY,qBA2FX;AA3FD,WAAY,qBAAqB;IAC/B;;;;;;;OAOG;IACH,+HAAuC,CAAA;IAEvC;;;;;;;;;;;OAWG;IACH,6FAAsB,CAAA;IAEtB;;;;;;;;;;;;;;;OAeG;IACH,2FAAqB,CAAA;IAErB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,qFAAkB,CAAA;IAElB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,+FAAuB,CAAA;AACzB,CAAC,EA3FW,qBAAqB,KAArB,qBAAqB,QA2FhC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,oqBAAoqB,CAAC,CAAC;AAEjrB;;;;GAIG;AACH,MAAM,CAAN,IAAY,oBA0CX;AA1CD,WAAY,oBAAoB;IAC9B;;;;OAIG;IACH,6EAAe,CAAA;IAEf;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,iGAAyB,CAAA;AAC3B,CAAC,EA1CW,oBAAoB,KAApB,oBAAoB,QA0C/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAN,IAAY,6BA0CX;AA1CD,WAAY,6BAA6B;IACvC;;;;OAIG;IACH,mKAAiD,CAAA;IAEjD;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,iFAAQ,CAAA;IAER;;;;OAIG;IACH,qFAAU,CAAA;AACZ,CAAC,EA1CW,6BAA6B,KAA7B,6BAA6B,QA0CxC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA2C,aAAa,CACtG,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAN,IAAY,qBAqFX;AArFD,WAAY,qBAAqB;IAC/B;;;;;;;OAOG;IACH,+HAAuC,CAAA;IAEvC;;;;;;;;;;;OAWG;IACH,6FAAsB,CAAA;IAEtB;;;;;;;;;OASG;IACH,2FAAqB,CAAA;IAErB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,qFAAkB,CAAA;IAElB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,+FAAuB,CAAA;AACzB,CAAC,EArFW,qBAAqB,KAArB,qBAAqB,QAqFhC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/io_pb.d.ts

@@ -132,15 +132,17 @@ export declare const FindApiResourcesRequestSchema: GenMessage<FindApiResourcesR
  * old level is removed and the tuple for the new level is created:
  * - PRIVATE:  no visibility tuple (owner + explicit grants only)
  * - ORG:      resource#viewer@organization:<org>#member
- * - PUBLIC:   resource#viewer@identity_account:* (gated by allow_public)
  * - PLATFORM: resource#platform_viewer@identity_provider:<idp>#platform_user
  *
  * Not all resources support all visibility levels — the supported set is
  * declared per kind via VisibilityConfig in kind_meta:
- * - Blueprints (agent, workflow, skill, mcp_server):
- *     PRIVATE, ORG, PUBLIC, or PLATFORM
+ * - Blueprints (agent, workflow, skill, mcp_server, plugin):
+ *     PRIVATE, ORG, or PLATFORM
  * - Instances (agent_instance, workflow_instance):
- *     PRIVATE, ORG, or PUBLIC (never PLATFORM — tenant isolation)
+ *     PRIVATE or ORG (never PLATFORM — tenant isolation)
+ *
+ * visibility_public is refused for every kind (INVALID_ARGUMENT naming the
+ * supported levels); the level is retired.
  *
  * System-managed DEFAULT instances reject visibility updates entirely:
  * their access structurally tracks the parent blueprint via the
@@ -172,7 +174,14 @@ export declare const UpdateVisibilityInputSchema: GenMessage<UpdateVisibilityInp
 /**
  * Generic reference to any API resource by org and slug.
  * Used across resources to reference other resources (e.g., Environment, Agent, Skill).
- * Canonical format: "org/slug" (e.g., "stigmer/web-search", "acme/my-agent").
+ * Canonical format: "org/slug" (e.g., "acme/web-search", "acme/my-agent").
+ *
+ * Every reference in a resource's spec is checked when the resource is
+ * written: the target must exist, and a target in another organization
+ * must be platform-visible to be referenced at all. A blueprint may not be
+ * more visible than the skills, MCP servers and agents it references, so
+ * what a person can run they can also read. A reference that fails the
+ * check is refused at write, never at run.
  *
  * @generated from message ai.stigmer.commons.apiresource.ApiResourceReference
  */
@@ -188,7 +197,8 @@ export type ApiResourceReference = Message<"ai.stigmer.commons.apiresource.ApiRe
      * always have org populated (absolute form).
      *
      * Use empty org for same-org references (the common case).
-     * Use explicit org for cross-org references (e.g., marketplace resources).
+     * An explicit other org is accepted only when that organization is a
+     * platform that shares the resource with yours (visibility_platform).
      *
      * @generated from field: string org = 1;
      */

package/ai/stigmer/commons/apiresource/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uHAAuH;AACvH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,2CAA2C,CAAC;AAElI,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,qoCAAqoC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAcz0C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA+BzD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AAuBzD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA4CzD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AAgDzD;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AAkEzD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uHAAuH;AACvH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,2CAA2C,CAAC;AAElI,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,qoCAAqoC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAcz0C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA+BzD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AAuBzD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA4CzD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AAkDzD;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA0EzD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/metadata_pb.d.ts

@@ -59,9 +59,12 @@ export type ApiResourceMetadata = Message<"ai.stigmer.commons.apiresource.ApiRes
      */
     org: string;
     /**
-     * Visibility controls who can access this resource.
-     * - PRIVATE: Only members of the owning organization can access.
-     * - PUBLIC: Anyone can access (read). Write access still requires org membership.
+     * Visibility controls who can read this resource.
+     * - PRIVATE: the owner and explicit grants.
+     * - ORG: every member of the owning organization.
+     * - PLATFORM: members of the organizations linked by the owning
+     *   organization's identity provider (blueprint kinds only).
+     * Write access always requires membership of the owning organization.
      * Default: config-driven per kind — blueprint kinds (marked
      * defaults_to_org_visibility) default to ORG; all other kinds default to PRIVATE.
      *

package/ai/stigmer/commons/apiresource/metadata_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"metadata_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/metadata_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,s/BAAs/B,EAAE,CAAC,wCAAwC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA2G3kC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAkD/D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"metadata_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/metadata_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,s/BAAs/B,EAAE,CAAC,wCAAwC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA8G3kC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAkD/D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/v1/enum_pb.d.ts

@@ -165,12 +165,6 @@ export declare enum IamPermission {
      * Organization-level permission to create agent shares billed to the
      * organization.
      *
-     * Checked only for CROSS-ORG shares (a share of another org's
-     * marketplace-public agent — decision 013): a public share spends the
-     * sharing org's credits on the open internet, an admin-level act.
-     * Same-org shares keep their Phase A bar (can_edit on the agent), which
-     * already implies membership in the agent's org.
-     *
      * @generated from enum value: can_create_agent_share = 30;
      */
     can_create_agent_share = 30,
@@ -232,21 +226,6 @@ export declare enum IamPermission {
      * @generated from enum value: can_view_provider_standing = 38;
      */
     can_view_provider_standing = 38,
-    /**
-     * Platform-level permission to set a resource's visibility to PUBLIC —
-     * the only level that crosses every org boundary (the cross-org
-     * "explore" catalog). Gated to platform operators in the cloud
-     * edition: public listing is a curation decision, requested by the
-     * owner and granted by the platform team. Enforced at BOTH doors a
-     * resource can become public through — updateVisibility escalation and
-     * create-with-public — while org/platform levels and un-publishing
-     * stay self-service (resource can_edit). The OSS edition is
-     * deliberately unguarded: the self-hosted operator owns the store,
-     * the same scoping cloud#320 applied to reserved labels.
-     *
-     * @generated from enum value: can_set_public_visibility = 39;
-     */
-    can_set_public_visibility = 39,
     /**
      * Organization-level permission to install a plugin: push an Agent
      * Plugins archive that the server materialises into skills, MCP servers,

package/ai/stigmer/iam/v1/enum_pb.js

@@ -5,7 +5,7 @@ import { enumDesc, fileDesc } from "@bufbuild/protobuf/codegenv1";
 /**
  * Describes the file ai/stigmer/iam/v1/enum.proto.
  */
-export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("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");
+export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("ChxhaS9zdGlnbWVyL2lhbS92MS9lbnVtLnByb3RvEhFhaS5zdGlnbWVyLmlhbS52MSrUCAoNSWFtUGVybWlzc2lvbhIPCgt1bnNwZWNpZmllZBAAEgwKCGNhbl92aWV3EAESDAoIY2FuX2VkaXQQAhIOCgpjYW5fZGVsZXRlEAMSFAoQY2FuX2dyYW50X2FjY2VzcxAEEhMKD2Nhbl92aWV3X2FjY2VzcxAFEhQKEGNhbl9jcmVhdGVfYWdlbnQQBhIXChNjYW5fY3JlYXRlX3dvcmtmbG93EAcSFgoSY2FuX2NyZWF0ZV9zZXNzaW9uEAgSFAoQY2FuX2NyZWF0ZV9za2lsbBAJEhIKDmNhbl9jcmVhdGVfaWRwEAsSGgoWY2FuX2NyZWF0ZV9lbnZpcm9ubWVudBAMEh8KG2Nhbl9jcmVhdGVfaWRlbnRpdHlfYWNjb3VudBAVEhgKFGNhbl9jcmVhdGVfb2F1dGhfYXBwEBcSHgoaY2FuX2NyZWF0ZV9wbGF0Zm9ybV9jbGllbnQQGBIbChdjYW5fY3JlYXRlX2V4ZWN1dGlvbl9pbhANEhcKE2Nhbl9jcmVhdGVfaW5zdGFuY2UQDhIPCgtjYW5fZXhlY3V0ZRAPEhQKEGNhbl9yZWFkX3NlY3JldHMQEBIVChFjYW5fYm9vdHN0cmFwX2lhbRAREiAKHGNhbl9tYW5hZ2VfaWRlbnRpdHlfYWNjb3VudHMQEhIYChRsb2dpbl90b19iYWNrX29mZmljZRAUEg8KC2Nhbl9jb25uZWN0EBYSFQoRY2FuX2NyZWF0ZV9ydW5uZXIQGRIaChJjYW5fZGVsZXRlX3Nlc3Npb24QGhoCCAESFAoQY2FuX3ZpZXdfYmlsbGluZxAbEhYKEmNhbl9tYW5hZ2VfYmlsbGluZxAcEhsKF2Nhbl9leGVjdXRlX2JpbGxpbmdfb3BzEB0SGgoWY2FuX2NyZWF0ZV9hZ2VudF9zaGFyZRAeEhoKFmNhbl9jcmVhdGVfY2hhbm5lbF9hcHAQHxIcChhjYW5fbWFuYWdlX21vZGVsX3ByaWNpbmcQIBIeChpjYW5fbWFuYWdlX2N1cnNvcl9hY2NvdW50cxAjEhMKD2Nhbl9wYXJ0aWNpcGF0ZRAkEh0KGWNhbl93cml0ZV9yZXNlcnZlZF9sYWJlbHMQJRIeChpjYW5fdmlld19wcm92aWRlcl9zdGFuZGluZxAmEhUKEWNhbl9jcmVhdGVfcGx1Z2luECgSFAoQY2FuX21hbmFnZV9wbGFucxApEhUKEWNhbl9pc3N1ZV9saWNlbnNlECoSGQoVY2FuX2NyZWF0ZV9tY3Bfc2VydmVyECsSHQoZY2FuX2NyZWF0ZV9hZ2VudF9pbnN0YW5jZRAsIgQIIRAhIgQIIhAiIgQIChAKIgQIJxAnKg9jYW5fdXNlX3JlY29yZHMqFGNhbl9jcmVhdGVfZGF0YXN0b3JlKhJjYW5fY3JlYXRlX3Byb2plY3QqGWNhbl9zZXRfcHVibGljX3Zpc2liaWxpdHkqYgoHSWFtUm9sZRIYChRpYW1fcm9sZV91bnNwZWNpZmllZBAAEgkKBW93bmVyEAESCQoFYWRtaW4QAhIKCgZtZW1iZXIQAxIKCgZ2aWV3ZXIQBBIPCgtwYXJ0aWNpcGFudBAFYgZwcm90bzM");
 /**
  * IamPermission defines the permissions checked by the authorization
  * interceptor before an RPC handler executes.
@@ -169,12 +169,6 @@ export var IamPermission;
      * Organization-level permission to create agent shares billed to the
      * organization.
      *
-     * Checked only for CROSS-ORG shares (a share of another org's
-     * marketplace-public agent — decision 013): a public share spends the
-     * sharing org's credits on the open internet, an admin-level act.
-     * Same-org shares keep their Phase A bar (can_edit on the agent), which
-     * already implies membership in the agent's org.
-     *
      * @generated from enum value: can_create_agent_share = 30;
      */
     IamPermission[IamPermission["can_create_agent_share"] = 30] = "can_create_agent_share";
@@ -236,21 +230,6 @@ export var IamPermission;
      * @generated from enum value: can_view_provider_standing = 38;
      */
     IamPermission[IamPermission["can_view_provider_standing"] = 38] = "can_view_provider_standing";
-    /**
-     * Platform-level permission to set a resource's visibility to PUBLIC —
-     * the only level that crosses every org boundary (the cross-org
-     * "explore" catalog). Gated to platform operators in the cloud
-     * edition: public listing is a curation decision, requested by the
-     * owner and granted by the platform team. Enforced at BOTH doors a
-     * resource can become public through — updateVisibility escalation and
-     * create-with-public — while org/platform levels and un-publishing
-     * stay self-service (resource can_edit). The OSS edition is
-     * deliberately unguarded: the self-hosted operator owns the store,
-     * the same scoping cloud#320 applied to reserved labels.
-     *
-     * @generated from enum value: can_set_public_visibility = 39;
-     */
-    IamPermission[IamPermission["can_set_public_visibility"] = 39] = "can_set_public_visibility";
     /**
      * Organization-level permission to install a plugin: push an Agent
      * Plugins archive that the server materialises into skills, MCP servers,

package/ai/stigmer/iam/v1/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/iam/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+FAA+F;AAC/F,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAY,aAAa,CAC/D,QAAQ,CAAC,0pDAA0pD,CAAC,CAAC;AAEvqD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,aA2TX;AA3TD,WAAY,aAAa;IACvB;;OAEG;IACH,+DAAe,CAAA;IAEf;;;;OAIG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,6DAAc,CAAA;IAEd;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,uEAAmB,CAAA;IAEnB;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,+EAAuB,CAAA;IAEvB;;OAEG;IACH,6EAAsB,CAAA;IAEtB;;OAEG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,sEAAmB,CAAA;IAEnB;;OAEG;IACH,sFAA2B,CAAA;IAE3B;;OAEG;IACH,gGAAgC,CAAA;IAEhC;;OAEG;IACH,kFAAyB,CAAA;IAEzB;;OAEG;IACH,8FAA+B,CAAA;IAE/B;;;;OAIG;IACH,wFAA4B,CAAA;IAE5B;;OAEG;IACH,gFAAwB,CAAA;IAExB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;OAEG;IACH,kGAAiC,CAAA;IAEjC;;;;OAIG;IACH,kFAAyB,CAAA;IAEzB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,8EAAuB,CAAA;IAEvB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;;;;OAKG;IACH,wFAA4B,CAAA;IAE5B;;;;;;;;;;;OAWG;IACH,sFAA2B,CAAA;IAE3B;;;;;;OAMG;IACH,sFAA2B,CAAA;IAE3B;;;;;;;OAOG;IACH,0FAA6B,CAAA;IAE7B;;;;;;;;OAQG;IACH,8FAA+B,CAAA;IAE/B;;;;;;OAMG;IACH,wEAAoB,CAAA;IAEpB;;;;;;;;;;OAUG;IACH,4FAA8B,CAAA;IAE9B;;;;;;;;;OASG;IACH,8FAA+B,CAAA;IAE/B;;;;;;;;;;;;;OAaG;IACH,4FAA8B,CAAA;IAE9B;;;;;;;;;OASG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,0EAAqB,CAAA;IAErB;;;;;;;;OAQG;IACH,4EAAsB,CAAA;IAEtB;;;;;OAKG;IACH,oFAA0B,CAAA;IAE1B;;;;;OAKG;IACH,4FAA8B,CAAA;AAChC,CAAC,EA3TW,aAAa,KAAb,aAAa,QA2TxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,OA0CX;AA1CD,WAAY,OAAO;IACjB;;OAEG;IACH,qEAAwB,CAAA;IAExB;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;;;OAMG;IACH,mDAAe,CAAA;AACjB,CAAC,EA1CW,OAAO,KAAP,OAAO,QA0ClB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB,aAAa,CAC1D,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/iam/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+FAA+F;AAC/F,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAY,aAAa,CAC/D,QAAQ,CAAC,6pDAA6pD,CAAC,CAAC;AAE1qD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,aAqSX;AArSD,WAAY,aAAa;IACvB;;OAEG;IACH,+DAAe,CAAA;IAEf;;;;OAIG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,6DAAc,CAAA;IAEd;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,uEAAmB,CAAA;IAEnB;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,+EAAuB,CAAA;IAEvB;;OAEG;IACH,6EAAsB,CAAA;IAEtB;;OAEG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,sEAAmB,CAAA;IAEnB;;OAEG;IACH,sFAA2B,CAAA;IAE3B;;OAEG;IACH,gGAAgC,CAAA;IAEhC;;OAEG;IACH,kFAAyB,CAAA;IAEzB;;OAEG;IACH,8FAA+B,CAAA;IAE/B;;;;OAIG;IACH,wFAA4B,CAAA;IAE5B;;OAEG;IACH,gFAAwB,CAAA;IAExB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;OAEG;IACH,kGAAiC,CAAA;IAEjC;;;;OAIG;IACH,kFAAyB,CAAA;IAEzB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,8EAAuB,CAAA;IAEvB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;;;;OAKG;IACH,wFAA4B,CAAA;IAE5B;;;;;OAKG;IACH,sFAA2B,CAAA;IAE3B;;;;;;OAMG;IACH,sFAA2B,CAAA;IAE3B;;;;;;;OAOG;IACH,0FAA6B,CAAA;IAE7B;;;;;;;;OAQG;IACH,8FAA+B,CAAA;IAE/B;;;;;;OAMG;IACH,wEAAoB,CAAA;IAEpB;;;;;;;;;;OAUG;IACH,4FAA8B,CAAA;IAE9B;;;;;;;;;OASG;IACH,8FAA+B,CAAA;IAE/B;;;;;;;;;OASG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,0EAAqB,CAAA;IAErB;;;;;;;;OAQG;IACH,4EAAsB,CAAA;IAEtB;;;;;OAKG;IACH,oFAA0B,CAAA;IAE1B;;;;;OAKG;IACH,4FAA8B,CAAA;AAChC,CAAC,EArSW,aAAa,KAAb,aAAa,QAqSxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,OA0CX;AA1CD,WAAY,OAAO;IACjB;;OAEG;IACH,qEAAwB,CAAA;IAExB;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;;;OAMG;IACH,mDAAe,CAAA;AACjB,CAAC,EA1CW,OAAO,KAAP,OAAO,QA0ClB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB,aAAa,CAC1D,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/search/v1/io_pb.d.ts

@@ -65,20 +65,6 @@ export type SearchRequest = Message<"ai.stigmer.search.v1.SearchRequest"> & {
      * @generated from field: string org = 3;
      */
     org: string;
-    /**
-     * Exclude public/platform resources from results.
-     *
-     * Default: false (include public resources).
-     *
-     * When true: Only return resources from organizations the caller
-     * is a member of. Excludes platform-provided public resources
-     * like "stigmer/web-search".
-     *
-     * Useful when users want to see only their own resources.
-     *
-     * @generated from field: bool exclude_public = 4;
-     */
-    excludePublic: boolean;
     /**
      * Pagination parameters.
      *
@@ -90,21 +76,6 @@ export type SearchRequest = Message<"ai.stigmer.search.v1.SearchRequest"> & {
      * @generated from field: ai.stigmer.commons.rpc.PageInfo page = 5;
      */
     page?: PageInfo;
-    /**
-     * Include public resources from organizations other than the org filter.
-     *
-     * Only meaningful when org is non-empty. When true, the result set includes:
-     * 1. All authorized resources from the specified org (any visibility)
-     * 2. All authorized public resources from other orgs
-     *
-     * Use case: "All" scope in library views — shows the user's org resources
-     * plus marketplace/public resources from other organizations.
-     *
-     * Default: false (only resources matching the org filter are returned).
-     *
-     * @generated from field: bool cross_org_public = 6;
-     */
-    crossOrgPublic: boolean;
 };
 /**
  * Describes the message ai.stigmer.search.v1.SearchRequest.
@@ -243,10 +214,12 @@ export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
      */
     description: string;
     /**
-     * Resource visibility: public or private.
+     * Resource visibility, as stored on the resource's metadata.
      *
-     * - visibility_private: Only org members can access
-     * - visibility_public: Anyone can read (e.g., marketplace resources)
+     * - visibility_private: the owner and explicit grants
+     * - visibility_org: every member of the owning organization
+     * - visibility_platform: members of the organizations linked by the
+     *   owning organization's identity provider
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceVisibility visibility = 8;
      */

package/ai/stigmer/search/v1/io_pb.js

@@ -10,7 +10,7 @@ import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/search/v1/io.proto.
  */
-export const file_ai_stigmer_search_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind, file_ai_stigmer_commons_apiresource_enum, file_ai_stigmer_commons_rpc_pagination, file_buf_validate_validate, file_google_protobuf_timestamp]);
+export const file_ai_stigmer_search_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind, file_ai_stigmer_commons_apiresource_enum, file_ai_stigmer_commons_rpc_pagination, file_buf_validate_validate, file_google_protobuf_timestamp]);
 /**
  * Describes the message ai.stigmer.search.v1.SearchRequest.
  * Use `create(SearchRequestSchema)` to create a new message.

package/ai/stigmer/search/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mGAAmG;AACnG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,mEAAmE,CAAC;AAE1J,OAAO,EAAE,wCAAwC,EAAE,MAAM,sCAAsC,CAAC;AAEhG,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAY,aAAa,CAChE,QAAQ,CAAC,wzCAAwzC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA0G5hD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA8D/C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA0I/C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mGAAmG;AACnG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,mEAAmE,CAAC;AAE1J,OAAO,EAAE,wCAAwC,EAAE,MAAM,sCAAsC,CAAC;AAEhG,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAY,aAAa,CAChE,QAAQ,CAAC,kzCAAkzC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA2EthD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA8D/C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA4I/C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/protos",
-  "version": "3.22.0",
+  "version": "3.22.1-dev.20260922095755",
   "description": "Generated TypeScript protobuf stubs for Stigmer APIs",
   "license": "Apache-2.0",
   "type": "module",