@stigmer/protos 3.22.1 → 3.23.1-dev.20260923075205
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/ai/stigmer/agentic/agent/v1/command_connect.d.ts +8 -7
- package/ai/stigmer/agentic/agent/v1/command_connect.js +8 -7
- package/ai/stigmer/agentic/agent/v1/command_connect.js.map +1 -1
- package/ai/stigmer/agentic/agent/v1/command_pb.d.ts +8 -7
- package/ai/stigmer/agentic/agent/v1/command_pb.js.map +1 -1
- package/ai/stigmer/agentic/agentinstance/v1/command_connect.d.ts +7 -9
- package/ai/stigmer/agentic/agentinstance/v1/command_connect.js +7 -9
- package/ai/stigmer/agentic/agentinstance/v1/command_connect.js.map +1 -1
- package/ai/stigmer/agentic/agentinstance/v1/command_pb.d.ts +7 -9
- package/ai/stigmer/agentic/agentinstance/v1/command_pb.js.map +1 -1
- package/ai/stigmer/agentic/agentshare/v1/spec_pb.d.ts +4 -4
- package/ai/stigmer/agentic/mcpserver/v1/command_connect.d.ts +0 -4
- package/ai/stigmer/agentic/mcpserver/v1/command_connect.js +0 -4
- package/ai/stigmer/agentic/mcpserver/v1/command_connect.js.map +1 -1
- package/ai/stigmer/agentic/mcpserver/v1/command_pb.d.ts +0 -4
- package/ai/stigmer/agentic/mcpserver/v1/command_pb.js.map +1 -1
- package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts +3 -1
- package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map +1 -1
- package/ai/stigmer/agentic/plugin/v1/command_connect.d.ts +0 -3
- package/ai/stigmer/agentic/plugin/v1/command_connect.js +0 -3
- package/ai/stigmer/agentic/plugin/v1/command_connect.js.map +1 -1
- package/ai/stigmer/agentic/plugin/v1/command_pb.d.ts +0 -3
- package/ai/stigmer/agentic/plugin/v1/command_pb.js.map +1 -1
- package/ai/stigmer/agentic/skill/v1/command_connect.d.ts +2 -6
- package/ai/stigmer/agentic/skill/v1/command_connect.js +2 -6
- package/ai/stigmer/agentic/skill/v1/command_connect.js.map +1 -1
- package/ai/stigmer/agentic/skill/v1/command_pb.d.ts +2 -6
- package/ai/stigmer/agentic/skill/v1/command_pb.js.map +1 -1
- package/ai/stigmer/agentic/workflow/v1/command_connect.d.ts +5 -5
- package/ai/stigmer/agentic/workflow/v1/command_connect.js +5 -5
- package/ai/stigmer/agentic/workflow/v1/command_pb.d.ts +5 -5
- package/ai/stigmer/agentic/workflowinstance/v1/command_connect.d.ts +4 -8
- package/ai/stigmer/agentic/workflowinstance/v1/command_connect.js +4 -8
- package/ai/stigmer/agentic/workflowinstance/v1/command_connect.js.map +1 -1
- package/ai/stigmer/agentic/workflowinstance/v1/command_pb.d.ts +4 -8
- package/ai/stigmer/agentic/workflowinstance/v1/command_pb.js.map +1 -1
- package/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.js +1 -1
- package/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.js.map +1 -1
- package/ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.d.ts +15 -18
- package/ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.js +1 -1
- package/ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.js.map +1 -1
- package/ai/stigmer/commons/apiresource/enum_pb.d.ts +11 -15
- package/ai/stigmer/commons/apiresource/enum_pb.js +11 -15
- package/ai/stigmer/commons/apiresource/enum_pb.js.map +1 -1
- package/ai/stigmer/commons/apiresource/io_pb.d.ts +16 -6
- package/ai/stigmer/commons/apiresource/io_pb.js.map +1 -1
- package/ai/stigmer/commons/apiresource/metadata_pb.d.ts +6 -3
- package/ai/stigmer/commons/apiresource/metadata_pb.js.map +1 -1
- package/ai/stigmer/iam/v1/enum_pb.d.ts +0 -21
- package/ai/stigmer/iam/v1/enum_pb.js +1 -22
- package/ai/stigmer/iam/v1/enum_pb.js.map +1 -1
- package/ai/stigmer/search/v1/io_pb.d.ts +5 -32
- package/ai/stigmer/search/v1/io_pb.js +1 -1
- package/ai/stigmer/search/v1/io_pb.js.map +1 -1
- package/package.json +1 -1
|
@@ -45,19 +45,15 @@ export declare const WorkflowInstanceCommandController: GenService<{
|
|
|
45
45
|
/**
|
|
46
46
|
* Update the visibility of an existing workflow instance.
|
|
47
47
|
*
|
|
48
|
-
* Changes who can view this instance and its executions. Supports
|
|
49
|
-
*
|
|
50
|
-
*
|
|
48
|
+
* Changes who can view this instance and its executions. Supports PRIVATE
|
|
49
|
+
* (owner only) and ORG (all org members); instances never take the
|
|
50
|
+
* platform level (tenant isolation).
|
|
51
51
|
*
|
|
52
52
|
* For workflow instances, visibility has cascading effects on execution
|
|
53
53
|
* observability: workflow executions inherit visibility from their parent
|
|
54
54
|
* instance via FGA. An ORG-visible instance means all org members can see
|
|
55
55
|
* all executions — zero per-execution tuples needed.
|
|
56
56
|
*
|
|
57
|
-
* In the cloud edition, PUBLIC is operator-gated: public listing crosses
|
|
58
|
-
* every org boundary, so it is granted by the platform team on request.
|
|
59
|
-
* Un-publishing and all other levels stay self-service.
|
|
60
|
-
*
|
|
61
57
|
* @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateVisibility
|
|
62
58
|
*/
|
|
63
59
|
updateVisibility: {
|
|
@@ -74,7 +70,7 @@ export declare const WorkflowInstanceCommandController: GenService<{
|
|
|
74
70
|
* other users' run history — that requires this opt-in.
|
|
75
71
|
*
|
|
76
72
|
* Supported levels: PRIVATE (only the user who ran each execution) and
|
|
77
|
-
* ORGANIZATION (all org members).
|
|
73
|
+
* ORGANIZATION (all org members). Platform is unsupported.
|
|
78
74
|
*
|
|
79
75
|
* @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateExecutionVisibility
|
|
80
76
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAKpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,wnDAAwnD,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,
|
|
1
|
+
{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAKpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,wnDAAwnD,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GA8EzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}
|
|
@@ -8,7 +8,7 @@ import { file_google_protobuf_descriptor } from "@bufbuild/protobuf/wkt";
|
|
|
8
8
|
/**
|
|
9
9
|
* Describes the file ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind.proto.
|
|
10
10
|
*/
|
|
11
|
-
export const file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind = /*@__PURE__*/ fileDesc("
|
|
11
|
+
export const file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_group, file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, file_google_protobuf_descriptor]);
|
|
12
12
|
/**
|
|
13
13
|
* Describes the message ai.stigmer.commons.apiresource.apiresourcekind.ApiResourceKindMeta.
|
|
14
14
|
* Use `create(ApiResourceKindMetaSchema)` to create a new message.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"api_resource_kind_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sKAAsK;AACtK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAExF,OAAO,EAAE,sEAAsE,EAAE,MAAM,4BAA4B,CAAC;AAEpH,OAAO,EAAE,wEAAwE,EAAE,MAAM,8BAA8B,CAAC;AAExH,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,qEAAqE,GAAY,aAAa,CACzG,QAAQ,CAAC,
|
|
1
|
+
{"version":3,"file":"api_resource_kind_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sKAAsK;AACtK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAExF,OAAO,EAAE,sEAAsE,EAAE,MAAM,4BAA4B,CAAC;AAEpH,OAAO,EAAE,wEAAwE,EAAE,MAAM,8BAA8B,CAAC;AAExH,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,qEAAqE,GAAY,aAAa,CACzG,QAAQ,CAAC,oiJAAoiJ,EAAE,CAAC,sEAAsE,EAAE,wEAAwE,EAAE,+BAA+B,CAAC,CAAC,CAAC;AAwEtuJ;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,CAAN,IAAY,kBAcX;AAdD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,uDAAM,CAAA;AACR,CAAC,EAdW,kBAAkB,KAAlB,kBAAkB,QAc7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,YA0BX;AA1BD,WAAY,YAAY;IACtB;;OAEG;IACH,yFAA6B,CAAA;IAE7B;;;;OAIG;IACH,6DAAe,CAAA;IAEf;;;;OAIG;IACH,2DAAc,CAAA;IAEd;;;;OAIG;IACH,2DAAc,CAAA;AAChB,CAAC,EA1BW,YAAY,KAAZ,YAAY,QA0BvB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,aAAa,CACpE,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eAaX;AAbD,WAAY,eAAe;IACzB;;OAEG;IACH,uGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,2DAAW,CAAA;AACb,CAAC,EAbW,eAAe,KAAf,eAAe,QAa1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,CAAN,IAAY,eAyPX;AAzPD,WAAY,eAAe;IACzB;;;;OAIG;IACH,+FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qFAAwB,CAAA;IAExB;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,8EAAqB,CAAA;IAErB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,gEAAc,CAAA;IAEd;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;;;;;;;;OAWG;IACH,sEAAiB,CAAA;IAEjB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,4EAAoB,CAAA;IAEpB;;;;OAIG;IACH,4DAAY,CAAA;IAEZ;;;;OAIG;IACH,wDAAU,CAAA;IAEV;;;;OAIG;IACH,kEAAe,CAAA;IAEf;;;;OAIG;IACH,0EAAmB,CAAA;IAEnB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,wEAAkB,CAAA;IAElB;;;;;OAKG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,kFAAuB,CAAA;IAEvB;;;;OAIG;IACH,oEAAgB,CAAA;IAEhB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,gFAAsB,CAAA;IAEtB;;;;OAIG;IACH,8DAAa,CAAA;IAEb;;;;OAIG;IACH,0DAAW,CAAA;IAEX;;;;;;;OAOG;IACH,0DAAW,CAAA;IAEX;;;;;;;;OAQG;IACH,sDAAS,CAAA;IAET;;;;;;;;OAQG;IACH,sEAAiB,CAAA;IAEjB;;;;;;;;;;OAUG;IACH,4DAAY,CAAA;AACd,CAAC,EAzPW,eAAe,KAAf,eAAe,QAyP1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC;AAErF;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAwD,aAAa,CACzF,OAAO,CAAC,qEAAqE,EAAE,CAAC,CAAC,CAAC"}
|
|
@@ -13,23 +13,27 @@ export declare const file_ai_stigmer_commons_apiresource_apiresourcekind_authori
|
|
|
13
13
|
*
|
|
14
14
|
* - visibility_private: no visibility tuple (owner + explicit grants only)
|
|
15
15
|
* - visibility_org: resource#viewer@organization:<org>#member
|
|
16
|
-
* - visibility_public: resource#viewer@identity_account:* (conditional
|
|
17
|
-
* wildcard gated by allow_public)
|
|
18
16
|
* - visibility_platform: resource#platform_viewer@identity_provider:<idp>#platform_user
|
|
19
17
|
* (the "private catalog" primitive: grants access to
|
|
20
18
|
* all members of all platform_managed orgs linked to
|
|
21
19
|
* the owning org's IdentityProvider)
|
|
22
20
|
*
|
|
21
|
+
* Every level but private is bounded by an organization or by the identity
|
|
22
|
+
* provider that links a set of organizations. There is no level a resource
|
|
23
|
+
* can hold that makes it readable to every account on the server; sharing
|
|
24
|
+
* across organizations that share no identity provider is done by
|
|
25
|
+
* packaging the resource as a plugin and installing a copy.
|
|
26
|
+
*
|
|
23
27
|
* Kinds WITHOUT a visibility config accept only visibility_private (or
|
|
24
28
|
* unspecified) — they are personal or org-structural resources whose access
|
|
25
29
|
* is fully defined by their FGA model, never by per-resource visibility
|
|
26
30
|
* tuples (session, environment, executions, etc.).
|
|
27
31
|
*
|
|
28
32
|
* Current classification:
|
|
29
|
-
* - Blueprint kinds (agent, skill, workflow, mcp_server):
|
|
30
|
-
* private, org,
|
|
33
|
+
* - Blueprint kinds (agent, skill, workflow, mcp_server, plugin):
|
|
34
|
+
* private, org, platform
|
|
31
35
|
* - Instance kinds (agent_instance, workflow_instance):
|
|
32
|
-
* private, org
|
|
36
|
+
* private, org — platform is deliberately excluded to preserve
|
|
33
37
|
* tenant isolation: each managed org instantiates shared blueprints
|
|
34
38
|
* inside its own boundary. (System-managed DEFAULT instances opt out of
|
|
35
39
|
* visibility entirely: their access tracks the parent blueprint
|
|
@@ -43,13 +47,6 @@ export declare const file_ai_stigmer_commons_apiresource_apiresourcekind_authori
|
|
|
43
47
|
* @generated from message ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig
|
|
44
48
|
*/
|
|
45
49
|
export type VisibilityConfig = Message<"ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig"> & {
|
|
46
|
-
/**
|
|
47
|
-
* Whether resources of this kind can be set to visibility_public.
|
|
48
|
-
* FGA tuple: resource#viewer@identity_account:* (gated by allow_public)
|
|
49
|
-
*
|
|
50
|
-
* @generated from field: bool supports_public = 1;
|
|
51
|
-
*/
|
|
52
|
-
supportsPublic: boolean;
|
|
53
50
|
/**
|
|
54
51
|
* Whether resources of this kind can be set to visibility_platform.
|
|
55
52
|
* FGA tuple: resource#platform_viewer@identity_provider:<idp>#platform_user
|
|
@@ -84,12 +81,12 @@ export type VisibilityConfig = Message<"ai.stigmer.commons.apiresource.apiresour
|
|
|
84
81
|
* explicit opt-in, never a surprise.
|
|
85
82
|
*
|
|
86
83
|
* The flag carries a second, coupled semantic for the same kinds — the
|
|
87
|
-
* ORG FLOOR: when visibility is platform
|
|
88
|
-
*
|
|
89
|
-
*
|
|
90
|
-
*
|
|
91
|
-
*
|
|
92
|
-
*
|
|
84
|
+
* ORG FLOOR: when visibility is platform, the org viewer tuple is written
|
|
85
|
+
* IN ADDITION to the level's own tuple. Sharing a blueprint beyond the
|
|
86
|
+
* org must never make it less visible to the owning org's own members
|
|
87
|
+
* (org-scoped listings resolve through FGA ListObjects on the org tuple,
|
|
88
|
+
* so the explicit org tuple is what keeps shared blueprints listable at
|
|
89
|
+
* home).
|
|
93
90
|
*
|
|
94
91
|
* Instance kinds deliberately leave this false: instances are personal
|
|
95
92
|
* resources (configuration, secrets) that must start private, and their
|
|
@@ -6,7 +6,7 @@ import { file_ai_stigmer_iam_v1_enum } from "../../../iam/v1/enum_pb.js";
|
|
|
6
6
|
/**
|
|
7
7
|
* Describes the file ai/stigmer/commons/apiresource/apiresourcekind/authorization_config.proto.
|
|
8
8
|
*/
|
|
9
|
-
export const file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config = /*@__PURE__*/ fileDesc("
|
|
9
|
+
export const file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_iam_v1_enum]);
|
|
10
10
|
/**
|
|
11
11
|
* Describes the message ai.stigmer.commons.apiresource.apiresourcekind.VisibilityConfig.
|
|
12
12
|
* Use `create(VisibilityConfigSchema)` to create a new message.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authorization_config_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yKAAyK;AACzK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,wEAAwE,GAAY,aAAa,CAC5G,QAAQ,CAAC,
|
|
1
|
+
{"version":3,"file":"authorization_config_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/commons/apiresource/apiresourcekind/authorization_config_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yKAAyK;AACzK,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAGzE;;GAEG;AACH,MAAM,CAAC,MAAM,wEAAwE,GAAY,aAAa,CAC5G,QAAQ,CAAC,k0DAAk0D,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAqG92D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAsC3F;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAgI3F;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,CAAN,IAAY,sBAiDX;AAjDD,WAAY,sBAAsB;IAChC;;OAEG;IACH,iFAAe,CAAA;IAEf;;;;;;OAMG;IACH,2EAAY,CAAA;IAEZ;;;;;;OAMG;IACH,mFAAgB,CAAA;IAEhB;;;;;;OAMG;IACH,uEAAU,CAAA;IAEV;;;;;;OAMG;IACH,+EAAc,CAAA;IAEd;;;;;OAKG;IACH,mEAAQ,CAAA;AACV,CAAC,EAjDW,sBAAsB,KAAtB,sBAAsB,QAiDjC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAoC,aAAa,CACxF,QAAQ,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC;AAExF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,oBAwCX;AAxCD,WAAY,oBAAoB;IAC9B;;OAEG;IACH,6EAAe,CAAA;IAEf;;;;;;OAMG;IACH,mEAAU,CAAA;IAEV;;;;;;OAMG;IACH,yEAAa,CAAA;IAEb;;;;;;OAMG;IACH,+DAAQ,CAAA;IAER;;;;;OAKG;IACH,+DAAQ,CAAA;AACV,CAAC,EAxCW,oBAAoB,KAApB,oBAAoB,QAwC/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wEAAwE,EAAE,CAAC,CAAC,CAAC"}
|
|
@@ -106,18 +106,20 @@ export declare const ApiResourceStateOperationTypeSchema: GenEnum<ApiResourceSta
|
|
|
106
106
|
* - Ownership: Which organization controls/manages the resource
|
|
107
107
|
* - Visibility: Who can access/use the resource
|
|
108
108
|
*
|
|
109
|
-
* All resources belong to an organization. Visibility determines
|
|
110
|
-
* users
|
|
109
|
+
* All resources belong to an organization. Visibility determines which
|
|
110
|
+
* users, inside that organization or in the organizations linked to it by
|
|
111
|
+
* one identity provider, can read the resource. No level reaches every
|
|
112
|
+
* account on the server.
|
|
111
113
|
*
|
|
112
114
|
* The visibility levels map to FGA tuples:
|
|
113
115
|
* - PRIVATE: no additional viewer tuples (owner-only access)
|
|
114
116
|
* - ORG: resource#viewer@organization:<org>#viewer tuple (everyone in the
|
|
115
117
|
* org — the org role hierarchy flows downward, so owners, admins, members
|
|
116
118
|
* AND read-only viewers all satisfy the organization#viewer userset)
|
|
117
|
-
* - PUBLIC: resource#viewer@identity_account:* with allow_public (all users)
|
|
118
119
|
* - PLATFORM: resource#platform_viewer@identity_provider:<idp>#platform_user
|
|
119
120
|
* (all members of all organizations managed by the owning org's
|
|
120
121
|
* IdentityProvider)
|
|
122
|
+
* - PUBLIC: retired; see the value's own comment.
|
|
121
123
|
*
|
|
122
124
|
* @generated from enum ai.stigmer.commons.apiresource.ApiResourceVisibility
|
|
123
125
|
*/
|
|
@@ -145,18 +147,12 @@ export declare enum ApiResourceVisibility {
|
|
|
145
147
|
*/
|
|
146
148
|
visibility_private = 1,
|
|
147
149
|
/**
|
|
148
|
-
*
|
|
149
|
-
*
|
|
150
|
-
*
|
|
151
|
-
*
|
|
152
|
-
*
|
|
153
|
-
*
|
|
154
|
-
* curation decision, requested by the resource owner and granted by the
|
|
155
|
-
* platform team — at both doors, updateVisibility escalation and
|
|
156
|
-
* create-with-public. Leaving this level stays self-service for anyone
|
|
157
|
-
* with can_edit. The OSS edition is unguarded (the self-hosted operator
|
|
158
|
-
* owns the store).
|
|
159
|
-
* Named visibility_public to avoid Java reserved keyword conflict.
|
|
150
|
+
* Retired. This level made a resource readable to every account on the
|
|
151
|
+
* server; it is refused at create and at updateVisibility for every kind,
|
|
152
|
+
* and every stored row that held it has been moved to visibility_org.
|
|
153
|
+
* Sharing across organizations happens through plugins (a copy is
|
|
154
|
+
* installed and owned) or, between organizations linked by one identity
|
|
155
|
+
* provider, through visibility_platform.
|
|
160
156
|
*
|
|
161
157
|
* @generated from enum value: visibility_public = 2;
|
|
162
158
|
*/
|
|
@@ -111,18 +111,20 @@ export const ApiResourceStateOperationTypeSchema = /*@__PURE__*/ enumDesc(file_a
|
|
|
111
111
|
* - Ownership: Which organization controls/manages the resource
|
|
112
112
|
* - Visibility: Who can access/use the resource
|
|
113
113
|
*
|
|
114
|
-
* All resources belong to an organization. Visibility determines
|
|
115
|
-
* users
|
|
114
|
+
* All resources belong to an organization. Visibility determines which
|
|
115
|
+
* users, inside that organization or in the organizations linked to it by
|
|
116
|
+
* one identity provider, can read the resource. No level reaches every
|
|
117
|
+
* account on the server.
|
|
116
118
|
*
|
|
117
119
|
* The visibility levels map to FGA tuples:
|
|
118
120
|
* - PRIVATE: no additional viewer tuples (owner-only access)
|
|
119
121
|
* - ORG: resource#viewer@organization:<org>#viewer tuple (everyone in the
|
|
120
122
|
* org — the org role hierarchy flows downward, so owners, admins, members
|
|
121
123
|
* AND read-only viewers all satisfy the organization#viewer userset)
|
|
122
|
-
* - PUBLIC: resource#viewer@identity_account:* with allow_public (all users)
|
|
123
124
|
* - PLATFORM: resource#platform_viewer@identity_provider:<idp>#platform_user
|
|
124
125
|
* (all members of all organizations managed by the owning org's
|
|
125
126
|
* IdentityProvider)
|
|
127
|
+
* - PUBLIC: retired; see the value's own comment.
|
|
126
128
|
*
|
|
127
129
|
* @generated from enum ai.stigmer.commons.apiresource.ApiResourceVisibility
|
|
128
130
|
*/
|
|
@@ -151,18 +153,12 @@ export var ApiResourceVisibility;
|
|
|
151
153
|
*/
|
|
152
154
|
ApiResourceVisibility[ApiResourceVisibility["visibility_private"] = 1] = "visibility_private";
|
|
153
155
|
/**
|
|
154
|
-
*
|
|
155
|
-
*
|
|
156
|
-
*
|
|
157
|
-
*
|
|
158
|
-
*
|
|
159
|
-
*
|
|
160
|
-
* curation decision, requested by the resource owner and granted by the
|
|
161
|
-
* platform team — at both doors, updateVisibility escalation and
|
|
162
|
-
* create-with-public. Leaving this level stays self-service for anyone
|
|
163
|
-
* with can_edit. The OSS edition is unguarded (the self-hosted operator
|
|
164
|
-
* owns the store).
|
|
165
|
-
* Named visibility_public to avoid Java reserved keyword conflict.
|
|
156
|
+
* Retired. This level made a resource readable to every account on the
|
|
157
|
+
* server; it is refused at create and at updateVisibility for every kind,
|
|
158
|
+
* and every stored row that held it has been moved to visibility_org.
|
|
159
|
+
* Sharing across organizations happens through plugins (a copy is
|
|
160
|
+
* installed and owned) or, between organizations linked by one identity
|
|
161
|
+
* provider, through visibility_platform.
|
|
166
162
|
*
|
|
167
163
|
* @generated from enum value: visibility_public = 2;
|
|
168
164
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,oqBAAoqB,CAAC,CAAC;AAEjrB;;;;GAIG;AACH,MAAM,CAAN,IAAY,oBA0CX;AA1CD,WAAY,oBAAoB;IAC9B;;;;OAIG;IACH,6EAAe,CAAA;IAEf;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,iGAAyB,CAAA;AAC3B,CAAC,EA1CW,oBAAoB,KAApB,oBAAoB,QA0C/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAN,IAAY,6BA0CX;AA1CD,WAAY,6BAA6B;IACvC;;;;OAIG;IACH,mKAAiD,CAAA;IAEjD;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,iFAAQ,CAAA;IAER;;;;OAIG;IACH,qFAAU,CAAA;AACZ,CAAC,EA1CW,6BAA6B,KAA7B,6BAA6B,QA0CxC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA2C,aAAa,CACtG,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD
|
|
1
|
+
{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,oqBAAoqB,CAAC,CAAC;AAEjrB;;;;GAIG;AACH,MAAM,CAAN,IAAY,oBA0CX;AA1CD,WAAY,oBAAoB;IAC9B;;;;OAIG;IACH,6EAAe,CAAA;IAEf;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,iGAAyB,CAAA;AAC3B,CAAC,EA1CW,oBAAoB,KAApB,oBAAoB,QA0C/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAN,IAAY,6BA0CX;AA1CD,WAAY,6BAA6B;IACvC;;;;OAIG;IACH,mKAAiD,CAAA;IAEjD;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,iFAAQ,CAAA;IAER;;;;OAIG;IACH,qFAAU,CAAA;AACZ,CAAC,EA1CW,6BAA6B,KAA7B,6BAA6B,QA0CxC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA2C,aAAa,CACtG,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAN,IAAY,qBAqFX;AArFD,WAAY,qBAAqB;IAC/B;;;;;;;OAOG;IACH,+HAAuC,CAAA;IAEvC;;;;;;;;;;;OAWG;IACH,6FAAsB,CAAA;IAEtB;;;;;;;;;OASG;IACH,2FAAqB,CAAA;IAErB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,qFAAkB,CAAA;IAElB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,+FAAuB,CAAA;AACzB,CAAC,EArFW,qBAAqB,KAArB,qBAAqB,QAqFhC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
|
|
@@ -132,15 +132,17 @@ export declare const FindApiResourcesRequestSchema: GenMessage<FindApiResourcesR
|
|
|
132
132
|
* old level is removed and the tuple for the new level is created:
|
|
133
133
|
* - PRIVATE: no visibility tuple (owner + explicit grants only)
|
|
134
134
|
* - ORG: resource#viewer@organization:<org>#member
|
|
135
|
-
* - PUBLIC: resource#viewer@identity_account:* (gated by allow_public)
|
|
136
135
|
* - PLATFORM: resource#platform_viewer@identity_provider:<idp>#platform_user
|
|
137
136
|
*
|
|
138
137
|
* Not all resources support all visibility levels — the supported set is
|
|
139
138
|
* declared per kind via VisibilityConfig in kind_meta:
|
|
140
|
-
* - Blueprints (agent, workflow, skill, mcp_server):
|
|
141
|
-
* PRIVATE, ORG,
|
|
139
|
+
* - Blueprints (agent, workflow, skill, mcp_server, plugin):
|
|
140
|
+
* PRIVATE, ORG, or PLATFORM
|
|
142
141
|
* - Instances (agent_instance, workflow_instance):
|
|
143
|
-
* PRIVATE
|
|
142
|
+
* PRIVATE or ORG (never PLATFORM — tenant isolation)
|
|
143
|
+
*
|
|
144
|
+
* visibility_public is refused for every kind (INVALID_ARGUMENT naming the
|
|
145
|
+
* supported levels); the level is retired.
|
|
144
146
|
*
|
|
145
147
|
* System-managed DEFAULT instances reject visibility updates entirely:
|
|
146
148
|
* their access structurally tracks the parent blueprint via the
|
|
@@ -172,7 +174,14 @@ export declare const UpdateVisibilityInputSchema: GenMessage<UpdateVisibilityInp
|
|
|
172
174
|
/**
|
|
173
175
|
* Generic reference to any API resource by org and slug.
|
|
174
176
|
* Used across resources to reference other resources (e.g., Environment, Agent, Skill).
|
|
175
|
-
* Canonical format: "org/slug" (e.g., "
|
|
177
|
+
* Canonical format: "org/slug" (e.g., "acme/web-search", "acme/my-agent").
|
|
178
|
+
*
|
|
179
|
+
* Every reference in a resource's spec is checked when the resource is
|
|
180
|
+
* written: the target must exist, and a target in another organization
|
|
181
|
+
* must be platform-visible to be referenced at all. A blueprint may not be
|
|
182
|
+
* more visible than the skills, MCP servers and agents it references, so
|
|
183
|
+
* what a person can run they can also read. A reference that fails the
|
|
184
|
+
* check is refused at write, never at run.
|
|
176
185
|
*
|
|
177
186
|
* @generated from message ai.stigmer.commons.apiresource.ApiResourceReference
|
|
178
187
|
*/
|
|
@@ -188,7 +197,8 @@ export type ApiResourceReference = Message<"ai.stigmer.commons.apiresource.ApiRe
|
|
|
188
197
|
* always have org populated (absolute form).
|
|
189
198
|
*
|
|
190
199
|
* Use empty org for same-org references (the common case).
|
|
191
|
-
*
|
|
200
|
+
* An explicit other org is accepted only when that organization is a
|
|
201
|
+
* platform that shares the resource with yours (visibility_platform).
|
|
192
202
|
*
|
|
193
203
|
* @generated from field: string org = 1;
|
|
194
204
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uHAAuH;AACvH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,2CAA2C,CAAC;AAElI,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,qoCAAqoC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAcz0C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA+BzD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AAuBzD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA4CzD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uHAAuH;AACvH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,2CAA2C,CAAC;AAElI,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAAE,sCAAsC,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAY,aAAa,CAC1E,QAAQ,CAAC,qoCAAqoC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAcz0C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA+BzD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AAuBzD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA4CzD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AAkDzD;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC;AA0EzD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC"}
|
|
@@ -59,9 +59,12 @@ export type ApiResourceMetadata = Message<"ai.stigmer.commons.apiresource.ApiRes
|
|
|
59
59
|
*/
|
|
60
60
|
org: string;
|
|
61
61
|
/**
|
|
62
|
-
* Visibility controls who can
|
|
63
|
-
* - PRIVATE:
|
|
64
|
-
* -
|
|
62
|
+
* Visibility controls who can read this resource.
|
|
63
|
+
* - PRIVATE: the owner and explicit grants.
|
|
64
|
+
* - ORG: every member of the owning organization.
|
|
65
|
+
* - PLATFORM: members of the organizations linked by the owning
|
|
66
|
+
* organization's identity provider (blueprint kinds only).
|
|
67
|
+
* Write access always requires membership of the owning organization.
|
|
65
68
|
* Default: config-driven per kind — blueprint kinds (marked
|
|
66
69
|
* defaults_to_org_visibility) default to ORG; all other kinds default to PRIVATE.
|
|
67
70
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"metadata_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/metadata_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,s/BAAs/B,EAAE,CAAC,wCAAwC,EAAE,0BAA0B,CAAC,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"metadata_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/metadata_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,s/BAAs/B,EAAE,CAAC,wCAAwC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA8G3kC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAkD/D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
|
|
@@ -165,12 +165,6 @@ export declare enum IamPermission {
|
|
|
165
165
|
* Organization-level permission to create agent shares billed to the
|
|
166
166
|
* organization.
|
|
167
167
|
*
|
|
168
|
-
* Checked only for CROSS-ORG shares (a share of another org's
|
|
169
|
-
* marketplace-public agent — decision 013): a public share spends the
|
|
170
|
-
* sharing org's credits on the open internet, an admin-level act.
|
|
171
|
-
* Same-org shares keep their Phase A bar (can_edit on the agent), which
|
|
172
|
-
* already implies membership in the agent's org.
|
|
173
|
-
*
|
|
174
168
|
* @generated from enum value: can_create_agent_share = 30;
|
|
175
169
|
*/
|
|
176
170
|
can_create_agent_share = 30,
|
|
@@ -232,21 +226,6 @@ export declare enum IamPermission {
|
|
|
232
226
|
* @generated from enum value: can_view_provider_standing = 38;
|
|
233
227
|
*/
|
|
234
228
|
can_view_provider_standing = 38,
|
|
235
|
-
/**
|
|
236
|
-
* Platform-level permission to set a resource's visibility to PUBLIC —
|
|
237
|
-
* the only level that crosses every org boundary (the cross-org
|
|
238
|
-
* "explore" catalog). Gated to platform operators in the cloud
|
|
239
|
-
* edition: public listing is a curation decision, requested by the
|
|
240
|
-
* owner and granted by the platform team. Enforced at BOTH doors a
|
|
241
|
-
* resource can become public through — updateVisibility escalation and
|
|
242
|
-
* create-with-public — while org/platform levels and un-publishing
|
|
243
|
-
* stay self-service (resource can_edit). The OSS edition is
|
|
244
|
-
* deliberately unguarded: the self-hosted operator owns the store,
|
|
245
|
-
* the same scoping cloud#320 applied to reserved labels.
|
|
246
|
-
*
|
|
247
|
-
* @generated from enum value: can_set_public_visibility = 39;
|
|
248
|
-
*/
|
|
249
|
-
can_set_public_visibility = 39,
|
|
250
229
|
/**
|
|
251
230
|
* Organization-level permission to install a plugin: push an Agent
|
|
252
231
|
* Plugins archive that the server materialises into skills, MCP servers,
|
|
@@ -5,7 +5,7 @@ import { enumDesc, fileDesc } from "@bufbuild/protobuf/codegenv1";
|
|
|
5
5
|
/**
|
|
6
6
|
* Describes the file ai/stigmer/iam/v1/enum.proto.
|
|
7
7
|
*/
|
|
8
|
-
export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("
|
|
8
|
+
export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("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");
|
|
9
9
|
/**
|
|
10
10
|
* IamPermission defines the permissions checked by the authorization
|
|
11
11
|
* interceptor before an RPC handler executes.
|
|
@@ -169,12 +169,6 @@ export var IamPermission;
|
|
|
169
169
|
* Organization-level permission to create agent shares billed to the
|
|
170
170
|
* organization.
|
|
171
171
|
*
|
|
172
|
-
* Checked only for CROSS-ORG shares (a share of another org's
|
|
173
|
-
* marketplace-public agent — decision 013): a public share spends the
|
|
174
|
-
* sharing org's credits on the open internet, an admin-level act.
|
|
175
|
-
* Same-org shares keep their Phase A bar (can_edit on the agent), which
|
|
176
|
-
* already implies membership in the agent's org.
|
|
177
|
-
*
|
|
178
172
|
* @generated from enum value: can_create_agent_share = 30;
|
|
179
173
|
*/
|
|
180
174
|
IamPermission[IamPermission["can_create_agent_share"] = 30] = "can_create_agent_share";
|
|
@@ -236,21 +230,6 @@ export var IamPermission;
|
|
|
236
230
|
* @generated from enum value: can_view_provider_standing = 38;
|
|
237
231
|
*/
|
|
238
232
|
IamPermission[IamPermission["can_view_provider_standing"] = 38] = "can_view_provider_standing";
|
|
239
|
-
/**
|
|
240
|
-
* Platform-level permission to set a resource's visibility to PUBLIC —
|
|
241
|
-
* the only level that crosses every org boundary (the cross-org
|
|
242
|
-
* "explore" catalog). Gated to platform operators in the cloud
|
|
243
|
-
* edition: public listing is a curation decision, requested by the
|
|
244
|
-
* owner and granted by the platform team. Enforced at BOTH doors a
|
|
245
|
-
* resource can become public through — updateVisibility escalation and
|
|
246
|
-
* create-with-public — while org/platform levels and un-publishing
|
|
247
|
-
* stay self-service (resource can_edit). The OSS edition is
|
|
248
|
-
* deliberately unguarded: the self-hosted operator owns the store,
|
|
249
|
-
* the same scoping cloud#320 applied to reserved labels.
|
|
250
|
-
*
|
|
251
|
-
* @generated from enum value: can_set_public_visibility = 39;
|
|
252
|
-
*/
|
|
253
|
-
IamPermission[IamPermission["can_set_public_visibility"] = 39] = "can_set_public_visibility";
|
|
254
233
|
/**
|
|
255
234
|
* Organization-level permission to install a plugin: push an Agent
|
|
256
235
|
* Plugins archive that the server materialises into skills, MCP servers,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/iam/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+FAA+F;AAC/F,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAY,aAAa,CAC/D,QAAQ,CAAC,
|
|
1
|
+
{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/iam/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+FAA+F;AAC/F,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAY,aAAa,CAC/D,QAAQ,CAAC,6pDAA6pD,CAAC,CAAC;AAE1qD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,aAqSX;AArSD,WAAY,aAAa;IACvB;;OAEG;IACH,+DAAe,CAAA;IAEf;;;;OAIG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,yDAAY,CAAA;IAEZ;;OAEG;IACH,6DAAc,CAAA;IAEd;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,uEAAmB,CAAA;IAEnB;;;;OAIG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,+EAAuB,CAAA;IAEvB;;OAEG;IACH,6EAAsB,CAAA;IAEtB;;OAEG;IACH,yEAAoB,CAAA;IAEpB;;OAEG;IACH,sEAAmB,CAAA;IAEnB;;OAEG;IACH,sFAA2B,CAAA;IAE3B;;OAEG;IACH,gGAAgC,CAAA;IAEhC;;OAEG;IACH,kFAAyB,CAAA;IAEzB;;OAEG;IACH,8FAA+B,CAAA;IAE/B;;;;OAIG;IACH,wFAA4B,CAAA;IAE5B;;OAEG;IACH,gFAAwB,CAAA;IAExB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;OAEG;IACH,kGAAiC,CAAA;IAEjC;;;;OAIG;IACH,kFAAyB,CAAA;IAEzB;;;;OAIG;IACH,gEAAgB,CAAA;IAEhB;;;;OAIG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,8EAAuB,CAAA;IAEvB;;;;OAIG;IACH,0EAAqB,CAAA;IAErB;;OAEG;IACH,8EAAuB,CAAA;IAEvB;;;;;OAKG;IACH,wFAA4B,CAAA;IAE5B;;;;;OAKG;IACH,sFAA2B,CAAA;IAE3B;;;;;;OAMG;IACH,sFAA2B,CAAA;IAE3B;;;;;;;OAOG;IACH,0FAA6B,CAAA;IAE7B;;;;;;;;OAQG;IACH,8FAA+B,CAAA;IAE/B;;;;;;OAMG;IACH,wEAAoB,CAAA;IAEpB;;;;;;;;;;OAUG;IACH,4FAA8B,CAAA;IAE9B;;;;;;;;;OASG;IACH,8FAA+B,CAAA;IAE/B;;;;;;;;;OASG;IACH,4EAAsB,CAAA;IAEtB;;;;;;;;OAQG;IACH,0EAAqB,CAAA;IAErB;;;;;;;;OAQG;IACH,4EAAsB,CAAA;IAEtB;;;;;OAKG;IACH,oFAA0B,CAAA;IAE1B;;;;;OAKG;IACH,4FAA8B,CAAA;AAChC,CAAC,EArSW,aAAa,KAAb,aAAa,QAqSxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAN,IAAY,OA0CX;AA1CD,WAAY,OAAO;IACjB;;OAEG;IACH,qEAAwB,CAAA;IAExB;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,uCAAS,CAAA;IAET;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;OAIG;IACH,yCAAU,CAAA;IAEV;;;;;;OAMG;IACH,mDAAe,CAAA;AACjB,CAAC,EA1CW,OAAO,KAAP,OAAO,QA0ClB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqB,aAAa,CAC1D,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC"}
|
|
@@ -65,20 +65,6 @@ export type SearchRequest = Message<"ai.stigmer.search.v1.SearchRequest"> & {
|
|
|
65
65
|
* @generated from field: string org = 3;
|
|
66
66
|
*/
|
|
67
67
|
org: string;
|
|
68
|
-
/**
|
|
69
|
-
* Exclude public/platform resources from results.
|
|
70
|
-
*
|
|
71
|
-
* Default: false (include public resources).
|
|
72
|
-
*
|
|
73
|
-
* When true: Only return resources from organizations the caller
|
|
74
|
-
* is a member of. Excludes platform-provided public resources
|
|
75
|
-
* like "stigmer/web-search".
|
|
76
|
-
*
|
|
77
|
-
* Useful when users want to see only their own resources.
|
|
78
|
-
*
|
|
79
|
-
* @generated from field: bool exclude_public = 4;
|
|
80
|
-
*/
|
|
81
|
-
excludePublic: boolean;
|
|
82
68
|
/**
|
|
83
69
|
* Pagination parameters.
|
|
84
70
|
*
|
|
@@ -90,21 +76,6 @@ export type SearchRequest = Message<"ai.stigmer.search.v1.SearchRequest"> & {
|
|
|
90
76
|
* @generated from field: ai.stigmer.commons.rpc.PageInfo page = 5;
|
|
91
77
|
*/
|
|
92
78
|
page?: PageInfo;
|
|
93
|
-
/**
|
|
94
|
-
* Include public resources from organizations other than the org filter.
|
|
95
|
-
*
|
|
96
|
-
* Only meaningful when org is non-empty. When true, the result set includes:
|
|
97
|
-
* 1. All authorized resources from the specified org (any visibility)
|
|
98
|
-
* 2. All authorized public resources from other orgs
|
|
99
|
-
*
|
|
100
|
-
* Use case: "All" scope in library views — shows the user's org resources
|
|
101
|
-
* plus marketplace/public resources from other organizations.
|
|
102
|
-
*
|
|
103
|
-
* Default: false (only resources matching the org filter are returned).
|
|
104
|
-
*
|
|
105
|
-
* @generated from field: bool cross_org_public = 6;
|
|
106
|
-
*/
|
|
107
|
-
crossOrgPublic: boolean;
|
|
108
79
|
};
|
|
109
80
|
/**
|
|
110
81
|
* Describes the message ai.stigmer.search.v1.SearchRequest.
|
|
@@ -243,10 +214,12 @@ export type SearchResult = Message<"ai.stigmer.search.v1.SearchResult"> & {
|
|
|
243
214
|
*/
|
|
244
215
|
description: string;
|
|
245
216
|
/**
|
|
246
|
-
* Resource visibility
|
|
217
|
+
* Resource visibility, as stored on the resource's metadata.
|
|
247
218
|
*
|
|
248
|
-
* - visibility_private:
|
|
249
|
-
* -
|
|
219
|
+
* - visibility_private: the owner and explicit grants
|
|
220
|
+
* - visibility_org: every member of the owning organization
|
|
221
|
+
* - visibility_platform: members of the organizations linked by the
|
|
222
|
+
* owning organization's identity provider
|
|
250
223
|
*
|
|
251
224
|
* @generated from field: ai.stigmer.commons.apiresource.ApiResourceVisibility visibility = 8;
|
|
252
225
|
*/
|
|
@@ -10,7 +10,7 @@ import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
|
|
|
10
10
|
/**
|
|
11
11
|
* Describes the file ai/stigmer/search/v1/io.proto.
|
|
12
12
|
*/
|
|
13
|
-
export const file_ai_stigmer_search_v1_io = /*@__PURE__*/ fileDesc("
|
|
13
|
+
export const file_ai_stigmer_search_v1_io = /*@__PURE__*/ fileDesc("Ch1haS9zdGlnbWVyL3NlYXJjaC92MS9pby5wcm90bxIUYWkuc3RpZ21lci5zZWFyY2gudjEikQIKDVNlYXJjaFJlcXVlc3QSXQoFa2luZHMYASADKA4yPy5haS5zdGlnbWVyLmNvbW1vbnMuYXBpcmVzb3VyY2UuYXBpcmVzb3VyY2VraW5kLkFwaVJlc291cmNlS2luZEINukgKkgEHIgWCAQIQARIXCgVxdWVyeRgCIAEoCUIIukgFcgMY9AMSKgoDb3JnGAMgASgJQh26SBpyGBg/MhReJHxeW2Etel1bYS16MC05LV0qJBIuCgRwYWdlGAUgASgLMiAuYWkuc3RpZ21lci5jb21tb25zLnJwYy5QYWdlSW5mb0oECAQQBUoECAYQB1IOZXhjbHVkZV9wdWJsaWNSEGNyb3NzX29yZ19wdWJsaWMi9AEKDlNlYXJjaFJlc3BvbnNlEjMKB2VudHJpZXMYASADKAsyIi5haS5zdGlnbWVyLnNlYXJjaC52MS5TZWFyY2hSZXN1bHQSTgoOY291bnRzX2J5X2tpbmQYAiADKAsyNi5haS5zdGlnbWVyLnNlYXJjaC52MS5TZWFyY2hSZXNwb25zZS5Db3VudHNCeUtpbmRFbnRyeRITCgt0b3RhbF9jb3VudBgDIAEoBRITCgt0b3RhbF9wYWdlcxgEIAEoBRozChFDb3VudHNCeUtpbmRFbnRyeRILCgNrZXkYASABKAkSDQoFdmFsdWUYAiABKAU6AjgBIpkDCgxTZWFyY2hSZXN1bHQSTQoEa2luZBgBIAEoDjI/LmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5hcGlyZXNvdXJjZWtpbmQuQXBpUmVzb3VyY2VLaW5kEgoKAmlkGAIgASgJEgwKBG5hbWUYAyABKAkSDAoEc2x1ZxgEIAEoCRIWCg5xdWFsaWZpZWRfc2x1ZxgFIAEoCRILCgNvcmcYBiABKAkSEwoLZGVzY3JpcHRpb24YByABKAkSSQoKdmlzaWJpbGl0eRgIIAEoDjI1LmFpLnN0aWdtZXIuY29tbW9ucy5hcGlyZXNvdXJjZS5BcGlSZXNvdXJjZVZpc2liaWxpdHkSDAoEdGFncxgJIAMoCRIuCgpjcmVhdGVkX2F0GAogASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBIuCgp1cGRhdGVkX2F0GAsgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBINCgVzY29yZRgMIAEoAhIQCghpY29uX3VybBgNIAEoCWIGcHJvdG8z", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind, file_ai_stigmer_commons_apiresource_enum, file_ai_stigmer_commons_rpc_pagination, file_buf_validate_validate, file_google_protobuf_timestamp]);
|
|
14
14
|
/**
|
|
15
15
|
* Describes the message ai.stigmer.search.v1.SearchRequest.
|
|
16
16
|
* Use `create(SearchRequestSchema)` to create a new message.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mGAAmG;AACnG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,mEAAmE,CAAC;AAE1J,OAAO,EAAE,wCAAwC,EAAE,MAAM,sCAAsC,CAAC;AAEhG,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAY,aAAa,CAChE,QAAQ,CAAC,
|
|
1
|
+
{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/search/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mGAAmG;AACnG,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qEAAqE,EAAE,MAAM,mEAAmE,CAAC;AAE1J,OAAO,EAAE,wCAAwC,EAAE,MAAM,sCAAsC,CAAC;AAEhG,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAY,aAAa,CAChE,QAAQ,CAAC,kzCAAkzC,EAAE,CAAC,qEAAqE,EAAE,wCAAwC,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA2EthD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA8D/C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AA4I/C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC"}
|