@stigmer/protos 3.23.0 → 3.24.0

package/ai/stigmer/agentic/agent/v1/command_connect.d.ts

@@ -44,12 +44,12 @@ export declare const AgentCommandController: {
          *
          * This is a targeted metadata update — it only modifies metadata.visibility,
          * leaving spec, status, and other metadata fields untouched. Use this to
-         * make an agent publicly accessible or to revoke public access without
-         * sending the entire agent resource (avoiding read-modify-write races).
+         * widen or narrow who can read the agent without sending the entire agent
+         * resource (avoiding read-modify-write races).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * Raising the level is refused while a skill, MCP server or agent the
+         * agent references is less visible than the requested level: what a
+         * person can run they must also be able to read.
          *
          * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.updateVisibility
          */
@@ -65,8 +65,9 @@ export declare const AgentCommandController: {
          * Deletion also removes the agent's system-managed default instance and
          * every AgentShare in the agent's own organization referencing it, so a
          * later agent created at the same org/slug starts clean. Personal
-         * instances, sessions, and other organizations' shares of this agent are
-         * not deleted — external shares stop resolving instead.
+         * instances and sessions are not deleted, nor is a share written in
+         * another organization before sharing across organizations was retired;
+         * such a share stops resolving instead.
          *
          * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.delete
          */

package/ai/stigmer/agentic/agent/v1/command_connect.js

@@ -52,12 +52,12 @@ export const AgentCommandController = {
          *
          * This is a targeted metadata update — it only modifies metadata.visibility,
          * leaving spec, status, and other metadata fields untouched. Use this to
-         * make an agent publicly accessible or to revoke public access without
-         * sending the entire agent resource (avoiding read-modify-write races).
+         * widen or narrow who can read the agent without sending the entire agent
+         * resource (avoiding read-modify-write races).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * Raising the level is refused while a skill, MCP server or agent the
+         * agent references is less visible than the requested level: what a
+         * person can run they must also be able to read.
          *
          * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.updateVisibility
          */
@@ -73,8 +73,9 @@ export const AgentCommandController = {
          * Deletion also removes the agent's system-managed default instance and
          * every AgentShare in the agent's own organization referencing it, so a
          * later agent created at the same org/slug starts clean. Personal
-         * instances, sessions, and other organizations' shares of this agent are
-         * not deleted — external shares stop resolving instead.
+         * instances and sessions are not deleted, nor is a share written in
+         * another organization before sharing across organizations was retired;
+         * such a share stops resolving instead.
          *
          * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.delete
          */

package/ai/stigmer/agentic/agent/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agent/v1/command_pb.d.ts

@@ -47,12 +47,12 @@ export declare const AgentCommandController: GenService<{
      *
      * This is a targeted metadata update — it only modifies metadata.visibility,
      * leaving spec, status, and other metadata fields untouched. Use this to
-     * make an agent publicly accessible or to revoke public access without
-     * sending the entire agent resource (avoiding read-modify-write races).
+     * widen or narrow who can read the agent without sending the entire agent
+     * resource (avoiding read-modify-write races).
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
+     * Raising the level is refused while a skill, MCP server or agent the
+     * agent references is less visible than the requested level: what a
+     * person can run they must also be able to read.
      *
      * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.updateVisibility
      */
@@ -67,8 +67,9 @@ export declare const AgentCommandController: GenService<{
      * Deletion also removes the agent's system-managed default instance and
      * every AgentShare in the agent's own organization referencing it, so a
      * later agent created at the same org/slug starts clean. Personal
-     * instances, sessions, and other organizations' shares of this agent are
-     * not deleted — external shares stop resolving instead.
+     * instances and sessions are not deleted, nor is a share written in
+     * another organization before sharing across organizations was retired;
+     * such a share stops resolving instead.
      *
      * @generated from rpc ai.stigmer.agentic.agent.v1.AgentCommandController.delete
      */

package/ai/stigmer/agentic/agent/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,wiCAAwiC,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE/wC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAkE9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agent/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,wiCAAwiC,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE/wC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAmE9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_connect.d.ts

@@ -20,8 +20,10 @@ export declare const AgentInstanceCommandController: {
         /**
          * Create an agent instance.
          *
-         * Public agents allow any authenticated user to create instances (cross-org allowed).
-         * Private agents restrict instance creation to org members and the agent owner.
+         * Instance creation needs can_create_instance on the agent and
+         * can_create_agent_instance in the instance's own organization; a
+         * platform-visible agent may be instantiated from any organization its
+         * identity provider links.
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */
@@ -45,18 +47,14 @@ export declare const AgentInstanceCommandController: {
         /**
          * Update the visibility of an existing agent instance.
          *
-         * Changes who can view this instance and interact with it. Supports the
-         * full visibility spectrum: PRIVATE (owner only), ORG (all org members),
-         * or PUBLIC (all authenticated users).
+         * Changes who can view this instance and interact with it. Supports
+         * PRIVATE (owner only) and ORG (all org members); instances never take
+         * the platform level (tenant isolation).
          *
          * For agent instances, visibility controls who can create sessions and run
          * executions against this instance. Sessions remain personal regardless of
          * instance visibility (conversation privacy is preserved).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.updateVisibility
          */
         readonly updateVisibility: {

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js

@@ -28,8 +28,10 @@ export const AgentInstanceCommandController = {
         /**
          * Create an agent instance.
          *
-         * Public agents allow any authenticated user to create instances (cross-org allowed).
-         * Private agents restrict instance creation to org members and the agent owner.
+         * Instance creation needs can_create_instance on the agent and
+         * can_create_agent_instance in the instance's own organization; a
+         * platform-visible agent may be instantiated from any organization its
+         * identity provider links.
          *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
          */
@@ -53,18 +55,14 @@ export const AgentInstanceCommandController = {
         /**
          * Update the visibility of an existing agent instance.
          *
-         * Changes who can view this instance and interact with it. Supports the
-         * full visibility spectrum: PRIVATE (owner only), ORG (all org members),
-         * or PUBLIC (all authenticated users).
+         * Changes who can view this instance and interact with it. Supports
+         * PRIVATE (owner only) and ORG (all org members); instances never take
+         * the platform level (tenant isolation).
          *
          * For agent instances, visibility controls who can create sessions and run
          * executions against this instance. Sessions remain personal regardless of
          * instance visibility (conversation privacy is preserved).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.updateVisibility
          */
         updateVisibility: {

package/ai/stigmer/agentic/agentinstance/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sIAAsI;AACtI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;WAIG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,aAAa;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentinstance/v1/command_pb.d.ts

@@ -25,8 +25,10 @@ export declare const AgentInstanceCommandController: GenService<{
     /**
      * Create an agent instance.
      *
-     * Public agents allow any authenticated user to create instances (cross-org allowed).
-     * Private agents restrict instance creation to org members and the agent owner.
+     * Instance creation needs can_create_instance on the agent and
+     * can_create_agent_instance in the instance's own organization; a
+     * platform-visible agent may be instantiated from any organization its
+     * identity provider links.
      *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.create
      */
@@ -48,18 +50,14 @@ export declare const AgentInstanceCommandController: GenService<{
     /**
      * Update the visibility of an existing agent instance.
      *
-     * Changes who can view this instance and interact with it. Supports the
-     * full visibility spectrum: PRIVATE (owner only), ORG (all org members),
-     * or PUBLIC (all authenticated users).
+     * Changes who can view this instance and interact with it. Supports
+     * PRIVATE (owner only) and ORG (all org members); instances never take
+     * the platform level (tenant isolation).
      *
      * For agent instances, visibility controls who can create sessions and run
      * executions against this instance. Sessions remain personal regardless of
      * instance visibility (conversation privacy is preserved).
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
-     *
      * @generated from rpc ai.stigmer.agentic.agentinstance.v1.AgentInstanceCommandController.updateVisibility
      */
     updateVisibility: {

package/ai/stigmer/agentic/agentinstance/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8sCAA8sC,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr8C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAkEtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentinstance/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sIAAsI;AACtI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAEzE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,8sCAA8sC,EAAE,CAAC,4CAA4C,EAAE,2CAA2C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEr8C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAgEtC,aAAa,CAChB,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentshare/v1/spec_pb.d.ts

@@ -19,10 +19,10 @@ export type AgentShareSpec = Message<"ai.stigmer.agentic.agentshare.v1.AgentShar
     /**
      * Reference to the agent this share distributes.
      *
-     * The referenced agent may live in another organization when it is
-     * marketplace-public: the share then offers that agent from this share's
-     * org, billed to this share's org, with tool credentials bound from this
-     * share's org. Cross-org shares must have a public audience.
+     * The referenced agent must live in this share's organization: a share
+     * offers an agent its own organization owns, billed to that organization,
+     * with tool credentials bound from it. To share another organization's
+     * agent, install the plugin that carries it and share the installed copy.
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference agent_ref = 1;
      */

package/ai/stigmer/agentic/mcpserver/v1/command_connect.d.ts

@@ -65,10 +65,6 @@ export declare const McpServerCommandController: {
          * Only modifies metadata.visibility, leaving spec, status, and other
          * metadata fields untouched.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.updateVisibility
          */
         readonly updateVisibility: {

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js

@@ -73,10 +73,6 @@ export const McpServerCommandController = {
          * Only modifies metadata.visibility, leaving spec, status, and other
          * metadata fields untouched.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.updateVisibility
          */
         updateVisibility: {

package/ai/stigmer/agentic/mcpserver/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,YAAY,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEhS;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,4DAA4D;IACtE,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,YAAY;YACf,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;WAaG;QACH,oBAAoB,EAAE;YACpB,IAAI,EAAE,sBAAsB;YAC5B,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,0BAA0B;YAC7B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,oBAAoB;YACvB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,iBAAiB,EAAE;YACjB,IAAI,EAAE,mBAAmB;YACzB,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/command_pb.d.ts

@@ -67,10 +67,6 @@ export declare const McpServerCommandController: GenService<{
      * Only modifies metadata.visibility, leaving spec, status, and other
      * metadata fields untouched.
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
-     *
      * @generated from rpc ai.stigmer.agentic.mcpserver.v1.McpServerCommandController.updateVisibility
      */
     updateVisibility: {

package/ai/stigmer/agentic/mcpserver/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,w/FAAw/F,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEvuG;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAuNlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,wCAAwC,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,w/FAAw/F,EAAE,CAAC,wCAAwC,EAAE,uCAAuC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEvuG;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAmNlC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts

@@ -308,7 +308,9 @@ export type McpServerAuth = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerAu
      * When set: Stigmer uses the referenced OAuthApp's client credentials to
      * perform the OAuth authorization code flow with the vendor on behalf of
      * the user. The OAuthApp must belong to the same organization as the
-     * McpServer (or be accessible via cross-org reference).
+     * McpServer: an OAuth app holds vendor credentials and is never
+     * platform-visible, so no cross-organization reference to one is
+     * accepted.
      *
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference oauth_app_ref = 1;
      */

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuH7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAsD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA2D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAoD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAmG5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuH7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAsD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA2D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAoD5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqG5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/plugin/v1/command_connect.d.ts

@@ -42,9 +42,6 @@ export declare const PluginCommandController: {
          * Update the visibility of a plugin and of every resource it materialised.
          * Only modifies metadata.visibility on the plugin and its members.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         *
          * @generated from rpc ai.stigmer.agentic.plugin.v1.PluginCommandController.updateVisibility
          */
         readonly updateVisibility: {

package/ai/stigmer/agentic/plugin/v1/command_connect.js

@@ -50,9 +50,6 @@ export const PluginCommandController = {
          * Update the visibility of a plugin and of every resource it materialised.
          * Only modifies metadata.visibility on the plugin and its members.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         *
          * @generated from rpc ai.stigmer.agentic.plugin.v1.PluginCommandController.updateVisibility
          */
         updateVisibility: {

package/ai/stigmer/agentic/plugin/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/plugin/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wHAAwH;AACxH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,oCAAoC,EAAE,uBAAuB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACvH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;;;;;;WASG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,oCAAoC;YACvC,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/plugin/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wHAAwH;AACxH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,oCAAoC,EAAE,uBAAuB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACvH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE;QACP;;;;;;;;;WASG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,oCAAoC;YACvC,CAAC,EAAE,uBAAuB;YAC1B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;WAKG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,MAAM;YACT,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/plugin/v1/command_pb.d.ts

@@ -46,9 +46,6 @@ export declare const PluginCommandController: GenService<{
      * Update the visibility of a plugin and of every resource it materialised.
      * Only modifies metadata.visibility on the plugin and its members.
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     *
      * @generated from rpc ai.stigmer.agentic.plugin.v1.PluginCommandController.updateVisibility
      */
     updateVisibility: {

package/ai/stigmer/agentic/plugin/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/plugin/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,aAAa,CAAC;AAEpE,OAAO,EAAE,oCAAoC,EAAE,MAAM,YAAY,CAAC;AAElE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,ikCAAikC,EAAE,CAAC,qCAAqC,EAAE,oCAAoC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1yC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAyD/B,aAAa,CAChB,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/plugin/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wHAAwH;AACxH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,qCAAqC,EAAE,MAAM,aAAa,CAAC;AAEpE,OAAO,EAAE,oCAAoC,EAAE,MAAM,YAAY,CAAC;AAElE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,ikCAAikC,EAAE,CAAC,qCAAqC,EAAE,oCAAoC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE1yC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAsD/B,aAAa,CAChB,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/skill/v1/command_connect.d.ts

@@ -54,12 +54,8 @@ export declare const SkillCommandController: {
         /**
          * Update the visibility of an existing skill.
          * Only modifies metadata.visibility, leaving spec, status, and other
-         * metadata fields untouched. Use this to make a skill publicly accessible
-         * or to revoke public access.
-         *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * metadata fields untouched. Use this to widen or narrow who can read
+         * the skill.
          *
          * @generated from rpc ai.stigmer.agentic.skill.v1.SkillCommandController.updateVisibility
          */

package/ai/stigmer/agentic/skill/v1/command_connect.js

@@ -62,12 +62,8 @@ export const SkillCommandController = {
         /**
          * Update the visibility of an existing skill.
          * Only modifies metadata.visibility, leaving spec, status, and other
-         * metadata fields untouched. Use this to make a skill publicly accessible
-         * or to revoke public access.
-         *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * metadata fields untouched. Use this to widen or narrow who can read
+         * the skill.
          *
          * @generated from rpc ai.stigmer.agentic.skill.v1.SkillCommandController.updateVisibility
          */

package/ai/stigmer/agentic/skill/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/skill/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,mCAAmC,EAAE,qCAAqC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1J,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;;;WAMG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,mCAAmC;YACtC,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,qCAAqC;YACxC,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/skill/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,mCAAmC,EAAE,qCAAqC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1J,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,oDAAoD;IAC9D,OAAO,EAAE;QACP;;;;;;WAMG;QACH,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;WAYG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,mCAAmC;YACtC,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;WAMG;QACH,yBAAyB,EAAE;YACzB,IAAI,EAAE,2BAA2B;YACjC,CAAC,EAAE,qCAAqC;YACxC,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;WAOG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/skill/v1/command_pb.d.ts

@@ -57,12 +57,8 @@ export declare const SkillCommandController: GenService<{
     /**
      * Update the visibility of an existing skill.
      * Only modifies metadata.visibility, leaving spec, status, and other
-     * metadata fields untouched. Use this to make a skill publicly accessible
-     * or to revoke public access.
-     *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
+     * metadata fields untouched. Use this to widen or narrow who can read
+     * the skill.
      *
      * @generated from rpc ai.stigmer.agentic.skill.v1.SkillCommandController.updateVisibility
      */

package/ai/stigmer/agentic/skill/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/skill/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,qyCAAqyC,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5gD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAsE9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/skill/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sHAAsH;AACtH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oCAAoC,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,qyCAAqyC,EAAE,CAAC,oCAAoC,EAAE,mCAAmC,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5gD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAkE9B,aAAa,CAChB,WAAW,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflow/v1/command_connect.d.ts

@@ -44,12 +44,12 @@ export declare const WorkflowCommandController: {
          *
          * This is a targeted metadata update — it only modifies metadata.visibility,
          * leaving spec, status, and other metadata fields untouched. Use this to
-         * make a workflow publicly accessible or to revoke public access without
-         * sending the entire workflow resource (avoiding read-modify-write races).
+         * widen or narrow who can read the workflow without sending the entire
+         * workflow resource (avoiding read-modify-write races).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * Raising the level is refused while an agent an agent_call task names is
+         * less visible than the requested level: what a person can run they must
+         * also be able to read.
          *
          * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.updateVisibility
          */

package/ai/stigmer/agentic/workflow/v1/command_connect.js

@@ -54,12 +54,12 @@ export const WorkflowCommandController = {
          *
          * This is a targeted metadata update — it only modifies metadata.visibility,
          * leaving spec, status, and other metadata fields untouched. Use this to
-         * make a workflow publicly accessible or to revoke public access without
-         * sending the entire workflow resource (avoiding read-modify-write races).
+         * widen or narrow who can read the workflow without sending the entire
+         * workflow resource (avoiding read-modify-write races).
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
+         * Raising the level is refused while an agent an agent_call task names is
+         * less visible than the requested level: what a person can run they must
+         * also be able to read.
          *
          * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.updateVisibility
          */

package/ai/stigmer/agentic/workflow/v1/command_pb.d.ts

@@ -49,12 +49,12 @@ export declare const WorkflowCommandController: GenService<{
      *
      * This is a targeted metadata update — it only modifies metadata.visibility,
      * leaving spec, status, and other metadata fields untouched. Use this to
-     * make a workflow publicly accessible or to revoke public access without
-     * sending the entire workflow resource (avoiding read-modify-write races).
+     * widen or narrow who can read the workflow without sending the entire
+     * workflow resource (avoiding read-modify-write races).
      *
-     * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-     * every org boundary, so it is granted by the platform team on request.
-     * Un-publishing and all other levels stay self-service.
+     * Raising the level is refused while an agent an agent_call task names is
+     * less visible than the requested level: what a person can run they must
+     * also be able to read.
      *
      * @generated from rpc ai.stigmer.agentic.workflow.v1.WorkflowCommandController.updateVisibility
      */

package/ai/stigmer/agentic/workflow/v1/tasks/agent_call_pb.d.ts

@@ -16,10 +16,15 @@ export declare const file_ai_stigmer_agentic_workflow_v1_tasks_agent_call: GenFi
  */
 export type AgentCallTaskConfig = Message<"ai.stigmer.agentic.workflow.v1.tasks.AgentCallTaskConfig"> & {
     /**
-     * Agent reference in "org/slug" or "slug" format.
-     * - "slug" only: uses the workflow's organization
-     * - "org/slug": explicit organization reference
-     * Examples: "code-reviewer", "stigmer/code-reviewer", "acme/data-analyst"
+     * Agent to invoke, as "slug", "org/slug", or a value holding a runtime expression.
+     * - "slug": an agent of the organization the workflow runs in; checked when the
+     *   workflow is saved, against the workflow's own organization
+     * - "org/slug": that organization's agent; checked when the workflow is saved,
+     *   and another organization's agent must be shared at platform visibility
+     * - a value holding "${ ... }", "${.env_vars.KEY}" or "${.secrets.KEY}": resolved
+     *   to "slug" or "org/slug" when the task runs, and read as the person who ran
+     *   the workflow
+     * Examples: "code-reviewer", "acme/data-analyst", "${.env_vars.TEAM_ORG}/assistant"
      * Required field.
      *
      * @generated from field: string agent = 1;

package/ai/stigmer/agentic/workflow/v1/tasks/agent_call_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent_call_pb.js","sourceRoot":"","sources":["../../../../../../../ai/stigmer/agentic/workflow/v1/tasks/agent_call_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2IAA2I;AAC3I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oDAAoD,EAAE,MAAM,6CAA6C,CAAC;AAEnH,OAAO,EAAE,uCAAuC,EAAE,MAAM,gCAAgC,CAAC;AAEzF,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AAEnG,OAAO,EAAE,gDAAgD,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,iDAAiD,EAAE,MAAM,qDAAqD,CAAC;AAExH,OAAO,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,oDAAoD,GAAY,aAAa,CACxF,QAAQ,CAAC,01CAA01C,EAAE,CAAC,oDAAoD,EAAE,uCAAuC,EAAE,4CAA4C,EAAE,gDAAgD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AA+G5rD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC;AA0GvE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"agent_call_pb.js","sourceRoot":"","sources":["../../../../../../../ai/stigmer/agentic/workflow/v1/tasks/agent_call_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2IAA2I;AAC3I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oDAAoD,EAAE,MAAM,6CAA6C,CAAC;AAEnH,OAAO,EAAE,uCAAuC,EAAE,MAAM,gCAAgC,CAAC;AAEzF,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AAEnG,OAAO,EAAE,gDAAgD,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,iDAAiD,EAAE,MAAM,qDAAqD,CAAC;AAExH,OAAO,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,oDAAoD,GAAY,aAAa,CACxF,QAAQ,CAAC,01CAA01C,EAAE,CAAC,oDAAoD,EAAE,uCAAuC,EAAE,4CAA4C,EAAE,gDAAgD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAoH5rD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC;AA0GvE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflowinstance/v1/command_connect.d.ts

@@ -42,19 +42,15 @@ export declare const WorkflowInstanceCommandController: {
         /**
          * Update the visibility of an existing workflow instance.
          *
-         * Changes who can view this instance and its executions. Supports the full
-         * visibility spectrum: PRIVATE (owner only), ORG (all org members), or
-         * PUBLIC (all authenticated users).
+         * Changes who can view this instance and its executions. Supports PRIVATE
+         * (owner only) and ORG (all org members); instances never take the
+         * platform level (tenant isolation).
          *
          * For workflow instances, visibility has cascading effects on execution
          * observability: workflow executions inherit visibility from their parent
          * instance via FGA. An ORG-visible instance means all org members can see
          * all executions — zero per-execution tuples needed.
          *
-         * In the cloud edition, PUBLIC is operator-gated: public listing crosses
-         * every org boundary, so it is granted by the platform team on request.
-         * Un-publishing and all other levels stay self-service.
-         *
          * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateVisibility
          */
         readonly updateVisibility: {
@@ -72,7 +68,7 @@ export declare const WorkflowInstanceCommandController: {
          * other users' run history — that requires this opt-in.
          *
          * Supported levels: PRIVATE (only the user who ran each execution) and
-         * ORGANIZATION (all org members). Public/platform are unsupported.
+         * ORGANIZATION (all org members). Platform is unsupported.
          *
          * @generated from rpc ai.stigmer.agentic.workflowinstance.v1.WorkflowInstanceCommandController.updateExecutionVisibility
          */