@stigmer/protos 3.23.1-dev.20260923075205 → 3.25.0

package/ai/stigmer/agentic/workflow/v1/tasks/agent_call_pb.d.ts

@@ -16,10 +16,15 @@ export declare const file_ai_stigmer_agentic_workflow_v1_tasks_agent_call: GenFi
  */
 export type AgentCallTaskConfig = Message<"ai.stigmer.agentic.workflow.v1.tasks.AgentCallTaskConfig"> & {
     /**
-     * Agent reference in "org/slug" or "slug" format.
-     * - "slug" only: uses the workflow's organization
-     * - "org/slug": explicit organization reference
-     * Examples: "code-reviewer", "stigmer/code-reviewer", "acme/data-analyst"
+     * Agent to invoke, as "slug", "org/slug", or a value holding a runtime expression.
+     * - "slug": an agent of the organization the workflow runs in; checked when the
+     *   workflow is saved, against the workflow's own organization
+     * - "org/slug": that organization's agent; checked when the workflow is saved,
+     *   and another organization's agent must be shared at platform visibility
+     * - a value holding "${ ... }", "${.env_vars.KEY}" or "${.secrets.KEY}": resolved
+     *   to "slug" or "org/slug" when the task runs, and read as the person who ran
+     *   the workflow
+     * Examples: "code-reviewer", "acme/data-analyst", "${.env_vars.TEAM_ORG}/assistant"
      * Required field.
      *
      * @generated from field: string agent = 1;

package/ai/stigmer/agentic/workflow/v1/tasks/agent_call_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent_call_pb.js","sourceRoot":"","sources":["../../../../../../../ai/stigmer/agentic/workflow/v1/tasks/agent_call_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2IAA2I;AAC3I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oDAAoD,EAAE,MAAM,6CAA6C,CAAC;AAEnH,OAAO,EAAE,uCAAuC,EAAE,MAAM,gCAAgC,CAAC;AAEzF,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AAEnG,OAAO,EAAE,gDAAgD,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,iDAAiD,EAAE,MAAM,qDAAqD,CAAC;AAExH,OAAO,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,oDAAoD,GAAY,aAAa,CACxF,QAAQ,CAAC,01CAA01C,EAAE,CAAC,oDAAoD,EAAE,uCAAuC,EAAE,4CAA4C,EAAE,gDAAgD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AA+G5rD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC;AA0GvE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"agent_call_pb.js","sourceRoot":"","sources":["../../../../../../../ai/stigmer/agentic/workflow/v1/tasks/agent_call_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2IAA2I;AAC3I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,oDAAoD,EAAE,MAAM,6CAA6C,CAAC;AAEnH,OAAO,EAAE,uCAAuC,EAAE,MAAM,gCAAgC,CAAC;AAEzF,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AAEnG,OAAO,EAAE,gDAAgD,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,iDAAiD,EAAE,MAAM,qDAAqD,CAAC;AAExH,OAAO,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,oDAAoD,GAAY,aAAa,CACxF,QAAQ,CAAC,01CAA01C,EAAE,CAAC,oDAAoD,EAAE,uCAAuC,EAAE,4CAA4C,EAAE,gDAAgD,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAoH5rD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC;AA0GvE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.js

@@ -8,7 +8,7 @@ import { file_google_protobuf_descriptor } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind.proto.
  */
-export const file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_group, file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, file_google_protobuf_descriptor]);
+export const file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_kind = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_apiresourcekind_api_resource_group, file_ai_stigmer_commons_apiresource_apiresourcekind_authorization_config, file_google_protobuf_descriptor]);
 /**
  * Describes the message ai.stigmer.commons.apiresource.apiresourcekind.ApiResourceKindMeta.
  * Use `create(ApiResourceKindMetaSchema)` to create a new message.

package/ai/stigmer/commons/apiresource/metadata_pb.d.ts

@@ -50,8 +50,8 @@ export type ApiResourceMetadata = Message<"ai.stigmer.commons.apiresource.ApiRes
     /**
      * Organization that owns this resource.
      * In Local Mode: the CLI resolves it (the --org flag, then STIGMER_ORG_ID,
-     * then the configured context); the CLI's bootstrap creates the "stigmer"
-     * organization on every start and installs the default plugins into it.
+     * then the configured context, then the "stigmer" organization, which the
+     * CLI's bootstrap creates).
      * In Cloud Mode: Required and enforced by the Authorization Service.
      * All resources belong to exactly one organization.
      *

package/ai/stigmer/iam/identityaccount/v1/enum_pb.d.ts

@@ -37,10 +37,11 @@ export declare enum IdentityAccountProvisioningMode {
      * Account provisioned via a PlatformClient's mintUserToken endpoint.
      *
      * The idp_id for these accounts uses the composite encoding
-     * "stgm_pc|{platform_client_id}|{external_user_id}", where platform_client_id
-     * is the PlatformClient's permanent client_id (stgm_cid_*) and external_user_id
-     * is the user identifier supplied by the platform builder. The composite is
-     * globally unique by construction — no additional scope field is needed.
+     * "stgm_pc|{org}|{external_user_id}", where org is the owning organization of
+     * the PlatformClient that minted the token and external_user_id is the user
+     * identifier supplied by the platform builder. Every PlatformClient of one
+     * organization therefore resolves the same user to the same account. The
+     * "stgm_pc|" prefix is reserved: no other provisioning mode may use it.
      *
      * Unlike federated accounts, PlatformClient is not an ongoing authentication
      * authority. Stigmer signs its own JWTs for these users; the PlatformClient

package/ai/stigmer/iam/identityaccount/v1/enum_pb.js

@@ -41,10 +41,11 @@ export var IdentityAccountProvisioningMode;
      * Account provisioned via a PlatformClient's mintUserToken endpoint.
      *
      * The idp_id for these accounts uses the composite encoding
-     * "stgm_pc|{platform_client_id}|{external_user_id}", where platform_client_id
-     * is the PlatformClient's permanent client_id (stgm_cid_*) and external_user_id
-     * is the user identifier supplied by the platform builder. The composite is
-     * globally unique by construction — no additional scope field is needed.
+     * "stgm_pc|{org}|{external_user_id}", where org is the owning organization of
+     * the PlatformClient that minted the token and external_user_id is the user
+     * identifier supplied by the platform builder. Every PlatformClient of one
+     * organization therefore resolves the same user to the same account. The
+     * "stgm_pc|" prefix is reserved: no other provisioning mode may use it.
      *
      * Unlike federated accounts, PlatformClient is not an ongoing authentication
      * authority. Stigmer signs its own JWTs for these users; the PlatformClient

package/ai/stigmer/iam/identityaccount/v1/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,gUAAgU,CAAC,CAAC;AAE7U;;;;GAIG;AACH,MAAM,CAAN,IAAY,+BA6CX;AA7CD,WAAY,+BAA+B;IACzC;;;;OAIG;IACH,yKAAkD,CAAA;IAElD;;;;OAIG;IACH,yFAAU,CAAA;IAEV;;;;OAIG;IACH,+FAAa,CAAA;IAEb;;;;OAIG;IACH,2FAAW,CAAA;IAEX;;;;;;;;;;;;;;OAcG;IACH,2GAAmB,CAAA;AACrB,CAAC,EA7CW,+BAA+B,KAA/B,+BAA+B,QA6C1C;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAA6C,aAAa,CAC1G,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,gUAAgU,CAAC,CAAC;AAE7U;;;;GAIG;AACH,MAAM,CAAN,IAAY,+BA8CX;AA9CD,WAAY,+BAA+B;IACzC;;;;OAIG;IACH,yKAAkD,CAAA;IAElD;;;;OAIG;IACH,yFAAU,CAAA;IAEV;;;;OAIG;IACH,+FAAa,CAAA;IAEb;;;;OAIG;IACH,2FAAW,CAAA;IAEX;;;;;;;;;;;;;;;OAeG;IACH,2GAAmB,CAAA;AACrB,CAAC,EA9CW,+BAA+B,KAA/B,+BAA+B,QA8C1C;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAA6C,aAAa,CAC1G,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/platformclient/v1/command_connect.d.ts

@@ -36,10 +36,10 @@ export declare const PlatformClientCommandController: {
         /**
          * Update an existing platform client.
          *
-         * Only mutable fields can be changed: auto_provision_accounts, auto_grant_on_org,
-         * auto_grant_role, and allowed_origins. Credential fields (client_id,
-         * client_secret_hash, secret_fingerprint) are immutable after creation.
-         * Use rotateSecret to change the client secret.
+         * The name, labels and every spec field can be changed except the
+         * credential fields (client_id, client_secret_hash, secret_fingerprint),
+         * which are kept from the stored client. Use rotateSecret to change the
+         * client secret. A system-managed client cannot be updated.
          *
          * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientCommandController.update
          */
@@ -72,7 +72,9 @@ export declare const PlatformClientCommandController: {
          * Generates a new client_secret, invalidates the old one immediately,
          * and returns the new raw secret in the response. The client_id remains
          * unchanged — platform builders do not need to update their client_id
-         * configuration after rotation.
+         * configuration after rotation. Tokens already minted stay valid until they
+         * expire; delete the client to revoke them. A system-managed client's
+         * secret cannot be rotated.
          *
          * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientCommandController.rotateSecret
          */

package/ai/stigmer/iam/platformclient/v1/command_connect.js

@@ -44,10 +44,10 @@ export const PlatformClientCommandController = {
         /**
          * Update an existing platform client.
          *
-         * Only mutable fields can be changed: auto_provision_accounts, auto_grant_on_org,
-         * auto_grant_role, and allowed_origins. Credential fields (client_id,
-         * client_secret_hash, secret_fingerprint) are immutable after creation.
-         * Use rotateSecret to change the client secret.
+         * The name, labels and every spec field can be changed except the
+         * credential fields (client_id, client_secret_hash, secret_fingerprint),
+         * which are kept from the stored client. Use rotateSecret to change the
+         * client secret. A system-managed client cannot be updated.
          *
          * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientCommandController.update
          */
@@ -80,7 +80,9 @@ export const PlatformClientCommandController = {
          * Generates a new client_secret, invalidates the old one immediately,
          * and returns the new raw secret in the response. The client_id remains
          * unchanged — platform builders do not need to update their client_id
-         * configuration after rotation.
+         * configuration after rotation. Tokens already minted stay valid until they
+         * expire; delete the client to revoke them. A system-managed client's
+         * secret cannot be rotated.
          *
          * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientCommandController.rotateSecret
          */

package/ai/stigmer/iam/platformclient/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;WAeG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;WAeG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;WASG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;WAUG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,sBAAsB;YACzB,CAAC,EAAE,cAAc;YACjB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;WAWG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,4BAA4B;YAC/B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/iam/platformclient/v1/command_pb.d.ts

@@ -41,10 +41,10 @@ export declare const PlatformClientCommandController: GenService<{
     /**
      * Update an existing platform client.
      *
-     * Only mutable fields can be changed: auto_provision_accounts, auto_grant_on_org,
-     * auto_grant_role, and allowed_origins. Credential fields (client_id,
-     * client_secret_hash, secret_fingerprint) are immutable after creation.
-     * Use rotateSecret to change the client secret.
+     * The name, labels and every spec field can be changed except the
+     * credential fields (client_id, client_secret_hash, secret_fingerprint),
+     * which are kept from the stored client. Use rotateSecret to change the
+     * client secret. A system-managed client cannot be updated.
      *
      * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientCommandController.update
      */
@@ -75,7 +75,9 @@ export declare const PlatformClientCommandController: GenService<{
      * Generates a new client_secret, invalidates the old one immediately,
      * and returns the new raw secret in the response. The client_id remains
      * unchanged — platform builders do not need to update their client_id
-     * configuration after rotation.
+     * configuration after rotation. Tokens already minted stay valid until they
+     * expire; delete the client to revoke them. A system-managed client's
+     * secret cannot be rotated.
      *
      * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientCommandController.rotateSecret
      */

package/ai/stigmer/iam/platformclient/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAEtE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,yqCAAyqC,EAAE,CAAC,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,EAAE,yCAAyC,EAAE,wCAAwC,CAAC,CAAC,CAAC;AAE15C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAoEvC,aAAa,CAChB,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,yCAAyC,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAEtE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,yqCAAyqC,EAAE,CAAC,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,EAAE,yCAAyC,EAAE,wCAAwC,CAAC,CAAC,CAAC;AAE15C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAsEvC,aAAa,CAChB,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/platformclient/v1/query_connect.d.ts

@@ -34,8 +34,8 @@ export declare const PlatformClientQueryController: {
         /**
          * List all platform clients belonging to an organization.
          *
-         * Returns every PlatformClient whose metadata.org matches the input org.
-         * Typically a small set per org, so results are not paginated.
+         * Returns the PlatformClients of the input org that the caller may view,
+         * newest first. Typically a small set per org, so results are not paginated.
          *
          * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientQueryController.listByOrg
          */

package/ai/stigmer/iam/platformclient/v1/query_connect.js

@@ -42,8 +42,8 @@ export const PlatformClientQueryController = {
         /**
          * List all platform clients belonging to an organization.
          *
-         * Returns every PlatformClient whose metadata.org matches the input org.
-         * Typically a small set per org, so results are not paginated.
+         * Returns the PlatformClients of the input org that the caller may view,
+         * newest first. Typically a small set per org, so results are not paginated.
          *
          * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientQueryController.listByOrg
          */

package/ai/stigmer/iam/platformclient/v1/query_pb.d.ts

@@ -38,8 +38,8 @@ export declare const PlatformClientQueryController: GenService<{
     /**
      * List all platform clients belonging to an organization.
      *
-     * Returns every PlatformClient whose metadata.org matches the input org.
-     * Typically a small set per org, so results are not paginated.
+     * Returns the PlatformClients of the input org that the caller may view,
+     * newest first. Typically a small set per org, so results are not paginated.
      *
      * @generated from rpc ai.stigmer.iam.platformclient.v1.PlatformClientQueryController.listByOrg
      */

package/ai/stigmer/iam/platformclient/v1/spec_pb.d.ts

@@ -42,29 +42,16 @@ export declare const file_ai_stigmer_iam_platformclient_v1_spec: GenFile;
  *      auto_grant_on_org and auto_grant_role.
  *
  *   3. JIT + Auto-Grant: When both auto_provision_accounts and auto_grant_on_org are
- *      true, newly provisioned accounts are immediately granted auto_grant_role on
- *      the PlatformClient's owning organization.
- *
- * Example YAML:
- *   apiVersion: iam.stigmer.ai/v1
- *   kind: PlatformClient
- *   metadata:
- *     name: Acme Dashboard
- *     slug: acme-dashboard
- *     org: acme
- *   spec:
- *     auto_provision_accounts: true
- *     auto_grant_on_org: true
- *     auto_grant_role: viewer
- *     allowed_origins: ["https://app.acme.com"]
+ *      true, newly provisioned accounts are granted auto_grant_role on the
+ *      PlatformClient's owning organization.
  *
  * @generated from message ai.stigmer.iam.platformclient.v1.PlatformClientSpec
  */
 export type PlatformClientSpec = Message<"ai.stigmer.iam.platformclient.v1.PlatformClientSpec"> & {
     /**
      * OAuth client identifier.
-     * Generated on creation with the prefix "stgm_cid_" followed by 32 random
-     * alphanumeric characters. Permanent across secret rotations — safe for logs,
+     * Generated on creation with the prefix "stgm_cid_" followed by 43 random
+     * URL-safe characters. Permanent across secret rotations — safe for logs,
      * configuration files, and client-side code.
      *
      * @generated from field: string client_id = 1;
@@ -122,7 +109,9 @@ export type PlatformClientSpec = Message<"ai.stigmer.iam.platformclient.v1.Platf
      * access. The platform must create IAM policies to grant access.
      *
      * When true, Stigmer grants auto_grant_role (default: viewer) on the
-     * PlatformClient's owning organization immediately after account creation.
+     * PlatformClient's owning organization to every account it provisions.
+     * Accounts that already exist keep the roles they hold: changing this
+     * setting or auto_grant_role later does not reach them.
      *
      * Requires auto_provision_accounts to be true.
      *
@@ -142,7 +131,7 @@ export type PlatformClientSpec = Message<"ai.stigmer.iam.platformclient.v1.Platf
     autoGrantRole: IamRole;
     /**
      * Web origins allowed for browser-based requests using tokens minted by
-     * this PlatformClient (Stigmer Cloud).
+     * this PlatformClient.
      *
      * Enforced on every API request bearing a user token minted by this
      * client (never on mintUserToken itself — minting is server-to-server and
@@ -160,8 +149,8 @@ export type PlatformClientSpec = Message<"ai.stigmer.iam.platformclient.v1.Platf
      *     browser context; the client_secret remains the primary control,
      *     and non-browser callers are not constrained by it.
      *
-     * Edits propagate immediately: the enforcement cache is evicted on every
-     * PlatformClient update.
+     * Edits apply to the next request: the client is read on every request
+     * that bears one of its tokens.
      *
      * @generated from field: repeated string allowed_origins = 9;
      */

package/ai/stigmer/iam/platformclient/v1/spec_pb.js

@@ -10,7 +10,7 @@ import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/iam/platformclient/v1/spec.proto.
  */
-export const file_ai_stigmer_iam_platformclient_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_iam_v1_enum, file_buf_validate_validate, file_google_protobuf_timestamp]);
+export const file_ai_stigmer_iam_platformclient_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_iam_v1_enum, file_buf_validate_validate, file_google_protobuf_timestamp]);
 /**
  * Describes the message ai.stigmer.iam.platformclient.v1.PlatformClientSpec.
  * Use `create(PlatformClientSpecSchema)` to create a new message.

package/ai/stigmer/iam/platformclient/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAE/F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,szBAAszB,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAuLz/B;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAE/F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAY,aAAa,CAC9E,QAAQ,CAAC,0zCAA0zC,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA4K7/C;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/platformclient/v1/token_connect.d.ts

@@ -7,14 +7,18 @@
  * of platform builder users, authenticated via PlatformClient credentials
  * (client_id + client_secret).
  *
- * The minted JWT is signed by Stigmer's own key pair (not Auth0). The auth
- * chain validates these tokens via a dedicated PlatformClientTokenAuthenticationProvider
- * that checks the Stigmer-issued signature and resolves the identity account.
+ * The minted JWT is signed by the server's own platform-token key, not by an
+ * external identity provider. The server verifies it on every request and
+ * refuses it once the PlatformClient that minted it is deleted. Minting
+ * requires a server that authenticates its callers; a server that trusts
+ * every request refuses it FAILED_PRECONDITION, because nothing would ever
+ * verify the token.
  *
  * mintGuestToken is the credential-free exception: no client_id/client_secret.
  * It mints a guest-scoped JWT for anonymous visitors of a shared agent's
  * hosted page, gated on an enabled public-audience AgentShare
- * (ai.stigmer.agentic.agentshare.v1).
+ * (ai.stigmer.agentic.agentshare.v1). Editions that do not host shared-agent
+ * pages answer it UNIMPLEMENTED.
  *
  * @generated from service ai.stigmer.iam.platformclient.v1.PlatformClientTokenController
  */
@@ -34,17 +38,18 @@ export declare const PlatformClientTokenController: {
          *
          * Authentication flow:
          * 1. Validate client_id + client_secret against stored hash
-         * 2. Resolve or JIT-provision the identity account for user_id
-         * 3. If auto_grant_on_org is enabled, grant the configured role
-         * 4. Sign a JWT with Stigmer's private key containing the user's identity
+         * 2. Resolve the identity account for user_id; on first use, provision it
+         *    (and grant auto_grant_role when auto_grant_on_org is enabled)
+         * 3. Sign a JWT with the server's platform-token key containing the user's identity
          *
          * Error scenarios:
          * - UNAUTHENTICATED: Invalid client_id or client_secret
          * - FAILED_PRECONDITION: user_id does not exist and auto_provision_accounts
-         *   is false, or the PlatformClient secret has expired
-         * - INTERNAL: Account provisioning could not be completed (for example, the
-         *   auto_grant_on_org role grant failed). No partial account is left behind
-         *   — the account is rolled back — so the request is safe to retry.
+         *   is false, the PlatformClient secret has expired, or the server does not
+         *   authenticate its callers
+         * - INTERNAL: Account provisioning could not be completed. No partial
+         *   account is left behind, so the request is safe to retry: a retry
+         *   completes the provisioning.
          *
          * Origin enforcement (spec.allowed_origins) does NOT apply to this call:
          * minting is server-to-server, so there is no browser Origin to check.

package/ai/stigmer/iam/platformclient/v1/token_connect.js

@@ -13,14 +13,18 @@ import { MethodKind } from "@bufbuild/protobuf";
  * of platform builder users, authenticated via PlatformClient credentials
  * (client_id + client_secret).
  *
- * The minted JWT is signed by Stigmer's own key pair (not Auth0). The auth
- * chain validates these tokens via a dedicated PlatformClientTokenAuthenticationProvider
- * that checks the Stigmer-issued signature and resolves the identity account.
+ * The minted JWT is signed by the server's own platform-token key, not by an
+ * external identity provider. The server verifies it on every request and
+ * refuses it once the PlatformClient that minted it is deleted. Minting
+ * requires a server that authenticates its callers; a server that trusts
+ * every request refuses it FAILED_PRECONDITION, because nothing would ever
+ * verify the token.
  *
  * mintGuestToken is the credential-free exception: no client_id/client_secret.
  * It mints a guest-scoped JWT for anonymous visitors of a shared agent's
  * hosted page, gated on an enabled public-audience AgentShare
- * (ai.stigmer.agentic.agentshare.v1).
+ * (ai.stigmer.agentic.agentshare.v1). Editions that do not host shared-agent
+ * pages answer it UNIMPLEMENTED.
  *
  * @generated from service ai.stigmer.iam.platformclient.v1.PlatformClientTokenController
  */
@@ -40,17 +44,18 @@ export const PlatformClientTokenController = {
          *
          * Authentication flow:
          * 1. Validate client_id + client_secret against stored hash
-         * 2. Resolve or JIT-provision the identity account for user_id
-         * 3. If auto_grant_on_org is enabled, grant the configured role
-         * 4. Sign a JWT with Stigmer's private key containing the user's identity
+         * 2. Resolve the identity account for user_id; on first use, provision it
+         *    (and grant auto_grant_role when auto_grant_on_org is enabled)
+         * 3. Sign a JWT with the server's platform-token key containing the user's identity
          *
          * Error scenarios:
          * - UNAUTHENTICATED: Invalid client_id or client_secret
          * - FAILED_PRECONDITION: user_id does not exist and auto_provision_accounts
-         *   is false, or the PlatformClient secret has expired
-         * - INTERNAL: Account provisioning could not be completed (for example, the
-         *   auto_grant_on_org role grant failed). No partial account is left behind
-         *   — the account is rolled back — so the request is safe to retry.
+         *   is false, the PlatformClient secret has expired, or the server does not
+         *   authenticate its callers
+         * - INTERNAL: Account provisioning could not be completed. No partial
+         *   account is left behind, so the request is safe to retry: a retry
+         *   completes the provisioning.
          *
          * Origin enforcement (spec.allowed_origins) does NOT apply to this call:
          * minting is server-to-server, so there is no browser Origin to check.

package/ai/stigmer/iam/platformclient/v1/token_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"token_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAiCG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"token_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAkCG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/iam/platformclient/v1/token_pb.d.ts

@@ -37,20 +37,23 @@ export type MintUserTokenRequest = Message<"ai.stigmer.iam.platformclient.v1.Min
      * Must be unique and stable within the org — the same user_id presented
      * via any PlatformClient in the same org resolves to the same identity.
      * Changing this value for the same user creates a new identity account.
+     * It must not contain the separator character '|'.
      *
      * @generated from field: string user_id = 3;
      */
     userId: string;
     /**
-     * User's email address. Used for profile enrichment when JIT-provisioning
-     * an identity account. Updated on each token mint if the account exists.
+     * User's email address, asserted by the platform. Used for profile
+     * enrichment when JIT-provisioning an identity account; later mints do not
+     * change the stored profile.
      *
      * @generated from field: string user_email = 4;
      */
     userEmail: string;
     /**
-     * User's display name. Used for profile enrichment when JIT-provisioning
-     * an identity account. Updated on each token mint if the account exists.
+     * User's display name, asserted by the platform. Used for profile
+     * enrichment when JIT-provisioning an identity account; later mints do not
+     * change the stored profile.
      *
      * @generated from field: string user_name = 5;
      */
@@ -207,14 +210,18 @@ export declare const MintGuestTokenResponseSchema: GenMessage<MintGuestTokenResp
  * of platform builder users, authenticated via PlatformClient credentials
  * (client_id + client_secret).
  *
- * The minted JWT is signed by Stigmer's own key pair (not Auth0). The auth
- * chain validates these tokens via a dedicated PlatformClientTokenAuthenticationProvider
- * that checks the Stigmer-issued signature and resolves the identity account.
+ * The minted JWT is signed by the server's own platform-token key, not by an
+ * external identity provider. The server verifies it on every request and
+ * refuses it once the PlatformClient that minted it is deleted. Minting
+ * requires a server that authenticates its callers; a server that trusts
+ * every request refuses it FAILED_PRECONDITION, because nothing would ever
+ * verify the token.
  *
  * mintGuestToken is the credential-free exception: no client_id/client_secret.
  * It mints a guest-scoped JWT for anonymous visitors of a shared agent's
  * hosted page, gated on an enabled public-audience AgentShare
- * (ai.stigmer.agentic.agentshare.v1).
+ * (ai.stigmer.agentic.agentshare.v1). Editions that do not host shared-agent
+ * pages answer it UNIMPLEMENTED.
  *
  * @generated from service ai.stigmer.iam.platformclient.v1.PlatformClientTokenController
  */
@@ -232,17 +239,18 @@ export declare const PlatformClientTokenController: GenService<{
      *
      * Authentication flow:
      * 1. Validate client_id + client_secret against stored hash
-     * 2. Resolve or JIT-provision the identity account for user_id
-     * 3. If auto_grant_on_org is enabled, grant the configured role
-     * 4. Sign a JWT with Stigmer's private key containing the user's identity
+     * 2. Resolve the identity account for user_id; on first use, provision it
+     *    (and grant auto_grant_role when auto_grant_on_org is enabled)
+     * 3. Sign a JWT with the server's platform-token key containing the user's identity
      *
      * Error scenarios:
      * - UNAUTHENTICATED: Invalid client_id or client_secret
      * - FAILED_PRECONDITION: user_id does not exist and auto_provision_accounts
-     *   is false, or the PlatformClient secret has expired
-     * - INTERNAL: Account provisioning could not be completed (for example, the
-     *   auto_grant_on_org role grant failed). No partial account is left behind
-     *   — the account is rolled back — so the request is safe to retry.
+     *   is false, the PlatformClient secret has expired, or the server does not
+     *   authenticate its callers
+     * - INTERNAL: Account provisioning could not be completed. No partial
+     *   account is left behind, so the request is safe to retry: a retry
+     *   completes the provisioning.
      *
      * Origin enforcement (spec.allowed_origins) does NOT apply to this call:
      * minting is server-to-server, so there is no browser Origin to check.

package/ai/stigmer/iam/platformclient/v1/token_pb.js

@@ -7,7 +7,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/iam/platformclient/v1/token.proto.
  */
-export const file_ai_stigmer_iam_platformclient_v1_token = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_rpc_method_options, file_buf_validate_validate]);
+export const file_ai_stigmer_iam_platformclient_v1_token = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_rpc_method_options, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.iam.platformclient.v1.MintUserTokenRequest.
  * Use `create(MintUserTokenRequestSchema)` to create a new message.
@@ -37,14 +37,18 @@ export const MintGuestTokenResponseSchema = /*@__PURE__*/ messageDesc(file_ai_st
  * of platform builder users, authenticated via PlatformClient credentials
  * (client_id + client_secret).
  *
- * The minted JWT is signed by Stigmer's own key pair (not Auth0). The auth
- * chain validates these tokens via a dedicated PlatformClientTokenAuthenticationProvider
- * that checks the Stigmer-issued signature and resolves the identity account.
+ * The minted JWT is signed by the server's own platform-token key, not by an
+ * external identity provider. The server verifies it on every request and
+ * refuses it once the PlatformClient that minted it is deleted. Minting
+ * requires a server that authenticates its callers; a server that trusts
+ * every request refuses it FAILED_PRECONDITION, because nothing would ever
+ * verify the token.
  *
  * mintGuestToken is the credential-free exception: no client_id/client_secret.
  * It mints a guest-scoped JWT for anonymous visitors of a shared agent's
  * hosted page, gated on an enabled public-audience AgentShare
- * (ai.stigmer.agentic.agentshare.v1).
+ * (ai.stigmer.agentic.agentshare.v1). Editions that do not host shared-agent
+ * pages answer it UNIMPLEMENTED.
  *
  * @generated from service ai.stigmer.iam.platformclient.v1.PlatformClientTokenController
  */

package/ai/stigmer/iam/platformclient/v1/token_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,omDAAomD,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwE3rD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAyD9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAwC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAsDrC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,koDAAkoD,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA2EztD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAyD9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAwC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAuDrC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/platform/v1/server_info_pb.d.ts

@@ -35,6 +35,22 @@ export type GetServerInfoOutput = Message<"ai.stigmer.platform.v1.GetServerInfoO
      * @generated from field: string version = 2;
      */
     version: string;
+    /**
+     * Whether the server authenticates its callers.
+     *
+     * False when the server trusts every request (no identity verifier is
+     * configured, the default single-operator posture). Features that hand out
+     * credentials only a verifying server honours — minting PlatformClient user
+     * tokens — are unavailable then.
+     *
+     * Every server that knows the field sets it, true or false. Absent means
+     * the server predates it and its posture is unknown: a client offers the
+     * feature and lets the server's own answer decide, rather than reading an
+     * older server as one that trusts every request.
+     *
+     * @generated from field: optional bool authentication_required = 3;
+     */
+    authenticationRequired?: boolean;
 };
 /**
  * Describes the message ai.stigmer.platform.v1.GetServerInfoOutput.

package/ai/stigmer/platform/v1/server_info_pb.js

@@ -9,7 +9,7 @@ import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
 /**
  * Describes the file ai/stigmer/platform/v1/server_info.proto.
  */
-export const file_ai_stigmer_platform_v1_server_info = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_rpc_method_options, file_ai_stigmer_platform_v1_license, file_buf_validate_validate, file_google_protobuf_timestamp]);
+export const file_ai_stigmer_platform_v1_server_info = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_rpc_method_options, file_ai_stigmer_platform_v1_license, file_buf_validate_validate, file_google_protobuf_timestamp]);
 /**
  * Describes the message ai.stigmer.platform.v1.GetServerInfoInput.
  * Use `create(GetServerInfoInputSchema)` to create a new message.

package/ai/stigmer/platform/v1/server_info_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"server_info_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/platform/v1/server_info_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gHAAgH;AAChH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,w5EAAw5E,EAAE,CAAC,0CAA0C,EAAE,mCAAmC,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAUpjF;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAuB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAU1D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AA6C1D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAW1D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAoG1D;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAwD1D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAsB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAwB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAsC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAN,IAAY,aAgCX;AAhCD,WAAY,aAAa;IACvB;;OAEG;IACH,6FAA8B,CAAA;IAE9B;;;;;OAKG;IACH,+CAAO,CAAA;IAEP;;;;;;OAMG;IACH,mDAAS,CAAA;IAET;;;;;;;OAOG;IACH,6DAAc,CAAA;AAChB,CAAC,EAhCW,aAAa,KAAb,aAAa,QAgCxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAwF/B,aAAa,CAChB,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"server_info_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/platform/v1/server_info_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gHAAgH;AAChH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAY,aAAa,CAC3E,QAAQ,CAAC,i/EAAi/E,EAAE,CAAC,0CAA0C,EAAE,mCAAmC,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAU7oF;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAwC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAU1D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AA6C1D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAW1D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAoG1D;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAA+C,aAAa,CAC3G,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAwD1D;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAsB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAwB1D;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAsC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAN,IAAY,aAgCX;AAhCD,WAAY,aAAa;IACvB;;OAEG;IACH,6FAA8B,CAAA;IAE9B;;;;;OAKG;IACH,+CAAO,CAAA;IAEP;;;;;;OAMG;IACH,mDAAS,CAAA;IAET;;;;;;;OAOG;IACH,6DAAc,CAAA;AAChB,CAAC,EAhCW,aAAa,KAAb,aAAa,QAgCxB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B,aAAa,CACtE,QAAQ,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAwF/B,aAAa,CAChB,WAAW,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/protos",
-  "version": "3.23.1-dev.20260923075205",
+  "version": "3.25.0",
   "description": "Generated TypeScript protobuf stubs for Stigmer APIs",
   "license": "Apache-2.0",
   "type": "module",