@stigmer/protos 3.34.0 → 3.35.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -7,6 +7,10 @@ export declare const file_ai_stigmer_agentic_workflow_v1_tasks_run: GenFile;
7
7
  /**
8
8
  * RunTaskConfig defines the configuration for run_workflow tasks that execute sub-workflows.
9
9
  *
10
+ * The run_workflow kind is not supported yet: a Workflow that contains one is
11
+ * refused when it is saved, because nothing resolves the child name to a
12
+ * Workflow the platform can run.
13
+ *
10
14
  * @generated from message ai.stigmer.agentic.workflow.v1.tasks.RunTaskConfig
11
15
  */
12
16
  export type RunTaskConfig = Message<"ai.stigmer.agentic.workflow.v1.tasks.RunTaskConfig"> & {
@@ -19,7 +23,6 @@ export type RunTaskConfig = Message<"ai.stigmer.agentic.workflow.v1.tasks.RunTas
19
23
  /**
20
24
  * Sub-workflow input (optional).
21
25
  * Can be any JSON structure.
22
- * Supports expressions in string values.
23
26
  *
24
27
  * @generated from field: google.protobuf.Struct input = 2;
25
28
  */
@@ -1 +1 @@
1
- {"version":3,"file":"run_pb.js","sourceRoot":"","sources":["../../../../../../../ai/stigmer/agentic/workflow/v1/tasks/run_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,qDAAqD,CAAC;AACxH,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,4QAA4Q,EAAE,CAAC,iDAAiD,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAyBvY;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
1
+ {"version":3,"file":"run_pb.js","sourceRoot":"","sources":["../../../../../../../ai/stigmer/agentic/workflow/v1/tasks/run_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oIAAoI;AACpI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,qDAAqD,CAAC;AACxH,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAY,aAAa,CACjF,QAAQ,CAAC,4QAA4Q,EAAE,CAAC,iDAAiD,EAAE,0BAA0B,EAAE,2BAA2B,CAAC,CAAC,CAAC;AA4BvY;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC"}
@@ -24,9 +24,9 @@ export declare const file_ai_stigmer_iam_identityprovider_v1_api: GenFile;
24
24
  * org: planton
25
25
  * spec:
26
26
  * display_name: "Planton"
27
- * jwks_uri: "https://api.planton.ai/.well-known/stigmer-jwks.json"
28
- * allowed_issuers: ["planton"]
29
- * expected_audience: "stigmer-api"
27
+ * jwks_uri: "https://planton-prod.us.auth0.com/.well-known/jwks.json"
28
+ * allowed_issuers: ["https://planton-prod.us.auth0.com/"]
29
+ * expected_audience: "https://api.planton.ai/"
30
30
  *
31
31
  * @generated from message ai.stigmer.iam.identityprovider.v1.IdentityProvider
32
32
  */
@@ -59,7 +59,7 @@ export declare const file_ai_stigmer_iam_identityprovider_v1_spec: GenFile;
59
59
  * display_name: "Acme Platform"
60
60
  * jwks_uri: "https://auth.acme.com/.well-known/jwks.json"
61
61
  * allowed_issuers: ["https://auth.acme.com/"]
62
- * expected_audience: "stigmer-api"
62
+ * expected_audience: "https://api.acme.com/stigmer"
63
63
  * userinfo_endpoint: "https://auth.acme.com/userinfo"
64
64
  * auto_provision_accounts: true
65
65
  * auto_grant_on_org: true
@@ -75,7 +75,7 @@ export declare const file_ai_stigmer_iam_identityprovider_v1_spec: GenFile;
75
75
  * display_name: "SaaS Platform"
76
76
  * jwks_uri: "https://auth.saas.co/.well-known/jwks.json"
77
77
  * allowed_issuers: ["https://auth.saas.co/"]
78
- * expected_audience: "stigmer-api"
78
+ * expected_audience: "https://api.saas.co/stigmer"
79
79
  * userinfo_endpoint: "https://auth.saas.co/userinfo"
80
80
  * auto_provision_accounts: true
81
81
  * auto_grant_on_org: true
@@ -93,7 +93,7 @@ export declare const file_ai_stigmer_iam_identityprovider_v1_spec: GenFile;
93
93
  * display_name: "Acme Corp Okta"
94
94
  * jwks_uri: "https://acme.okta.com/oauth2/default/v1/keys"
95
95
  * allowed_issuers: ["https://acme.okta.com/oauth2/default"]
96
- * expected_audience: "stigmer-api"
96
+ * expected_audience: "api://acme-stigmer"
97
97
  * is_sso_provider: true
98
98
  * oidc_client_id: "0oa1bcdef2ghijk3lmno"
99
99
  *
@@ -115,6 +115,9 @@ export type IdentityProviderSpec = Message<"ai.stigmer.iam.identityprovider.v1.I
115
115
  *
116
116
  * This is the standard "jwks_uri" metadata field defined in
117
117
  * OpenID Connect Discovery 1.0 (Section 3) and RFC 7517 (JSON Web Key Set).
118
+ * It must be the jwks_uri that the discovery document of every allowed
119
+ * issuer names, so that only an issuer's own keys verify its tokens.
120
+ * Required when allowed_issuers names an issuer.
118
121
  *
119
122
  * @generated from field: string jwks_uri = 2;
120
123
  */
@@ -126,6 +129,13 @@ export type IdentityProviderSpec = Message<"ai.stigmer.iam.identityprovider.v1.I
126
129
  * (e.g., "https://planton-prod.us.auth0.com/").
127
130
  * Supports multiple values for key rotation or multi-environment scenarios.
128
131
  *
132
+ * Each issuer must publish an OpenID Connect Discovery document whose
133
+ * `issuer` equals it. An issuer and expected_audience together identify
134
+ * this provider: no two identity providers share an issuer and audience
135
+ * pair, so organizations that federate with the same issuer each register
136
+ * an audience of their own. The issuer a deployment signs its own users in
137
+ * with cannot be registered.
138
+ *
129
139
  * @generated from field: repeated string allowed_issuers = 3;
130
140
  */
131
141
  allowedIssuers: string[];
@@ -136,6 +146,14 @@ export type IdentityProviderSpec = Message<"ai.stigmer.iam.identityprovider.v1.I
136
146
  * (e.g., "https://api.planton.ai/").
137
147
  * Prevents tokens intended for other services from being accepted by Stigmer.
138
148
  *
149
+ * Required. Register an audience for Stigmer at the issuer that is your
150
+ * organization's own, such as an API identifier or a client ID: a token is
151
+ * routed to the identity provider whose issuer and audience it carries, so
152
+ * an audience another identity provider already registered at the same
153
+ * issuer is refused. It cannot be a URL the issuer's discovery document
154
+ * names, such as its userinfo endpoint, which the issuer may add to every
155
+ * token it mints.
156
+ *
139
157
  * @generated from field: string expected_audience = 4;
140
158
  */
141
159
  expectedAudience: string;
@@ -158,6 +176,9 @@ export type IdentityProviderSpec = Message<"ai.stigmer.iam.identityprovider.v1.I
158
176
  *
159
177
  * For Auth0-based integrators: https://{tenant}.auth0.com/userinfo
160
178
  *
179
+ * When set, it must be the userinfo_endpoint that the discovery document of
180
+ * every allowed issuer names.
181
+ *
161
182
  * @generated from field: string userinfo_endpoint = 6;
162
183
  */
163
184
  userinfoEndpoint: string;
@@ -7,7 +7,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
7
7
  /**
8
8
  * Describes the file ai/stigmer/iam/identityprovider/v1/spec.proto.
9
9
  */
10
- export const file_ai_stigmer_iam_identityprovider_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_iam_v1_enum, file_buf_validate_validate]);
10
+ export const file_ai_stigmer_iam_identityprovider_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_iam_v1_enum, file_buf_validate_validate]);
11
11
  /**
12
12
  * Describes the message ai.stigmer.iam.identityprovider.v1.IdentityProviderSpec.
13
13
  * Use `create(IdentityProviderSpecSchema)` to create a new message.
@@ -1 +1 @@
1
- {"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityprovider/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,y4BAAy4B,EAAE,CAAC,2BAA2B,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAuTj9B;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
1
+ {"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityprovider/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,soCAAsoC,EAAE,CAAC,2BAA2B,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA4U9sC;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@stigmer/protos",
3
- "version": "3.34.0",
3
+ "version": "3.35.0",
4
4
  "description": "Generated TypeScript protobuf stubs for Stigmer APIs",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",