@stigmer/protos 3.40.1 → 3.41.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. package/ai/stigmer/agentic/agent/v1/command_pb.js +1 -1
  2. package/ai/stigmer/agentic/agentexecution/v1/message_pb.d.ts +8 -6
  3. package/ai/stigmer/agentic/agentexecution/v1/spec_pb.d.ts +13 -38
  4. package/ai/stigmer/agentic/agentexecution/v1/usage_pb.d.ts +40 -0
  5. package/ai/stigmer/agentic/agentexecution/v1/usage_pb.js +34 -1
  6. package/ai/stigmer/agentic/agentinstance/v1/command_pb.js +1 -1
  7. package/ai/stigmer/agentic/channelapp/v1/command_connect.d.ts +2 -2
  8. package/ai/stigmer/agentic/channelapp/v1/command_connect.js +2 -2
  9. package/ai/stigmer/agentic/channelapp/v1/command_pb.d.ts +2 -2
  10. package/ai/stigmer/agentic/environment/v1/command_pb.js +1 -1
  11. package/ai/stigmer/agentic/mcpserver/v1/command_pb.js +1 -1
  12. package/ai/stigmer/agentic/plugin/v1/command_pb.js +1 -1
  13. package/ai/stigmer/agentic/skill/v1/command_pb.js +1 -1
  14. package/ai/stigmer/agentic/workflow/v1/command_pb.js +1 -1
  15. package/ai/stigmer/agentic/workflowexecution/v1/event_pb.d.ts +16 -3
  16. package/ai/stigmer/agentic/workflowexecution/v1/event_pb.js +1 -1
  17. package/ai/stigmer/agentic/workflowinstance/v1/command_pb.js +1 -1
  18. package/ai/stigmer/billing/providerkey/v1/api_pb.d.ts +87 -0
  19. package/ai/stigmer/billing/providerkey/v1/api_pb.js +15 -0
  20. package/ai/stigmer/billing/providerkey/v1/command_connect.d.ts +48 -0
  21. package/ai/stigmer/billing/providerkey/v1/command_connect.js +56 -0
  22. package/ai/stigmer/billing/providerkey/v1/command_pb.d.ts +50 -0
  23. package/ai/stigmer/billing/providerkey/v1/command_pb.js +24 -0
  24. package/ai/stigmer/billing/providerkey/v1/io_pb.d.ts +87 -0
  25. package/ai/stigmer/billing/providerkey/v1/io_pb.js +31 -0
  26. package/ai/stigmer/billing/providerkey/v1/query_connect.d.ts +26 -0
  27. package/ai/stigmer/billing/providerkey/v1/query_connect.js +33 -0
  28. package/ai/stigmer/billing/providerkey/v1/query_pb.d.ts +28 -0
  29. package/ai/stigmer/billing/providerkey/v1/query_pb.js +21 -0
  30. package/ai/stigmer/billing/v1/io_pb.d.ts +12 -1
  31. package/ai/stigmer/billing/v1/io_pb.js +1 -1
  32. package/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb.js +1 -1
  33. package/ai/stigmer/iam/iampolicy/v1/command_connect.d.ts +11 -5
  34. package/ai/stigmer/iam/iampolicy/v1/command_connect.js +11 -5
  35. package/ai/stigmer/iam/iampolicy/v1/command_pb.d.ts +11 -5
  36. package/ai/stigmer/iam/identityaccount/v1/command_connect.d.ts +4 -1
  37. package/ai/stigmer/iam/identityaccount/v1/command_connect.js +4 -1
  38. package/ai/stigmer/iam/identityaccount/v1/command_pb.d.ts +4 -1
  39. package/ai/stigmer/iam/identityaccount/v1/io_pb.d.ts +5 -3
  40. package/ai/stigmer/iam/identityaccount/v1/query_connect.d.ts +3 -2
  41. package/ai/stigmer/iam/identityaccount/v1/query_connect.js +3 -2
  42. package/ai/stigmer/iam/identityaccount/v1/query_pb.d.ts +3 -2
  43. package/ai/stigmer/iam/identityprovider/v1/command_connect.d.ts +3 -1
  44. package/ai/stigmer/iam/identityprovider/v1/command_connect.js +3 -1
  45. package/ai/stigmer/iam/identityprovider/v1/command_pb.d.ts +3 -1
  46. package/ai/stigmer/iam/invitation/v1/command_pb.js +1 -1
  47. package/ai/stigmer/iam/v1/enum_pb.d.ts +17 -1
  48. package/ai/stigmer/iam/v1/enum_pb.js +17 -1
  49. package/ai/stigmer/platform/v1/entitlement_pb.d.ts +11 -6
  50. package/ai/stigmer/platform/v1/entitlement_pb.js +11 -6
  51. package/package.json +1 -1
@@ -122,7 +122,10 @@ export const IdentityAccountCommandController = {
122
122
  * the console's identity gate, `stigmer auth login` and `stigmer auth whoami`,
123
123
  * and the SDK's ensureMyIdentityAccount. Derives the account from the
124
124
  * caller's token and the userinfo endpoint of the issuer that vouched for
125
- * it. Idempotent: returns the existing account on retry.
125
+ * it. Idempotent: returns the existing account on retry. A caller another
126
+ * lane vouched for (an organization's identity provider, a platform
127
+ * client, a system lane) already has the account that lane provisions,
128
+ * and is refused PERMISSION_DENIED.
126
129
  *
127
130
  * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.provisionMyAccount
128
131
  */
@@ -115,7 +115,10 @@ export declare const IdentityAccountCommandController: GenService<{
115
115
  * the console's identity gate, `stigmer auth login` and `stigmer auth whoami`,
116
116
  * and the SDK's ensureMyIdentityAccount. Derives the account from the
117
117
  * caller's token and the userinfo endpoint of the issuer that vouched for
118
- * it. Idempotent: returns the existing account on retry.
118
+ * it. Idempotent: returns the existing account on retry. A caller another
119
+ * lane vouched for (an organization's identity provider, a platform
120
+ * client, a system lane) already has the account that lane provisions,
121
+ * and is refused PERMISSION_DENIED.
119
122
  *
120
123
  * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountCommandController.provisionMyAccount
121
124
  */
@@ -327,8 +327,10 @@ export declare const UpdateFederatedAccountInputSchema: GenMessage<UpdateFederat
327
327
  *
328
328
  * Two modes:
329
329
  * - Revoke only (delete_account = false): removes all IAM policies for the
330
- * account in the organization. The identity account is preserved for audit
331
- * trail. The user loses access but the account record remains.
330
+ * account in the organization and in every organization the identity
331
+ * provider manages, where its sign-in grants roles too. The identity
332
+ * account is preserved for audit trail. The user loses access but the
333
+ * account record remains.
332
334
  * - Revoke and delete (delete_account = true): revokes access AND deletes
333
335
  * the identity account. All IAM policies across all organizations are
334
336
  * cleaned up. Use this for permanent offboarding.
@@ -357,7 +359,7 @@ export type DeprovisionFederatedAccountInput = Message<"ai.stigmer.iam.identitya
357
359
  */
358
360
  externalSub: string;
359
361
  /**
360
- * When false (default): revoke the account's access in this organization only.
362
+ * When false (default): revoke the account's access in this organization and the organizations its identity provider manages.
361
363
  * When true: revoke access AND permanently delete the identity account.
362
364
  *
363
365
  * @generated from field: bool delete_account = 4;
@@ -48,8 +48,9 @@ export declare const IdentityAccountQueryController: {
48
48
  * Get an identity account by identity provider ID (Auth0 subject).
49
49
  *
50
50
  * Primarily used for direct and machine accounts where the IDP ID is
51
- * the Auth0 user_id or client_id. For federated account lookups,
52
- * use getByExternalSub which is scoped to a specific identity provider.
51
+ * the Auth0 user_id or client_id. A federated account is never answered:
52
+ * its subject is its identity provider's, so it is looked up with
53
+ * getByExternalSub, which is scoped to that provider.
53
54
  *
54
55
  * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getByIdpId
55
56
  */
@@ -56,8 +56,9 @@ export const IdentityAccountQueryController = {
56
56
  * Get an identity account by identity provider ID (Auth0 subject).
57
57
  *
58
58
  * Primarily used for direct and machine accounts where the IDP ID is
59
- * the Auth0 user_id or client_id. For federated account lookups,
60
- * use getByExternalSub which is scoped to a specific identity provider.
59
+ * the Auth0 user_id or client_id. A federated account is never answered:
60
+ * its subject is its identity provider's, so it is looked up with
61
+ * getByExternalSub, which is scoped to that provider.
61
62
  *
62
63
  * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getByIdpId
63
64
  */
@@ -52,8 +52,9 @@ export declare const IdentityAccountQueryController: GenService<{
52
52
  * Get an identity account by identity provider ID (Auth0 subject).
53
53
  *
54
54
  * Primarily used for direct and machine accounts where the IDP ID is
55
- * the Auth0 user_id or client_id. For federated account lookups,
56
- * use getByExternalSub which is scoped to a specific identity provider.
55
+ * the Auth0 user_id or client_id. A federated account is never answered:
56
+ * its subject is its identity provider's, so it is looked up with
57
+ * getByExternalSub, which is scoped to that provider.
57
58
  *
58
59
  * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getByIdpId
59
60
  */
@@ -48,7 +48,9 @@ export declare const IdentityProviderCommandController: {
48
48
  * Delete an identity provider.
49
49
  *
50
50
  * Deletion is blocked if any platform-managed organizations reference this
51
- * identity provider.
51
+ * identity provider. The federated accounts the provider vouches for are
52
+ * deleted with it, with every role they hold, so a provider created again
53
+ * under the same slug inherits none of them.
52
54
  *
53
55
  * @generated from rpc ai.stigmer.iam.identityprovider.v1.IdentityProviderCommandController.delete
54
56
  */
@@ -55,7 +55,9 @@ export const IdentityProviderCommandController = {
55
55
  * Delete an identity provider.
56
56
  *
57
57
  * Deletion is blocked if any platform-managed organizations reference this
58
- * identity provider.
58
+ * identity provider. The federated accounts the provider vouches for are
59
+ * deleted with it, with every role they hold, so a provider created again
60
+ * under the same slug inherits none of them.
59
61
  *
60
62
  * @generated from rpc ai.stigmer.iam.identityprovider.v1.IdentityProviderCommandController.delete
61
63
  */
@@ -50,7 +50,9 @@ export declare const IdentityProviderCommandController: GenService<{
50
50
  * Delete an identity provider.
51
51
  *
52
52
  * Deletion is blocked if any platform-managed organizations reference this
53
- * identity provider.
53
+ * identity provider. The federated accounts the provider vouches for are
54
+ * deleted with it, with every role they hold, so a provider created again
55
+ * under the same slug inherits none of them.
54
56
  *
55
57
  * @generated from rpc ai.stigmer.iam.identityprovider.v1.IdentityProviderCommandController.delete
56
58
  */
@@ -9,7 +9,7 @@ import { file_ai_stigmer_iam_invitation_v1_io } from "./io_pb.js";
9
9
  /**
10
10
  * Describes the file ai/stigmer/iam/invitation/v1/command.proto.
11
11
  */
12
- export const file_ai_stigmer_iam_invitation_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options, file_ai_stigmer_iam_invitation_v1_api, file_ai_stigmer_iam_invitation_v1_io]);
12
+ export const file_ai_stigmer_iam_invitation_v1_command = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options, file_ai_stigmer_iam_invitation_v1_api, file_ai_stigmer_iam_invitation_v1_io]);
13
13
  /**
14
14
  * InvitationCommandController handles write operations for invitations.
15
15
  *
@@ -53,6 +53,13 @@ export declare enum IamPermission {
53
53
  * @generated from enum value: can_assign_roles = 47;
54
54
  */
55
55
  can_assign_roles = 47,
56
+ /**
57
+ * Whether the caller may change who reaches the resource: its visibility,
58
+ * who observes its runs, a share link to it, or a channel it answers on.
59
+ *
60
+ * @generated from enum value: can_manage_audience = 48;
61
+ */
62
+ can_manage_audience = 48,
56
63
  /**
57
64
  * Organization-level create permissions.
58
65
  *
@@ -347,7 +354,16 @@ export declare enum IamRole {
347
354
  *
348
355
  * @generated from enum value: participant = 5;
349
356
  */
350
- participant = 5
357
+ participant = 5,
358
+ /**
359
+ * Editor of a blueprint (an agent, a workflow or an MCP server): may change
360
+ * its definition and do whatever a viewer can, and may not delete it,
361
+ * change its visibility, publish it on a share link or a channel, or decide
362
+ * who else has access.
363
+ *
364
+ * @generated from enum value: editor = 6;
365
+ */
366
+ editor = 6
351
367
  }
352
368
  /**
353
369
  * Describes the enum ai.stigmer.iam.v1.IamRole.
@@ -5,7 +5,7 @@ import { enumDesc, fileDesc } from "@bufbuild/protobuf/codegenv1";
5
5
  /**
6
6
  * Describes the file ai/stigmer/iam/v1/enum.proto.
7
7
  */
8
- export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("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");
8
+ export const file_ai_stigmer_iam_v1_enum = /*@__PURE__*/ fileDesc("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");
9
9
  /**
10
10
  * IamPermission defines the permissions checked by the authorization
11
11
  * interceptor before an RPC handler executes.
@@ -57,6 +57,13 @@ export var IamPermission;
57
57
  * @generated from enum value: can_assign_roles = 47;
58
58
  */
59
59
  IamPermission[IamPermission["can_assign_roles"] = 47] = "can_assign_roles";
60
+ /**
61
+ * Whether the caller may change who reaches the resource: its visibility,
62
+ * who observes its runs, a share link to it, or a channel it answers on.
63
+ *
64
+ * @generated from enum value: can_manage_audience = 48;
65
+ */
66
+ IamPermission[IamPermission["can_manage_audience"] = 48] = "can_manage_audience";
60
67
  /**
61
68
  * Organization-level create permissions.
62
69
  *
@@ -353,6 +360,15 @@ export var IamRole;
353
360
  * @generated from enum value: participant = 5;
354
361
  */
355
362
  IamRole[IamRole["participant"] = 5] = "participant";
363
+ /**
364
+ * Editor of a blueprint (an agent, a workflow or an MCP server): may change
365
+ * its definition and do whatever a viewer can, and may not delete it,
366
+ * change its visibility, publish it on a share link or a channel, or decide
367
+ * who else has access.
368
+ *
369
+ * @generated from enum value: editor = 6;
370
+ */
371
+ IamRole[IamRole["editor"] = 6] = "editor";
356
372
  })(IamRole || (IamRole = {}));
357
373
  /**
358
374
  * Describes the enum ai.stigmer.iam.v1.IamRole.
@@ -125,17 +125,22 @@ export declare enum Feature {
125
125
  /**
126
126
  * Delivering agents over messaging channels (Slack, WhatsApp) through a
127
127
  * channel runtime. The channel kinds themselves are open source; this
128
- * feature tiers the hosted runtime inside Cloud plans and licenses. It
129
- * is not an edition gate: the open-source server stores channels freely.
128
+ * feature tiers the Cloud's hosted runtime inside Cloud plans. It is not
129
+ * an edition gate, and a license never lists it: the open-source server
130
+ * stores channels freely, and whether a self-hosted server delivers them
131
+ * is its edition's to decide, never its license's.
130
132
  *
131
133
  * @generated from enum value: channels = 4;
132
134
  */
133
135
  channels = 4,
134
136
  /**
135
- * Sharing an agent with individuals and guests through hosted share
136
- * links. The agent-share kind itself is open source; this feature tiers
137
- * the hosted sharing lane inside Cloud plans and licenses. It is not an
138
- * edition gate: the open-source server stores shares freely.
137
+ * Sharing an agent through hosted share links, with the sharing
138
+ * organization's members or with anyone who has the link. The agent-share
139
+ * kind itself is open source; this feature tiers the Cloud's hosted
140
+ * sharing lane inside Cloud plans. It is not an edition gate, and a
141
+ * license never lists it: the open-source server stores shares freely,
142
+ * and whether a self-hosted server serves its links to guests is its
143
+ * edition's to decide, never its license's.
139
144
  *
140
145
  * @generated from enum value: sharing = 5;
141
146
  */
@@ -61,17 +61,22 @@ export var Feature;
61
61
  /**
62
62
  * Delivering agents over messaging channels (Slack, WhatsApp) through a
63
63
  * channel runtime. The channel kinds themselves are open source; this
64
- * feature tiers the hosted runtime inside Cloud plans and licenses. It
65
- * is not an edition gate: the open-source server stores channels freely.
64
+ * feature tiers the Cloud's hosted runtime inside Cloud plans. It is not
65
+ * an edition gate, and a license never lists it: the open-source server
66
+ * stores channels freely, and whether a self-hosted server delivers them
67
+ * is its edition's to decide, never its license's.
66
68
  *
67
69
  * @generated from enum value: channels = 4;
68
70
  */
69
71
  Feature[Feature["channels"] = 4] = "channels";
70
72
  /**
71
- * Sharing an agent with individuals and guests through hosted share
72
- * links. The agent-share kind itself is open source; this feature tiers
73
- * the hosted sharing lane inside Cloud plans and licenses. It is not an
74
- * edition gate: the open-source server stores shares freely.
73
+ * Sharing an agent through hosted share links, with the sharing
74
+ * organization's members or with anyone who has the link. The agent-share
75
+ * kind itself is open source; this feature tiers the Cloud's hosted
76
+ * sharing lane inside Cloud plans. It is not an edition gate, and a
77
+ * license never lists it: the open-source server stores shares freely,
78
+ * and whether a self-hosted server serves its links to guests is its
79
+ * edition's to decide, never its license's.
75
80
  *
76
81
  * @generated from enum value: sharing = 5;
77
82
  */
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@stigmer/protos",
3
- "version": "3.40.1",
3
+ "version": "3.41.0",
4
4
  "description": "Generated TypeScript protobuf stubs for Stigmer APIs",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",