@stigmer/protos 3.5.1 → 3.5.3

package/ai/stigmer/agentic/agentchannel/v1/message_command_connect.d.ts

@@ -0,0 +1,49 @@
+/**
+ * ChannelMessageCommandController handles business-initiated outbound
+ * messages on agent channels.
+ *
+ * @internal
+ * proactive-messaging DD-002 D2: the runtime messaging surface beside
+ * the AgentChannel resource controllers — the
+ * DatastoreRecordCommandController-beside-DatastoreCommandController
+ * split, so resource CRUD and runtime traffic never mix. Dual-audience
+ * by token-class dispatch (the RecordReach shape): the agent's
+ * send_channel_message tool calls with a session-scoped sandbox token;
+ * direct principals (console, CLI, SDK) call with their own identity.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageCommandController
+ */
+export declare const ChannelMessageCommandController: {
+    readonly typeName: "ai.stigmer.agentic.agentchannel.v1.ChannelMessageCommandController";
+    readonly methods: {
+        /**
+         * Send a business-initiated message to a recipient on an agent channel.
+         *
+         * The message is durably recorded and attempted once inline; transient
+         * failures are retried in the background. The outcome reports the
+         * truth of the inline attempt.
+         *
+         * @internal
+         * Authorization in-handler (DD-002 D2/D6/D9): token-class dispatch,
+         * fail closed; agent-anchored chain (never session-sender-anchored —
+         * the recipient is an argument). Error contract (DD-002 D4): unknown
+         * or foreign token class, no serving channel, proactive messaging not
+         * enabled, or channel/org mismatch → PERMISSION_DENIED with no policy
+         * detail leaked; malformed input or ambiguous channel/language →
+         * INVALID_ARGUMENT with the candidates listed; channel not installed →
+         * FAILED_PRECONDITION; rate caps, recipient policy, and provider
+         * refusals → outcome=refused; transient provider failures →
+         * outcome=queued. Cloud-first runtime: the OSS edition returns
+         * FAILED_PRECONDITION (decision 001 D-g posture, the initiateInstall
+         * precedent).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.ChannelMessageCommandController.sendMessage
+         */
+        readonly sendMessage: {
+            readonly name: "sendMessage";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/agentic/agentchannel/v1/message_command_connect.js

@@ -0,0 +1,56 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentchannel/v1/message_command.proto (package ai.stigmer.agentic.agentchannel.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { SendChannelMessageInput, SendChannelMessageOutput } from "./message_io_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * ChannelMessageCommandController handles business-initiated outbound
+ * messages on agent channels.
+ *
+ * @internal
+ * proactive-messaging DD-002 D2: the runtime messaging surface beside
+ * the AgentChannel resource controllers — the
+ * DatastoreRecordCommandController-beside-DatastoreCommandController
+ * split, so resource CRUD and runtime traffic never mix. Dual-audience
+ * by token-class dispatch (the RecordReach shape): the agent's
+ * send_channel_message tool calls with a session-scoped sandbox token;
+ * direct principals (console, CLI, SDK) call with their own identity.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageCommandController
+ */
+export const ChannelMessageCommandController = {
+    typeName: "ai.stigmer.agentic.agentchannel.v1.ChannelMessageCommandController",
+    methods: {
+        /**
+         * Send a business-initiated message to a recipient on an agent channel.
+         *
+         * The message is durably recorded and attempted once inline; transient
+         * failures are retried in the background. The outcome reports the
+         * truth of the inline attempt.
+         *
+         * @internal
+         * Authorization in-handler (DD-002 D2/D6/D9): token-class dispatch,
+         * fail closed; agent-anchored chain (never session-sender-anchored —
+         * the recipient is an argument). Error contract (DD-002 D4): unknown
+         * or foreign token class, no serving channel, proactive messaging not
+         * enabled, or channel/org mismatch → PERMISSION_DENIED with no policy
+         * detail leaked; malformed input or ambiguous channel/language →
+         * INVALID_ARGUMENT with the candidates listed; channel not installed →
+         * FAILED_PRECONDITION; rate caps, recipient policy, and provider
+         * refusals → outcome=refused; transient provider failures →
+         * outcome=queued. Cloud-first runtime: the OSS edition returns
+         * FAILED_PRECONDITION (decision 001 D-g posture, the initiateInstall
+         * precedent).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.ChannelMessageCommandController.sendMessage
+         */
+        sendMessage: {
+            name: "sendMessage",
+            I: SendChannelMessageInput,
+            O: SendChannelMessageOutput,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=message_command_connect.js.map

package/ai/stigmer/agentic/agentchannel/v1/message_command_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message_command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4IAA4I;AAC5I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,oEAAoE;IAC9E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,CAAC,EAAE,uBAAuB;YAC1B,CAAC,EAAE,wBAAwB;YAC3B,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_command_pb.d.ts

@@ -0,0 +1,51 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { SendChannelMessageInputSchema, SendChannelMessageOutputSchema } from "./message_io_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/message_command.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentchannel_v1_message_command: GenFile;
+/**
+ * ChannelMessageCommandController handles business-initiated outbound
+ * messages on agent channels.
+ *
+ * @internal
+ * proactive-messaging DD-002 D2: the runtime messaging surface beside
+ * the AgentChannel resource controllers — the
+ * DatastoreRecordCommandController-beside-DatastoreCommandController
+ * split, so resource CRUD and runtime traffic never mix. Dual-audience
+ * by token-class dispatch (the RecordReach shape): the agent's
+ * send_channel_message tool calls with a session-scoped sandbox token;
+ * direct principals (console, CLI, SDK) call with their own identity.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageCommandController
+ */
+export declare const ChannelMessageCommandController: GenService<{
+    /**
+     * Send a business-initiated message to a recipient on an agent channel.
+     *
+     * The message is durably recorded and attempted once inline; transient
+     * failures are retried in the background. The outcome reports the
+     * truth of the inline attempt.
+     *
+     * @internal
+     * Authorization in-handler (DD-002 D2/D6/D9): token-class dispatch,
+     * fail closed; agent-anchored chain (never session-sender-anchored —
+     * the recipient is an argument). Error contract (DD-002 D4): unknown
+     * or foreign token class, no serving channel, proactive messaging not
+     * enabled, or channel/org mismatch → PERMISSION_DENIED with no policy
+     * detail leaked; malformed input or ambiguous channel/language →
+     * INVALID_ARGUMENT with the candidates listed; channel not installed →
+     * FAILED_PRECONDITION; rate caps, recipient policy, and provider
+     * refusals → outcome=refused; transient provider failures →
+     * outcome=queued. Cloud-first runtime: the OSS edition returns
+     * FAILED_PRECONDITION (decision 001 D-g posture, the initiateInstall
+     * precedent).
+     *
+     * @generated from rpc ai.stigmer.agentic.agentchannel.v1.ChannelMessageCommandController.sendMessage
+     */
+    sendMessage: {
+        methodKind: "unary";
+        input: typeof SendChannelMessageInputSchema;
+        output: typeof SendChannelMessageOutputSchema;
+    };
+}>;

package/ai/stigmer/agentic/agentchannel/v1/message_command_pb.js

@@ -0,0 +1,28 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentchannel/v1/message_command.proto (package ai.stigmer.agentic.agentchannel.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_agentchannel_v1_message_io } from "./message_io_pb.js";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb.js";
+import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/message_command.proto.
+ */
+export const file_ai_stigmer_agentic_agentchannel_v1_message_command = /*@__PURE__*/ fileDesc("CjhhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRjaGFubmVsL3YxL21lc3NhZ2VfY29tbWFuZC5wcm90bxIiYWkuc3RpZ21lci5hZ2VudGljLmFnZW50Y2hhbm5lbC52MTK4AQofQ2hhbm5lbE1lc3NhZ2VDb21tYW5kQ29udHJvbGxlchKOAQoLc2VuZE1lc3NhZ2USOy5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRjaGFubmVsLnYxLlNlbmRDaGFubmVsTWVzc2FnZUlucHV0GjwuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50Y2hhbm5lbC52MS5TZW5kQ2hhbm5lbE1lc3NhZ2VPdXRwdXQiBNC4GAEaBKD/Ky9iBnByb3RvMw", [file_ai_stigmer_agentic_agentchannel_v1_message_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+/**
+ * ChannelMessageCommandController handles business-initiated outbound
+ * messages on agent channels.
+ *
+ * @internal
+ * proactive-messaging DD-002 D2: the runtime messaging surface beside
+ * the AgentChannel resource controllers — the
+ * DatastoreRecordCommandController-beside-DatastoreCommandController
+ * split, so resource CRUD and runtime traffic never mix. Dual-audience
+ * by token-class dispatch (the RecordReach shape): the agent's
+ * send_channel_message tool calls with a session-scoped sandbox token;
+ * direct principals (console, CLI, SDK) call with their own identity.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageCommandController
+ */
+export const ChannelMessageCommandController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_agentchannel_v1_message_command, 0);
+//# sourceMappingURL=message_command_pb.js.map

package/ai/stigmer/agentic/agentchannel/v1/message_command_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message_command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,uDAAuD,GAAY,aAAa,CAC3F,QAAQ,CAAC,oYAAoY,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAE5iB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GA6BvC,aAAa,CAChB,WAAW,CAAC,uDAAuD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_io_pb.d.ts

@@ -0,0 +1,396 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/message_io.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentchannel_v1_message_io: GenFile;
+/**
+ * Input for sending a business-initiated message on an agent channel.
+ *
+ * @internal
+ * proactive-messaging DD-002 D4, amended: channel + org are separate
+ * fields (the FindRecordsRequest slug/org precedent), never a
+ * slug-or-id union. Dispatch mirrors the datastore record surface:
+ * session-bound runner credentials leave both empty and the server
+ * derives them from the session's serving channel; direct principals
+ * (console, CLI, SDK) set them. Ambiguity — the caller's agent has more
+ * than one proactive-enabled channel and no channel is named — is an
+ * INVALID_ARGUMENT whose detail lists the candidates (D7).
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.SendChannelMessageInput
+ */
+export type SendChannelMessageInput = Message<"ai.stigmer.agentic.agentchannel.v1.SendChannelMessageInput"> & {
+    /**
+     * AgentChannel slug to send through, resolved within `org`. Optional
+     * when the caller's agent has exactly one proactive-enabled channel.
+     *
+     * @generated from field: string channel = 1;
+     */
+    channel: string;
+    /**
+     * Organization the channel belongs to. Direct callers set it; unset
+     * resolves from the caller's context.
+     *
+     * @generated from field: string org = 2;
+     */
+    org: string;
+    /**
+     * External recipient key on the channel's provider (WhatsApp: the
+     * recipient's wa_id).
+     *
+     * @generated from field: string recipient = 3;
+     */
+    recipient: string;
+    /**
+     * Typed message content.
+     *
+     * @generated from field: ai.stigmer.agentic.agentchannel.v1.ChannelOutboundPayload payload = 4;
+     */
+    payload?: ChannelOutboundPayload;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.SendChannelMessageInput.
+ * Use `create(SendChannelMessageInputSchema)` to create a new message.
+ */
+export declare const SendChannelMessageInputSchema: GenMessage<SendChannelMessageInput>;
+/**
+ * ChannelOutboundPayload is the typed content of a business-initiated
+ * message. Exactly one kind must be set.
+ *
+ * @internal
+ * The payments seam (proactive-messaging DD-001 D4 / DD-002 D3): the
+ * payments follow-up adds `OrderDetailsPayload order_details = 3` —
+ * the provider_config / delivery_context oneof-extension pattern
+ * ("extends this oneof; touches zero kinds"). Deliverers dispatch on
+ * the arm and refuse unknown arms cleanly (INVALID_ARGUMENT, never
+ * silent text coercion).
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.ChannelOutboundPayload
+ */
+export type ChannelOutboundPayload = Message<"ai.stigmer.agentic.agentchannel.v1.ChannelOutboundPayload"> & {
+    /**
+     * @generated from oneof ai.stigmer.agentic.agentchannel.v1.ChannelOutboundPayload.kind
+     */
+    kind: {
+        /**
+         * Plain text message. Requires an open 24-hour customer-service
+         * window on providers that enforce one (WhatsApp).
+         *
+         * @generated from field: ai.stigmer.agentic.agentchannel.v1.TextPayload text = 1;
+         */
+        value: TextPayload;
+        case: "text";
+    } | {
+        /**
+         * Provider-approved message template. Required for
+         * business-initiated messages outside an open 24-hour window.
+         *
+         * @generated from field: ai.stigmer.agentic.agentchannel.v1.TemplatePayload template = 2;
+         */
+        value: TemplatePayload;
+        case: "template";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ChannelOutboundPayload.
+ * Use `create(ChannelOutboundPayloadSchema)` to create a new message.
+ */
+export declare const ChannelOutboundPayloadSchema: GenMessage<ChannelOutboundPayload>;
+/**
+ * TextPayload is a plain text message body.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.TextPayload
+ */
+export type TextPayload = Message<"ai.stigmer.agentic.agentchannel.v1.TextPayload"> & {
+    /**
+     * Message body. WhatsApp text-message limits apply.
+     *
+     * @generated from field: string body = 1;
+     */
+    body: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.TextPayload.
+ * Use `create(TextPayloadSchema)` to create a new message.
+ */
+export declare const TextPayloadSchema: GenMessage<TextPayload>;
+/**
+ * TemplatePayload sends a provider-approved message template, filled
+ * with the supplied parameter values.
+ *
+ * @internal
+ * proactive-messaging DD-003 D4. Registry-dependent validation (name
+ * exists, status APPROVED, language resolution, parameter arity, header
+ * requirement) is deliberately NOT proto-level: it is the cloud
+ * handler's courtesy pre-check plus the provider's send-time verdict
+ * (D7), mapped to ChannelSendOutcome — never a local approval state
+ * machine.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.TemplatePayload
+ */
+export type TemplatePayload = Message<"ai.stigmer.agentic.agentchannel.v1.TemplatePayload"> & {
+    /**
+     * Name of the approved template on the channel's provider registry
+     * (WhatsApp: the WABA's template name).
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * Template language code (e.g. "en", "en_US"). Optional when the
+     * template name exists in exactly one language.
+     *
+     * @internal
+     * Omitted-language resolution echoes SendChannelMessageInput.channel:
+     * unambiguous resolves, ambiguous is INVALID_ARGUMENT with the
+     * candidate languages in the detail (DD-003 D4).
+     *
+     * @generated from field: string language = 2;
+     */
+    language: string;
+    /**
+     * Variable values. Named templates key by parameter name
+     * ("member_name"); positional templates key by position ("1", "2").
+     *
+     * @generated from field: map<string, string> parameters = 3;
+     */
+    parameters: {
+        [key: string]: string;
+    };
+    /**
+     * Public HTTPS URL for the image header. Required iff the template
+     * declares an image header — the asset is needed at send time (the
+     * creation-time handle is review-only and expires).
+     *
+     * @generated from field: string header_image_link = 4;
+     */
+    headerImageLink: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.TemplatePayload.
+ * Use `create(TemplatePayloadSchema)` to create a new message.
+ */
+export declare const TemplatePayloadSchema: GenMessage<TemplatePayload>;
+/**
+ * Output of the send-message RPC: the truthful outcome of the inline
+ * delivery attempt.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.SendChannelMessageOutput
+ */
+export type SendChannelMessageOutput = Message<"ai.stigmer.agentic.agentchannel.v1.SendChannelMessageOutput"> & {
+    /**
+     * Outcome of the inline attempt.
+     *
+     * @generated from field: ai.stigmer.agentic.agentchannel.v1.ChannelSendOutcome outcome = 1;
+     */
+    outcome: ChannelSendOutcome;
+    /**
+     * Platform id of the durable outbound record (audit handle).
+     *
+     * @generated from field: string outbound_message_id = 2;
+     */
+    outboundMessageId: string;
+    /**
+     * Provider message id when accepted (WhatsApp: wamid).
+     *
+     * @generated from field: string provider_message_id = 3;
+     */
+    providerMessageId: string;
+    /**
+     * Honest, agent-readable detail for queued/refused outcomes.
+     *
+     * @generated from field: string detail = 4;
+     */
+    detail: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.SendChannelMessageOutput.
+ * Use `create(SendChannelMessageOutputSchema)` to create a new message.
+ */
+export declare const SendChannelMessageOutputSchema: GenMessage<SendChannelMessageOutput>;
+/**
+ * Input for listing the message templates available on an agent channel.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.ListChannelTemplatesInput
+ */
+export type ListChannelTemplatesInput = Message<"ai.stigmer.agentic.agentchannel.v1.ListChannelTemplatesInput"> & {
+    /**
+     * AgentChannel slug whose provider registry to read, resolved within
+     * `org`. Optional when the caller's agent has exactly one
+     * proactive-enabled channel.
+     *
+     * @generated from field: string channel = 1;
+     */
+    channel: string;
+    /**
+     * Organization the channel belongs to. Direct callers set it; unset
+     * resolves from the caller's context.
+     *
+     * @generated from field: string org = 2;
+     */
+    org: string;
+    /**
+     * When true, only templates the provider will accept for sending are
+     * returned (WhatsApp: status APPROVED, filtered server-side).
+     *
+     * @internal
+     * The two callers split on this flag: the runner's discovery fetch
+     * sets it (an agent must never compose against a paused or pending
+     * template, DD-003 D5); the console leaves it unset to render every
+     * status with its badge (DD-003 D10).
+     *
+     * @generated from field: bool approved_only = 3;
+     */
+    approvedOnly: boolean;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ListChannelTemplatesInput.
+ * Use `create(ListChannelTemplatesInputSchema)` to create a new message.
+ */
+export declare const ListChannelTemplatesInputSchema: GenMessage<ListChannelTemplatesInput>;
+/**
+ * ChannelTemplates contains the message templates available on an agent
+ * channel.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.ChannelTemplates
+ */
+export type ChannelTemplates = Message<"ai.stigmer.agentic.agentchannel.v1.ChannelTemplates"> & {
+    /**
+     * Template entries, one per (name, language) pair.
+     *
+     * @generated from field: repeated ai.stigmer.agentic.agentchannel.v1.ChannelTemplate entries = 1;
+     */
+    entries: ChannelTemplate[];
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ChannelTemplates.
+ * Use `create(ChannelTemplatesSchema)` to create a new message.
+ */
+export declare const ChannelTemplatesSchema: GenMessage<ChannelTemplates>;
+/**
+ * ChannelTemplate is one message template as the channel's provider
+ * registry reports it.
+ *
+ * @internal
+ * proactive-messaging DD-003 D6: provider vocabulary verbatim — status,
+ * category, format, and rejection copy are the provider's own strings,
+ * never re-encoded into a Stigmer enum. The provider is the registry
+ * and the send-time authority; this projection is a read-through view.
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.ChannelTemplate
+ */
+export type ChannelTemplate = Message<"ai.stigmer.agentic.agentchannel.v1.ChannelTemplate"> & {
+    /**
+     * Template name on the provider registry.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * Template language code (e.g. "en_US"). The (name, language) pair is
+     * the template's identity; each language is approved independently.
+     *
+     * @generated from field: string language = 2;
+     */
+    language: string;
+    /**
+     * Provider category, verbatim (WhatsApp: UTILITY, MARKETING,
+     * AUTHENTICATION).
+     *
+     * @generated from field: string category = 3;
+     */
+    category: string;
+    /**
+     * Provider approval status, verbatim (WhatsApp: APPROVED, PENDING,
+     * REJECTED, PAUSED, DISABLED).
+     *
+     * @generated from field: string status = 4;
+     */
+    status: string;
+    /**
+     * Parameter format, verbatim (WhatsApp: POSITIONAL, NAMED).
+     *
+     * @generated from field: string parameter_format = 5;
+     */
+    parameterFormat: string;
+    /**
+     * Parameter names for named templates; positions ("1", "2", ...) for
+     * positional templates.
+     *
+     * @generated from field: repeated string parameter_names = 6;
+     */
+    parameterNames: string[];
+    /**
+     * Full body text including placeholders (e.g. "Hi {{1}}, your fee of
+     * {{2}} is due {{3}}.").
+     *
+     * @generated from field: string body_text = 7;
+     */
+    bodyText: string;
+    /**
+     * Header format when the template declares a header, verbatim
+     * (WhatsApp: TEXT, IMAGE, VIDEO, DOCUMENT). Empty for no header.
+     *
+     * @generated from field: string header_format = 8;
+     */
+    headerFormat: string;
+    /**
+     * Provider's rejection reason, verbatim. Empty unless status is a
+     * rejected state.
+     *
+     * @generated from field: string rejection_reason = 9;
+     */
+    rejectionReason: string;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ChannelTemplate.
+ * Use `create(ChannelTemplateSchema)` to create a new message.
+ */
+export declare const ChannelTemplateSchema: GenMessage<ChannelTemplate>;
+/**
+ * ChannelSendOutcome reports what happened to a business-initiated
+ * message on the inline delivery attempt.
+ *
+ * @internal
+ * proactive-messaging DD-002 D1/D4: policy refusals the agent adapts to
+ * are typed outcomes; contract violations and authority failures are
+ * gRPC errors. Provider verdicts map into the same vocabulary (DD-003
+ * D7).
+ *
+ * @generated from enum ai.stigmer.agentic.agentchannel.v1.ChannelSendOutcome
+ */
+export declare enum ChannelSendOutcome {
+    /**
+     * Default value when no outcome is set.
+     *
+     * @generated from enum value: channel_send_outcome_unspecified = 0;
+     */
+    channel_send_outcome_unspecified = 0,
+    /**
+     * Provider accepted the message.
+     *
+     * @generated from enum value: accepted = 1;
+     */
+    accepted = 1,
+    /**
+     * Transient failure; the platform retries in the background.
+     *
+     * @generated from enum value: queued = 2;
+     */
+    queued = 2,
+    /**
+     * Terminal refusal; detail says why (caps, recipient policy, provider
+     * policy such as an expired 24-hour window). The caller should adapt,
+     * not retry.
+     *
+     * @generated from enum value: refused = 3;
+     */
+    refused = 3
+}
+/**
+ * Describes the enum ai.stigmer.agentic.agentchannel.v1.ChannelSendOutcome.
+ */
+export declare const ChannelSendOutcomeSchema: GenEnum<ChannelSendOutcome>;

package/ai/stigmer/agentic/agentchannel/v1/message_io_pb.js

@@ -0,0 +1,95 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentchannel/v1/message_io.proto (package ai.stigmer.agentic.agentchannel.v1, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/message_io.proto.
+ */
+export const file_ai_stigmer_agentic_agentchannel_v1_message_io = /*@__PURE__*/ fileDesc("CjNhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRjaGFubmVsL3YxL21lc3NhZ2VfaW8ucHJvdG8SImFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEivQEKF1NlbmRDaGFubmVsTWVzc2FnZUlucHV0EhgKB2NoYW5uZWwYASABKAlCB7pIBHICGD8SFAoDb3JnGAIgASgJQge6SARyAhg/Eh0KCXJlY2lwaWVudBgDIAEoCUIKukgHcgUQARiAARJTCgdwYXlsb2FkGAQgASgLMjouYWkuc3RpZ21lci5hZ2VudGljLmFnZW50Y2hhbm5lbC52MS5DaGFubmVsT3V0Ym91bmRQYXlsb2FkQga6SAPIAQEisQEKFkNoYW5uZWxPdXRib3VuZFBheWxvYWQSPwoEdGV4dBgBIAEoCzIvLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEuVGV4dFBheWxvYWRIABJHCgh0ZW1wbGF0ZRgCIAEoCzIzLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEuVGVtcGxhdGVQYXlsb2FkSABCDQoEa2luZBIFukgCCAEiJwoLVGV4dFBheWxvYWQSGAoEYm9keRgBIAEoCUIKukgHcgUQARiAICKBAgoPVGVtcGxhdGVQYXlsb2FkEhgKBG5hbWUYASABKAlCCrpIB3IFEAEYgAQSGQoIbGFuZ3VhZ2UYAiABKAlCB7pIBHICGBASYQoKcGFyYW1ldGVycxgDIAMoCzJDLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEuVGVtcGxhdGVQYXlsb2FkLlBhcmFtZXRlcnNFbnRyeUIIukgFmgECEDISIwoRaGVhZGVyX2ltYWdlX2xpbmsYBCABKAlCCLpIBXIDGIAQGjEKD1BhcmFtZXRlcnNFbnRyeRILCgNrZXkYASABKAkSDQoFdmFsdWUYAiABKAk6AjgBIq0BChhTZW5kQ2hhbm5lbE1lc3NhZ2VPdXRwdXQSRwoHb3V0Y29tZRgBIAEoDjI2LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEuQ2hhbm5lbFNlbmRPdXRjb21lEhsKE291dGJvdW5kX21lc3NhZ2VfaWQYAiABKAkSGwoTcHJvdmlkZXJfbWVzc2FnZV9pZBgDIAEoCRIOCgZkZXRhaWwYBCABKAkiYgoZTGlzdENoYW5uZWxUZW1wbGF0ZXNJbnB1dBIYCgdjaGFubmVsGAEgASgJQge6SARyAhg/EhQKA29yZxgCIAEoCUIHukgEcgIYPxIVCg1hcHByb3ZlZF9vbmx5GAMgASgIIlgKEENoYW5uZWxUZW1wbGF0ZXMSRAoHZW50cmllcxgBIAMoCzIzLmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEuQ2hhbm5lbFRlbXBsYXRlIsoBCg9DaGFubmVsVGVtcGxhdGUSDAoEbmFtZRgBIAEoCRIQCghsYW5ndWFnZRgCIAEoCRIQCghjYXRlZ29yeRgDIAEoCRIOCgZzdGF0dXMYBCABKAkSGAoQcGFyYW1ldGVyX2Zvcm1hdBgFIAEoCRIXCg9wYXJhbWV0ZXJfbmFtZXMYBiADKAkSEQoJYm9keV90ZXh0GAcgASgJEhUKDWhlYWRlcl9mb3JtYXQYCCABKAkSGAoQcmVqZWN0aW9uX3JlYXNvbhgJIAEoCSphChJDaGFubmVsU2VuZE91dGNvbWUSJAogY2hhbm5lbF9zZW5kX291dGNvbWVfdW5zcGVjaWZpZWQQABIMCghhY2NlcHRlZBABEgoKBnF1ZXVlZBACEgsKB3JlZnVzZWQQA2IGcHJvdG8z", [file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.SendChannelMessageInput.
+ * Use `create(SendChannelMessageInputSchema)` to create a new message.
+ */
+export const SendChannelMessageInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_message_io, 0);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ChannelOutboundPayload.
+ * Use `create(ChannelOutboundPayloadSchema)` to create a new message.
+ */
+export const ChannelOutboundPayloadSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_message_io, 1);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.TextPayload.
+ * Use `create(TextPayloadSchema)` to create a new message.
+ */
+export const TextPayloadSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_message_io, 2);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.TemplatePayload.
+ * Use `create(TemplatePayloadSchema)` to create a new message.
+ */
+export const TemplatePayloadSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_message_io, 3);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.SendChannelMessageOutput.
+ * Use `create(SendChannelMessageOutputSchema)` to create a new message.
+ */
+export const SendChannelMessageOutputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_message_io, 4);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ListChannelTemplatesInput.
+ * Use `create(ListChannelTemplatesInputSchema)` to create a new message.
+ */
+export const ListChannelTemplatesInputSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_message_io, 5);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ChannelTemplates.
+ * Use `create(ChannelTemplatesSchema)` to create a new message.
+ */
+export const ChannelTemplatesSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_message_io, 6);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ChannelTemplate.
+ * Use `create(ChannelTemplateSchema)` to create a new message.
+ */
+export const ChannelTemplateSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_message_io, 7);
+/**
+ * ChannelSendOutcome reports what happened to a business-initiated
+ * message on the inline delivery attempt.
+ *
+ * @internal
+ * proactive-messaging DD-002 D1/D4: policy refusals the agent adapts to
+ * are typed outcomes; contract violations and authority failures are
+ * gRPC errors. Provider verdicts map into the same vocabulary (DD-003
+ * D7).
+ *
+ * @generated from enum ai.stigmer.agentic.agentchannel.v1.ChannelSendOutcome
+ */
+export var ChannelSendOutcome;
+(function (ChannelSendOutcome) {
+    /**
+     * Default value when no outcome is set.
+     *
+     * @generated from enum value: channel_send_outcome_unspecified = 0;
+     */
+    ChannelSendOutcome[ChannelSendOutcome["channel_send_outcome_unspecified"] = 0] = "channel_send_outcome_unspecified";
+    /**
+     * Provider accepted the message.
+     *
+     * @generated from enum value: accepted = 1;
+     */
+    ChannelSendOutcome[ChannelSendOutcome["accepted"] = 1] = "accepted";
+    /**
+     * Transient failure; the platform retries in the background.
+     *
+     * @generated from enum value: queued = 2;
+     */
+    ChannelSendOutcome[ChannelSendOutcome["queued"] = 2] = "queued";
+    /**
+     * Terminal refusal; detail says why (caps, recipient policy, provider
+     * policy such as an expired 24-hour window). The caller should adapt,
+     * not retry.
+     *
+     * @generated from enum value: refused = 3;
+     */
+    ChannelSendOutcome[ChannelSendOutcome["refused"] = 3] = "refused";
+})(ChannelSendOutcome || (ChannelSendOutcome = {}));
+/**
+ * Describes the enum ai.stigmer.agentic.agentchannel.v1.ChannelSendOutcome.
+ */
+export const ChannelSendOutcomeSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_agentchannel_v1_message_io, 0);
+//# sourceMappingURL=message_io_pb.js.map

package/ai/stigmer/agentic/agentchannel/v1/message_io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message_io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uIAAuI;AACvI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAY,aAAa,CACtF,QAAQ,CAAC,k4DAAk4D,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAkD76D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAyCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAgBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwDrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAsCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAwCrE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0C,aAAa,CACjG,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAiBrE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAsFrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;AAErE;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,kBA8BX;AA9BD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,mHAAoC,CAAA;IAEpC;;;;OAIG;IACH,mEAAY,CAAA;IAEZ;;;;OAIG;IACH,+DAAU,CAAA;IAEV;;;;;;OAMG;IACH,iEAAW,CAAA;AACb,CAAC,EA9BW,kBAAkB,KAAlB,kBAAkB,QA8B7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_query_connect.d.ts

@@ -0,0 +1,43 @@
+/**
+ * ChannelMessageQueryController serves runtime reads that support
+ * business-initiated messaging on agent channels.
+ *
+ * @internal
+ * proactive-messaging DD-003 D6: the query sibling of
+ * ChannelMessageCommandController — runtime messaging traffic (the send
+ * and its supporting reads) stays off the resource CRUD surface, the
+ * datastore-domain split applied consistently.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
+ */
+export declare const ChannelMessageQueryController: {
+    readonly typeName: "ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController";
+    readonly methods: {
+        /**
+         * List the message templates available on an agent channel.
+         *
+         * Read live from the channel provider's registry (WhatsApp: the
+         * WABA's templates), lightly cached. The provider is the source of
+         * truth; entries carry its vocabulary verbatim.
+         *
+         * @internal
+         * DD-003 D6. Same in-handler token-class reach as sendMessage (DD-002
+         * D2/D4): sandbox tokens resolve through the serving channel, direct
+         * principals through channel visibility; fail closed. The WABA id is
+         * derived from the channel's phone_number_id on demand and cached —
+         * never stored (DD-003 D3). A token missing the management scope
+         * degrades this read only, never sends (DD-003 D7, Meta error 200 →
+         * FAILED_PRECONDITION pointing at token regeneration). Cloud-first
+         * runtime: the OSS edition returns FAILED_PRECONDITION (decision 001
+         * D-g posture).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController.listTemplates
+         */
+        readonly listTemplates: {
+            readonly name: "listTemplates";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/agentic/agentchannel/v1/message_query_connect.js

@@ -0,0 +1,50 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentchannel/v1/message_query.proto (package ai.stigmer.agentic.agentchannel.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { ChannelTemplates, ListChannelTemplatesInput } from "./message_io_pbjs";
+import { MethodKind } from "@bufbuild/protobuf";
+/**
+ * ChannelMessageQueryController serves runtime reads that support
+ * business-initiated messaging on agent channels.
+ *
+ * @internal
+ * proactive-messaging DD-003 D6: the query sibling of
+ * ChannelMessageCommandController — runtime messaging traffic (the send
+ * and its supporting reads) stays off the resource CRUD surface, the
+ * datastore-domain split applied consistently.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
+ */
+export const ChannelMessageQueryController = {
+    typeName: "ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController",
+    methods: {
+        /**
+         * List the message templates available on an agent channel.
+         *
+         * Read live from the channel provider's registry (WhatsApp: the
+         * WABA's templates), lightly cached. The provider is the source of
+         * truth; entries carry its vocabulary verbatim.
+         *
+         * @internal
+         * DD-003 D6. Same in-handler token-class reach as sendMessage (DD-002
+         * D2/D4): sandbox tokens resolve through the serving channel, direct
+         * principals through channel visibility; fail closed. The WABA id is
+         * derived from the channel's phone_number_id on demand and cached —
+         * never stored (DD-003 D3). A token missing the management scope
+         * degrades this read only, never sends (DD-003 D7, Meta error 200 →
+         * FAILED_PRECONDITION pointing at token regeneration). Cloud-first
+         * runtime: the OSS edition returns FAILED_PRECONDITION (decision 001
+         * D-g posture).
+         *
+         * @generated from rpc ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController.listTemplates
+         */
+        listTemplates: {
+            name: "listTemplates",
+            I: ListChannelTemplatesInput,
+            O: ChannelTemplates,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=message_query_connect.js.map

package/ai/stigmer/agentic/agentchannel/v1/message_query_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message_query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;WAmBG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,yBAAyB;YAC5B,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/message_query_pb.d.ts

@@ -0,0 +1,45 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { ChannelTemplatesSchema, ListChannelTemplatesInputSchema } from "./message_io_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/message_query.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentchannel_v1_message_query: GenFile;
+/**
+ * ChannelMessageQueryController serves runtime reads that support
+ * business-initiated messaging on agent channels.
+ *
+ * @internal
+ * proactive-messaging DD-003 D6: the query sibling of
+ * ChannelMessageCommandController — runtime messaging traffic (the send
+ * and its supporting reads) stays off the resource CRUD surface, the
+ * datastore-domain split applied consistently.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
+ */
+export declare const ChannelMessageQueryController: GenService<{
+    /**
+     * List the message templates available on an agent channel.
+     *
+     * Read live from the channel provider's registry (WhatsApp: the
+     * WABA's templates), lightly cached. The provider is the source of
+     * truth; entries carry its vocabulary verbatim.
+     *
+     * @internal
+     * DD-003 D6. Same in-handler token-class reach as sendMessage (DD-002
+     * D2/D4): sandbox tokens resolve through the serving channel, direct
+     * principals through channel visibility; fail closed. The WABA id is
+     * derived from the channel's phone_number_id on demand and cached —
+     * never stored (DD-003 D3). A token missing the management scope
+     * degrades this read only, never sends (DD-003 D7, Meta error 200 →
+     * FAILED_PRECONDITION pointing at token regeneration). Cloud-first
+     * runtime: the OSS edition returns FAILED_PRECONDITION (decision 001
+     * D-g posture).
+     *
+     * @generated from rpc ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController.listTemplates
+     */
+    listTemplates: {
+        methodKind: "unary";
+        input: typeof ListChannelTemplatesInputSchema;
+        output: typeof ChannelTemplatesSchema;
+    };
+}>;

package/ai/stigmer/agentic/agentchannel/v1/message_query_pb.js

@@ -0,0 +1,25 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentchannel/v1/message_query.proto (package ai.stigmer.agentic.agentchannel.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_agentchannel_v1_message_io } from "./message_io_pb.js";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb.js";
+import { file_ai_stigmer_commons_rpc_method_options } from "../../../commons/rpc/method_options_pb.js";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/message_query.proto.
+ */
+export const file_ai_stigmer_agentic_agentchannel_v1_message_query = /*@__PURE__*/ fileDesc("CjZhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRjaGFubmVsL3YxL21lc3NhZ2VfcXVlcnkucHJvdG8SImFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEysgEKHUNoYW5uZWxNZXNzYWdlUXVlcnlDb250cm9sbGVyEooBCg1saXN0VGVtcGxhdGVzEj0uYWkuc3RpZ21lci5hZ2VudGljLmFnZW50Y2hhbm5lbC52MS5MaXN0Q2hhbm5lbFRlbXBsYXRlc0lucHV0GjQuYWkuc3RpZ21lci5hZ2VudGljLmFnZW50Y2hhbm5lbC52MS5DaGFubmVsVGVtcGxhdGVzIgTQuBgBGgSg/ysvYgZwcm90bzM", [file_ai_stigmer_agentic_agentchannel_v1_message_io, file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_rpc_method_options]);
+/**
+ * ChannelMessageQueryController serves runtime reads that support
+ * business-initiated messaging on agent channels.
+ *
+ * @internal
+ * proactive-messaging DD-003 D6: the query sibling of
+ * ChannelMessageCommandController — runtime messaging traffic (the send
+ * and its supporting reads) stays off the resource CRUD surface, the
+ * datastore-domain split applied consistently.
+ *
+ * @generated from service ai.stigmer.agentic.agentchannel.v1.ChannelMessageQueryController
+ */
+export const ChannelMessageQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_agentic_agentchannel_v1_message_query, 0);
+//# sourceMappingURL=message_query_pb.js.map

package/ai/stigmer/agentic/agentchannel/v1/message_query_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message_query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/message_query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,qDAAqD,GAAY,aAAa,CACzF,QAAQ,CAAC,yXAAyX,EAAE,CAAC,kDAAkD,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEjiB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,6BAA6B,GA0BrC,aAAa,CAChB,WAAW,CAAC,qDAAqD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/outbound_pb.d.ts

@@ -0,0 +1,177 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { ChannelDeliveryStatus } from "./delivery_pb.js";
+import type { ChannelOutboundPayload } from "./message_io_pb.js";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/outbound.proto.
+ */
+export declare const file_ai_stigmer_agentic_agentchannel_v1_outbound: GenFile;
+/**
+ * ChannelOutboundMessage tracks the delivery of one business-initiated
+ * message to one external recipient on an agent channel.
+ *
+ * @internal
+ * Infrastructure-only — no kind, no apiVersion, no CRUD RPCs, no FGA (the
+ * ChannelDelivery posture). The proactive sibling of ChannelDelivery
+ * (proactive-messaging DD-002 D1, amended by DD-004): its own claim/lease
+ * store, sharing the reply lane's idiom but never its table. The row is
+ * written by the send handler BEFORE any provider I/O — it is
+ * simultaneously the audit trail, the rate-cap ledger, the idempotency
+ * anchor for delivery retries, and (via provider_message_id) the future
+ * receipt-correlation target. Attempted once inline by the send RPC;
+ * attempts 2..N belong to the outbound sweep. Reuses ChannelDeliveryStatus
+ * (proto3 enum values are package-scoped; a twin enum would not compile)
+ * and carries NO provider-context arm: `recipient` is first-class and the
+ * sender re-reads the channel per attempt for provider facts such as the
+ * WhatsApp phone_number_id (DD-004 pinned behavior — a stored copy could
+ * drift).
+ *
+ * @generated from message ai.stigmer.agentic.agentchannel.v1.ChannelOutboundMessage
+ */
+export type ChannelOutboundMessage = Message<"ai.stigmer.agentic.agentchannel.v1.ChannelOutboundMessage"> & {
+    /**
+     * Unique outbound message identifier.
+     *
+     * @generated from field: string outbound_message_id = 1;
+     */
+    outboundMessageId: string;
+    /**
+     * AgentChannel connection this message sends through.
+     *
+     * @generated from field: string agent_channel_id = 2;
+     */
+    agentChannelId: string;
+    /**
+     * Organization that owns the connection (billing org).
+     * Denormalized from the channel so sweep/cap paths never join.
+     *
+     * @generated from field: string org = 3;
+     */
+    org: string;
+    /**
+     * Session of the originating agent run; empty for direct operator
+     * sends, which have no session.
+     *
+     * @internal
+     * DD-004 S-1: the per-run cap keys on session (the sandbox token
+     * carries session_id, never an execution id), so this replaces
+     * DD-002's sketched execution_id.
+     *
+     * @generated from field: string session_id = 4;
+     */
+    sessionId: string;
+    /**
+     * How the send was authorized (DD-002 D9's surface-aware policy).
+     *
+     * @generated from field: ai.stigmer.agentic.agentchannel.v1.ChannelOutboundOrigin origin = 5;
+     */
+    origin: ChannelOutboundOrigin;
+    /**
+     * External recipient key on the channel's provider (WhatsApp: wa_id).
+     *
+     * @generated from field: string recipient = 6;
+     */
+    recipient: string;
+    /**
+     * Typed message content, verbatim as accepted from the caller.
+     *
+     * @generated from field: ai.stigmer.agentic.agentchannel.v1.ChannelOutboundPayload payload = 7;
+     */
+    payload?: ChannelOutboundPayload;
+    /**
+     * Delivery lifecycle status (the ChannelDelivery vocabulary).
+     *
+     * @generated from field: ai.stigmer.agentic.agentchannel.v1.ChannelDeliveryStatus status = 8;
+     */
+    status: ChannelDeliveryStatus;
+    /**
+     * Number of delivery attempts made.
+     *
+     * @generated from field: int32 attempts = 9;
+     */
+    attempts: number;
+    /**
+     * Last delivery error, empty unless a delivery attempt failed.
+     *
+     * @generated from field: string last_error = 10;
+     */
+    lastError: string;
+    /**
+     * Idempotency key for outbound provider calls (stable across retries).
+     *
+     * @generated from field: string idempotency_key = 11;
+     */
+    idempotencyKey: string;
+    /**
+     * Provider message id once the provider accepted (WhatsApp: wamid).
+     *
+     * @internal
+     * Uniquely indexed where present — the DD-002 D10 statuses seam
+     * correlates delivery receipts by this value when it lands (slice 2b).
+     *
+     * @generated from field: string provider_message_id = 12;
+     */
+    providerMessageId: string;
+    /**
+     * When the outbound record was created (send-RPC time).
+     *
+     * @generated from field: google.protobuf.Timestamp created_at = 13;
+     */
+    createdAt?: Timestamp;
+    /**
+     * When the record was last transitioned.
+     *
+     * @generated from field: google.protobuf.Timestamp updated_at = 14;
+     */
+    updatedAt?: Timestamp;
+    /**
+     * Earliest time of the next delivery attempt (backoff schedule).
+     *
+     * @generated from field: google.protobuf.Timestamp next_attempt_at = 15;
+     */
+    nextAttemptAt?: Timestamp;
+};
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ChannelOutboundMessage.
+ * Use `create(ChannelOutboundMessageSchema)` to create a new message.
+ */
+export declare const ChannelOutboundMessageSchema: GenMessage<ChannelOutboundMessage>;
+/**
+ * ChannelOutboundOrigin records which trust context authorized a
+ * business-initiated send.
+ *
+ * @internal
+ * DD-002 D9: the two calling contexts carry different trust levels, so
+ * recipient policy is surface-aware — channel-conversation sends are
+ * bounded to known senders, operator-authored sends to caps. Stamped by
+ * the reach resolver (its single writer) for audit; never caller-supplied.
+ *
+ * @generated from enum ai.stigmer.agentic.agentchannel.v1.ChannelOutboundOrigin
+ */
+export declare enum ChannelOutboundOrigin {
+    /**
+     * Default value when no origin is set.
+     *
+     * @generated from enum value: channel_outbound_origin_unspecified = 0;
+     */
+    channel_outbound_origin_unspecified = 0,
+    /**
+     * The send came from an agent run created by an inbound channel
+     * message; the recipient must be a known sender on the channel.
+     *
+     * @generated from enum value: channel_conversation = 1;
+     */
+    channel_conversation = 1,
+    /**
+     * The send was authored by an operator (console, CLI, SDK, scheduled
+     * run); any recipient, bounded by caps.
+     *
+     * @generated from enum value: operator = 2;
+     */
+    operator = 2
+}
+/**
+ * Describes the enum ai.stigmer.agentic.agentchannel.v1.ChannelOutboundOrigin.
+ */
+export declare const ChannelOutboundOriginSchema: GenEnum<ChannelOutboundOrigin>;

package/ai/stigmer/agentic/agentchannel/v1/outbound_pb.js

@@ -0,0 +1,56 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts,import_extension=js"
+// @generated from file ai/stigmer/agentic/agentchannel/v1/outbound.proto (package ai.stigmer.agentic.agentchannel.v1, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_agentic_agentchannel_v1_delivery } from "./delivery_pb.js";
+import { file_ai_stigmer_agentic_agentchannel_v1_message_io } from "./message_io_pb.js";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file ai/stigmer/agentic/agentchannel/v1/outbound.proto.
+ */
+export const file_ai_stigmer_agentic_agentchannel_v1_outbound = /*@__PURE__*/ fileDesc("CjFhaS9zdGlnbWVyL2FnZW50aWMvYWdlbnRjaGFubmVsL3YxL291dGJvdW5kLnByb3RvEiJhaS5zdGlnbWVyLmFnZW50aWMuYWdlbnRjaGFubmVsLnYxItcEChZDaGFubmVsT3V0Ym91bmRNZXNzYWdlEhsKE291dGJvdW5kX21lc3NhZ2VfaWQYASABKAkSGAoQYWdlbnRfY2hhbm5lbF9pZBgCIAEoCRILCgNvcmcYAyABKAkSEgoKc2Vzc2lvbl9pZBgEIAEoCRJJCgZvcmlnaW4YBSABKA4yOS5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRjaGFubmVsLnYxLkNoYW5uZWxPdXRib3VuZE9yaWdpbhIRCglyZWNpcGllbnQYBiABKAkSSwoHcGF5bG9hZBgHIAEoCzI6LmFpLnN0aWdtZXIuYWdlbnRpYy5hZ2VudGNoYW5uZWwudjEuQ2hhbm5lbE91dGJvdW5kUGF5bG9hZBJJCgZzdGF0dXMYCCABKA4yOS5haS5zdGlnbWVyLmFnZW50aWMuYWdlbnRjaGFubmVsLnYxLkNoYW5uZWxEZWxpdmVyeVN0YXR1cxIQCghhdHRlbXB0cxgJIAEoBRISCgpsYXN0X2Vycm9yGAogASgJEhcKD2lkZW1wb3RlbmN5X2tleRgLIAEoCRIbChNwcm92aWRlcl9tZXNzYWdlX2lkGAwgASgJEi4KCmNyZWF0ZWRfYXQYDSABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wEi4KCnVwZGF0ZWRfYXQYDiABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wEjMKD25leHRfYXR0ZW1wdF9hdBgPIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXAqaAoVQ2hhbm5lbE91dGJvdW5kT3JpZ2luEicKI2NoYW5uZWxfb3V0Ym91bmRfb3JpZ2luX3Vuc3BlY2lmaWVkEAASGAoUY2hhbm5lbF9jb252ZXJzYXRpb24QARIMCghvcGVyYXRvchACYgZwcm90bzM", [file_ai_stigmer_agentic_agentchannel_v1_delivery, file_ai_stigmer_agentic_agentchannel_v1_message_io, file_google_protobuf_timestamp]);
+/**
+ * Describes the message ai.stigmer.agentic.agentchannel.v1.ChannelOutboundMessage.
+ * Use `create(ChannelOutboundMessageSchema)` to create a new message.
+ */
+export const ChannelOutboundMessageSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_agentic_agentchannel_v1_outbound, 0);
+/**
+ * ChannelOutboundOrigin records which trust context authorized a
+ * business-initiated send.
+ *
+ * @internal
+ * DD-002 D9: the two calling contexts carry different trust levels, so
+ * recipient policy is surface-aware — channel-conversation sends are
+ * bounded to known senders, operator-authored sends to caps. Stamped by
+ * the reach resolver (its single writer) for audit; never caller-supplied.
+ *
+ * @generated from enum ai.stigmer.agentic.agentchannel.v1.ChannelOutboundOrigin
+ */
+export var ChannelOutboundOrigin;
+(function (ChannelOutboundOrigin) {
+    /**
+     * Default value when no origin is set.
+     *
+     * @generated from enum value: channel_outbound_origin_unspecified = 0;
+     */
+    ChannelOutboundOrigin[ChannelOutboundOrigin["channel_outbound_origin_unspecified"] = 0] = "channel_outbound_origin_unspecified";
+    /**
+     * The send came from an agent run created by an inbound channel
+     * message; the recipient must be a known sender on the channel.
+     *
+     * @generated from enum value: channel_conversation = 1;
+     */
+    ChannelOutboundOrigin[ChannelOutboundOrigin["channel_conversation"] = 1] = "channel_conversation";
+    /**
+     * The send was authored by an operator (console, CLI, SDK, scheduled
+     * run); any recipient, bounded by caps.
+     *
+     * @generated from enum value: operator = 2;
+     */
+    ChannelOutboundOrigin[ChannelOutboundOrigin["operator"] = 2] = "operator";
+})(ChannelOutboundOrigin || (ChannelOutboundOrigin = {}));
+/**
+ * Describes the enum ai.stigmer.agentic.agentchannel.v1.ChannelOutboundOrigin.
+ */
+export const ChannelOutboundOriginSchema = /*@__PURE__*/ enumDesc(file_ai_stigmer_agentic_agentchannel_v1_outbound, 0);
+//# sourceMappingURL=outbound_pb.js.map

package/ai/stigmer/agentic/agentchannel/v1/outbound_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/outbound_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qIAAqI;AACrI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,gDAAgD,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,kDAAkD,EAAE,MAAM,oBAAoB,CAAC;AAExF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAY,aAAa,CACpF,QAAQ,CAAC,ijCAAijC,EAAE,CAAC,gDAAgD,EAAE,kDAAkD,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA8ItsC;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,qBAuBX;AAvBD,WAAY,qBAAqB;IAC/B;;;;OAIG;IACH,+HAAuC,CAAA;IAEvC;;;;;OAKG;IACH,iGAAwB,CAAA;IAExB;;;;;OAKG;IACH,yEAAY,CAAA;AACd,CAAC,EAvBW,qBAAqB,KAArB,qBAAqB,QAuBhC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,gDAAgD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/agentchannel/v1/spec_pb.d.ts

@@ -133,6 +133,24 @@ export type AgentChannelSpec = Message<"ai.stigmer.agentic.agentchannel.v1.Agent
      * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference app_ref = 5;
      */
     appRef?: ApiResourceReference;
+    /**
+     * Whether the serving agent may send business-initiated (proactive)
+     * messages on this channel. Off by default: a channel is reply-only
+     * until its owner grants this.
+     *
+     * @internal
+     * proactive-messaging DD-002 D5, the DD-014 two-consents operator
+     * lever, living where `enabled` lives (the surface owns the grant).
+     * Existing channels keep reply-only behavior on deploy. Tuning knobs
+     * (rate caps) stay platform config (DD-006 posture); what owners
+     * control is this grant. The runner attaches the send_channel_message
+     * tool only when getByAgent finds an installed + enabled channel with
+     * this flag set — an agent with no proactive channel never sees the
+     * tool.
+     *
+     * @generated from field: bool proactive_messaging_enabled = 7;
+     */
+    proactiveMessagingEnabled: boolean;
 };
 /**
  * Describes the message ai.stigmer.agentic.agentchannel.v1.AgentChannelSpec.

package/ai/stigmer/agentic/agentchannel/v1/spec_pb.js

@@ -8,7 +8,7 @@ import { file_buf_validate_validate } from "../../../../../buf/validate/validate
 /**
  * Describes the file ai/stigmer/agentic/agentchannel/v1/spec.proto.
  */
-export const file_ai_stigmer_agentic_agentchannel_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
+export const file_ai_stigmer_agentic_agentchannel_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_field_options, file_ai_stigmer_commons_apiresource_io, file_buf_validate_validate]);
 /**
  * Describes the message ai.stigmer.agentic.agentchannel.v1.AgentChannelSpec.
  * Use `create(AgentChannelSpecSchema)` to create a new message.

package/ai/stigmer/agentic/agentchannel/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,8vCAA8vC,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAqIp4C;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAoB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAoC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/agentchannel/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iIAAiI;AACjI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,gzCAAgzC,EAAE,CAAC,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwJt7C;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAoB/D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;AAoC/D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/platformclient/v1/spec_pb.d.ts

@@ -102,9 +102,9 @@ export type PlatformClientSpec = Message<"ai.stigmer.iam.platformclient.v1.Platf
      * called with a user_id that has no existing account.
      *
      * When false (default), the platform must explicitly create identity accounts
-     * before minting tokens. mintUserToken returns NOT_FOUND if the user does
-     * not exist. This gives platforms full control over which users can access
-     * Stigmer resources.
+     * before minting tokens. mintUserToken returns FAILED_PRECONDITION if the
+     * user does not exist. This gives platforms full control over which users can
+     * access Stigmer resources.
      *
      * When true, Stigmer creates an IdentityAccount automatically on first
      * encounter, using the user_email and user_name from the mintUserToken request

package/ai/stigmer/iam/platformclient/v1/token_connect.d.ts

@@ -40,9 +40,12 @@ export declare const PlatformClientTokenController: {
          *
          * Error scenarios:
          * - UNAUTHENTICATED: Invalid client_id or client_secret
-         * - NOT_FOUND: user_id does not exist and auto_provision_accounts is false
-         * - FAILED_PRECONDITION: PlatformClient secret has expired
+         * - FAILED_PRECONDITION: user_id does not exist and auto_provision_accounts
+         *   is false, or the PlatformClient secret has expired
          * - PERMISSION_DENIED: Origin not in allowed_origins (when configured)
+         * - INTERNAL: Account provisioning could not be completed (for example, the
+         *   auto_grant_on_org role grant failed). No partial account is left behind
+         *   — the account is rolled back — so the request is safe to retry.
          *
          * @internal
          * This RPC is public — no Bearer token is required. The caller authenticates

package/ai/stigmer/iam/platformclient/v1/token_connect.js

@@ -46,9 +46,12 @@ export const PlatformClientTokenController = {
          *
          * Error scenarios:
          * - UNAUTHENTICATED: Invalid client_id or client_secret
-         * - NOT_FOUND: user_id does not exist and auto_provision_accounts is false
-         * - FAILED_PRECONDITION: PlatformClient secret has expired
+         * - FAILED_PRECONDITION: user_id does not exist and auto_provision_accounts
+         *   is false, or the PlatformClient secret has expired
          * - PERMISSION_DENIED: Origin not in allowed_origins (when configured)
+         * - INTERNAL: Account provisioning could not be completed (for example, the
+         *   auto_grant_on_org role grant failed). No partial account is left behind
+         *   — the account is rolled back — so the request is safe to retry.
          *
          * @internal
          * This RPC is public — no Bearer token is required. The caller authenticates

package/ai/stigmer/iam/platformclient/v1/token_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"token_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"token_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8HAA8H;AAC9H,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,gEAAgE;IAC1E,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAgCG;QACH,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;WAeG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,qBAAqB;YACxB,CAAC,EAAE,sBAAsB;YACzB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/iam/platformclient/v1/token_pb.d.ts

@@ -256,9 +256,12 @@ export declare const PlatformClientTokenController: GenService<{
      *
      * Error scenarios:
      * - UNAUTHENTICATED: Invalid client_id or client_secret
-     * - NOT_FOUND: user_id does not exist and auto_provision_accounts is false
-     * - FAILED_PRECONDITION: PlatformClient secret has expired
+     * - FAILED_PRECONDITION: user_id does not exist and auto_provision_accounts
+     *   is false, or the PlatformClient secret has expired
      * - PERMISSION_DENIED: Origin not in allowed_origins (when configured)
+     * - INTERNAL: Account provisioning could not be completed (for example, the
+     *   auto_grant_on_org role grant failed). No partial account is left behind
+     *   — the account is rolled back — so the request is safe to retry.
      *
      * @internal
      * This RPC is public — no Bearer token is required. The caller authenticates

package/ai/stigmer/iam/platformclient/v1/token_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,omDAAomD,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAqE3rD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8E9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAwC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAyDrC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"token_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/platformclient/v1/token_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8HAA8H;AAC9H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,omDAAomD,EAAE,CAAC,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAqE3rD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA+B9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8E9D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAwC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GA4DrC,aAAa,CAChB,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/protos",
-  "version": "3.5.1",
+  "version": "3.5.3",
   "description": "Generated TypeScript protobuf stubs for Stigmer APIs",
   "license": "Apache-2.0",
   "type": "module",