@stigmer/protos 3.9.0 → 3.11.0

package/ai/stigmer/agentic/executioncontext/v1/command_pb.d.ts

@@ -9,13 +9,22 @@ export declare const file_ai_stigmer_agentic_executioncontext_v1_command: GenFil
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
- *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
- *
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Every write RPC uses is_skip_authorization with a real handler-level check
+ * (the framework's declarative FGA options cannot express any of these):
+ *   - create: the caller-class differs by transport. Internal in-process
+ *     pipeline calls (agent execution, workflow execution, workflow recovery,
+ *     MCP connect) are trusted — the parent operation already authorized the
+ *     run against its session-or-org, and the EC is created before that parent
+ *     is persisted, so it carries no resource to re-check. External callers
+ *     must hold can_create_execution_in on metadata.org (the same bar that
+ *     gates creating an execution in the org; held by members and guests).
+ *     A declarative org option cannot encode the internal/external split.
+ *   - apply: intentionally unannotated router — it delegates to create
+ *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
+ *     pipeline runs under create's handler, authorization included.
+ *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
+ *     per the execution_context FGA model). The FGA target is the loaded
+ *     resource, so it cannot be a declarative method option.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */
@@ -24,8 +33,9 @@ export declare const ExecutionContextCommandController: GenService<{
      * Create or update an ExecutionContext.
      *
      * @internal
-     * The authorization and state-operation are determined depending on whether the execution context
-     * is going to be created or updated which is determined as part of the request execution.
+     * Router only: delegates to create when the resource does not exist and
+     * fails with ALREADY_EXISTS when it does (no update RPC). Authorization is
+     * inherited from the delegated create pipeline.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.apply
      */
@@ -38,8 +48,13 @@ export declare const ExecutionContextCommandController: GenService<{
      * Create a new ExecutionContext for an execution.
      *
      * @internal
-     * Called by execution pipeline on behalf of the user.
-     * Handler-level derived auth: checks can_edit on parent agent_execution or workflow_execution.
+     * Called by the execution pipelines (agent execution, workflow execution,
+     * workflow recovery, MCP connect) as sub-steps, and reachable directly by
+     * API clients. is_skip_authorization because the caller-class split cannot
+     * be a declarative option: the create handler trusts internal in-process
+     * calls (already authorized upstream) and requires external callers to hold
+     * can_create_execution_in on metadata.org. The pipeline additionally grants
+     * the caller the owner tuple, which gates all subsequent reads and delete.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.create
      */
@@ -52,8 +67,10 @@ export declare const ExecutionContextCommandController: GenService<{
      * Delete an ExecutionContext.
      *
      * @internal
-     * Called when execution completes. Handler-level derived auth: checks can_edit
-     * on parent agent_execution or workflow_execution.
+     * Called when execution completes. Handler-level auth (the FGA target is the
+     * loaded resource, so it cannot be a declarative option): caller must have
+     * can_edit on execution_context:<id>, which the FGA model resolves to the
+     * owner written at create time.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController.delete
      */

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js

@@ -14,13 +14,22 @@ export const file_ai_stigmer_agentic_executioncontext_v1_command = /*@__PURE__*/
  * ExecutionContextCommandController handles write operations for ExecutionContext resources.
  *
  * @internal
- * Authorization: All RPCs use is_skip_authorization with custom handler-level derived auth.
- * ExecutionContext is ephemeral (1:1 with its parent execution) and has no dedicated
- * FGA model. Authorization is derived from the parent execution:
- *   - create: Caller must have can_edit on parent agent_execution or workflow_execution
- *   - delete: Caller must have can_edit on parent agent_execution or workflow_execution
- *
- * This avoids FGA tuple churn for short-lived resources while maintaining proper access control.
+ * Every write RPC uses is_skip_authorization with a real handler-level check
+ * (the framework's declarative FGA options cannot express any of these):
+ *   - create: the caller-class differs by transport. Internal in-process
+ *     pipeline calls (agent execution, workflow execution, workflow recovery,
+ *     MCP connect) are trusted — the parent operation already authorized the
+ *     run against its session-or-org, and the EC is created before that parent
+ *     is persisted, so it carries no resource to re-check. External callers
+ *     must hold can_create_execution_in on metadata.org (the same bar that
+ *     gates creating an execution in the org; held by members and guests).
+ *     A declarative org option cannot encode the internal/external split.
+ *   - apply: intentionally unannotated router — it delegates to create
+ *     (create-or-fail; ExecutionContext has no update RPC) and the delegated
+ *     pipeline runs under create's handler, authorization included.
+ *   - delete: caller must have can_edit on execution_context:<id> (owner-only,
+ *     per the execution_context FGA model). The FGA target is the loaded
+ *     resource, so it cannot be a declarative method option.
  *
  * @generated from service ai.stigmer.agentic.executioncontext.v1.ExecutionContextCommandController
  */

package/ai/stigmer/agentic/executioncontext/v1/command_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,4sBAA4sB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEz5B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,iCAAiC,GA2CzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/command_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4IAA4I;AAC5I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAY,aAAa,CACvF,QAAQ,CAAC,4sBAA4sB,EAAE,CAAC,+CAA+C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEz5B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAmDzC,aAAa,CAChB,WAAW,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/query_connect.d.ts

@@ -56,12 +56,14 @@ export declare const ExecutionContextQueryController: {
          * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
          *
          * Secret handling (cloud): the decrypt path is gated by caller credential
-         * class, not by FGA — runners authenticate as the user who owns the
-         * execution, so permissions cannot tell them apart. Callers presenting a
-         * platform-minted runner token (token_type of sandbox, workflow_sandbox,
-         * connect_sandbox, or embedded_runner) receive decrypted secret values;
-         * every other caller (user JWT, SDK, console) receives the same redaction
-         * as get/getByReference.
+         * class AND scope, not by FGA — runners authenticate as the user who owns
+         * the execution, so permissions cannot tell them apart. Callers presenting
+         * a platform-minted runner token (token_type of sandbox, workflow_sandbox,
+         * or connect_sandbox) whose scope claim binds it to this very execution
+         * receive decrypted secret values. The unscoped embedded_runner bootstrap
+         * credential is refused; desktop runners exchange it for a scoped token
+         * via getRunnerScopedToken before reading. Every other caller (user JWT,
+         * SDK, console) receives the same redaction as get/getByReference.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
          */

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js

@@ -64,12 +64,14 @@ export const ExecutionContextQueryController = {
          * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
          *
          * Secret handling (cloud): the decrypt path is gated by caller credential
-         * class, not by FGA — runners authenticate as the user who owns the
-         * execution, so permissions cannot tell them apart. Callers presenting a
-         * platform-minted runner token (token_type of sandbox, workflow_sandbox,
-         * connect_sandbox, or embedded_runner) receive decrypted secret values;
-         * every other caller (user JWT, SDK, console) receives the same redaction
-         * as get/getByReference.
+         * class AND scope, not by FGA — runners authenticate as the user who owns
+         * the execution, so permissions cannot tell them apart. Callers presenting
+         * a platform-minted runner token (token_type of sandbox, workflow_sandbox,
+         * or connect_sandbox) whose scope claim binds it to this very execution
+         * receive decrypted secret values. The unscoped embedded_runner bootstrap
+         * credential is refused; desktop runners exchange it for a scoped token
+         * via getRunnerScopedToken before reading. Every other caller (user JWT,
+         * SDK, console) receives the same redaction as get/getByReference.
          *
          * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
          */

package/ai/stigmer/agentic/executioncontext/v1/query_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;WAiBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0IAA0I;AAC1I,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,wEAAwE;IAClF,OAAO,EAAE;QACP;;;;;;;;WAQG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,kBAAkB;YACrB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;WAQG;QACH,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,CAAC,EAAE,gCAAgC;YACnC,CAAC,EAAE,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/agentic/executioncontext/v1/query_pb.d.ts

@@ -60,12 +60,14 @@ export declare const ExecutionContextQueryController: GenService<{
      * Handler-level auth (cloud): direct FGA can_view on the execution_context resource.
      *
      * Secret handling (cloud): the decrypt path is gated by caller credential
-     * class, not by FGA — runners authenticate as the user who owns the
-     * execution, so permissions cannot tell them apart. Callers presenting a
-     * platform-minted runner token (token_type of sandbox, workflow_sandbox,
-     * connect_sandbox, or embedded_runner) receive decrypted secret values;
-     * every other caller (user JWT, SDK, console) receives the same redaction
-     * as get/getByReference.
+     * class AND scope, not by FGA — runners authenticate as the user who owns
+     * the execution, so permissions cannot tell them apart. Callers presenting
+     * a platform-minted runner token (token_type of sandbox, workflow_sandbox,
+     * or connect_sandbox) whose scope claim binds it to this very execution
+     * receive decrypted secret values. The unscoped embedded_runner bootstrap
+     * credential is refused; desktop runners exchange it for a scoped token
+     * via getRunnerScopedToken before reading. Every other caller (user JWT,
+     * SDK, console) receives the same redaction as get/getByReference.
      *
      * @generated from rpc ai.stigmer.agentic.executioncontext.v1.ExecutionContextQueryController.getByExecutionId
      */

package/ai/stigmer/agentic/executioncontext/v1/query_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,0vBAA0vB,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEv/B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAoDvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/executioncontext/v1/query_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0IAA0I;AAC1I,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,+CAA+C,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,8CAA8C,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,uDAAuD,EAAE,MAAM,wDAAwD,CAAC;AACjI,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,0vBAA0vB,EAAE,CAAC,+CAA+C,EAAE,8CAA8C,EAAE,sCAAsC,EAAE,uDAAuD,EAAE,0CAA0C,CAAC,CAAC,CAAC;AAEv/B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAsDvC,aAAa,CAChB,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.d.ts

@@ -71,13 +71,18 @@ export type McpServerSpec = Message<"ai.stigmer.agentic.mcpserver.v1.McpServerSp
     /**
      * Default tools to enable from this MCP server.
      * Empty list means all tools are enabled by default.
+     * Applies whenever an agent's McpServerUsage.enabled_tools is empty.
      *
      * @internal
      * Tool names must match exactly what the MCP server reports via tools/list.
      * Only names from discovered_capabilities.tools are valid here.
      * Do NOT include names from discovered_capabilities.resource_templates —
      * resource templates are read-only data endpoints, not callable tools.
-     * Including a resource template name here causes a fatal runtime error.
+     * A name the server does not expose (including a resource template name)
+     * is warned and ignored at execution: the runner enforces the INTERSECTION
+     * with the server's live toolset, so a stale or mistyped entry narrows the
+     * toolset but never widens it or fails the run. Enforcement is per harness
+     * — see McpServerUsage.enabled_tools in agent/v1/spec.proto.
      *
      * @generated from field: repeated string default_enabled_tools = 7;
      */

package/ai/stigmer/agentic/mcpserver/v1/spec_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAmK7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4E5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6H5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,2HAA2H;AAC3H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,iDAAiD,EAAE,MAAM,kDAAkD,CAAC;AAErH,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0mEAA0mE,EAAE,CAAC,2CAA2C,EAAE,iDAAiD,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAwK7xE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA+D5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA4E5D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AA6H5D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/mcpserver/v1/status_pb.d.ts

@@ -102,8 +102,9 @@ export declare const McpServerStatusSchema: GenMessage<McpServerStatus>;
  *   - tools: Callable actions the agent can invoke (e.g., search_code, create_pr).
  *     Only tool names are valid in Agent enabled_tools and McpServer default_enabled_tools.
  *   - resource_templates: Read-only data endpoints accessed by URI template.
- *     Resource template names must NEVER appear in enabled_tools — doing so causes
- *     a fatal runtime error.
+ *     Resource template names must NEVER appear in enabled_tools — such a name
+ *     never matches a discovered tool, so the runner warns and ignores it
+ *     (enforcing the intersection with the live toolset).
  *
  * Populated by:
  * - Seedpack bootstrap (built-in servers with known, stable tool sets)

package/ai/stigmer/agentic/mcpserver/v1/status_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y2DAAy2D,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAsFljE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA6C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA2C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA6D9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"status_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/mcpserver/v1/status_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,yCAAyC,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,2CAA2C,CAAC;AAEvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAE3F,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGrG;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,y2DAAy2D,EAAE,CAAC,yCAAyC,EAAE,0CAA0C,EAAE,oCAAoC,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAsFljE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA8C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAkC9D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA2C9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AA6D9D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,aAAa,CACrE,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,eA0BX;AA1BD,WAAY,eAAe;IACzB;;;;;OAKG;IACH,qGAAgC,CAAA;IAEhC;;;;;;OAMG;IACH,uDAAS,CAAA;IAET;;;;;;OAMG;IACH,2DAAW,CAAA;AACb,CAAC,EA1BW,eAAe,KAAf,eAAe,QA0B1B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,aAAa,CAC1E,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,cA6BX;AA7BD,WAAY,cAAc;IACxB;;;;OAIG;IACH,mGAAgC,CAAA;IAEhC;;;;OAIG;IACH,6FAA6B,CAAA;IAE7B;;;;OAIG;IACH,qGAAiC,CAAA;IAEjC;;;;;OAKG;IACH,qFAAyB,CAAA;AAC3B,CAAC,EA7BW,cAAc,KAAd,cAAc,QA6BzB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B,aAAa,CACxE,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/agentic/workflowexecution/v1/io_pb.d.ts

@@ -857,8 +857,9 @@ export type SendSignalInput = Message<"ai.stigmer.agentic.workflowexecution.v1.S
      * Optional idempotency key for deduplication of signal delivery.
      *
      * @internal
-     * When provided, duplicate signals with the same key (within the 24-hour TTL window)
-     * return the cached response instead of re-delivering the signal.
+     * When provided, a duplicate signal with the same key (within the 24-hour
+     * TTL window) is rejected with ALREADY_EXISTS instead of being re-delivered;
+     * nothing is cached or replayed. Both editions enforce this identically.
      * Keys are scoped to the organization to prevent cross-org collisions.
      *
      * @since Gap B2 (Event Dedupe)

package/ai/stigmer/agentic/workflowexecution/v1/io_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowexecution/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,8CAA8C,EAAE,MAAM,oCAAoC,CAAC;AAEpG,OAAO,EAAE,gDAAgD,EAAE,MAAM,aAAa,CAAC;AAE/E,OAAO,EAAE,iDAAiD,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,kDAAkD,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGpI;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,8qOAA8qO,EAAE,CAAC,8CAA8C,EAAE,gDAAgD,EAAE,iDAAiD,EAAE,kDAAkD,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAuB9/O;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAsBlE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AA+BlE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAqGlE;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAmElE;;;GAGG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAwD,aAAa,CAC7H,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AA+GlE;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAmD,aAAa,CACnH,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AA6DlE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAsGlE;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAiGlE;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAuBlE;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAoClE;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAoCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA6CnE;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAgCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAyBnE;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA4DnE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAsFnE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAqCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAgEnE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAsFnE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAsCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAoFnE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA0BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA0BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA+BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAmCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAiFnE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA8BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,kBAqCX;AArCD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;OAIG;IACH,uEAAc,CAAA;IAEd;;;;;;OAMG;IACH,mEAAY,CAAA;IAEZ;;;;OAIG;IACH,2DAAQ,CAAA;IAER;;;;OAIG;IACH,+DAAU,CAAA;AACZ,CAAC,EArCW,kBAAkB,KAAlB,kBAAkB,QAqC7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,iBAyBX;AAzBD,WAAY,iBAAiB;IAC3B;;OAEG;IACH,uEAAe,CAAA;IAEf;;OAEG;IACH,iEAAY,CAAA;IAEZ;;OAEG;IACH,+DAAW,CAAA;IAEX;;OAEG;IACH,iEAAY,CAAA;IAEZ;;OAEG;IACH,iEAAY,CAAA;AACd,CAAC,EAzBW,iBAAiB,KAAjB,iBAAiB,QAyB5B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA+B,aAAa,CAC9E,QAAQ,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/agentic/workflowexecution/v1/io_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yIAAyI;AACzI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,8CAA8C,EAAE,MAAM,oCAAoC,CAAC;AAEpG,OAAO,EAAE,gDAAgD,EAAE,MAAM,aAAa,CAAC;AAE/E,OAAO,EAAE,iDAAiD,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,kDAAkD,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGpI;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAAY,aAAa,CACnF,QAAQ,CAAC,8qOAA8qO,EAAE,CAAC,8CAA8C,EAAE,gDAAgD,EAAE,iDAAiD,EAAE,kDAAkD,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAuB9/O;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAsBlE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AA+BlE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAqGlE;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAmElE;;;GAGG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAwD,aAAa,CAC7H,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AA+GlE;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAmD,aAAa,CACnH,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AA6DlE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAsGlE;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAiGlE;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAuBlE;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAkD,aAAa,CACjH,WAAW,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAoClE;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAoCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAgD,aAAa,CAC7G,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA6CnE;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA8C,aAAa,CACzG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAgCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAyBnE;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA6DnE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAsFnE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmC,aAAa,CACnF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAqCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAgEnE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAuC,aAAa,CAC3F,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAsFnE;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAsCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAoFnE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA0BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA0BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA+BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsC,aAAa,CACzF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAmCnE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAiFnE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AA8BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,kBAqCX;AArCD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,yEAAe,CAAA;IAEf;;;;OAIG;IACH,uEAAc,CAAA;IAEd;;;;;;OAMG;IACH,mEAAY,CAAA;IAEZ;;;;OAIG;IACH,2DAAQ,CAAA;IAER;;;;OAIG;IACH,+DAAU,CAAA;AACZ,CAAC,EArCW,kBAAkB,KAAlB,kBAAkB,QAqC7B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC,aAAa,CAChF,QAAQ,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,iBAyBX;AAzBD,WAAY,iBAAiB;IAC3B;;OAEG;IACH,uEAAe,CAAA;IAEf;;OAEG;IACH,iEAAY,CAAA;IAEZ;;OAEG;IACH,+DAAW,CAAA;IAEX;;OAEG;IACH,iEAAY,CAAA;IAEZ;;OAEG;IACH,iEAAY,CAAA;AACd,CAAC,EAzBW,iBAAiB,KAAjB,iBAAiB,QAyB5B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA+B,aAAa,CAC9E,QAAQ,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/billing/v1/model_pricing_baseline_pb.d.ts

@@ -141,26 +141,62 @@ export declare const SummarizationConfigSchema: GenMessage<SummarizationConfig>;
 /**
  * ModelCapabilities flags what a model supports. Catalog metadata.
  *
+ * Presence is tri-state at the block level: an absent block means the
+ * model's capabilities were never assessed, and consumers must treat that
+ * as "unknown" — never as all-false. A present block is populated
+ * all-or-nothing (every flag assessed together), because proto3 bools
+ * carry no per-field presence: a partially filled block would silently
+ * encode its unassessed flags as false.
+ *
  * @generated from message ai.stigmer.billing.v1.ModelCapabilities
  */
 export type ModelCapabilities = Message<"ai.stigmer.billing.v1.ModelCapabilities"> & {
     /**
+     * Whether the model accepts tool / function-calling requests.
+     *
      * @generated from field: bool tool_use = 1;
      */
     toolUse: boolean;
     /**
+     * Whether image input delivered to this model produces genuine visual
+     * understanding.
+     *
+     * The meaning is harness-scoped. For native-harness entries this is the
+     * provider-documented capability of the model itself. For cursor-harness
+     * entries it encodes "images work through this model on the Cursor
+     * path": Cursor's serving stack hands vision off to a multimodal model
+     * server-side, so a model that is text-only by its own documentation
+     * (composer-2.5) still sees images when dispatched via Cursor.
+     *
+     * @internal
+     * Cursor-path values are established empirically — a nonce-bearing image
+     * probe per model (production executions, 2026-08-10; evidence table on
+     * stigmer-cloud#281, methodology from the whatsapp-media project's T06
+     * probe) — because Cursor's own docs under-report: the server-side
+     * vision hand-off is undocumented behavior. If Cursor changes that
+     * behavior, re-probe; do not re-read the docs. The OSS runner's vision
+     * gate (attachment-vision.ts, stigmer#370) fails open — it degrades
+     * image delivery only on an explicit false.
+     *
      * @generated from field: bool vision = 2;
      */
     vision: boolean;
     /**
+     * Whether the model streams incremental output tokens.
+     *
      * @generated from field: bool streaming = 3;
      */
     streaming: boolean;
     /**
+     * Whether the model supports extended thinking / reasoning traces.
+     *
      * @generated from field: bool thinking = 4;
      */
     thinking: boolean;
     /**
+     * Whether thinking depth adapts to the request instead of a fixed
+     * budget (e.g. Anthropic adaptive thinking).
+     *
      * @generated from field: bool adaptive_thinking = 5;
      */
     adaptiveThinking: boolean;

package/ai/stigmer/billing/v1/model_pricing_baseline_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"model_pricing_baseline_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/billing/v1/model_pricing_baseline_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,owFAAowF,EAAE,CAAC,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA+E/0F;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AA0BpE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAgCpE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAkCpE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AA6KpE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,0BA4BX;AA5BD,WAAY,0BAA0B;IACpC;;OAEG;IACH,qJAA6C,CAAA;IAE7C;;;;;OAKG;IACH,iHAA2B,CAAA;IAE3B;;;;OAIG;IACH,yHAA+B,CAAA;IAE/B;;;;;OAKG;IACH,mHAA4B,CAAA;AAC9B,CAAC,EA5BW,0BAA0B,KAA1B,0BAA0B,QA4BrC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAwC,aAAa,CAChG,QAAQ,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"model_pricing_baseline_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/billing/v1/model_pricing_baseline_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GAAY,aAAa,CACrF,QAAQ,CAAC,owFAAowF,EAAE,CAAC,0BAA0B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AA+E/0F;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AA0BpE;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAgCpE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAsEpE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AA6KpE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,0BA4BX;AA5BD,WAAY,0BAA0B;IACpC;;OAEG;IACH,qJAA6C,CAAA;IAE7C;;;;;OAKG;IACH,iHAA2B,CAAA;IAE3B;;;;OAIG;IACH,yHAA+B,CAAA;IAE/B;;;;;OAKG;IACH,mHAA4B,CAAA;AAC9B,CAAC,EA5BW,0BAA0B,KAA1B,0BAA0B,QA4BrC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAwC,aAAa,CAChG,QAAQ,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/commons/apiresource/enum_pb.d.ts

@@ -119,7 +119,9 @@ export declare const ApiResourceStateOperationTypeSchema: GenEnum<ApiResourceSta
  *
  * The visibility levels map to FGA tuples:
  * - PRIVATE: no additional viewer tuples (owner-only access)
- * - ORG: resource#viewer@organization:<org>#member tuple (all org members)
+ * - ORG: resource#viewer@organization:<org>#viewer tuple (everyone in the
+ *   org — the org role hierarchy flows downward, so owners, admins, members
+ *   AND read-only viewers all satisfy the organization#viewer userset)
  * - PUBLIC: resource#viewer@identity_account:* with allow_public (all users)
  * - PLATFORM: resource#platform_viewer@identity_provider:<idp>#platform_user
  *   (all members of all organizations managed by the owning org's
@@ -165,14 +167,23 @@ export declare enum ApiResourceVisibility {
      */
     visibility_public = 2,
     /**
-     * All members of the owning organization can access (read) this resource.
+     * Everyone in the owning organization can access (read) this resource —
+     * all org roles including read-only viewers (the role SSO auto-provisioning
+     * grants by default). Running or otherwise spending against the resource
+     * still requires the org-level member-or-guest permissions
+     * (can_create_session / can_create_execution_in); org visibility widens
+     * read, never spend.
      * Used for instances where a team wants shared observability of executions
      * without granting access to all authenticated users.
      *
-     * FGA tuple: resource#viewer@organization:<org>#member
+     * FGA tuple: resource#viewer@organization:<org>#viewer
+     * (Before cloud#257 the tuple targeted organization#member, which
+     * excluded viewer-role users; legacy tuples keep resolving until the
+     * cloud's boot-time backfill converges them.)
      *
      * For workflow instances, this enables zero-tuple-per-execution shared
-     * observability: all org members see all executions via inheritance.
+     * observability: everyone in the org sees all executions via inheritance
+     * once the instance opts in.
      *
      * @generated from enum value: visibility_org = 3;
      */

package/ai/stigmer/commons/apiresource/enum_pb.js

@@ -124,7 +124,9 @@ export const ApiResourceStateOperationTypeSchema = /*@__PURE__*/ enumDesc(file_a
  *
  * The visibility levels map to FGA tuples:
  * - PRIVATE: no additional viewer tuples (owner-only access)
- * - ORG: resource#viewer@organization:<org>#member tuple (all org members)
+ * - ORG: resource#viewer@organization:<org>#viewer tuple (everyone in the
+ *   org — the org role hierarchy flows downward, so owners, admins, members
+ *   AND read-only viewers all satisfy the organization#viewer userset)
  * - PUBLIC: resource#viewer@identity_account:* with allow_public (all users)
  * - PLATFORM: resource#platform_viewer@identity_provider:<idp>#platform_user
  *   (all members of all organizations managed by the owning org's
@@ -171,14 +173,23 @@ export var ApiResourceVisibility;
      */
     ApiResourceVisibility[ApiResourceVisibility["visibility_public"] = 2] = "visibility_public";
     /**
-     * All members of the owning organization can access (read) this resource.
+     * Everyone in the owning organization can access (read) this resource —
+     * all org roles including read-only viewers (the role SSO auto-provisioning
+     * grants by default). Running or otherwise spending against the resource
+     * still requires the org-level member-or-guest permissions
+     * (can_create_session / can_create_execution_in); org visibility widens
+     * read, never spend.
      * Used for instances where a team wants shared observability of executions
      * without granting access to all authenticated users.
      *
-     * FGA tuple: resource#viewer@organization:<org>#member
+     * FGA tuple: resource#viewer@organization:<org>#viewer
+     * (Before cloud#257 the tuple targeted organization#member, which
+     * excluded viewer-role users; legacy tuples keep resolving until the
+     * cloud's boot-time backfill converges them.)
      *
      * For workflow instances, this enables zero-tuple-per-execution shared
-     * observability: all org members see all executions via inheritance.
+     * observability: everyone in the org sees all executions via inheritance
+     * once the instance opts in.
      *
      * @generated from enum value: visibility_org = 3;
      */

package/ai/stigmer/commons/apiresource/enum_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,oqBAAoqB,CAAC,CAAC;AAEjrB;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,oBA0CX;AA1CD,WAAY,oBAAoB;IAC9B;;;;OAIG;IACH,6EAAe,CAAA;IAEf;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,iGAAyB,CAAA;AAC3B,CAAC,EA1CW,oBAAoB,KAApB,oBAAoB,QA0C/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,6BA0CX;AA1CD,WAAY,6BAA6B;IACvC;;;;OAIG;IACH,mKAAiD,CAAA;IAEjD;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,iFAAQ,CAAA;IAER;;;;OAIG;IACH,qFAAU,CAAA;AACZ,CAAC,EA1CW,6BAA6B,KAA7B,6BAA6B,QA0CxC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA2C,aAAa,CACtG,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAN,IAAY,qBA+EX;AA/ED,WAAY,qBAAqB;IAC/B;;;;;;;OAOG;IACH,+HAAuC,CAAA;IAEvC;;;;;;;;;;;;;;;;OAgBG;IACH,6FAAsB,CAAA;IAEtB;;;;;;;OAOG;IACH,2FAAqB,CAAA;IAErB;;;;;;;;;;;OAWG;IACH,qFAAkB,CAAA;IAElB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,+FAAuB,CAAA;AACzB,CAAC,EA/EW,qBAAqB,KAArB,qBAAqB,QA+EhC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"enum_pb.js","sourceRoot":"","sources":["../../../../../ai/stigmer/commons/apiresource/enum_pb.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yHAAyH;AACzH,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAY,aAAa,CAC5E,QAAQ,CAAC,oqBAAoqB,CAAC,CAAC;AAEjrB;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,oBA0CX;AA1CD,WAAY,oBAAoB;IAC9B;;;;OAIG;IACH,6EAAe,CAAA;IAEf;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,qEAAW,CAAA;IAEX;;;;OAIG;IACH,iGAAyB,CAAA;AAC3B,CAAC,EA1CW,oBAAoB,KAApB,oBAAoB,QA0C/B;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAkC,aAAa,CACpF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,6BA0CX;AA1CD,WAAY,6BAA6B;IACvC;;;;OAIG;IACH,mKAAiD,CAAA;IAEjD;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,qFAAU,CAAA;IAEV;;;;OAIG;IACH,iFAAQ,CAAA;IAER;;;;OAIG;IACH,qFAAU,CAAA;AACZ,CAAC,EA1CW,6BAA6B,KAA7B,6BAA6B,QA0CxC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA2C,aAAa,CACtG,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAN,IAAY,qBAwFX;AAxFD,WAAY,qBAAqB;IAC/B;;;;;;;OAOG;IACH,+HAAuC,CAAA;IAEvC;;;;;;;;;;;;;;;;OAgBG;IACH,6FAAsB,CAAA;IAEtB;;;;;;;OAOG;IACH,2FAAqB,CAAA;IAErB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,qFAAkB,CAAA;IAElB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,+FAAuB,CAAA;AACzB,CAAC,EAxFW,qBAAqB,KAArB,qBAAqB,QAwFhC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAmC,aAAa,CACtF,QAAQ,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/iampolicy/v1/command_connect.d.ts

@@ -203,6 +203,9 @@ export declare const IamPolicyCommandController: {
          *
          * Authorization:
          * - Caller must have 'can_grant_access' permission on the organization
+         * - System flows running as the platform machine account cannot satisfy this
+         *   check (the machine account holds no org-scoped grants by design) and must
+         *   use bootstrapRevokeOrgAccess instead
          *
          * Use Cases:
          * - Removing a member from an organization
@@ -219,5 +222,50 @@ export declare const IamPolicyCommandController: {
             readonly O: any;
             readonly kind: any;
         };
+        /**
+         * Revoke all of a user's access to an organization via the system (bootstrap) path.
+         *
+         * The system-flow twin of revokeOrgAccess: identical revocation behavior, but
+         * authorized by can_bootstrap_iam on platform:stigmer instead of
+         * can_grant_access on the organization.
+         *
+         * @internal
+         * Exists because system flows execute the revoke as the platform machine
+         * account, which by design holds no org-scoped grants. The system channel does
+         * NOT bypass authorization — it authenticates as the machine account, which
+         * can only satisfy platform-scoped permissions. revokeOrgAccess therefore
+         * always fails with PERMISSION_DENIED on the system channel; this RPC is the
+         * sanctioned path, mirroring how bootstrapPolicy is the system-path twin of
+         * create (see https://github.com/stigmer/stigmer/issues/332).
+         *
+         * The operation (identical to revokeOrgAccess after authorization):
+         * 1. Validates can_bootstrap_iam permission on platform:stigmer
+         * 2. Loads all policies where the identity account is principal within the org
+         *    scope, plus policies directly on the organization itself
+         * 3. Deletes all matching policies from MongoDB
+         * 4. Removes all corresponding tuples from OpenFGA (idempotent if none exist)
+         *
+         * Authorization:
+         * - Caller must have 'can_bootstrap_iam' permission on platform:stigmer
+         * - This is typically only granted to platform services (machine accounts)
+         *
+         * Use Cases:
+         * - Federated account deprovisioning (deprovisionFederatedAccount's revoke step)
+         * - Any platform-driven offboarding that runs under system credentials
+         *
+         * End-user member removal must use revokeOrgAccess, which checks
+         * can_grant_access on the organization.
+         *
+         * Input: RevokeOrgAccessInput with identity_account_id and organization_id
+         * Output: Empty (google.protobuf.Empty)
+         *
+         * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyCommandController.bootstrapRevokeOrgAccess
+         */
+        readonly bootstrapRevokeOrgAccess: {
+            readonly name: "bootstrapRevokeOrgAccess";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
     };
 };

package/ai/stigmer/iam/iampolicy/v1/command_connect.js

@@ -211,6 +211,9 @@ export const IamPolicyCommandController = {
          *
          * Authorization:
          * - Caller must have 'can_grant_access' permission on the organization
+         * - System flows running as the platform machine account cannot satisfy this
+         *   check (the machine account holds no org-scoped grants by design) and must
+         *   use bootstrapRevokeOrgAccess instead
          *
          * Use Cases:
          * - Removing a member from an organization
@@ -227,6 +230,51 @@ export const IamPolicyCommandController = {
             O: Empty,
             kind: MethodKind.Unary,
         },
+        /**
+         * Revoke all of a user's access to an organization via the system (bootstrap) path.
+         *
+         * The system-flow twin of revokeOrgAccess: identical revocation behavior, but
+         * authorized by can_bootstrap_iam on platform:stigmer instead of
+         * can_grant_access on the organization.
+         *
+         * @internal
+         * Exists because system flows execute the revoke as the platform machine
+         * account, which by design holds no org-scoped grants. The system channel does
+         * NOT bypass authorization — it authenticates as the machine account, which
+         * can only satisfy platform-scoped permissions. revokeOrgAccess therefore
+         * always fails with PERMISSION_DENIED on the system channel; this RPC is the
+         * sanctioned path, mirroring how bootstrapPolicy is the system-path twin of
+         * create (see https://github.com/stigmer/stigmer/issues/332).
+         *
+         * The operation (identical to revokeOrgAccess after authorization):
+         * 1. Validates can_bootstrap_iam permission on platform:stigmer
+         * 2. Loads all policies where the identity account is principal within the org
+         *    scope, plus policies directly on the organization itself
+         * 3. Deletes all matching policies from MongoDB
+         * 4. Removes all corresponding tuples from OpenFGA (idempotent if none exist)
+         *
+         * Authorization:
+         * - Caller must have 'can_bootstrap_iam' permission on platform:stigmer
+         * - This is typically only granted to platform services (machine accounts)
+         *
+         * Use Cases:
+         * - Federated account deprovisioning (deprovisionFederatedAccount's revoke step)
+         * - Any platform-driven offboarding that runs under system credentials
+         *
+         * End-user member removal must use revokeOrgAccess, which checks
+         * can_grant_access on the organization.
+         *
+         * Input: RevokeOrgAccessInput with identity_account_id and organization_id
+         * Output: Empty (google.protobuf.Empty)
+         *
+         * @generated from rpc ai.stigmer.iam.iampolicy.v1.IamPolicyCommandController.bootstrapRevokeOrgAccess
+         */
+        bootstrapRevokeOrgAccess: {
+            name: "bootstrapRevokeOrgAccess",
+            I: RevokeOrgAccessInput,
+            O: Empty,
+            kind: MethodKind.Unary,
+        },
     }
 };
 //# sourceMappingURL=command_connect.js.map

package/ai/stigmer/iam/iampolicy/v1/command_connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8BG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAgCG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA0CG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAkCG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}
+{"version":3,"file":"command_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/iampolicy/v1/command_connect.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sHAAsH;AACtH,oBAAoB;AACpB,cAAc;AAEd,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE;QACP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8BG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAgCG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA0CG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE,SAAS;YACZ,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAkCG;QACH,uBAAuB,EAAE;YACvB,IAAI,EAAE,yBAAyB;YAC/B,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BG;QACH,eAAe,EAAE;YACf,IAAI,EAAE,iBAAiB;YACvB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAsCG;QACH,wBAAwB,EAAE;YACxB,IAAI,EAAE,0BAA0B;YAChC,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,KAAK;YACR,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}