@stigmer/runner 0.1.0-dev.20261017020314.g644422724c27

package/dist/gen/turn/ai/stigmer/runner/turn/v1/enum_pb.d.ts

@@ -0,0 +1,1016 @@
+import type { GenEnum, GenFile } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file ai/stigmer/runner/turn/v1/enum.proto.
+ */
+export declare const file_ai_stigmer_runner_turn_v1_enum: GenFile;
+/**
+ * MessageType defines the type of message in the conversation.
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.MessageType
+ */
+export declare enum MessageType {
+    /**
+     * Default value, not a valid message type.
+     *
+     * @generated from enum value: MESSAGE_TYPE_UNSPECIFIED = 0;
+     */
+    MESSAGE_TYPE_UNSPECIFIED = 0,
+    /**
+     * A message sent by the user to the agent.
+     *
+     * @generated from enum value: MESSAGE_HUMAN = 1;
+     */
+    MESSAGE_HUMAN = 1,
+    /**
+     * A response generated by the AI agent.
+     *
+     * @generated from enum value: MESSAGE_AI = 2;
+     */
+    MESSAGE_AI = 2,
+    /**
+     * The result returned by a tool after execution.
+     *
+     * @generated from enum value: MESSAGE_TOOL = 3;
+     */
+    MESSAGE_TOOL = 3,
+    /**
+     * A system-generated message injected by the platform (e.g., budget warnings, summarization notices).
+     *
+     * @generated from enum value: MESSAGE_SYSTEM = 4;
+     */
+    MESSAGE_SYSTEM = 4,
+    /**
+     * Reasoning/thinking content from the model.
+     *
+     * Emitted by models with extended thinking enabled (e.g., Claude with
+     * thinking, Cursor's thinking events). Contains the model's internal
+     * reasoning that is distinct from the final assistant response.
+     *
+     * Rendered distinctly from assistant text in the UI (e.g., collapsible
+     * thinking block with subdued styling).
+     *
+     * @generated from enum value: MESSAGE_THINKING = 5;
+     */
+    MESSAGE_THINKING = 5
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.MessageType.
+ */
+export declare const MessageTypeSchema: GenEnum<MessageType>;
+/**
+ * ToolCallStatus defines the status of a tool call.
+ *
+ * Status Transitions:
+ *
+ * Normal flow (no approval required):
+ * TOOL_CALL_PENDING → TOOL_CALL_RUNNING → TOOL_CALL_COMPLETED
+ *
+ * Failure flow:
+ * TOOL_CALL_PENDING → TOOL_CALL_RUNNING → TOOL_CALL_FAILED
+ *
+ * Approval flow (HITL):
+ * TOOL_CALL_PENDING → TOOL_CALL_WAITING_APPROVAL → TOOL_CALL_RUNNING → TOOL_CALL_COMPLETED
+ *                                                ↘ TOOL_CALL_SKIPPED (if user skips)
+ *
+ * Interruption flow (run terminalizes with the call unfinished):
+ * TOOL_CALL_PENDING / TOOL_CALL_RUNNING / TOOL_CALL_WAITING_APPROVAL → TOOL_CALL_INTERRUPTED
+ *
+ * Terminal States:
+ * - TOOL_CALL_COMPLETED: Tool executed successfully
+ * - TOOL_CALL_FAILED: Tool execution failed
+ * - TOOL_CALL_SKIPPED: User chose to skip this tool (HITL)
+ * - TOOL_CALL_INTERRUPTED: Run terminalized before the tool finished
+ *   (platform-authored; see the value's doc for the recovery supersede rule)
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.ToolCallStatus
+ */
+export declare enum ToolCallStatus {
+    /**
+     * Default value, not a valid tool call status.
+     *
+     * @generated from enum value: TOOL_CALL_STATUS_UNSPECIFIED = 0;
+     */
+    TOOL_CALL_STATUS_UNSPECIFIED = 0,
+    /**
+     * Tool call is queued and waiting to execute.
+     *
+     * @generated from enum value: TOOL_CALL_PENDING = 1;
+     */
+    TOOL_CALL_PENDING = 1,
+    /**
+     * Tool is currently executing.
+     *
+     * @generated from enum value: TOOL_CALL_RUNNING = 2;
+     */
+    TOOL_CALL_RUNNING = 2,
+    /**
+     * Tool executed successfully and returned a result.
+     *
+     * @generated from enum value: TOOL_CALL_COMPLETED = 3;
+     */
+    TOOL_CALL_COMPLETED = 3,
+    /**
+     * Tool execution failed with an error.
+     *
+     * @generated from enum value: TOOL_CALL_FAILED = 4;
+     */
+    TOOL_CALL_FAILED = 4,
+    /**
+     * Blocked on user approval.
+     *
+     * The tool requires user consent before execution. This status is set when:
+     * - Tool has requires_approval=true (from approval policy chain)
+     * - RunSpec.auto_approve_all is false
+     *
+     * While in this status:
+     * - ToolCall.approval_message contains the approval prompt
+     * - ToolCall.approval_requested_at is set
+     * - RunPhase is RUN_WAITING_FOR_APPROVAL
+     *
+     * Transitions:
+     * - APPROVE → TOOL_CALL_RUNNING → TOOL_CALL_COMPLETED/FAILED
+     * - SKIP → TOOL_CALL_SKIPPED
+     * - REJECT → TOOL_CALL_SKIPPED (the tool is denied, not executed; the run
+     *   continues). REJECT and SKIP share this terminal tool status — the two are
+     *   distinguished by ToolCall.approval_action (REJECT vs SKIP) and by the
+     *   append-only approval-event stream (REJECTED vs SKIPPED). REJECT does NOT
+     *   fail the run.
+     *
+     * @generated from enum value: TOOL_CALL_WAITING_APPROVAL = 5;
+     */
+    TOOL_CALL_WAITING_APPROVAL = 5,
+    /**
+     * User skipped this tool.
+     *
+     * Terminal state indicating the user chose not to execute this tool.
+     * When a tool is skipped:
+     * - The LLM receives a message: "Tool '{name}' was skipped by user"
+     * - Run continues without this tool's result
+     * - The LLM can adapt its plan accordingly
+     *
+     * This is a terminal state - the tool will not be retried.
+     * Unlike FAILED, SKIPPED is an intentional user decision, not an error.
+     *
+     * @generated from enum value: TOOL_CALL_SKIPPED = 6;
+     */
+    TOOL_CALL_SKIPPED = 6,
+    /**
+     * The run terminalized before this tool call finished (issue #207).
+     *
+     * PLATFORM-AUTHORED, never user- or tool-authored: the control plane settles
+     * any tool call still in PENDING / RUNNING / WAITING_APPROVAL to this value
+     * whenever its run reaches a terminal phase (COMPLETED / FAILED /
+     * CANCELLED / TERMINATED). Enforced at the server's persistence seams — the
+     * updateStatus merge chokepoint and the whole-resource terminal writers
+     * (Cancel/Terminate cascade, stale-workflow reconciliation) — so no runner
+     * exit path has to remember it. This is what makes the invariant total:
+     * a terminal run carries zero non-terminal tool calls.
+     *
+     * Honesty semantics (why the existing terminal values would lie):
+     * - Not FAILED: the tool never ran to an error — the run around it died.
+     * - Not SKIPPED: no user made a decision about this call.
+     * - Not COMPLETED: the tool produced no result.
+     *
+     * A settled call keeps its args, result-so-far, and approval provenance
+     * (requires_approval, approval_requested_at, ...) for the audit trail. A
+     * gated call settled here authors NO approval event — terminal-run
+     * gate-exits are deliberately not modeled as per-call events (see
+     * ApprovalEventType: a terminal run simply projects to zero pending
+     * approvals; RETRACTED is reserved for in-flight withdrawals).
+     *
+     * Recovery supersede rule: terminal for every consumer (clients render a
+     * neutral "interrupted" state; projections never gate on it), with ONE
+     * exception — when a FAILED run is recovered (Recover RPC) and the
+     * harness checkpoint re-executes the call under its original call id, the
+     * runner may advance the row in place to the call's true outcome. Live
+     * run evidence outranks the interruption marker; every other terminal
+     * status remains immovable.
+     *
+     * @generated from enum value: TOOL_CALL_INTERRUPTED = 7;
+     */
+    TOOL_CALL_INTERRUPTED = 7
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.ToolCallStatus.
+ */
+export declare const ToolCallStatusSchema: GenEnum<ToolCallStatus>;
+/**
+ * ToolKind is the harness-agnostic category of a tool call.
+ *
+ * Both execution harnesses emit tool calls with engine-specific names — the
+ * native (deepagents) harness uses snake_case (edit_file, execute, grep), while
+ * the Cursor harness uses PascalCase (StrReplace, Shell, Grep). ToolKind
+ * normalizes that identity once, in the runner, so every client (web, desktop,
+ * CLI, Ink) renders a tool the same way regardless of which harness produced it.
+ *
+ * This is identity, not presentation: it answers "what kind of tool is this?"
+ * and is deliberately distinct from ToolCallStreamingSource, which describes an
+ * orthogonal streaming capability. Result formatting is a client concern and is
+ * intentionally not encoded here.
+ *
+ * TOOL_KIND_UNSPECIFIED means the runner did not classify the tool — either the
+ * run predates this field, or the tool does not fit a known kind. Clients
+ * fall back to a tool-name lookup in that case, so legacy runs still
+ * render correctly.
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.ToolKind
+ */
+export declare enum ToolKind {
+    /**
+     * Not classified. Legacy runs (persisted before this field existed) and
+     * tools with no known kind. Clients fall back to a name-based resolver.
+     *
+     * @generated from enum value: TOOL_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Read a file's contents. Native: read, read_file. Cursor: Read.
+     *
+     * @generated from enum value: TOOL_KIND_FILE_READ = 1;
+     */
+    FILE_READ = 1,
+    /**
+     * Create or overwrite an entire file. Native: write_file, create_file.
+     * Cursor: Write.
+     *
+     * @generated from enum value: TOOL_KIND_FILE_WRITE = 2;
+     */
+    FILE_WRITE = 2,
+    /**
+     * Modify part of an existing file. Native: edit_file, str_replace_editor.
+     * Cursor: StrReplace, EditNotebook.
+     *
+     * @generated from enum value: TOOL_KIND_FILE_EDIT = 3;
+     */
+    FILE_EDIT = 3,
+    /**
+     * Delete a file. Native: delete_file, remove_file. Cursor: Delete.
+     *
+     * @generated from enum value: TOOL_KIND_FILE_DELETE = 4;
+     */
+    FILE_DELETE = 4,
+    /**
+     * Execute a shell command. Native: execute, shell. Cursor: Shell.
+     *
+     * @generated from enum value: TOOL_KIND_SHELL = 5;
+     */
+    SHELL = 5,
+    /**
+     * Search file contents or names. Native: grep, glob. Cursor: Grep, Glob,
+     * SemanticSearch.
+     *
+     * @generated from enum value: TOOL_KIND_SEARCH = 6;
+     */
+    SEARCH = 6,
+    /**
+     * List a directory. Native: ls, list_directory.
+     *
+     * @generated from enum value: TOOL_KIND_LIST = 7;
+     */
+    LIST = 7,
+    /**
+     * Fetch the contents of a URL. Native: web_fetch. Cursor: WebFetch.
+     *
+     * @generated from enum value: TOOL_KIND_FETCH = 8;
+     */
+    FETCH = 8,
+    /**
+     * Search the web. Cursor: WebSearch.
+     *
+     * @generated from enum value: TOOL_KIND_WEB_SEARCH = 9;
+     */
+    WEB_SEARCH = 9,
+    /**
+     * Record model reasoning via a think tool. Native: think.
+     *
+     * @generated from enum value: TOOL_KIND_THINK = 10;
+     */
+    THINK = 10,
+    /**
+     * Manage the agent's todo list. Native: write_todos. Cursor: TodoWrite.
+     * Typically rendered through a dedicated todo surface, not the tool thread.
+     *
+     * @generated from enum value: TOOL_KIND_TODO = 11;
+     */
+    TODO = 11,
+    /**
+     * Delegate work to a sub-agent. Native/Cursor: task/Task. Rendered as a
+     * nested thread, not via the standard tool result view.
+     *
+     * @generated from enum value: TOOL_KIND_SUBAGENT = 12;
+     */
+    SUBAGENT = 12,
+    /**
+     * A tool provided by an MCP server. The server is identified by
+     * ToolCall.mcp_server_slug; the tool's bare name is in ToolCall.name.
+     *
+     * @generated from enum value: TOOL_KIND_MCP = 13;
+     */
+    MCP = 13,
+    /**
+     * Propose a durable fact about the user for the platform to remember
+     * (the first-party remember tool, injected via the synthesized memory
+     * attachment when the run's recall snapshot is enabled).
+     * Both harnesses: remember. Rendered as a memory-proposal consent chip
+     * (verbatim fact + Confirm/Reject), not the generic tool result view —
+     * the record it creates stays "proposed" until the user decides.
+     *
+     * @generated from enum value: TOOL_KIND_MEMORY = 14;
+     */
+    MEMORY = 14
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.ToolKind.
+ */
+export declare const ToolKindSchema: GenEnum<ToolKind>;
+/**
+ * TodoStatus defines the status of a todo item.
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.TodoStatus
+ */
+export declare enum TodoStatus {
+    /**
+     * Default value, not a valid todo status.
+     *
+     * @generated from enum value: TODO_STATUS_UNSPECIFIED = 0;
+     */
+    TODO_STATUS_UNSPECIFIED = 0,
+    /**
+     * Task has not been started yet.
+     *
+     * @generated from enum value: TODO_PENDING = 1;
+     */
+    TODO_PENDING = 1,
+    /**
+     * Task is currently being worked on by the agent.
+     *
+     * @generated from enum value: TODO_IN_PROGRESS = 2;
+     */
+    TODO_IN_PROGRESS = 2,
+    /**
+     * Task was completed successfully.
+     *
+     * @generated from enum value: TODO_COMPLETED = 3;
+     */
+    TODO_COMPLETED = 3,
+    /**
+     * Task was cancelled and is no longer needed.
+     *
+     * @generated from enum value: TODO_CANCELLED = 4;
+     */
+    TODO_CANCELLED = 4
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.TodoStatus.
+ */
+export declare const TodoStatusSchema: GenEnum<TodoStatus>;
+/**
+ * SubAgentStatus defines the status of a sub-agent run.
+ *
+ * Status Transitions:
+ *
+ * Normal flow:
+ * SUB_AGENT_PENDING → SUB_AGENT_IN_PROGRESS → SUB_AGENT_COMPLETED
+ *
+ * Failure flow:
+ * SUB_AGENT_IN_PROGRESS → SUB_AGENT_FAILED
+ *
+ * Cancellation flow (parent cancelled while sub-agent active):
+ * SUB_AGENT_IN_PROGRESS → SUB_AGENT_CANCELLED
+ *
+ * Terminal States:
+ * - SUB_AGENT_COMPLETED: Sub-agent finished successfully
+ * - SUB_AGENT_FAILED: Sub-agent encountered an error
+ * - SUB_AGENT_CANCELLED: Parent run was cancelled while sub-agent was active
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.SubAgentStatus
+ */
+export declare enum SubAgentStatus {
+    /**
+     * Default value, not a valid sub-agent status.
+     *
+     * @generated from enum value: SUB_AGENT_STATUS_UNSPECIFIED = 0;
+     */
+    SUB_AGENT_STATUS_UNSPECIFIED = 0,
+    /**
+     * Sub-agent invocation is queued and waiting to start.
+     *
+     * @generated from enum value: SUB_AGENT_PENDING = 1;
+     */
+    SUB_AGENT_PENDING = 1,
+    /**
+     * Sub-agent is actively executing its delegated task.
+     *
+     * @generated from enum value: SUB_AGENT_IN_PROGRESS = 2;
+     */
+    SUB_AGENT_IN_PROGRESS = 2,
+    /**
+     * Sub-agent finished its task successfully and returned a result.
+     *
+     * @generated from enum value: SUB_AGENT_COMPLETED = 3;
+     */
+    SUB_AGENT_COMPLETED = 3,
+    /**
+     * Sub-agent encountered an error and could not complete its task.
+     *
+     * @generated from enum value: SUB_AGENT_FAILED = 4;
+     */
+    SUB_AGENT_FAILED = 4,
+    /**
+     * Parent run was cancelled while this sub-agent was active.
+     *
+     * When a parent run is cancelled (via user action or system timeout),
+     * all active sub-agents transition to this terminal state. This prevents
+     * sub-agents from remaining in IN_PROGRESS indefinitely in persisted status.
+     *
+     * When this status is reached:
+     * - completed_at timestamp is set
+     * - error field contains: "Cancelled: parent run was cancelled"
+     *
+     * @generated from enum value: SUB_AGENT_CANCELLED = 5;
+     */
+    SUB_AGENT_CANCELLED = 5
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.SubAgentStatus.
+ */
+export declare const SubAgentStatusSchema: GenEnum<SubAgentStatus>;
+/**
+ * ToolCallStreamingSource identifies what is currently being streamed on a
+ * tool call.
+ *
+ * Input streaming and output streaming are independent, universal capabilities
+ * of any tool — not categories of tools:
+ *
+ * - INPUT: The LLM is generating the tool's arguments. For tools where the
+ *   argument content is interesting to the user (file content being written,
+ *   thought text), tokens stream to the UI as they are produced.
+ *
+ * - OUTPUT: The tool is executing and producing output progressively. For
+ *   tools where the output is interesting (shell commands, long-running
+ *   processes), output chunks stream to the UI as they arrive.
+ *
+ * Any tool can have either, both, or neither. This enum tells consumers
+ * which streaming phase is active so they render correctly without
+ * client-side heuristics.
+ *
+ * Lifecycle:
+ *   Early tool call creation → streaming_source = INPUT
+ *   on_tool_start (reconcile) → streaming_source = UNSPECIFIED
+ *   tool_progress event      → streaming_source = OUTPUT
+ *   on_tool_end              → streaming_source = UNSPECIFIED
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.ToolCallStreamingSource
+ */
+export declare enum ToolCallStreamingSource {
+    /**
+     * No active streaming, or streaming has completed.
+     *
+     * @generated from enum value: TOOL_CALL_STREAMING_SOURCE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * The LLM is generating the tool's arguments. result contains partial
+     * content extracted from the in-progress argument JSON (e.g., file content
+     * for a write tool, thought text for a think tool).
+     *
+     * @generated from enum value: TOOL_CALL_STREAMING_SOURCE_INPUT = 1;
+     */
+    INPUT = 1,
+    /**
+     * The tool is executing and producing output progressively. result
+     * contains accumulated output chunks (e.g., shell command stdout).
+     *
+     * @generated from enum value: TOOL_CALL_STREAMING_SOURCE_OUTPUT = 2;
+     */
+    OUTPUT = 2
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.ToolCallStreamingSource.
+ */
+export declare const ToolCallStreamingSourceSchema: GenEnum<ToolCallStreamingSource>;
+/**
+ * ApprovalAction represents the user's decision on an approval request.
+ *
+ * ## Action Semantics
+ *
+ * - APPROVE: Execute the tool normally, continue the run
+ * - SKIP: Return a neutral "skipped by user" message to the LLM, continue the run
+ * - REJECT: Deny the tool and feed the user's reasoned objection back to the LLM,
+ *   continue the run. REJECT denies a single tool call — it does NOT fail the
+ *   run. To stop the whole run, use Cancel or Terminate.
+ *
+ * ## SKIP vs REJECT
+ *
+ * Both continue the run without running the tool; they differ only in the
+ * signal fed to the model. SKIP is neutral ("skip this one, move on"); REJECT
+ * carries the user's objection ("I'm denying this, and here's why") so the model
+ * factors that reasoning into what it does next. Neither is a failure.
+ *
+ * ## LLM Behavior on Skip/Reject
+ *
+ * When a tool is skipped, the LLM receives a message like:
+ * "Tool 'delete_repository' was skipped by user. Please proceed without this operation."
+ * When a tool is rejected, the LLM receives the user's objection instead. Either
+ * way the LLM adapts its plan while preserving run continuity.
+ *
+ * ## Usage
+ *
+ * Used in:
+ * - ToolCall.approval_action: Records the decision made
+ * - SubmitApprovalInput.action: User's submitted decision
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.ApprovalAction
+ */
+export declare enum ApprovalAction {
+    /**
+     * Unspecified action (invalid, should never be used).
+     * SubmitApproval RPC rejects this value.
+     *
+     * @generated from enum value: APPROVAL_ACTION_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Execute the tool normally.
+     * Tool transitions from WAITING_APPROVAL to RUNNING, then executes.
+     * Run phase returns to IN_PROGRESS.
+     *
+     * @generated from enum value: APPROVAL_ACTION_APPROVE = 1;
+     */
+    APPROVE = 1,
+    /**
+     * Skip tool execution, continue without it.
+     * Tool transitions to SKIPPED status.
+     * LLM receives: "Tool '{name}' was skipped by user. Please proceed without this operation."
+     * Run continues - this is NOT a failure.
+     *
+     * @generated from enum value: APPROVAL_ACTION_SKIP = 2;
+     */
+    SKIP = 2,
+    /**
+     * Deny this tool call and continue the run.
+     *
+     * The tool is NOT executed. The user's objection (the submitted comment) is
+     * fed back to the model as the tool result, so the model adapts its plan with
+     * that reasoning in mind. The tool call transitions to TOOL_CALL_SKIPPED with
+     * approval_action=REJECT recorded (and a REJECTED approval-event authored), and
+     * the run phase returns to RUN_IN_PROGRESS and continues to
+     * RUN_COMPLETED.
+     *
+     * REJECT denies a SINGLE tool call — it does NOT fail the run. This mirrors how
+     * interactive agent tools (Cursor, Cline, Claude Code) treat a denied tool: the
+     * agent is told and continues, rather than the whole session dying. To stop the
+     * entire run, use Cancel (RUN_CANCELLED, graceful user stop) or
+     * Terminate (RUN_TERMINATED, platform stop) — the dedicated hard-stop
+     * verbs. The distinction from SKIP is the strength of the signal, not the
+     * outcome: SKIP is a neutral skip, REJECT carries the user's reasoned denial.
+     *
+     * @generated from enum value: APPROVAL_ACTION_REJECT = 3;
+     */
+    REJECT = 3,
+    /**
+     * Approve this tool call AND grant a run-lifetime lease that auto-approves
+     * every subsequent tool call of the SAME class for the rest of this run
+     * ("approve all of this kind, don't ask again").
+     *
+     * This is the gate-time, scoped analog of RunSpec.auto_approve_all:
+     * it lets a human escalate from per-call approval to "trust this whole class"
+     * at the moment of friction, without pre-arming a global bypass. The lease is
+     * scoped to one class — a built-in approval category (write / delete / shell,
+     * with write and edit collapsed) or a single MCP server — never the whole run.
+     *
+     * ## Canonical contract (every layer derives its behavior from this)
+     *
+     * 1. Control plane (SubmitApproval handler): record APPROVE_ALL on the clicked
+     *    tool call, and resolve any other still-pending tool call that shares the
+     *    clicked call's class — including sub-agent tool calls — to
+     *    APPROVAL_ACTION_APPROVE. Pending tool calls of a DIFFERENT class stay in
+     *    TOOL_CALL_WAITING_APPROVAL so the gate still holds for them. This keeps
+     *    the audit trail honest: every tool that runs carries an explicit
+     *    approval_action.
+     *
+     * 2. Runner (native + cursor harness): the lease is derived on read from the
+     *    persisted APPROVE_ALL decision plus the tool's class — there is no
+     *    separately stored lease. On reinvocation, a new tool call (or sub-agent
+     *    tool call) whose class matches an active lease skips the approval gate; a
+     *    tool call of any other class is still gated. The interrupted tool itself
+     *    resumes as an approval.
+     *
+     * ## Scope
+     *
+     * The lease covers the rest of THIS run and only the matched class. It
+     * is NOT persisted to the session or the agent; a subsequent run starts
+     * gated again unless the caller sets it anew (interactive clients may carry a
+     * session-scoped preference forward in-memory, but that is a client concern,
+     * not server-persisted state). RunSpec.auto_approve_all remains the
+     * single, explicit whole-run global bypass.
+     *
+     * ## Audit
+     *
+     * Because it bypasses subsequent same-class approval checks, runs
+     * containing an APPROVE_ALL decision should be auditable. The decision is
+     * recorded on ToolCall.approval_action like any other; the policy layer that
+     * cleared each subsequent call is recorded on ToolCall.approval_policy_source
+     * (APPROVAL_POLICY_SOURCE_APPROVAL_LEASE).
+     *
+     * @generated from enum value: APPROVAL_ACTION_APPROVE_ALL = 4;
+     */
+    APPROVE_ALL = 4
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.ApprovalAction.
+ */
+export declare const ApprovalActionSchema: GenEnum<ApprovalAction>;
+/**
+ * FileChangeType is the per-file outcome of a file mutation in a tool call.
+ *
+ * Distinct from ToolKind, which classifies the tool: a single tool call may
+ * produce several FileChanges of different types (multi-file edits).
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.FileChangeType
+ */
+export declare enum FileChangeType {
+    /**
+     * Default value, not a valid file change type.
+     *
+     * @generated from enum value: FILE_CHANGE_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * A new file was created.
+     *
+     * @generated from enum value: FILE_CHANGE_TYPE_CREATE = 1;
+     */
+    CREATE = 1,
+    /**
+     * An existing file's contents were modified.
+     *
+     * @generated from enum value: FILE_CHANGE_TYPE_MODIFY = 2;
+     */
+    MODIFY = 2,
+    /**
+     * A file was deleted.
+     *
+     * @generated from enum value: FILE_CHANGE_TYPE_DELETE = 3;
+     */
+    DELETE = 3,
+    /**
+     * A file was renamed or moved; FileChange.rename_from holds the source path.
+     *
+     * @generated from enum value: FILE_CHANGE_TYPE_RENAME = 4;
+     */
+    RENAME = 4
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.FileChangeType.
+ */
+export declare const FileChangeTypeSchema: GenEnum<FileChangeType>;
+/**
+ * FileChangeSetStatus is the state of a FileChangeSet, DERIVED by folding its
+ * file-review events (never stored-mutable).
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.FileChangeSetStatus
+ */
+export declare enum FileChangeSetStatus {
+    /**
+     * Default value, not a valid status.
+     *
+     * @generated from enum value: FILE_CHANGE_SET_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Baseline captured; the turn is executing and the candidate is not yet
+     * captured. No diff to review yet.
+     *
+     * @generated from enum value: FILE_CHANGE_SET_STATUS_CAPTURING = 1;
+     */
+    CAPTURING = 1,
+    /**
+     * Candidate captured and the diff is reviewable; awaiting user decisions.
+     * Partially-decided sets stay here (still actionable) until every change is
+     * decided.
+     *
+     * @generated from enum value: FILE_CHANGE_SET_STATUS_AWAITING_REVIEW = 2;
+     */
+    AWAITING_REVIEW = 2,
+    /**
+     * All changes decided; awaiting the runner's reconcile.
+     *
+     * @generated from enum value: FILE_CHANGE_SET_STATUS_DECIDED = 3;
+     */
+    DECIDED = 3,
+    /**
+     * Approved bytes reconciled into the workspace and hash-verified. Terminal.
+     *
+     * @generated from enum value: FILE_CHANGE_SET_STATUS_RECONCILED = 4;
+     */
+    RECONCILED = 4,
+    /**
+     * A capture, diff, or reconcile failure halted the lifecycle. Terminal. See
+     * FileReviewFailureKind for the precise cause.
+     *
+     * @generated from enum value: FILE_CHANGE_SET_STATUS_FAILED = 5;
+     */
+    FAILED = 5
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.FileChangeSetStatus.
+ */
+export declare const FileChangeSetStatusSchema: GenEnum<FileChangeSetStatus>;
+/**
+ * FileDecisionScope is the granularity a FileDecision applies to.
+ *
+ * HUNK is intentionally deferred — per-hunk approval is a derived approved
+ * snapshot, not a new lease, and ships after file-level is stable.
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.FileDecisionScope
+ */
+export declare enum FileDecisionScope {
+    /**
+     * Default value, not a valid scope.
+     *
+     * @generated from enum value: FILE_DECISION_SCOPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * The decision applies to the whole change set.
+     *
+     * @generated from enum value: FILE_DECISION_SCOPE_CHANGE_SET = 1;
+     */
+    CHANGE_SET = 1,
+    /**
+     * The decision applies to one CapturedFileChange (FileDecision.file_change_id).
+     *
+     * @generated from enum value: FILE_DECISION_SCOPE_FILE = 2;
+     */
+    FILE = 2
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.FileDecisionScope.
+ */
+export declare const FileDecisionScopeSchema: GenEnum<FileDecisionScope>;
+/**
+ * FileDecisionAction is a user's verdict on a change set or file.
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.FileDecisionAction
+ */
+export declare enum FileDecisionAction {
+    /**
+     * Default value, not a valid action.
+     *
+     * @generated from enum value: FILE_DECISION_ACTION_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Keep the change(s): reconcile the captured bytes into the workspace.
+     *
+     * @generated from enum value: FILE_DECISION_ACTION_APPROVE = 1;
+     */
+    APPROVE = 1,
+    /**
+     * Discard the change(s): reconcile back to baseline for the targeted scope.
+     *
+     * @generated from enum value: FILE_DECISION_ACTION_REJECT = 2;
+     */
+    REJECT = 2
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.FileDecisionAction.
+ */
+export declare const FileDecisionActionSchema: GenEnum<FileDecisionAction>;
+/**
+ * FileDecisionOrigin records which authority authored a FileDecision: a human
+ * reviewer, or a platform policy acting on consent the human already gave.
+ * Audit provenance carried on the decision so the record always shows WHO
+ * decided — it is never an enforcement input, never a correlation key, and
+ * never folded into any digest. UNSPECIFIED (decisions authored before this
+ * field existed) reads as a human decision, the only author that existed then.
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.FileDecisionOrigin
+ */
+export declare enum FileDecisionOrigin {
+    /**
+     * Default value: a decision recorded before origins existed. Treated as
+     * USER by every consumer (the only author that existed before origins).
+     *
+     * @generated from enum value: FILE_DECISION_ORIGIN_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * A human reviewer decided via SubmitFileDecision.
+     *
+     * @generated from enum value: FILE_DECISION_ORIGIN_USER = 1;
+     */
+    USER = 1,
+    /**
+     * Platform policy auto-kept the set because every mutation in its turn came
+     * from commands the human explicitly authorized (per-command approval,
+     * APPROVE_ALL category lease, or spec.auto_approve_all) — consent verified
+     * against server-authored approval records before authoring. The
+     * decision's actor is "policy", never the user.
+     *
+     * @generated from enum value: FILE_DECISION_ORIGIN_POLICY_APPROVED_COMMAND = 2;
+     */
+    POLICY_APPROVED_COMMAND = 2,
+    /**
+     * Platform policy kept the set because its run is an eval run's try: a
+     * try's edits apply as they do in Claude Code's evals, and nobody reviews
+     * a try. The decision's actor is "policy".
+     *
+     * @generated from enum value: FILE_DECISION_ORIGIN_POLICY_EVAL_TRY = 3;
+     */
+    POLICY_EVAL_TRY = 3,
+    /**
+     * Platform policy kept what was still undecided in the set because the
+     * conversation's next message was sent: review lasts until then, and the
+     * next turn built on the kept files. The decision's actor is "policy".
+     *
+     * @generated from enum value: FILE_DECISION_ORIGIN_POLICY_NEXT_TURN = 4;
+     */
+    POLICY_NEXT_TURN = 4
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.FileDecisionOrigin.
+ */
+export declare const FileDecisionOriginSchema: GenEnum<FileDecisionOrigin>;
+/**
+ * FileReviewEventType is the kind of event in the append-only file-review
+ * stream (see FileReviewEvent in filereview.proto). It is the coarse lifecycle
+ * bucket; failure fidelity lives on FileReviewFailure.kind.
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.FileReviewEventType
+ */
+export declare enum FileReviewEventType {
+    /**
+     * Default value, not a valid event type.
+     *
+     * @generated from enum value: FILE_REVIEW_EVENT_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Baseline captured at turn start. Payload: FileReviewBaselineCaptured.
+     *
+     * @generated from enum value: FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED = 1;
+     */
+    BASELINE_CAPTURED = 1,
+    /**
+     * Candidate captured at the turn boundary, carrying the diff. Payload:
+     * FileReviewCandidateCaptured.
+     *
+     * @generated from enum value: FILE_REVIEW_EVENT_TYPE_CANDIDATE_CAPTURED = 2;
+     */
+    CANDIDATE_CAPTURED = 2,
+    /**
+     * A user decided a change set or file. Payload: FileDecision.
+     *
+     * @generated from enum value: FILE_REVIEW_EVENT_TYPE_FILE_DECIDED = 3;
+     */
+    FILE_DECIDED = 3,
+    /**
+     * Approved bytes reconciled and verified. Payload: FileReviewReconciled.
+     *
+     * @generated from enum value: FILE_REVIEW_EVENT_TYPE_RECONCILED = 4;
+     */
+    RECONCILED = 4,
+    /**
+     * A capture/diff/reconcile failure. Payload: FileReviewFailure.
+     *
+     * @generated from enum value: FILE_REVIEW_EVENT_TYPE_FAILED = 5;
+     */
+    FAILED = 5
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.FileReviewEventType.
+ */
+export declare const FileReviewEventTypeSchema: GenEnum<FileReviewEventType>;
+/**
+ * FileReviewFailureKind is the precise cause carried by a FAILED file-review
+ * event (FileReviewFailure.kind). Audit/control metadata for the failure
+ * lifecycle.
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.FileReviewFailureKind
+ */
+export declare enum FileReviewFailureKind {
+    /**
+     * Default value, not a valid failure kind.
+     *
+     * @generated from enum value: FILE_REVIEW_FAILURE_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Capturing the baseline or candidate snapshot failed.
+     *
+     * @generated from enum value: FILE_REVIEW_FAILURE_KIND_CAPTURE_FAILED = 1;
+     */
+    CAPTURE_FAILED = 1,
+    /**
+     * The diff could not be rendered completely (uncapturable path); the change
+     * set cannot become approvable.
+     *
+     * @generated from enum value: FILE_REVIEW_FAILURE_KIND_DIFF_UNREVIEWABLE = 2;
+     */
+    DIFF_UNREVIEWABLE = 2,
+    /**
+     * Reconciling approved bytes into the workspace failed.
+     *
+     * @generated from enum value: FILE_REVIEW_FAILURE_KIND_RECONCILE_FAILED = 3;
+     */
+    RECONCILE_FAILED = 3,
+    /**
+     * A post-reconcile filesystem hash did not match the approved digest.
+     *
+     * @generated from enum value: FILE_REVIEW_FAILURE_KIND_HASH_MISMATCH = 4;
+     */
+    HASH_MISMATCH = 4
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.FileReviewFailureKind.
+ */
+export declare const FileReviewFailureKindSchema: GenEnum<FileReviewFailureKind>;
+/**
+ * ApprovalPolicySource is the policy layer that decided a tool call's approval
+ * requirement — the provenance recorded on every gated or auto-approved tool
+ * call so a run's authorizations are auditable.
+ *
+ * Set by the runner at the approval gate (the one component that evaluates the
+ * merged policy) and persisted on ToolCall.approval_policy_source, exactly as
+ * ToolCall.tool_kind is set and persisted. Clients render it to answer "why was
+ * this tool gated or auto-approved?".
+ *
+ * @internal
+ * Mirrors the runner's internal PolicySource union (approval-policy.ts) one for
+ * one. A hook decides first when one answers (HOOK, with the deciding plugin on
+ * ToolCall.approval_policy_hook); otherwise the default decides
+ * (BUILTIN_CATEGORY for a built-in, ANNOTATION_DESTRUCTIVE_TIGHTEN for a
+ * destructive MCP tool). A lease, the global bypass or the unattended skip
+ * then records how a required approval was resolved. Values 1 to 3 belonged to the removed per-tool approval
+ * policies; they are reserved, and no value is ever renumbered.
+ *
+ * @generated from enum ai.stigmer.runner.turn.v1.ApprovalPolicySource
+ */
+export declare enum ApprovalPolicySource {
+    /**
+     * Default — the run predates this field, or no approval was required
+     * (a read-only built-in, or an MCP tool its server does not mark
+     * destructive). Clients show no provenance.
+     *
+     * @generated from enum value: APPROVAL_POLICY_SOURCE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Layer 4: the pre-armed RunSpec.auto_approve_all whole-run global
+     * bypass cleared this call.
+     *
+     * @generated from enum value: APPROVAL_POLICY_SOURCE_AUTO_APPROVE_ALL = 4;
+     */
+    AUTO_APPROVE_ALL = 4,
+    /**
+     * Layer 4: a run-lifetime scoped lease (the successor to a global "approve
+     * all"; see APPROVAL_ACTION_APPROVE_ALL) cleared this call because it matched
+     * the leased class.
+     *
+     * @generated from enum value: APPROVAL_POLICY_SOURCE_APPROVAL_LEASE = 5;
+     */
+    APPROVAL_LEASE = 5,
+    /**
+     * The default asked for a built-in tool of an approval class
+     * (write / delete / shell).
+     *
+     * @generated from enum value: APPROVAL_POLICY_SOURCE_BUILTIN_CATEGORY = 6;
+     */
+    BUILTIN_CATEGORY = 6,
+    /**
+     * The default asked for an MCP tool because its server marks it destructive
+     * (the tool's MCP destructiveHint annotation, read live from the server's
+     * tools each turn), or because its server's tools could not be listed.
+     *
+     * @generated from enum value: APPROVAL_POLICY_SOURCE_ANNOTATION_DESTRUCTIVE_TIGHTEN = 7;
+     */
+    ANNOTATION_DESTRUCTIVE_TIGHTEN = 7,
+    /**
+     * The unattended approval mode (RunStatus.approval_mode =
+     * APPROVAL_MODE_UNATTENDED) resolved this gated call as an automatic skip:
+     * the lane the run came through (a schedule's fire, a Slack or WhatsApp
+     * channel, a chat link's guest) has no approver, so the platform skipped the
+     * tool and told the model to adapt. A layer-4 resolution source like AUTO_APPROVE_ALL — it
+     * records HOW the gate was resolved, overriding the gating-layer source on
+     * the resolved call. The tool call carries TOOL_CALL_SKIPPED with NO
+     * approval_action / approved_by (those record human decisions only), and
+     * no approval-request event is ever authored for it.
+     *
+     * @generated from enum value: APPROVAL_POLICY_SOURCE_UNATTENDED_SKIP = 8;
+     */
+    UNATTENDED_SKIP = 8,
+    /**
+     * A hook decided this call: it refused it, asked a person first, or let it
+     * run without the approval it would otherwise need. The deciding plugin is
+     * named in approval_policy_hook beside this source.
+     *
+     * @generated from enum value: APPROVAL_POLICY_SOURCE_HOOK = 9;
+     */
+    HOOK = 9
+}
+/**
+ * Describes the enum ai.stigmer.runner.turn.v1.ApprovalPolicySource.
+ */
+export declare const ApprovalPolicySourceSchema: GenEnum<ApprovalPolicySource>;