@stigmer/runner 0.1.0-dev.20261017020314.g644422724c27

package/dist/gen/turn/ai/stigmer/runner/turn/v1/rows_pb.d.ts

@@ -0,0 +1,826 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { ToolCallOutputRef } from "@stigmer/apis/ai/stigmer/agentic/run/v1/message_pb";
+import type { ApprovalAction, ApprovalPolicySource, MessageType, SubAgentStatus, TodoStatus, ToolCallStatus, ToolCallStreamingSource, ToolKind } from "./enum_pb.js";
+import type { FileReviewEventStream } from "./ledger_pb.js";
+import type { JsonObject, Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/runner/turn/v1/rows.proto.
+ */
+export declare const file_ai_stigmer_runner_turn_v1_rows: GenFile;
+/**
+ * TurnRows is what the runner holds for one turn beside the run's public
+ * status: the transcript half RunStatus once carried. Field numbers are the
+ * RunStatus numbers each field came from.
+ *
+ * @generated from message ai.stigmer.runner.turn.v1.TurnRows
+ */
+export type TurnRows = Message<"ai.stigmer.runner.turn.v1.TurnRows"> & {
+    /**
+     * The turn's messages, in order: the person's message, the agent's
+     * replies and thinking, and the tool calls on them.
+     *
+     * @generated from field: repeated ai.stigmer.runner.turn.v1.AgentMessage messages = 1;
+     */
+    messages: AgentMessage[];
+    /**
+     * The sub-agents the turn delegated to, in the order they started.
+     *
+     * @generated from field: repeated ai.stigmer.runner.turn.v1.SubAgentRun sub_agent_runs = 4;
+     */
+    subAgentRuns: SubAgentRun[];
+    /**
+     * The turn's todo list. Key: todo item id.
+     *
+     * @generated from field: map<string, ai.stigmer.runner.turn.v1.TodoItem> todos = 9;
+     */
+    todos: {
+        [key: string]: TodoItem;
+    };
+    /**
+     * The schema-conforming output the runner extracted from the agent's
+     * final reply, when the run asked for one.
+     *
+     * @generated from field: google.protobuf.Struct structured_output = 21;
+     */
+    structuredOutput?: JsonObject;
+    /**
+     * The file-review events the runner authored for the turn's change sets.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.FileReviewEventStream file_review_event_stream = 24;
+     */
+    fileReviewEventStream?: FileReviewEventStream;
+    /**
+     * Which recalled memories the runner injected into the turn's prompt.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.RecalledMemoriesReport recalled_memories_report = 26;
+     */
+    recalledMemoriesReport?: RecalledMemoriesReport;
+};
+/**
+ * Describes the message ai.stigmer.runner.turn.v1.TurnRows.
+ * Use `create(TurnRowsSchema)` to create a new message.
+ */
+export declare const TurnRowsSchema: GenMessage<TurnRows>;
+/**
+ * Represents a single message in the agent conversation.
+ * Used to track the full conversation flow including user messages,
+ * AI responses, and tool execution details.
+ *
+ * @generated from message ai.stigmer.runner.turn.v1.AgentMessage
+ */
+export type AgentMessage = Message<"ai.stigmer.runner.turn.v1.AgentMessage"> & {
+    /**
+     * Type of message (human, ai, tool, system).
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.MessageType type = 1;
+     */
+    type: MessageType;
+    /**
+     * The text content of the message.
+     *
+     * @generated from field: string content = 2;
+     */
+    content: string;
+    /**
+     * ISO 8601 timestamp when the message was created.
+     *
+     * @generated from field: string timestamp = 3;
+     */
+    timestamp: string;
+    /**
+     * Tool calls associated with this message (if type == ai and tools were invoked).
+     *
+     * @generated from field: repeated ai.stigmer.runner.turn.v1.ToolCall tool_calls = 4;
+     */
+    toolCalls: ToolCall[];
+    /**
+     * Optional message metadata.
+     *
+     * @generated from field: google.protobuf.Struct metadata = 5;
+     */
+    metadata?: JsonObject;
+    /**
+     * True while the AI is actively generating this message, false when complete.
+     * Enables UI to show typing indicator during streaming and final content when done.
+     * Default (false) indicates either a non-AI message or a completed AI message.
+     *
+     * @generated from field: bool is_streaming = 6;
+     */
+    isStreaming: boolean;
+};
+/**
+ * Describes the message ai.stigmer.runner.turn.v1.AgentMessage.
+ * Use `create(AgentMessageSchema)` to create a new message.
+ */
+export declare const AgentMessageSchema: GenMessage<AgentMessage>;
+/**
+ * Represents a tool call made by the agent during a run.
+ *
+ * @generated from message ai.stigmer.runner.turn.v1.ToolCall
+ */
+export type ToolCall = Message<"ai.stigmer.runner.turn.v1.ToolCall"> & {
+    /**
+     * Unique identifier for this tool call.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Name of the tool being called.
+     *
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * Arguments passed to the tool (JSON structure), with the value of every
+     * secret-named top-level argument (password, token, secret, api_key, apikey,
+     * credentials, auth, authorization; any case) replaced by "[REDACTED]", as
+     * in args_preview.
+     *
+     * @internal
+     * Redacted by the runner's transcript builder at creation (stigmer#1119, the
+     * runner's redactSensitiveArgs in shared/args-preview.ts). Rows persisted
+     * before that may carry the values; clients hide them on display through
+     * @stigmer/client's redactSecretArgs. The key set's cross-surface contract is
+     * test/fixtures/tool-view/secret-args.json.
+     *
+     * @generated from field: google.protobuf.Struct args = 3;
+     */
+    args?: JsonObject;
+    /**
+     * Result returned by the tool (optional, populated after execution).
+     *
+     * @generated from field: string result = 4;
+     */
+    result: string;
+    /**
+     * Status of the tool call execution.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.ToolCallStatus status = 5;
+     */
+    status: ToolCallStatus;
+    /**
+     * ISO 8601 timestamp when the tool call started.
+     *
+     * @generated from field: string started_at = 7;
+     */
+    startedAt: string;
+    /**
+     * ISO 8601 timestamp when the tool call completed or failed.
+     *
+     * @generated from field: string completed_at = 8;
+     */
+    completedAt: string;
+    /**
+     * Error message if status == TOOL_CALL_FAILED.
+     *
+     * @generated from field: string error = 9;
+     */
+    error: string;
+    /**
+     * True when this tool call was held for a person's decision instead of
+     * running at once.
+     *
+     * Every harness sets it the same way: only when the approval gate parks the
+     * call, never when the call starts. A call that runs under an approval
+     * lease, auto_approve_all or file-review capture is never held and carries
+     * false; approval_policy_source names the policy layer that governed the
+     * call either way.
+     *
+     * When true and status == TOOL_CALL_WAITING_APPROVAL, the tool is paused
+     * awaiting user decision via SubmitApproval RPC.
+     *
+     * @generated from field: bool requires_approval = 10;
+     */
+    requiresApproval: boolean;
+    /**
+     * Human-readable message explaining what approval is being requested.
+     * Written by the approval default from the tool's name and arguments.
+     *
+     * Examples:
+     *   - "Delete repository: my-important-repo"
+     *   - "Force push to branch: main"
+     *   - "Send email to: customer@example.com"
+     *
+     * If no custom message configured, defaults to: "Execute tool: {tool_name}"
+     *
+     * @generated from field: string approval_message = 11;
+     */
+    approvalMessage: string;
+    /**
+     * ISO 8601 timestamp when approval was requested.
+     * Set when status transitions to TOOL_CALL_WAITING_APPROVAL.
+     * Used for tracking approval latency and potential timeout logic.
+     * Example: "2026-01-30T15:30:00Z"
+     *
+     * @generated from field: string approval_requested_at = 12;
+     */
+    approvalRequestedAt: string;
+    /**
+     * ISO 8601 timestamp when approval decision was made.
+     * Set when user submits APPROVE, SKIP, or REJECT via SubmitApproval.
+     * Example: "2026-01-30T15:32:15Z"
+     *
+     * @generated from field: string approval_decided_at = 13;
+     */
+    approvalDecidedAt: string;
+    /**
+     * User ID of who made the approval decision.
+     * Extracted from authentication context when SubmitApproval is called.
+     * Important for audit trails and accountability.
+     * Example: "usr_abc123xyz"
+     *
+     * @generated from field: string approved_by = 14;
+     */
+    approvedBy: string;
+    /**
+     * The action taken by the user.
+     * Only populated after approval decision is made (approval_decided_at is set).
+     * Determines how the tool execution proceeds:
+     *   - APPROVE: Tool executes normally
+     *   - SKIP: Tool returns skip message, run continues
+     *   - REJECT: Run fails with rejection error
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.ApprovalAction approval_action = 15;
+     */
+    approvalAction: ApprovalAction;
+    /**
+     * True while the tool is actively producing content, false when complete.
+     * Enables UI to show live output during long-running tool executions or
+     * a typewriter effect during input generation.
+     *
+     * When true, `result` contains partial content accumulated so far.
+     * When false (default), `result` contains the final complete output.
+     * Consumers always read `result` — this flag only signals whether
+     * more content is expected.
+     *
+     * @generated from field: bool is_streaming = 16;
+     */
+    isStreaming: boolean;
+    /**
+     * Identifies what is currently being streamed.
+     * Only meaningful when is_streaming is true; reset to UNSPECIFIED when
+     * streaming ends.
+     *
+     * INPUT:  result contains partial content extracted from the in-progress
+     *         argument JSON (e.g., file content for a write tool).
+     * OUTPUT: result contains accumulated output chunks from tool execution
+     *         (e.g., shell command stdout).
+     *
+     * Consumers use this to choose the correct rendering mode — typewriter
+     * for input streaming, live terminal output for output streaming.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.ToolCallStreamingSource streaming_source = 19;
+     */
+    streamingSource: ToolCallStreamingSource;
+    /**
+     * Name of the MCP server that provides this tool, as its tools are named
+     * (plugin_<plugin>_<server> for a plugin's server).
+     * Empty for built-in sandbox tools.
+     * Populated by the worker using the mcp_tools_config reverse lookup.
+     *
+     * Examples: "plugin_linear_linear", "plugin_github_github"
+     *
+     * Used by CLI/UI to render a qualified tool name (e.g., "planton/search")
+     * so users can distinguish tools with the same name from different servers.
+     *
+     * @generated from field: string mcp_server_slug = 17;
+     */
+    mcpServerSlug: string;
+    /**
+     * Sanitized preview of tool arguments for UI display.
+     * Sensitive values (passwords, tokens, keys) are redacted.
+     * Populated at tool call creation time by the runner.
+     * Used by the server-side ComputePendingApprovals projection
+     * and by CLI/UI for inline argument visibility.
+     *
+     * Example: '{"repository": "acme/repo", "force": true}'
+     *
+     * @generated from field: string args_preview = 18;
+     */
+    argsPreview: string;
+    /**
+     * Harness-agnostic category of this tool, set by the runner so clients render
+     * the tool identically regardless of which engine produced it. The native and
+     * Cursor harnesses use different tool-name conventions; tool_kind erases that
+     * difference at the source.
+     *
+     * TOOL_KIND_UNSPECIFIED means unclassified — either the run predates this
+     * field or the tool has no known kind. Clients fall back to a name-based
+     * lookup in that case. See ToolKind.
+     *
+     * Field 20: field 6 is a historical gap and 19 (streaming_source) is the prior
+     * maximum, so this is appended at 20.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.ToolKind tool_kind = 20;
+     */
+    toolKind: ToolKind;
+    /**
+     * ─────────────────────────────────────────────────────────────────────────────
+     * Offloaded Output (large tool results)
+     *
+     * When a tool's output exceeds a size threshold, the runner spills the full
+     * bytes to artifact storage and records a reference here instead of inlining
+     * megabytes into `result` on every status update. Without this, a single
+     * large result (e.g. a base64 screenshot or a multi-MB accessibility tree)
+     * pushes RunStatus past the gRPC message-size limit, so status
+     * persistence fails silently and the live UI freezes mid-run.
+     *
+     * When set, `result` holds only a short human-readable head/preview (so
+     * consumers that read `result` still render something sensible) and
+     * output_ref points at the full content. Empty for the overwhelming majority
+     * of tool calls — only populated when output crosses the offload threshold.
+     * See ToolCallOutputRef.
+     *
+     * Field 21: appended after tool_kind (20), the prior maximum.
+     *
+     * @generated from field: ai.stigmer.agentic.run.v1.ToolCallOutputRef output_ref = 21;
+     */
+    outputRef?: ToolCallOutputRef;
+    /**
+     * Policy layer that decided this tool call's approval requirement, set by the
+     * runner's approval gate so clients can explain "why was this gated or
+     * auto-approved?".
+     *
+     * APPROVAL_POLICY_SOURCE_UNSPECIFIED means unevaluated — a read-only built-in,
+     * or a run that predates this field (clients fall back to no provenance,
+     * exactly as for an unset tool_kind). See ApprovalPolicySource.
+     *
+     * Field 23: appended after file_changes (22), the prior maximum.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.ApprovalPolicySource approval_policy_source = 23;
+     */
+    approvalPolicySource: ApprovalPolicySource;
+    /**
+     * Identifier of the policy-engine logic that produced approval_policy_source,
+     * bumped when the approval semantics change so decisions made by different
+     * engine versions stay distinguishable in audits.
+     *
+     * @internal
+     * Mirrors the runner's POLICY_ENGINE_VERSION constant (approval-policy.ts).
+     *
+     * Field 24: appended after approval_policy_source (23), the prior maximum.
+     *
+     * @generated from field: string policy_engine_version = 24;
+     */
+    policyEngineVersion: string;
+    /**
+     * Stable digest of the authoritative edit content (the hook-captured tool
+     * input) for a gated file-mutating tool call, set by the runner's approval
+     * gate. It is the content discriminator the deny-only Cursor harness needs:
+     * approving one edit must not let a DIFFERENT edit to the same file ride the
+     * approval through, so the grant binds to (category, path, content) rather than
+     * (category, path) alone. A resumed re-attempt that differs from the approved
+     * content re-gates (the "what you approve is what gets applied" contract).
+     *
+     * Carried so it survives at resume immune to the size-limit elision that can
+     * drop `args`/`file_changes` for large edits — a recompute-from-args identity
+     * would be unrecoverable in that case. Empty for tools whose other identity is
+     * already content-exact (shell command, delete path), for read-only tools, and
+     * for runs that predate this field (the runner then degrades to the
+     * coarse (category, path) identity).
+     *
+     * @internal
+     * Runner-written and carried through update_status exactly like tool_kind /
+     * approval_policy_source — not owned by SubmitApproval, so no preserve logic is
+     * needed. See the runner's contentDigest() (shared/file-tools.ts).
+     *
+     * Field 25: appended after policy_engine_version (24), the prior maximum.
+     *
+     * @generated from field: string approval_content_digest = 25;
+     */
+    approvalContentDigest: string;
+    /**
+     * Id of the FileChangeSet this flowed file-edit contributed to
+     * (`{run_id}:{turn_seq}`), stamped by the runner at the turn-boundary
+     * capture. PRESENTATION/AUDIT-ONLY: clients use it to badge the row with the
+     * set's review state and to position the set's decision surface after the
+     * turn's last edit row. It is NEVER a correlation or enforcement key —
+     * decisions reference FileChangeSet.id / CapturedFileChange.id directly, and
+     * reconcile identity is digest-gated (see filereview.proto's identity rule).
+     *
+     * Empty for: non-file tools, denied edits (the deny-gate reconcile path owns
+     * those rows), rows from runs that predate this field, and turns whose
+     * edits netted no captured change (no CANDIDATE_CAPTURED event was authored,
+     * so there is no change set to reference).
+     *
+     * Field 26: appended after approval_content_digest (25), the prior maximum.
+     *
+     * @generated from field: string file_change_set_id = 26;
+     */
+    fileChangeSetId: string;
+    /**
+     * Slug of the plugin whose hook decided this call; empty when no hook
+     * decided, or when the agent's own hooks block did.
+     *
+     * @internal
+     * Runner-written beside approval_policy_source, and set only when that
+     * source is HOOK, or when a hook asked and a lease, the run-wide bypass or
+     * the unattended skip resolved its ask. The lease scope of an APPROVE_ALL
+     * row reads it: a hook's lease clears only that hook's asks on that tool.
+     *
+     * Field 27: appended after file_change_set_id (26), the prior maximum.
+     *
+     * @generated from field: string approval_policy_hook = 27;
+     */
+    approvalPolicyHook: string;
+};
+/**
+ * Describes the message ai.stigmer.runner.turn.v1.ToolCall.
+ * Use `create(ToolCallSchema)` to create a new message.
+ */
+export declare const ToolCallSchema: GenMessage<ToolCall>;
+/**
+ * Represents a sub-agent invocation within a run.
+ * When the main agent delegates work to a specialized sub-agent, this message
+ * tracks the complete lifecycle of that delegation including input, output, and timing.
+ *
+ * @generated from message ai.stigmer.runner.turn.v1.SubAgentRun
+ */
+export type SubAgentRun = Message<"ai.stigmer.runner.turn.v1.SubAgentRun"> & {
+    /**
+     * Unique identifier for this sub-agent run.
+     * Matches the tool call ID from the LangGraph "task" tool invocation.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Name of the subagent being invoked: a listed agent's slug, a plugin
+     * agent's <plugin>:<agent>, or a built-in (explore, shell,
+     * general-purpose).
+     *
+     * @internal
+     * Extracted from the task tool call's args.subagent_type field.
+     *
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * Task/instruction given to the sub-agent.
+     * This is the input prompt that tells the sub-agent what to do.
+     *
+     * @generated from field: string input = 3;
+     */
+    input: string;
+    /**
+     * Result returned by the sub-agent when complete.
+     * Only populated when status == SUB_AGENT_COMPLETED.
+     *
+     * @generated from field: string output = 4;
+     */
+    output: string;
+    /**
+     * Current lifecycle status of the sub-agent run.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.SubAgentStatus status = 5;
+     */
+    status: SubAgentStatus;
+    /**
+     * ISO 8601 timestamp when the sub-agent was invoked.
+     * Example: "2025-11-22T10:30:00Z"
+     *
+     * @generated from field: string started_at = 6;
+     */
+    startedAt: string;
+    /**
+     * ISO 8601 timestamp when the sub-agent completed or failed.
+     * Only populated for terminal states (completed/failed).
+     *
+     * @generated from field: string completed_at = 7;
+     */
+    completedAt: string;
+    /**
+     * Error message if status == SUB_AGENT_FAILED.
+     * Contains the failure reason for debugging and user display.
+     *
+     * @generated from field: string error = 8;
+     */
+    error: string;
+    /**
+     * Optional sub-agent run metadata.
+     *
+     * @generated from field: google.protobuf.Struct metadata = 9;
+     */
+    metadata?: JsonObject;
+    /**
+     * Messages generated by this sub-agent.
+     * Captures AI responses and tool results within the sub-agent context.
+     * Tool calls are embedded in AI messages via AgentMessage.tool_calls.
+     * Ordered chronologically like RunStatus.messages.
+     *
+     * @generated from field: repeated ai.stigmer.runner.turn.v1.AgentMessage messages = 11;
+     */
+    messages: AgentMessage[];
+    /**
+     * Concise, human-readable summary of the sub-agent's task (3-10 words).
+     * Populated directly from the task tool's `description` argument — the short
+     * label the invoking LLM provides when calling the "task" tool. No server-side
+     * LLM generation; available instantly when the sub-agent starts.
+     * Used as the primary display label in collapsed and expanded UI views.
+     * Examples: "Explore CLI rendering code", "Fix auth middleware tests"
+     *
+     * @generated from field: string subject = 13;
+     */
+    subject: string;
+    /**
+     * Todo list tracking multi-step tasks and progress for this sub-agent.
+     * Updated via write_todos tool when called within a sub-agent context.
+     * Snapshot replacement semantics: each update carries the full list.
+     * Key: todo item ID, Value: todo item details
+     *
+     * @generated from field: map<string, ai.stigmer.runner.turn.v1.TodoItem> todos = 14;
+     */
+    todos: {
+        [key: string]: TodoItem;
+    };
+};
+/**
+ * Describes the message ai.stigmer.runner.turn.v1.SubAgentRun.
+ * Use `create(SubAgentRunSchema)` to create a new message.
+ */
+export declare const SubAgentRunSchema: GenMessage<SubAgentRun>;
+/**
+ * Represents a single item in the agent's todo list.
+ * Used by the write_todos tool to track multi-step tasks and progress.
+ *
+ * Shared by both RunStatus (main agent) and SubAgentRun
+ * (sub-agent), so it lives in its own file to avoid circular imports.
+ *
+ * @generated from message ai.stigmer.runner.turn.v1.TodoItem
+ */
+export type TodoItem = Message<"ai.stigmer.runner.turn.v1.TodoItem"> & {
+    /**
+     * Unique identifier for this todo item.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Description of the task to be completed.
+     *
+     * @generated from field: string content = 2;
+     */
+    content: string;
+    /**
+     * Current status of the todo item.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.TodoStatus status = 3;
+     */
+    status: TodoStatus;
+    /**
+     * ISO 8601 timestamp when the todo was created.
+     *
+     * @generated from field: string created_at = 4;
+     */
+    createdAt: string;
+    /**
+     * ISO 8601 timestamp when the todo was last updated.
+     *
+     * @generated from field: string updated_at = 5;
+     */
+    updatedAt: string;
+};
+/**
+ * Describes the message ai.stigmer.runner.turn.v1.TodoItem.
+ * Use `create(TodoItemSchema)` to create a new message.
+ */
+export declare const TodoItemSchema: GenMessage<TodoItem>;
+/**
+ * A pending approval request for a tool call that requires user consent before execution.
+ *
+ * Each entry represents one tool call waiting for a user decision (approve, skip,
+ * or reject). Sub-agent approvals are included with from_sub_agent set to true
+ * and sub_agent_name identifying the origin.
+ *
+ * @internal
+ *
+ * Computed server-side by the UpdateStatus handlers on every write. The handler
+ * scans messages[].tool_calls and sub_agent_runs[].messages[].tool_calls,
+ * collecting entries where status == WAITING_APPROVAL && requires_approval == true.
+ * Because the list is recomputed rather than merged, it is always consistent
+ * with the authoritative tool call state embedded in messages.
+ *
+ * Lifecycle:
+ * 1. Tool with requires_approval=true is about to execute
+ * 2. The runner sets ToolCall.status = WAITING_APPROVAL on the message
+ * 3. Server recomputes pending_approvals, entry appears
+ * 4. User calls SubmitApproval RPC with their decision
+ * 5. Agent resumes, ToolCall.status advances, next recompute drops the entry
+ *
+ * @generated from message ai.stigmer.runner.turn.v1.PendingApproval
+ */
+export type PendingApproval = Message<"ai.stigmer.runner.turn.v1.PendingApproval"> & {
+    /**
+     * ID of the tool call waiting for approval.
+     * Use this when calling SubmitApproval to identify which tool call to resume.
+     * Format: Tool call ID from the agent runtime (e.g., "call_abc123")
+     *
+     * @generated from field: string tool_call_id = 1;
+     */
+    toolCallId: string;
+    /**
+     * Name of the tool requiring approval.
+     * Matches ToolCall.name for correlation.
+     * Example: "delete_repository", "send_email", "execute_sql"
+     *
+     * @generated from field: string tool_name = 2;
+     */
+    toolName: string;
+    /**
+     * Human-readable approval message for display.
+     * Copied from ToolCall.approval_message for UI convenience.
+     * Contains resolved placeholders (e.g., "Delete repo: my-repo")
+     *
+     * @generated from field: string message = 3;
+     */
+    message: string;
+    /**
+     * Sanitized preview of tool arguments for informed decision-making.
+     * Sensitive values (passwords, tokens) are redacted.
+     * Displayed as formatted JSON or key-value pairs in UI.
+     *
+     * Example:
+     *   {
+     *     "repository": "acme/important-repo",
+     *     "force": true,
+     *     "reason": "cleanup"
+     *   }
+     *
+     * @generated from field: string args_preview = 4;
+     */
+    argsPreview: string;
+    /**
+     * ISO 8601 timestamp when the approval was requested.
+     * Enables UI to show waiting duration: "Waiting for 2 minutes"
+     * Example: "2026-01-30T15:30:00Z"
+     *
+     * @generated from field: string requested_at = 5;
+     */
+    requestedAt: string;
+    /**
+     * True if this approval originates from a sub-agent.
+     * Enables differentiated UI treatment:
+     *   - false: "Agent needs approval to..."
+     *   - true: "Sub-agent 'name' needs approval to..."
+     *
+     * @generated from field: bool from_sub_agent = 6;
+     */
+    fromSubAgent: boolean;
+    /**
+     * Name of the sub-agent if from_sub_agent is true.
+     * Example: "code-reviewer", "researcher", "debugger"
+     * Empty if from_sub_agent is false.
+     *
+     * @generated from field: string sub_agent_name = 7;
+     */
+    subAgentName: string;
+    /**
+     * Name of the MCP server that provides this tool, as its tools are named
+     * (plugin_<plugin>_<server> for a plugin's server).
+     * Copied from ToolCall.mcp_server_slug for UI convenience.
+     * Empty for built-in sandbox tools (read, write, shell, etc.).
+     *
+     * Enables the approval card to classify MCP tools and render
+     * structured argument previews (scalar grids, humanized names)
+     * instead of falling back to raw JSON.
+     *
+     * Examples: "plugin_linear_linear", "plugin_github_github"
+     *
+     * @generated from field: string mcp_server_slug = 8;
+     */
+    mcpServerSlug: string;
+    /**
+     * Concise subject/description of the sub-agent's task (3-10 words).
+     * Copied from SubAgentRun.subject when from_sub_agent is true.
+     * Enables UI to show a meaningful label like "Explore CLI rendering code"
+     * instead of the generic agent type name.
+     * Empty when from_sub_agent is false or subject is not available.
+     *
+     * @generated from field: string sub_agent_subject = 9;
+     */
+    subAgentSubject: string;
+    /**
+     * Why the agent wanted to execute this tool.
+     *
+     * Extracted from the last assistant message before the tool call.
+     * Gives the reinvocation agent context for the original intent, enabling
+     * it to decide whether the action still makes sense.
+     *
+     * Example: "Need to install the missing dependency to fix the build"
+     * Empty when rationale extraction was not possible.
+     *
+     * @generated from field: string agent_rationale = 10;
+     */
+    agentRationale: string;
+    /**
+     * Git branch name at the time the tool was denied.
+     *
+     * Diagnostic metadata only — the reinvocation agent inspects the actual
+     * current workspace state rather than relying on this value. Included
+     * in the HITL continuation prompt as a reference point for the agent
+     * to detect whether workspace state has drifted.
+     *
+     * Example: "feature/add-auth"
+     * Empty when the workspace is not git-backed.
+     *
+     * @generated from field: string branch_at_deny = 11;
+     */
+    branchAtDeny: string;
+    /**
+     * Git HEAD SHA at the time the tool was denied.
+     *
+     * Diagnostic metadata only — same purpose as branch_at_deny. Allows
+     * the reinvocation agent to compare against current HEAD to understand
+     * whether commits have landed since the tool was proposed.
+     *
+     * Example: "a1b2c3d4e5f6..."
+     * Empty when the workspace is not git-backed.
+     *
+     * @generated from field: string head_sha_at_deny = 12;
+     */
+    headShaAtDeny: string;
+    /**
+     * Harness-agnostic category of the tool, copied from ToolCall.tool_kind by the
+     * server-side projection (exactly as mcp_server_slug above is). Lets approval
+     * surfaces classify and render the tool without a client-side lookup. See
+     * ToolKind.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.ToolKind tool_kind = 13;
+     */
+    toolKind: ToolKind;
+    /**
+     * Policy layer that gated this tool call, copied from
+     * ToolCall.approval_policy_source by the server-side projection (exactly as
+     * tool_kind above is). Lets the approval surface explain WHY the tool requires
+     * approval (e.g. "required: marked destructive by the server") without a
+     * client-side lookup.
+     * See ApprovalPolicySource.
+     *
+     * @generated from field: ai.stigmer.runner.turn.v1.ApprovalPolicySource approval_policy_source = 15;
+     */
+    approvalPolicySource: ApprovalPolicySource;
+    /**
+     * Slug of the plugin whose hook asked for this approval; empty when no
+     * plugin's hook asked. Copied from ToolCall.approval_policy_hook.
+     *
+     * @generated from field: string approval_policy_hook = 16;
+     */
+    approvalPolicyHook: string;
+};
+/**
+ * Describes the message ai.stigmer.runner.turn.v1.PendingApproval.
+ * Use `create(PendingApprovalSchema)` to create a new message.
+ */
+export declare const PendingApprovalSchema: GenMessage<PendingApproval>;
+/**
+ * RecalledMemoriesReport records the semantic retriever's injection outcome
+ * for one run.
+ *
+ * @internal
+ * Runner-owned, written at most once per run at prompt build.
+ * Selection activates only when the candidate set exceeds the
+ * retriever's threshold (k); every other path — at-or-below threshold, no
+ * embeddings-capable provider, embed/rank failure — injects the snapshot
+ * wholesale and reports selection_active=false. Wholesale is the behavior
+ * from before selection existed: selection is an optimization, its
+ * absence is not a degradation.
+ *
+ * @generated from message ai.stigmer.runner.turn.v1.RecalledMemoriesReport
+ */
+export type RecalledMemoriesReport = Message<"ai.stigmer.runner.turn.v1.RecalledMemoriesReport"> & {
+    /**
+     * Whether semantic selection was active for this run's prompt.
+     * False means wholesale: the full status.recalled_memories snapshot was
+     * injected.
+     *
+     * @generated from field: bool selection_active = 1;
+     */
+    selectionActive: boolean;
+    /**
+     * IDs of the injected memories when selection was active.
+     *
+     * @internal
+     * Always a subset of the status.recalled_memories snapshot's memory_ids,
+     * in SNAPSHOT order (oldest-first): selection is by relevance, but
+     * presentation preserves the stable prompt order both editions pin.
+     * Empty when selection_active is false — readers fall back
+     * to the snapshot, which is exactly correct.
+     *
+     * @generated from field: repeated string injected_memory_ids = 2;
+     */
+    injectedMemoryIds: string[];
+    /**
+     * Embedding model that performed the selection.
+     * Example: "text-embedding-3-small". Empty when selection_active is
+     * false.
+     *
+     * @generated from field: string embedding_model = 3;
+     */
+    embeddingModel: string;
+};
+/**
+ * Describes the message ai.stigmer.runner.turn.v1.RecalledMemoriesReport.
+ * Use `create(RecalledMemoriesReportSchema)` to create a new message.
+ */
+export declare const RecalledMemoriesReportSchema: GenMessage<RecalledMemoriesReport>;