@adaptive-ds/zitadel-cli 0.1.0

package/dist/generated/zitadel/application/v2/application_service_pb.d.ts

@@ -0,0 +1,1387 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Duration, Timestamp } from "@bufbuild/protobuf/wkt";
+import type { APIAuthMethodType } from "./api_pb.js";
+import type { Application, ApplicationKey, ApplicationKeySearchFilter, ApplicationKeysSorting, ApplicationSearchFilter, ApplicationSorting } from "./application_pb.js";
+import type { LoginVersion } from "./login_pb.js";
+import type { AndroidAppLinkConfig, IOSAppLinkConfig, OIDCApplicationType, OIDCAuthMethodType, OIDCGrantType, OIDCLocalizedMessage, OIDCResponseType, OIDCTokenType, OIDCVersion } from "./oidc_pb.js";
+import type { PaginationRequest, PaginationResponse } from "../../filter/v2/filter_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file zitadel/application/v2/application_service.proto.
+ */
+export declare const file_zitadel_application_v2_application_service: GenFile;
+/**
+ * @generated from message zitadel.application.v2.CreateApplicationRequest
+ */
+export type CreateApplicationRequest = Message<"zitadel.application.v2.CreateApplicationRequest"> & {
+    /**
+     * The ID of the project the application will be created in.
+     *
+     * @generated from field: string project_id = 1;
+     */
+    projectId: string;
+    /**
+     * Optionally, provide the unique ID of the new application. If omitted, the system will generate one for you,
+     * which is the recommended way. The generated ID will be returned in the response.
+     *
+     * @generated from field: string application_id = 2;
+     */
+    applicationId: string;
+    /**
+     * Publicly visible name of the application. This might be presented to users if they sign in.
+     *
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * Defines the type of application to be created: OIDC, SAML or API and allows you
+     * to provide the configuration for the respective application type.
+     *
+     * @generated from oneof zitadel.application.v2.CreateApplicationRequest.application_type
+     */
+    applicationType: {
+        /**
+         * @generated from field: zitadel.application.v2.CreateOIDCApplicationRequest oidc_configuration = 4;
+         */
+        value: CreateOIDCApplicationRequest;
+        case: "oidcConfiguration";
+    } | {
+        /**
+         * @generated from field: zitadel.application.v2.CreateSAMLApplicationRequest saml_configuration = 5;
+         */
+        value: CreateSAMLApplicationRequest;
+        case: "samlConfiguration";
+    } | {
+        /**
+         * @generated from field: zitadel.application.v2.CreateAPIApplicationRequest api_configuration = 6;
+         */
+        value: CreateAPIApplicationRequest;
+        case: "apiConfiguration";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message zitadel.application.v2.CreateApplicationRequest.
+ * Use `create(CreateApplicationRequestSchema)` to create a new message.
+ */
+export declare const CreateApplicationRequestSchema: GenMessage<CreateApplicationRequest>;
+/**
+ * @generated from message zitadel.application.v2.CreateApplicationResponse
+ */
+export type CreateApplicationResponse = Message<"zitadel.application.v2.CreateApplicationResponse"> & {
+    /**
+     * The unique ID of the newly created application.
+     *
+     * @generated from field: string application_id = 1;
+     */
+    applicationId: string;
+    /**
+     * The timestamp of the application creation.
+     *
+     * @generated from field: google.protobuf.Timestamp creation_date = 2;
+     */
+    creationDate?: Timestamp | undefined;
+    /**
+     * Depending on the application type, the response contains the relevant configuration details.
+     * This can include client IDs, secrets, or other generated information necessary for the application to function.
+     *
+     * @generated from oneof zitadel.application.v2.CreateApplicationResponse.application_type
+     */
+    applicationType: {
+        /**
+         * @generated from field: zitadel.application.v2.CreateOIDCApplicationResponse oidc_configuration = 3;
+         */
+        value: CreateOIDCApplicationResponse;
+        case: "oidcConfiguration";
+    } | {
+        /**
+         * @generated from field: zitadel.application.v2.CreateSAMLApplicationResponse saml_configuration = 4;
+         */
+        value: CreateSAMLApplicationResponse;
+        case: "samlConfiguration";
+    } | {
+        /**
+         * @generated from field: zitadel.application.v2.CreateAPIApplicationResponse api_configuration = 5;
+         */
+        value: CreateAPIApplicationResponse;
+        case: "apiConfiguration";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message zitadel.application.v2.CreateApplicationResponse.
+ * Use `create(CreateApplicationResponseSchema)` to create a new message.
+ */
+export declare const CreateApplicationResponseSchema: GenMessage<CreateApplicationResponse>;
+/**
+ * @generated from message zitadel.application.v2.CreateOIDCApplicationRequest
+ */
+export type CreateOIDCApplicationRequest = Message<"zitadel.application.v2.CreateOIDCApplicationRequest"> & {
+    /**
+     * RedirectURIs are the allowed callback URIs for the OAuth2 / OIDC flows,
+     * where the authorization code or tokens will be sent to.
+     * The redirect_uri parameter in the authorization request must exactly match one of these URIs.
+     *
+     * @generated from field: repeated string redirect_uris = 1;
+     */
+    redirectUris: string[];
+    /**
+     * ResponseTypes define whether a code, id_token token or just id_token will be returned.
+     * The response_type parameter in the authorization request must exactly match one of these values.
+     *
+     * @generated from field: repeated zitadel.application.v2.OIDCResponseType response_types = 2;
+     */
+    responseTypes: OIDCResponseType[];
+    /**
+     * GrantTypes define the flow type the application is allowed to use.
+     * The grant_type parameter in the token request must exactly match one of these values.
+     * Minimum one grant type must be provided, but multiple grant types can be provided to allow
+     * different flows, e.g. authorization code flow and refresh token flow.
+     *
+     * @generated from field: repeated zitadel.application.v2.OIDCGrantType grant_types = 3;
+     */
+    grantTypes: OIDCGrantType[];
+    /**
+     * ApplicationType defines the OAuth2/OIDC client type and their ability to maintain
+     * confidentiality of their credentials.
+     * This influences the allowed grant types and the required authentication method.
+     *
+     * @generated from field: zitadel.application.v2.OIDCApplicationType application_type = 4;
+     */
+    applicationType: OIDCApplicationType;
+    /**
+     * The authentication method type used by the application to authenticate at the token endpoint.
+     *
+     * @generated from field: zitadel.application.v2.OIDCAuthMethodType auth_method_type = 5;
+     */
+    authMethodType: OIDCAuthMethodType;
+    /**
+     * PostLogoutRedirectURIs are the allowed URIs to redirect to after a logout.
+     * The post_logout_redirect_uri parameter in the logout request must exactly match one of these URIs.
+     *
+     * @generated from field: repeated string post_logout_redirect_uris = 6;
+     */
+    postLogoutRedirectUris: string[];
+    /**
+     * Version defines the OIDC version used by the application.
+     * Currently, only version 1.0 is supported.
+     * Future versions might introduce breaking changes.
+     *
+     * @generated from field: zitadel.application.v2.OIDCVersion version = 7;
+     */
+    version: OIDCVersion;
+    /**
+     * DevelopmentMode can be enabled for development purposes. This allows the use of
+     * OIDC non-compliant and potentially insecure settings, such as the use of
+     * HTTP redirect URIs or wildcard redirect URIs.
+     *
+     * @generated from field: bool development_mode = 8;
+     */
+    developmentMode: boolean;
+    /**
+     * The AccessTokenType defines the type of the access token returned from ZITADEL.
+     * Bearer tokens are opaque to clients. JWT tokens are self-contained and can be validated by the client.
+     * Bearer tokens must be introspected at the Zitadel token endpoint.
+     *
+     * @generated from field: zitadel.application.v2.OIDCTokenType access_token_type = 9;
+     */
+    accessTokenType: OIDCTokenType;
+    /**
+     * If AccessTokenRoleAssertion is enabled, the roles of the user are added to the access token.
+     * Ensure that the access token is a JWT token and not a bearer token. And either request the roles
+     * by scope or enable the user role assertion on the project.
+     *
+     * @generated from field: bool access_token_role_assertion = 10;
+     */
+    accessTokenRoleAssertion: boolean;
+    /**
+     * If IDTokenRoleAssertion is enabled, the roles of the user are added to the id token.
+     * Ensure that either the roles are requested by scope or enable the user role assertion on the
+     * project.
+     *
+     * @generated from field: bool id_token_role_assertion = 11;
+     */
+    idTokenRoleAssertion: boolean;
+    /**
+     * If IDTokenUserinfoAssertion is enabled, the claims of profile, email, address and phone scopes
+     * are added to the id token even if an access token is issued. This can be required by some applications
+     * that do not call the userinfo endpoint after authentication or directly use the id_token for retrieving
+     * user information.
+     * Attention: this violates the OIDC specification, which states that these claims must only be
+     * requested from the userinfo endpoint if an access token is issued. This is to prevent
+     * leaking of personal information in the id token, which is often stored in the browser and
+     * therefore more vulnerable.
+     *
+     * @generated from field: bool id_token_userinfo_assertion = 12;
+     */
+    idTokenUserinfoAssertion: boolean;
+    /**
+     * ClockSkew is used to compensate time differences between the servers of Zitadel and the application.
+     * It is added to the "exp" claim and subtracted from "iat", "auth_time" and "nbf" claims.
+     * The default is 0s, the maximum is 5s.
+     *
+     * @generated from field: google.protobuf.Duration clock_skew = 13;
+     */
+    clockSkew?: Duration | undefined;
+    /**
+     * AdditionalOrigins are HTTP origins (scheme + host + port) from where the API can be used
+     * additional to the redirect_uris.
+     * This is useful if the application is used from an origin different to the redirect_uris,
+     * e.g. if the application is a SPA served in a native app, where the redirect_uri is a custom scheme,
+     * but the application is served from a https origin.
+     *
+     * @generated from field: repeated string additional_origins = 14;
+     */
+    additionalOrigins: string[];
+    /**
+     * For native apps a successful login usually shows a success page with a link to open the application again.
+     * SkipNativeAppSuccessPage can be used to skip this page and open the application directly.
+     *
+     * @generated from field: bool skip_native_app_success_page = 15;
+     */
+    skipNativeAppSuccessPage: boolean;
+    /**
+     * BackChannelLogoutURI is used to notify the application about terminated sessions according
+     * to the OIDC Back-Channel Logout (https://openid.net/specs/openid-connect-backchannel-1_0.html).
+     *
+     * @generated from field: string back_channel_logout_uri = 16;
+     */
+    backChannelLogoutUri: string;
+    /**
+     * LoginVersion specifies the login UI, where the user is redirected to for authentication.
+     * It can be used to select a specific login UI, e.g. for embedded UIs or for custom login pages
+     * hosted on any other domain.
+     * If unset, the login UI is chosen by the instance default.
+     *
+     * @generated from field: zitadel.application.v2.LoginVersion login_version = 17;
+     */
+    loginVersion?: LoginVersion | undefined;
+    /**
+     * IOS is iOS Associated Domains / passkey trust config.
+     * Served in /.well-known/apple-app-site-association as webcredentials.apps entry
+     * "{team_id}.{bundle_id}" (Apple's full App ID = Team ID prefix + Bundle ID).
+     * That response may be HTTP-cached (Cache-Control), and platform verifiers may cache longer;
+     * changes can take time to take effect.
+     *
+     * @generated from field: zitadel.application.v2.IOSAppLinkConfig ios = 18;
+     */
+    ios?: IOSAppLinkConfig | undefined;
+    /**
+     * Android is Android Digital Asset Links / passkey trust config.
+     * Served in /.well-known/assetlinks.json for delegate_permission/common.get_login_creds.
+     * That response may be HTTP-cached (Cache-Control), and platform verifiers may cache longer;
+     * changes can take time to take effect.
+     *
+     * @generated from field: zitadel.application.v2.AndroidAppLinkConfig android = 19;
+     */
+    android?: AndroidAppLinkConfig | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.CreateOIDCApplicationRequest.
+ * Use `create(CreateOIDCApplicationRequestSchema)` to create a new message.
+ */
+export declare const CreateOIDCApplicationRequestSchema: GenMessage<CreateOIDCApplicationRequest>;
+/**
+ * @generated from message zitadel.application.v2.CreateOIDCApplicationResponse
+ */
+export type CreateOIDCApplicationResponse = Message<"zitadel.application.v2.CreateOIDCApplicationResponse"> & {
+    /**
+     * The unique OAuth2/OIDC client_id used for authentication of the application,
+     * e.g. at the token endpoint.
+     *
+     * @generated from field: string client_id = 1;
+     */
+    clientId: string;
+    /**
+     * In case of using the OIDCAuthMethodType.OIDC_AUTH_METHOD_TYPE_CLIENT_SECRET_BASIC
+     * or OIDCAuthMethodType.OIDC_AUTH_METHOD_TYPE_CLIENT_SECRET_POST the client_secret is generated and returned.
+     * It must be stored safely, as it will not be possible to retrieve it again.
+     * A new client_secret can be generated using the GenerateClientSecret endpoint.
+     *
+     * @generated from field: string client_secret = 2;
+     */
+    clientSecret: string;
+    /**
+     * NonCompliant specifies whether the config is OIDC compliant. A production configuration SHOULD be compliant.
+     * Non-compliant configurations can run into interoperability issues with OIDC libraries and tools.
+     * Compliance problems are listed in the compliance_problems field.
+     *
+     * @generated from field: bool non_compliant = 3;
+     */
+    nonCompliant: boolean;
+    /**
+     * ComplianceProblems lists the problems for non-compliant configurations.
+     * In case of a compliant configuration, this list is empty.
+     *
+     * @generated from field: repeated zitadel.application.v2.OIDCLocalizedMessage compliance_problems = 4;
+     */
+    complianceProblems: OIDCLocalizedMessage[];
+};
+/**
+ * Describes the message zitadel.application.v2.CreateOIDCApplicationResponse.
+ * Use `create(CreateOIDCApplicationResponseSchema)` to create a new message.
+ */
+export declare const CreateOIDCApplicationResponseSchema: GenMessage<CreateOIDCApplicationResponse>;
+/**
+ * @generated from message zitadel.application.v2.CreateSAMLApplicationRequest
+ */
+export type CreateSAMLApplicationRequest = Message<"zitadel.application.v2.CreateSAMLApplicationRequest"> & {
+    /**
+     * The SAML metadata can be provided either as raw XML or as a URL where the metadata can be fetched from.
+     * Either metadata_xml or metadata_url must be provided.
+     *
+     * @generated from oneof zitadel.application.v2.CreateSAMLApplicationRequest.metadata
+     */
+    metadata: {
+        /**
+         * @generated from field: bytes metadata_xml = 1;
+         */
+        value: Uint8Array;
+        case: "metadataXml";
+    } | {
+        /**
+         * @generated from field: string metadata_url = 2;
+         */
+        value: string;
+        case: "metadataUrl";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+    /**
+     * LoginVersion specifies the login UI, where the user is redirected to for authentication.
+     * It can be used to select a specific login UI, e.g. for embedded UIs or for custom login pages
+     * hosted on any other domain.
+     * If unset, the login UI is chosen by the instance default.
+     *
+     * @generated from field: zitadel.application.v2.LoginVersion login_version = 3;
+     */
+    loginVersion?: LoginVersion | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.CreateSAMLApplicationRequest.
+ * Use `create(CreateSAMLApplicationRequestSchema)` to create a new message.
+ */
+export declare const CreateSAMLApplicationRequestSchema: GenMessage<CreateSAMLApplicationRequest>;
+/**
+ * @generated from message zitadel.application.v2.CreateSAMLApplicationResponse
+ */
+export type CreateSAMLApplicationResponse = Message<"zitadel.application.v2.CreateSAMLApplicationResponse"> & {};
+/**
+ * Describes the message zitadel.application.v2.CreateSAMLApplicationResponse.
+ * Use `create(CreateSAMLApplicationResponseSchema)` to create a new message.
+ */
+export declare const CreateSAMLApplicationResponseSchema: GenMessage<CreateSAMLApplicationResponse>;
+/**
+ * @generated from message zitadel.application.v2.CreateAPIApplicationRequest
+ */
+export type CreateAPIApplicationRequest = Message<"zitadel.application.v2.CreateAPIApplicationRequest"> & {
+    /**
+     * The authentication method type used by the API to authenticate at the introspection endpoint.
+     *
+     * @generated from field: zitadel.application.v2.APIAuthMethodType auth_method_type = 1;
+     */
+    authMethodType: APIAuthMethodType;
+};
+/**
+ * Describes the message zitadel.application.v2.CreateAPIApplicationRequest.
+ * Use `create(CreateAPIApplicationRequestSchema)` to create a new message.
+ */
+export declare const CreateAPIApplicationRequestSchema: GenMessage<CreateAPIApplicationRequest>;
+/**
+ * @generated from message zitadel.application.v2.CreateAPIApplicationResponse
+ */
+export type CreateAPIApplicationResponse = Message<"zitadel.application.v2.CreateAPIApplicationResponse"> & {
+    /**
+     * The unique OAuth2 client_id used for authentication of the API, e.g. at the introspection endpoint.
+     *
+     * @generated from field: string client_id = 1;
+     */
+    clientId: string;
+    /**
+     * In case of using the APIAuthMethodType.API_AUTH_METHOD_TYPE_BASIC the client_secret is generated and returned.
+     * It must be stored safely, as it will not be possible to retrieve it again.
+     * A new client_secret can be generated using the GenerateClientSecret endpoint.
+     *
+     * @generated from field: string client_secret = 2;
+     */
+    clientSecret: string;
+};
+/**
+ * Describes the message zitadel.application.v2.CreateAPIApplicationResponse.
+ * Use `create(CreateAPIApplicationResponseSchema)` to create a new message.
+ */
+export declare const CreateAPIApplicationResponseSchema: GenMessage<CreateAPIApplicationResponse>;
+/**
+ * @generated from message zitadel.application.v2.UpdateApplicationRequest
+ */
+export type UpdateApplicationRequest = Message<"zitadel.application.v2.UpdateApplicationRequest"> & {
+    /**
+     * The unique ID of the application to be updated.
+     *
+     * @generated from field: string application_id = 1;
+     */
+    applicationId: string;
+    /**
+     * The ID of the project the application belongs to.
+     *
+     * @generated from field: string project_id = 2;
+     */
+    projectId: string;
+    /**
+     * Publicly visible name of the application. This might be presented to users if they sign in.
+     * If not set, the name will not be changed.
+     *
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * @generated from oneof zitadel.application.v2.UpdateApplicationRequest.application_type
+     */
+    applicationType: {
+        /**
+         * @generated from field: zitadel.application.v2.UpdateSAMLApplicationConfigurationRequest saml_configuration = 4;
+         */
+        value: UpdateSAMLApplicationConfigurationRequest;
+        case: "samlConfiguration";
+    } | {
+        /**
+         * @generated from field: zitadel.application.v2.UpdateOIDCApplicationConfigurationRequest oidc_configuration = 5;
+         */
+        value: UpdateOIDCApplicationConfigurationRequest;
+        case: "oidcConfiguration";
+    } | {
+        /**
+         * @generated from field: zitadel.application.v2.UpdateAPIApplicationConfigurationRequest api_configuration = 6;
+         */
+        value: UpdateAPIApplicationConfigurationRequest;
+        case: "apiConfiguration";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message zitadel.application.v2.UpdateApplicationRequest.
+ * Use `create(UpdateApplicationRequestSchema)` to create a new message.
+ */
+export declare const UpdateApplicationRequestSchema: GenMessage<UpdateApplicationRequest>;
+/**
+ * @generated from message zitadel.application.v2.UpdateApplicationResponse
+ */
+export type UpdateApplicationResponse = Message<"zitadel.application.v2.UpdateApplicationResponse"> & {
+    /**
+     * The timestamp of the application update. If no changes were made, the previous change date is returned.
+     * This can be used to check if the application was actually updated.
+     *
+     * @generated from field: google.protobuf.Timestamp change_date = 2;
+     */
+    changeDate?: Timestamp | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.UpdateApplicationResponse.
+ * Use `create(UpdateApplicationResponseSchema)` to create a new message.
+ */
+export declare const UpdateApplicationResponseSchema: GenMessage<UpdateApplicationResponse>;
+/**
+ * @generated from message zitadel.application.v2.UpdateSAMLApplicationConfigurationRequest
+ */
+export type UpdateSAMLApplicationConfigurationRequest = Message<"zitadel.application.v2.UpdateSAMLApplicationConfigurationRequest"> & {
+    /**
+     * The SAML metadata can be provided either as raw XML or as a URL where the metadata can be fetched from.
+     * Either metadata_xml or metadata_url must be provided.
+     * If omitted, the metadata will not be changed.
+     *
+     * @generated from oneof zitadel.application.v2.UpdateSAMLApplicationConfigurationRequest.metadata
+     */
+    metadata: {
+        /**
+         * @generated from field: bytes metadata_xml = 1;
+         */
+        value: Uint8Array;
+        case: "metadataXml";
+    } | {
+        /**
+         * @generated from field: string metadata_url = 2;
+         */
+        value: string;
+        case: "metadataUrl";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+    /**
+     * LoginVersion specifies the login UI, where the user is redirected to for authentication.
+     * It can be used to select a specific login UI, e.g. for embedded UIs or for custom login pages
+     * hosted on any other domain.
+     * If unset, the login UI is chosen by the instance default.
+     *
+     * @generated from field: optional zitadel.application.v2.LoginVersion login_version = 3;
+     */
+    loginVersion?: LoginVersion | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.UpdateSAMLApplicationConfigurationRequest.
+ * Use `create(UpdateSAMLApplicationConfigurationRequestSchema)` to create a new message.
+ */
+export declare const UpdateSAMLApplicationConfigurationRequestSchema: GenMessage<UpdateSAMLApplicationConfigurationRequest>;
+/**
+ * @generated from message zitadel.application.v2.UpdateOIDCApplicationConfigurationRequest
+ */
+export type UpdateOIDCApplicationConfigurationRequest = Message<"zitadel.application.v2.UpdateOIDCApplicationConfigurationRequest"> & {
+    /**
+     * RedirectURIs are the allowed callback URIs for the OAuth2 / OIDC flows,
+     * where the authorization code or tokens will be sent to.
+     * The redirect_uri parameter in the authorization request must exactly match one of these URIs.
+     * Any existing redirect URIs not included in this list will be removed.
+     * If not set, the redirect URIs will not be changed.
+     *
+     * @generated from field: repeated string redirect_uris = 1;
+     */
+    redirectUris: string[];
+    /**
+     * ResponseTypes define whether a code, id_token token or just id_token will be returned.
+     * The response_type parameter in the authorization request must exactly match one of these values.
+     * Any existing response types not included in this list will be removed.
+     * If not set, the response types will not be changed.
+     *
+     * @generated from field: repeated zitadel.application.v2.OIDCResponseType response_types = 2;
+     */
+    responseTypes: OIDCResponseType[];
+    /**
+     * GrantTypes define the flow type the application is allowed to use.
+     * The grant_type parameter in the token request must exactly match one of these values.
+     * Minimum one grant type must be provided, but multiple grant types can be provided to allow
+     * different flows, e.g. authorization code flow and refresh token flow.
+     * Any existing grant types not included in this list will be removed.
+     * If not set, the grant types will not be changed.
+     *
+     * @generated from field: repeated zitadel.application.v2.OIDCGrantType grant_types = 3;
+     */
+    grantTypes: OIDCGrantType[];
+    /**
+     * ApplicationType defines the OAuth2/OIDC client type and their ability to maintain
+     * confidentiality of their credentials.
+     * This influences the allowed grant types and the required authentication method.
+     * If not set, the application type will not be changed.
+     *
+     * @generated from field: optional zitadel.application.v2.OIDCApplicationType application_type = 4;
+     */
+    applicationType?: OIDCApplicationType | undefined;
+    /**
+     * The authentication method type used by the application to authenticate at the token endpoint.
+     * If not set, the authentication method type will not be changed.
+     *
+     * @generated from field: optional zitadel.application.v2.OIDCAuthMethodType auth_method_type = 5;
+     */
+    authMethodType?: OIDCAuthMethodType | undefined;
+    /**
+     * PostLogoutRedirectURIs are the allowed URIs to redirect to after a logout.
+     * The post_logout_redirect_uri parameter in the logout request must exactly match one of these URIs.
+     * Any existing post logout redirect URIs not included in this list will be removed.
+     * If not set, the post logout redirect URIs will not be changed.
+     *
+     * @generated from field: repeated string post_logout_redirect_uris = 6;
+     */
+    postLogoutRedirectUris: string[];
+    /**
+     * Version defines the OIDC version used by the application.
+     * Currently, only version 1.0 is supported.
+     * Future versions might introduce breaking changes.
+     * If not set, the version will not be changed.
+     *
+     * @generated from field: optional zitadel.application.v2.OIDCVersion version = 7;
+     */
+    version?: OIDCVersion | undefined;
+    /**
+     * DevelopmentMode can be enabled for development purposes. This allows the use of
+     * OIDC non-compliant and potentially insecure settings, such as the use of
+     * HTTP redirect URIs or wildcard redirect URIs.
+     * If not set, the dev mode will not be changed.
+     *
+     * @generated from field: optional bool development_mode = 8;
+     */
+    developmentMode?: boolean | undefined;
+    /**
+     * The AccessTokenType defines the type of the access token returned from ZITADEL.
+     * Bearer tokens are opaque to clients. JWT tokens are self-contained and can be validated by the client.
+     * Bearer tokens must be introspected at the Zitadel token endpoint.
+     * If not set, the access token type will not be changed.
+     *
+     * @generated from field: optional zitadel.application.v2.OIDCTokenType access_token_type = 9;
+     */
+    accessTokenType?: OIDCTokenType | undefined;
+    /**
+     * If AccessTokenRoleAssertion is enabled, the roles of the user are added to the access token.
+     * Ensure that the access token is a JWT token and not a bearer token. And either request the roles
+     * by scope or enable the user role assertion on the project.
+     * If not set, the access token role assertion will not be changed.
+     *
+     * @generated from field: optional bool access_token_role_assertion = 10;
+     */
+    accessTokenRoleAssertion?: boolean | undefined;
+    /**
+     * If IDTokenRoleAssertion is enabled, the roles of the user are added to the id token.
+     * Ensure that either the roles are requested by scope or enable the user role assertion on the
+     * project.
+     * If not set, the id token role assertion will not be changed.
+     *
+     * @generated from field: optional bool id_token_role_assertion = 11;
+     */
+    idTokenRoleAssertion?: boolean | undefined;
+    /**
+     * If IDTokenUserinfoAssertion is enabled, the claims of profile, email, address and phone scopes
+     * are added to the id token even if an access token is issued. This can be required by some applications
+     * that do not call the userinfo endpoint after authentication or directly use the id_token for retrieving
+     * user information.
+     * Attention: this violates the OIDC specification, which states that these claims must only be
+     * requested from the userinfo endpoint if an access token is issued. This is to prevent
+     * leaking of personal information in the id token, which is often stored in the browser and
+     * therefore more vulnerable.
+     * If not set, the id token userinfo assertion will not be changed.
+     *
+     * @generated from field: optional bool id_token_userinfo_assertion = 12;
+     */
+    idTokenUserinfoAssertion?: boolean | undefined;
+    /**
+     * ClockSkew is used to compensate time differences between the servers of Zitadel and the application.
+     * It is added to the "exp" claim and subtracted from "iat", "auth_time" and "nbf" claims.
+     * The default is 0s, the maximum is 5s.
+     * If not set, the clock skew will not be changed.
+     *
+     * @generated from field: optional google.protobuf.Duration clock_skew = 13;
+     */
+    clockSkew?: Duration | undefined;
+    /**
+     * AdditionalOrigins are HTTP origins (scheme + host + port) from where the API can be used
+     * additional to the redirect_uris.
+     * This is useful if the application is used from an origin different to the redirect_uris,
+     * e.g. if the application is a SPA served in a native app, where the redirect_uri is a custom scheme,
+     * but the application is served from a https origin.
+     * Any existing additional origins not included in this list will be removed.
+     * If not set, the additional origins will not be changed.
+     *
+     * @generated from field: repeated string additional_origins = 14;
+     */
+    additionalOrigins: string[];
+    /**
+     * For native apps a successful login usually shows a success page with a link to open the application again.
+     * SkipNativeAppSuccessPage can be used to skip this page and open the application directly.
+     * If not set, the skip native app success page will not be changed.
+     *
+     * @generated from field: optional bool skip_native_app_success_page = 15;
+     */
+    skipNativeAppSuccessPage?: boolean | undefined;
+    /**
+     * BackChannelLogoutURI is used to notify the application about terminated sessions according
+     * to the OIDC Back-Channel Logout (https://openid.net/specs/openid-connect-backchannel-1_0.html).
+     * If not set, the back channel logout URI will not be changed.
+     *
+     * @generated from field: optional string back_channel_logout_uri = 16;
+     */
+    backChannelLogoutUri?: string | undefined;
+    /**
+     * LoginVersion specifies the login UI, where the user is redirected to for authentication.
+     * It can be used to select a specific login UI, e.g. for embedded UIs or for custom login pages
+     * hosted on any other domain.
+     * If unset, the login UI is chosen by the instance default.
+     *
+     * @generated from field: optional zitadel.application.v2.LoginVersion login_version = 17;
+     */
+    loginVersion?: LoginVersion | undefined;
+    /**
+     * IOS is iOS Associated Domains / passkey trust config.
+     * Served in /.well-known/apple-app-site-association as webcredentials.apps entry
+     * "{team_id}.{bundle_id}" (Apple's full App ID = Team ID prefix + Bundle ID).
+     * That response may be HTTP-cached (Cache-Control), and platform verifiers may cache longer;
+     * changes can take time to take effect.
+     * If not set, the iOS config will not be changed.
+     *
+     * @generated from field: optional zitadel.application.v2.IOSAppLinkConfig ios = 18;
+     */
+    ios?: IOSAppLinkConfig | undefined;
+    /**
+     * Android is Android Digital Asset Links / passkey trust config.
+     * Served in /.well-known/assetlinks.json for delegate_permission/common.get_login_creds.
+     * That response may be HTTP-cached (Cache-Control), and platform verifiers may cache longer;
+     * changes can take time to take effect.
+     * If not set, the Android config will not be changed.
+     *
+     * @generated from field: optional zitadel.application.v2.AndroidAppLinkConfig android = 19;
+     */
+    android?: AndroidAppLinkConfig | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.UpdateOIDCApplicationConfigurationRequest.
+ * Use `create(UpdateOIDCApplicationConfigurationRequestSchema)` to create a new message.
+ */
+export declare const UpdateOIDCApplicationConfigurationRequestSchema: GenMessage<UpdateOIDCApplicationConfigurationRequest>;
+/**
+ * @generated from message zitadel.application.v2.UpdateAPIApplicationConfigurationRequest
+ */
+export type UpdateAPIApplicationConfigurationRequest = Message<"zitadel.application.v2.UpdateAPIApplicationConfigurationRequest"> & {
+    /**
+     * The authentication method type used by the API to authenticate at the introspection endpoint.
+     *
+     * @generated from field: zitadel.application.v2.APIAuthMethodType auth_method_type = 1;
+     */
+    authMethodType: APIAuthMethodType;
+};
+/**
+ * Describes the message zitadel.application.v2.UpdateAPIApplicationConfigurationRequest.
+ * Use `create(UpdateAPIApplicationConfigurationRequestSchema)` to create a new message.
+ */
+export declare const UpdateAPIApplicationConfigurationRequestSchema: GenMessage<UpdateAPIApplicationConfigurationRequest>;
+/**
+ * @generated from message zitadel.application.v2.GetApplicationRequest
+ */
+export type GetApplicationRequest = Message<"zitadel.application.v2.GetApplicationRequest"> & {
+    /**
+     * The unique ID of the application to be retrieved.
+     *
+     * @generated from field: string application_id = 1;
+     */
+    applicationId: string;
+};
+/**
+ * Describes the message zitadel.application.v2.GetApplicationRequest.
+ * Use `create(GetApplicationRequestSchema)` to create a new message.
+ */
+export declare const GetApplicationRequestSchema: GenMessage<GetApplicationRequest>;
+/**
+ * @generated from message zitadel.application.v2.GetApplicationResponse
+ */
+export type GetApplicationResponse = Message<"zitadel.application.v2.GetApplicationResponse"> & {
+    /**
+     * @generated from field: zitadel.application.v2.Application application = 1;
+     */
+    application?: Application | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.GetApplicationResponse.
+ * Use `create(GetApplicationResponseSchema)` to create a new message.
+ */
+export declare const GetApplicationResponseSchema: GenMessage<GetApplicationResponse>;
+/**
+ * @generated from message zitadel.application.v2.DeleteApplicationRequest
+ */
+export type DeleteApplicationRequest = Message<"zitadel.application.v2.DeleteApplicationRequest"> & {
+    /**
+     * The unique ID of the application to be deleted.
+     *
+     * @generated from field: string application_id = 1;
+     */
+    applicationId: string;
+    /**
+     * The ID of the project the application belongs to.
+     *
+     * @generated from field: string project_id = 2;
+     */
+    projectId: string;
+};
+/**
+ * Describes the message zitadel.application.v2.DeleteApplicationRequest.
+ * Use `create(DeleteApplicationRequestSchema)` to create a new message.
+ */
+export declare const DeleteApplicationRequestSchema: GenMessage<DeleteApplicationRequest>;
+/**
+ * @generated from message zitadel.application.v2.DeleteApplicationResponse
+ */
+export type DeleteApplicationResponse = Message<"zitadel.application.v2.DeleteApplicationResponse"> & {
+    /**
+     * The timestamp of the application deletion. In case the application was already deleted,
+     * the previous deletion date is returned. This can be used to check if the application was
+     * actually deleted.
+     *
+     * @generated from field: google.protobuf.Timestamp deletion_date = 1;
+     */
+    deletionDate?: Timestamp | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.DeleteApplicationResponse.
+ * Use `create(DeleteApplicationResponseSchema)` to create a new message.
+ */
+export declare const DeleteApplicationResponseSchema: GenMessage<DeleteApplicationResponse>;
+/**
+ * @generated from message zitadel.application.v2.DeactivateApplicationRequest
+ */
+export type DeactivateApplicationRequest = Message<"zitadel.application.v2.DeactivateApplicationRequest"> & {
+    /**
+     * The unique ID of the application to be deactivated.
+     *
+     * @generated from field: string application_id = 1;
+     */
+    applicationId: string;
+    /**
+     * The ID of the project the application belongs to.
+     *
+     * @generated from field: string project_id = 2;
+     */
+    projectId: string;
+};
+/**
+ * Describes the message zitadel.application.v2.DeactivateApplicationRequest.
+ * Use `create(DeactivateApplicationRequestSchema)` to create a new message.
+ */
+export declare const DeactivateApplicationRequestSchema: GenMessage<DeactivateApplicationRequest>;
+/**
+ * @generated from message zitadel.application.v2.DeactivateApplicationResponse
+ */
+export type DeactivateApplicationResponse = Message<"zitadel.application.v2.DeactivateApplicationResponse"> & {
+    /**
+     * The timestamp of the application deactivation.
+     *
+     * @generated from field: google.protobuf.Timestamp deactivation_date = 1;
+     */
+    deactivationDate?: Timestamp | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.DeactivateApplicationResponse.
+ * Use `create(DeactivateApplicationResponseSchema)` to create a new message.
+ */
+export declare const DeactivateApplicationResponseSchema: GenMessage<DeactivateApplicationResponse>;
+/**
+ * @generated from message zitadel.application.v2.ReactivateApplicationRequest
+ */
+export type ReactivateApplicationRequest = Message<"zitadel.application.v2.ReactivateApplicationRequest"> & {
+    /**
+     * The unique ID of the application to be reactivated.
+     *
+     * @generated from field: string application_id = 1;
+     */
+    applicationId: string;
+    /**
+     * The ID of the project the application belongs to.
+     *
+     * @generated from field: string project_id = 2;
+     */
+    projectId: string;
+};
+/**
+ * Describes the message zitadel.application.v2.ReactivateApplicationRequest.
+ * Use `create(ReactivateApplicationRequestSchema)` to create a new message.
+ */
+export declare const ReactivateApplicationRequestSchema: GenMessage<ReactivateApplicationRequest>;
+/**
+ * @generated from message zitadel.application.v2.ReactivateApplicationResponse
+ */
+export type ReactivateApplicationResponse = Message<"zitadel.application.v2.ReactivateApplicationResponse"> & {
+    /**
+     * The timestamp of the application reactivation.
+     *
+     * @generated from field: google.protobuf.Timestamp reactivation_date = 1;
+     */
+    reactivationDate?: Timestamp | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.ReactivateApplicationResponse.
+ * Use `create(ReactivateApplicationResponseSchema)` to create a new message.
+ */
+export declare const ReactivateApplicationResponseSchema: GenMessage<ReactivateApplicationResponse>;
+/**
+ * @generated from message zitadel.application.v2.GenerateClientSecretRequest
+ */
+export type GenerateClientSecretRequest = Message<"zitadel.application.v2.GenerateClientSecretRequest"> & {
+    /**
+     * The unique ID of the application to generate a new client secret for.
+     *
+     * @generated from field: string application_id = 1;
+     */
+    applicationId: string;
+    /**
+     * The ID of the project the application belongs to.
+     *
+     * @generated from field: string project_id = 2;
+     */
+    projectId: string;
+};
+/**
+ * Describes the message zitadel.application.v2.GenerateClientSecretRequest.
+ * Use `create(GenerateClientSecretRequestSchema)` to create a new message.
+ */
+export declare const GenerateClientSecretRequestSchema: GenMessage<GenerateClientSecretRequest>;
+/**
+ * @generated from message zitadel.application.v2.GenerateClientSecretResponse
+ */
+export type GenerateClientSecretResponse = Message<"zitadel.application.v2.GenerateClientSecretResponse"> & {
+    /**
+     * The newly generated client secret. It must be stored safely, as it will not be possible to retrieve it again.
+     * A new client secret can be generated using this endpoint.
+     *
+     * @generated from field: string client_secret = 1;
+     */
+    clientSecret: string;
+    /**
+     * The timestamp of the creation of the new client secret.
+     *
+     * @generated from field: google.protobuf.Timestamp creation_date = 2;
+     */
+    creationDate?: Timestamp | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.GenerateClientSecretResponse.
+ * Use `create(GenerateClientSecretResponseSchema)` to create a new message.
+ */
+export declare const GenerateClientSecretResponseSchema: GenMessage<GenerateClientSecretResponse>;
+/**
+ * @generated from message zitadel.application.v2.ListApplicationsRequest
+ */
+export type ListApplicationsRequest = Message<"zitadel.application.v2.ListApplicationsRequest"> & {
+    /**
+     * Pagination and sorting.
+     *
+     * @generated from field: zitadel.filter.v2.PaginationRequest pagination = 1;
+     */
+    pagination?: PaginationRequest | undefined;
+    /**
+     * @generated from field: zitadel.application.v2.ApplicationSorting sorting_column = 3;
+     */
+    sortingColumn: ApplicationSorting;
+    /**
+     * Criteria to filter the applications.
+     * All provided filters are combined with a logical AND.
+     *
+     * @generated from field: repeated zitadel.application.v2.ApplicationSearchFilter filters = 2;
+     */
+    filters: ApplicationSearchFilter[];
+};
+/**
+ * Describes the message zitadel.application.v2.ListApplicationsRequest.
+ * Use `create(ListApplicationsRequestSchema)` to create a new message.
+ */
+export declare const ListApplicationsRequestSchema: GenMessage<ListApplicationsRequest>;
+/**
+ * @generated from message zitadel.application.v2.ListApplicationsResponse
+ */
+export type ListApplicationsResponse = Message<"zitadel.application.v2.ListApplicationsResponse"> & {
+    /**
+     * The list of applications matching the query. Depending on the applied limit,
+     * there might be more applications available than included in this list.
+     * Use the returned pagination information to request further applications.
+     *
+     * @generated from field: repeated zitadel.application.v2.Application applications = 1;
+     */
+    applications: Application[];
+    /**
+     * Contains the total number of apps matching the query and the applied limit.
+     *
+     * @generated from field: zitadel.filter.v2.PaginationResponse pagination = 2;
+     */
+    pagination?: PaginationResponse | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.ListApplicationsResponse.
+ * Use `create(ListApplicationsResponseSchema)` to create a new message.
+ */
+export declare const ListApplicationsResponseSchema: GenMessage<ListApplicationsResponse>;
+/**
+ * @generated from message zitadel.application.v2.CreateApplicationKeyRequest
+ */
+export type CreateApplicationKeyRequest = Message<"zitadel.application.v2.CreateApplicationKeyRequest"> & {
+    /**
+     * The ID of the application the key will be created for.
+     *
+     * @generated from field: string application_id = 1;
+     */
+    applicationId: string;
+    /**
+     * The ID of the project the application belongs to.
+     *
+     * @generated from field: string project_id = 2;
+     */
+    projectId: string;
+    /**
+     * The timestamp the key will expire.
+     *
+     * @generated from field: google.protobuf.Timestamp expiration_date = 3;
+     */
+    expirationDate?: Timestamp | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.CreateApplicationKeyRequest.
+ * Use `create(CreateApplicationKeyRequestSchema)` to create a new message.
+ */
+export declare const CreateApplicationKeyRequestSchema: GenMessage<CreateApplicationKeyRequest>;
+/**
+ * @generated from message zitadel.application.v2.CreateApplicationKeyResponse
+ */
+export type CreateApplicationKeyResponse = Message<"zitadel.application.v2.CreateApplicationKeyResponse"> & {
+    /**
+     * The unique ID of the newly created application key.
+     *
+     * @generated from field: string key_id = 1;
+     */
+    keyId: string;
+    /**
+     * The timestamp of the application key creation.
+     *
+     * @generated from field: google.protobuf.Timestamp creation_date = 2;
+     */
+    creationDate?: Timestamp | undefined;
+    /**
+     * KeyDetails contains the serialized private key and additional information depending on the key type.
+     * It must be stored safely, as it will not be possible to retrieve it again.
+     * A new key can be generated using the CreateApplicationKey endpoint.
+     *
+     * @generated from field: bytes key_details = 3;
+     */
+    keyDetails: Uint8Array;
+};
+/**
+ * Describes the message zitadel.application.v2.CreateApplicationKeyResponse.
+ * Use `create(CreateApplicationKeyResponseSchema)` to create a new message.
+ */
+export declare const CreateApplicationKeyResponseSchema: GenMessage<CreateApplicationKeyResponse>;
+/**
+ * @generated from message zitadel.application.v2.DeleteApplicationKeyRequest
+ */
+export type DeleteApplicationKeyRequest = Message<"zitadel.application.v2.DeleteApplicationKeyRequest"> & {
+    /**
+     * The unique ID of the application key to be deleted.
+     *
+     * @generated from field: string key_id = 1;
+     */
+    keyId: string;
+    /**
+     * The ID of the application the key belongs to.
+     *
+     * @generated from field: string application_id = 2;
+     */
+    applicationId: string;
+    /**
+     * The ID of the project the application belongs to.
+     *
+     * @generated from field: string project_id = 3;
+     */
+    projectId: string;
+};
+/**
+ * Describes the message zitadel.application.v2.DeleteApplicationKeyRequest.
+ * Use `create(DeleteApplicationKeyRequestSchema)` to create a new message.
+ */
+export declare const DeleteApplicationKeyRequestSchema: GenMessage<DeleteApplicationKeyRequest>;
+/**
+ * @generated from message zitadel.application.v2.DeleteApplicationKeyResponse
+ */
+export type DeleteApplicationKeyResponse = Message<"zitadel.application.v2.DeleteApplicationKeyResponse"> & {
+    /**
+     * The timestamp of the application key deletion. In case the key was already deleted,
+     * the previous deletion date is returned. This can be used to check if the key was
+     * actually deleted.
+     *
+     * @generated from field: google.protobuf.Timestamp deletion_date = 1;
+     */
+    deletionDate?: Timestamp | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.DeleteApplicationKeyResponse.
+ * Use `create(DeleteApplicationKeyResponseSchema)` to create a new message.
+ */
+export declare const DeleteApplicationKeyResponseSchema: GenMessage<DeleteApplicationKeyResponse>;
+/**
+ * @generated from message zitadel.application.v2.GetApplicationKeyRequest
+ */
+export type GetApplicationKeyRequest = Message<"zitadel.application.v2.GetApplicationKeyRequest"> & {
+    /**
+     * The unique ID of the application key to be retrieved.
+     *
+     * @generated from field: string key_id = 1;
+     */
+    keyId: string;
+};
+/**
+ * Describes the message zitadel.application.v2.GetApplicationKeyRequest.
+ * Use `create(GetApplicationKeyRequestSchema)` to create a new message.
+ */
+export declare const GetApplicationKeyRequestSchema: GenMessage<GetApplicationKeyRequest>;
+/**
+ * @generated from message zitadel.application.v2.GetApplicationKeyResponse
+ */
+export type GetApplicationKeyResponse = Message<"zitadel.application.v2.GetApplicationKeyResponse"> & {
+    /**
+     * Unique ID of the application key.
+     *
+     * @generated from field: string key_id = 1;
+     */
+    keyId: string;
+    /**
+     * The timestamp of the key creation.
+     *
+     * @generated from field: google.protobuf.Timestamp creation_date = 2;
+     */
+    creationDate?: Timestamp | undefined;
+    /**
+     * The timestamp when the key will expire.
+     *
+     * @generated from field: google.protobuf.Timestamp expiration_date = 3;
+     */
+    expirationDate?: Timestamp | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.GetApplicationKeyResponse.
+ * Use `create(GetApplicationKeyResponseSchema)` to create a new message.
+ */
+export declare const GetApplicationKeyResponseSchema: GenMessage<GetApplicationKeyResponse>;
+/**
+ * @generated from message zitadel.application.v2.ListApplicationKeysRequest
+ */
+export type ListApplicationKeysRequest = Message<"zitadel.application.v2.ListApplicationKeysRequest"> & {
+    /**
+     * Pagination and sorting.
+     *
+     * @generated from field: zitadel.filter.v2.PaginationRequest pagination = 1;
+     */
+    pagination?: PaginationRequest | undefined;
+    /**
+     * The column to sort by. If not provided, the default is 'KEY_ID'.
+     *
+     * @generated from field: zitadel.application.v2.ApplicationKeysSorting sorting_column = 2;
+     */
+    sortingColumn: ApplicationKeysSorting;
+    /**
+     * Criteria to filter the application keys.
+     * All provided filters are combined with a logical AND.
+     *
+     * @generated from field: repeated zitadel.application.v2.ApplicationKeySearchFilter filters = 3;
+     */
+    filters: ApplicationKeySearchFilter[];
+};
+/**
+ * Describes the message zitadel.application.v2.ListApplicationKeysRequest.
+ * Use `create(ListApplicationKeysRequestSchema)` to create a new message.
+ */
+export declare const ListApplicationKeysRequestSchema: GenMessage<ListApplicationKeysRequest>;
+/**
+ * @generated from message zitadel.application.v2.ListApplicationKeysResponse
+ */
+export type ListApplicationKeysResponse = Message<"zitadel.application.v2.ListApplicationKeysResponse"> & {
+    /**
+     * The list of application keys matching the query. Depending on the applied limit,
+     * there might be more keys available than returned in this list.
+     * Use the returned pagination information to request further keys.
+     *
+     * @generated from field: repeated zitadel.application.v2.ApplicationKey keys = 1;
+     */
+    keys: ApplicationKey[];
+    /**
+     * Contains the total number of application keys matching the query and the applied limit.
+     *
+     * @generated from field: zitadel.filter.v2.PaginationResponse pagination = 2;
+     */
+    pagination?: PaginationResponse | undefined;
+};
+/**
+ * Describes the message zitadel.application.v2.ListApplicationKeysResponse.
+ * Use `create(ListApplicationKeysResponseSchema)` to create a new message.
+ */
+export declare const ListApplicationKeysResponseSchema: GenMessage<ListApplicationKeysResponse>;
+/**
+ * Service to manage applications.
+ * This service provides methods to create, update, delete and list application and application keys.
+ *
+ * @generated from service zitadel.application.v2.ApplicationService
+ */
+export declare const ApplicationService: GenService<{
+    /**
+     * Create Application
+     *
+     * Create an application. The application can be OIDC, API or SAML type, based on the input.
+     *
+     * Required permissions:
+     *   - project.app.write
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.CreateApplication
+     */
+    createApplication: {
+        methodKind: "unary";
+        input: typeof CreateApplicationRequestSchema;
+        output: typeof CreateApplicationResponseSchema;
+    };
+    /**
+     * Update Application
+     *
+     * Changes the configuration of an OIDC, API or SAML type application, as well as
+     * the application name, based on the input provided.
+     *
+     * Required permissions:
+     *   - project.app.write
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.UpdateApplication
+     */
+    updateApplication: {
+        methodKind: "unary";
+        input: typeof UpdateApplicationRequestSchema;
+        output: typeof UpdateApplicationResponseSchema;
+    };
+    /**
+     * Get Application
+     *
+     * Retrieves the application matching the provided ID.
+     *
+     * Required permissions:
+     *   - project.app.read
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.GetApplication
+     */
+    getApplication: {
+        methodKind: "unary";
+        input: typeof GetApplicationRequestSchema;
+        output: typeof GetApplicationResponseSchema;
+    };
+    /**
+     * Delete Application
+     *
+     * Deletes the application belonging to the input project and matching the provided
+     * application ID.
+     *
+     * Required permissions:
+     *   - project.app.delete
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.DeleteApplication
+     */
+    deleteApplication: {
+        methodKind: "unary";
+        input: typeof DeleteApplicationRequestSchema;
+        output: typeof DeleteApplicationResponseSchema;
+    };
+    /**
+     * Deactivate Application
+     *
+     * Deactivates the application belonging to the input project and matching the provided
+     * application ID.
+     *
+     * Required permissions:
+     *   - project.app.write
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.DeactivateApplication
+     */
+    deactivateApplication: {
+        methodKind: "unary";
+        input: typeof DeactivateApplicationRequestSchema;
+        output: typeof DeactivateApplicationResponseSchema;
+    };
+    /**
+     * Reactivate Application
+     *
+     * Reactivates the application belonging to the input project and matching the provided
+     * application ID.
+     *
+     * Required permissions:
+     *   - project.app.write
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.ReactivateApplication
+     */
+    reactivateApplication: {
+        methodKind: "unary";
+        input: typeof ReactivateApplicationRequestSchema;
+        output: typeof ReactivateApplicationResponseSchema;
+    };
+    /**
+     * Generate Client Secret
+     *
+     * Generates the client secret of an API or OIDC application that belongs to the input project.
+     *
+     * Required permissions:
+     *   - project.app.write
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.GenerateClientSecret
+     */
+    generateClientSecret: {
+        methodKind: "unary";
+        input: typeof GenerateClientSecretRequestSchema;
+        output: typeof GenerateClientSecretResponseSchema;
+    };
+    /**
+     * List Applications
+     *
+     * Returns a list of applications matching the input parameters. The results can be filtered
+     * by project, state, type and name. It can be sorted by id, name, creation date, change date or state.
+     *
+     * Required permissions:
+     *   - project.app.read
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.ListApplications
+     */
+    listApplications: {
+        methodKind: "unary";
+        input: typeof ListApplicationsRequestSchema;
+        output: typeof ListApplicationsResponseSchema;
+    };
+    /**
+     * Create Application Key
+     *
+     * Create a new application key, which is used to authorize an API application.
+     *
+     * Key details are returned in the response. They must be stored safely, as it will not
+     * be possible to retrieve them again.
+     *
+     * Required permissions:
+     *   - `project.app.write`
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.CreateApplicationKey
+     */
+    createApplicationKey: {
+        methodKind: "unary";
+        input: typeof CreateApplicationKeyRequestSchema;
+        output: typeof CreateApplicationKeyResponseSchema;
+    };
+    /**
+     * Delete Application Key
+     *
+     * Deletes an application key matching the provided ID.
+     *
+     * Organization ID is not mandatory, but helps with filtering/performance.
+     *
+     * The deletion time is returned in response message.
+     *
+     * Required permissions:
+     *   - `project.app.write`
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.DeleteApplicationKey
+     */
+    deleteApplicationKey: {
+        methodKind: "unary";
+        input: typeof DeleteApplicationKeyRequestSchema;
+        output: typeof DeleteApplicationKeyResponseSchema;
+    };
+    /**
+     * Get Application Key
+     *
+     * Retrieves the application key matching the provided ID.
+     *
+     * Specifying a project, organization and application ID is optional but help with filtering/performance.
+     *
+     * Required permissions:
+     *   - project.app.read
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.GetApplicationKey
+     */
+    getApplicationKey: {
+        methodKind: "unary";
+        input: typeof GetApplicationKeyRequestSchema;
+        output: typeof GetApplicationKeyResponseSchema;
+    };
+    /**
+     * List Application Keys
+     *
+     * Returns a list of application keys matching the input parameters.
+     *
+     * The result can be sorted by id, aggregate, creation date, expiration date, resource owner or type.
+     * It can also be filtered by application, project or organization ID.
+     *
+     * Required permissions:
+     *   - project.app.read
+     *
+     * @generated from rpc zitadel.application.v2.ApplicationService.ListApplicationKeys
+     */
+    listApplicationKeys: {
+        methodKind: "unary";
+        input: typeof ListApplicationKeysRequestSchema;
+        output: typeof ListApplicationKeysResponseSchema;
+    };
+}>;
+//# sourceMappingURL=application_service_pb.d.ts.map