@alis-build/alis-iam-v1 1.37.0 → 1.45.0

package/alis/iam/v1/iam_pb.d.ts

@@ -1,7 +1,28 @@
-// @generated by protoc-gen-es v2.13.0 with parameter "target=js+dts,import_extension=js,json_types=true"
+// @generated by protoc-gen-es v2.16.0 with parameter "target=js+dts,import_extension=js,json_types=true"
 // @generated from file alis/iam/v1/iam.proto (package alis.iam.v1, syntax proto3)
 /* eslint-disable */
 
+// Request and response messages that complement the standard `google.iam.v1`
+// IAM methods with incremental binding changes and batched permission checks.
+//
+// The package defines no service. Services that protect their resources with
+// a `google.iam.v1.Policy` use these messages in their own RPCs:
+//
+// - `AddIamBindingsRequest`: grant roles to principals on a resource,
+//   optionally removing each principal from its other roles.
+// - `RemoveIamBindingsRequest`: remove principals from some or all of their
+//   roles on a resource.
+// - `BatchTestIamPermissionsRequest` and `BatchTestIamPermissionsResponse`:
+//   check which of a set of permissions the caller has on each of several
+//   resources.
+//
+// For example, `alis.a2a.extension.history.v1.ThreadService` has
+// `AddIamBindings` and `RemoveIamBindings` RPCs that take these requests and
+// return a `google.iam.v1.Policy`.
+//
+// Principals are strings such as `user:123456789`, `serviceAccount:...`,
+// `builders` or `admins:alis.os`; roles use the `roles/*` format.
+
 import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
 
@@ -11,50 +32,76 @@ import type { Message } from "@bufbuild/protobuf";
 export declare const file_alis_iam_v1_iam: GenFile;
 
 /**
+ * The request message for the AddIamBindings method
+ *
  * @generated from message alis.iam.v1.AddIamBindingsRequest
  */
 export declare type AddIamBindingsRequest = Message<"alis.iam.v1.AddIamBindingsRequest"> & {
   /**
+   * The iam protected resource to add the bindings to
+   *
    * @generated from field: string resource = 1;
    */
   resource: string;
 
   /**
+   * The principals (users, service accounts or groups)
+   * E.g: user:123456789, serviceAccount:alis-build@..., builders,builders:alis,builders:alis.os,admins,admins:alis.os
+   *
    * @generated from field: repeated string principals = 2;
    */
   principals: string[];
 
   /**
+   * The roles to grant to the principals. At least one role must be provided.
+   * Format: ['roles/*', ...]
+   * Example: ['roles/owner', 'roles/admin']
+   *
    * @generated from field: repeated string roles = 3;
    */
   roles: string[];
 
   /**
+   * Whether to remove each principal from any other roles they have
+   *
    * @generated from field: bool remove_from_other_roles = 4;
    */
   removeFromOtherRoles: boolean;
 };
 
 /**
+ * The request message for the AddIamBindings method
+ *
  * @generated from message alis.iam.v1.AddIamBindingsRequest
  */
 export declare type AddIamBindingsRequestJson = {
   /**
+   * The iam protected resource to add the bindings to
+   *
    * @generated from field: string resource = 1;
    */
   resource?: string;
 
   /**
+   * The principals (users, service accounts or groups)
+   * E.g: user:123456789, serviceAccount:alis-build@..., builders,builders:alis,builders:alis.os,admins,admins:alis.os
+   *
    * @generated from field: repeated string principals = 2;
    */
   principals?: string[];
 
   /**
+   * The roles to grant to the principals. At least one role must be provided.
+   * Format: ['roles/*', ...]
+   * Example: ['roles/owner', 'roles/admin']
+   *
    * @generated from field: repeated string roles = 3;
    */
   roles?: string[];
 
   /**
+   * Whether to remove each principal from any other roles they have
+   *
    * @generated from field: bool remove_from_other_roles = 4;
    */
   removeFromOtherRoles?: boolean;
@@ -67,40 +114,64 @@ export declare type AddIamBindingsRequestJson = {
 export declare const AddIamBindingsRequestSchema: GenMessage<AddIamBindingsRequest, {jsonType: AddIamBindingsRequestJson}>;
 
 /**
+ * The request message for the RemoveIamBindings method
+ *
  * @generated from message alis.iam.v1.RemoveIamBindingsRequest
  */
 export declare type RemoveIamBindingsRequest = Message<"alis.iam.v1.RemoveIamBindingsRequest"> & {
   /**
+   * The iam protected resource to remove the bindings from
+   *
    * @generated from field: string resource = 1;
    */
   resource: string;
 
   /**
+   * The principals (users, service accounts or groups)
+   * E.g: user:123456789, serviceAccount:alis-build@..., builders,builders:alis,builders:alis.os,admins,admins:alis.os
+   *
    * @generated from field: repeated string principals = 2;
    */
   principals: string[];
 
   /**
+   * The roles to remove the principals from
+   * If empty, the principals will be removed from all roles
+   * Format: ['roles/*', ...]
+   * Example: ['roles/owner', 'roles/admin']
+   *
    * @generated from field: repeated string roles = 3;
    */
   roles: string[];
 };
 
 /**
+ * The request message for the RemoveIamBindings method
+ *
  * @generated from message alis.iam.v1.RemoveIamBindingsRequest
  */
 export declare type RemoveIamBindingsRequestJson = {
   /**
+   * The iam protected resource to remove the bindings from
+   *
    * @generated from field: string resource = 1;
    */
   resource?: string;
 
   /**
+   * The principals (users, service accounts or groups)
+   * E.g: user:123456789, serviceAccount:alis-build@..., builders,builders:alis,builders:alis.os,admins,admins:alis.os
+   *
    * @generated from field: repeated string principals = 2;
    */
   principals?: string[];
 
   /**
+   * The roles to remove the principals from
+   * If empty, the principals will be removed from all roles
+   * Format: ['roles/*', ...]
+   * Example: ['roles/owner', 'roles/admin']
+   *
    * @generated from field: repeated string roles = 3;
    */
   roles?: string[];
@@ -113,30 +184,50 @@ export declare type RemoveIamBindingsRequestJson = {
 export declare const RemoveIamBindingsRequestSchema: GenMessage<RemoveIamBindingsRequest, {jsonType: RemoveIamBindingsRequestJson}>;
 
 /**
+ * Request message for `BatchTestIamPermissions` method.
+ *
  * @generated from message alis.iam.v1.BatchTestIamPermissionsRequest
  */
 export declare type BatchTestIamPermissionsRequest = Message<"alis.iam.v1.BatchTestIamPermissionsRequest"> & {
   /**
+   * REQUIRED: The resources for which the policy detail is being requested.
+   * See the operation documentation for the appropriate value for this field.
+   *
    * @generated from field: repeated string resources = 1;
    */
   resources: string[];
 
   /**
+   * The set of permissions to check for the `resources`. Permissions with
+   * wildcards (such as '*' or 'storage.*') are not allowed. For more
+   * information see
+   * [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
+   *
    * @generated from field: repeated string permissions = 2;
    */
   permissions: string[];
 };
 
 /**
+ * Request message for `BatchTestIamPermissions` method.
+ *
  * @generated from message alis.iam.v1.BatchTestIamPermissionsRequest
  */
 export declare type BatchTestIamPermissionsRequestJson = {
   /**
+   * REQUIRED: The resources for which the policy detail is being requested.
+   * See the operation documentation for the appropriate value for this field.
+   *
    * @generated from field: repeated string resources = 1;
    */
   resources?: string[];
 
   /**
+   * The set of permissions to check for the `resources`. Permissions with
+   * wildcards (such as '*' or 'storage.*') are not allowed. For more
+   * information see
+   * [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
+   *
    * @generated from field: repeated string permissions = 2;
    */
   permissions?: string[];
@@ -149,20 +240,28 @@ export declare type BatchTestIamPermissionsRequestJson = {
 export declare const BatchTestIamPermissionsRequestSchema: GenMessage<BatchTestIamPermissionsRequest, {jsonType: BatchTestIamPermissionsRequestJson}>;
 
 /**
+ * Response message for `BatchTestIamPermissions` method.
+ *
  * @generated from message alis.iam.v1.BatchTestIamPermissionsResponse
  */
 export declare type BatchTestIamPermissionsResponse = Message<"alis.iam.v1.BatchTestIamPermissionsResponse"> & {
   /**
+   * The permissions the requester has for each requested resource.
+   *
    * @generated from field: repeated alis.iam.v1.BatchTestIamPermissionsResponse.ResourcePermissions resource_permissions = 1;
    */
   resourcePermissions: BatchTestIamPermissionsResponse_ResourcePermissions[];
 };
 
 /**
+ * Response message for `BatchTestIamPermissions` method.
+ *
  * @generated from message alis.iam.v1.BatchTestIamPermissionsResponse
  */
 export declare type BatchTestIamPermissionsResponseJson = {
   /**
+   * The permissions the requester has for each requested resource.
+   *
    * @generated from field: repeated alis.iam.v1.BatchTestIamPermissionsResponse.ResourcePermissions resource_permissions = 1;
    */
   resourcePermissions?: BatchTestIamPermissionsResponse_ResourcePermissionsJson[];
@@ -175,30 +274,42 @@ export declare type BatchTestIamPermissionsResponseJson = {
 export declare const BatchTestIamPermissionsResponseSchema: GenMessage<BatchTestIamPermissionsResponse, {jsonType: BatchTestIamPermissionsResponseJson}>;
 
 /**
+ * The permissions the requester has on a resource.
+ *
  * @generated from message alis.iam.v1.BatchTestIamPermissionsResponse.ResourcePermissions
  */
 export declare type BatchTestIamPermissionsResponse_ResourcePermissions = Message<"alis.iam.v1.BatchTestIamPermissionsResponse.ResourcePermissions"> & {
   /**
+   * The resource, as given in `BatchTestIamPermissionsRequest.resources`.
+   *
    * @generated from field: string resource = 1;
    */
   resource: string;
 
   /**
+   * The requested permissions that the requester has on `resource`.
+   *
    * @generated from field: repeated string permissions = 2;
    */
   permissions: string[];
 };
 
 /**
+ * The permissions the requester has on a resource.
+ *
  * @generated from message alis.iam.v1.BatchTestIamPermissionsResponse.ResourcePermissions
  */
 export declare type BatchTestIamPermissionsResponse_ResourcePermissionsJson = {
   /**
+   * The resource, as given in `BatchTestIamPermissionsRequest.resources`.
+   *
    * @generated from field: string resource = 1;
    */
   resource?: string;
 
   /**
+   * The requested permissions that the requester has on `resource`.
+   *
    * @generated from field: repeated string permissions = 2;
    */
   permissions?: string[];

package/alis/iam/v1/iam_pb.js

@@ -1,7 +1,28 @@
-// @generated by protoc-gen-es v2.13.0 with parameter "target=js+dts,import_extension=js,json_types=true"
+// @generated by protoc-gen-es v2.16.0 with parameter "target=js+dts,import_extension=js,json_types=true"
 // @generated from file alis/iam/v1/iam.proto (package alis.iam.v1, syntax proto3)
 /* eslint-disable */
 
+// Request and response messages that complement the standard `google.iam.v1`
+// IAM methods with incremental binding changes and batched permission checks.
+//
+// The package defines no service. Services that protect their resources with
+// a `google.iam.v1.Policy` use these messages in their own RPCs:
+//
+// - `AddIamBindingsRequest`: grant roles to principals on a resource,
+//   optionally removing each principal from its other roles.
+// - `RemoveIamBindingsRequest`: remove principals from some or all of their
+//   roles on a resource.
+// - `BatchTestIamPermissionsRequest` and `BatchTestIamPermissionsResponse`:
+//   check which of a set of permissions the caller has on each of several
+//   resources.
+//
+// For example, `alis.a2a.extension.history.v1.ThreadService` has
+// `AddIamBindings` and `RemoveIamBindings` RPCs that take these requests and
+// return a `google.iam.v1.Policy`.
+//
+// Principals are strings such as `user:123456789`, `serviceAccount:...`,
+// `builders` or `admins:alis.os`; roles use the `roles/*` format.
+
 import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
 
 /**

package/package.json

@@ -23,5 +23,5 @@
   },
   "type": "module",
   "types": "./index.d.ts",
-  "version": "1.37.0"
+  "version": "1.45.0"
 }