@eide/foir-proto-ts 0.36.0 → 0.38.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@eide/foir-proto-ts",
3
- "version": "0.36.0",
3
+ "version": "0.38.0",
4
4
  "type": "module",
5
5
  "exports": {
6
6
  "./analytics/v1/analytics_pb": "./src/analytics/v1/analytics_pb.js",
@@ -35,6 +35,8 @@
35
35
  "./records/v1/records_connect": "./src/records/v1/records_connect.js",
36
36
  "./schedules/v1/schedules_pb": "./src/schedules/v1/schedules_pb.js",
37
37
  "./schedules/v1/schedules_connect": "./src/schedules/v1/schedules_connect.js",
38
+ "./secrets/v1/secrets_pb": "./src/secrets/v1/secrets_pb.js",
39
+ "./secrets/v1/secrets_connect": "./src/secrets/v1/secrets_connect.js",
38
40
  "./segments/v1/segments_pb": "./src/segments/v1/segments_pb.js",
39
41
  "./segments/v1/segments_connect": "./src/segments/v1/segments_connect.js",
40
42
  "./settings/v1/settings_pb": "./src/settings/v1/settings_pb.js",
@@ -3,7 +3,7 @@
3
3
  /* eslint-disable */
4
4
  // @ts-nocheck
5
5
 
6
- import { ConfirmInstallAppRequest, ConfirmInstallAppResponse, ConfirmUpdateAppRequest, ConfirmUpdateAppResponse, DeleteAppCredentialRequest, DeleteAppCredentialResponse, GetAppCredentialRequest, GetAppCredentialResponse, GetAppRequest, GetAppResponse, GetAppStatusRequest, GetAppStatusResponse, InstallAppRequest, InstallAppResponse, IssueExchangeTicketRequest, IssueExchangeTicketResponse, ListAppEventsRequest, ListAppEventsResponse, ListAppsRequest, ListAppsResponse, RedeemExchangeTicketRequest, RedeemExchangeTicketResponse, RefreshScopedTokenRequest, RefreshScopedTokenResponse, SetAppMappingRequest, SetAppMappingResponse, TriggerOperationRequest, TriggerOperationResponse, UninstallAppRequest, UninstallAppResponse, UpdateAppRequest, UpdateAppResponse, UpsertAppStatusRequest, UpsertAppStatusResponse, ValidateManifestRequest, ValidateManifestResponse, WriteAppCredentialRequest, WriteAppCredentialResponse } from "./apps_service_pbjs";
6
+ import { AppInstallationServiceUninstallAppRequest, AppInstallationServiceUninstallAppResponse, CompleteAppInstallRequest, CompleteAppInstallResponse, ConfirmInstallAppRequest, ConfirmInstallAppResponse, ConfirmUpdateAppRequest, ConfirmUpdateAppResponse, GetAppCredentialStructRequest, GetAppCredentialStructResponse, GetAppRequest, GetAppResponse, GetAppStatusRequest, GetAppStatusResponse, InstallAppRequest, InstallAppResponse, IssueExchangeTicketRequest, IssueExchangeTicketResponse, ListAppEventsRequest, ListAppEventsResponse, ListAppsRequest, ListAppsResponse, RedeemExchangeTicketRequest, RedeemExchangeTicketResponse, RefreshScopedTokenRequest, RefreshScopedTokenResponse, RotateAppCredentialRequest, RotateAppCredentialResponse, SetAppMappingRequest, SetAppMappingResponse, TriggerOperationRequest, TriggerOperationResponse, UninstallAppRequest, UninstallAppResponse, UpdateAppRequest, UpdateAppResponse, UpsertAppStatusRequest, UpsertAppStatusResponse, ValidateManifestRequest, ValidateManifestResponse } from "./apps_service_pbjs";
7
7
  import { MethodKind } from "@bufbuild/protobuf";
8
8
 
9
9
  /**
@@ -124,36 +124,62 @@ export declare const AppsService: {
124
124
  };
125
125
 
126
126
  /**
127
- * @generated from service apps.v1.AppCredentialsService
127
+ * @generated from service apps.v1.AppInstallationService
128
128
  */
129
- export declare const AppCredentialsService: {
130
- readonly typeName: "apps.v1.AppCredentialsService",
129
+ export declare const AppInstallationService: {
130
+ readonly typeName: "apps.v1.AppInstallationService",
131
131
  readonly methods: {
132
132
  /**
133
- * @generated from rpc apps.v1.AppCredentialsService.WriteAppCredential
133
+ * CompleteAppInstall runs the __validate_credentials probe (when the
134
+ * app's manifest declares it), then writes one vault row per credential
135
+ * field. Idempotent: re-calling with the same values rotates each
136
+ * existing field's vault row through SecretsService.RotateSecret so
137
+ * any record holding a SecretRef stays bound.
138
+ *
139
+ * @generated from rpc apps.v1.AppInstallationService.CompleteAppInstall
140
+ */
141
+ readonly completeAppInstall: {
142
+ readonly name: "CompleteAppInstall",
143
+ readonly I: typeof CompleteAppInstallRequest,
144
+ readonly O: typeof CompleteAppInstallResponse,
145
+ readonly kind: MethodKind.Unary,
146
+ },
147
+ /**
148
+ * RotateAppCredential rotates a single named field. The new ref is
149
+ * bound to the same label so GetAppCredentialStruct sees the new value
150
+ * automatically.
151
+ *
152
+ * @generated from rpc apps.v1.AppInstallationService.RotateAppCredential
134
153
  */
135
- readonly writeAppCredential: {
136
- readonly name: "WriteAppCredential",
137
- readonly I: typeof WriteAppCredentialRequest,
138
- readonly O: typeof WriteAppCredentialResponse,
154
+ readonly rotateAppCredential: {
155
+ readonly name: "RotateAppCredential",
156
+ readonly I: typeof RotateAppCredentialRequest,
157
+ readonly O: typeof RotateAppCredentialResponse,
139
158
  readonly kind: MethodKind.Unary,
140
159
  },
141
160
  /**
142
- * @generated from rpc apps.v1.AppCredentialsService.GetAppCredential
161
+ * GetAppCredentialStruct lists every app-owned vault row for the given
162
+ * app, decrypts each, and returns a struct keyed by field name (the
163
+ * vault row's label).
164
+ *
165
+ * @generated from rpc apps.v1.AppInstallationService.GetAppCredentialStruct
143
166
  */
144
- readonly getAppCredential: {
145
- readonly name: "GetAppCredential",
146
- readonly I: typeof GetAppCredentialRequest,
147
- readonly O: typeof GetAppCredentialResponse,
167
+ readonly getAppCredentialStruct: {
168
+ readonly name: "GetAppCredentialStruct",
169
+ readonly I: typeof GetAppCredentialStructRequest,
170
+ readonly O: typeof GetAppCredentialStructResponse,
148
171
  readonly kind: MethodKind.Unary,
149
172
  },
150
173
  /**
151
- * @generated from rpc apps.v1.AppCredentialsService.DeleteAppCredential
174
+ * UninstallApp removes every app-owned vault row + dispatches
175
+ * run_before_uninstall ops. Idempotent.
176
+ *
177
+ * @generated from rpc apps.v1.AppInstallationService.UninstallApp
152
178
  */
153
- readonly deleteAppCredential: {
154
- readonly name: "DeleteAppCredential",
155
- readonly I: typeof DeleteAppCredentialRequest,
156
- readonly O: typeof DeleteAppCredentialResponse,
179
+ readonly uninstallApp: {
180
+ readonly name: "UninstallApp",
181
+ readonly I: typeof AppInstallationServiceUninstallAppRequest,
182
+ readonly O: typeof AppInstallationServiceUninstallAppResponse,
157
183
  readonly kind: MethodKind.Unary,
158
184
  },
159
185
  }
@@ -3,7 +3,7 @@
3
3
  /* eslint-disable */
4
4
  // @ts-nocheck
5
5
 
6
- import { ConfirmInstallAppRequest, ConfirmInstallAppResponse, ConfirmUpdateAppRequest, ConfirmUpdateAppResponse, DeleteAppCredentialRequest, DeleteAppCredentialResponse, GetAppCredentialRequest, GetAppCredentialResponse, GetAppRequest, GetAppResponse, GetAppStatusRequest, GetAppStatusResponse, InstallAppRequest, InstallAppResponse, IssueExchangeTicketRequest, IssueExchangeTicketResponse, ListAppEventsRequest, ListAppEventsResponse, ListAppsRequest, ListAppsResponse, RedeemExchangeTicketRequest, RedeemExchangeTicketResponse, RefreshScopedTokenRequest, RefreshScopedTokenResponse, SetAppMappingRequest, SetAppMappingResponse, TriggerOperationRequest, TriggerOperationResponse, UninstallAppRequest, UninstallAppResponse, UpdateAppRequest, UpdateAppResponse, UpsertAppStatusRequest, UpsertAppStatusResponse, ValidateManifestRequest, ValidateManifestResponse, WriteAppCredentialRequest, WriteAppCredentialResponse } from "./apps_service_pbjs";
6
+ import { AppInstallationServiceUninstallAppRequest, AppInstallationServiceUninstallAppResponse, CompleteAppInstallRequest, CompleteAppInstallResponse, ConfirmInstallAppRequest, ConfirmInstallAppResponse, ConfirmUpdateAppRequest, ConfirmUpdateAppResponse, GetAppCredentialStructRequest, GetAppCredentialStructResponse, GetAppRequest, GetAppResponse, GetAppStatusRequest, GetAppStatusResponse, InstallAppRequest, InstallAppResponse, IssueExchangeTicketRequest, IssueExchangeTicketResponse, ListAppEventsRequest, ListAppEventsResponse, ListAppsRequest, ListAppsResponse, RedeemExchangeTicketRequest, RedeemExchangeTicketResponse, RefreshScopedTokenRequest, RefreshScopedTokenResponse, RotateAppCredentialRequest, RotateAppCredentialResponse, SetAppMappingRequest, SetAppMappingResponse, TriggerOperationRequest, TriggerOperationResponse, UninstallAppRequest, UninstallAppResponse, UpdateAppRequest, UpdateAppResponse, UpsertAppStatusRequest, UpsertAppStatusResponse, ValidateManifestRequest, ValidateManifestResponse } from "./apps_service_pbjs";
7
7
  import { MethodKind } from "@bufbuild/protobuf";
8
8
 
9
9
  /**
@@ -124,36 +124,62 @@ export const AppsService = {
124
124
  };
125
125
 
126
126
  /**
127
- * @generated from service apps.v1.AppCredentialsService
127
+ * @generated from service apps.v1.AppInstallationService
128
128
  */
129
- export const AppCredentialsService = {
130
- typeName: "apps.v1.AppCredentialsService",
129
+ export const AppInstallationService = {
130
+ typeName: "apps.v1.AppInstallationService",
131
131
  methods: {
132
132
  /**
133
- * @generated from rpc apps.v1.AppCredentialsService.WriteAppCredential
133
+ * CompleteAppInstall runs the __validate_credentials probe (when the
134
+ * app's manifest declares it), then writes one vault row per credential
135
+ * field. Idempotent: re-calling with the same values rotates each
136
+ * existing field's vault row through SecretsService.RotateSecret so
137
+ * any record holding a SecretRef stays bound.
138
+ *
139
+ * @generated from rpc apps.v1.AppInstallationService.CompleteAppInstall
140
+ */
141
+ completeAppInstall: {
142
+ name: "CompleteAppInstall",
143
+ I: CompleteAppInstallRequest,
144
+ O: CompleteAppInstallResponse,
145
+ kind: MethodKind.Unary,
146
+ },
147
+ /**
148
+ * RotateAppCredential rotates a single named field. The new ref is
149
+ * bound to the same label so GetAppCredentialStruct sees the new value
150
+ * automatically.
151
+ *
152
+ * @generated from rpc apps.v1.AppInstallationService.RotateAppCredential
134
153
  */
135
- writeAppCredential: {
136
- name: "WriteAppCredential",
137
- I: WriteAppCredentialRequest,
138
- O: WriteAppCredentialResponse,
154
+ rotateAppCredential: {
155
+ name: "RotateAppCredential",
156
+ I: RotateAppCredentialRequest,
157
+ O: RotateAppCredentialResponse,
139
158
  kind: MethodKind.Unary,
140
159
  },
141
160
  /**
142
- * @generated from rpc apps.v1.AppCredentialsService.GetAppCredential
161
+ * GetAppCredentialStruct lists every app-owned vault row for the given
162
+ * app, decrypts each, and returns a struct keyed by field name (the
163
+ * vault row's label).
164
+ *
165
+ * @generated from rpc apps.v1.AppInstallationService.GetAppCredentialStruct
143
166
  */
144
- getAppCredential: {
145
- name: "GetAppCredential",
146
- I: GetAppCredentialRequest,
147
- O: GetAppCredentialResponse,
167
+ getAppCredentialStruct: {
168
+ name: "GetAppCredentialStruct",
169
+ I: GetAppCredentialStructRequest,
170
+ O: GetAppCredentialStructResponse,
148
171
  kind: MethodKind.Unary,
149
172
  },
150
173
  /**
151
- * @generated from rpc apps.v1.AppCredentialsService.DeleteAppCredential
174
+ * UninstallApp removes every app-owned vault row + dispatches
175
+ * run_before_uninstall ops. Idempotent.
176
+ *
177
+ * @generated from rpc apps.v1.AppInstallationService.UninstallApp
152
178
  */
153
- deleteAppCredential: {
154
- name: "DeleteAppCredential",
155
- I: DeleteAppCredentialRequest,
156
- O: DeleteAppCredentialResponse,
179
+ uninstallApp: {
180
+ name: "UninstallApp",
181
+ I: AppInstallationServiceUninstallAppRequest,
182
+ O: AppInstallationServiceUninstallAppResponse,
157
183
  kind: MethodKind.Unary,
158
184
  },
159
185
  }
@@ -922,9 +922,9 @@ export declare type TriggerOperationResponse = Message<"apps.v1.TriggerOperation
922
922
  export declare const TriggerOperationResponseSchema: GenMessage<TriggerOperationResponse>;
923
923
 
924
924
  /**
925
- * @generated from message apps.v1.WriteAppCredentialRequest
925
+ * @generated from message apps.v1.CompleteAppInstallRequest
926
926
  */
927
- export declare type WriteAppCredentialRequest = Message<"apps.v1.WriteAppCredentialRequest"> & {
927
+ export declare type CompleteAppInstallRequest = Message<"apps.v1.CompleteAppInstallRequest"> & {
928
928
  /**
929
929
  * @generated from field: string tenant_id = 1;
930
930
  */
@@ -941,7 +941,10 @@ export declare type WriteAppCredentialRequest = Message<"apps.v1.WriteAppCredent
941
941
  appName: string;
942
942
 
943
943
  /**
944
- * encrypted by platform before insert
944
+ * Caller-supplied credential values keyed by manifest field name. Each
945
+ * entry becomes a vault row labelled with the field name. Empty values
946
+ * are rejected at validation time — partial rotation should go through
947
+ * RotateAppCredential, not CompleteAppInstall.
945
948
  *
946
949
  * @generated from field: google.protobuf.Struct values = 4;
947
950
  */
@@ -949,15 +952,15 @@ export declare type WriteAppCredentialRequest = Message<"apps.v1.WriteAppCredent
949
952
  };
950
953
 
951
954
  /**
952
- * Describes the message apps.v1.WriteAppCredentialRequest.
953
- * Use `create(WriteAppCredentialRequestSchema)` to create a new message.
955
+ * Describes the message apps.v1.CompleteAppInstallRequest.
956
+ * Use `create(CompleteAppInstallRequestSchema)` to create a new message.
954
957
  */
955
- export declare const WriteAppCredentialRequestSchema: GenMessage<WriteAppCredentialRequest>;
958
+ export declare const CompleteAppInstallRequestSchema: GenMessage<CompleteAppInstallRequest>;
956
959
 
957
960
  /**
958
- * @generated from message apps.v1.WriteAppCredentialResponse
961
+ * @generated from message apps.v1.CompleteAppInstallResponse
959
962
  */
960
- export declare type WriteAppCredentialResponse = Message<"apps.v1.WriteAppCredentialResponse"> & {
963
+ export declare type CompleteAppInstallResponse = Message<"apps.v1.CompleteAppInstallResponse"> & {
961
964
  /**
962
965
  * @generated from field: bool success = 1;
963
966
  */
@@ -965,15 +968,15 @@ export declare type WriteAppCredentialResponse = Message<"apps.v1.WriteAppCreden
965
968
  };
966
969
 
967
970
  /**
968
- * Describes the message apps.v1.WriteAppCredentialResponse.
969
- * Use `create(WriteAppCredentialResponseSchema)` to create a new message.
971
+ * Describes the message apps.v1.CompleteAppInstallResponse.
972
+ * Use `create(CompleteAppInstallResponseSchema)` to create a new message.
970
973
  */
971
- export declare const WriteAppCredentialResponseSchema: GenMessage<WriteAppCredentialResponse>;
974
+ export declare const CompleteAppInstallResponseSchema: GenMessage<CompleteAppInstallResponse>;
972
975
 
973
976
  /**
974
- * @generated from message apps.v1.GetAppCredentialRequest
977
+ * @generated from message apps.v1.RotateAppCredentialRequest
975
978
  */
976
- export declare type GetAppCredentialRequest = Message<"apps.v1.GetAppCredentialRequest"> & {
979
+ export declare type RotateAppCredentialRequest = Message<"apps.v1.RotateAppCredentialRequest"> & {
977
980
  /**
978
981
  * @generated from field: string tenant_id = 1;
979
982
  */
@@ -988,46 +991,91 @@ export declare type GetAppCredentialRequest = Message<"apps.v1.GetAppCredentialR
988
991
  * @generated from field: string app_name = 3;
989
992
  */
990
993
  appName: string;
994
+
995
+ /**
996
+ * @generated from field: string field_name = 4;
997
+ */
998
+ fieldName: string;
999
+
1000
+ /**
1001
+ * @generated from field: bytes plaintext = 5;
1002
+ */
1003
+ plaintext: Uint8Array;
991
1004
  };
992
1005
 
993
1006
  /**
994
- * Describes the message apps.v1.GetAppCredentialRequest.
995
- * Use `create(GetAppCredentialRequestSchema)` to create a new message.
1007
+ * Describes the message apps.v1.RotateAppCredentialRequest.
1008
+ * Use `create(RotateAppCredentialRequestSchema)` to create a new message.
996
1009
  */
997
- export declare const GetAppCredentialRequestSchema: GenMessage<GetAppCredentialRequest>;
1010
+ export declare const RotateAppCredentialRequestSchema: GenMessage<RotateAppCredentialRequest>;
998
1011
 
999
1012
  /**
1000
- * @generated from message apps.v1.GetAppCredentialResponse
1013
+ * @generated from message apps.v1.RotateAppCredentialResponse
1001
1014
  */
1002
- export declare type GetAppCredentialResponse = Message<"apps.v1.GetAppCredentialResponse"> & {
1015
+ export declare type RotateAppCredentialResponse = Message<"apps.v1.RotateAppCredentialResponse"> & {
1003
1016
  /**
1004
- * @generated from field: apps.v1.Credentials.Strategy strategy = 1;
1017
+ * @generated from field: bool success = 1;
1005
1018
  */
1006
- strategy: Credentials_Strategy;
1019
+ success: boolean;
1020
+ };
1021
+
1022
+ /**
1023
+ * Describes the message apps.v1.RotateAppCredentialResponse.
1024
+ * Use `create(RotateAppCredentialResponseSchema)` to create a new message.
1025
+ */
1026
+ export declare const RotateAppCredentialResponseSchema: GenMessage<RotateAppCredentialResponse>;
1007
1027
 
1028
+ /**
1029
+ * @generated from message apps.v1.GetAppCredentialStructRequest
1030
+ */
1031
+ export declare type GetAppCredentialStructRequest = Message<"apps.v1.GetAppCredentialStructRequest"> & {
1008
1032
  /**
1009
- * @generated from field: google.protobuf.Struct values = 2;
1033
+ * @generated from field: string tenant_id = 1;
1034
+ */
1035
+ tenantId: string;
1036
+
1037
+ /**
1038
+ * @generated from field: string project_id = 2;
1039
+ */
1040
+ projectId: string;
1041
+
1042
+ /**
1043
+ * @generated from field: string app_name = 3;
1044
+ */
1045
+ appName: string;
1046
+ };
1047
+
1048
+ /**
1049
+ * Describes the message apps.v1.GetAppCredentialStructRequest.
1050
+ * Use `create(GetAppCredentialStructRequestSchema)` to create a new message.
1051
+ */
1052
+ export declare const GetAppCredentialStructRequestSchema: GenMessage<GetAppCredentialStructRequest>;
1053
+
1054
+ /**
1055
+ * @generated from message apps.v1.GetAppCredentialStructResponse
1056
+ */
1057
+ export declare type GetAppCredentialStructResponse = Message<"apps.v1.GetAppCredentialStructResponse"> & {
1058
+ /**
1059
+ * @generated from field: google.protobuf.Struct values = 1;
1010
1060
  */
1011
1061
  values?: JsonObject | undefined;
1012
1062
 
1013
1063
  /**
1014
- * false if the slot exists but is empty
1015
- *
1016
- * @generated from field: bool populated = 3;
1064
+ * @generated from field: bool populated = 2;
1017
1065
  */
1018
1066
  populated: boolean;
1019
1067
  };
1020
1068
 
1021
1069
  /**
1022
- * Describes the message apps.v1.GetAppCredentialResponse.
1023
- * Use `create(GetAppCredentialResponseSchema)` to create a new message.
1070
+ * Describes the message apps.v1.GetAppCredentialStructResponse.
1071
+ * Use `create(GetAppCredentialStructResponseSchema)` to create a new message.
1024
1072
  */
1025
- export declare const GetAppCredentialResponseSchema: GenMessage<GetAppCredentialResponse>;
1073
+ export declare const GetAppCredentialStructResponseSchema: GenMessage<GetAppCredentialStructResponse>;
1026
1074
 
1027
1075
  /**
1028
- * @generated from message apps.v1.DeleteAppCredentialRequest
1076
+ * @generated from message apps.v1.AppInstallationServiceUninstallAppRequest
1029
1077
  */
1030
- export declare type DeleteAppCredentialRequest = Message<"apps.v1.DeleteAppCredentialRequest"> & {
1078
+ export declare type AppInstallationServiceUninstallAppRequest = Message<"apps.v1.AppInstallationServiceUninstallAppRequest"> & {
1031
1079
  /**
1032
1080
  * @generated from field: string tenant_id = 1;
1033
1081
  */
@@ -1045,15 +1093,15 @@ export declare type DeleteAppCredentialRequest = Message<"apps.v1.DeleteAppCrede
1045
1093
  };
1046
1094
 
1047
1095
  /**
1048
- * Describes the message apps.v1.DeleteAppCredentialRequest.
1049
- * Use `create(DeleteAppCredentialRequestSchema)` to create a new message.
1096
+ * Describes the message apps.v1.AppInstallationServiceUninstallAppRequest.
1097
+ * Use `create(AppInstallationServiceUninstallAppRequestSchema)` to create a new message.
1050
1098
  */
1051
- export declare const DeleteAppCredentialRequestSchema: GenMessage<DeleteAppCredentialRequest>;
1099
+ export declare const AppInstallationServiceUninstallAppRequestSchema: GenMessage<AppInstallationServiceUninstallAppRequest>;
1052
1100
 
1053
1101
  /**
1054
- * @generated from message apps.v1.DeleteAppCredentialResponse
1102
+ * @generated from message apps.v1.AppInstallationServiceUninstallAppResponse
1055
1103
  */
1056
- export declare type DeleteAppCredentialResponse = Message<"apps.v1.DeleteAppCredentialResponse"> & {
1104
+ export declare type AppInstallationServiceUninstallAppResponse = Message<"apps.v1.AppInstallationServiceUninstallAppResponse"> & {
1057
1105
  /**
1058
1106
  * @generated from field: bool success = 1;
1059
1107
  */
@@ -1061,10 +1109,10 @@ export declare type DeleteAppCredentialResponse = Message<"apps.v1.DeleteAppCred
1061
1109
  };
1062
1110
 
1063
1111
  /**
1064
- * Describes the message apps.v1.DeleteAppCredentialResponse.
1065
- * Use `create(DeleteAppCredentialResponseSchema)` to create a new message.
1112
+ * Describes the message apps.v1.AppInstallationServiceUninstallAppResponse.
1113
+ * Use `create(AppInstallationServiceUninstallAppResponseSchema)` to create a new message.
1066
1114
  */
1067
- export declare const DeleteAppCredentialResponseSchema: GenMessage<DeleteAppCredentialResponse>;
1115
+ export declare const AppInstallationServiceUninstallAppResponseSchema: GenMessage<AppInstallationServiceUninstallAppResponse>;
1068
1116
 
1069
1117
  /**
1070
1118
  * @generated from message apps.v1.IssueExchangeTicketRequest
@@ -1547,32 +1595,57 @@ export declare const AppsService: GenService<{
1547
1595
  }>;
1548
1596
 
1549
1597
  /**
1550
- * @generated from service apps.v1.AppCredentialsService
1598
+ * @generated from service apps.v1.AppInstallationService
1551
1599
  */
1552
- export declare const AppCredentialsService: GenService<{
1600
+ export declare const AppInstallationService: GenService<{
1553
1601
  /**
1554
- * @generated from rpc apps.v1.AppCredentialsService.WriteAppCredential
1602
+ * CompleteAppInstall runs the __validate_credentials probe (when the
1603
+ * app's manifest declares it), then writes one vault row per credential
1604
+ * field. Idempotent: re-calling with the same values rotates each
1605
+ * existing field's vault row through SecretsService.RotateSecret so
1606
+ * any record holding a SecretRef stays bound.
1607
+ *
1608
+ * @generated from rpc apps.v1.AppInstallationService.CompleteAppInstall
1555
1609
  */
1556
- writeAppCredential: {
1610
+ completeAppInstall: {
1557
1611
  methodKind: "unary";
1558
- input: typeof WriteAppCredentialRequestSchema;
1559
- output: typeof WriteAppCredentialResponseSchema;
1612
+ input: typeof CompleteAppInstallRequestSchema;
1613
+ output: typeof CompleteAppInstallResponseSchema;
1560
1614
  },
1561
1615
  /**
1562
- * @generated from rpc apps.v1.AppCredentialsService.GetAppCredential
1616
+ * RotateAppCredential rotates a single named field. The new ref is
1617
+ * bound to the same label so GetAppCredentialStruct sees the new value
1618
+ * automatically.
1619
+ *
1620
+ * @generated from rpc apps.v1.AppInstallationService.RotateAppCredential
1563
1621
  */
1564
- getAppCredential: {
1622
+ rotateAppCredential: {
1565
1623
  methodKind: "unary";
1566
- input: typeof GetAppCredentialRequestSchema;
1567
- output: typeof GetAppCredentialResponseSchema;
1624
+ input: typeof RotateAppCredentialRequestSchema;
1625
+ output: typeof RotateAppCredentialResponseSchema;
1568
1626
  },
1569
1627
  /**
1570
- * @generated from rpc apps.v1.AppCredentialsService.DeleteAppCredential
1628
+ * GetAppCredentialStruct lists every app-owned vault row for the given
1629
+ * app, decrypts each, and returns a struct keyed by field name (the
1630
+ * vault row's label).
1631
+ *
1632
+ * @generated from rpc apps.v1.AppInstallationService.GetAppCredentialStruct
1571
1633
  */
1572
- deleteAppCredential: {
1634
+ getAppCredentialStruct: {
1635
+ methodKind: "unary";
1636
+ input: typeof GetAppCredentialStructRequestSchema;
1637
+ output: typeof GetAppCredentialStructResponseSchema;
1638
+ },
1639
+ /**
1640
+ * UninstallApp removes every app-owned vault row + dispatches
1641
+ * run_before_uninstall ops. Idempotent.
1642
+ *
1643
+ * @generated from rpc apps.v1.AppInstallationService.UninstallApp
1644
+ */
1645
+ uninstallApp: {
1573
1646
  methodKind: "unary";
1574
- input: typeof DeleteAppCredentialRequestSchema;
1575
- output: typeof DeleteAppCredentialResponseSchema;
1647
+ input: typeof AppInstallationServiceUninstallAppRequestSchema;
1648
+ output: typeof AppInstallationServiceUninstallAppResponseSchema;
1576
1649
  },
1577
1650
  }>;
1578
1651