@eide/foir-proto-ts 0.70.0 → 0.72.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eide/foir-proto-ts",
-  "version": "0.70.0",
+  "version": "0.72.0",
   "type": "module",
   "exports": {
     "./analytics/v1/analytics_pb": "./src/analytics/v1/analytics_pb.js",

package/src/apps/v1/apps_service_pb.d.ts

@@ -614,6 +614,18 @@ export declare type ConfirmUpdateAppRequest = Message<"apps.v1.ConfirmUpdateAppR
    * @generated from field: string new_manifest_hash = 4;
    */
   newManifestHash: string;
+
+  /**
+   * Admin override: apply even when the diff contains CLASS_REJECTED
+   * changes. Used when removing a placement (e.g. replaces_default=true)
+   * is intentional — the standard DeleteByConfigID + re-insert apply
+   * path still cleans up dependent rows; force just suppresses the
+   * safety prompt. Mapping-coverage and hash-staleness checks remain
+   * enforced.
+   *
+   * @generated from field: bool force = 5;
+   */
+  force: boolean;
 };
 
 /**

package/src/apps/v1/apps_service_pb.js

@@ -10,7 +10,7 @@ import { file_google_protobuf_struct, file_google_protobuf_timestamp } from "@bu
  * Describes the file apps/v1/apps_service.proto.
  */
 export const file_apps_v1_apps_service = /*@__PURE__*/
-  fileDesc("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", [file_apps_v1_apps, file_google_protobuf_struct, file_google_protobuf_timestamp]);
+  fileDesc("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", [file_apps_v1_apps, file_google_protobuf_struct, file_google_protobuf_timestamp]);
 
 /**
  * Describes the message apps.v1.App.

package/src/identity/v1/identity_connect.d.ts

@@ -3,7 +3,7 @@
 /* eslint-disable */
 // @ts-nocheck
 
-import { AcceptCustomerInvitationRequest, AcceptCustomerInvitationResponse, AcceptInvitationRequest, AcceptInvitationResponse, ActivateTenantRequest, ActivateTenantResponse, CancelScheduledAuthProviderPublishRequest, CancelScheduledAuthProviderPublishResponse, CancelTenantRequest, CancelTenantResponse, CheckEmailAvailabilityRequest, CheckEmailAvailabilityResponse, ChurnTenantRequest, ChurnTenantResponse, ClearSessionContextRequest, ClearSessionContextResponse, CompleteAccountSetupRequest, CompleteAccountSetupResponse, CreateAdminUserRequest, CreateAdminUserResponse, CreateApiKeyRequest, CreateApiKeyResponse, CreateAuthProviderRequest, CreateAuthProviderResponse, CreateCustomerInvitationRequest, CreateCustomerInvitationResponse, CreateCustomerRequest, CreateCustomerResponse, CreateInvitationRequest, CreateInvitationResponse, CreateProjectRequest, CreateProjectResponse, CreateSignupSessionRequest, CreateSignupSessionResponse, CreateTenantRequest, CreateTenantResponse, CustomerLoginRequest, CustomerLoginResponse, CustomerRefreshTokenRequest, CustomerRefreshTokenResponse, CustomerRegisterRequest, CustomerRegisterResponse, CustomerRequestOTPRequest, CustomerRequestOTPResponse, CustomerRequestPasswordResetRequest, CustomerRequestPasswordResetResponse, CustomerResetPasswordRequest, CustomerResetPasswordResponse, CustomerVerifyOTPRequest, CustomerVerifyOTPResponse, DeleteAuthProviderRequest, DeleteAuthProviderResponse, DeleteCustomerRequest, DeleteCustomerResponse, DeleteProjectRequest, DeleteProjectResponse, DeleteProviderTokensRequest, DeleteProviderTokensResponse, DeleteTenantRequest, DeleteTenantResponse, EnabledOAuthProvidersRequest, EnabledOAuthProvidersResponse, GetAdminUserRequest, GetAdminUserResponse, GetApiKeyRequest, GetApiKeyResponse, GetAuthProviderPublishStatusRequest, GetAuthProviderPublishStatusResponse, GetAuthProviderRequest, GetAuthProviderResponse, GetCustomerAuthConfigRequest, GetCustomerAuthConfigResponse, GetCustomerInvitationRequest, GetCustomerInvitationResponse, GetCustomerManagementStatusRequest, GetCustomerManagementStatusResponse, GetCustomerRequest, GetCustomerResponse, GetDefaultProjectRequest, GetDefaultProjectResponse, GetInvitationRequest, GetInvitationResponse, GetMeRequest, GetMeResponse, GetProjectRequest, GetProjectResponse, GetProviderTokenRequest, GetProviderTokenResponse, GetSessionContextRequest, GetSessionContextResponse, GetTenantRequest, GetTenantResponse, GrantAccessRequest, GrantAccessResponse, ListAdminUsersRequest, ListAdminUsersResponse, ListApiKeysRequest, ListApiKeysResponse, ListAuthProvidersRequest, ListAuthProvidersResponse, ListCustomerInvitationsRequest, ListCustomerInvitationsResponse, ListCustomersRequest, ListCustomersResponse, ListInvitationsRequest, ListInvitationsResponse, ListMyOAuthConnectionsRequest, ListMyOAuthConnectionsResponse, ListProjectsRequest, ListProjectsResponse, ListTenantsRequest, ListTenantsResponse, LoginRequest, LoginResponse, LoginWithOTPRequest, LoginWithOTPResponse, LogoutRequest, LogoutResponse, MarkTenantPastDueRequest, MarkTenantPastDueResponse, MintServiceTokenRequest, MintServiceTokenResponse, PublishAuthProviderRequest, PublishAuthProviderResponse, ReactivateTenantRequest, ReactivateTenantResponse, RefreshTokenRequest, RefreshTokenResponse, RegisterRequest, RegisterResponse, RequestOTPRequest, RequestOTPResponse, RequestPasswordResetRequest, RequestPasswordResetResponse, ResendCustomerInvitationRequest, ResendCustomerInvitationResponse, ResendInvitationRequest, ResendInvitationResponse, ResendVerificationEmailRequest, ResendVerificationEmailResponse, ResetPasswordRequest, ResetPasswordResponse, RevokeAccessRequest, RevokeAccessResponse, RevokeApiKeyRequest, RevokeApiKeyResponse, RevokeCustomerInvitationRequest, RevokeCustomerInvitationResponse, RevokeInvitationRequest, RevokeInvitationResponse, RotateApiKeyRequest, RotateApiKeyResponse, ScheduleAuthProviderPublishRequest, ScheduleAuthProviderPublishResponse, SendEmailVerificationCodeRequest, SendEmailVerificationCodeResponse, SetCustomerPasswordRequest, SetCustomerPasswordResponse, SetDefaultProjectRequest, SetDefaultProjectResponse, StoreProviderTokenRequest, StoreProviderTokenResponse, SuspendCustomerRequest, SuspendCustomerResponse, SuspendTenantAccountRequest, SuspendTenantAccountResponse, SwitchProjectRequest, SwitchProjectResponse, SwitchTenantRequest, SwitchTenantResponse, UnlinkOAuthProviderRequest, UnlinkOAuthProviderResponse, UnpublishAuthProviderRequest, UnpublishAuthProviderResponse, UpdateAdminUserRequest, UpdateAdminUserResponse, UpdateApiKeyRequest, UpdateApiKeyResponse, UpdateAuthProviderRequest, UpdateAuthProviderResponse, UpdateCustomerRequest, UpdateCustomerResponse, UpdateMyProfileRequest, UpdateMyProfileResponse, UpdatePasswordRequest, UpdatePasswordResponse, UpdateProjectRequest, UpdateProjectResponse, UpdateTenantRequest, UpdateTenantResponse, ValidateApiKeyRequest, ValidateApiKeyResponse, ValidateCustomerInvitationRequest, ValidateCustomerInvitationResponse, ValidateInvitationRequest, ValidateInvitationResponse, VerifyCustomerTokenRequest, VerifyCustomerTokenResponse, VerifyEmailCodeRequest, VerifyEmailCodeResponse, VerifyEmailRequest, VerifyEmailResponse } from "./identity_pbjs";
+import { AcceptCustomerInvitationRequest, AcceptCustomerInvitationResponse, AcceptInvitationRequest, AcceptInvitationResponse, ActivateTenantRequest, ActivateTenantResponse, CancelScheduledAuthProviderPublishRequest, CancelScheduledAuthProviderPublishResponse, CancelTenantRequest, CancelTenantResponse, CheckEmailAvailabilityRequest, CheckEmailAvailabilityResponse, ChurnTenantRequest, ChurnTenantResponse, ClearSessionContextRequest, ClearSessionContextResponse, CompleteAccountSetupRequest, CompleteAccountSetupResponse, CreateAdminUserRequest, CreateAdminUserResponse, CreateApiKeyRequest, CreateApiKeyResponse, CreateAuthProviderRequest, CreateAuthProviderResponse, CreateCustomerInvitationRequest, CreateCustomerInvitationResponse, CreateCustomerRequest, CreateCustomerResponse, CreateInvitationRequest, CreateInvitationResponse, CreateProjectRequest, CreateProjectResponse, CreateSignupSessionRequest, CreateSignupSessionResponse, CreateTenantRequest, CreateTenantResponse, CustomerLoginRequest, CustomerLoginResponse, CustomerRefreshTokenRequest, CustomerRefreshTokenResponse, CustomerRegisterRequest, CustomerRegisterResponse, CustomerRequestOTPRequest, CustomerRequestOTPResponse, CustomerRequestPasswordResetRequest, CustomerRequestPasswordResetResponse, CustomerResetPasswordRequest, CustomerResetPasswordResponse, CustomerVerifyOTPRequest, CustomerVerifyOTPResponse, DeleteAuthProviderRequest, DeleteAuthProviderResponse, DeleteCustomerRequest, DeleteCustomerResponse, DeleteProjectRequest, DeleteProjectResponse, DeleteProviderTokensRequest, DeleteProviderTokensResponse, DeleteTenantRequest, DeleteTenantResponse, EnabledOAuthProvidersRequest, EnabledOAuthProvidersResponse, FinishProviderLoginRequest, FinishProviderLoginResponse, GetAdminUserRequest, GetAdminUserResponse, GetApiKeyRequest, GetApiKeyResponse, GetAuthProviderPublishStatusRequest, GetAuthProviderPublishStatusResponse, GetAuthProviderRequest, GetAuthProviderResponse, GetCustomerAuthConfigRequest, GetCustomerAuthConfigResponse, GetCustomerInvitationRequest, GetCustomerInvitationResponse, GetCustomerManagementStatusRequest, GetCustomerManagementStatusResponse, GetCustomerRequest, GetCustomerResponse, GetDefaultProjectRequest, GetDefaultProjectResponse, GetInvitationRequest, GetInvitationResponse, GetMeRequest, GetMeResponse, GetProjectRequest, GetProjectResponse, GetProviderTokenRequest, GetProviderTokenResponse, GetSessionContextRequest, GetSessionContextResponse, GetTenantRequest, GetTenantResponse, GrantAccessRequest, GrantAccessResponse, ListAdminUsersRequest, ListAdminUsersResponse, ListApiKeysRequest, ListApiKeysResponse, ListAuthProvidersRequest, ListAuthProvidersResponse, ListCustomerInvitationsRequest, ListCustomerInvitationsResponse, ListCustomersRequest, ListCustomersResponse, ListInvitationsRequest, ListInvitationsResponse, ListMyOAuthConnectionsRequest, ListMyOAuthConnectionsResponse, ListProjectsRequest, ListProjectsResponse, ListTenantsRequest, ListTenantsResponse, LoginRequest, LoginResponse, LoginWithOTPRequest, LoginWithOTPResponse, LogoutRequest, LogoutResponse, MarkTenantPastDueRequest, MarkTenantPastDueResponse, MintServiceTokenRequest, MintServiceTokenResponse, PublishAuthProviderRequest, PublishAuthProviderResponse, ReactivateTenantRequest, ReactivateTenantResponse, RefreshTokenRequest, RefreshTokenResponse, RegisterRequest, RegisterResponse, RequestOTPRequest, RequestOTPResponse, RequestPasswordResetRequest, RequestPasswordResetResponse, ResendCustomerInvitationRequest, ResendCustomerInvitationResponse, ResendInvitationRequest, ResendInvitationResponse, ResendVerificationEmailRequest, ResendVerificationEmailResponse, ResetPasswordRequest, ResetPasswordResponse, RevokeAccessRequest, RevokeAccessResponse, RevokeApiKeyRequest, RevokeApiKeyResponse, RevokeCustomerInvitationRequest, RevokeCustomerInvitationResponse, RevokeInvitationRequest, RevokeInvitationResponse, RotateApiKeyRequest, RotateApiKeyResponse, ScheduleAuthProviderPublishRequest, ScheduleAuthProviderPublishResponse, SendEmailVerificationCodeRequest, SendEmailVerificationCodeResponse, SetCustomerPasswordRequest, SetCustomerPasswordResponse, SetDefaultProjectRequest, SetDefaultProjectResponse, StartProviderLoginRequest, StartProviderLoginResponse, StoreProviderTokenRequest, StoreProviderTokenResponse, SuspendCustomerRequest, SuspendCustomerResponse, SuspendTenantAccountRequest, SuspendTenantAccountResponse, SwitchProjectRequest, SwitchProjectResponse, SwitchTenantRequest, SwitchTenantResponse, UnlinkOAuthProviderRequest, UnlinkOAuthProviderResponse, UnpublishAuthProviderRequest, UnpublishAuthProviderResponse, UpdateAdminUserRequest, UpdateAdminUserResponse, UpdateApiKeyRequest, UpdateApiKeyResponse, UpdateAuthProviderRequest, UpdateAuthProviderResponse, UpdateCustomerRequest, UpdateCustomerResponse, UpdateMyProfileRequest, UpdateMyProfileResponse, UpdatePasswordRequest, UpdatePasswordResponse, UpdateProjectRequest, UpdateProjectResponse, UpdateTenantRequest, UpdateTenantResponse, ValidateApiKeyRequest, ValidateApiKeyResponse, ValidateCustomerInvitationRequest, ValidateCustomerInvitationResponse, ValidateInvitationRequest, ValidateInvitationResponse, VerifyCustomerTokenRequest, VerifyCustomerTokenResponse, VerifyEmailCodeRequest, VerifyEmailCodeResponse, VerifyEmailRequest, VerifyEmailResponse } from "./identity_pbjs";
 import { MethodKind } from "@bufbuild/protobuf";
 
 /**
@@ -957,6 +957,28 @@ export declare const IdentityService: {
       readonly O: typeof DeleteProviderTokensResponse,
       readonly kind: MethodKind.Unary,
     },
+    /**
+     * Customer OIDC sign-in. api-public mutations forward verbatim; all
+     * OIDC client work (discovery, PKCE, token exchange, userinfo / ID
+     * token verification) and the register-or-login decision live here.
+     *
+     * @generated from rpc identity.v1.IdentityService.StartProviderLogin
+     */
+    readonly startProviderLogin: {
+      readonly name: "StartProviderLogin",
+      readonly I: typeof StartProviderLoginRequest,
+      readonly O: typeof StartProviderLoginResponse,
+      readonly kind: MethodKind.Unary,
+    },
+    /**
+     * @generated from rpc identity.v1.IdentityService.FinishProviderLogin
+     */
+    readonly finishProviderLogin: {
+      readonly name: "FinishProviderLogin",
+      readonly I: typeof FinishProviderLoginRequest,
+      readonly O: typeof FinishProviderLoginResponse,
+      readonly kind: MethodKind.Unary,
+    },
   }
 };
 

package/src/identity/v1/identity_connect.js

@@ -3,7 +3,7 @@
 /* eslint-disable */
 // @ts-nocheck
 
-import { AcceptCustomerInvitationRequest, AcceptCustomerInvitationResponse, AcceptInvitationRequest, AcceptInvitationResponse, ActivateTenantRequest, ActivateTenantResponse, CancelScheduledAuthProviderPublishRequest, CancelScheduledAuthProviderPublishResponse, CancelTenantRequest, CancelTenantResponse, CheckEmailAvailabilityRequest, CheckEmailAvailabilityResponse, ChurnTenantRequest, ChurnTenantResponse, ClearSessionContextRequest, ClearSessionContextResponse, CompleteAccountSetupRequest, CompleteAccountSetupResponse, CreateAdminUserRequest, CreateAdminUserResponse, CreateApiKeyRequest, CreateApiKeyResponse, CreateAuthProviderRequest, CreateAuthProviderResponse, CreateCustomerInvitationRequest, CreateCustomerInvitationResponse, CreateCustomerRequest, CreateCustomerResponse, CreateInvitationRequest, CreateInvitationResponse, CreateProjectRequest, CreateProjectResponse, CreateSignupSessionRequest, CreateSignupSessionResponse, CreateTenantRequest, CreateTenantResponse, CustomerLoginRequest, CustomerLoginResponse, CustomerRefreshTokenRequest, CustomerRefreshTokenResponse, CustomerRegisterRequest, CustomerRegisterResponse, CustomerRequestOTPRequest, CustomerRequestOTPResponse, CustomerRequestPasswordResetRequest, CustomerRequestPasswordResetResponse, CustomerResetPasswordRequest, CustomerResetPasswordResponse, CustomerVerifyOTPRequest, CustomerVerifyOTPResponse, DeleteAuthProviderRequest, DeleteAuthProviderResponse, DeleteCustomerRequest, DeleteCustomerResponse, DeleteProjectRequest, DeleteProjectResponse, DeleteProviderTokensRequest, DeleteProviderTokensResponse, DeleteTenantRequest, DeleteTenantResponse, EnabledOAuthProvidersRequest, EnabledOAuthProvidersResponse, GetAdminUserRequest, GetAdminUserResponse, GetApiKeyRequest, GetApiKeyResponse, GetAuthProviderPublishStatusRequest, GetAuthProviderPublishStatusResponse, GetAuthProviderRequest, GetAuthProviderResponse, GetCustomerAuthConfigRequest, GetCustomerAuthConfigResponse, GetCustomerInvitationRequest, GetCustomerInvitationResponse, GetCustomerManagementStatusRequest, GetCustomerManagementStatusResponse, GetCustomerRequest, GetCustomerResponse, GetDefaultProjectRequest, GetDefaultProjectResponse, GetInvitationRequest, GetInvitationResponse, GetMeRequest, GetMeResponse, GetProjectRequest, GetProjectResponse, GetProviderTokenRequest, GetProviderTokenResponse, GetSessionContextRequest, GetSessionContextResponse, GetTenantRequest, GetTenantResponse, GrantAccessRequest, GrantAccessResponse, ListAdminUsersRequest, ListAdminUsersResponse, ListApiKeysRequest, ListApiKeysResponse, ListAuthProvidersRequest, ListAuthProvidersResponse, ListCustomerInvitationsRequest, ListCustomerInvitationsResponse, ListCustomersRequest, ListCustomersResponse, ListInvitationsRequest, ListInvitationsResponse, ListMyOAuthConnectionsRequest, ListMyOAuthConnectionsResponse, ListProjectsRequest, ListProjectsResponse, ListTenantsRequest, ListTenantsResponse, LoginRequest, LoginResponse, LoginWithOTPRequest, LoginWithOTPResponse, LogoutRequest, LogoutResponse, MarkTenantPastDueRequest, MarkTenantPastDueResponse, MintServiceTokenRequest, MintServiceTokenResponse, PublishAuthProviderRequest, PublishAuthProviderResponse, ReactivateTenantRequest, ReactivateTenantResponse, RefreshTokenRequest, RefreshTokenResponse, RegisterRequest, RegisterResponse, RequestOTPRequest, RequestOTPResponse, RequestPasswordResetRequest, RequestPasswordResetResponse, ResendCustomerInvitationRequest, ResendCustomerInvitationResponse, ResendInvitationRequest, ResendInvitationResponse, ResendVerificationEmailRequest, ResendVerificationEmailResponse, ResetPasswordRequest, ResetPasswordResponse, RevokeAccessRequest, RevokeAccessResponse, RevokeApiKeyRequest, RevokeApiKeyResponse, RevokeCustomerInvitationRequest, RevokeCustomerInvitationResponse, RevokeInvitationRequest, RevokeInvitationResponse, RotateApiKeyRequest, RotateApiKeyResponse, ScheduleAuthProviderPublishRequest, ScheduleAuthProviderPublishResponse, SendEmailVerificationCodeRequest, SendEmailVerificationCodeResponse, SetCustomerPasswordRequest, SetCustomerPasswordResponse, SetDefaultProjectRequest, SetDefaultProjectResponse, StoreProviderTokenRequest, StoreProviderTokenResponse, SuspendCustomerRequest, SuspendCustomerResponse, SuspendTenantAccountRequest, SuspendTenantAccountResponse, SwitchProjectRequest, SwitchProjectResponse, SwitchTenantRequest, SwitchTenantResponse, UnlinkOAuthProviderRequest, UnlinkOAuthProviderResponse, UnpublishAuthProviderRequest, UnpublishAuthProviderResponse, UpdateAdminUserRequest, UpdateAdminUserResponse, UpdateApiKeyRequest, UpdateApiKeyResponse, UpdateAuthProviderRequest, UpdateAuthProviderResponse, UpdateCustomerRequest, UpdateCustomerResponse, UpdateMyProfileRequest, UpdateMyProfileResponse, UpdatePasswordRequest, UpdatePasswordResponse, UpdateProjectRequest, UpdateProjectResponse, UpdateTenantRequest, UpdateTenantResponse, ValidateApiKeyRequest, ValidateApiKeyResponse, ValidateCustomerInvitationRequest, ValidateCustomerInvitationResponse, ValidateInvitationRequest, ValidateInvitationResponse, VerifyCustomerTokenRequest, VerifyCustomerTokenResponse, VerifyEmailCodeRequest, VerifyEmailCodeResponse, VerifyEmailRequest, VerifyEmailResponse } from "./identity_pbjs";
+import { AcceptCustomerInvitationRequest, AcceptCustomerInvitationResponse, AcceptInvitationRequest, AcceptInvitationResponse, ActivateTenantRequest, ActivateTenantResponse, CancelScheduledAuthProviderPublishRequest, CancelScheduledAuthProviderPublishResponse, CancelTenantRequest, CancelTenantResponse, CheckEmailAvailabilityRequest, CheckEmailAvailabilityResponse, ChurnTenantRequest, ChurnTenantResponse, ClearSessionContextRequest, ClearSessionContextResponse, CompleteAccountSetupRequest, CompleteAccountSetupResponse, CreateAdminUserRequest, CreateAdminUserResponse, CreateApiKeyRequest, CreateApiKeyResponse, CreateAuthProviderRequest, CreateAuthProviderResponse, CreateCustomerInvitationRequest, CreateCustomerInvitationResponse, CreateCustomerRequest, CreateCustomerResponse, CreateInvitationRequest, CreateInvitationResponse, CreateProjectRequest, CreateProjectResponse, CreateSignupSessionRequest, CreateSignupSessionResponse, CreateTenantRequest, CreateTenantResponse, CustomerLoginRequest, CustomerLoginResponse, CustomerRefreshTokenRequest, CustomerRefreshTokenResponse, CustomerRegisterRequest, CustomerRegisterResponse, CustomerRequestOTPRequest, CustomerRequestOTPResponse, CustomerRequestPasswordResetRequest, CustomerRequestPasswordResetResponse, CustomerResetPasswordRequest, CustomerResetPasswordResponse, CustomerVerifyOTPRequest, CustomerVerifyOTPResponse, DeleteAuthProviderRequest, DeleteAuthProviderResponse, DeleteCustomerRequest, DeleteCustomerResponse, DeleteProjectRequest, DeleteProjectResponse, DeleteProviderTokensRequest, DeleteProviderTokensResponse, DeleteTenantRequest, DeleteTenantResponse, EnabledOAuthProvidersRequest, EnabledOAuthProvidersResponse, FinishProviderLoginRequest, FinishProviderLoginResponse, GetAdminUserRequest, GetAdminUserResponse, GetApiKeyRequest, GetApiKeyResponse, GetAuthProviderPublishStatusRequest, GetAuthProviderPublishStatusResponse, GetAuthProviderRequest, GetAuthProviderResponse, GetCustomerAuthConfigRequest, GetCustomerAuthConfigResponse, GetCustomerInvitationRequest, GetCustomerInvitationResponse, GetCustomerManagementStatusRequest, GetCustomerManagementStatusResponse, GetCustomerRequest, GetCustomerResponse, GetDefaultProjectRequest, GetDefaultProjectResponse, GetInvitationRequest, GetInvitationResponse, GetMeRequest, GetMeResponse, GetProjectRequest, GetProjectResponse, GetProviderTokenRequest, GetProviderTokenResponse, GetSessionContextRequest, GetSessionContextResponse, GetTenantRequest, GetTenantResponse, GrantAccessRequest, GrantAccessResponse, ListAdminUsersRequest, ListAdminUsersResponse, ListApiKeysRequest, ListApiKeysResponse, ListAuthProvidersRequest, ListAuthProvidersResponse, ListCustomerInvitationsRequest, ListCustomerInvitationsResponse, ListCustomersRequest, ListCustomersResponse, ListInvitationsRequest, ListInvitationsResponse, ListMyOAuthConnectionsRequest, ListMyOAuthConnectionsResponse, ListProjectsRequest, ListProjectsResponse, ListTenantsRequest, ListTenantsResponse, LoginRequest, LoginResponse, LoginWithOTPRequest, LoginWithOTPResponse, LogoutRequest, LogoutResponse, MarkTenantPastDueRequest, MarkTenantPastDueResponse, MintServiceTokenRequest, MintServiceTokenResponse, PublishAuthProviderRequest, PublishAuthProviderResponse, ReactivateTenantRequest, ReactivateTenantResponse, RefreshTokenRequest, RefreshTokenResponse, RegisterRequest, RegisterResponse, RequestOTPRequest, RequestOTPResponse, RequestPasswordResetRequest, RequestPasswordResetResponse, ResendCustomerInvitationRequest, ResendCustomerInvitationResponse, ResendInvitationRequest, ResendInvitationResponse, ResendVerificationEmailRequest, ResendVerificationEmailResponse, ResetPasswordRequest, ResetPasswordResponse, RevokeAccessRequest, RevokeAccessResponse, RevokeApiKeyRequest, RevokeApiKeyResponse, RevokeCustomerInvitationRequest, RevokeCustomerInvitationResponse, RevokeInvitationRequest, RevokeInvitationResponse, RotateApiKeyRequest, RotateApiKeyResponse, ScheduleAuthProviderPublishRequest, ScheduleAuthProviderPublishResponse, SendEmailVerificationCodeRequest, SendEmailVerificationCodeResponse, SetCustomerPasswordRequest, SetCustomerPasswordResponse, SetDefaultProjectRequest, SetDefaultProjectResponse, StartProviderLoginRequest, StartProviderLoginResponse, StoreProviderTokenRequest, StoreProviderTokenResponse, SuspendCustomerRequest, SuspendCustomerResponse, SuspendTenantAccountRequest, SuspendTenantAccountResponse, SwitchProjectRequest, SwitchProjectResponse, SwitchTenantRequest, SwitchTenantResponse, UnlinkOAuthProviderRequest, UnlinkOAuthProviderResponse, UnpublishAuthProviderRequest, UnpublishAuthProviderResponse, UpdateAdminUserRequest, UpdateAdminUserResponse, UpdateApiKeyRequest, UpdateApiKeyResponse, UpdateAuthProviderRequest, UpdateAuthProviderResponse, UpdateCustomerRequest, UpdateCustomerResponse, UpdateMyProfileRequest, UpdateMyProfileResponse, UpdatePasswordRequest, UpdatePasswordResponse, UpdateProjectRequest, UpdateProjectResponse, UpdateTenantRequest, UpdateTenantResponse, ValidateApiKeyRequest, ValidateApiKeyResponse, ValidateCustomerInvitationRequest, ValidateCustomerInvitationResponse, ValidateInvitationRequest, ValidateInvitationResponse, VerifyCustomerTokenRequest, VerifyCustomerTokenResponse, VerifyEmailCodeRequest, VerifyEmailCodeResponse, VerifyEmailRequest, VerifyEmailResponse } from "./identity_pbjs";
 import { MethodKind } from "@bufbuild/protobuf";
 
 /**
@@ -957,6 +957,28 @@ export const IdentityService = {
       O: DeleteProviderTokensResponse,
       kind: MethodKind.Unary,
     },
+    /**
+     * Customer OIDC sign-in. api-public mutations forward verbatim; all
+     * OIDC client work (discovery, PKCE, token exchange, userinfo / ID
+     * token verification) and the register-or-login decision live here.
+     *
+     * @generated from rpc identity.v1.IdentityService.StartProviderLogin
+     */
+    startProviderLogin: {
+      name: "StartProviderLogin",
+      I: StartProviderLoginRequest,
+      O: StartProviderLoginResponse,
+      kind: MethodKind.Unary,
+    },
+    /**
+     * @generated from rpc identity.v1.IdentityService.FinishProviderLogin
+     */
+    finishProviderLogin: {
+      name: "FinishProviderLogin",
+      I: FinishProviderLoginRequest,
+      O: FinishProviderLoginResponse,
+      kind: MethodKind.Unary,
+    },
   }
 };
 

package/src/identity/v1/identity_pb.d.ts

@@ -4989,6 +4989,129 @@ export declare type StoreProviderTokenResponse = Message<"identity.v1.StoreProvi
  */
 export declare const StoreProviderTokenResponseSchema: GenMessage<StoreProviderTokenResponse>;
 
+/**
+ * StartProviderLogin begins an OIDC sign-in for a customer. The platform
+ * loads the named provider, runs OIDC discovery, generates a PKCE pair,
+ * persists state under Redis, and returns the IdP authorization URL the
+ * caller should redirect the browser to. Owning the OIDC client surface
+ * here keeps outbound TLS / Redis writes out of the BFF tier.
+ *
+ * redirect_uri may override the provider's configured default; the
+ * override must be on the provider's allowlist (additional_redirect_uris)
+ * and validate as an https URL — both checks are enforced server-side
+ * before the IdP ever sees the request.
+ *
+ * @generated from message identity.v1.StartProviderLoginRequest
+ */
+export declare type StartProviderLoginRequest = Message<"identity.v1.StartProviderLoginRequest"> & {
+  /**
+   * @generated from field: string provider_key = 1;
+   */
+  providerKey: string;
+
+  /**
+   * @generated from field: optional string return_to = 2;
+   */
+  returnTo?: string | undefined;
+
+  /**
+   * @generated from field: optional string redirect_uri = 3;
+   */
+  redirectUri?: string | undefined;
+};
+
+/**
+ * Describes the message identity.v1.StartProviderLoginRequest.
+ * Use `create(StartProviderLoginRequestSchema)` to create a new message.
+ */
+export declare const StartProviderLoginRequestSchema: GenMessage<StartProviderLoginRequest>;
+
+/**
+ * @generated from message identity.v1.StartProviderLoginResponse
+ */
+export declare type StartProviderLoginResponse = Message<"identity.v1.StartProviderLoginResponse"> & {
+  /**
+   * @generated from field: string redirect_url = 1;
+   */
+  redirectUrl: string;
+};
+
+/**
+ * Describes the message identity.v1.StartProviderLoginResponse.
+ * Use `create(StartProviderLoginResponseSchema)` to create a new message.
+ */
+export declare const StartProviderLoginResponseSchema: GenMessage<StartProviderLoginResponse>;
+
+/**
+ * FinishProviderLogin completes the OIDC sign-in for the code + state
+ * returned by the IdP callback. The platform:
+ *   1. Loads + clears the PKCE state for `state`.
+ *   2. Cross-checks state.provider_key == request.provider_key.
+ *   3. Exchanges the code for tokens, fetches userinfo (or verifies the
+ *      ID token for providers that omit userinfo, e.g. Shopify CAAPI).
+ *   4. Registers-or-logs-in the customer by email.
+ *   5. Persists the upstream provider tokens for refresh.
+ *   6. Returns the Foir access / refresh tokens to the caller.
+ *
+ * All identity-decision logic stays on platform; api-public's mutation
+ * resolver becomes a thin wire forwarder.
+ *
+ * @generated from message identity.v1.FinishProviderLoginRequest
+ */
+export declare type FinishProviderLoginRequest = Message<"identity.v1.FinishProviderLoginRequest"> & {
+  /**
+   * @generated from field: string provider_key = 1;
+   */
+  providerKey: string;
+
+  /**
+   * @generated from field: string code = 2;
+   */
+  code: string;
+
+  /**
+   * @generated from field: string state = 3;
+   */
+  state: string;
+};
+
+/**
+ * Describes the message identity.v1.FinishProviderLoginRequest.
+ * Use `create(FinishProviderLoginRequestSchema)` to create a new message.
+ */
+export declare const FinishProviderLoginRequestSchema: GenMessage<FinishProviderLoginRequest>;
+
+/**
+ * @generated from message identity.v1.FinishProviderLoginResponse
+ */
+export declare type FinishProviderLoginResponse = Message<"identity.v1.FinishProviderLoginResponse"> & {
+  /**
+   * @generated from field: string customer_id = 1;
+   */
+  customerId: string;
+
+  /**
+   * @generated from field: string email = 2;
+   */
+  email: string;
+
+  /**
+   * @generated from field: string access_token = 3;
+   */
+  accessToken: string;
+
+  /**
+   * @generated from field: string refresh_token = 4;
+   */
+  refreshToken: string;
+};
+
+/**
+ * Describes the message identity.v1.FinishProviderLoginResponse.
+ * Use `create(FinishProviderLoginResponseSchema)` to create a new message.
+ */
+export declare const FinishProviderLoginResponseSchema: GenMessage<FinishProviderLoginResponse>;
+
 /**
  * @generated from message identity.v1.GetProviderTokenRequest
  */
@@ -6215,5 +6338,25 @@ export declare const IdentityService: GenService<{
     input: typeof DeleteProviderTokensRequestSchema;
     output: typeof DeleteProviderTokensResponseSchema;
   },
+  /**
+   * Customer OIDC sign-in. api-public mutations forward verbatim; all
+   * OIDC client work (discovery, PKCE, token exchange, userinfo / ID
+   * token verification) and the register-or-login decision live here.
+   *
+   * @generated from rpc identity.v1.IdentityService.StartProviderLogin
+   */
+  startProviderLogin: {
+    methodKind: "unary";
+    input: typeof StartProviderLoginRequestSchema;
+    output: typeof StartProviderLoginResponseSchema;
+  },
+  /**
+   * @generated from rpc identity.v1.IdentityService.FinishProviderLogin
+   */
+  finishProviderLogin: {
+    methodKind: "unary";
+    input: typeof FinishProviderLoginRequestSchema;
+    output: typeof FinishProviderLoginResponseSchema;
+  },
 }>;