@meshtrade/api-node 1.30.0

package/dist/meshtrade/iam/api_user/v1/service_node_meshts.js

@@ -0,0 +1,201 @@
+"use strict";
+// @generated by protoc-gen-meshts v1
+// @generated from file meshtrade/iam/api_user/v1/service.proto (package meshtrade.iam.api_user.v1, syntax proto3)
+/* eslint-disable */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APIUserServiceNode = void 0;
+const connect_1 = require("@connectrpc/connect");
+const connect_node_1 = require("@connectrpc/connect-node");
+const service_pb_1 = require("./service_pb");
+const config_1 = require("../../../common/config");
+const validation_1 = require("../../../common/validation");
+const connectInterceptors_1 = require("../../../common/connectInterceptors");
+/**
+ * Node.js client for interacting with the meshtrade.iam.api_user.v1 apiuser v1 API resource service.
+ * Uses Connect-ES with gRPC transport for Node.js gRPC communication.
+ *
+ * Supports three authentication modes:
+ *
+ * 1. **No Authentication** (public APIs):
+ *    ```typescript
+ *    const client = new APIUserServiceNode({ apiServerURL: "http://localhost:10000" });
+ *    ```
+ *
+ * 2. **API Key Authentication** (backend services):
+ *    ```typescript
+ *    const client = new APIUserServiceNode({
+ *      apiServerURL: "https://api.example.com",
+ *      apiKey: "your-api-key",
+ *      group: "groups/01ARZ3NDEKTSV4YWVF8F5BH32"
+ *    });
+ *    ```
+ *
+ * 3. **JWT Token Authentication** (Next.js backend with user session):
+ *    ```typescript
+ *    const client = new APIUserServiceNode({
+ *      apiServerURL: "https://api.example.com",
+ *      jwtToken: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
+ *    });
+ *    ```
+ */
+class APIUserServiceNode {
+    /**
+     * Constructs an instance of APIUserServiceNode.
+     * @param {ConfigOpts} [config] - Optional configuration for the client.
+     * @param {Interceptor[]} [interceptors] - For internal use by `withGroup`.
+     */
+    constructor(config, interceptors) {
+        this._config = (0, config_1.getConfigFromOpts)(config);
+        // If interceptors are provided (from withGroup), use them
+        // Otherwise, create auth interceptors based on config
+        if (interceptors) {
+            this._interceptors = interceptors;
+        }
+        else {
+            this._interceptors = [];
+            // Add authentication interceptor based on configuration
+            if (this._config.apiKey && this._config.group) {
+                // API Key authentication mode
+                this._interceptors.push((0, connectInterceptors_1.createApiKeyInterceptor)(this._config.apiKey, this._config.group));
+            }
+            else if (this._config.jwtToken) {
+                // JWT authentication mode
+                this._interceptors.push((0, connectInterceptors_1.createJwtInterceptor)(this._config.jwtToken));
+            }
+            // If neither is configured, no authentication (public API mode)
+        }
+        // Create the gRPC transport for Node.js with interceptors
+        // Note: gRPC transport uses HTTP/2 by default
+        const transport = (0, connect_node_1.createGrpcTransport)({
+            baseUrl: this._config.apiServerURL,
+            interceptors: this._interceptors,
+        });
+        // Construct the Connect-ES client
+        this._client = (0, connect_1.createClient)(service_pb_1.APIUserService, transport);
+    }
+    /**
+     * Returns a new client instance configured to send the specified group
+     * resource name in the request headers for subsequent API calls.
+     *
+     * **Important**: This method only works with API key authentication.
+     * - For **API key auth**: Creates a new client with updated group context
+     * - For **JWT auth**: Throws error (group comes from JWT token claims)
+     * - For **no auth**: Throws error (group requires authentication)
+     *
+     * @param {string} group - The operating group context to inject into the request
+     *                         in the format `groups/{ulid}` where {ulid} is a 26-character ULID.
+     *                         Example: 'groups/01ARZ3NDEKTSV4YWVF8F5BH32'
+     * @returns {APIUserServiceNode} A new, configured instance of the client.
+     * @throws {Error} If used with JWT authentication or no authentication
+     * @throws {Error} If the group format is invalid
+     */
+    withGroup(group) {
+        // Check authentication mode
+        if (this._config.jwtToken) {
+            throw new Error("Cannot use withGroup() with JWT authentication. " +
+                "The group context is determined by the JWT token claims.");
+        }
+        if (!this._config.apiKey) {
+            throw new Error("Cannot use withGroup() without authentication. " +
+                "Please configure API key authentication to use group context.");
+        }
+        // For API key authentication, create new client with updated group
+        // Replace the existing API key interceptor with one that has the new group
+        const newInterceptors = [
+            (0, connectInterceptors_1.createApiKeyInterceptor)(this._config.apiKey, group)
+        ];
+        // Return a new client instance with updated group context
+        return new APIUserServiceNode(this._config, newInterceptors);
+    }
+    /**
+     * Retrieves an apiuser.
+     * @param {GetAPIUserRequest} request - The request object for getapiuser.
+     * @returns {Promise<APIUser>} A promise that resolves with the apiuser.
+     */
+    getAPIUser(request) {
+        // Validate request
+        (0, validation_1.validateRequest)(request);
+        return this._client.getAPIUser(request);
+    }
+    /**
+     * Creates a new apiuser.
+     * @param {CreateAPIUserRequest} request - The request object for createapiuser.
+     * @returns {Promise<APIUser>} A promise that resolves with the apiuser.
+     */
+    createAPIUser(request) {
+        // Validate request
+        (0, validation_1.validateRequest)(request);
+        return this._client.createAPIUser(request);
+    }
+    /**
+     * Performs assignrolestoapiuser operation on apiuser.
+     * @param {AssignRolesToAPIUserRequest} request - The request object for assignrolestoapiuser.
+     * @returns {Promise<APIUser>} A promise that resolves with the apiuser.
+     */
+    assignRolesToAPIUser(request) {
+        // Validate request
+        (0, validation_1.validateRequest)(request);
+        return this._client.assignRolesToAPIUser(request);
+    }
+    /**
+     * Performs revokerolesfromapiuser operation on apiuser.
+     * @param {RevokeRolesFromAPIUserRequest} request - The request object for revokerolesfromapiuser.
+     * @returns {Promise<APIUser>} A promise that resolves with the apiuser.
+     */
+    revokeRolesFromAPIUser(request) {
+        // Validate request
+        (0, validation_1.validateRequest)(request);
+        return this._client.revokeRolesFromAPIUser(request);
+    }
+    /**
+     * Retrieves a list of apiusers.
+     * @param {ListAPIUsersRequest} request - The request object for listapiusers.
+     * @returns {Promise<ListAPIUsersResponse>} A promise that resolves with the list of apiusers.
+     */
+    listAPIUsers(request) {
+        // Validate request
+        (0, validation_1.validateRequest)(request);
+        return this._client.listAPIUsers(request);
+    }
+    /**
+     * Searches for apiusers.
+     * @param {SearchAPIUsersRequest} request - The request object for searchapiusers.
+     * @returns {Promise<SearchAPIUsersResponse>} A promise that resolves with the search results.
+     */
+    searchAPIUsers(request) {
+        // Validate request
+        (0, validation_1.validateRequest)(request);
+        return this._client.searchAPIUsers(request);
+    }
+    /**
+     * Activates an apiuser.
+     * @param {ActivateAPIUserRequest} request - The request object for activateapiuser.
+     * @returns {Promise<APIUser>} A promise that resolves with the apiuser.
+     */
+    activateAPIUser(request) {
+        // Validate request
+        (0, validation_1.validateRequest)(request);
+        return this._client.activateAPIUser(request);
+    }
+    /**
+     * Deactivates an apiuser.
+     * @param {DeactivateAPIUserRequest} request - The request object for deactivateapiuser.
+     * @returns {Promise<APIUser>} A promise that resolves with the apiuser.
+     */
+    deactivateAPIUser(request) {
+        // Validate request
+        (0, validation_1.validateRequest)(request);
+        return this._client.deactivateAPIUser(request);
+    }
+    /**
+     * Retrieves an apiuser.
+     * @param {GetAPIUserByKeyHashRequest} request - The request object for getapiuserbykeyhash.
+     * @returns {Promise<APIUser>} A promise that resolves with the apiuser.
+     */
+    getAPIUserByKeyHash(request) {
+        // Validate request
+        (0, validation_1.validateRequest)(request);
+        return this._client.getAPIUserByKeyHash(request);
+    }
+}
+exports.APIUserServiceNode = APIUserServiceNode;

package/dist/meshtrade/iam/api_user/v1/service_pb.d.ts

@@ -0,0 +1,343 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { APIUser, APIUserSchema } from "./api_user_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file meshtrade/iam/api_user/v1/service.proto.
+ */
+export declare const file_meshtrade_iam_api_user_v1_service: GenFile;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.GetAPIUserRequest
+ */
+export type GetAPIUserRequest = Message<"meshtrade.iam.api_user.v1.GetAPIUserRequest"> & {
+    /**
+     *
+     * Name of the API user to retrieve.
+     * Format: api_users/{ULIDv2}
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.GetAPIUserRequest.
+ * Use `create(GetAPIUserRequestSchema)` to create a new message.
+ */
+export declare const GetAPIUserRequestSchema: GenMessage<GetAPIUserRequest>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.GetAPIUserByKeyHashRequest
+ */
+export type GetAPIUserByKeyHashRequest = Message<"meshtrade.iam.api_user.v1.GetAPIUserByKeyHashRequest"> & {
+    /**
+     *
+     * Key hash of the API user to get.
+     *
+     * @generated from field: string key_hash = 1;
+     */
+    keyHash: string;
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.GetAPIUserByKeyHashRequest.
+ * Use `create(GetAPIUserByKeyHashRequestSchema)` to create a new message.
+ */
+export declare const GetAPIUserByKeyHashRequestSchema: GenMessage<GetAPIUserByKeyHashRequest>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.CreateAPIUserRequest
+ */
+export type CreateAPIUserRequest = Message<"meshtrade.iam.api_user.v1.CreateAPIUserRequest"> & {
+    /**
+     *
+     * The API user resource to create.
+     * The name field will be ignored and assigned by the server.
+     *
+     * @generated from field: meshtrade.iam.api_user.v1.APIUser api_user = 1;
+     */
+    apiUser?: APIUser;
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.CreateAPIUserRequest.
+ * Use `create(CreateAPIUserRequestSchema)` to create a new message.
+ */
+export declare const CreateAPIUserRequestSchema: GenMessage<CreateAPIUserRequest>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.AssignRolesToAPIUserRequest
+ */
+export type AssignRolesToAPIUserRequest = Message<"meshtrade.iam.api_user.v1.AssignRolesToAPIUserRequest"> & {
+    /**
+     *
+     * Name of the API user to assign roles to in the format api_users/{ULIDv2}.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     *
+     * Roles to assign to the API user in the format groups/{ULIDv2}/roles/{role_id}.
+     * The role_id corresponds to a value from the meshtrade.iam.role.v1.Role enum.
+     *
+     * @generated from field: repeated string roles = 2;
+     */
+    roles: string[];
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.AssignRolesToAPIUserRequest.
+ * Use `create(AssignRolesToAPIUserRequestSchema)` to create a new message.
+ */
+export declare const AssignRolesToAPIUserRequestSchema: GenMessage<AssignRolesToAPIUserRequest>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.RevokeRolesFromAPIUserRequest
+ */
+export type RevokeRolesFromAPIUserRequest = Message<"meshtrade.iam.api_user.v1.RevokeRolesFromAPIUserRequest"> & {
+    /**
+     *
+     * Name of the API user to revoke roles from in the format api_users/{ULIDv2}.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     *
+     * Roles to revoke from the API user in the format groups/{ULIDv2}/roles/{role_id}.
+     * The role_id corresponds to a value from the meshtrade.iam.role.v1.Role enum.
+     *
+     * @generated from field: repeated string roles = 2;
+     */
+    roles: string[];
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.RevokeRolesFromAPIUserRequest.
+ * Use `create(RevokeRolesFromAPIUserRequestSchema)` to create a new message.
+ */
+export declare const RevokeRolesFromAPIUserRequestSchema: GenMessage<RevokeRolesFromAPIUserRequest>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.ListAPIUsersRequest
+ */
+export type ListAPIUsersRequest = Message<"meshtrade.iam.api_user.v1.ListAPIUsersRequest"> & {};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.ListAPIUsersRequest.
+ * Use `create(ListAPIUsersRequestSchema)` to create a new message.
+ */
+export declare const ListAPIUsersRequestSchema: GenMessage<ListAPIUsersRequest>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.ListAPIUsersResponse
+ */
+export type ListAPIUsersResponse = Message<"meshtrade.iam.api_user.v1.ListAPIUsersResponse"> & {
+    /**
+     * @generated from field: repeated meshtrade.iam.api_user.v1.APIUser api_users = 1;
+     */
+    apiUsers: APIUser[];
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.ListAPIUsersResponse.
+ * Use `create(ListAPIUsersResponseSchema)` to create a new message.
+ */
+export declare const ListAPIUsersResponseSchema: GenMessage<ListAPIUsersResponse>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.SearchAPIUsersRequest
+ */
+export type SearchAPIUsersRequest = Message<"meshtrade.iam.api_user.v1.SearchAPIUsersRequest"> & {
+    /**
+     *
+     * Display name is a substring search for API users.
+     *
+     * @generated from field: string display_name = 1;
+     */
+    displayName: string;
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.SearchAPIUsersRequest.
+ * Use `create(SearchAPIUsersRequestSchema)` to create a new message.
+ */
+export declare const SearchAPIUsersRequestSchema: GenMessage<SearchAPIUsersRequest>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.SearchAPIUsersResponse
+ */
+export type SearchAPIUsersResponse = Message<"meshtrade.iam.api_user.v1.SearchAPIUsersResponse"> & {
+    /**
+     * @generated from field: repeated meshtrade.iam.api_user.v1.APIUser api_users = 1;
+     */
+    apiUsers: APIUser[];
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.SearchAPIUsersResponse.
+ * Use `create(SearchAPIUsersResponseSchema)` to create a new message.
+ */
+export declare const SearchAPIUsersResponseSchema: GenMessage<SearchAPIUsersResponse>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.ActivateAPIUserRequest
+ */
+export type ActivateAPIUserRequest = Message<"meshtrade.iam.api_user.v1.ActivateAPIUserRequest"> & {
+    /**
+     *
+     * Name of the API user to activate.
+     * Format: api_users/{ULIDv2}
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.ActivateAPIUserRequest.
+ * Use `create(ActivateAPIUserRequestSchema)` to create a new message.
+ */
+export declare const ActivateAPIUserRequestSchema: GenMessage<ActivateAPIUserRequest>;
+/**
+ * @generated from message meshtrade.iam.api_user.v1.DeactivateAPIUserRequest
+ */
+export type DeactivateAPIUserRequest = Message<"meshtrade.iam.api_user.v1.DeactivateAPIUserRequest"> & {
+    /**
+     *
+     * Name of the API user to deactivate.
+     * Format: api_users/{ULIDv2}
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+};
+/**
+ * Describes the message meshtrade.iam.api_user.v1.DeactivateAPIUserRequest.
+ * Use `create(DeactivateAPIUserRequestSchema)` to create a new message.
+ */
+export declare const DeactivateAPIUserRequestSchema: GenMessage<DeactivateAPIUserRequest>;
+/**
+ *
+ * APIUserService manages API user lifecycle and authentication credentials.
+ *
+ * API users represent automated clients that can authenticate with API keys
+ * and perform operations within a specific group context. Each API user has:
+ * - A unique identifier and display name
+ * - Group ownership for resource isolation
+ * - Role-based permissions for authorization
+ * - Active/inactive state for access control
+ *
+ * All operations require IAM domain permissions and operate within
+ * the authenticated group context.
+ *
+ * @generated from service meshtrade.iam.api_user.v1.APIUserService
+ */
+export declare const APIUserService: GenService<{
+    /**
+     *
+     * Retrieves a single API user by its unique identifier.
+     *
+     * @generated from rpc meshtrade.iam.api_user.v1.APIUserService.GetAPIUser
+     */
+    getAPIUser: {
+        methodKind: "unary";
+        input: typeof GetAPIUserRequestSchema;
+        output: typeof APIUserSchema;
+    };
+    /**
+     *
+     * Creates a new API user with the specified configuration.
+     *
+     * The API user will be created in the authenticated group context
+     * and assigned the provided roles. The system generates a unique
+     * identifier and API key for authentication.
+     *
+     * @generated from rpc meshtrade.iam.api_user.v1.APIUserService.CreateAPIUser
+     */
+    createAPIUser: {
+        methodKind: "unary";
+        input: typeof CreateAPIUserRequestSchema;
+        output: typeof APIUserSchema;
+    };
+    /**
+     *
+     * Assign roles to an existing api user within the authenticated group context.
+     *
+     * The role assignment enables the api user to perform operations according
+     * to the permissions associated with that role within the group hierarchy.
+     *
+     * @generated from rpc meshtrade.iam.api_user.v1.APIUserService.AssignRolesToAPIUser
+     */
+    assignRolesToAPIUser: {
+        methodKind: "unary";
+        input: typeof AssignRolesToAPIUserRequestSchema;
+        output: typeof APIUserSchema;
+    };
+    /**
+     *
+     * Revoke roles from an existing API user within the authenticated group context.
+     *
+     * The role revocation removes the permissions associated with that role from
+     * the API user within the group hierarchy. The API user will no longer be able
+     * to perform operations that require the revoked role.
+     *
+     * @generated from rpc meshtrade.iam.api_user.v1.APIUserService.RevokeRolesFromAPIUser
+     */
+    revokeRolesFromAPIUser: {
+        methodKind: "unary";
+        input: typeof RevokeRolesFromAPIUserRequestSchema;
+        output: typeof APIUserSchema;
+    };
+    /**
+     *
+     * Lists all API users in the authenticated group context.
+     *
+     * Returns all API users that belong to the current group,
+     * regardless of their active/inactive state.
+     *
+     * @generated from rpc meshtrade.iam.api_user.v1.APIUserService.ListAPIUsers
+     */
+    listAPIUsers: {
+        methodKind: "unary";
+        input: typeof ListAPIUsersRequestSchema;
+        output: typeof ListAPIUsersResponseSchema;
+    };
+    /**
+     *
+     * Searches API users using display name filtering.
+     *
+     * Performs substring matching on API user display names
+     * within the authenticated group context.
+     *
+     * @generated from rpc meshtrade.iam.api_user.v1.APIUserService.SearchAPIUsers
+     */
+    searchAPIUsers: {
+        methodKind: "unary";
+        input: typeof SearchAPIUsersRequestSchema;
+        output: typeof SearchAPIUsersResponseSchema;
+    };
+    /**
+     *
+     * Activates an API user, enabling API key authentication.
+     *
+     * Changes the API user state to active, allowing the associated
+     * API key to be used for authentication and authorization.
+     *
+     * @generated from rpc meshtrade.iam.api_user.v1.APIUserService.ActivateAPIUser
+     */
+    activateAPIUser: {
+        methodKind: "unary";
+        input: typeof ActivateAPIUserRequestSchema;
+        output: typeof APIUserSchema;
+    };
+    /**
+     *
+     * Deactivates an API user, disabling API key authentication.
+     *
+     * Changes the API user state to inactive, preventing the associated
+     * API key from being used for authentication.
+     *
+     * @generated from rpc meshtrade.iam.api_user.v1.APIUserService.DeactivateAPIUser
+     */
+    deactivateAPIUser: {
+        methodKind: "unary";
+        input: typeof DeactivateAPIUserRequestSchema;
+        output: typeof APIUserSchema;
+    };
+    /**
+     *
+     * Retrieves an API user using its API key hash.
+     *
+     * This method is used for authentication flows to lookup
+     * an API user based on the hash of their API key.
+     *
+     * @generated from rpc meshtrade.iam.api_user.v1.APIUserService.GetAPIUserByKeyHash
+     */
+    getAPIUserByKeyHash: {
+        methodKind: "unary";
+        input: typeof GetAPIUserByKeyHashRequestSchema;
+        output: typeof APIUserSchema;
+    };
+}>;

package/dist/meshtrade/iam/api_user/v1/service_pb.js

@@ -0,0 +1,86 @@
+"use strict";
+// @generated by protoc-gen-es v2.10.1 with parameter "target=ts"
+// @generated from file meshtrade/iam/api_user/v1/service.proto (package meshtrade.iam.api_user.v1, syntax proto3)
+/* eslint-disable */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APIUserService = exports.DeactivateAPIUserRequestSchema = exports.ActivateAPIUserRequestSchema = exports.SearchAPIUsersResponseSchema = exports.SearchAPIUsersRequestSchema = exports.ListAPIUsersResponseSchema = exports.ListAPIUsersRequestSchema = exports.RevokeRolesFromAPIUserRequestSchema = exports.AssignRolesToAPIUserRequestSchema = exports.CreateAPIUserRequestSchema = exports.GetAPIUserByKeyHashRequestSchema = exports.GetAPIUserRequestSchema = exports.file_meshtrade_iam_api_user_v1_service = void 0;
+const codegenv2_1 = require("@bufbuild/protobuf/codegenv2");
+const validate_pb_1 = require("../../../../buf/validate/validate_pb");
+const api_user_pb_1 = require("./api_user_pb");
+const method_options_pb_1 = require("../../../option/method_options/v1/method_options_pb");
+/**
+ * Describes the file meshtrade/iam/api_user/v1/service.proto.
+ */
+exports.file_meshtrade_iam_api_user_v1_service = (0, codegenv2_1.fileDesc)("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", [validate_pb_1.file_buf_validate_validate, api_user_pb_1.file_meshtrade_iam_api_user_v1_api_user, method_options_pb_1.file_meshtrade_option_method_options_v1_method_options]);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.GetAPIUserRequest.
+ * Use `create(GetAPIUserRequestSchema)` to create a new message.
+ */
+exports.GetAPIUserRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 0);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.GetAPIUserByKeyHashRequest.
+ * Use `create(GetAPIUserByKeyHashRequestSchema)` to create a new message.
+ */
+exports.GetAPIUserByKeyHashRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 1);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.CreateAPIUserRequest.
+ * Use `create(CreateAPIUserRequestSchema)` to create a new message.
+ */
+exports.CreateAPIUserRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 2);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.AssignRolesToAPIUserRequest.
+ * Use `create(AssignRolesToAPIUserRequestSchema)` to create a new message.
+ */
+exports.AssignRolesToAPIUserRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 3);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.RevokeRolesFromAPIUserRequest.
+ * Use `create(RevokeRolesFromAPIUserRequestSchema)` to create a new message.
+ */
+exports.RevokeRolesFromAPIUserRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 4);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.ListAPIUsersRequest.
+ * Use `create(ListAPIUsersRequestSchema)` to create a new message.
+ */
+exports.ListAPIUsersRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 5);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.ListAPIUsersResponse.
+ * Use `create(ListAPIUsersResponseSchema)` to create a new message.
+ */
+exports.ListAPIUsersResponseSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 6);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.SearchAPIUsersRequest.
+ * Use `create(SearchAPIUsersRequestSchema)` to create a new message.
+ */
+exports.SearchAPIUsersRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 7);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.SearchAPIUsersResponse.
+ * Use `create(SearchAPIUsersResponseSchema)` to create a new message.
+ */
+exports.SearchAPIUsersResponseSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 8);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.ActivateAPIUserRequest.
+ * Use `create(ActivateAPIUserRequestSchema)` to create a new message.
+ */
+exports.ActivateAPIUserRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 9);
+/**
+ * Describes the message meshtrade.iam.api_user.v1.DeactivateAPIUserRequest.
+ * Use `create(DeactivateAPIUserRequestSchema)` to create a new message.
+ */
+exports.DeactivateAPIUserRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_meshtrade_iam_api_user_v1_service, 10);
+/**
+ *
+ * APIUserService manages API user lifecycle and authentication credentials.
+ *
+ * API users represent automated clients that can authenticate with API keys
+ * and perform operations within a specific group context. Each API user has:
+ * - A unique identifier and display name
+ * - Group ownership for resource isolation
+ * - Role-based permissions for authorization
+ * - Active/inactive state for access control
+ *
+ * All operations require IAM domain permissions and operate within
+ * the authenticated group context.
+ *
+ * @generated from service meshtrade.iam.api_user.v1.APIUserService
+ */
+exports.APIUserService = (0, codegenv2_1.serviceDesc)(exports.file_meshtrade_iam_api_user_v1_service, 0);