@milaboratories/pl-client 3.15.0 → 3.16.1

package/dist/proto-rest/plapi.d.ts

@@ -585,7 +585,9 @@ export interface components {
        */
       clientSecret: string;
     };
-    AuthAPI_BeginSSOLogin_Request: Record<string, never>;
+    AuthAPI_BeginSSOLogin_Request: {
+      idp: string;
+    };
     AuthAPI_BeginSSOLogin_Response: {
       publicPkce: components["schemas"]["AuthAPI_BeginSSOLogin_PublicPKCE"];
     };
@@ -639,8 +641,10 @@ export interface components {
        *      instance. Unique across the entire server.
        */
       id: string;
-      /** @description description is the human-readable label in case we'd like to render it in UI. */
+      /** @description description is the long-form human-readable text a client may render alongside the title, for example in a tooltip or under the button. */
       description: string;
+      /** @description title is the short human-readable label a client renders for this method, for example on the sign-in button. Always set. */
+      title: string;
       basic: components["schemas"]["AuthAPI_ListMethods_BasicAuthMethod"];
       token: components["schemas"]["AuthAPI_ListMethods_TokenAuthMethod"];
       sso: components["schemas"]["AuthAPI_ListMethods_SSOAuthMethod"];
@@ -671,6 +675,7 @@ export interface components {
     AuthAPI_Login_BasicCredentials: {
       login: string;
       password: string;
+      idp: string;
     };
     AuthAPI_Login_Request: {
       basic: components["schemas"]["AuthAPI_Login_BasicCredentials"];
@@ -694,6 +699,7 @@ export interface components {
     AuthAPI_Login_SSOCredentials: {
       /** Format: bytes */
       tokenResponse: string;
+      idp: string;
     };
     /**
      * @description TokenCredentials accepts any opaque bearer-style string: a controller

package/dist/proto-rest/plapi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plapi.d.ts","names":[],"sources":["../../src/proto-rest/plapi.ts"],"mappings":";;;;;iBAKiB;EACf;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;;IAGF,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;;IAOA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN,QAAQ;IACR;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN,QAAQ;IACR;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;IAEA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;;;;;;;;;;;;IAiBA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;;IAGF,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;;IAGF,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;IAEA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;;iBAIa;EACf;IACE;MACE;;MAEA;;;;;;;;;MASA;;IAEF,+BAA+B;IAC/B;MACE,YAAY;;IAEd;MACE;;MAEA;;IAEF;MACE;;;;;MAKA;;MAEA;;IAEF,gCAAgC;IAChC;;MAEE;;MAEA;;IAEF;MACE;MACA;;IAEF;MACE,UAAU;;IAEZ;MACE;;MAEA;MACA;MACA,aAAa;;MAEb;;IAEF,8BAA8B;;IAE9B;MACE;;IAEF,qCAAqC;IACrC;;;;;MAKE;;MAEA;MACA,OAAO;MACP,OAAO;MACP,KAAK;;IAEP;MACE,SAAS;;;;;;;IAOX;MACE;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;MAEA;MACA;;IAEF,qCAAqC;IACrC;MACE;MACA;;IAEF;MACE,OAAO;MACP,OAAO;MACP,KAAK;MACL;;MAEA;;IAEF;MACE;;MAEA;;MAEA;;;;;;IAMF;;MAEE;;;;;;IAMF;;MAEE;;IAEF;MACE;;MAEA;MACA,OAAO;;IAET;MACE;;MAEA;;IAEF;MACE;MACA;;IAEF;MACE;;MAEA;;MAEA;;IAEF;MACE;;MAEA;MACA;;IAEF,+BAA+B;IAC/B;MACE;;MAEA;;IAEF;MACE;;MAEA;;IAEF;MACE;MACA;MACA;;IAEF;MACE;MACA;;IAEF,2CAA2C;IAC3C;MACE;;IAEF,sCAAsC;IACtC;MACE;MACA;;IAEF;MACE;;IAEF;MACE;;IAEF,mCAAmC;IACnC;MACE;;IAEF;MACE;;IAEF;MACE;;MAEA;;IAEF;MACE,eAAe;;IAEjB;MACE;MACA;;IAEF;MACE;;IAEF;MACE;;IAEF;MACE,YAAY;;IAEd;MACE;MACA;SACG,cAAc;;MAEjB,iBAAiB;;IAEnB;MACE;MACA;;IAEF;MACE;;IAEF,6CAA6C;IAC7C;MACE,UAAU;;IAEZ,oCAAoC;IACpC;MACE;MACA;SACG,cAAc;;MAEjB,iBAAiB;;IAEnB,+BAA+B;IAC/B;MACE;MACA;SACG;;;IAGL,4CAA4C;IAC5C;;MAEE,IAAI;;MAEJ;MACA,UAAU;;;;;;;;MAQV;;;;;;MAMA;;;;;MAKA;;MAEA;;;;;MAKA;;;;;MAKA;;IAEF;MACE;;MAEA;MACA;;IAEF;;MAEE;MACA;;;IAGF;;MAEE;;OAEC;;IAEH;MACE;;MAEA;MACA;MACA;;IAEF;;MAEE;;IAEF;MACE;;MAEA;;MAEA;;IAEF,iCAAiC;IACjC;MACE;;MAEA;;MAEA;MACA;MACA;;IAEF,gCAAgC;IAChC;MACE;MACA;MACA;;IAEF;;;;;MAKE;;;;;;MAMA,kBAAkB;MAClB;;IAEF;MACE;MACA;MACA;;MAEA;MACA;;IAEF;;MAEE;MACA;;;;;MAKA;;IAEF;MACE;MACA;;MAEA;;;;;;;MAOA;MACA;MACA;MACA;;;;;;;;;;;;;;;;;;;MAmBA;;IAEF;MACE,OAAO;;IAET;MACE;MACA;MACA;MACA,cAAc;MACd,QAAQ;MACR;SACG,cAAc;;MAEjB,SAAS;MACT;MACA,QAAQ;;IAEV;MACE;;MAEA;;IAEF;MACE,eAAe;;IAEjB;MACE,cAAc;MACd;MACA,aAAa;MACb,SAAS;;IAEX;MACE;MACA;MACA;MACA;MACA;MACA;MACA;;MAEA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;IAEF;MACE;SACG;;;IAGL;MACE;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;IAEF;MACE,KAAK;MACL,KAAK;;IAEP;MACE;MACA;MACA,cAAc;MACd;;IAEF;MACE,MAAM;MACN,QAAQ;;MAER,aAAa;MACb;MACA;;IAEF;;;;;MAKE;;MAEA;MACA;;MAEA;MACA;;;;;MAKA;SACG;;MAEH;SACG;;;;;;MAMH;;IAEF;MACE;MACA;;IAEF;MACE;;IAEF;MACE;MACA;SACG;;;;IAIL;;;;;MAKE;;MAEA;;MAEA,SAAS;;IAEX;MACE;MACA;MACA;;IAEF,uCAAuC;IACvC;MACE;MACA;;IAEF,uCAAuC;IACvC;MACE;;IAEF,qBAAqB;;EAEvB;EACA;EACA;EACA;EACA;;iBAGe;EACf;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB"}
+{"version":3,"file":"plapi.d.ts","names":[],"sources":["../../src/proto-rest/plapi.ts"],"mappings":";;;;;iBAKiB;EACf;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;;IAGF,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;;IAOA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN,QAAQ;IACR;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN,QAAQ;IACR;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;IAEA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;IAMA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;;;;;;;;;;;;;;;;IAiBA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;;IAGF,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;;IAGF,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;IAEA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;EAEF;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;IACA,MAAM;IACN;IACA;IACA;IACA;IACA;;;iBAIa;EACf;IACE;MACE;;MAEA;;;;;;;;;MASA;;IAEF;MACE;;IAEF;MACE,YAAY;;IAEd;MACE;;MAEA;;IAEF;MACE;;;;;MAKA;;MAEA;;IAEF,gCAAgC;IAChC;;MAEE;;MAEA;;IAEF;MACE;MACA;;IAEF;MACE,UAAU;;IAEZ;MACE;;MAEA;MACA;MACA,aAAa;;MAEb;;IAEF,8BAA8B;;IAE9B;MACE;;IAEF,qCAAqC;IACrC;;;;;MAKE;;MAEA;;MAEA;MACA,OAAO;MACP,OAAO;MACP,KAAK;;IAEP;MACE,SAAS;;;;;;;IAOX;MACE;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;MAEA;MACA;;IAEF,qCAAqC;IACrC;MACE;MACA;MACA;;IAEF;MACE,OAAO;MACP,OAAO;MACP,KAAK;MACL;;MAEA;;IAEF;MACE;;MAEA;;MAEA;;;;;;IAMF;;MAEE;MACA;;;;;;IAMF;;MAEE;;IAEF;MACE;;MAEA;MACA,OAAO;;IAET;MACE;;MAEA;;IAEF;MACE;MACA;;IAEF;MACE;;MAEA;;MAEA;;IAEF;MACE;;MAEA;MACA;;IAEF,+BAA+B;IAC/B;MACE;;MAEA;;IAEF;MACE;;MAEA;;IAEF;MACE;MACA;MACA;;IAEF;MACE;MACA;;IAEF,2CAA2C;IAC3C;MACE;;IAEF,sCAAsC;IACtC;MACE;MACA;;IAEF;MACE;;IAEF;MACE;;IAEF,mCAAmC;IACnC;MACE;;IAEF;MACE;;IAEF;MACE;;MAEA;;IAEF;MACE,eAAe;;IAEjB;MACE;MACA;;IAEF;MACE;;IAEF;MACE;;IAEF;MACE,YAAY;;IAEd;MACE;MACA;SACG,cAAc;;MAEjB,iBAAiB;;IAEnB;MACE;MACA;;IAEF;MACE;;IAEF,6CAA6C;IAC7C;MACE,UAAU;;IAEZ,oCAAoC;IACpC;MACE;MACA;SACG,cAAc;;MAEjB,iBAAiB;;IAEnB,+BAA+B;IAC/B;MACE;MACA;SACG;;;IAGL,4CAA4C;IAC5C;;MAEE,IAAI;;MAEJ;MACA,UAAU;;;;;;;;MAQV;;;;;;MAMA;;;;;MAKA;;MAEA;;;;;MAKA;;;;;MAKA;;IAEF;MACE;;MAEA;MACA;;IAEF;;MAEE;MACA;;;IAGF;;MAEE;;OAEC;;IAEH;MACE;;MAEA;MACA;MACA;;IAEF;;MAEE;;IAEF;MACE;;MAEA;;MAEA;;IAEF,iCAAiC;IACjC;MACE;;MAEA;;MAEA;MACA;MACA;;IAEF,gCAAgC;IAChC;MACE;MACA;MACA;;IAEF;;;;;MAKE;;;;;;MAMA,kBAAkB;MAClB;;IAEF;MACE;MACA;MACA;;MAEA;MACA;;IAEF;;MAEE;MACA;;;;;MAKA;;IAEF;MACE;MACA;;MAEA;;;;;;;MAOA;MACA;MACA;MACA;;;;;;;;;;;;;;;;;;;MAmBA;;IAEF;MACE,OAAO;;IAET;MACE;MACA;MACA;MACA,cAAc;MACd,QAAQ;MACR;SACG,cAAc;;MAEjB,SAAS;MACT;MACA,QAAQ;;IAEV;MACE;;MAEA;;IAEF;MACE,eAAe;;IAEjB;MACE,cAAc;MACd;MACA,aAAa;MACb,SAAS;;IAEX;MACE;MACA;MACA;MACA;MACA;MACA;MACA;;MAEA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;IAEF;MACE;SACG;;;IAGL;MACE;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;IAEF;MACE,KAAK;MACL,KAAK;;IAEP;MACE;MACA;MACA,cAAc;MACd;;IAEF;MACE,MAAM;MACN,QAAQ;;MAER,aAAa;MACb;MACA;;IAEF;;;;;MAKE;;MAEA;MACA;;MAEA;MACA;;;;;MAKA;SACG;;MAEH;SACG;;;;;;MAMH;;IAEF;MACE;MACA;;IAEF;MACE;;IAEF;MACE;MACA;SACG;;;;IAIL;;;;;MAKE;;MAEA;;MAEA,SAAS;;IAEX;MACE;MACA;MACA;;IAEF,uCAAuC;IACvC;MACE;MACA;;IAEF,uCAAuC;IACvC;MACE;;IAEF,qBAAqB;;EAEvB;EACA;EACA;EACA;EACA;;iBAGe;EACf;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;IACA;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB;;;;;EAK5B;IACE;MACE;MACA;MACA;MACA;;IAEF;MACE;QACE,oBAAoB;;;IAGxB;;MAEE;QACE;WACG;;QAEH;UACE,oBAAoB;;;;MAIxB;QACE;WACG;;QAEH;UACE,oBAAoB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@milaboratories/pl-client",
-  "version": "3.15.0",
+  "version": "3.16.1",
   "description": "New TS/JS client for Platform API",
   "files": [
     "./dist/**/*",
@@ -31,8 +31,8 @@
     "utility-types": "^3.11.0",
     "yaml": "^2.8.0",
     "@milaboratories/pl-model-common": "1.48.0",
-    "@milaboratories/pl-http": "1.2.4",
-    "@milaboratories/ts-helpers": "1.8.6"
+    "@milaboratories/ts-helpers": "1.8.6",
+    "@milaboratories/pl-http": "1.2.4"
   },
   "devDependencies": {
     "@protobuf-ts/plugin": "2.11.1",

package/src/core/capabilities.ts

@@ -18,6 +18,10 @@ export type BackendCapability =
   | "auth:v2"
   | "treeFilter:v2"
   | "wasm:v1"
+  // Advertised only where the deployment actually has scratch storage, not merely where the
+  // build understands a 'scratchFreeSpace' request: a client that sees this stops arranging
+  // its own temporary storage. Off unless pl was started with --has-scratch-space.
+  | "scratchSpace:v1"
   // Project-sharing capability tokens.
   | "crossTreeRefs:v1" // cross-color field attach (accept a foreign-colored shared envelope)
   | "userListing:v1" // list users for the recipient picker

package/src/core/ll_client.ts

@@ -645,15 +645,19 @@ export class LLPlClient implements WireClientProviderFactory {
     }
   }
 
-  /** Login via username/password. Returns a fresh JWT. Backend creates a new session per call. */
+  /** Login via username/password. Returns a fresh JWT. Backend creates a new session per call.
+   * `opts.idP` names the advertised login method to route to; omitted, the backend keeps its
+   * current first-match behaviour. */
   public async loginBasic(
     user: string,
     password: string,
-    opts: { ttlSeconds?: bigint; role?: AuthAPI_Role } = {},
+    opts: { ttlSeconds?: bigint; role?: AuthAPI_Role; idP?: string } = {},
   ): Promise<string> {
     const cl = this.clientProvider.get();
     const ttl = opts.ttlSeconds ?? BigInt(this.conf.authTTLSeconds);
     const role = opts.role ?? AuthAPI_Role.UNSPECIFIED;
+    const basic =
+      opts.idP === undefined ? { login: user, password } : { login: user, password, idp: opts.idP };
 
     if (cl instanceof GrpcPlApiClient) {
       return (
@@ -661,7 +665,7 @@ export class LLPlClient implements WireClientProviderFactory {
           {
             credentials: {
               oneofKind: "basic",
-              basic: { login: user, password },
+              basic,
             },
             expiration: { seconds: ttl, nanos: 0 },
             requestedRole: role,
@@ -674,7 +678,7 @@ export class LLPlClient implements WireClientProviderFactory {
         // openapi-typescript generated all body fields as required, but Login.Request
         // has a credentials oneof — only one of `basic`/`token` is sent. Cast around it.
         body: {
-          basic: { login: user, password },
+          basic,
           expiration: `${ttl}s`,
           requestedRole: role,
         } as any,
@@ -723,16 +727,19 @@ export class LLPlClient implements WireClientProviderFactory {
   }
 
   /** Login via SSO: forwards the raw IdP /token JSON body to the backend.
-   * Backend validates signature + nonce + audience and mints a Platforma JWT. */
-  public async loginSSO(tokenResponse: Uint8Array): Promise<string> {
+   * Backend validates signature + nonce + audience and mints a Platforma JWT. `idP` names the
+   * advertised login method to route to; omitted, the backend keeps its current first-match
+   * behaviour. */
+  public async loginSSO(tokenResponse: Uint8Array, idP?: string): Promise<string> {
     const cl = this.clientProvider.get();
+    const sso = idP === undefined ? { tokenResponse } : { tokenResponse, idp: idP };
     if (cl instanceof GrpcPlApiClient) {
       return (
         await cl.login(
           {
             credentials: {
               oneofKind: "sso",
-              sso: { tokenResponse },
+              sso,
             },
           },
           { timeout: DEFAULT_LOGIN_TIMEOUT },
@@ -741,7 +748,7 @@ export class LLPlClient implements WireClientProviderFactory {
     } else {
       const resp = cl.POST("/v1/auth/login", {
         body: {
-          sso: { tokenResponse: Buffer.from(tokenResponse).toString("base64") },
+          sso: { ...sso, tokenResponse: Buffer.from(tokenResponse).toString("base64") },
         } as any,
       });
       return notEmpty((await resp).data, "REST: empty response for SSO login request").token;
@@ -750,11 +757,16 @@ export class LLPlClient implements WireClientProviderFactory {
 
   /** Request a one-time PKCE nonce + its expiry from the backend. The desktop is
    * expected to place the nonce verbatim into the OIDC auth-request before
-   * redirecting to the IdP; the backend enforces the expiry on {@link loginSSO}. */
-  public async beginSSOLogin(): Promise<{ nonce: string; expiresAt: Date; clientSecret?: string }> {
+   * redirecting to the IdP; the backend enforces the expiry on {@link loginSSO}. `idP` names the
+   * advertised login method to route to; omitted, the backend keeps its current first-match
+   * behaviour. */
+  public async beginSSOLogin(
+    idP?: string,
+  ): Promise<{ nonce: string; expiresAt: Date; clientSecret?: string }> {
     const cl = this.clientProvider.get();
+    const request = idP === undefined ? {} : { idp: idP };
     if (cl instanceof GrpcPlApiClient) {
-      const resp = (await cl.beginSSOLogin({}).response).flow;
+      const resp = (await cl.beginSSOLogin(request).response).flow;
       if (resp.oneofKind !== "publicPkce") {
         throw new Error(`beginSSOLogin: unsupported flow ${resp.oneofKind}`);
       }
@@ -766,7 +778,7 @@ export class LLPlClient implements WireClientProviderFactory {
       };
     } else {
       const wsResponse = notEmpty(
-        (await cl.POST("/v1/auth/sso/begin-login", { body: {} })).data,
+        (await cl.POST("/v1/auth/sso/begin-login", { body: request as any })).data,
         "REST: empty response for beginSSOLogin request",
       );
       const pkce = notEmpty(wsResponse.publicPkce, "REST: missing publicPkce in beginSSOLogin");
@@ -955,7 +967,7 @@ export class LLPlClient implements WireClientProviderFactory {
       // while protobuf-ts models it as a discriminated union. Reshape per item.
       resp = {
         methods: (wsResponse.methods ?? []).map((m): grpcTypes.AuthAPI_ListMethods_MethodInfo => {
-          const base = { id: m.id, description: m.description };
+          const base = { id: m.id, description: m.description, title: m.title };
           if (m.basic !== undefined) {
             return { ...base, method: { oneofKind: "basic", basic: m.basic } };
           }

package/src/core/transaction.ts

@@ -1238,6 +1238,8 @@ export class PlTransaction {
         includeKv: opts?.includeKv ?? false,
         maxDepth: opts?.maxDepth,
         showSoftDeletes: false,
+        // Empty token requests the full tree — this call has no continuation to resume.
+        changedSinceToken: new Uint8Array(0),
       },
     });
 

package/src/core/unauth_client.test.ts

@@ -1,6 +1,6 @@
 import { UnauthenticatedPlClient } from "./unauth_client";
 import { getTestConfig, plAddressToTestConfig } from "../test/test_config";
-import { UnauthenticatedError } from "./errors";
+import { UnauthenticatedError, isUnimplementedError } from "./errors";
 import { test, expect } from "vitest";
 
 test("ping test", async () => {
@@ -30,3 +30,71 @@ test("wrong login", async () => {
     UnauthenticatedError,
   );
 });
+
+// --- multi-method login ---
+//
+// These cases assume the backend is configured with (at least) two htpasswd
+// login methods whose config `name` values differ but which both accept the
+// same PL_TEST_USER/PL_TEST_PASSWORD credentials — the id
+// is the only thing distinguishing them.
+
+/** Runs every multi-method case against one client, gRPC or REST alike. */
+async function runMultiMethodCases(address: string) {
+  const testConfig = getTestConfig();
+  if (testConfig.test_user === undefined || testConfig.test_password === undefined) {
+    console.log("skipped");
+    return;
+  }
+  const client = await UnauthenticatedPlClient.build(plAddressToTestConfig(address));
+
+  const basicMethods = client.loginMethods().filter((m) => m.kind === "basic");
+  expect(basicMethods.length).toBeGreaterThanOrEqual(2);
+  // The driver's fixed description is the same string on every htpasswd method — only
+  // the id tells the two apart.
+  expect(basicMethods[0].description).toBe(basicMethods[1].description);
+  expect(basicMethods[0].id).not.toBe(basicMethods[1].id);
+
+  expect(client.supportedAuthSchemes.basic).toBe(true);
+
+  const secondMethod = basicMethods[1];
+  const picked = await client.login(
+    testConfig.test_user,
+    testConfig.test_password,
+    secondMethod.id,
+  );
+  expect(picked.jwtToken).not.toBe("");
+
+  const unpicked = await client.login(testConfig.test_user, testConfig.test_password);
+  expect(unpicked.jwtToken).not.toBe("");
+
+  await expect(
+    client.login(testConfig.test_user, testConfig.test_password, "no-such-method"),
+  ).rejects.toThrow();
+}
+
+// Skipped: this environment's backend cannot be configured with two htpasswd login methods.
+test.skip("loginMethods and login address two identically-described htpasswd methods by id (gRPC)", async () => {
+  const testConfig = getTestConfig();
+  await runMultiMethodCases(testConfig.address);
+});
+
+// Skipped: this environment's backend cannot be configured with two htpasswd login methods.
+test.skip("loginMethods and login address two identically-described htpasswd methods by id (REST)", async () => {
+  const testConfig = getTestConfig();
+  const separator = testConfig.address.includes("?") ? "&" : "?";
+  await runMultiMethodCases(`${testConfig.address}${separator}wire-protocol=rest`);
+});
+
+test("beginSSOLogin rejects an id no configured method carries, and reports no SSO configured when unpicked", async () => {
+  const testConfig = getTestConfig();
+  const client = await UnauthenticatedPlClient.build(plAddressToTestConfig(testConfig.address));
+
+  await expect(client.beginSSOLogin("no-such-method")).rejects.toThrow();
+
+  try {
+    await client.beginSSOLogin();
+    throw new Error("expected beginSSOLogin() to reject on a server with no SSO method configured");
+  } catch (e) {
+    expect(isUnimplementedError(e)).toBe(true);
+  }
+});

package/src/core/unauth_client.ts

@@ -18,6 +18,7 @@ export type SSOFlowType = "public_pkce";
  * may surface (`userIdClaim`, `groupsClaim`). */
 export type SSOAuthMethod = {
   id: string;
+  title: string;
   description: string;
   issuer: string;
   clientId: string;
@@ -48,6 +49,14 @@ export type SSOLoginAttempt = {
   clientSecret?: string;
 };
 
+/** One login method the backend advertises, of any kind. Every advertised method keeps its own
+ * `id`, `title`, `description` and kind. Two same-kind methods, such as two LDAP directories, are
+ * two entries a caller can name apart and never collapsed into one. See {@link UnauthenticatedPlClient.loginMethods}. */
+export type LoginMethod =
+  | { kind: "basic"; id: string; title: string; description: string }
+  | { kind: "token"; id: string; title: string; description: string }
+  | ({ kind: "sso" } & SSOAuthMethod);
+
 /** Primarily used for initial authentication (login) */
 export class UnauthenticatedPlClient {
   public readonly ll: LLPlClient;
@@ -82,7 +91,9 @@ export class UnauthenticatedPlClient {
 
   /** Classifies the advertised authentication methods by credential scheme.
    * On legacy backends (no auth:v2) the typed oneof is empty; callers fall through to {@link login}
-   * which uses the legacy GetJWTToken path. SSO is surfaced via {@link ssoConfig}, not here. */
+   * which uses the legacy GetJWTToken path.
+   * @deprecated collapses every basic-kind method into one boolean; use {@link loginMethods} to
+   * see each advertised method's own id. `login()` still reads this to choose the credential path. */
   public get supportedAuthSchemes(): { basic: boolean; token: boolean } {
     const result = { basic: false, token: false };
     for (const m of this.ll.authMethodsSync.methods) {
@@ -92,8 +103,37 @@ export class UnauthenticatedPlClient {
     return result;
   }
 
+  /** Builds the {@link SSOAuthMethod} projection an advertised SSO entry carries, or `undefined`
+   * for a flow no client here can drive. Shared by {@link ssoConfig} and {@link loginMethods},
+   * which each apply their own rule for an unsupported flow. */
+  private toSSOAuthMethod(
+    method: AuthAPI_ListMethods_Response["methods"][number],
+  ): SSOAuthMethod | undefined {
+    if (method.method.oneofKind !== "sso") return undefined;
+    const sso = method.method.sso;
+    if (sso.flowType !== AuthAPI_ListMethods_SSOAuthMethod_FlowType.PUBLIC_PKCE) return undefined;
+    return {
+      id: method.id,
+      title: method.title || method.description || method.id,
+      description: method.description,
+      issuer: sso.issuer,
+      clientId: sso.clientId,
+      scopes: sso.scopes,
+      resource: sso.resource,
+      prompt: sso.prompt,
+      redirectPorts: sso.redirectPorts,
+      subjectTokenSource: sso.subjectTokenSource,
+      userIdClaim: sso.userIdClaim,
+      groupsClaim: sso.groupsClaim,
+      accessType: sso.accessType || undefined,
+      flowType: "public_pkce",
+    };
+  }
+
   /** Projection of the first advertised SSO method, derived from {@link authMethodsSync}.
-   * v1: at most one SSO method per deployment, so callers do not need to discriminate. */
+   * v1: at most one SSO method per deployment, so callers do not need to discriminate.
+   * @deprecated surfaces only the first advertised SSO method; use {@link loginMethods} to see
+   * every advertised method, of every kind. */
   public ssoConfig(): SSOAuthMethod | undefined {
     for (const method of this.ll.authMethodsSync.methods) {
       if (method.method.oneofKind !== "sso") continue;
@@ -101,42 +141,65 @@ export class UnauthenticatedPlClient {
       if (sso.flowType !== AuthAPI_ListMethods_SSOAuthMethod_FlowType.PUBLIC_PKCE) {
         throw new Error(`ssoConfig: unsupported SSO flow type ${sso.flowType}`);
       }
-      return {
-        id: method.id,
-        description: method.description,
-        issuer: sso.issuer,
-        clientId: sso.clientId,
-        scopes: sso.scopes,
-        resource: sso.resource,
-        prompt: sso.prompt,
-        redirectPorts: sso.redirectPorts,
-        subjectTokenSource: sso.subjectTokenSource,
-        userIdClaim: sso.userIdClaim,
-        groupsClaim: sso.groupsClaim,
-        accessType: sso.accessType || undefined,
-        flowType: "public_pkce",
-      };
+      return this.toSSOAuthMethod(method);
     }
     return undefined;
   }
 
-  /** Login with username+password.
+  /** Every login method the backend advertises, of every kind, in advertised order, each
+   * keeping its own `id`, `title`, `description` and kind. An entry with no usable method arm, or an
+   * SSO entry whose flow no client here can drive, is dropped rather than failing the whole
+   * list, which is why this accessor skips where {@link ssoConfig} throws. */
+  public loginMethods(): LoginMethod[] {
+    const picked: LoginMethod[] = [];
+    for (const method of this.ll.authMethodsSync.methods) {
+      switch (method.method.oneofKind) {
+        case "basic":
+        case "token":
+          picked.push({
+            kind: method.method.oneofKind,
+            id: method.id,
+            title: method.title || method.description || method.id,
+            description: method.description,
+          });
+          break;
+        case "sso": {
+          const sso = this.toSSOAuthMethod(method);
+          if (sso !== undefined) picked.push({ kind: "sso", ...sso });
+          break;
+        }
+        default:
+          // No arm at all — a legacy backend advertising nothing pickable.
+          break;
+      }
+    }
+    return picked;
+  }
+
+  /** Login with username and password.
    *
-   * On auth:v2 backends the client inspects the advertised AuthMethods:
-   *   - if basic auth is offered, sends {@link LLPlClient.loginBasic};
-   *   - if only token auth is offered, treats `password` as an opaque bearer token and
-   *     sends {@link LLPlClient.loginWithToken} (so deployments configured for static-token
-   *     auth still log in without the caller switching methods).
+   * Routes to {@link LLPlClient.loginBasic} or {@link LLPlClient.loginWithToken} based on the
+   * advertised method `idP` names. On legacy backends, uses GetJWTToken with Basic header.
    *
-   * On legacy backends (no auth:v2) it falls through to GetJWTToken with the Basic header,
-   * preserving original behavior. */
-  public async login(user: string, password: string): Promise<AuthInformation> {
+   * `idP` names the advertised method. A named basic-kind method routes to the basic branch;
+   * a named token-kind method routes to the token branch even when the backend also advertises
+   * a basic method — the token wire carries no selector, so the id itself is dropped there and
+   * only the branch choice is kept. Omitted, or naming no advertised method, falls back to
+   * today's first-match behavior: basic wins over token when both are advertised. */
+  public async login(user: string, password: string, idP?: string): Promise<AuthInformation> {
     try {
       let token: string;
       if (this.ll.hasCapability("auth:v2")) {
         const schemes = this.supportedAuthSchemes;
-        if (schemes.basic) {
-          token = await this.ll.loginBasic(user, password);
+        const namedKind =
+          idP === undefined ? undefined : this.loginMethods().find((m) => m.id === idP)?.kind;
+        if (namedKind === "token") {
+          token = await this.ll.loginWithToken(password);
+        } else if (schemes.basic) {
+          token =
+            idP === undefined
+              ? await this.ll.loginBasic(user, password)
+              : await this.ll.loginBasic(user, password, { idP });
         } else if (schemes.token) {
           token = await this.ll.loginWithToken(password);
         } else {
@@ -157,9 +220,12 @@ export class UnauthenticatedPlClient {
   }
 
   /** Request fresh server-issued login material. v1 only emits the public-PKCE flow;
-   * desktop MUST place the returned `nonce` verbatim into the OIDC auth-request. */
-  public async beginSSOLogin(): Promise<SSOLoginAttempt> {
-    const attempt = await this.ll.beginSSOLogin();
+   * desktop MUST place the returned `nonce` verbatim into the OIDC auth-request. `idP` names
+   * the advertised SSO method to route to; omitted, the backend keeps its current first-match
+   * behaviour. */
+  public async beginSSOLogin(idP?: string): Promise<SSOLoginAttempt> {
+    const attempt =
+      idP === undefined ? await this.ll.beginSSOLogin() : await this.ll.beginSSOLogin(idP);
     return {
       flow: "public_pkce",
       nonce: attempt.nonce,
@@ -168,10 +234,18 @@ export class UnauthenticatedPlClient {
     };
   }
 
-  /** Forward the verbatim IdP `/token` response body and receive a Platforma JWT. */
-  public async loginSSO(payload: { tokenResponse: Uint8Array }): Promise<AuthInformation> {
+  /** Forward the verbatim IdP `/token` response body and receive a Platforma JWT. `idP` names
+   * the advertised SSO method to route to; omitted, the backend keeps its current first-match
+   * behaviour. */
+  public async loginSSO(payload: {
+    tokenResponse: Uint8Array;
+    idP?: string;
+  }): Promise<AuthInformation> {
     try {
-      const jwtToken = await this.ll.loginSSO(payload.tokenResponse);
+      const jwtToken =
+        payload.idP === undefined
+          ? await this.ll.loginSSO(payload.tokenResponse)
+          : await this.ll.loginSSO(payload.tokenResponse, payload.idP);
       if (jwtToken === "") throw new Error("empty token");
       return { jwtToken };
     } catch (e: any) {