@opentdf/sdk 0.4.0-beta.19 → 0.4.0-beta.23

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (95) hide show
  1. package/dist/cjs/src/auth/oidc-clientcredentials-provider.js +4 -2
  2. package/dist/cjs/src/auth/oidc-externaljwt-provider.js +5 -3
  3. package/dist/cjs/src/auth/oidc-refreshtoken-provider.js +5 -3
  4. package/dist/cjs/src/auth/oidc.js +9 -8
  5. package/dist/cjs/src/auth/providers.js +7 -1
  6. package/dist/cjs/src/opentdf.js +3 -1
  7. package/dist/cjs/src/platform/entityresolution/entity_resolution_pb.js +1 -1
  8. package/dist/cjs/src/platform/policy/attributes/attributes_pb.js +2 -2
  9. package/dist/cjs/src/platform/policy/kasregistry/key_access_server_registry_pb.js +36 -5
  10. package/dist/cjs/src/platform/policy/namespaces/namespaces_pb.js +2 -3
  11. package/dist/cjs/src/platform/policy/objects_pb.js +85 -42
  12. package/dist/cjs/src/platform/policy/registeredresources/registered_resources_pb.js +20 -15
  13. package/dist/cjs/src/platform/policy/resourcemapping/resource_mapping_pb.js +2 -3
  14. package/dist/cjs/src/platform/policy/subjectmapping/subject_mapping_pb.js +2 -3
  15. package/dist/cjs/src/platform/policy/unsafe/unsafe_pb.js +2 -4
  16. package/dist/cjs/src/policy/granter.js +75 -48
  17. package/dist/cjs/tdf3/src/client/builders.js +1 -1
  18. package/dist/cjs/tdf3/src/client/index.js +199 -53
  19. package/dist/cjs/tdf3/src/client/validation.js +3 -3
  20. package/dist/cjs/tdf3/src/tdf.js +8 -2
  21. package/dist/types/src/auth/oidc-clientcredentials-provider.d.ts +1 -1
  22. package/dist/types/src/auth/oidc-clientcredentials-provider.d.ts.map +1 -1
  23. package/dist/types/src/auth/oidc-externaljwt-provider.d.ts +1 -1
  24. package/dist/types/src/auth/oidc-externaljwt-provider.d.ts.map +1 -1
  25. package/dist/types/src/auth/oidc-refreshtoken-provider.d.ts +1 -1
  26. package/dist/types/src/auth/oidc-refreshtoken-provider.d.ts.map +1 -1
  27. package/dist/types/src/auth/oidc.d.ts +4 -0
  28. package/dist/types/src/auth/oidc.d.ts.map +1 -1
  29. package/dist/types/src/auth/providers.d.ts.map +1 -1
  30. package/dist/types/src/opentdf.d.ts.map +1 -1
  31. package/dist/types/src/platform/entityresolution/entity_resolution_pb.d.ts +4 -0
  32. package/dist/types/src/platform/entityresolution/entity_resolution_pb.d.ts.map +1 -1
  33. package/dist/types/src/platform/policy/attributes/attributes_pb.d.ts.map +1 -1
  34. package/dist/types/src/platform/policy/kasregistry/key_access_server_registry_pb.d.ts +181 -24
  35. package/dist/types/src/platform/policy/kasregistry/key_access_server_registry_pb.d.ts.map +1 -1
  36. package/dist/types/src/platform/policy/namespaces/namespaces_pb.d.ts.map +1 -1
  37. package/dist/types/src/platform/policy/objects_pb.d.ts +195 -27
  38. package/dist/types/src/platform/policy/objects_pb.d.ts.map +1 -1
  39. package/dist/types/src/platform/policy/registeredresources/registered_resources_pb.d.ts +67 -0
  40. package/dist/types/src/platform/policy/registeredresources/registered_resources_pb.d.ts.map +1 -1
  41. package/dist/types/src/platform/policy/resourcemapping/resource_mapping_pb.d.ts.map +1 -1
  42. package/dist/types/src/platform/policy/subjectmapping/subject_mapping_pb.d.ts.map +1 -1
  43. package/dist/types/src/platform/policy/unsafe/unsafe_pb.d.ts +0 -1
  44. package/dist/types/src/platform/policy/unsafe/unsafe_pb.d.ts.map +1 -1
  45. package/dist/types/src/policy/granter.d.ts +11 -6
  46. package/dist/types/src/policy/granter.d.ts.map +1 -1
  47. package/dist/types/tdf3/src/client/builders.d.ts +1 -0
  48. package/dist/types/tdf3/src/client/builders.d.ts.map +1 -1
  49. package/dist/types/tdf3/src/client/index.d.ts +11 -3
  50. package/dist/types/tdf3/src/client/index.d.ts.map +1 -1
  51. package/dist/types/tdf3/src/client/validation.d.ts +3 -3
  52. package/dist/types/tdf3/src/client/validation.d.ts.map +1 -1
  53. package/dist/types/tdf3/src/tdf.d.ts +1 -1
  54. package/dist/types/tdf3/src/tdf.d.ts.map +1 -1
  55. package/dist/web/src/auth/oidc-clientcredentials-provider.js +4 -2
  56. package/dist/web/src/auth/oidc-externaljwt-provider.js +5 -3
  57. package/dist/web/src/auth/oidc-refreshtoken-provider.js +5 -3
  58. package/dist/web/src/auth/oidc.js +9 -8
  59. package/dist/web/src/auth/providers.js +7 -1
  60. package/dist/web/src/opentdf.js +3 -1
  61. package/dist/web/src/platform/entityresolution/entity_resolution_pb.js +1 -1
  62. package/dist/web/src/platform/policy/attributes/attributes_pb.js +2 -2
  63. package/dist/web/src/platform/policy/kasregistry/key_access_server_registry_pb.js +34 -4
  64. package/dist/web/src/platform/policy/namespaces/namespaces_pb.js +2 -3
  65. package/dist/web/src/platform/policy/objects_pb.js +84 -41
  66. package/dist/web/src/platform/policy/registeredresources/registered_resources_pb.js +19 -14
  67. package/dist/web/src/platform/policy/resourcemapping/resource_mapping_pb.js +2 -3
  68. package/dist/web/src/platform/policy/subjectmapping/subject_mapping_pb.js +2 -3
  69. package/dist/web/src/platform/policy/unsafe/unsafe_pb.js +2 -4
  70. package/dist/web/src/policy/granter.js +75 -48
  71. package/dist/web/tdf3/src/client/builders.js +1 -1
  72. package/dist/web/tdf3/src/client/index.js +201 -56
  73. package/dist/web/tdf3/src/client/validation.js +3 -3
  74. package/dist/web/tdf3/src/tdf.js +8 -2
  75. package/package.json +1 -1
  76. package/src/auth/oidc-clientcredentials-provider.ts +4 -0
  77. package/src/auth/oidc-externaljwt-provider.ts +5 -1
  78. package/src/auth/oidc-refreshtoken-provider.ts +5 -1
  79. package/src/auth/oidc.ts +12 -7
  80. package/src/auth/providers.ts +6 -0
  81. package/src/opentdf.ts +2 -1
  82. package/src/platform/entityresolution/entity_resolution_pb.ts +4 -0
  83. package/src/platform/policy/attributes/attributes_pb.ts +1 -1
  84. package/src/platform/policy/kasregistry/key_access_server_registry_pb.ts +206 -28
  85. package/src/platform/policy/namespaces/namespaces_pb.ts +1 -2
  86. package/src/platform/policy/objects_pb.ts +248 -53
  87. package/src/platform/policy/registeredresources/registered_resources_pb.ts +80 -13
  88. package/src/platform/policy/resourcemapping/resource_mapping_pb.ts +1 -2
  89. package/src/platform/policy/subjectmapping/subject_mapping_pb.ts +1 -2
  90. package/src/platform/policy/unsafe/unsafe_pb.ts +1 -3
  91. package/src/policy/granter.ts +82 -56
  92. package/tdf3/src/client/builders.ts +1 -0
  93. package/tdf3/src/client/index.ts +278 -73
  94. package/tdf3/src/client/validation.ts +2 -2
  95. package/tdf3/src/tdf.ts +8 -1
@@ -14,7 +14,67 @@ import type { Message } from "@bufbuild/protobuf";
14
14
  * Describes the file policy/objects.proto.
15
15
  */
16
16
  export const file_policy_objects: GenFile = /*@__PURE__*/
17
- fileDesc("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", [file_buf_validate_validate, file_common_common, file_google_protobuf_wrappers]);
17
+ fileDesc("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", [file_buf_validate_validate, file_common_common, file_google_protobuf_wrappers]);
18
+
19
+ /**
20
+ * @generated from message policy.SimpleKasPublicKey
21
+ */
22
+ export type SimpleKasPublicKey = Message<"policy.SimpleKasPublicKey"> & {
23
+ /**
24
+ * @generated from field: policy.Algorithm algorithm = 1;
25
+ */
26
+ algorithm: Algorithm;
27
+
28
+ /**
29
+ * @generated from field: string kid = 2;
30
+ */
31
+ kid: string;
32
+
33
+ /**
34
+ * @generated from field: string pem = 3;
35
+ */
36
+ pem: string;
37
+ };
38
+
39
+ /**
40
+ * Describes the message policy.SimpleKasPublicKey.
41
+ * Use `create(SimpleKasPublicKeySchema)` to create a new message.
42
+ */
43
+ export const SimpleKasPublicKeySchema: GenMessage<SimpleKasPublicKey> = /*@__PURE__*/
44
+ messageDesc(file_policy_objects, 0);
45
+
46
+ /**
47
+ * @generated from message policy.SimpleKasKey
48
+ */
49
+ export type SimpleKasKey = Message<"policy.SimpleKasKey"> & {
50
+ /**
51
+ * The URL of the Key Access Server
52
+ *
53
+ * @generated from field: string kas_uri = 1;
54
+ */
55
+ kasUri: string;
56
+
57
+ /**
58
+ * The public key of the Key that belongs to the KAS
59
+ *
60
+ * @generated from field: policy.SimpleKasPublicKey public_key = 2;
61
+ */
62
+ publicKey?: SimpleKasPublicKey;
63
+
64
+ /**
65
+ * The ID of the Key Access Server
66
+ *
67
+ * @generated from field: string kas_id = 3;
68
+ */
69
+ kasId: string;
70
+ };
71
+
72
+ /**
73
+ * Describes the message policy.SimpleKasKey.
74
+ * Use `create(SimpleKasKeySchema)` to create a new message.
75
+ */
76
+ export const SimpleKasKeySchema: GenMessage<SimpleKasKey> = /*@__PURE__*/
77
+ messageDesc(file_policy_objects, 1);
18
78
 
19
79
  /**
20
80
  * @generated from message policy.KeyProviderConfig
@@ -48,7 +108,7 @@ export type KeyProviderConfig = Message<"policy.KeyProviderConfig"> & {
48
108
  * Use `create(KeyProviderConfigSchema)` to create a new message.
49
109
  */
50
110
  export const KeyProviderConfigSchema: GenMessage<KeyProviderConfig> = /*@__PURE__*/
51
- messageDesc(file_policy_objects, 0);
111
+ messageDesc(file_policy_objects, 2);
52
112
 
53
113
  /**
54
114
  * @generated from message policy.Namespace
@@ -96,9 +156,9 @@ export type Namespace = Message<"policy.Namespace"> & {
96
156
  /**
97
157
  * Keys for the namespace
98
158
  *
99
- * @generated from field: repeated policy.KasKey kas_keys = 7;
159
+ * @generated from field: repeated policy.SimpleKasKey kas_keys = 7;
100
160
  */
101
- kasKeys: KasKey[];
161
+ kasKeys: SimpleKasKey[];
102
162
  };
103
163
 
104
164
  /**
@@ -106,7 +166,7 @@ export type Namespace = Message<"policy.Namespace"> & {
106
166
  * Use `create(NamespaceSchema)` to create a new message.
107
167
  */
108
168
  export const NamespaceSchema: GenMessage<Namespace> = /*@__PURE__*/
109
- messageDesc(file_policy_objects, 1);
169
+ messageDesc(file_policy_objects, 3);
110
170
 
111
171
  /**
112
172
  * @generated from message policy.Attribute
@@ -165,9 +225,9 @@ export type Attribute = Message<"policy.Attribute"> & {
165
225
  /**
166
226
  * Keys associated with the attribute
167
227
  *
168
- * @generated from field: repeated policy.KasKey kas_keys = 9;
228
+ * @generated from field: repeated policy.SimpleKasKey kas_keys = 9;
169
229
  */
170
- kasKeys: KasKey[];
230
+ kasKeys: SimpleKasKey[];
171
231
 
172
232
  /**
173
233
  * Common metadata
@@ -182,7 +242,7 @@ export type Attribute = Message<"policy.Attribute"> & {
182
242
  * Use `create(AttributeSchema)` to create a new message.
183
243
  */
184
244
  export const AttributeSchema: GenMessage<Attribute> = /*@__PURE__*/
185
- messageDesc(file_policy_objects, 2);
245
+ messageDesc(file_policy_objects, 4);
186
246
 
187
247
  /**
188
248
  * @generated from message policy.Value
@@ -233,9 +293,14 @@ export type Value = Message<"policy.Value"> & {
233
293
  subjectMappings: SubjectMapping[];
234
294
 
235
295
  /**
236
- * @generated from field: repeated policy.KasKey kas_keys = 9;
296
+ * @generated from field: repeated policy.SimpleKasKey kas_keys = 9;
297
+ */
298
+ kasKeys: SimpleKasKey[];
299
+
300
+ /**
301
+ * @generated from field: repeated policy.ResourceMapping resource_mappings = 10;
237
302
  */
238
- kasKeys: KasKey[];
303
+ resourceMappings: ResourceMapping[];
239
304
 
240
305
  /**
241
306
  * Common metadata
@@ -250,7 +315,7 @@ export type Value = Message<"policy.Value"> & {
250
315
  * Use `create(ValueSchema)` to create a new message.
251
316
  */
252
317
  export const ValueSchema: GenMessage<Value> = /*@__PURE__*/
253
- messageDesc(file_policy_objects, 3);
318
+ messageDesc(file_policy_objects, 5);
254
319
 
255
320
  /**
256
321
  * An action an entity can take
@@ -304,7 +369,7 @@ export type Action = Message<"policy.Action"> & {
304
369
  * Use `create(ActionSchema)` to create a new message.
305
370
  */
306
371
  export const ActionSchema: GenMessage<Action> = /*@__PURE__*/
307
- messageDesc(file_policy_objects, 4);
372
+ messageDesc(file_policy_objects, 6);
308
373
 
309
374
  /**
310
375
  * @generated from enum policy.Action.StandardAction
@@ -336,7 +401,7 @@ export enum Action_StandardAction {
336
401
  * Describes the enum policy.Action.StandardAction.
337
402
  */
338
403
  export const Action_StandardActionSchema: GenEnum<Action_StandardAction> = /*@__PURE__*/
339
- enumDesc(file_policy_objects, 4, 0);
404
+ enumDesc(file_policy_objects, 6, 0);
340
405
 
341
406
  /**
342
407
  *
@@ -383,7 +448,7 @@ export type SubjectMapping = Message<"policy.SubjectMapping"> & {
383
448
  * Use `create(SubjectMappingSchema)` to create a new message.
384
449
  */
385
450
  export const SubjectMappingSchema: GenMessage<SubjectMapping> = /*@__PURE__*/
386
- messageDesc(file_policy_objects, 5);
451
+ messageDesc(file_policy_objects, 7);
387
452
 
388
453
  /**
389
454
  * *
@@ -423,7 +488,7 @@ export type Condition = Message<"policy.Condition"> & {
423
488
  * Use `create(ConditionSchema)` to create a new message.
424
489
  */
425
490
  export const ConditionSchema: GenMessage<Condition> = /*@__PURE__*/
426
- messageDesc(file_policy_objects, 6);
491
+ messageDesc(file_policy_objects, 8);
427
492
 
428
493
  /**
429
494
  * A collection of Conditions evaluated by the boolean_operator provided
@@ -449,7 +514,7 @@ export type ConditionGroup = Message<"policy.ConditionGroup"> & {
449
514
  * Use `create(ConditionGroupSchema)` to create a new message.
450
515
  */
451
516
  export const ConditionGroupSchema: GenMessage<ConditionGroup> = /*@__PURE__*/
452
- messageDesc(file_policy_objects, 7);
517
+ messageDesc(file_policy_objects, 9);
453
518
 
454
519
  /**
455
520
  * A collection of Condition Groups
@@ -470,7 +535,7 @@ export type SubjectSet = Message<"policy.SubjectSet"> & {
470
535
  * Use `create(SubjectSetSchema)` to create a new message.
471
536
  */
472
537
  export const SubjectSetSchema: GenMessage<SubjectSet> = /*@__PURE__*/
473
- messageDesc(file_policy_objects, 8);
538
+ messageDesc(file_policy_objects, 10);
474
539
 
475
540
  /**
476
541
  *
@@ -504,7 +569,7 @@ export type SubjectConditionSet = Message<"policy.SubjectConditionSet"> & {
504
569
  * Use `create(SubjectConditionSetSchema)` to create a new message.
505
570
  */
506
571
  export const SubjectConditionSetSchema: GenMessage<SubjectConditionSet> = /*@__PURE__*/
507
- messageDesc(file_policy_objects, 9);
572
+ messageDesc(file_policy_objects, 11);
508
573
 
509
574
  /**
510
575
  *
@@ -539,7 +604,7 @@ export type SubjectProperty = Message<"policy.SubjectProperty"> & {
539
604
  * Use `create(SubjectPropertySchema)` to create a new message.
540
605
  */
541
606
  export const SubjectPropertySchema: GenMessage<SubjectProperty> = /*@__PURE__*/
542
- messageDesc(file_policy_objects, 10);
607
+ messageDesc(file_policy_objects, 12);
543
608
 
544
609
  /**
545
610
  *
@@ -582,7 +647,7 @@ export type ResourceMappingGroup = Message<"policy.ResourceMappingGroup"> & {
582
647
  * Use `create(ResourceMappingGroupSchema)` to create a new message.
583
648
  */
584
649
  export const ResourceMappingGroupSchema: GenMessage<ResourceMappingGroup> = /*@__PURE__*/
585
- messageDesc(file_policy_objects, 11);
650
+ messageDesc(file_policy_objects, 13);
586
651
 
587
652
  /**
588
653
  *
@@ -623,7 +688,7 @@ export type ResourceMapping = Message<"policy.ResourceMapping"> & {
623
688
  * Use `create(ResourceMappingSchema)` to create a new message.
624
689
  */
625
690
  export const ResourceMappingSchema: GenMessage<ResourceMapping> = /*@__PURE__*/
626
- messageDesc(file_policy_objects, 12);
691
+ messageDesc(file_policy_objects, 14);
627
692
 
628
693
  /**
629
694
  *
@@ -661,9 +726,9 @@ export type KeyAccessServer = Message<"policy.KeyAccessServer"> & {
661
726
  /**
662
727
  * Kas keys associated with this KAS
663
728
  *
664
- * @generated from field: repeated policy.KasKey kas_keys = 5;
729
+ * @generated from field: repeated policy.SimpleKasKey kas_keys = 5;
665
730
  */
666
- kasKeys: KasKey[];
731
+ kasKeys: SimpleKasKey[];
667
732
 
668
733
  /**
669
734
  * Optional
@@ -686,7 +751,7 @@ export type KeyAccessServer = Message<"policy.KeyAccessServer"> & {
686
751
  * Use `create(KeyAccessServerSchema)` to create a new message.
687
752
  */
688
753
  export const KeyAccessServerSchema: GenMessage<KeyAccessServer> = /*@__PURE__*/
689
- messageDesc(file_policy_objects, 13);
754
+ messageDesc(file_policy_objects, 15);
690
755
 
691
756
  /**
692
757
  * @generated from message policy.Key
@@ -732,7 +797,7 @@ export type Key = Message<"policy.Key"> & {
732
797
  * Use `create(KeySchema)` to create a new message.
733
798
  */
734
799
  export const KeySchema: GenMessage<Key> = /*@__PURE__*/
735
- messageDesc(file_policy_objects, 14);
800
+ messageDesc(file_policy_objects, 16);
736
801
 
737
802
  /**
738
803
  * Deprecated
@@ -770,7 +835,7 @@ export type KasPublicKey = Message<"policy.KasPublicKey"> & {
770
835
  * Use `create(KasPublicKeySchema)` to create a new message.
771
836
  */
772
837
  export const KasPublicKeySchema: GenMessage<KasPublicKey> = /*@__PURE__*/
773
- messageDesc(file_policy_objects, 15);
838
+ messageDesc(file_policy_objects, 17);
774
839
 
775
840
  /**
776
841
  * Deprecated
@@ -790,7 +855,7 @@ export type KasPublicKeySet = Message<"policy.KasPublicKeySet"> & {
790
855
  * Use `create(KasPublicKeySetSchema)` to create a new message.
791
856
  */
792
857
  export const KasPublicKeySetSchema: GenMessage<KasPublicKeySet> = /*@__PURE__*/
793
- messageDesc(file_policy_objects, 16);
858
+ messageDesc(file_policy_objects, 18);
794
859
 
795
860
  /**
796
861
  * Deprecated
@@ -825,7 +890,7 @@ export type PublicKey = Message<"policy.PublicKey"> & {
825
890
  * Use `create(PublicKeySchema)` to create a new message.
826
891
  */
827
892
  export const PublicKeySchema: GenMessage<PublicKey> = /*@__PURE__*/
828
- messageDesc(file_policy_objects, 17);
893
+ messageDesc(file_policy_objects, 19);
829
894
 
830
895
  /**
831
896
  * @generated from message policy.RegisteredResource
@@ -859,7 +924,7 @@ export type RegisteredResource = Message<"policy.RegisteredResource"> & {
859
924
  * Use `create(RegisteredResourceSchema)` to create a new message.
860
925
  */
861
926
  export const RegisteredResourceSchema: GenMessage<RegisteredResource> = /*@__PURE__*/
862
- messageDesc(file_policy_objects, 18);
927
+ messageDesc(file_policy_objects, 20);
863
928
 
864
929
  /**
865
930
  * @generated from message policy.RegisteredResourceValue
@@ -880,6 +945,11 @@ export type RegisteredResourceValue = Message<"policy.RegisteredResourceValue">
880
945
  */
881
946
  resource?: RegisteredResource;
882
947
 
948
+ /**
949
+ * @generated from field: repeated policy.RegisteredResourceValue.ActionAttributeValue action_attribute_values = 4;
950
+ */
951
+ actionAttributeValues: RegisteredResourceValue_ActionAttributeValue[];
952
+
883
953
  /**
884
954
  * Common metadata
885
955
  *
@@ -893,7 +963,41 @@ export type RegisteredResourceValue = Message<"policy.RegisteredResourceValue">
893
963
  * Use `create(RegisteredResourceValueSchema)` to create a new message.
894
964
  */
895
965
  export const RegisteredResourceValueSchema: GenMessage<RegisteredResourceValue> = /*@__PURE__*/
896
- messageDesc(file_policy_objects, 19);
966
+ messageDesc(file_policy_objects, 21);
967
+
968
+ /**
969
+ * @generated from message policy.RegisteredResourceValue.ActionAttributeValue
970
+ */
971
+ export type RegisteredResourceValue_ActionAttributeValue = Message<"policy.RegisteredResourceValue.ActionAttributeValue"> & {
972
+ /**
973
+ * @generated from field: string id = 1;
974
+ */
975
+ id: string;
976
+
977
+ /**
978
+ * @generated from field: policy.Action action = 2;
979
+ */
980
+ action?: Action;
981
+
982
+ /**
983
+ * @generated from field: policy.Value attribute_value = 3;
984
+ */
985
+ attributeValue?: Value;
986
+
987
+ /**
988
+ * Common metadata
989
+ *
990
+ * @generated from field: common.Metadata metadata = 100;
991
+ */
992
+ metadata?: Metadata;
993
+ };
994
+
995
+ /**
996
+ * Describes the message policy.RegisteredResourceValue.ActionAttributeValue.
997
+ * Use `create(RegisteredResourceValue_ActionAttributeValueSchema)` to create a new message.
998
+ */
999
+ export const RegisteredResourceValue_ActionAttributeValueSchema: GenMessage<RegisteredResourceValue_ActionAttributeValue> = /*@__PURE__*/
1000
+ messageDesc(file_policy_objects, 21, 0);
897
1001
 
898
1002
  /**
899
1003
  * @generated from message policy.KasKey
@@ -908,6 +1012,11 @@ export type KasKey = Message<"policy.KasKey"> & {
908
1012
  * @generated from field: policy.AsymmetricKey key = 2;
909
1013
  */
910
1014
  key?: AsymmetricKey;
1015
+
1016
+ /**
1017
+ * @generated from field: string kas_uri = 3;
1018
+ */
1019
+ kasUri: string;
911
1020
  };
912
1021
 
913
1022
  /**
@@ -915,33 +1024,94 @@ export type KasKey = Message<"policy.KasKey"> & {
915
1024
  * Use `create(KasKeySchema)` to create a new message.
916
1025
  */
917
1026
  export const KasKeySchema: GenMessage<KasKey> = /*@__PURE__*/
918
- messageDesc(file_policy_objects, 20);
1027
+ messageDesc(file_policy_objects, 22);
1028
+
1029
+ /**
1030
+ * @generated from message policy.PublicKeyCtx
1031
+ */
1032
+ export type PublicKeyCtx = Message<"policy.PublicKeyCtx"> & {
1033
+ /**
1034
+ * Required
1035
+ *
1036
+ * Base64 encoded public key in PEM format
1037
+ *
1038
+ * @generated from field: string pem = 1;
1039
+ */
1040
+ pem: string;
1041
+ };
1042
+
1043
+ /**
1044
+ * Describes the message policy.PublicKeyCtx.
1045
+ * Use `create(PublicKeyCtxSchema)` to create a new message.
1046
+ */
1047
+ export const PublicKeyCtxSchema: GenMessage<PublicKeyCtx> = /*@__PURE__*/
1048
+ messageDesc(file_policy_objects, 23);
1049
+
1050
+ /**
1051
+ * @generated from message policy.PrivateKeyCtx
1052
+ */
1053
+ export type PrivateKeyCtx = Message<"policy.PrivateKeyCtx"> & {
1054
+ /**
1055
+ * Required
1056
+ *
1057
+ * Key ID for the symmetric key wrapping this key.
1058
+ *
1059
+ * @generated from field: string key_id = 1;
1060
+ */
1061
+ keyId: string;
1062
+
1063
+ /**
1064
+ * Optional
1065
+ *
1066
+ * Base64 encoded wrapped key. Conditionally required if key_mode is LOCAL. Should not be present if key_mode is REMOTE.
1067
+ *
1068
+ * @generated from field: string wrapped_key = 2;
1069
+ */
1070
+ wrappedKey: string;
1071
+ };
1072
+
1073
+ /**
1074
+ * Describes the message policy.PrivateKeyCtx.
1075
+ * Use `create(PrivateKeyCtxSchema)` to create a new message.
1076
+ */
1077
+ export const PrivateKeyCtxSchema: GenMessage<PrivateKeyCtx> = /*@__PURE__*/
1078
+ messageDesc(file_policy_objects, 24);
919
1079
 
920
1080
  /**
921
1081
  * @generated from message policy.AsymmetricKey
922
1082
  */
923
1083
  export type AsymmetricKey = Message<"policy.AsymmetricKey"> & {
924
1084
  /**
1085
+ * Required
1086
+ *
925
1087
  * @generated from field: string id = 1;
926
1088
  */
927
1089
  id: string;
928
1090
 
929
1091
  /**
1092
+ * Required
1093
+ *
930
1094
  * @generated from field: string key_id = 2;
931
1095
  */
932
1096
  keyId: string;
933
1097
 
934
1098
  /**
1099
+ * Required
1100
+ *
935
1101
  * @generated from field: policy.Algorithm key_algorithm = 3;
936
1102
  */
937
1103
  keyAlgorithm: Algorithm;
938
1104
 
939
1105
  /**
1106
+ * Required
1107
+ *
940
1108
  * @generated from field: policy.KeyStatus key_status = 4;
941
1109
  */
942
1110
  keyStatus: KeyStatus;
943
1111
 
944
1112
  /**
1113
+ * Required
1114
+ *
945
1115
  * Specifies how the key is managed (local or remote)
946
1116
  *
947
1117
  * @generated from field: policy.KeyMode key_mode = 5;
@@ -949,20 +1119,26 @@ export type AsymmetricKey = Message<"policy.AsymmetricKey"> & {
949
1119
  keyMode: KeyMode;
950
1120
 
951
1121
  /**
1122
+ * Required
1123
+ *
952
1124
  * Specific structure based on key provider implementation
953
1125
  *
954
- * @generated from field: bytes public_key_ctx = 6;
1126
+ * @generated from field: policy.PublicKeyCtx public_key_ctx = 6;
955
1127
  */
956
- publicKeyCtx: Uint8Array;
1128
+ publicKeyCtx?: PublicKeyCtx;
957
1129
 
958
1130
  /**
1131
+ * Optional
1132
+ *
959
1133
  * Specific structure based on key provider implementation
960
1134
  *
961
- * @generated from field: bytes private_key_ctx = 7;
1135
+ * @generated from field: policy.PrivateKeyCtx private_key_ctx = 7;
962
1136
  */
963
- privateKeyCtx: Uint8Array;
1137
+ privateKeyCtx?: PrivateKeyCtx;
964
1138
 
965
1139
  /**
1140
+ * Optional
1141
+ *
966
1142
  * Configuration for the key provider
967
1143
  *
968
1144
  * @generated from field: policy.KeyProviderConfig provider_config = 8;
@@ -982,7 +1158,7 @@ export type AsymmetricKey = Message<"policy.AsymmetricKey"> & {
982
1158
  * Use `create(AsymmetricKeySchema)` to create a new message.
983
1159
  */
984
1160
  export const AsymmetricKeySchema: GenMessage<AsymmetricKey> = /*@__PURE__*/
985
- messageDesc(file_policy_objects, 21);
1161
+ messageDesc(file_policy_objects, 25);
986
1162
 
987
1163
  /**
988
1164
  * @generated from message policy.SymmetricKey
@@ -1037,7 +1213,7 @@ export type SymmetricKey = Message<"policy.SymmetricKey"> & {
1037
1213
  * Use `create(SymmetricKeySchema)` to create a new message.
1038
1214
  */
1039
1215
  export const SymmetricKeySchema: GenMessage<SymmetricKey> = /*@__PURE__*/
1040
- messageDesc(file_policy_objects, 22);
1216
+ messageDesc(file_policy_objects, 26);
1041
1217
 
1042
1218
  /**
1043
1219
  * @generated from enum policy.AttributeRuleTypeEnum
@@ -1269,14 +1445,9 @@ export enum KeyStatus {
1269
1445
  ACTIVE = 1,
1270
1446
 
1271
1447
  /**
1272
- * @generated from enum value: KEY_STATUS_INACTIVE = 2;
1448
+ * @generated from enum value: KEY_STATUS_ROTATED = 2;
1273
1449
  */
1274
- INACTIVE = 2,
1275
-
1276
- /**
1277
- * @generated from enum value: KEY_STATUS_COMPROMISED = 3;
1278
- */
1279
- COMPROMISED = 3,
1450
+ ROTATED = 2,
1280
1451
  }
1281
1452
 
1282
1453
  /**
@@ -1286,29 +1457,53 @@ export const KeyStatusSchema: GenEnum<KeyStatus> = /*@__PURE__*/
1286
1457
  enumDesc(file_policy_objects, 6);
1287
1458
 
1288
1459
  /**
1289
- * Describe how the kas private key is managed.
1290
- * If the key mode is LOCAL, then the kas private key is stored in the database.
1291
- * This could be encrypted or unencrypted.
1292
- * Remote means that the kas private key is stored in a remote key system like KMS or HSM
1293
- * and all operations are done by the remote key system.
1460
+ * Describes the management and operational mode of a cryptographic key.
1294
1461
  *
1295
1462
  * @generated from enum policy.KeyMode
1296
1463
  */
1297
1464
  export enum KeyMode {
1298
1465
  /**
1466
+ * KEY_MODE_UNSPECIFIED: Default, unspecified key mode. Indicates an uninitialized or error state.
1467
+ *
1299
1468
  * @generated from enum value: KEY_MODE_UNSPECIFIED = 0;
1300
1469
  */
1301
1470
  UNSPECIFIED = 0,
1302
1471
 
1303
1472
  /**
1304
- * @generated from enum value: KEY_MODE_LOCAL = 1;
1473
+ * KEY_MODE_CONFIG_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
1474
+ * sourced from local configuration. Unwrapping and all cryptographic operations are performed locally.
1475
+ *
1476
+ * @generated from enum value: KEY_MODE_CONFIG_ROOT_KEY = 1;
1477
+ */
1478
+ CONFIG_ROOT_KEY = 1,
1479
+
1480
+ /**
1481
+ * KEY_MODE_PROVIDER_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
1482
+ * managed by an external provider (e.g., a Hardware Security Module or Cloud KMS).
1483
+ * Key unwrapping is delegated to the external provider; subsequent cryptographic operations
1484
+ * are performed locally using the unwrapped key.
1485
+ *
1486
+ * @generated from enum value: KEY_MODE_PROVIDER_ROOT_KEY = 2;
1305
1487
  */
1306
- LOCAL = 1,
1488
+ PROVIDER_ROOT_KEY = 2,
1307
1489
 
1308
1490
  /**
1309
- * @generated from enum value: KEY_MODE_REMOTE = 2;
1491
+ * KEY_MODE_REMOTE: Remote key management where the private key is stored in, and all cryptographic
1492
+ * operations are performed by, a remote Key Management Service (KMS) or HSM.
1493
+ * The private key material never leaves the secure boundary of the remote system.
1494
+ *
1495
+ * @generated from enum value: KEY_MODE_REMOTE = 3;
1496
+ */
1497
+ REMOTE = 3,
1498
+
1499
+ /**
1500
+ * KEY_MODE_PUBLIC_KEY_ONLY: Public key only mode. Used when only a public key is available or required,
1501
+ * typically for wrapping operations (e.g., encrypting a Data Encryption Key (DEK) for an external KAS).
1502
+ * The corresponding private key is not managed or accessible by this system.
1503
+ *
1504
+ * @generated from enum value: KEY_MODE_PUBLIC_KEY_ONLY = 4;
1310
1505
  */
1311
- REMOTE = 2,
1506
+ PUBLIC_KEY_ONLY = 4,
1312
1507
  }
1313
1508
 
1314
1509
  /**