@polyester/sdk 0.19.3 → 0.20.1

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @polyester/sdk
 
+## 0.20.1
+
+### Patch Changes
+
+- Expose `auth.acceptTerms()` for explicit consent through an interactive JWT session and `Profile.currentTermsAccepted` on profile responses. Preserve the typed `AUTH_TERMS_NOT_ACCEPTED` error detail when provisioning requires consent. Login does not accept terms automatically; creating subaccounts, API keys, and deposit addresses requires current acceptance. ([#120](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/120))
+
+## 0.20.0
+
+### Minor Changes
+
+- feat(orders): replace `symbolId` with `symbolIds` in `orders.cancelAll()` to cancel orders across up to 100 symbols. Use `symbolIds: [id]` for one symbol; empty or omitted filters match all symbols. ([#118](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/118))
+
+- refactor(errors)!: remove `isStaleQuoteError()`. Use `error instanceof StaleQuoteError` for SDK failures, or inspect `error.detail` for the structured orders rejection code. ([#118](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/118))
+
+- feat(errors): expose recognized backend rejections as typed `PolyesterError.detail` values, discriminated by service. `getOrderErrorDetail()` is removed; read `error.detail` instead. ([#118](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/118))
+
+### Patch Changes
+
+- feat(orders): expose the `CANCEL_REQUEST_EXPIRED` rejection code when a cancellation exceeds its replay window. ([#118](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/118))
+
+- feat(triggers): expose `executedQty` and `executedLevels` on ladder runtime details. Quantity is a decimal base-asset amount, and levels count distinct levels with any fill, including partial fills. ([#118](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/118))
+
+- fix(transfers): map structured withdrawal and internal-transfer rate-limit errors to `RateLimitError` and temporary dependency failures to `ServiceUnavailableError`, preserving retryability when the transport status alone does not identify the failure. ([#118](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/118))
+
+- feat(triggers): add `execution.maxSlippage` to market IOC TWAPs, accepting a decimal price delta or 1 to 10,000 basis points. The protection applies to each slice; omitting it uses the pair default. ([#118](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/118))
+
 ## 0.19.3
 
 ### Patch Changes

package/dist/gen/auth/v1/api_keys_pb.d.ts

@@ -441,7 +441,9 @@ declare const ApiKeyStatusSchema: GenEnum<ApiKeyStatus>;
 declare const ApiKeyService: GenService<{
   /**
    * Create a new API key for the caller. Account security settings may require
-   * MFA enrollment or a fresh step-up proof.
+   * MFA enrollment or a fresh step-up proof. The acting caller's root account
+   * must have accepted the current terms, including when targeting a shared
+   * subaccount; otherwise FailedPrecondition with AUTH_TERMS_NOT_ACCEPTED is returned.
    *
    * @generated from rpc auth.v1.ApiKeyService.CreateApiKey
    */

package/dist/gen/auth/v1/api_keys_pb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api_keys_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/api_keys_pb.ts"],"mappings":";;;;;;;;;cAca,uBAAuB;;;;;;KAQxB,SAAS;;;;;;;EAOnB;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;;EAQA;;;;;;EAOA,QAAQ;;;;;;EAOR;;;;;;;EAQA;;;;;;EAOA,YAAY;;;;;;;EAQZ,aAAa;;;;;;;EAQb,kBAAkB;;;;;;;EAQlB,YAAY;;;;;;;EAQZ;;;;;;;;;EAUA,YAAY;;;;;;EAOZ;;;;;;cAOW,cAAc,WAAW;;;;;;;KAS1B,sBAAsB;;;;;;EAMhC;;;;;;;EAQA;;;;;;EAOA;;;;;;EAOA;;;;;;;EAQA;;;;;;;EAQA,kBAAkB;;;;;;cAOP,2BAA2B,WAAW;;;;;;KAQvC,uBAAuB;;;;;;EAMjC,SAAS;;;;;;cAOE,4BAA4B,WAAW;;;;;;KAQxC,qBAAqB;;;;;;;;EAQ/B;;;;;;cAOW,0BAA0B,WAAW;;;;;;KAQtC,sBAAsB;;;;;;EAMhC,SAAS;;;;;;cAOE,2BAA2B,WAAW;;;;;;KAQvC,sBAAsB;;;;;;;EAOhC;;;;;;cAOW,2BAA2B,WAAW;;;;;;KAQvC,uBAAuB;;;;;cAOtB,4BAA4B,WAAW;;;;;;KAQxC,mBAAmB;;;;;;;EAO7B;;;;;;cAOW,wBAAwB,WAAW;;;;;;KAQpC,oBAAoB;;;;;;EAM9B,SAAS;;;;;;cAOE,yBAAyB,WAAW;;;;;;KAQrC,mBAAmB;;;;;;EAM7B;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA,QAAQ;;;;;;EAOR;;;;;;EAOA,YAAY;;;;;;cAOD,wBAAwB,WAAW;;;;;;KAQpC,sBAAsB;;;;;;EAMhC;;;;;;EAOA,SAAS;;;;;;;EAQT,aAAa;;;;;;EAOb;;;;;;cAOW,2BAA2B,WAAW;;;;;;KAQvC,uBAAuB;;;;;;EAMjC,SAAS;;;;;;cAOE,4BAA4B,WAAW;;;;;;aAQxC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,oBAAoB,QAAQ;;;;;;cAQ5B,eAAe;;;;;;;EAO1B;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe"}
+{"version":3,"file":"api_keys_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/api_keys_pb.ts"],"mappings":";;;;;;;;;cAca,uBAAuB;;;;;;KAQxB,SAAS;;;;;;;EAOnB;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;;EAQA;;;;;;EAOA,QAAQ;;;;;;EAOR;;;;;;;EAQA;;;;;;EAOA,YAAY;;;;;;;EAQZ,aAAa;;;;;;;EAQb,kBAAkB;;;;;;;EAQlB,YAAY;;;;;;;EAQZ;;;;;;;;;EAUA,YAAY;;;;;;EAOZ;;;;;;cAOW,cAAc,WAAW;;;;;;;KAS1B,sBAAsB;;;;;;EAMhC;;;;;;;EAQA;;;;;;EAOA;;;;;;EAOA;;;;;;;EAQA;;;;;;;EAQA,kBAAkB;;;;;;cAOP,2BAA2B,WAAW;;;;;;KAQvC,uBAAuB;;;;;;EAMjC,SAAS;;;;;;cAOE,4BAA4B,WAAW;;;;;;KAQxC,qBAAqB;;;;;;;;EAQ/B;;;;;;cAOW,0BAA0B,WAAW;;;;;;KAQtC,sBAAsB;;;;;;EAMhC,SAAS;;;;;;cAOE,2BAA2B,WAAW;;;;;;KAQvC,sBAAsB;;;;;;;EAOhC;;;;;;cAOW,2BAA2B,WAAW;;;;;;KAQvC,uBAAuB;;;;;cAOtB,4BAA4B,WAAW;;;;;;KAQxC,mBAAmB;;;;;;;EAO7B;;;;;;cAOW,wBAAwB,WAAW;;;;;;KAQpC,oBAAoB;;;;;;EAM9B,SAAS;;;;;;cAOE,yBAAyB,WAAW;;;;;;KAQrC,mBAAmB;;;;;;EAM7B;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA,QAAQ;;;;;;EAOR;;;;;;EAOA,YAAY;;;;;;cAOD,wBAAwB,WAAW;;;;;;KAQpC,sBAAsB;;;;;;EAMhC;;;;;;EAOA,SAAS;;;;;;;EAQT,aAAa;;;;;;EAOb;;;;;;cAOW,2BAA2B,WAAW;;;;;;KAQvC,uBAAuB;;;;;;EAMjC,SAAS;;;;;;cAOE,4BAA4B,WAAW;;;;;;aAQxC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,oBAAoB,QAAQ;;;;;;cAQ5B,eAAe;;;;;;;;;EAS1B;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe"}

package/dist/gen/auth/v1/api_keys_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_keys_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/api_keys_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/api_keys.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { FieldMask, Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_field_mask, file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_polyester_api_options } from \"../../polyester/api/options_pb.js\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/api_keys.proto.\n */\nexport const file_auth_v1_api_keys: GenFile = /*@__PURE__*/\n  fileDesc(\"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\", [file_google_protobuf_field_mask, file_google_protobuf_timestamp, file_polyester_api_options]);\n\n/**\n * ApiKey is public API key metadata. It never includes the private key or seed.\n *\n * @generated from message auth.v1.ApiKey\n */\nexport type ApiKey = Message<\"auth.v1.ApiKey\"> & {\n  /**\n   * Stable opaque identifier used to refer to this key, formatted as \"ak_\"\n   * followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string key_id = 2;\n   */\n  keyId: string;\n\n  /**\n   * Human-readable label for the key. Maximum length is 64 characters.\n   *\n   * @generated from field: string label = 3;\n   */\n  label: string;\n\n  /**\n   * Optional user-chosen icon/emoji for UI display.\n   *\n   * @generated from field: string icon = 9;\n   */\n  icon: string;\n\n  /**\n   * Optional user-chosen color token for UI display.\n   *\n   * @generated from field: string color = 10;\n   */\n  color: string;\n\n  /**\n   * Optional CIDR whitelist. Empty means no IP restriction. Maximum 32 unique\n   * entries.\n   *\n   * @generated from field: repeated string ip_whitelist = 4;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Current key status.\n   *\n   * @generated from field: auth.v1.ApiKeyStatus status = 6;\n   */\n  status: ApiKeyStatus;\n\n  /**\n   * Optional sub-account this key is scoped to (opaque ID; empty = root-level).\n   *\n   * @generated from field: optional fixed64 subaccount_id = 7;\n   */\n  subaccountId?: bigint | undefined;\n\n  /**\n   * Optional API policy attached to this key (opaque ID).\n   * Empty means no policy is attached and the key has no permissions.\n   *\n   * @generated from field: optional fixed64 policy_id = 8;\n   */\n  policyId?: bigint | undefined;\n\n  /**\n   * Time in UTC when this key was created.\n   *\n   * @generated from field: google.protobuf.Timestamp created_at = 20;\n   */\n  createdAt?: Timestamp | undefined;\n\n  /**\n   * Last time in UTC when this key authenticated a request. Omitted when the\n   * key has not been used.\n   *\n   * @generated from field: google.protobuf.Timestamp last_used_at = 21;\n   */\n  lastUsedAt?: Timestamp | undefined;\n\n  /**\n   * Ed25519 public key bytes associated with this API key. The private key or\n   * seed is never returned by the API.\n   *\n   * @generated from field: bytes public_key_ed25519 = 22;\n   */\n  publicKeyEd25519: Uint8Array;\n\n  /**\n   * Optional expiry time in UTC. When set, the key cannot authenticate requests\n   * after this time, regardless of status.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 23;\n   */\n  expiresAt?: Timestamp | undefined;\n\n  /**\n   * Read-only actor label describing who created this key, such as a username\n   * or account label.\n   *\n   * @generated from field: string created_by_actor = 24;\n   */\n  createdByActor: string;\n\n  /**\n   * Time in UTC when this key's configuration was last changed. For the same\n   * key, later is fresher, equal is an idempotent replay, and earlier is stale.\n   * Equal timestamps with different configuration indicate an invariant failure.\n   * This is independent of last_used_at, which tracks authentication activity.\n   *\n   * @generated from field: google.protobuf.Timestamp updated_at = 25;\n   */\n  updatedAt?: Timestamp | undefined;\n\n  /**\n   * Monotonic resource revision used for conditional updates.\n   *\n   * @generated from field: uint64 revision = 26;\n   */\n  revision: bigint;\n};\n\n/**\n * Describes the message auth.v1.ApiKey.\n * Use `create(ApiKeySchema)` to create a new message.\n */\nexport const ApiKeySchema: GenMessage<ApiKey> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 0);\n\n/**\n * CreateApiKeyRequest creates a new API key. Clients generate the Ed25519 key\n * pair locally and submit only the public key.\n *\n * @generated from message auth.v1.CreateApiKeyRequest\n */\nexport type CreateApiKeyRequest = Message<\"auth.v1.CreateApiKeyRequest\"> & {\n  /**\n   * Human-readable label for the key. Required; 1 to 64 characters.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n\n  /**\n   * Optional sub-account to scope this key to (opaque ID). If unset, the key is\n   * root-level.\n   *\n   * @generated from field: optional fixed64 subaccount_id = 3;\n   */\n  subaccountId?: bigint | undefined;\n\n  /**\n   * Optional user-chosen icon/emoji for UI display.\n   *\n   * @generated from field: string icon = 6;\n   */\n  icon: string;\n\n  /**\n   * Optional user-chosen color token for UI display.\n   *\n   * @generated from field: string color = 7;\n   */\n  color: string;\n\n  /**\n   * Optional CIDR whitelist. Empty means no IP restriction. Maximum 32 unique\n   * entries.\n   *\n   * @generated from field: repeated string ip_whitelist = 4;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Ed25519 public key bytes. Must be exactly 32 bytes. The private key or seed\n   * must never be sent to the API.\n   *\n   * @generated from field: bytes public_key_ed25519 = 5;\n   */\n  publicKeyEd25519: Uint8Array;\n};\n\n/**\n * Describes the message auth.v1.CreateApiKeyRequest.\n * Use `create(CreateApiKeyRequestSchema)` to create a new message.\n */\nexport const CreateApiKeyRequestSchema: GenMessage<CreateApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 1);\n\n/**\n * CreateApiKeyResponse returns the created API key metadata.\n *\n * @generated from message auth.v1.CreateApiKeyResponse\n */\nexport type CreateApiKeyResponse = Message<\"auth.v1.CreateApiKeyResponse\"> & {\n  /**\n   * Created API key metadata. The private key or seed is never returned.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.CreateApiKeyResponse.\n * Use `create(CreateApiKeyResponseSchema)` to create a new message.\n */\nexport const CreateApiKeyResponseSchema: GenMessage<CreateApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 2);\n\n/**\n * ListApiKeysRequest lists non-revoked API keys visible to the caller.\n *\n * @generated from message auth.v1.ListApiKeysRequest\n */\nexport type ListApiKeysRequest = Message<\"auth.v1.ListApiKeysRequest\"> & {\n  /**\n   * Optional filter: only keys scoped to this sub-account (opaque ID). The\n   * caller must own or administer the sub-account. If unset, only non-revoked\n   * keys owned by the caller are returned.\n   *\n   * @generated from field: optional fixed64 subaccount_id = 1;\n   */\n  subaccountId?: bigint | undefined;\n};\n\n/**\n * Describes the message auth.v1.ListApiKeysRequest.\n * Use `create(ListApiKeysRequestSchema)` to create a new message.\n */\nexport const ListApiKeysRequestSchema: GenMessage<ListApiKeysRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 3);\n\n/**\n * ListApiKeysResponse contains matching API keys, newest first by creation time.\n *\n * @generated from message auth.v1.ListApiKeysResponse\n */\nexport type ListApiKeysResponse = Message<\"auth.v1.ListApiKeysResponse\"> & {\n  /**\n   * Matching API keys, newest first. Revoked keys are excluded.\n   *\n   * @generated from field: repeated auth.v1.ApiKey api_keys = 1;\n   */\n  apiKeys: ApiKey[];\n};\n\n/**\n * Describes the message auth.v1.ListApiKeysResponse.\n * Use `create(ListApiKeysResponseSchema)` to create a new message.\n */\nexport const ListApiKeysResponseSchema: GenMessage<ListApiKeysResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 4);\n\n/**\n * DeleteApiKeyRequest permanently revokes an API key.\n *\n * @generated from message auth.v1.DeleteApiKeyRequest\n */\nexport type DeleteApiKeyRequest = Message<\"auth.v1.DeleteApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier (e.g. \"ak_<hex>\"). This is the stable public\n   * handle for a key.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n};\n\n/**\n * Describes the message auth.v1.DeleteApiKeyRequest.\n * Use `create(DeleteApiKeyRequestSchema)` to create a new message.\n */\nexport const DeleteApiKeyRequestSchema: GenMessage<DeleteApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 5);\n\n/**\n * DeleteApiKeyResponse is empty when revocation succeeds.\n *\n * @generated from message auth.v1.DeleteApiKeyResponse\n */\nexport type DeleteApiKeyResponse = Message<\"auth.v1.DeleteApiKeyResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.DeleteApiKeyResponse.\n * Use `create(DeleteApiKeyResponseSchema)` to create a new message.\n */\nexport const DeleteApiKeyResponseSchema: GenMessage<DeleteApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 6);\n\n/**\n * GetApiKeyRequest returns one API key visible to its owner or a sub-account admin.\n *\n * @generated from message auth.v1.GetApiKeyRequest\n */\nexport type GetApiKeyRequest = Message<\"auth.v1.GetApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier, formatted as \"ak_\" followed by 32 lowercase hex\n   * characters.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n};\n\n/**\n * Describes the message auth.v1.GetApiKeyRequest.\n * Use `create(GetApiKeyRequestSchema)` to create a new message.\n */\nexport const GetApiKeyRequestSchema: GenMessage<GetApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 7);\n\n/**\n * GetApiKeyResponse returns one API key visible to the caller.\n *\n * @generated from message auth.v1.GetApiKeyResponse\n */\nexport type GetApiKeyResponse = Message<\"auth.v1.GetApiKeyResponse\"> & {\n  /**\n   * Matching API key metadata.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.GetApiKeyResponse.\n * Use `create(GetApiKeyResponseSchema)` to create a new message.\n */\nexport const GetApiKeyResponseSchema: GenMessage<GetApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 8);\n\n/**\n * ApiKeyUpdateSpec contains mutable API key configuration.\n *\n * @generated from message auth.v1.ApiKeyUpdateSpec\n */\nexport type ApiKeyUpdateSpec = Message<\"auth.v1.ApiKeyUpdateSpec\"> & {\n  /**\n   * Human-friendly label for the key. Empty clears the label when selected.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n\n  /**\n   * User-chosen icon/emoji for UI display. Empty clears the icon when selected.\n   *\n   * @generated from field: string icon = 2;\n   */\n  icon: string;\n\n  /**\n   * User-chosen color token for UI display. Empty clears the color when selected.\n   *\n   * @generated from field: string color = 3;\n   */\n  color: string;\n\n  /**\n   * New status. ACTIVE and DISABLED are allowed; revocation uses DeleteApiKey.\n   *\n   * @generated from field: auth.v1.ApiKeyStatus status = 4;\n   */\n  status: ApiKeyStatus;\n\n  /**\n   * Complete replacement IP whitelist. Empty clears the restriction when selected.\n   *\n   * @generated from field: repeated string ip_whitelist = 5;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Expiry time in UTC. When selected, omission or the epoch clears expiry.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 6;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.ApiKeyUpdateSpec.\n * Use `create(ApiKeyUpdateSpecSchema)` to create a new message.\n */\nexport const ApiKeyUpdateSpecSchema: GenMessage<ApiKeyUpdateSpec> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 9);\n\n/**\n * UpdateApiKeyRequest changes selected mutable fields on an existing API key.\n *\n * @generated from message auth.v1.UpdateApiKeyRequest\n */\nexport type UpdateApiKeyRequest = Message<\"auth.v1.UpdateApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier to update.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n\n  /**\n   * Candidate values for fields selected by update_mask.\n   *\n   * @generated from field: auth.v1.ApiKeyUpdateSpec api_key = 2;\n   */\n  apiKey?: ApiKeyUpdateSpec | undefined;\n\n  /**\n   * Mutable fields to apply. Paths are relative to api_key. The mask is required,\n   * must be non-empty, and cannot contain \"*\".\n   *\n   * @generated from field: google.protobuf.FieldMask update_mask = 3;\n   */\n  updateMask?: FieldMask | undefined;\n\n  /**\n   * Revision returned by the latest successful read.\n   *\n   * @generated from field: uint64 expected_revision = 4;\n   */\n  expectedRevision: bigint;\n};\n\n/**\n * Describes the message auth.v1.UpdateApiKeyRequest.\n * Use `create(UpdateApiKeyRequestSchema)` to create a new message.\n */\nexport const UpdateApiKeyRequestSchema: GenMessage<UpdateApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 10);\n\n/**\n * UpdateApiKeyResponse returns the API key after applying the update.\n *\n * @generated from message auth.v1.UpdateApiKeyResponse\n */\nexport type UpdateApiKeyResponse = Message<\"auth.v1.UpdateApiKeyResponse\"> & {\n  /**\n   * Updated API key metadata.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.UpdateApiKeyResponse.\n * Use `create(UpdateApiKeyResponseSchema)` to create a new message.\n */\nexport const UpdateApiKeyResponseSchema: GenMessage<UpdateApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 11);\n\n/**\n * Status of an API key.\n *\n * @generated from enum auth.v1.ApiKeyStatus\n */\nexport enum ApiKeyStatus {\n  /**\n   * No API key status specified.\n   *\n   * @generated from enum value: API_KEY_STATUS_UNSPECIFIED = 0;\n   */\n  API_KEY_STATUS_UNSPECIFIED = 0,\n\n  /**\n   * Key can authenticate requests.\n   *\n   * @generated from enum value: ACTIVE = 1;\n   */\n  ACTIVE = 1,\n\n  /**\n   * Key has been permanently revoked and cannot be used again.\n   *\n   * @generated from enum value: REVOKED = 2;\n   */\n  REVOKED = 2,\n\n  /**\n   * Key is temporarily disabled and cannot authenticate requests until re-enabled.\n   *\n   * @generated from enum value: DISABLED = 3;\n   */\n  DISABLED = 3,\n}\n\n/**\n * Describes the enum auth.v1.ApiKeyStatus.\n */\nexport const ApiKeyStatusSchema: GenEnum<ApiKeyStatus> = /*@__PURE__*/\n  enumDesc(file_auth_v1_api_keys, 0);\n\n/**\n * ApiKeyService manages API keys for authenticated callers.\n *\n * @generated from service auth.v1.ApiKeyService\n */\nexport const ApiKeyService: GenService<{\n  /**\n   * Create a new API key for the caller. Account security settings may require\n   * MFA enrollment or a fresh step-up proof.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.CreateApiKey\n   */\n  createApiKey: {\n    methodKind: \"unary\";\n    input: typeof CreateApiKeyRequestSchema;\n    output: typeof CreateApiKeyResponseSchema;\n  },\n  /**\n   * List non-revoked API keys visible to the caller, newest first.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.ListApiKeys\n   */\n  listApiKeys: {\n    methodKind: \"unary\";\n    input: typeof ListApiKeysRequestSchema;\n    output: typeof ListApiKeysResponseSchema;\n  },\n  /**\n   * Get a single API key owned by the caller or scoped to a sub-account the caller administers.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.GetApiKey\n   */\n  getApiKey: {\n    methodKind: \"unary\";\n    input: typeof GetApiKeyRequestSchema;\n    output: typeof GetApiKeyResponseSchema;\n  },\n  /**\n   * Revoke an API key permanently.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.DeleteApiKey\n   */\n  deleteApiKey: {\n    methodKind: \"unary\";\n    input: typeof DeleteApiKeyRequestSchema;\n    output: typeof DeleteApiKeyResponseSchema;\n  },\n  /**\n   * Update API key metadata and allowed status transitions. Revocation must use\n   * DeleteApiKey.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.UpdateApiKey\n   */\n  updateApiKey: {\n    methodKind: \"unary\";\n    input: typeof UpdateApiKeyRequestSchema;\n    output: typeof UpdateApiKeyResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_api_keys, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,wBACX,uBAAS,4nFAA4nF;CAAC;CAAiC;CAAgC;AAA0B,CAAC;;;;;AAgIpuF,MAAa,eACX,0BAAY,uBAAuB,CAAC;;;;;AA2DtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,6BACX,0BAAY,uBAAuB,CAAC;;;;;AAsBtC,MAAa,2BACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AAqBtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AActC,MAAa,6BACX,0BAAY,uBAAuB,CAAC;;;;;AAqBtC,MAAa,yBACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,0BACX,0BAAY,uBAAuB,CAAC;;;;;AAuDtC,MAAa,yBACX,0BAAY,uBAAuB,CAAC;;;;;AA0CtC,MAAa,4BACX,0BAAY,uBAAuB,EAAE;;;;;AAoBvC,MAAa,6BACX,0BAAY,uBAAuB,EAAE;;;;;;AAOvC,IAAY,eAAL,yBAAA,cAAA;;;;;;CAML,aAAA,aAAA,gCAAA,KAAA;;;;;;CAOA,aAAA,aAAA,YAAA,KAAA;;;;;;CAOA,aAAA,aAAA,aAAA,KAAA;;;;;;CAOA,aAAA,aAAA,cAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,qBACX,uBAAS,uBAAuB,CAAC;;;;;;AAOnC,MAAa,gBAsDX,0BAAY,uBAAuB,CAAC"}
+{"version":3,"file":"api_keys_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/api_keys_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/api_keys.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { FieldMask, Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_field_mask, file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_polyester_api_options } from \"../../polyester/api/options_pb.js\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/api_keys.proto.\n */\nexport const file_auth_v1_api_keys: GenFile = /*@__PURE__*/\n  fileDesc(\"ChZhdXRoL3YxL2FwaV9rZXlzLnByb3RvEgdhdXRoLnYxIucDCgZBcGlLZXkSEAoGa2V5X2lkGAIgASgJQgASDQoFbGFiZWwYAyABKAkSDgoEaWNvbhgJIAEoCUIAEg8KBWNvbG9yGAogASgJQgASFgoMaXBfd2hpdGVsaXN0GAQgAygJQgASJQoGc3RhdHVzGAYgASgOMhUuYXV0aC52MS5BcGlLZXlTdGF0dXMSGgoNc3ViYWNjb3VudF9pZBgHIAEoBkgAiAEBEhYKCXBvbGljeV9pZBgIIAEoBkgBiAEBEi4KCmNyZWF0ZWRfYXQYFCABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wEjAKDGxhc3RfdXNlZF9hdBgVIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXASGgoScHVibGljX2tleV9lZDI1NTE5GBYgASgMEi4KCmV4cGlyZXNfYXQYFyABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wEhgKEGNyZWF0ZWRfYnlfYWN0b3IYGCABKAkSLgoKdXBkYXRlZF9hdBgZIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXASEAoIcmV2aXNpb24YGiABKARCEAoOX3N1YmFjY291bnRfaWRCDAoKX3BvbGljeV9pZCKrAQoTQ3JlYXRlQXBpS2V5UmVxdWVzdBIPCgVsYWJlbBgBIAEoCUIAEhoKDXN1YmFjY291bnRfaWQYAyABKAZIAIgBARIOCgRpY29uGAYgASgJQgASDwoFY29sb3IYByABKAlCABIWCgxpcF93aGl0ZWxpc3QYBCADKAlCABIcChJwdWJsaWNfa2V5X2VkMjU1MTkYBSABKAxCAEIQCg5fc3ViYWNjb3VudF9pZCI4ChRDcmVhdGVBcGlLZXlSZXNwb25zZRIgCgdhcGlfa2V5GAEgASgLMg8uYXV0aC52MS5BcGlLZXkiQgoSTGlzdEFwaUtleXNSZXF1ZXN0EhoKDXN1YmFjY291bnRfaWQYASABKAZIAIgBAUIQCg5fc3ViYWNjb3VudF9pZCI4ChNMaXN0QXBpS2V5c1Jlc3BvbnNlEiEKCGFwaV9rZXlzGAEgAygLMg8uYXV0aC52MS5BcGlLZXkiJwoTRGVsZXRlQXBpS2V5UmVxdWVzdBIQCgZrZXlfaWQYASABKAlCACIWChREZWxldGVBcGlLZXlSZXNwb25zZSIkChBHZXRBcGlLZXlSZXF1ZXN0EhAKBmtleV9pZBgBIAEoCUIAIjUKEUdldEFwaUtleVJlc3BvbnNlEiAKB2FwaV9rZXkYASABKAsyDy5hdXRoLnYxLkFwaUtleSK3AQoQQXBpS2V5VXBkYXRlU3BlYxIPCgVsYWJlbBgBIAEoCUIAEg4KBGljb24YAiABKAlCABIPCgVjb2xvchgDIAEoCUIAEicKBnN0YXR1cxgEIAEoDjIVLmF1dGgudjEuQXBpS2V5U3RhdHVzQgASFgoMaXBfd2hpdGVsaXN0GAUgAygJQgASLgoKZXhwaXJlc19hdBgGIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXA6ACKlAQoTVXBkYXRlQXBpS2V5UmVxdWVzdBIQCgZrZXlfaWQYASABKAlCABIsCgdhcGlfa2V5GAIgASgLMhkuYXV0aC52MS5BcGlLZXlVcGRhdGVTcGVjQgASMQoLdXBkYXRlX21hc2sYAyABKAsyGi5nb29nbGUucHJvdG9idWYuRmllbGRNYXNrQgASGwoRZXhwZWN0ZWRfcmV2aXNpb24YBCABKARCACI4ChRVcGRhdGVBcGlLZXlSZXNwb25zZRIgCgdhcGlfa2V5GAEgASgLMg8uYXV0aC52MS5BcGlLZXkqVQoMQXBpS2V5U3RhdHVzEh4KGkFQSV9LRVlfU1RBVFVTX1VOU1BFQ0lGSUVEEAASCgoGQUNUSVZFEAESCwoHUkVWT0tFRBACEgwKCERJU0FCTEVEEAMyjgMKDUFwaUtleVNlcnZpY2USTQoMQ3JlYXRlQXBpS2V5EhwuYXV0aC52MS5DcmVhdGVBcGlLZXlSZXF1ZXN0Gh0uYXV0aC52MS5DcmVhdGVBcGlLZXlSZXNwb25zZSIAEkoKC0xpc3RBcGlLZXlzEhsuYXV0aC52MS5MaXN0QXBpS2V5c1JlcXVlc3QaHC5hdXRoLnYxLkxpc3RBcGlLZXlzUmVzcG9uc2UiABJECglHZXRBcGlLZXkSGS5hdXRoLnYxLkdldEFwaUtleVJlcXVlc3QaGi5hdXRoLnYxLkdldEFwaUtleVJlc3BvbnNlIgASTQoMRGVsZXRlQXBpS2V5EhwuYXV0aC52MS5EZWxldGVBcGlLZXlSZXF1ZXN0Gh0uYXV0aC52MS5EZWxldGVBcGlLZXlSZXNwb25zZSIAEk0KDFVwZGF0ZUFwaUtleRIcLmF1dGgudjEuVXBkYXRlQXBpS2V5UmVxdWVzdBodLmF1dGgudjEuVXBkYXRlQXBpS2V5UmVzcG9uc2UiAEI8WjpnaXRodWIuY29tL0ZhYnJpYy1MYWJzL3BvbHllc3Rlci1zZGstZ28vZ2VuL2F1dGgvdjE7YXV0aHYxYgZwcm90bzM=\", [file_google_protobuf_field_mask, file_google_protobuf_timestamp, file_polyester_api_options]);\n\n/**\n * ApiKey is public API key metadata. It never includes the private key or seed.\n *\n * @generated from message auth.v1.ApiKey\n */\nexport type ApiKey = Message<\"auth.v1.ApiKey\"> & {\n  /**\n   * Stable opaque identifier used to refer to this key, formatted as \"ak_\"\n   * followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string key_id = 2;\n   */\n  keyId: string;\n\n  /**\n   * Human-readable label for the key. Maximum length is 64 characters.\n   *\n   * @generated from field: string label = 3;\n   */\n  label: string;\n\n  /**\n   * Optional user-chosen icon/emoji for UI display.\n   *\n   * @generated from field: string icon = 9;\n   */\n  icon: string;\n\n  /**\n   * Optional user-chosen color token for UI display.\n   *\n   * @generated from field: string color = 10;\n   */\n  color: string;\n\n  /**\n   * Optional CIDR whitelist. Empty means no IP restriction. Maximum 32 unique\n   * entries.\n   *\n   * @generated from field: repeated string ip_whitelist = 4;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Current key status.\n   *\n   * @generated from field: auth.v1.ApiKeyStatus status = 6;\n   */\n  status: ApiKeyStatus;\n\n  /**\n   * Optional sub-account this key is scoped to (opaque ID; empty = root-level).\n   *\n   * @generated from field: optional fixed64 subaccount_id = 7;\n   */\n  subaccountId?: bigint | undefined;\n\n  /**\n   * Optional API policy attached to this key (opaque ID).\n   * Empty means no policy is attached and the key has no permissions.\n   *\n   * @generated from field: optional fixed64 policy_id = 8;\n   */\n  policyId?: bigint | undefined;\n\n  /**\n   * Time in UTC when this key was created.\n   *\n   * @generated from field: google.protobuf.Timestamp created_at = 20;\n   */\n  createdAt?: Timestamp | undefined;\n\n  /**\n   * Last time in UTC when this key authenticated a request. Omitted when the\n   * key has not been used.\n   *\n   * @generated from field: google.protobuf.Timestamp last_used_at = 21;\n   */\n  lastUsedAt?: Timestamp | undefined;\n\n  /**\n   * Ed25519 public key bytes associated with this API key. The private key or\n   * seed is never returned by the API.\n   *\n   * @generated from field: bytes public_key_ed25519 = 22;\n   */\n  publicKeyEd25519: Uint8Array;\n\n  /**\n   * Optional expiry time in UTC. When set, the key cannot authenticate requests\n   * after this time, regardless of status.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 23;\n   */\n  expiresAt?: Timestamp | undefined;\n\n  /**\n   * Read-only actor label describing who created this key, such as a username\n   * or account label.\n   *\n   * @generated from field: string created_by_actor = 24;\n   */\n  createdByActor: string;\n\n  /**\n   * Time in UTC when this key's configuration was last changed. For the same\n   * key, later is fresher, equal is an idempotent replay, and earlier is stale.\n   * Equal timestamps with different configuration indicate an invariant failure.\n   * This is independent of last_used_at, which tracks authentication activity.\n   *\n   * @generated from field: google.protobuf.Timestamp updated_at = 25;\n   */\n  updatedAt?: Timestamp | undefined;\n\n  /**\n   * Monotonic resource revision used for conditional updates.\n   *\n   * @generated from field: uint64 revision = 26;\n   */\n  revision: bigint;\n};\n\n/**\n * Describes the message auth.v1.ApiKey.\n * Use `create(ApiKeySchema)` to create a new message.\n */\nexport const ApiKeySchema: GenMessage<ApiKey> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 0);\n\n/**\n * CreateApiKeyRequest creates a new API key. Clients generate the Ed25519 key\n * pair locally and submit only the public key.\n *\n * @generated from message auth.v1.CreateApiKeyRequest\n */\nexport type CreateApiKeyRequest = Message<\"auth.v1.CreateApiKeyRequest\"> & {\n  /**\n   * Human-readable label for the key. Required; 1 to 64 characters.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n\n  /**\n   * Optional sub-account to scope this key to (opaque ID). If unset, the key is\n   * root-level.\n   *\n   * @generated from field: optional fixed64 subaccount_id = 3;\n   */\n  subaccountId?: bigint | undefined;\n\n  /**\n   * Optional user-chosen icon/emoji for UI display.\n   *\n   * @generated from field: string icon = 6;\n   */\n  icon: string;\n\n  /**\n   * Optional user-chosen color token for UI display.\n   *\n   * @generated from field: string color = 7;\n   */\n  color: string;\n\n  /**\n   * Optional CIDR whitelist. Empty means no IP restriction. Maximum 32 unique\n   * entries.\n   *\n   * @generated from field: repeated string ip_whitelist = 4;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Ed25519 public key bytes. Must be exactly 32 bytes. The private key or seed\n   * must never be sent to the API.\n   *\n   * @generated from field: bytes public_key_ed25519 = 5;\n   */\n  publicKeyEd25519: Uint8Array;\n};\n\n/**\n * Describes the message auth.v1.CreateApiKeyRequest.\n * Use `create(CreateApiKeyRequestSchema)` to create a new message.\n */\nexport const CreateApiKeyRequestSchema: GenMessage<CreateApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 1);\n\n/**\n * CreateApiKeyResponse returns the created API key metadata.\n *\n * @generated from message auth.v1.CreateApiKeyResponse\n */\nexport type CreateApiKeyResponse = Message<\"auth.v1.CreateApiKeyResponse\"> & {\n  /**\n   * Created API key metadata. The private key or seed is never returned.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.CreateApiKeyResponse.\n * Use `create(CreateApiKeyResponseSchema)` to create a new message.\n */\nexport const CreateApiKeyResponseSchema: GenMessage<CreateApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 2);\n\n/**\n * ListApiKeysRequest lists non-revoked API keys visible to the caller.\n *\n * @generated from message auth.v1.ListApiKeysRequest\n */\nexport type ListApiKeysRequest = Message<\"auth.v1.ListApiKeysRequest\"> & {\n  /**\n   * Optional filter: only keys scoped to this sub-account (opaque ID). The\n   * caller must own or administer the sub-account. If unset, only non-revoked\n   * keys owned by the caller are returned.\n   *\n   * @generated from field: optional fixed64 subaccount_id = 1;\n   */\n  subaccountId?: bigint | undefined;\n};\n\n/**\n * Describes the message auth.v1.ListApiKeysRequest.\n * Use `create(ListApiKeysRequestSchema)` to create a new message.\n */\nexport const ListApiKeysRequestSchema: GenMessage<ListApiKeysRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 3);\n\n/**\n * ListApiKeysResponse contains matching API keys, newest first by creation time.\n *\n * @generated from message auth.v1.ListApiKeysResponse\n */\nexport type ListApiKeysResponse = Message<\"auth.v1.ListApiKeysResponse\"> & {\n  /**\n   * Matching API keys, newest first. Revoked keys are excluded.\n   *\n   * @generated from field: repeated auth.v1.ApiKey api_keys = 1;\n   */\n  apiKeys: ApiKey[];\n};\n\n/**\n * Describes the message auth.v1.ListApiKeysResponse.\n * Use `create(ListApiKeysResponseSchema)` to create a new message.\n */\nexport const ListApiKeysResponseSchema: GenMessage<ListApiKeysResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 4);\n\n/**\n * DeleteApiKeyRequest permanently revokes an API key.\n *\n * @generated from message auth.v1.DeleteApiKeyRequest\n */\nexport type DeleteApiKeyRequest = Message<\"auth.v1.DeleteApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier (e.g. \"ak_<hex>\"). This is the stable public\n   * handle for a key.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n};\n\n/**\n * Describes the message auth.v1.DeleteApiKeyRequest.\n * Use `create(DeleteApiKeyRequestSchema)` to create a new message.\n */\nexport const DeleteApiKeyRequestSchema: GenMessage<DeleteApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 5);\n\n/**\n * DeleteApiKeyResponse is empty when revocation succeeds.\n *\n * @generated from message auth.v1.DeleteApiKeyResponse\n */\nexport type DeleteApiKeyResponse = Message<\"auth.v1.DeleteApiKeyResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.DeleteApiKeyResponse.\n * Use `create(DeleteApiKeyResponseSchema)` to create a new message.\n */\nexport const DeleteApiKeyResponseSchema: GenMessage<DeleteApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 6);\n\n/**\n * GetApiKeyRequest returns one API key visible to its owner or a sub-account admin.\n *\n * @generated from message auth.v1.GetApiKeyRequest\n */\nexport type GetApiKeyRequest = Message<\"auth.v1.GetApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier, formatted as \"ak_\" followed by 32 lowercase hex\n   * characters.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n};\n\n/**\n * Describes the message auth.v1.GetApiKeyRequest.\n * Use `create(GetApiKeyRequestSchema)` to create a new message.\n */\nexport const GetApiKeyRequestSchema: GenMessage<GetApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 7);\n\n/**\n * GetApiKeyResponse returns one API key visible to the caller.\n *\n * @generated from message auth.v1.GetApiKeyResponse\n */\nexport type GetApiKeyResponse = Message<\"auth.v1.GetApiKeyResponse\"> & {\n  /**\n   * Matching API key metadata.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.GetApiKeyResponse.\n * Use `create(GetApiKeyResponseSchema)` to create a new message.\n */\nexport const GetApiKeyResponseSchema: GenMessage<GetApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 8);\n\n/**\n * ApiKeyUpdateSpec contains mutable API key configuration.\n *\n * @generated from message auth.v1.ApiKeyUpdateSpec\n */\nexport type ApiKeyUpdateSpec = Message<\"auth.v1.ApiKeyUpdateSpec\"> & {\n  /**\n   * Human-friendly label for the key. Empty clears the label when selected.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n\n  /**\n   * User-chosen icon/emoji for UI display. Empty clears the icon when selected.\n   *\n   * @generated from field: string icon = 2;\n   */\n  icon: string;\n\n  /**\n   * User-chosen color token for UI display. Empty clears the color when selected.\n   *\n   * @generated from field: string color = 3;\n   */\n  color: string;\n\n  /**\n   * New status. ACTIVE and DISABLED are allowed; revocation uses DeleteApiKey.\n   *\n   * @generated from field: auth.v1.ApiKeyStatus status = 4;\n   */\n  status: ApiKeyStatus;\n\n  /**\n   * Complete replacement IP whitelist. Empty clears the restriction when selected.\n   *\n   * @generated from field: repeated string ip_whitelist = 5;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Expiry time in UTC. When selected, omission or the epoch clears expiry.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 6;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.ApiKeyUpdateSpec.\n * Use `create(ApiKeyUpdateSpecSchema)` to create a new message.\n */\nexport const ApiKeyUpdateSpecSchema: GenMessage<ApiKeyUpdateSpec> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 9);\n\n/**\n * UpdateApiKeyRequest changes selected mutable fields on an existing API key.\n *\n * @generated from message auth.v1.UpdateApiKeyRequest\n */\nexport type UpdateApiKeyRequest = Message<\"auth.v1.UpdateApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier to update.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n\n  /**\n   * Candidate values for fields selected by update_mask.\n   *\n   * @generated from field: auth.v1.ApiKeyUpdateSpec api_key = 2;\n   */\n  apiKey?: ApiKeyUpdateSpec | undefined;\n\n  /**\n   * Mutable fields to apply. Paths are relative to api_key. The mask is required,\n   * must be non-empty, and cannot contain \"*\".\n   *\n   * @generated from field: google.protobuf.FieldMask update_mask = 3;\n   */\n  updateMask?: FieldMask | undefined;\n\n  /**\n   * Revision returned by the latest successful read.\n   *\n   * @generated from field: uint64 expected_revision = 4;\n   */\n  expectedRevision: bigint;\n};\n\n/**\n * Describes the message auth.v1.UpdateApiKeyRequest.\n * Use `create(UpdateApiKeyRequestSchema)` to create a new message.\n */\nexport const UpdateApiKeyRequestSchema: GenMessage<UpdateApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 10);\n\n/**\n * UpdateApiKeyResponse returns the API key after applying the update.\n *\n * @generated from message auth.v1.UpdateApiKeyResponse\n */\nexport type UpdateApiKeyResponse = Message<\"auth.v1.UpdateApiKeyResponse\"> & {\n  /**\n   * Updated API key metadata.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.UpdateApiKeyResponse.\n * Use `create(UpdateApiKeyResponseSchema)` to create a new message.\n */\nexport const UpdateApiKeyResponseSchema: GenMessage<UpdateApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 11);\n\n/**\n * Status of an API key.\n *\n * @generated from enum auth.v1.ApiKeyStatus\n */\nexport enum ApiKeyStatus {\n  /**\n   * No API key status specified.\n   *\n   * @generated from enum value: API_KEY_STATUS_UNSPECIFIED = 0;\n   */\n  API_KEY_STATUS_UNSPECIFIED = 0,\n\n  /**\n   * Key can authenticate requests.\n   *\n   * @generated from enum value: ACTIVE = 1;\n   */\n  ACTIVE = 1,\n\n  /**\n   * Key has been permanently revoked and cannot be used again.\n   *\n   * @generated from enum value: REVOKED = 2;\n   */\n  REVOKED = 2,\n\n  /**\n   * Key is temporarily disabled and cannot authenticate requests until re-enabled.\n   *\n   * @generated from enum value: DISABLED = 3;\n   */\n  DISABLED = 3,\n}\n\n/**\n * Describes the enum auth.v1.ApiKeyStatus.\n */\nexport const ApiKeyStatusSchema: GenEnum<ApiKeyStatus> = /*@__PURE__*/\n  enumDesc(file_auth_v1_api_keys, 0);\n\n/**\n * ApiKeyService manages API keys for authenticated callers.\n *\n * @generated from service auth.v1.ApiKeyService\n */\nexport const ApiKeyService: GenService<{\n  /**\n   * Create a new API key for the caller. Account security settings may require\n   * MFA enrollment or a fresh step-up proof. The acting caller's root account\n   * must have accepted the current terms, including when targeting a shared\n   * subaccount; otherwise FailedPrecondition with AUTH_TERMS_NOT_ACCEPTED is returned.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.CreateApiKey\n   */\n  createApiKey: {\n    methodKind: \"unary\";\n    input: typeof CreateApiKeyRequestSchema;\n    output: typeof CreateApiKeyResponseSchema;\n  },\n  /**\n   * List non-revoked API keys visible to the caller, newest first.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.ListApiKeys\n   */\n  listApiKeys: {\n    methodKind: \"unary\";\n    input: typeof ListApiKeysRequestSchema;\n    output: typeof ListApiKeysResponseSchema;\n  },\n  /**\n   * Get a single API key owned by the caller or scoped to a sub-account the caller administers.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.GetApiKey\n   */\n  getApiKey: {\n    methodKind: \"unary\";\n    input: typeof GetApiKeyRequestSchema;\n    output: typeof GetApiKeyResponseSchema;\n  },\n  /**\n   * Revoke an API key permanently.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.DeleteApiKey\n   */\n  deleteApiKey: {\n    methodKind: \"unary\";\n    input: typeof DeleteApiKeyRequestSchema;\n    output: typeof DeleteApiKeyResponseSchema;\n  },\n  /**\n   * Update API key metadata and allowed status transitions. Revocation must use\n   * DeleteApiKey.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.UpdateApiKey\n   */\n  updateApiKey: {\n    methodKind: \"unary\";\n    input: typeof UpdateApiKeyRequestSchema;\n    output: typeof UpdateApiKeyResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_api_keys, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,wBACX,uBAAS,4nFAA4nF;CAAC;CAAiC;CAAgC;AAA0B,CAAC;;;;;AAgIpuF,MAAa,eACX,0BAAY,uBAAuB,CAAC;;;;;AA2DtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,6BACX,0BAAY,uBAAuB,CAAC;;;;;AAsBtC,MAAa,2BACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AAqBtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AActC,MAAa,6BACX,0BAAY,uBAAuB,CAAC;;;;;AAqBtC,MAAa,yBACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,0BACX,0BAAY,uBAAuB,CAAC;;;;;AAuDtC,MAAa,yBACX,0BAAY,uBAAuB,CAAC;;;;;AA0CtC,MAAa,4BACX,0BAAY,uBAAuB,EAAE;;;;;AAoBvC,MAAa,6BACX,0BAAY,uBAAuB,EAAE;;;;;;AAOvC,IAAY,eAAL,yBAAA,cAAA;;;;;;CAML,aAAA,aAAA,gCAAA,KAAA;;;;;;CAOA,aAAA,aAAA,YAAA,KAAA;;;;;;CAOA,aAAA,aAAA,aAAA,KAAA;;;;;;CAOA,aAAA,aAAA,cAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,qBACX,uBAAS,uBAAuB,CAAC;;;;;;AAOnC,MAAa,gBAwDX,0BAAY,uBAAuB,CAAC"}

package/dist/gen/auth/v1/auth_pb.d.ts

@@ -3,7 +3,7 @@ import { Message } from "@bufbuild/protobuf";
 import { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
 import { Timestamp } from "@bufbuild/protobuf/wkt";
 declare namespace auth_pb_d_exports {
-  export { AuthErrorCode, AuthErrorCodeSchema, AuthErrorDetail, AuthErrorDetailSchema, AuthService, GetNonceRequest, GetNonceRequestSchema, GetNonceResponse, GetNonceResponseSchema, LoginWithWalletRequest, LoginWithWalletRequestSchema, LoginWithWalletResponse, LoginWithWalletResponseSchema, MeRequest, MeRequestSchema, MeResponse, MeResponseSchema, file_auth_v1_auth };
+  export { AcceptTermsRequest, AcceptTermsRequestSchema, AcceptTermsResponse, AcceptTermsResponseSchema, AuthErrorCode, AuthErrorCodeSchema, AuthErrorDetail, AuthErrorDetailSchema, AuthService, GetNonceRequest, GetNonceRequestSchema, GetNonceResponse, GetNonceResponseSchema, LoginWithWalletRequest, LoginWithWalletRequestSchema, LoginWithWalletResponse, LoginWithWalletResponseSchema, MeRequest, MeRequestSchema, MeResponse, MeResponseSchema, file_auth_v1_auth };
 }
 /**
  * Describes the file auth/v1/auth.proto.
@@ -238,6 +238,29 @@ type AuthErrorDetail = Message<"auth.v1.AuthErrorDetail"> & {
  * Use `create(AuthErrorDetailSchema)` to create a new message.
  */
 declare const AuthErrorDetailSchema: GenMessage<AuthErrorDetail>;
+/**
+ * AcceptTermsRequest records explicit consent to the currently required terms.
+ *
+ * @generated from message auth.v1.AcceptTermsRequest
+ */
+type AcceptTermsRequest = Message<"auth.v1.AcceptTermsRequest"> & {};
+/**
+ * Describes the message auth.v1.AcceptTermsRequest.
+ * Use `create(AcceptTermsRequestSchema)` to create a new message.
+ */
+declare const AcceptTermsRequestSchema: GenMessage<AcceptTermsRequest>;
+/**
+ * AcceptTermsResponse confirms acceptance. Repeated acceptance of the current
+ * version succeeds and preserves the first acceptance time.
+ *
+ * @generated from message auth.v1.AcceptTermsResponse
+ */
+type AcceptTermsResponse = Message<"auth.v1.AcceptTermsResponse"> & {};
+/**
+ * Describes the message auth.v1.AcceptTermsResponse.
+ * Use `create(AcceptTermsResponseSchema)` to create a new message.
+ */
+declare const AcceptTermsResponseSchema: GenMessage<AcceptTermsResponse>;
 /**
  * High-level error codes for authentication and account-domain failures.
  *
@@ -483,14 +506,20 @@ declare enum AuthErrorCode {
    *
    * @generated from enum value: AUTH_INTERNAL_ERROR = 40;
    */
-  AUTH_INTERNAL_ERROR = 40
+  AUTH_INTERNAL_ERROR = 40,
+  /**
+   * The caller has not explicitly accepted the currently required terms.
+   *
+   * @generated from enum value: AUTH_TERMS_NOT_ACCEPTED = 41;
+   */
+  AUTH_TERMS_NOT_ACCEPTED = 41
 }
 /**
  * Describes the enum auth.v1.AuthErrorCode.
  */
 declare const AuthErrorCodeSchema: GenEnum<AuthErrorCode>;
 /**
- * AuthService manages wallet login and caller authentication context.
+ * AuthService manages wallet login, explicit terms consent, and caller authentication context.
  *
  * @generated from service auth.v1.AuthService
  */
@@ -506,7 +535,8 @@ declare const AuthService: GenService<{
     output: typeof GetNonceResponseSchema;
   };
   /**
-   * Verify a signed nonce and issue an access token.
+   * Verify a signed nonce and issue an access token. Login and account creation
+   * do not accept terms; explicit consent is recorded only by AcceptTerms.
    *
    * @generated from rpc auth.v1.AuthService.LoginWithWallet
    */
@@ -515,6 +545,20 @@ declare const AuthService: GenService<{
     input: typeof LoginWithWalletRequestSchema;
     output: typeof LoginWithWalletResponseSchema;
   };
+  /**
+   * Explicitly accept the currently required terms for the caller's root account.
+   * Requires an interactive JWT session; API keys are not allowed. No MFA is
+   * required. Login, trading, reads, and use of existing resources remain available
+   * without acceptance. Only CreateSubaccount, CreateApiKey, and
+   * CreateDepositAddress require acceptance of the current version.
+   *
+   * @generated from rpc auth.v1.AuthService.AcceptTerms
+   */
+  acceptTerms: {
+    methodKind: "unary";
+    input: typeof AcceptTermsRequestSchema;
+    output: typeof AcceptTermsResponseSchema;
+  };
   /**
    * Return the caller's current auth context.
    *
@@ -527,5 +571,5 @@ declare const AuthService: GenService<{
   };
 }>;
 //#endregion
-export { AuthErrorCode, AuthErrorCodeSchema, AuthErrorDetail, AuthErrorDetailSchema, AuthService, GetNonceRequest, GetNonceRequestSchema, GetNonceResponse, GetNonceResponseSchema, LoginWithWalletRequest, LoginWithWalletRequestSchema, LoginWithWalletResponse, LoginWithWalletResponseSchema, MeRequest, MeRequestSchema, MeResponse, MeResponseSchema, auth_pb_d_exports, file_auth_v1_auth };
+export { AcceptTermsRequest, AcceptTermsRequestSchema, AcceptTermsResponse, AcceptTermsResponseSchema, AuthErrorCode, AuthErrorCodeSchema, AuthErrorDetail, AuthErrorDetailSchema, AuthService, GetNonceRequest, GetNonceRequestSchema, GetNonceResponse, GetNonceResponseSchema, LoginWithWalletRequest, LoginWithWalletRequestSchema, LoginWithWalletResponse, LoginWithWalletResponseSchema, MeRequest, MeRequestSchema, MeResponse, MeResponseSchema, auth_pb_d_exports, file_auth_v1_auth };
 //# sourceMappingURL=auth_pb.d.ts.map

package/dist/gen/auth/v1/auth_pb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"mappings":";;;;;;;;;;cAea,mBAAmB;;;;;;;KASpB,kBAAkB;;;;;;EAM5B;;;;;;cAOW,uBAAuB,WAAW;;;;;;KAQnC,mBAAmB;;;;;;;EAO7B;;;;;;EAOA,YAAY;;;;;;cAOD,wBAAwB,WAAW;;;;;;;KASpC,yBAAyB;;;;;;;EAOnC;;;;;;EAOA;;;;;;;EAQA;;;;;;;EAQA;;;;;;;EAQA;;;;;;;;EASA;;;;;;EAOA;;;;;;cAOW,8BAA8B,WAAW;;;;;;;KAS1C,0BAA0B;;;;;;EAMpC;;;;;;EAOA,YAAY;;;;;;EAOZ;;;;;;EAOA;;;;;;EAOA,UAAU;;;;;;cAOC,+BAA+B,WAAW;;;;;;;KAS3C,YAAY;;;;;cAOX,iBAAiB,WAAW;;;;;;KAQ7B,aAAa;;;;;;EAMvB;;;;;;;;EASA;;;;;;EAOA;;;;;;;EAQA;;;;;;EAOA,UAAU;;;;;;cAOC,kBAAkB,WAAW;;;;;;KAQ9B,kBAAkB;;;;;;EAM5B,MAAM;;;;;;EAON;;;;;;cAOW,uBAAuB,WAAW;;;;;;aAQnC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,qBAAqB,QAAQ;;;;;;cAQ7B,aAAa;;;;;;EAMxB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}
+{"version":3,"file":"auth_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"mappings":";;;;;;;;;;cAea,mBAAmB;;;;;;;KASpB,kBAAkB;;;;;;EAM5B;;;;;;cAOW,uBAAuB,WAAW;;;;;;KAQnC,mBAAmB;;;;;;;EAO7B;;;;;;EAOA,YAAY;;;;;;cAOD,wBAAwB,WAAW;;;;;;;KASpC,yBAAyB;;;;;;;EAOnC;;;;;;EAOA;;;;;;;EAQA;;;;;;;EAQA;;;;;;;EAQA;;;;;;;;EASA;;;;;;EAOA;;;;;;cAOW,8BAA8B,WAAW;;;;;;;KAS1C,0BAA0B;;;;;;EAMpC;;;;;;EAOA,YAAY;;;;;;EAOZ;;;;;;EAOA;;;;;;EAOA,UAAU;;;;;;cAOC,+BAA+B,WAAW;;;;;;;KAS3C,YAAY;;;;;cAOX,iBAAiB,WAAW;;;;;;KAQ7B,aAAa;;;;;;EAMvB;;;;;;;;EASA;;;;;;EAOA;;;;;;;EAQA;;;;;;EAOA,UAAU;;;;;;cAOC,kBAAkB,WAAW;;;;;;KAQ9B,kBAAkB;;;;;;EAM5B,MAAM;;;;;;EAON;;;;;;cAOW,uBAAuB,WAAW;;;;;;KAQnC,qBAAqB;;;;;cAOpB,0BAA0B,WAAW;;;;;;;KAStC,sBAAsB;;;;;cAOrB,2BAA2B,WAAW;;;;;;aAQvC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,qBAAqB,QAAQ;;;;;;cAQ7B,aAAa;;;;;;EAMxB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;;;;EAWjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}

package/dist/gen/auth/v1/auth_pb.js

@@ -4,6 +4,8 @@ import { enumDesc, fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf
 import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
 //#region src/gen/auth/v1/auth_pb.ts
 var auth_pb_exports = /* @__PURE__ */ __exportAll({
+	AcceptTermsRequestSchema: () => AcceptTermsRequestSchema,
+	AcceptTermsResponseSchema: () => AcceptTermsResponseSchema,
 	AuthErrorCode: () => AuthErrorCode,
 	AuthErrorCodeSchema: () => AuthErrorCodeSchema,
 	AuthErrorDetailSchema: () => AuthErrorDetailSchema,
@@ -19,7 +21,7 @@ var auth_pb_exports = /* @__PURE__ */ __exportAll({
 /**
 * Describes the file auth/v1/auth.proto.
 */
-const file_auth_v1_auth = /*@__PURE__*/ fileDesc("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", [file_auth_v1_mfa, file_google_protobuf_timestamp]);
+const file_auth_v1_auth = /*@__PURE__*/ fileDesc("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", [file_auth_v1_mfa, file_google_protobuf_timestamp]);
 /**
 * Describes the message auth.v1.GetNonceRequest.
 * Use `create(GetNonceRequestSchema)` to create a new message.
@@ -56,6 +58,16 @@ const MeResponseSchema = /*@__PURE__*/ messageDesc(file_auth_v1_auth, 5);
 */
 const AuthErrorDetailSchema = /*@__PURE__*/ messageDesc(file_auth_v1_auth, 6);
 /**
+* Describes the message auth.v1.AcceptTermsRequest.
+* Use `create(AcceptTermsRequestSchema)` to create a new message.
+*/
+const AcceptTermsRequestSchema = /*@__PURE__*/ messageDesc(file_auth_v1_auth, 7);
+/**
+* Describes the message auth.v1.AcceptTermsResponse.
+* Use `create(AcceptTermsResponseSchema)` to create a new message.
+*/
+const AcceptTermsResponseSchema = /*@__PURE__*/ messageDesc(file_auth_v1_auth, 8);
+/**
 * High-level error codes for authentication and account-domain failures.
 *
 * @generated from enum auth.v1.AuthErrorCode
@@ -301,6 +313,12 @@ let AuthErrorCode = /* @__PURE__ */ function(AuthErrorCode) {
 	* @generated from enum value: AUTH_INTERNAL_ERROR = 40;
 	*/
 	AuthErrorCode[AuthErrorCode["AUTH_INTERNAL_ERROR"] = 40] = "AUTH_INTERNAL_ERROR";
+	/**
+	* The caller has not explicitly accepted the currently required terms.
+	*
+	* @generated from enum value: AUTH_TERMS_NOT_ACCEPTED = 41;
+	*/
+	AuthErrorCode[AuthErrorCode["AUTH_TERMS_NOT_ACCEPTED"] = 41] = "AUTH_TERMS_NOT_ACCEPTED";
 	return AuthErrorCode;
 }({});
 /**
@@ -308,12 +326,12 @@ let AuthErrorCode = /* @__PURE__ */ function(AuthErrorCode) {
 */
 const AuthErrorCodeSchema = /*@__PURE__*/ enumDesc(file_auth_v1_auth, 0);
 /**
-* AuthService manages wallet login and caller authentication context.
+* AuthService manages wallet login, explicit terms consent, and caller authentication context.
 *
 * @generated from service auth.v1.AuthService
 */
 const AuthService = /*@__PURE__*/ serviceDesc(file_auth_v1_auth, 0);
 //#endregion
-export { AuthErrorCode, AuthErrorCodeSchema, AuthErrorDetailSchema, AuthService, GetNonceRequestSchema, GetNonceResponseSchema, LoginWithWalletRequestSchema, LoginWithWalletResponseSchema, MeRequestSchema, MeResponseSchema, auth_pb_exports, file_auth_v1_auth };
+export { AcceptTermsRequestSchema, AcceptTermsResponseSchema, AuthErrorCode, AuthErrorCodeSchema, AuthErrorDetailSchema, AuthService, GetNonceRequestSchema, GetNonceResponseSchema, LoginWithWalletRequestSchema, LoginWithWalletResponseSchema, MeRequestSchema, MeResponseSchema, auth_pb_exports, file_auth_v1_auth };
 
 //# sourceMappingURL=auth_pb.js.map

package/dist/gen/auth/v1/auth_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/auth.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { SessionInfo } from \"./mfa_pb.js\";\nimport { file_auth_v1_mfa } from \"./mfa_pb.js\";\nimport type { Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/auth.proto.\n */\nexport const file_auth_v1_auth: GenFile = /*@__PURE__*/\n  fileDesc(\"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\", [file_auth_v1_mfa, file_google_protobuf_timestamp]);\n\n/**\n * GetNonceRequest requests a short-lived login nonce for a smart-account\n * address. The wallet must sign a message containing this nonce before login.\n *\n * @generated from message auth.v1.GetNonceRequest\n */\nexport type GetNonceRequest = Message<\"auth.v1.GetNonceRequest\"> & {\n  /**\n   * Smart-account EVM address, formatted as 0x plus 40 hex characters.\n   *\n   * @generated from field: string smart_account_address = 1;\n   */\n  smartAccountAddress: string;\n};\n\n/**\n * Describes the message auth.v1.GetNonceRequest.\n * Use `create(GetNonceRequestSchema)` to create a new message.\n */\nexport const GetNonceRequestSchema: GenMessage<GetNonceRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 0);\n\n/**\n * GetNonceResponse contains the nonce that must be signed for wallet login.\n *\n * @generated from message auth.v1.GetNonceResponse\n */\nexport type GetNonceResponse = Message<\"auth.v1.GetNonceResponse\"> & {\n  /**\n   * Random login nonce. The nonce is single-purpose and is replaced by each new\n   * nonce request for the same smart-account address.\n   *\n   * @generated from field: string nonce = 1;\n   */\n  nonce: string;\n\n  /**\n   * Time in UTC when the nonce expires. Login nonces expire after 5 minutes.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 2;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.GetNonceResponse.\n * Use `create(GetNonceResponseSchema)` to create a new message.\n */\nexport const GetNonceResponseSchema: GenMessage<GetNonceResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 1);\n\n/**\n * LoginWithWalletRequest completes smart-account wallet login using a signed\n * nonce.\n *\n * @generated from message auth.v1.LoginWithWalletRequest\n */\nexport type LoginWithWalletRequest = Message<\"auth.v1.LoginWithWalletRequest\"> & {\n  /**\n   * Smart-account EVM address that produced the signature, formatted as 0x plus\n   * 40 hex characters.\n   *\n   * @generated from field: string smart_account_address = 1;\n   */\n  smartAccountAddress: string;\n\n  /**\n   * Nonce returned by GetNonce. The nonce must be unused and not expired.\n   *\n   * @generated from field: string nonce = 2;\n   */\n  nonce: string;\n\n  /**\n   * Signature over the canonical login message containing the nonce. Maximum\n   * length is 8192 characters to support universal wallet signatures.\n   *\n   * @generated from field: string signature = 3;\n   */\n  signature: string;\n\n  /**\n   * Optional user-agent string for account security and audit displays. Maximum\n   * length is 512 characters.\n   *\n   * @generated from field: string user_agent = 4;\n   */\n  userAgent: string;\n\n  /**\n   * Optional caller IP address for account security and audit displays. Maximum\n   * length is 64 characters.\n   *\n   * @generated from field: string ip = 5;\n   */\n  ip: string;\n\n  /**\n   * Optional primary wallet address that controls this smart account, formatted\n   * as 0x plus 40 hex characters. This value is metadata and is not used for\n   * signature verification.\n   *\n   * @generated from field: string primary_wallet_address = 6;\n   */\n  primaryWalletAddress: string;\n\n  /**\n   * Optional provider hint for the primary wallet. Maximum length is 32 characters.\n   *\n   * @generated from field: string wallet_provider = 7;\n   */\n  walletProvider: string;\n};\n\n/**\n * Describes the message auth.v1.LoginWithWalletRequest.\n * Use `create(LoginWithWalletRequestSchema)` to create a new message.\n */\nexport const LoginWithWalletRequestSchema: GenMessage<LoginWithWalletRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 2);\n\n/**\n * LoginWithWalletResponse returns a session token for the authenticated root\n * account.\n *\n * @generated from message auth.v1.LoginWithWalletResponse\n */\nexport type LoginWithWalletResponse = Message<\"auth.v1.LoginWithWalletResponse\"> & {\n  /**\n   * Bearer access token for authenticated API calls.\n   *\n   * @generated from field: string access_token = 1;\n   */\n  accessToken: string;\n\n  /**\n   * Time in UTC when access_token expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 2;\n   */\n  expiresAt?: Timestamp | undefined;\n\n  /**\n   * Root account the token is bound to (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 10;\n   */\n  accountId: bigint;\n\n  /**\n   * Optional current username for the root account (empty if not set).\n   *\n   * @generated from field: string username = 13;\n   */\n  username: string;\n\n  /**\n   * Session assurance details for the issued access token.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 20;\n   */\n  session?: SessionInfo | undefined;\n};\n\n/**\n * Describes the message auth.v1.LoginWithWalletResponse.\n * Use `create(LoginWithWalletResponseSchema)` to create a new message.\n */\nexport const LoginWithWalletResponseSchema: GenMessage<LoginWithWalletResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 3);\n\n/**\n * MeRequest introspects the authenticated caller from the presented access\n * token or API key.\n *\n * @generated from message auth.v1.MeRequest\n */\nexport type MeRequest = Message<\"auth.v1.MeRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.MeRequest.\n * Use `create(MeRequestSchema)` to create a new message.\n */\nexport const MeRequestSchema: GenMessage<MeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 4);\n\n/**\n * MeResponse describes the authenticated caller and current session context.\n *\n * @generated from message auth.v1.MeResponse\n */\nexport type MeResponse = Message<\"auth.v1.MeResponse\"> & {\n  /**\n   * Root account identifier (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 1;\n   */\n  accountId: bigint;\n\n  /**\n   * Stable public identifier of the API key that authenticated this request,\n   * formatted as \"ak_\" followed by 32 lowercase hexadecimal characters.\n   * Absent when the request was not authenticated with an API key.\n   *\n   * @generated from field: optional string api_key_id = 10;\n   */\n  apiKeyId?: string | undefined;\n\n  /**\n   * Optional current username for the root account (empty if not set).\n   *\n   * @generated from field: string username = 11;\n   */\n  username: string;\n\n  /**\n   * Root smart-account EVM address, formatted as 0x plus 40 hex characters.\n   * Empty if not set.\n   *\n   * @generated from field: string root_smart_account_address = 12;\n   */\n  rootSmartAccountAddress: string;\n\n  /**\n   * Session assurance details for the presented access token, if any.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 20;\n   */\n  session?: SessionInfo | undefined;\n};\n\n/**\n * Describes the message auth.v1.MeResponse.\n * Use `create(MeResponseSchema)` to create a new message.\n */\nexport const MeResponseSchema: GenMessage<MeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 5);\n\n/**\n * AuthErrorDetail describes an authentication or account-domain failure.\n *\n * @generated from message auth.v1.AuthErrorDetail\n */\nexport type AuthErrorDetail = Message<\"auth.v1.AuthErrorDetail\"> & {\n  /**\n   * Stable machine-readable auth error code.\n   *\n   * @generated from field: auth.v1.AuthErrorCode code = 1;\n   */\n  code: AuthErrorCode;\n\n  /**\n   * Human-readable error message.\n   *\n   * @generated from field: string message = 2;\n   */\n  message: string;\n};\n\n/**\n * Describes the message auth.v1.AuthErrorDetail.\n * Use `create(AuthErrorDetailSchema)` to create a new message.\n */\nexport const AuthErrorDetailSchema: GenMessage<AuthErrorDetail> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 6);\n\n/**\n * High-level error codes for authentication and account-domain failures.\n *\n * @generated from enum auth.v1.AuthErrorCode\n */\nexport enum AuthErrorCode {\n  /**\n   * No auth error code specified.\n   *\n   * @generated from enum value: AUTH_UNSPECIFIED = 0;\n   */\n  AUTH_UNSPECIFIED = 0,\n\n  /**\n   * Username format or characters are invalid.\n   *\n   * @generated from enum value: AUTH_USERNAME_INVALID = 1;\n   */\n  AUTH_USERNAME_INVALID = 1,\n\n  /**\n   * Username is already used by another account.\n   *\n   * @generated from enum value: AUTH_USERNAME_TAKEN = 2;\n   */\n  AUTH_USERNAME_TAKEN = 2,\n\n  /**\n   * Username was changed too recently.\n   *\n   * @generated from enum value: AUTH_USERNAME_COOLDOWN = 3;\n   */\n  AUTH_USERNAME_COOLDOWN = 3,\n\n  /**\n   * Account is not currently eligible to claim or change a username.\n   *\n   * @generated from enum value: AUTH_USERNAME_FEATURE_LOCKED = 4;\n   */\n  AUTH_USERNAME_FEATURE_LOCKED = 4,\n\n  /**\n   * Username is reserved and cannot be claimed by this account.\n   *\n   * @generated from enum value: AUTH_USERNAME_RESERVED = 5;\n   */\n  AUTH_USERNAME_RESERVED = 5,\n\n  /**\n   * Request is malformed or missing required input.\n   *\n   * @generated from enum value: AUTH_INVALID_REQUEST = 6;\n   */\n  AUTH_INVALID_REQUEST = 6,\n\n  /**\n   * Authentication is required for this operation.\n   *\n   * @generated from enum value: AUTH_AUTHENTICATION_REQUIRED = 7;\n   */\n  AUTH_AUTHENTICATION_REQUIRED = 7,\n\n  /**\n   * Presented session type is not allowed for this operation.\n   *\n   * @generated from enum value: AUTH_SESSION_KIND_NOT_ALLOWED = 8;\n   */\n  AUTH_SESSION_KIND_NOT_ALLOWED = 8,\n\n  /**\n   * Wallet login failed because the nonce or signature could not be verified.\n   *\n   * @generated from enum value: AUTH_WALLET_LOGIN_FAILED = 9;\n   */\n  AUTH_WALLET_LOGIN_FAILED = 9,\n\n  /**\n   * Requested resource was not found.\n   *\n   * @generated from enum value: AUTH_RESOURCE_NOT_FOUND = 10;\n   */\n  AUTH_RESOURCE_NOT_FOUND = 10,\n\n  /**\n   * Caller does not have access to the requested sub-account.\n   *\n   * @generated from enum value: AUTH_SUBACCOUNT_ACCESS_DENIED = 11;\n   */\n  AUTH_SUBACCOUNT_ACCESS_DENIED = 11,\n\n  /**\n   * Caller does not have access to the requested API key.\n   *\n   * @generated from enum value: AUTH_API_KEY_ACCESS_DENIED = 12;\n   */\n  AUTH_API_KEY_ACCESS_DENIED = 12,\n\n  /**\n   * Requested API key status transition is not allowed.\n   *\n   * @generated from enum value: AUTH_API_KEY_INVALID_STATUS_TRANSITION = 14;\n   */\n  AUTH_API_KEY_INVALID_STATUS_TRANSITION = 14,\n\n  /**\n   * Policy definition or binding is invalid.\n   *\n   * @generated from enum value: AUTH_POLICY_INVALID = 15;\n   */\n  AUTH_POLICY_INVALID = 15,\n\n  /**\n   * Smart-account address is already linked to another account.\n   *\n   * @generated from enum value: AUTH_SMART_ACCOUNT_ALREADY_LINKED = 16;\n   */\n  AUTH_SMART_ACCOUNT_ALREADY_LINKED = 16,\n\n  /**\n   * Caller does not have access to the requested invite.\n   *\n   * @generated from enum value: AUTH_INVITE_ACCESS_DENIED = 17;\n   */\n  AUTH_INVITE_ACCESS_DENIED = 17,\n\n  /**\n   * Invite cannot be used in its current state.\n   *\n   * @generated from enum value: AUTH_INVITE_INVALID_STATE = 18;\n   */\n  AUTH_INVITE_INVALID_STATE = 18,\n\n  /**\n   * MFA is not available for this account.\n   *\n   * @generated from enum value: AUTH_MFA_DISABLED = 19;\n   */\n  AUTH_MFA_DISABLED = 19,\n\n  /**\n   * Required MFA factor is not enrolled.\n   *\n   * @generated from enum value: AUTH_MFA_NOT_ENROLLED = 20;\n   */\n  AUTH_MFA_NOT_ENROLLED = 20,\n\n  /**\n   * MFA session is missing, expired, or invalid.\n   *\n   * @generated from enum value: AUTH_MFA_SESSION_INVALID = 21;\n   */\n  AUTH_MFA_SESSION_INVALID = 21,\n\n  /**\n   * MFA challenge was not found.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_NOT_FOUND = 22;\n   */\n  AUTH_MFA_CHALLENGE_NOT_FOUND = 22,\n\n  /**\n   * MFA challenge payload is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_INVALID = 23;\n   */\n  AUTH_MFA_CHALLENGE_INVALID = 23,\n\n  /**\n   * MFA challenge is locked after too many failed attempts.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_LOCKED = 24;\n   */\n  AUTH_MFA_CHALLENGE_LOCKED = 24,\n\n  /**\n   * One-time password is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_OTP_INVALID = 25;\n   */\n  AUTH_MFA_OTP_INVALID = 25,\n\n  /**\n   * Recovery code is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_RECOVERY_INVALID = 26;\n   */\n  AUTH_MFA_RECOVERY_INVALID = 26,\n\n  /**\n   * Passkey verification is not available for this challenge.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_NOT_AVAILABLE = 27;\n   */\n  AUTH_MFA_PASSKEY_NOT_AVAILABLE = 27,\n\n  /**\n   * Passkey credential is invalid for this account or challenge.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_CREDENTIAL_INVALID = 28;\n   */\n  AUTH_MFA_PASSKEY_CREDENTIAL_INVALID = 28,\n\n  /**\n   * Passkey verification failed.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_VERIFY_FAILED = 29;\n   */\n  AUTH_MFA_PASSKEY_VERIFY_FAILED = 29,\n\n  /**\n   * MFA enrollment binding is invalid or expired.\n   *\n   * @generated from enum value: AUTH_MFA_ENROLLMENT_BINDING_INVALID = 30;\n   */\n  AUTH_MFA_ENROLLMENT_BINDING_INVALID = 30,\n\n  /**\n   * A fresh step-up proof is required for this protected operation.\n   *\n   * @generated from enum value: AUTH_STEP_UP_REQUIRED = 31;\n   */\n  AUTH_STEP_UP_REQUIRED = 31,\n\n  /**\n   * A requested step-up proof is unavailable.\n   *\n   * @generated from enum value: AUTH_STEP_UP_PROOF_UNAVAILABLE = 32;\n   */\n  AUTH_STEP_UP_PROOF_UNAVAILABLE = 32,\n\n  /**\n   * The step-up proof has already been claimed.\n   *\n   * @generated from enum value: AUTH_STEP_UP_ALREADY_CLAIMED = 33;\n   */\n  AUTH_STEP_UP_ALREADY_CLAIMED = 33,\n\n  /**\n   * The requested policy cannot be removed because it is still in use.\n   *\n   * @generated from enum value: AUTH_POLICY_IN_USE = 34;\n   */\n  AUTH_POLICY_IN_USE = 34,\n\n  /**\n   * The requested policy is locked against this mutation.\n   *\n   * @generated from enum value: AUTH_POLICY_LOCKED = 35;\n   */\n  AUTH_POLICY_LOCKED = 35,\n\n  /**\n   * The requested policy does not belong to the target account scope.\n   *\n   * @generated from enum value: AUTH_POLICY_SCOPE_MISMATCH = 36;\n   */\n  AUTH_POLICY_SCOPE_MISMATCH = 36,\n\n  /**\n   * The resource changed after the caller read it.\n   *\n   * @generated from enum value: AUTH_REVISION_CONFLICT = 37;\n   */\n  AUTH_REVISION_CONFLICT = 37,\n\n  /**\n   * A recently MFA-elevated interactive session is required.\n   *\n   * @generated from enum value: AUTH_MFA_ELEVATION_REQUIRED = 38;\n   */\n  AUTH_MFA_ELEVATION_REQUIRED = 38,\n\n  /**\n   * At least one active MFA factor must remain enrolled.\n   *\n   * @generated from enum value: AUTH_MFA_LAST_FACTOR_REQUIRED = 39;\n   */\n  AUTH_MFA_LAST_FACTOR_REQUIRED = 39,\n\n  /**\n   * An unexpected internal failure prevented the auth mutation from completing.\n   *\n   * @generated from enum value: AUTH_INTERNAL_ERROR = 40;\n   */\n  AUTH_INTERNAL_ERROR = 40,\n}\n\n/**\n * Describes the enum auth.v1.AuthErrorCode.\n */\nexport const AuthErrorCodeSchema: GenEnum<AuthErrorCode> = /*@__PURE__*/\n  enumDesc(file_auth_v1_auth, 0);\n\n/**\n * AuthService manages wallet login and caller authentication context.\n *\n * @generated from service auth.v1.AuthService\n */\nexport const AuthService: GenService<{\n  /**\n   * Get a short-lived login nonce.\n   *\n   * @generated from rpc auth.v1.AuthService.GetNonce\n   */\n  getNonce: {\n    methodKind: \"unary\";\n    input: typeof GetNonceRequestSchema;\n    output: typeof GetNonceResponseSchema;\n  },\n  /**\n   * Verify a signed nonce and issue an access token.\n   *\n   * @generated from rpc auth.v1.AuthService.LoginWithWallet\n   */\n  loginWithWallet: {\n    methodKind: \"unary\";\n    input: typeof LoginWithWalletRequestSchema;\n    output: typeof LoginWithWalletResponseSchema;\n  },\n  /**\n   * Return the caller's current auth context.\n   *\n   * @generated from rpc auth.v1.AuthService.Me\n   */\n  me: {\n    methodKind: \"unary\";\n    input: typeof MeRequestSchema;\n    output: typeof MeResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_auth, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAeA,MAAa,oBACX,uBAAS,ojGAAojG,CAAC,kBAAkB,8BAA8B,CAAC;;;;;AAqBjnG,MAAa,wBACX,0BAAY,mBAAmB,CAAC;;;;;AA4BlC,MAAa,yBACX,0BAAY,mBAAmB,CAAC;;;;;AAqElC,MAAa,+BACX,0BAAY,mBAAmB,CAAC;;;;;AAiDlC,MAAa,gCACX,0BAAY,mBAAmB,CAAC;;;;;AAelC,MAAa,kBACX,0BAAY,mBAAmB,CAAC;;;;;AAmDlC,MAAa,mBACX,0BAAY,mBAAmB,CAAC;;;;;AA2BlC,MAAa,wBACX,0BAAY,mBAAmB,CAAC;;;;;;AAOlC,IAAY,gBAAL,yBAAA,eAAA;;;;;;CAML,cAAA,cAAA,sBAAA,KAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,KAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,8BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,6BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,4CAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,uCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,uBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,8BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,wBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,wBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,iCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,MAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,sBACX,uBAAS,mBAAmB,CAAC;;;;;;AAO/B,MAAa,cAgCX,0BAAY,mBAAmB,CAAC"}
+{"version":3,"file":"auth_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/auth.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { SessionInfo } from \"./mfa_pb.js\";\nimport { file_auth_v1_mfa } from \"./mfa_pb.js\";\nimport type { Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/auth.proto.\n */\nexport const file_auth_v1_auth: GenFile = /*@__PURE__*/\n  fileDesc(\"ChJhdXRoL3YxL2F1dGgucHJvdG8SB2F1dGgudjEiMgoPR2V0Tm9uY2VSZXF1ZXN0Eh8KFXNtYXJ0X2FjY291bnRfYWRkcmVzcxgBIAEoCUIAIlEKEEdldE5vbmNlUmVzcG9uc2USDQoFbm9uY2UYASABKAkSLgoKZXhwaXJlc19hdBgCIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXAiwAEKFkxvZ2luV2l0aFdhbGxldFJlcXVlc3QSHwoVc21hcnRfYWNjb3VudF9hZGRyZXNzGAEgASgJQgASDwoFbm9uY2UYAiABKAlCABITCglzaWduYXR1cmUYAyABKAlCABIUCgp1c2VyX2FnZW50GAQgASgJQgASDAoCaXAYBSABKAlCABIgChZwcmltYXJ5X3dhbGxldF9hZGRyZXNzGAYgASgJQgASGQoPd2FsbGV0X3Byb3ZpZGVyGAcgASgJQgAirAEKF0xvZ2luV2l0aFdhbGxldFJlc3BvbnNlEhQKDGFjY2Vzc190b2tlbhgBIAEoCRIuCgpleHBpcmVzX2F0GAIgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBISCgphY2NvdW50X2lkGAogASgGEhAKCHVzZXJuYW1lGA0gASgJEiUKB3Nlc3Npb24YFCABKAsyFC5hdXRoLnYxLlNlc3Npb25JbmZvIgsKCU1lUmVxdWVzdCKnAQoKTWVSZXNwb25zZRISCgphY2NvdW50X2lkGAEgASgGEhkKCmFwaV9rZXlfaWQYCiABKAlCAEgAiAEBEhAKCHVzZXJuYW1lGAsgASgJEiIKGnJvb3Rfc21hcnRfYWNjb3VudF9hZGRyZXNzGAwgASgJEiUKB3Nlc3Npb24YFCABKAsyFC5hdXRoLnYxLlNlc3Npb25JbmZvQg0KC19hcGlfa2V5X2lkIkgKD0F1dGhFcnJvckRldGFpbBIkCgRjb2RlGAEgASgOMhYuYXV0aC52MS5BdXRoRXJyb3JDb2RlEg8KB21lc3NhZ2UYAiABKAkiFAoSQWNjZXB0VGVybXNSZXF1ZXN0IhUKE0FjY2VwdFRlcm1zUmVzcG9uc2UqhQoKDUF1dGhFcnJvckNvZGUSFAoQQVVUSF9VTlNQRUNJRklFRBAAEhkKFUFVVEhfVVNFUk5BTUVfSU5WQUxJRBABEhcKE0FVVEhfVVNFUk5BTUVfVEFLRU4QAhIaChZBVVRIX1VTRVJOQU1FX0NPT0xET1dOEAMSIAocQVVUSF9VU0VSTkFNRV9GRUFUVVJFX0xPQ0tFRBAEEhoKFkFVVEhfVVNFUk5BTUVfUkVTRVJWRUQQBRIYChRBVVRIX0lOVkFMSURfUkVRVUVTVBAGEiAKHEFVVEhfQVVUSEVOVElDQVRJT05fUkVRVUlSRUQQBxIhCh1BVVRIX1NFU1NJT05fS0lORF9OT1RfQUxMT1dFRBAIEhwKGEFVVEhfV0FMTEVUX0xPR0lOX0ZBSUxFRBAJEhsKF0FVVEhfUkVTT1VSQ0VfTk9UX0ZPVU5EEAoSIQodQVVUSF9TVUJBQ0NPVU5UX0FDQ0VTU19ERU5JRUQQCxIeChpBVVRIX0FQSV9LRVlfQUNDRVNTX0RFTklFRBAMEioKJkFVVEhfQVBJX0tFWV9JTlZBTElEX1NUQVRVU19UUkFOU0lUSU9OEA4SFwoTQVVUSF9QT0xJQ1lfSU5WQUxJRBAPEiUKIUFVVEhfU01BUlRfQUNDT1VOVF9BTFJFQURZX0xJTktFRBAQEh0KGUFVVEhfSU5WSVRFX0FDQ0VTU19ERU5JRUQQERIdChlBVVRIX0lOVklURV9JTlZBTElEX1NUQVRFEBISFQoRQVVUSF9NRkFfRElTQUJMRUQQExIZChVBVVRIX01GQV9OT1RfRU5ST0xMRUQQFBIcChhBVVRIX01GQV9TRVNTSU9OX0lOVkFMSUQQFRIgChxBVVRIX01GQV9DSEFMTEVOR0VfTk9UX0ZPVU5EEBYSHgoaQVVUSF9NRkFfQ0hBTExFTkdFX0lOVkFMSUQQFxIdChlBVVRIX01GQV9DSEFMTEVOR0VfTE9DS0VEEBgSGAoUQVVUSF9NRkFfT1RQX0lOVkFMSUQQGRIdChlBVVRIX01GQV9SRUNPVkVSWV9JTlZBTElEEBoSIgoeQVVUSF9NRkFfUEFTU0tFWV9OT1RfQVZBSUxBQkxFEBsSJwojQVVUSF9NRkFfUEFTU0tFWV9DUkVERU5USUFMX0lOVkFMSUQQHBIiCh5BVVRIX01GQV9QQVNTS0VZX1ZFUklGWV9GQUlMRUQQHRInCiNBVVRIX01GQV9FTlJPTExNRU5UX0JJTkRJTkdfSU5WQUxJRBAeEhkKFUFVVEhfU1RFUF9VUF9SRVFVSVJFRBAfEiIKHkFVVEhfU1RFUF9VUF9QUk9PRl9VTkFWQUlMQUJMRRAgEiAKHEFVVEhfU1RFUF9VUF9BTFJFQURZX0NMQUlNRUQQIRIWChJBVVRIX1BPTElDWV9JTl9VU0UQIhIWChJBVVRIX1BPTElDWV9MT0NLRUQQIxIeChpBVVRIX1BPTElDWV9TQ09QRV9NSVNNQVRDSBAkEhoKFkFVVEhfUkVWSVNJT05fQ09ORkxJQ1QQJRIfChtBVVRIX01GQV9FTEVWQVRJT05fUkVRVUlSRUQQJhIhCh1BVVRIX01GQV9MQVNUX0ZBQ1RPUl9SRVFVSVJFRBAnEhcKE0FVVEhfSU5URVJOQUxfRVJST1IQKBIbChdBVVRIX1RFUk1TX05PVF9BQ0NFUFRFRBApMqgCCgtBdXRoU2VydmljZRJBCghHZXROb25jZRIYLmF1dGgudjEuR2V0Tm9uY2VSZXF1ZXN0GhkuYXV0aC52MS5HZXROb25jZVJlc3BvbnNlIgASVgoPTG9naW5XaXRoV2FsbGV0Eh8uYXV0aC52MS5Mb2dpbldpdGhXYWxsZXRSZXF1ZXN0GiAuYXV0aC52MS5Mb2dpbldpdGhXYWxsZXRSZXNwb25zZSIAEk0KC0FjY2VwdFRlcm1zEhsuYXV0aC52MS5BY2NlcHRUZXJtc1JlcXVlc3QaHC5hdXRoLnYxLkFjY2VwdFRlcm1zUmVzcG9uc2UiA5ACAhIvCgJNZRISLmF1dGgudjEuTWVSZXF1ZXN0GhMuYXV0aC52MS5NZVJlc3BvbnNlIgBCPFo6Z2l0aHViLmNvbS9GYWJyaWMtTGFicy9wb2x5ZXN0ZXItc2RrLWdvL2dlbi9hdXRoL3YxO2F1dGh2MWIGcHJvdG8z\", [file_auth_v1_mfa, file_google_protobuf_timestamp]);\n\n/**\n * GetNonceRequest requests a short-lived login nonce for a smart-account\n * address. The wallet must sign a message containing this nonce before login.\n *\n * @generated from message auth.v1.GetNonceRequest\n */\nexport type GetNonceRequest = Message<\"auth.v1.GetNonceRequest\"> & {\n  /**\n   * Smart-account EVM address, formatted as 0x plus 40 hex characters.\n   *\n   * @generated from field: string smart_account_address = 1;\n   */\n  smartAccountAddress: string;\n};\n\n/**\n * Describes the message auth.v1.GetNonceRequest.\n * Use `create(GetNonceRequestSchema)` to create a new message.\n */\nexport const GetNonceRequestSchema: GenMessage<GetNonceRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 0);\n\n/**\n * GetNonceResponse contains the nonce that must be signed for wallet login.\n *\n * @generated from message auth.v1.GetNonceResponse\n */\nexport type GetNonceResponse = Message<\"auth.v1.GetNonceResponse\"> & {\n  /**\n   * Random login nonce. The nonce is single-purpose and is replaced by each new\n   * nonce request for the same smart-account address.\n   *\n   * @generated from field: string nonce = 1;\n   */\n  nonce: string;\n\n  /**\n   * Time in UTC when the nonce expires. Login nonces expire after 5 minutes.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 2;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.GetNonceResponse.\n * Use `create(GetNonceResponseSchema)` to create a new message.\n */\nexport const GetNonceResponseSchema: GenMessage<GetNonceResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 1);\n\n/**\n * LoginWithWalletRequest completes smart-account wallet login using a signed\n * nonce.\n *\n * @generated from message auth.v1.LoginWithWalletRequest\n */\nexport type LoginWithWalletRequest = Message<\"auth.v1.LoginWithWalletRequest\"> & {\n  /**\n   * Smart-account EVM address that produced the signature, formatted as 0x plus\n   * 40 hex characters.\n   *\n   * @generated from field: string smart_account_address = 1;\n   */\n  smartAccountAddress: string;\n\n  /**\n   * Nonce returned by GetNonce. The nonce must be unused and not expired.\n   *\n   * @generated from field: string nonce = 2;\n   */\n  nonce: string;\n\n  /**\n   * Signature over the canonical login message containing the nonce. Maximum\n   * length is 8192 characters to support universal wallet signatures.\n   *\n   * @generated from field: string signature = 3;\n   */\n  signature: string;\n\n  /**\n   * Optional user-agent string for account security and audit displays. Maximum\n   * length is 512 characters.\n   *\n   * @generated from field: string user_agent = 4;\n   */\n  userAgent: string;\n\n  /**\n   * Optional caller IP address for account security and audit displays. Maximum\n   * length is 64 characters.\n   *\n   * @generated from field: string ip = 5;\n   */\n  ip: string;\n\n  /**\n   * Optional primary wallet address that controls this smart account, formatted\n   * as 0x plus 40 hex characters. This value is metadata and is not used for\n   * signature verification.\n   *\n   * @generated from field: string primary_wallet_address = 6;\n   */\n  primaryWalletAddress: string;\n\n  /**\n   * Optional provider hint for the primary wallet. Maximum length is 32 characters.\n   *\n   * @generated from field: string wallet_provider = 7;\n   */\n  walletProvider: string;\n};\n\n/**\n * Describes the message auth.v1.LoginWithWalletRequest.\n * Use `create(LoginWithWalletRequestSchema)` to create a new message.\n */\nexport const LoginWithWalletRequestSchema: GenMessage<LoginWithWalletRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 2);\n\n/**\n * LoginWithWalletResponse returns a session token for the authenticated root\n * account.\n *\n * @generated from message auth.v1.LoginWithWalletResponse\n */\nexport type LoginWithWalletResponse = Message<\"auth.v1.LoginWithWalletResponse\"> & {\n  /**\n   * Bearer access token for authenticated API calls.\n   *\n   * @generated from field: string access_token = 1;\n   */\n  accessToken: string;\n\n  /**\n   * Time in UTC when access_token expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 2;\n   */\n  expiresAt?: Timestamp | undefined;\n\n  /**\n   * Root account the token is bound to (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 10;\n   */\n  accountId: bigint;\n\n  /**\n   * Optional current username for the root account (empty if not set).\n   *\n   * @generated from field: string username = 13;\n   */\n  username: string;\n\n  /**\n   * Session assurance details for the issued access token.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 20;\n   */\n  session?: SessionInfo | undefined;\n};\n\n/**\n * Describes the message auth.v1.LoginWithWalletResponse.\n * Use `create(LoginWithWalletResponseSchema)` to create a new message.\n */\nexport const LoginWithWalletResponseSchema: GenMessage<LoginWithWalletResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 3);\n\n/**\n * MeRequest introspects the authenticated caller from the presented access\n * token or API key.\n *\n * @generated from message auth.v1.MeRequest\n */\nexport type MeRequest = Message<\"auth.v1.MeRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.MeRequest.\n * Use `create(MeRequestSchema)` to create a new message.\n */\nexport const MeRequestSchema: GenMessage<MeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 4);\n\n/**\n * MeResponse describes the authenticated caller and current session context.\n *\n * @generated from message auth.v1.MeResponse\n */\nexport type MeResponse = Message<\"auth.v1.MeResponse\"> & {\n  /**\n   * Root account identifier (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 1;\n   */\n  accountId: bigint;\n\n  /**\n   * Stable public identifier of the API key that authenticated this request,\n   * formatted as \"ak_\" followed by 32 lowercase hexadecimal characters.\n   * Absent when the request was not authenticated with an API key.\n   *\n   * @generated from field: optional string api_key_id = 10;\n   */\n  apiKeyId?: string | undefined;\n\n  /**\n   * Optional current username for the root account (empty if not set).\n   *\n   * @generated from field: string username = 11;\n   */\n  username: string;\n\n  /**\n   * Root smart-account EVM address, formatted as 0x plus 40 hex characters.\n   * Empty if not set.\n   *\n   * @generated from field: string root_smart_account_address = 12;\n   */\n  rootSmartAccountAddress: string;\n\n  /**\n   * Session assurance details for the presented access token, if any.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 20;\n   */\n  session?: SessionInfo | undefined;\n};\n\n/**\n * Describes the message auth.v1.MeResponse.\n * Use `create(MeResponseSchema)` to create a new message.\n */\nexport const MeResponseSchema: GenMessage<MeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 5);\n\n/**\n * AuthErrorDetail describes an authentication or account-domain failure.\n *\n * @generated from message auth.v1.AuthErrorDetail\n */\nexport type AuthErrorDetail = Message<\"auth.v1.AuthErrorDetail\"> & {\n  /**\n   * Stable machine-readable auth error code.\n   *\n   * @generated from field: auth.v1.AuthErrorCode code = 1;\n   */\n  code: AuthErrorCode;\n\n  /**\n   * Human-readable error message.\n   *\n   * @generated from field: string message = 2;\n   */\n  message: string;\n};\n\n/**\n * Describes the message auth.v1.AuthErrorDetail.\n * Use `create(AuthErrorDetailSchema)` to create a new message.\n */\nexport const AuthErrorDetailSchema: GenMessage<AuthErrorDetail> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 6);\n\n/**\n * AcceptTermsRequest records explicit consent to the currently required terms.\n *\n * @generated from message auth.v1.AcceptTermsRequest\n */\nexport type AcceptTermsRequest = Message<\"auth.v1.AcceptTermsRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.AcceptTermsRequest.\n * Use `create(AcceptTermsRequestSchema)` to create a new message.\n */\nexport const AcceptTermsRequestSchema: GenMessage<AcceptTermsRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 7);\n\n/**\n * AcceptTermsResponse confirms acceptance. Repeated acceptance of the current\n * version succeeds and preserves the first acceptance time.\n *\n * @generated from message auth.v1.AcceptTermsResponse\n */\nexport type AcceptTermsResponse = Message<\"auth.v1.AcceptTermsResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.AcceptTermsResponse.\n * Use `create(AcceptTermsResponseSchema)` to create a new message.\n */\nexport const AcceptTermsResponseSchema: GenMessage<AcceptTermsResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 8);\n\n/**\n * High-level error codes for authentication and account-domain failures.\n *\n * @generated from enum auth.v1.AuthErrorCode\n */\nexport enum AuthErrorCode {\n  /**\n   * No auth error code specified.\n   *\n   * @generated from enum value: AUTH_UNSPECIFIED = 0;\n   */\n  AUTH_UNSPECIFIED = 0,\n\n  /**\n   * Username format or characters are invalid.\n   *\n   * @generated from enum value: AUTH_USERNAME_INVALID = 1;\n   */\n  AUTH_USERNAME_INVALID = 1,\n\n  /**\n   * Username is already used by another account.\n   *\n   * @generated from enum value: AUTH_USERNAME_TAKEN = 2;\n   */\n  AUTH_USERNAME_TAKEN = 2,\n\n  /**\n   * Username was changed too recently.\n   *\n   * @generated from enum value: AUTH_USERNAME_COOLDOWN = 3;\n   */\n  AUTH_USERNAME_COOLDOWN = 3,\n\n  /**\n   * Account is not currently eligible to claim or change a username.\n   *\n   * @generated from enum value: AUTH_USERNAME_FEATURE_LOCKED = 4;\n   */\n  AUTH_USERNAME_FEATURE_LOCKED = 4,\n\n  /**\n   * Username is reserved and cannot be claimed by this account.\n   *\n   * @generated from enum value: AUTH_USERNAME_RESERVED = 5;\n   */\n  AUTH_USERNAME_RESERVED = 5,\n\n  /**\n   * Request is malformed or missing required input.\n   *\n   * @generated from enum value: AUTH_INVALID_REQUEST = 6;\n   */\n  AUTH_INVALID_REQUEST = 6,\n\n  /**\n   * Authentication is required for this operation.\n   *\n   * @generated from enum value: AUTH_AUTHENTICATION_REQUIRED = 7;\n   */\n  AUTH_AUTHENTICATION_REQUIRED = 7,\n\n  /**\n   * Presented session type is not allowed for this operation.\n   *\n   * @generated from enum value: AUTH_SESSION_KIND_NOT_ALLOWED = 8;\n   */\n  AUTH_SESSION_KIND_NOT_ALLOWED = 8,\n\n  /**\n   * Wallet login failed because the nonce or signature could not be verified.\n   *\n   * @generated from enum value: AUTH_WALLET_LOGIN_FAILED = 9;\n   */\n  AUTH_WALLET_LOGIN_FAILED = 9,\n\n  /**\n   * Requested resource was not found.\n   *\n   * @generated from enum value: AUTH_RESOURCE_NOT_FOUND = 10;\n   */\n  AUTH_RESOURCE_NOT_FOUND = 10,\n\n  /**\n   * Caller does not have access to the requested sub-account.\n   *\n   * @generated from enum value: AUTH_SUBACCOUNT_ACCESS_DENIED = 11;\n   */\n  AUTH_SUBACCOUNT_ACCESS_DENIED = 11,\n\n  /**\n   * Caller does not have access to the requested API key.\n   *\n   * @generated from enum value: AUTH_API_KEY_ACCESS_DENIED = 12;\n   */\n  AUTH_API_KEY_ACCESS_DENIED = 12,\n\n  /**\n   * Requested API key status transition is not allowed.\n   *\n   * @generated from enum value: AUTH_API_KEY_INVALID_STATUS_TRANSITION = 14;\n   */\n  AUTH_API_KEY_INVALID_STATUS_TRANSITION = 14,\n\n  /**\n   * Policy definition or binding is invalid.\n   *\n   * @generated from enum value: AUTH_POLICY_INVALID = 15;\n   */\n  AUTH_POLICY_INVALID = 15,\n\n  /**\n   * Smart-account address is already linked to another account.\n   *\n   * @generated from enum value: AUTH_SMART_ACCOUNT_ALREADY_LINKED = 16;\n   */\n  AUTH_SMART_ACCOUNT_ALREADY_LINKED = 16,\n\n  /**\n   * Caller does not have access to the requested invite.\n   *\n   * @generated from enum value: AUTH_INVITE_ACCESS_DENIED = 17;\n   */\n  AUTH_INVITE_ACCESS_DENIED = 17,\n\n  /**\n   * Invite cannot be used in its current state.\n   *\n   * @generated from enum value: AUTH_INVITE_INVALID_STATE = 18;\n   */\n  AUTH_INVITE_INVALID_STATE = 18,\n\n  /**\n   * MFA is not available for this account.\n   *\n   * @generated from enum value: AUTH_MFA_DISABLED = 19;\n   */\n  AUTH_MFA_DISABLED = 19,\n\n  /**\n   * Required MFA factor is not enrolled.\n   *\n   * @generated from enum value: AUTH_MFA_NOT_ENROLLED = 20;\n   */\n  AUTH_MFA_NOT_ENROLLED = 20,\n\n  /**\n   * MFA session is missing, expired, or invalid.\n   *\n   * @generated from enum value: AUTH_MFA_SESSION_INVALID = 21;\n   */\n  AUTH_MFA_SESSION_INVALID = 21,\n\n  /**\n   * MFA challenge was not found.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_NOT_FOUND = 22;\n   */\n  AUTH_MFA_CHALLENGE_NOT_FOUND = 22,\n\n  /**\n   * MFA challenge payload is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_INVALID = 23;\n   */\n  AUTH_MFA_CHALLENGE_INVALID = 23,\n\n  /**\n   * MFA challenge is locked after too many failed attempts.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_LOCKED = 24;\n   */\n  AUTH_MFA_CHALLENGE_LOCKED = 24,\n\n  /**\n   * One-time password is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_OTP_INVALID = 25;\n   */\n  AUTH_MFA_OTP_INVALID = 25,\n\n  /**\n   * Recovery code is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_RECOVERY_INVALID = 26;\n   */\n  AUTH_MFA_RECOVERY_INVALID = 26,\n\n  /**\n   * Passkey verification is not available for this challenge.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_NOT_AVAILABLE = 27;\n   */\n  AUTH_MFA_PASSKEY_NOT_AVAILABLE = 27,\n\n  /**\n   * Passkey credential is invalid for this account or challenge.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_CREDENTIAL_INVALID = 28;\n   */\n  AUTH_MFA_PASSKEY_CREDENTIAL_INVALID = 28,\n\n  /**\n   * Passkey verification failed.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_VERIFY_FAILED = 29;\n   */\n  AUTH_MFA_PASSKEY_VERIFY_FAILED = 29,\n\n  /**\n   * MFA enrollment binding is invalid or expired.\n   *\n   * @generated from enum value: AUTH_MFA_ENROLLMENT_BINDING_INVALID = 30;\n   */\n  AUTH_MFA_ENROLLMENT_BINDING_INVALID = 30,\n\n  /**\n   * A fresh step-up proof is required for this protected operation.\n   *\n   * @generated from enum value: AUTH_STEP_UP_REQUIRED = 31;\n   */\n  AUTH_STEP_UP_REQUIRED = 31,\n\n  /**\n   * A requested step-up proof is unavailable.\n   *\n   * @generated from enum value: AUTH_STEP_UP_PROOF_UNAVAILABLE = 32;\n   */\n  AUTH_STEP_UP_PROOF_UNAVAILABLE = 32,\n\n  /**\n   * The step-up proof has already been claimed.\n   *\n   * @generated from enum value: AUTH_STEP_UP_ALREADY_CLAIMED = 33;\n   */\n  AUTH_STEP_UP_ALREADY_CLAIMED = 33,\n\n  /**\n   * The requested policy cannot be removed because it is still in use.\n   *\n   * @generated from enum value: AUTH_POLICY_IN_USE = 34;\n   */\n  AUTH_POLICY_IN_USE = 34,\n\n  /**\n   * The requested policy is locked against this mutation.\n   *\n   * @generated from enum value: AUTH_POLICY_LOCKED = 35;\n   */\n  AUTH_POLICY_LOCKED = 35,\n\n  /**\n   * The requested policy does not belong to the target account scope.\n   *\n   * @generated from enum value: AUTH_POLICY_SCOPE_MISMATCH = 36;\n   */\n  AUTH_POLICY_SCOPE_MISMATCH = 36,\n\n  /**\n   * The resource changed after the caller read it.\n   *\n   * @generated from enum value: AUTH_REVISION_CONFLICT = 37;\n   */\n  AUTH_REVISION_CONFLICT = 37,\n\n  /**\n   * A recently MFA-elevated interactive session is required.\n   *\n   * @generated from enum value: AUTH_MFA_ELEVATION_REQUIRED = 38;\n   */\n  AUTH_MFA_ELEVATION_REQUIRED = 38,\n\n  /**\n   * At least one active MFA factor must remain enrolled.\n   *\n   * @generated from enum value: AUTH_MFA_LAST_FACTOR_REQUIRED = 39;\n   */\n  AUTH_MFA_LAST_FACTOR_REQUIRED = 39,\n\n  /**\n   * An unexpected internal failure prevented the auth mutation from completing.\n   *\n   * @generated from enum value: AUTH_INTERNAL_ERROR = 40;\n   */\n  AUTH_INTERNAL_ERROR = 40,\n\n  /**\n   * The caller has not explicitly accepted the currently required terms.\n   *\n   * @generated from enum value: AUTH_TERMS_NOT_ACCEPTED = 41;\n   */\n  AUTH_TERMS_NOT_ACCEPTED = 41,\n}\n\n/**\n * Describes the enum auth.v1.AuthErrorCode.\n */\nexport const AuthErrorCodeSchema: GenEnum<AuthErrorCode> = /*@__PURE__*/\n  enumDesc(file_auth_v1_auth, 0);\n\n/**\n * AuthService manages wallet login, explicit terms consent, and caller authentication context.\n *\n * @generated from service auth.v1.AuthService\n */\nexport const AuthService: GenService<{\n  /**\n   * Get a short-lived login nonce.\n   *\n   * @generated from rpc auth.v1.AuthService.GetNonce\n   */\n  getNonce: {\n    methodKind: \"unary\";\n    input: typeof GetNonceRequestSchema;\n    output: typeof GetNonceResponseSchema;\n  },\n  /**\n   * Verify a signed nonce and issue an access token. Login and account creation\n   * do not accept terms; explicit consent is recorded only by AcceptTerms.\n   *\n   * @generated from rpc auth.v1.AuthService.LoginWithWallet\n   */\n  loginWithWallet: {\n    methodKind: \"unary\";\n    input: typeof LoginWithWalletRequestSchema;\n    output: typeof LoginWithWalletResponseSchema;\n  },\n  /**\n   * Explicitly accept the currently required terms for the caller's root account.\n   * Requires an interactive JWT session; API keys are not allowed. No MFA is\n   * required. Login, trading, reads, and use of existing resources remain available\n   * without acceptance. Only CreateSubaccount, CreateApiKey, and\n   * CreateDepositAddress require acceptance of the current version.\n   *\n   * @generated from rpc auth.v1.AuthService.AcceptTerms\n   */\n  acceptTerms: {\n    methodKind: \"unary\";\n    input: typeof AcceptTermsRequestSchema;\n    output: typeof AcceptTermsResponseSchema;\n  },\n  /**\n   * Return the caller's current auth context.\n   *\n   * @generated from rpc auth.v1.AuthService.Me\n   */\n  me: {\n    methodKind: \"unary\";\n    input: typeof MeRequestSchema;\n    output: typeof MeResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_auth, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAeA,MAAa,oBACX,uBAAS,gwGAAgwG,CAAC,kBAAkB,8BAA8B,CAAC;;;;;AAqB7zG,MAAa,wBACX,0BAAY,mBAAmB,CAAC;;;;;AA4BlC,MAAa,yBACX,0BAAY,mBAAmB,CAAC;;;;;AAqElC,MAAa,+BACX,0BAAY,mBAAmB,CAAC;;;;;AAiDlC,MAAa,gCACX,0BAAY,mBAAmB,CAAC;;;;;AAelC,MAAa,kBACX,0BAAY,mBAAmB,CAAC;;;;;AAmDlC,MAAa,mBACX,0BAAY,mBAAmB,CAAC;;;;;AA2BlC,MAAa,wBACX,0BAAY,mBAAmB,CAAC;;;;;AAclC,MAAa,2BACX,0BAAY,mBAAmB,CAAC;;;;;AAelC,MAAa,4BACX,0BAAY,mBAAmB,CAAC;;;;;;AAOlC,IAAY,gBAAL,yBAAA,eAAA;;;;;;CAML,cAAA,cAAA,sBAAA,KAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,KAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,8BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,6BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,4CAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,uCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,uBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,8BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,wBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,wBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,iCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,6BAAA,MAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,sBACX,uBAAS,mBAAmB,CAAC;;;;;;AAO/B,MAAa,cA+CX,0BAAY,mBAAmB,CAAC"}

package/dist/gen/auth/v1/profile_pb.d.ts

@@ -128,6 +128,13 @@ type UserProfile = Message<"auth.v1.UserProfile"> & {
    * @generated from field: bool username_unlocked = 11;
    */
   usernameUnlocked: boolean;
+  /**
+   * Whether the caller's root account explicitly accepted the currently required terms.
+   * False for new or existing accounts without current acceptance.
+   *
+   * @generated from field: bool current_terms_accepted = 13;
+   */
+  currentTermsAccepted: boolean;
 };
 /**
  * Describes the message auth.v1.UserProfile.

package/dist/gen/auth/v1/profile_pb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/profile_pb.ts"],"mappings":";;;;;;;;;cAaa,sBAAsB;;;;;;KAQvB,kBAAkB;;;;;;EAM5B;;;;;;;EAQA;;;;;;EAOA;;;;;;EAOA;;;;;;cAOW,uBAAuB,WAAW;;;;;;KAQnC,cAAc;;;;;;;;EAQxB;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;;EAQA,YAAY;;;;;;;EAQZ,uBAAuB;;;;;;;EAQvB;;;;;;EAOA;;;;;;cAOW,mBAAmB,WAAW;;;;;;;;;;;;KAc/B,mBAAmB;;;;;;;;EAQ7B;;;;;;;EAQA;;;;;;;EAQA;;;;;;;EAQA;;;;;;;EAQA;;;;;;cAOW,wBAAwB,WAAW;;;;;;KAQpC,oBAAoB;;;;;cAOnB,yBAAyB,WAAW;;;;;;KAQrC,qBAAqB;;;;;;EAM/B,MAAM;;;;;;;EAQN;;;;;;EAOA;;;;;;cAOW,0BAA0B,WAAW;;;;;;KAQtC,uBAAuB;;;;;;EAMjC;;;;;;EAOA,QAAQ;;;;;;cAOG,4BAA4B,WAAW;;;;;;;KASxC,4BAA4B;;;;;cAO3B,iCAAiC,WAAW;;;;;;;KAS7C,6BAA6B;;;;;;EAMvC,SAAS;;;;;;cAOE,kCAAkC,WAAW;;;;;;KAQ9C,iCAAiC;;;;;cAOhC,sCAAsC,WAAW;;;;;;;KASlD,kCAAkC;;;;;;EAM5C;;;;;;EAOA;;;;;;EAOA,YAAY;;;;;;cAOD,uCAAuC,WAAW;;;;;;KAQnD,gCAAgC;;;;;;EAM1C;;;;;;EAOA;;;;;;cAOW,qCAAqC,WAAW;;;;;;aAQjD;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,wBAAwB,QAAQ;;;;;;cAQhC,gBAAgB;;;;;;EAM3B;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe"}
+{"version":3,"file":"profile_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/profile_pb.ts"],"mappings":";;;;;;;;;cAaa,sBAAsB;;;;;;KAQvB,kBAAkB;;;;;;EAM5B;;;;;;;EAQA;;;;;;EAOA;;;;;;EAOA;;;;;;cAOW,uBAAuB,WAAW;;;;;;KAQnC,cAAc;;;;;;;;EAQxB;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;;EAQA,YAAY;;;;;;;EAQZ,uBAAuB;;;;;;;EAQvB;;;;;;EAOA;;;;;;;EAQA;;;;;;cAOW,mBAAmB,WAAW;;;;;;;;;;;;KAc/B,mBAAmB;;;;;;;;EAQ7B;;;;;;;EAQA;;;;;;;EAQA;;;;;;;EAQA;;;;;;;EAQA;;;;;;cAOW,wBAAwB,WAAW;;;;;;KAQpC,oBAAoB;;;;;cAOnB,yBAAyB,WAAW;;;;;;KAQrC,qBAAqB;;;;;;EAM/B,MAAM;;;;;;;EAQN;;;;;;EAOA;;;;;;cAOW,0BAA0B,WAAW;;;;;;KAQtC,uBAAuB;;;;;;EAMjC;;;;;;EAOA,QAAQ;;;;;;cAOG,4BAA4B,WAAW;;;;;;;KASxC,4BAA4B;;;;;cAO3B,iCAAiC,WAAW;;;;;;;KAS7C,6BAA6B;;;;;;EAMvC,SAAS;;;;;;cAOE,kCAAkC,WAAW;;;;;;KAQ9C,iCAAiC;;;;;cAOhC,sCAAsC,WAAW;;;;;;;KASlD,kCAAkC;;;;;;EAM5C;;;;;;EAOA;;;;;;EAOA,YAAY;;;;;;cAOD,uCAAuC,WAAW;;;;;;KAQnD,gCAAgC;;;;;;EAM1C;;;;;;EAOA;;;;;;cAOW,qCAAqC,WAAW;;;;;;aAQjD;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,wBAAwB,QAAQ;;;;;;cAQhC,gBAAgB;;;;;;EAM3B;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe"}

package/dist/gen/auth/v1/profile_pb.js

@@ -22,7 +22,7 @@ var profile_pb_exports = /* @__PURE__ */ __exportAll({
 /**
 * Describes the file auth/v1/profile.proto.
 */
-const file_auth_v1_profile = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp]);
+const file_auth_v1_profile = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp]);
 /**
 * Describes the message auth.v1.AccountIdentity.
 * Use `create(AccountIdentitySchema)` to create a new message.

package/dist/gen/auth/v1/profile_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"profile_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/profile_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/profile.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/profile.proto.\n */\nexport const file_auth_v1_profile: GenFile = /*@__PURE__*/\n  fileDesc(\"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\", [file_google_protobuf_timestamp]);\n\n/**\n * AccountIdentity is a lightweight identity view for a root account.\n *\n * @generated from message auth.v1.AccountIdentity\n */\nexport type AccountIdentity = Message<\"auth.v1.AccountIdentity\"> & {\n  /**\n   * Root account identifier (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 1;\n   */\n  accountId: bigint;\n\n  /**\n   * Current username for the root account (unique, case-insensitive). Empty\n   * means no username set.\n   *\n   * @generated from field: string username = 2;\n   */\n  username: string;\n\n  /**\n   * Avatar URL, if set. Maximum length is 256 characters.\n   *\n   * @generated from field: string avatar_url = 3;\n   */\n  avatarUrl: string;\n\n  /**\n   * Root smart-account EVM address. Useful as a stable identity fallback.\n   *\n   * @generated from field: string root_smart_account_address = 4;\n   */\n  rootSmartAccountAddress: string;\n};\n\n/**\n * Describes the message auth.v1.AccountIdentity.\n * Use `create(AccountIdentitySchema)` to create a new message.\n */\nexport const AccountIdentitySchema: GenMessage<AccountIdentity> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 0);\n\n/**\n * UserProfile is the caller's public profile and account metadata.\n *\n * @generated from message auth.v1.UserProfile\n */\nexport type UserProfile = Message<\"auth.v1.UserProfile\"> & {\n  /**\n   * Public username for the root account. Usernames are unique\n   * case-insensitively and use 3 to 32 letters, digits, underscores, dots, or\n   * hyphens. Empty means no username is set.\n   *\n   * @generated from field: string username = 1;\n   */\n  username: string;\n\n  /**\n   * Short public bio. Maximum length is 256 characters.\n   *\n   * @generated from field: string bio = 2;\n   */\n  bio: string;\n\n  /**\n   * Public website URL, if set. Maximum length is 256 characters.\n   *\n   * @generated from field: string website = 3;\n   */\n  website: string;\n\n  /**\n   * X/Twitter handle without \"@\". Maximum length is 15 characters.\n   *\n   * @generated from field: string twitter = 4;\n   */\n  twitter: string;\n\n  /**\n   * Whether the X/Twitter handle for this account has been verified.\n   *\n   * @generated from field: bool twitter_verified = 8;\n   */\n  twitterVerified: boolean;\n\n  /**\n   * Discord handle or username without \"@\". Maximum length is 64 characters.\n   *\n   * @generated from field: string discord = 9;\n   */\n  discord: string;\n\n  /**\n   * Whether the Discord handle for this account has been verified.\n   *\n   * @generated from field: bool discord_verified = 10;\n   */\n  discordVerified: boolean;\n\n  /**\n   * Avatar URL, if set. Maximum length is 256 characters.\n   *\n   * @generated from field: string avatar_url = 5;\n   */\n  avatarUrl: string;\n\n  /**\n   * Account creation time in UTC. This is the canonical \"member since\"\n   * timestamp.\n   *\n   * @generated from field: google.protobuf.Timestamp created_at = 12;\n   */\n  createdAt?: Timestamp | undefined;\n\n  /**\n   * Next time in UTC when the username can be changed again. Omitted when no\n   * cooldown applies.\n   *\n   * @generated from field: google.protobuf.Timestamp next_username_change_at = 6;\n   */\n  nextUsernameChangeAt?: Timestamp | undefined;\n\n  /**\n   * Current VIP tier for this root account. A value of 0 is the base tier.\n   * Read-only.\n   *\n   * @generated from field: int32 vip_tier = 7;\n   */\n  vipTier: number;\n\n  /**\n   * Whether this account is currently allowed to claim/change a username.\n   *\n   * @generated from field: bool username_unlocked = 11;\n   */\n  usernameUnlocked: boolean;\n};\n\n/**\n * Describes the message auth.v1.UserProfile.\n * Use `create(UserProfileSchema)` to create a new message.\n */\nexport const UserProfileSchema: GenMessage<UserProfile> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 1);\n\n/**\n * UserProfilePatch is a partial profile update. Fields are\n * optional/presence-aware:\n * - if a field is omitted, it is not modified\n * - if a field is present with an empty string, it is cleared\n * Username changes are subject to account eligibility, reserved-name checks,\n * uniqueness, and cooldown rules. Case-only username changes update display\n * casing without consuming the cooldown.\n *\n * @generated from message auth.v1.UserProfilePatch\n */\nexport type UserProfilePatch = Message<\"auth.v1.UserProfilePatch\"> & {\n  /**\n   * Public username for the root account. Use an empty string to clear it.\n   * Non-empty values must be 3 to 32 letters, digits, underscores, dots, or\n   * hyphens.\n   *\n   * @generated from field: optional string username = 1;\n   */\n  username?: string | undefined;\n\n  /**\n   * Short public bio. Use an empty string to clear it. Non-empty values must be\n   * at most 256 characters and cannot contain \"<\" or \">\".\n   *\n   * @generated from field: optional string bio = 2;\n   */\n  bio?: string | undefined;\n\n  /**\n   * Public website URL. Use an empty string to clear it. Non-empty values must\n   * be valid http(s) URLs up to 256 characters.\n   *\n   * @generated from field: optional string website = 3;\n   */\n  website?: string | undefined;\n\n  /**\n   * X/Twitter handle without \"@\". Use an empty string to clear it. Non-empty\n   * values must be 1 to 15 letters, digits, or underscores.\n   *\n   * @generated from field: optional string twitter = 4;\n   */\n  twitter?: string | undefined;\n\n  /**\n   * Avatar URL. Use an empty string to clear it. Non-empty values must be valid\n   * http(s) URLs up to 256 characters.\n   *\n   * @generated from field: optional string avatar_url = 5;\n   */\n  avatarUrl?: string | undefined;\n};\n\n/**\n * Describes the message auth.v1.UserProfilePatch.\n * Use `create(UserProfilePatchSchema)` to create a new message.\n */\nexport const UserProfilePatchSchema: GenMessage<UserProfilePatch> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 2);\n\n/**\n * GetProfileRequest fetches the authenticated caller's profile.\n *\n * @generated from message auth.v1.GetProfileRequest\n */\nexport type GetProfileRequest = Message<\"auth.v1.GetProfileRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.GetProfileRequest.\n * Use `create(GetProfileRequestSchema)` to create a new message.\n */\nexport const GetProfileRequestSchema: GenMessage<GetProfileRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 3);\n\n/**\n * ProfileErrorDetail describes a profile validation failure returned by the API.\n *\n * @generated from message auth.v1.ProfileErrorDetail\n */\nexport type ProfileErrorDetail = Message<\"auth.v1.ProfileErrorDetail\"> & {\n  /**\n   * Stable machine-readable profile error code.\n   *\n   * @generated from field: auth.v1.ProfileErrorCode code = 1;\n   */\n  code: ProfileErrorCode;\n\n  /**\n   * Field name associated with the error, such as \"bio\", \"website\", \"twitter\",\n   * or \"avatar_url\".\n   *\n   * @generated from field: string field = 2;\n   */\n  field: string;\n\n  /**\n   * Human-friendly message for UI/debugging.\n   *\n   * @generated from field: string message = 3;\n   */\n  message: string;\n};\n\n/**\n * Describes the message auth.v1.ProfileErrorDetail.\n * Use `create(ProfileErrorDetailSchema)` to create a new message.\n */\nexport const ProfileErrorDetailSchema: GenMessage<ProfileErrorDetail> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 4);\n\n/**\n * UsernameHistoryEntry records a previous username claim for the caller.\n *\n * @generated from message auth.v1.UsernameHistoryEntry\n */\nexport type UsernameHistoryEntry = Message<\"auth.v1.UsernameHistoryEntry\"> & {\n  /**\n   * Username value that was set.\n   *\n   * @generated from field: string username = 1;\n   */\n  username: string;\n\n  /**\n   * Time in UTC when this username was set.\n   *\n   * @generated from field: google.protobuf.Timestamp set_at = 2;\n   */\n  setAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.UsernameHistoryEntry.\n * Use `create(UsernameHistoryEntrySchema)` to create a new message.\n */\nexport const UsernameHistoryEntrySchema: GenMessage<UsernameHistoryEntry> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 5);\n\n/**\n * GetUsernameHistoryRequest fetches recent username changes for the\n * authenticated caller.\n *\n * @generated from message auth.v1.GetUsernameHistoryRequest\n */\nexport type GetUsernameHistoryRequest = Message<\"auth.v1.GetUsernameHistoryRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.GetUsernameHistoryRequest.\n * Use `create(GetUsernameHistoryRequestSchema)` to create a new message.\n */\nexport const GetUsernameHistoryRequestSchema: GenMessage<GetUsernameHistoryRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 6);\n\n/**\n * GetUsernameHistoryResponse contains the caller's recent username history,\n * newest first. At most 20 entries are returned.\n *\n * @generated from message auth.v1.GetUsernameHistoryResponse\n */\nexport type GetUsernameHistoryResponse = Message<\"auth.v1.GetUsernameHistoryResponse\"> & {\n  /**\n   * Recent username history entries, newest first.\n   *\n   * @generated from field: repeated auth.v1.UsernameHistoryEntry history = 1;\n   */\n  history: UsernameHistoryEntry[];\n};\n\n/**\n * Describes the message auth.v1.GetUsernameHistoryResponse.\n * Use `create(GetUsernameHistoryResponseSchema)` to create a new message.\n */\nexport const GetUsernameHistoryResponseSchema: GenMessage<GetUsernameHistoryResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 7);\n\n/**\n * GenerateUsernameOptionsRequest requests a fresh set of generated usernames.\n *\n * @generated from message auth.v1.GenerateUsernameOptionsRequest\n */\nexport type GenerateUsernameOptionsRequest = Message<\"auth.v1.GenerateUsernameOptionsRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.GenerateUsernameOptionsRequest.\n * Use `create(GenerateUsernameOptionsRequestSchema)` to create a new message.\n */\nexport const GenerateUsernameOptionsRequestSchema: GenMessage<GenerateUsernameOptionsRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 8);\n\n/**\n * GenerateUsernameOptionsResponse contains five generated usernames that the\n * caller may claim before the offer expires.\n *\n * @generated from message auth.v1.GenerateUsernameOptionsResponse\n */\nexport type GenerateUsernameOptionsResponse = Message<\"auth.v1.GenerateUsernameOptionsResponse\"> & {\n  /**\n   * Five distinct generated usernames available when this offer was created.\n   *\n   * @generated from field: repeated string usernames = 1;\n   */\n  usernames: string[];\n\n  /**\n   * Opaque proof required to claim one of the returned usernames.\n   *\n   * @generated from field: string offer_token = 2;\n   */\n  offerToken: string;\n\n  /**\n   * Time in UTC after which this offer can no longer be claimed.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 3;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.GenerateUsernameOptionsResponse.\n * Use `create(GenerateUsernameOptionsResponseSchema)` to create a new message.\n */\nexport const GenerateUsernameOptionsResponseSchema: GenMessage<GenerateUsernameOptionsResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 9);\n\n/**\n * ClaimGeneratedUsernameRequest selects one username from a generated offer.\n *\n * @generated from message auth.v1.ClaimGeneratedUsernameRequest\n */\nexport type ClaimGeneratedUsernameRequest = Message<\"auth.v1.ClaimGeneratedUsernameRequest\"> & {\n  /**\n   * Opaque proof returned with the generated username options.\n   *\n   * @generated from field: string offer_token = 1;\n   */\n  offerToken: string;\n\n  /**\n   * Zero-based position in the five returned username options.\n   *\n   * @generated from field: uint32 option_index = 2;\n   */\n  optionIndex: number;\n};\n\n/**\n * Describes the message auth.v1.ClaimGeneratedUsernameRequest.\n * Use `create(ClaimGeneratedUsernameRequestSchema)` to create a new message.\n */\nexport const ClaimGeneratedUsernameRequestSchema: GenMessage<ClaimGeneratedUsernameRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 10);\n\n/**\n * High-level error codes for profile domain errors (ProfileService).\n *\n * @generated from enum auth.v1.ProfileErrorCode\n */\nexport enum ProfileErrorCode {\n  /**\n   * No profile error code specified.\n   *\n   * @generated from enum value: PROFILE_UNSPECIFIED = 0;\n   */\n  PROFILE_UNSPECIFIED = 0,\n\n  /**\n   * Generic invalid field (format/characters).\n   *\n   * @generated from enum value: PROFILE_INVALID_FIELD = 1;\n   */\n  PROFILE_INVALID_FIELD = 1,\n\n  /**\n   * Field exceeds configured max length.\n   *\n   * @generated from enum value: PROFILE_FIELD_TOO_LONG = 2;\n   */\n  PROFILE_FIELD_TOO_LONG = 2,\n\n  /**\n   * URL is syntactically invalid.\n   *\n   * @generated from enum value: PROFILE_URL_INVALID = 3;\n   */\n  PROFILE_URL_INVALID = 3,\n\n  /**\n   * URL scheme is not allowed (e.g., non-http(s)).\n   *\n   * @generated from enum value: PROFILE_URL_SCHEME_INVALID = 4;\n   */\n  PROFILE_URL_SCHEME_INVALID = 4,\n}\n\n/**\n * Describes the enum auth.v1.ProfileErrorCode.\n */\nexport const ProfileErrorCodeSchema: GenEnum<ProfileErrorCode> = /*@__PURE__*/\n  enumDesc(file_auth_v1_profile, 0);\n\n/**\n * ProfileService manages the authenticated caller's public profile.\n *\n * @generated from service auth.v1.ProfileService\n */\nexport const ProfileService: GenService<{\n  /**\n   * Get the caller's profile.\n   *\n   * @generated from rpc auth.v1.ProfileService.GetProfile\n   */\n  getProfile: {\n    methodKind: \"unary\";\n    input: typeof GetProfileRequestSchema;\n    output: typeof UserProfileSchema;\n  },\n  /**\n   * Update the caller's mutable profile fields. Omitted fields are unchanged;\n   * present empty strings clear optional text fields.\n   *\n   * @generated from rpc auth.v1.ProfileService.UpdateProfile\n   */\n  updateProfile: {\n    methodKind: \"unary\";\n    input: typeof UserProfilePatchSchema;\n    output: typeof UserProfileSchema;\n  },\n  /**\n   * Get recent username history for the caller, newest first. Returns at most\n   * 20 entries.\n   *\n   * @generated from rpc auth.v1.ProfileService.GetUsernameHistory\n   */\n  getUsernameHistory: {\n    methodKind: \"unary\";\n    input: typeof GetUsernameHistoryRequestSchema;\n    output: typeof GetUsernameHistoryResponseSchema;\n  },\n  /**\n   * Generate five random username options for an account that has never\n   * claimed a username. Calling this method again returns a fresh set.\n   *\n   * @generated from rpc auth.v1.ProfileService.GenerateUsernameOptions\n   */\n  generateUsernameOptions: {\n    methodKind: \"unary\";\n    input: typeof GenerateUsernameOptionsRequestSchema;\n    output: typeof GenerateUsernameOptionsResponseSchema;\n  },\n  /**\n   * Claim one username by its position in a valid generated offer. The\n   * selected value comes from the offer and cannot be supplied directly.\n   *\n   * @generated from rpc auth.v1.ProfileService.ClaimGeneratedUsername\n   */\n  claimGeneratedUsername: {\n    methodKind: \"unary\";\n    input: typeof ClaimGeneratedUsernameRequestSchema;\n    output: typeof UserProfileSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_profile, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAaA,MAAa,uBACX,uBAAS,4/EAA4/E,CAAC,8BAA8B,CAAC;;;;;AA0CviF,MAAa,wBACX,0BAAY,sBAAsB,CAAC;;;;;AAsGrC,MAAa,oBACX,0BAAY,sBAAsB,CAAC;;;;;AA4DrC,MAAa,yBACX,0BAAY,sBAAsB,CAAC;;;;;AAcrC,MAAa,0BACX,0BAAY,sBAAsB,CAAC;;;;;AAmCrC,MAAa,2BACX,0BAAY,sBAAsB,CAAC;;;;;AA2BrC,MAAa,6BACX,0BAAY,sBAAsB,CAAC;;;;;AAerC,MAAa,kCACX,0BAAY,sBAAsB,CAAC;;;;;AAqBrC,MAAa,mCACX,0BAAY,sBAAsB,CAAC;;;;;AAcrC,MAAa,uCACX,0BAAY,sBAAsB,CAAC;;;;;AAmCrC,MAAa,wCACX,0BAAY,sBAAsB,CAAC;;;;;AA2BrC,MAAa,sCACX,0BAAY,sBAAsB,EAAE;;;;;;AAOtC,IAAY,mBAAL,yBAAA,kBAAA;;;;;;CAML,iBAAA,iBAAA,yBAAA,KAAA;;;;;;CAOA,iBAAA,iBAAA,2BAAA,KAAA;;;;;;CAOA,iBAAA,iBAAA,4BAAA,KAAA;;;;;;CAOA,iBAAA,iBAAA,yBAAA,KAAA;;;;;;CAOA,iBAAA,iBAAA,gCAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,yBACX,uBAAS,sBAAsB,CAAC;;;;;;AAOlC,MAAa,iBAwDX,0BAAY,sBAAsB,CAAC"}
+{"version":3,"file":"profile_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/profile_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/profile.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/profile.proto.\n */\nexport const file_auth_v1_profile: GenFile = /*@__PURE__*/\n  fileDesc(\"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\", [file_google_protobuf_timestamp]);\n\n/**\n * AccountIdentity is a lightweight identity view for a root account.\n *\n * @generated from message auth.v1.AccountIdentity\n */\nexport type AccountIdentity = Message<\"auth.v1.AccountIdentity\"> & {\n  /**\n   * Root account identifier (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 1;\n   */\n  accountId: bigint;\n\n  /**\n   * Current username for the root account (unique, case-insensitive). Empty\n   * means no username set.\n   *\n   * @generated from field: string username = 2;\n   */\n  username: string;\n\n  /**\n   * Avatar URL, if set. Maximum length is 256 characters.\n   *\n   * @generated from field: string avatar_url = 3;\n   */\n  avatarUrl: string;\n\n  /**\n   * Root smart-account EVM address. Useful as a stable identity fallback.\n   *\n   * @generated from field: string root_smart_account_address = 4;\n   */\n  rootSmartAccountAddress: string;\n};\n\n/**\n * Describes the message auth.v1.AccountIdentity.\n * Use `create(AccountIdentitySchema)` to create a new message.\n */\nexport const AccountIdentitySchema: GenMessage<AccountIdentity> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 0);\n\n/**\n * UserProfile is the caller's public profile and account metadata.\n *\n * @generated from message auth.v1.UserProfile\n */\nexport type UserProfile = Message<\"auth.v1.UserProfile\"> & {\n  /**\n   * Public username for the root account. Usernames are unique\n   * case-insensitively and use 3 to 32 letters, digits, underscores, dots, or\n   * hyphens. Empty means no username is set.\n   *\n   * @generated from field: string username = 1;\n   */\n  username: string;\n\n  /**\n   * Short public bio. Maximum length is 256 characters.\n   *\n   * @generated from field: string bio = 2;\n   */\n  bio: string;\n\n  /**\n   * Public website URL, if set. Maximum length is 256 characters.\n   *\n   * @generated from field: string website = 3;\n   */\n  website: string;\n\n  /**\n   * X/Twitter handle without \"@\". Maximum length is 15 characters.\n   *\n   * @generated from field: string twitter = 4;\n   */\n  twitter: string;\n\n  /**\n   * Whether the X/Twitter handle for this account has been verified.\n   *\n   * @generated from field: bool twitter_verified = 8;\n   */\n  twitterVerified: boolean;\n\n  /**\n   * Discord handle or username without \"@\". Maximum length is 64 characters.\n   *\n   * @generated from field: string discord = 9;\n   */\n  discord: string;\n\n  /**\n   * Whether the Discord handle for this account has been verified.\n   *\n   * @generated from field: bool discord_verified = 10;\n   */\n  discordVerified: boolean;\n\n  /**\n   * Avatar URL, if set. Maximum length is 256 characters.\n   *\n   * @generated from field: string avatar_url = 5;\n   */\n  avatarUrl: string;\n\n  /**\n   * Account creation time in UTC. This is the canonical \"member since\"\n   * timestamp.\n   *\n   * @generated from field: google.protobuf.Timestamp created_at = 12;\n   */\n  createdAt?: Timestamp | undefined;\n\n  /**\n   * Next time in UTC when the username can be changed again. Omitted when no\n   * cooldown applies.\n   *\n   * @generated from field: google.protobuf.Timestamp next_username_change_at = 6;\n   */\n  nextUsernameChangeAt?: Timestamp | undefined;\n\n  /**\n   * Current VIP tier for this root account. A value of 0 is the base tier.\n   * Read-only.\n   *\n   * @generated from field: int32 vip_tier = 7;\n   */\n  vipTier: number;\n\n  /**\n   * Whether this account is currently allowed to claim/change a username.\n   *\n   * @generated from field: bool username_unlocked = 11;\n   */\n  usernameUnlocked: boolean;\n\n  /**\n   * Whether the caller's root account explicitly accepted the currently required terms.\n   * False for new or existing accounts without current acceptance.\n   *\n   * @generated from field: bool current_terms_accepted = 13;\n   */\n  currentTermsAccepted: boolean;\n};\n\n/**\n * Describes the message auth.v1.UserProfile.\n * Use `create(UserProfileSchema)` to create a new message.\n */\nexport const UserProfileSchema: GenMessage<UserProfile> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 1);\n\n/**\n * UserProfilePatch is a partial profile update. Fields are\n * optional/presence-aware:\n * - if a field is omitted, it is not modified\n * - if a field is present with an empty string, it is cleared\n * Username changes are subject to account eligibility, reserved-name checks,\n * uniqueness, and cooldown rules. Case-only username changes update display\n * casing without consuming the cooldown.\n *\n * @generated from message auth.v1.UserProfilePatch\n */\nexport type UserProfilePatch = Message<\"auth.v1.UserProfilePatch\"> & {\n  /**\n   * Public username for the root account. Use an empty string to clear it.\n   * Non-empty values must be 3 to 32 letters, digits, underscores, dots, or\n   * hyphens.\n   *\n   * @generated from field: optional string username = 1;\n   */\n  username?: string | undefined;\n\n  /**\n   * Short public bio. Use an empty string to clear it. Non-empty values must be\n   * at most 256 characters and cannot contain \"<\" or \">\".\n   *\n   * @generated from field: optional string bio = 2;\n   */\n  bio?: string | undefined;\n\n  /**\n   * Public website URL. Use an empty string to clear it. Non-empty values must\n   * be valid http(s) URLs up to 256 characters.\n   *\n   * @generated from field: optional string website = 3;\n   */\n  website?: string | undefined;\n\n  /**\n   * X/Twitter handle without \"@\". Use an empty string to clear it. Non-empty\n   * values must be 1 to 15 letters, digits, or underscores.\n   *\n   * @generated from field: optional string twitter = 4;\n   */\n  twitter?: string | undefined;\n\n  /**\n   * Avatar URL. Use an empty string to clear it. Non-empty values must be valid\n   * http(s) URLs up to 256 characters.\n   *\n   * @generated from field: optional string avatar_url = 5;\n   */\n  avatarUrl?: string | undefined;\n};\n\n/**\n * Describes the message auth.v1.UserProfilePatch.\n * Use `create(UserProfilePatchSchema)` to create a new message.\n */\nexport const UserProfilePatchSchema: GenMessage<UserProfilePatch> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 2);\n\n/**\n * GetProfileRequest fetches the authenticated caller's profile.\n *\n * @generated from message auth.v1.GetProfileRequest\n */\nexport type GetProfileRequest = Message<\"auth.v1.GetProfileRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.GetProfileRequest.\n * Use `create(GetProfileRequestSchema)` to create a new message.\n */\nexport const GetProfileRequestSchema: GenMessage<GetProfileRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 3);\n\n/**\n * ProfileErrorDetail describes a profile validation failure returned by the API.\n *\n * @generated from message auth.v1.ProfileErrorDetail\n */\nexport type ProfileErrorDetail = Message<\"auth.v1.ProfileErrorDetail\"> & {\n  /**\n   * Stable machine-readable profile error code.\n   *\n   * @generated from field: auth.v1.ProfileErrorCode code = 1;\n   */\n  code: ProfileErrorCode;\n\n  /**\n   * Field name associated with the error, such as \"bio\", \"website\", \"twitter\",\n   * or \"avatar_url\".\n   *\n   * @generated from field: string field = 2;\n   */\n  field: string;\n\n  /**\n   * Human-friendly message for UI/debugging.\n   *\n   * @generated from field: string message = 3;\n   */\n  message: string;\n};\n\n/**\n * Describes the message auth.v1.ProfileErrorDetail.\n * Use `create(ProfileErrorDetailSchema)` to create a new message.\n */\nexport const ProfileErrorDetailSchema: GenMessage<ProfileErrorDetail> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 4);\n\n/**\n * UsernameHistoryEntry records a previous username claim for the caller.\n *\n * @generated from message auth.v1.UsernameHistoryEntry\n */\nexport type UsernameHistoryEntry = Message<\"auth.v1.UsernameHistoryEntry\"> & {\n  /**\n   * Username value that was set.\n   *\n   * @generated from field: string username = 1;\n   */\n  username: string;\n\n  /**\n   * Time in UTC when this username was set.\n   *\n   * @generated from field: google.protobuf.Timestamp set_at = 2;\n   */\n  setAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.UsernameHistoryEntry.\n * Use `create(UsernameHistoryEntrySchema)` to create a new message.\n */\nexport const UsernameHistoryEntrySchema: GenMessage<UsernameHistoryEntry> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 5);\n\n/**\n * GetUsernameHistoryRequest fetches recent username changes for the\n * authenticated caller.\n *\n * @generated from message auth.v1.GetUsernameHistoryRequest\n */\nexport type GetUsernameHistoryRequest = Message<\"auth.v1.GetUsernameHistoryRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.GetUsernameHistoryRequest.\n * Use `create(GetUsernameHistoryRequestSchema)` to create a new message.\n */\nexport const GetUsernameHistoryRequestSchema: GenMessage<GetUsernameHistoryRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 6);\n\n/**\n * GetUsernameHistoryResponse contains the caller's recent username history,\n * newest first. At most 20 entries are returned.\n *\n * @generated from message auth.v1.GetUsernameHistoryResponse\n */\nexport type GetUsernameHistoryResponse = Message<\"auth.v1.GetUsernameHistoryResponse\"> & {\n  /**\n   * Recent username history entries, newest first.\n   *\n   * @generated from field: repeated auth.v1.UsernameHistoryEntry history = 1;\n   */\n  history: UsernameHistoryEntry[];\n};\n\n/**\n * Describes the message auth.v1.GetUsernameHistoryResponse.\n * Use `create(GetUsernameHistoryResponseSchema)` to create a new message.\n */\nexport const GetUsernameHistoryResponseSchema: GenMessage<GetUsernameHistoryResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 7);\n\n/**\n * GenerateUsernameOptionsRequest requests a fresh set of generated usernames.\n *\n * @generated from message auth.v1.GenerateUsernameOptionsRequest\n */\nexport type GenerateUsernameOptionsRequest = Message<\"auth.v1.GenerateUsernameOptionsRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.GenerateUsernameOptionsRequest.\n * Use `create(GenerateUsernameOptionsRequestSchema)` to create a new message.\n */\nexport const GenerateUsernameOptionsRequestSchema: GenMessage<GenerateUsernameOptionsRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 8);\n\n/**\n * GenerateUsernameOptionsResponse contains five generated usernames that the\n * caller may claim before the offer expires.\n *\n * @generated from message auth.v1.GenerateUsernameOptionsResponse\n */\nexport type GenerateUsernameOptionsResponse = Message<\"auth.v1.GenerateUsernameOptionsResponse\"> & {\n  /**\n   * Five distinct generated usernames available when this offer was created.\n   *\n   * @generated from field: repeated string usernames = 1;\n   */\n  usernames: string[];\n\n  /**\n   * Opaque proof required to claim one of the returned usernames.\n   *\n   * @generated from field: string offer_token = 2;\n   */\n  offerToken: string;\n\n  /**\n   * Time in UTC after which this offer can no longer be claimed.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 3;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.GenerateUsernameOptionsResponse.\n * Use `create(GenerateUsernameOptionsResponseSchema)` to create a new message.\n */\nexport const GenerateUsernameOptionsResponseSchema: GenMessage<GenerateUsernameOptionsResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 9);\n\n/**\n * ClaimGeneratedUsernameRequest selects one username from a generated offer.\n *\n * @generated from message auth.v1.ClaimGeneratedUsernameRequest\n */\nexport type ClaimGeneratedUsernameRequest = Message<\"auth.v1.ClaimGeneratedUsernameRequest\"> & {\n  /**\n   * Opaque proof returned with the generated username options.\n   *\n   * @generated from field: string offer_token = 1;\n   */\n  offerToken: string;\n\n  /**\n   * Zero-based position in the five returned username options.\n   *\n   * @generated from field: uint32 option_index = 2;\n   */\n  optionIndex: number;\n};\n\n/**\n * Describes the message auth.v1.ClaimGeneratedUsernameRequest.\n * Use `create(ClaimGeneratedUsernameRequestSchema)` to create a new message.\n */\nexport const ClaimGeneratedUsernameRequestSchema: GenMessage<ClaimGeneratedUsernameRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_profile, 10);\n\n/**\n * High-level error codes for profile domain errors (ProfileService).\n *\n * @generated from enum auth.v1.ProfileErrorCode\n */\nexport enum ProfileErrorCode {\n  /**\n   * No profile error code specified.\n   *\n   * @generated from enum value: PROFILE_UNSPECIFIED = 0;\n   */\n  PROFILE_UNSPECIFIED = 0,\n\n  /**\n   * Generic invalid field (format/characters).\n   *\n   * @generated from enum value: PROFILE_INVALID_FIELD = 1;\n   */\n  PROFILE_INVALID_FIELD = 1,\n\n  /**\n   * Field exceeds configured max length.\n   *\n   * @generated from enum value: PROFILE_FIELD_TOO_LONG = 2;\n   */\n  PROFILE_FIELD_TOO_LONG = 2,\n\n  /**\n   * URL is syntactically invalid.\n   *\n   * @generated from enum value: PROFILE_URL_INVALID = 3;\n   */\n  PROFILE_URL_INVALID = 3,\n\n  /**\n   * URL scheme is not allowed (e.g., non-http(s)).\n   *\n   * @generated from enum value: PROFILE_URL_SCHEME_INVALID = 4;\n   */\n  PROFILE_URL_SCHEME_INVALID = 4,\n}\n\n/**\n * Describes the enum auth.v1.ProfileErrorCode.\n */\nexport const ProfileErrorCodeSchema: GenEnum<ProfileErrorCode> = /*@__PURE__*/\n  enumDesc(file_auth_v1_profile, 0);\n\n/**\n * ProfileService manages the authenticated caller's public profile.\n *\n * @generated from service auth.v1.ProfileService\n */\nexport const ProfileService: GenService<{\n  /**\n   * Get the caller's profile.\n   *\n   * @generated from rpc auth.v1.ProfileService.GetProfile\n   */\n  getProfile: {\n    methodKind: \"unary\";\n    input: typeof GetProfileRequestSchema;\n    output: typeof UserProfileSchema;\n  },\n  /**\n   * Update the caller's mutable profile fields. Omitted fields are unchanged;\n   * present empty strings clear optional text fields.\n   *\n   * @generated from rpc auth.v1.ProfileService.UpdateProfile\n   */\n  updateProfile: {\n    methodKind: \"unary\";\n    input: typeof UserProfilePatchSchema;\n    output: typeof UserProfileSchema;\n  },\n  /**\n   * Get recent username history for the caller, newest first. Returns at most\n   * 20 entries.\n   *\n   * @generated from rpc auth.v1.ProfileService.GetUsernameHistory\n   */\n  getUsernameHistory: {\n    methodKind: \"unary\";\n    input: typeof GetUsernameHistoryRequestSchema;\n    output: typeof GetUsernameHistoryResponseSchema;\n  },\n  /**\n   * Generate five random username options for an account that has never\n   * claimed a username. Calling this method again returns a fresh set.\n   *\n   * @generated from rpc auth.v1.ProfileService.GenerateUsernameOptions\n   */\n  generateUsernameOptions: {\n    methodKind: \"unary\";\n    input: typeof GenerateUsernameOptionsRequestSchema;\n    output: typeof GenerateUsernameOptionsResponseSchema;\n  },\n  /**\n   * Claim one username by its position in a valid generated offer. The\n   * selected value comes from the offer and cannot be supplied directly.\n   *\n   * @generated from rpc auth.v1.ProfileService.ClaimGeneratedUsername\n   */\n  claimGeneratedUsername: {\n    methodKind: \"unary\";\n    input: typeof ClaimGeneratedUsernameRequestSchema;\n    output: typeof UserProfileSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_profile, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAaA,MAAa,uBACX,uBAAS,wiFAAwiF,CAAC,8BAA8B,CAAC;;;;;AA0CnlF,MAAa,wBACX,0BAAY,sBAAsB,CAAC;;;;;AA8GrC,MAAa,oBACX,0BAAY,sBAAsB,CAAC;;;;;AA4DrC,MAAa,yBACX,0BAAY,sBAAsB,CAAC;;;;;AAcrC,MAAa,0BACX,0BAAY,sBAAsB,CAAC;;;;;AAmCrC,MAAa,2BACX,0BAAY,sBAAsB,CAAC;;;;;AA2BrC,MAAa,6BACX,0BAAY,sBAAsB,CAAC;;;;;AAerC,MAAa,kCACX,0BAAY,sBAAsB,CAAC;;;;;AAqBrC,MAAa,mCACX,0BAAY,sBAAsB,CAAC;;;;;AAcrC,MAAa,uCACX,0BAAY,sBAAsB,CAAC;;;;;AAmCrC,MAAa,wCACX,0BAAY,sBAAsB,CAAC;;;;;AA2BrC,MAAa,sCACX,0BAAY,sBAAsB,EAAE;;;;;;AAOtC,IAAY,mBAAL,yBAAA,kBAAA;;;;;;CAML,iBAAA,iBAAA,yBAAA,KAAA;;;;;;CAOA,iBAAA,iBAAA,2BAAA,KAAA;;;;;;CAOA,iBAAA,iBAAA,4BAAA,KAAA;;;;;;CAOA,iBAAA,iBAAA,yBAAA,KAAA;;;;;;CAOA,iBAAA,iBAAA,gCAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,yBACX,uBAAS,sBAAsB,CAAC;;;;;;AAOlC,MAAa,iBAwDX,0BAAY,sBAAsB,CAAC"}