@stigmer/protos 0.0.34

package/ai/stigmer/iam/identityaccount/v1/io_pb.d.ts

@@ -0,0 +1,138 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { PageInfo } from "../../../commons/rpc/pagination_pb";
+import type { IdentityAccount } from "./api_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/iam/identityaccount/v1/io.proto.
+ */
+export declare const file_ai_stigmer_iam_identityaccount_v1_io: GenFile;
+/**
+ * wrapper to get list of identity accounts
+ *
+ * @generated from message ai.stigmer.iam.identityaccount.v1.IdentityAccounts
+ */
+export type IdentityAccounts = Message<"ai.stigmer.iam.identityaccount.v1.IdentityAccounts"> & {
+    /**
+     * @generated from field: repeated ai.stigmer.iam.identityaccount.v1.IdentityAccount entries = 1;
+     */
+    entries: IdentityAccount[];
+};
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccounts.
+ * Use `create(IdentityAccountsSchema)` to create a new message.
+ */
+export declare const IdentityAccountsSchema: GenMessage<IdentityAccounts>;
+/**
+ * wrapper for user identity account id.
+ *
+ * @generated from message ai.stigmer.iam.identityaccount.v1.IdentityAccountId
+ */
+export type IdentityAccountId = Message<"ai.stigmer.iam.identityaccount.v1.IdentityAccountId"> & {
+    /**
+     * @generated from field: string value = 1;
+     */
+    value: string;
+};
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccountId.
+ * Use `create(IdentityAccountIdSchema)` to create a new message.
+ */
+export declare const IdentityAccountIdSchema: GenMessage<IdentityAccountId>;
+/**
+ * wrapper for email of the identity account.
+ *
+ * @generated from message ai.stigmer.iam.identityaccount.v1.IdentityAccountEmail
+ */
+export type IdentityAccountEmail = Message<"ai.stigmer.iam.identityaccount.v1.IdentityAccountEmail"> & {
+    /**
+     * @generated from field: string value = 1;
+     */
+    value: string;
+};
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccountEmail.
+ * Use `create(IdentityAccountEmailSchema)` to create a new message.
+ */
+export declare const IdentityAccountEmailSchema: GenMessage<IdentityAccountEmail>;
+/**
+ * wrapper for idp id.
+ *
+ * @generated from message ai.stigmer.iam.identityaccount.v1.IdpId
+ */
+export type IdpId = Message<"ai.stigmer.iam.identityaccount.v1.IdpId"> & {
+    /**
+     * @generated from field: string value = 1;
+     */
+    value: string;
+};
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdpId.
+ * Use `create(IdpIdSchema)` to create a new message.
+ */
+export declare const IdpIdSchema: GenMessage<IdpId>;
+/**
+ * input for paginated queries that require identity account id as input.
+ *
+ * @generated from message ai.stigmer.iam.identityaccount.v1.ListWithIdentityAccountIdReq
+ */
+export type ListWithIdentityAccountIdReq = Message<"ai.stigmer.iam.identityaccount.v1.ListWithIdentityAccountIdReq"> & {
+    /**
+     * identity account id
+     *
+     * @generated from field: string identity_account_id = 1;
+     */
+    identityAccountId: string;
+    /**
+     * @generated from field: ai.stigmer.commons.rpc.PageInfo page = 2;
+     */
+    page?: PageInfo;
+};
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.ListWithIdentityAccountIdReq.
+ * Use `create(ListWithIdentityAccountIdReqSchema)` to create a new message.
+ */
+export declare const ListWithIdentityAccountIdReqSchema: GenMessage<ListWithIdentityAccountIdReq>;
+/**
+ * response for paginated rpc query to list identity accounts.
+ *
+ * @generated from message ai.stigmer.iam.identityaccount.v1.IdentityAccountsList
+ */
+export type IdentityAccountsList = Message<"ai.stigmer.iam.identityaccount.v1.IdentityAccountsList"> & {
+    /**
+     * total number of pages
+     *
+     * @generated from field: int32 total_pages = 1;
+     */
+    totalPages: number;
+    /**
+     * current page entries
+     *
+     * @generated from field: repeated ai.stigmer.iam.identityaccount.v1.IdentityAccount entries = 2;
+     */
+    entries: IdentityAccount[];
+};
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccountsList.
+ * Use `create(IdentityAccountsListSchema)` to create a new message.
+ */
+export declare const IdentityAccountsListSchema: GenMessage<IdentityAccountsList>;
+/**
+ * wrapper for identity account organization id.
+ *
+ * @generated from message ai.stigmer.iam.identityaccount.v1.ListWithIdentityOrg
+ */
+export type ListWithIdentityOrg = Message<"ai.stigmer.iam.identityaccount.v1.ListWithIdentityOrg"> & {
+    /**
+     * @generated from field: string org = 1;
+     */
+    org: string;
+    /**
+     * @generated from field: ai.stigmer.commons.rpc.PageInfo page = 2;
+     */
+    page?: PageInfo;
+};
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.ListWithIdentityOrg.
+ * Use `create(ListWithIdentityOrgSchema)` to create a new message.
+ */
+export declare const ListWithIdentityOrgSchema: GenMessage<ListWithIdentityOrg>;

package/ai/stigmer/iam/identityaccount/v1/io_pb.js

@@ -0,0 +1,47 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/iam/identityaccount/v1/io.proto (package ai.stigmer.iam.identityaccount.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_commons_rpc_pagination } from "../../../commons/rpc/pagination_pb";
+import { file_ai_stigmer_iam_identityaccount_v1_api } from "./api_pb";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb";
+/**
+ * Describes the file ai/stigmer/iam/identityaccount/v1/io.proto.
+ */
+export const file_ai_stigmer_iam_identityaccount_v1_io = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_rpc_pagination, file_ai_stigmer_iam_identityaccount_v1_api, file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccounts.
+ * Use `create(IdentityAccountsSchema)` to create a new message.
+ */
+export const IdentityAccountsSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityaccount_v1_io, 0);
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccountId.
+ * Use `create(IdentityAccountIdSchema)` to create a new message.
+ */
+export const IdentityAccountIdSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityaccount_v1_io, 1);
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccountEmail.
+ * Use `create(IdentityAccountEmailSchema)` to create a new message.
+ */
+export const IdentityAccountEmailSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityaccount_v1_io, 2);
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdpId.
+ * Use `create(IdpIdSchema)` to create a new message.
+ */
+export const IdpIdSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityaccount_v1_io, 3);
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.ListWithIdentityAccountIdReq.
+ * Use `create(ListWithIdentityAccountIdReqSchema)` to create a new message.
+ */
+export const ListWithIdentityAccountIdReqSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityaccount_v1_io, 4);
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccountsList.
+ * Use `create(IdentityAccountsListSchema)` to create a new message.
+ */
+export const IdentityAccountsListSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityaccount_v1_io, 5);
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.ListWithIdentityOrg.
+ * Use `create(ListWithIdentityOrgSchema)` to create a new message.
+ */
+export const ListWithIdentityOrgSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityaccount_v1_io, 6);
+//# sourceMappingURL=io_pb.js.map

package/ai/stigmer/iam/identityaccount/v1/io_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/io_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,6HAA6H;AAC7H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAE5F,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAY,aAAa,CAC7E,QAAQ,CAAC,0yBAA0yB,EAAE,CAAC,sCAAsC,EAAE,0CAA0C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAcz6B;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAc5D;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAc5D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAc5D;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB,aAAa,CACzD,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAqB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAA6C,aAAa,CACvG,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAuB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAqC,aAAa,CACvF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;AAmB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/identityaccount/v1/query_connect.d.ts

@@ -0,0 +1,79 @@
+/**
+ * identity-account query controller
+ *
+ * @generated from service ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController
+ */
+export declare const IdentityAccountQueryController: {
+    readonly typeName: "ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController";
+    readonly methods: {
+        /**
+         * lookup identity-account.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.get
+         */
+        readonly get: {
+            readonly name: "get";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * look up identity-account by authentication token.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.whoAmI
+         */
+        readonly whoAmI: {
+            readonly name: "whoAmI";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * lookup user-account by identity account email.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getByEmail
+         */
+        readonly getByEmail: {
+            readonly name: "getByEmail";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * lookup user-account by idp id.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getByIdpId
+         */
+        readonly getByIdpId: {
+            readonly name: "getByIdpId";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+        /**
+         * lookup identity-account actor-info (lightweight actor data for audit trail caching)
+         *
+         * This RPC is specifically designed to break circular dependency loops in audit actor resolution.
+         * When converting IdentityAccount entities to proto responses, the audit info (created_by, updated_by)
+         * needs actor details. If we use the standard get() RPC, it triggers a full entity-to-proto conversion
+         * including audit actors, which can create infinite recursion if audit actors reference IdentityAccounts.
+         *
+         * This dedicated endpoint:
+         * - Returns ONLY the lightweight ApiResourceAuditActor (id + avatar)
+         * - Does NOT include full audit trail in the response
+         * - Accesses entity data directly without recursive proto conversion
+         * - Is used by ApiResourceAuditActorCacheProxy to safely populate Redis cache
+         * - Prevents StackOverflowError when Redis cache is empty or cleared
+         *
+         * Restricted to platform operators only as this is an internal cache-population mechanism.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getActorInfo
+         */
+        readonly getActorInfo: {
+            readonly name: "getActorInfo";
+            readonly I: any;
+            readonly O: any;
+            readonly kind: any;
+        };
+    };
+};

package/ai/stigmer/iam/identityaccount/v1/query_connect.js

@@ -0,0 +1,85 @@
+// @generated by protoc-gen-connect-es v1.6.1 with parameter "target=ts"
+// @generated from file ai/stigmer/iam/identityaccount/v1/query.proto (package ai.stigmer.iam.identityaccount.v1, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { Empty, MethodKind } from "@bufbuild/protobuf";
+/**
+ * identity-account query controller
+ *
+ * @generated from service ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController
+ */
+export const IdentityAccountQueryController = {
+    typeName: "ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController",
+    methods: {
+        /**
+         * lookup identity-account.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.get
+         */
+        get: {
+            name: "get",
+            I: IdentityAccountId,
+            O: IdentityAccount,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * look up identity-account by authentication token.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.whoAmI
+         */
+        whoAmI: {
+            name: "whoAmI",
+            I: Empty,
+            O: IdentityAccount,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * lookup user-account by identity account email.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getByEmail
+         */
+        getByEmail: {
+            name: "getByEmail",
+            I: IdentityAccountEmail,
+            O: IdentityAccount,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * lookup user-account by idp id.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getByIdpId
+         */
+        getByIdpId: {
+            name: "getByIdpId",
+            I: IdpId,
+            O: IdentityAccount,
+            kind: MethodKind.Unary,
+        },
+        /**
+         * lookup identity-account actor-info (lightweight actor data for audit trail caching)
+         *
+         * This RPC is specifically designed to break circular dependency loops in audit actor resolution.
+         * When converting IdentityAccount entities to proto responses, the audit info (created_by, updated_by)
+         * needs actor details. If we use the standard get() RPC, it triggers a full entity-to-proto conversion
+         * including audit actors, which can create infinite recursion if audit actors reference IdentityAccounts.
+         *
+         * This dedicated endpoint:
+         * - Returns ONLY the lightweight ApiResourceAuditActor (id + avatar)
+         * - Does NOT include full audit trail in the response
+         * - Accesses entity data directly without recursive proto conversion
+         * - Is used by ApiResourceAuditActorCacheProxy to safely populate Redis cache
+         * - Prevents StackOverflowError when Redis cache is empty or cleared
+         *
+         * Restricted to platform operators only as this is an internal cache-population mechanism.
+         *
+         * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getActorInfo
+         */
+        getActorInfo: {
+            name: "getActorInfo",
+            I: IdentityAccountId,
+            O: ApiResourceAuditActor,
+            kind: MethodKind.Unary,
+        },
+    }
+};
+//# sourceMappingURL=query_connect.js.map

package/ai/stigmer/iam/identityaccount/v1/query_connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_connect.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/query_connect.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,gIAAgI;AAChI,oBAAoB;AACpB,cAAc;AAId,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,kEAAkE;IAC5E,OAAO,EAAE;QACP;;;;WAIG;QACH,GAAG,EAAE;YACH,IAAI,EAAE,KAAK;YACX,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,oBAAoB;YACvB,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;WAIG;QACH,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,eAAe;YAClB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;QACD;;;;;;;;;;;;;;;;;;WAkBG;QACH,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,qBAAqB;YACxB,IAAI,EAAE,UAAU,CAAC,KAAK;SACvB;KACF;CACO,CAAC"}

package/ai/stigmer/iam/identityaccount/v1/query_pb.d.ts

@@ -0,0 +1,80 @@
+import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { ApiResourceAuditActorSchema } from "../../../commons/apiresource/status_pb";
+import type { IdentityAccountSchema } from "./api_pb";
+import type { IdentityAccountEmailSchema, IdentityAccountIdSchema, IdpIdSchema } from "./io_pb";
+import type { EmptySchema } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file ai/stigmer/iam/identityaccount/v1/query.proto.
+ */
+export declare const file_ai_stigmer_iam_identityaccount_v1_query: GenFile;
+/**
+ * identity-account query controller
+ *
+ * @generated from service ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController
+ */
+export declare const IdentityAccountQueryController: GenService<{
+    /**
+     * lookup identity-account.
+     *
+     * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.get
+     */
+    get: {
+        methodKind: "unary";
+        input: typeof IdentityAccountIdSchema;
+        output: typeof IdentityAccountSchema;
+    };
+    /**
+     * look up identity-account by authentication token.
+     *
+     * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.whoAmI
+     */
+    whoAmI: {
+        methodKind: "unary";
+        input: typeof EmptySchema;
+        output: typeof IdentityAccountSchema;
+    };
+    /**
+     * lookup user-account by identity account email.
+     *
+     * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getByEmail
+     */
+    getByEmail: {
+        methodKind: "unary";
+        input: typeof IdentityAccountEmailSchema;
+        output: typeof IdentityAccountSchema;
+    };
+    /**
+     * lookup user-account by idp id.
+     *
+     * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getByIdpId
+     */
+    getByIdpId: {
+        methodKind: "unary";
+        input: typeof IdpIdSchema;
+        output: typeof IdentityAccountSchema;
+    };
+    /**
+     * lookup identity-account actor-info (lightweight actor data for audit trail caching)
+     *
+     * This RPC is specifically designed to break circular dependency loops in audit actor resolution.
+     * When converting IdentityAccount entities to proto responses, the audit info (created_by, updated_by)
+     * needs actor details. If we use the standard get() RPC, it triggers a full entity-to-proto conversion
+     * including audit actors, which can create infinite recursion if audit actors reference IdentityAccounts.
+     *
+     * This dedicated endpoint:
+     * - Returns ONLY the lightweight ApiResourceAuditActor (id + avatar)
+     * - Does NOT include full audit trail in the response
+     * - Accesses entity data directly without recursive proto conversion
+     * - Is used by ApiResourceAuditActorCacheProxy to safely populate Redis cache
+     * - Prevents StackOverflowError when Redis cache is empty or cleared
+     *
+     * Restricted to platform operators only as this is an internal cache-population mechanism.
+     *
+     * @generated from rpc ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController.getActorInfo
+     */
+    getActorInfo: {
+        methodKind: "unary";
+        input: typeof IdentityAccountIdSchema;
+        output: typeof ApiResourceAuditActorSchema;
+    };
+}>;

package/ai/stigmer/iam/identityaccount/v1/query_pb.js

@@ -0,0 +1,21 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/iam/identityaccount/v1/query.proto (package ai.stigmer.iam.identityaccount.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_commons_apiresource_rpc_service_options } from "../../../commons/apiresource/rpc_service_options_pb";
+import { file_ai_stigmer_commons_apiresource_status } from "../../../commons/apiresource/status_pb";
+import { file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options } from "../../iampolicy/v1/rpcauthorization/method_options_pb";
+import { file_ai_stigmer_iam_identityaccount_v1_api } from "./api_pb";
+import { file_ai_stigmer_iam_identityaccount_v1_io } from "./io_pb";
+import { file_google_protobuf_empty } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file ai/stigmer/iam/identityaccount/v1/query.proto.
+ */
+export const file_ai_stigmer_iam_identityaccount_v1_query = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_rpc_service_options, file_ai_stigmer_commons_apiresource_status, file_ai_stigmer_iam_iampolicy_v1_rpcauthorization_method_options, file_ai_stigmer_iam_identityaccount_v1_api, file_ai_stigmer_iam_identityaccount_v1_io, file_google_protobuf_empty]);
+/**
+ * identity-account query controller
+ *
+ * @generated from service ai.stigmer.iam.identityaccount.v1.IdentityAccountQueryController
+ */
+export const IdentityAccountQueryController = /*@__PURE__*/ serviceDesc(file_ai_stigmer_iam_identityaccount_v1_query, 0);
+//# sourceMappingURL=query_pb.js.map

package/ai/stigmer/iam/identityaccount/v1/query_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/query_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,gIAAgI;AAChI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,uDAAuD,EAAE,MAAM,qDAAqD,CAAC;AAE9H,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AACpG,OAAO,EAAE,gEAAgE,EAAE,MAAM,uDAAuD,CAAC;AAEzI,OAAO,EAAE,0CAA0C,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,EAAE,yCAAyC,EAAE,MAAM,SAAS,CAAC;AAEpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAY,aAAa,CAChF,QAAQ,CAAC,4rCAA4rC,EAAE,CAAC,uDAAuD,EAAE,0CAA0C,EAAE,gEAAgE,EAAE,0CAA0C,EAAE,yCAAyC,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAEr+C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAiEtC,aAAa,CAChB,WAAW,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/identityaccount/v1/spec_pb.d.ts

@@ -0,0 +1,95 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { ApiResourceReference } from "../../../commons/apiresource/io_pb";
+import type { IdentityAccountProvisioningMode } from "./enum_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/iam/identityaccount/v1/spec.proto.
+ */
+export declare const file_ai_stigmer_iam_identityaccount_v1_spec: GenFile;
+/**
+ * IdentityAccountSpec defines the configuration for an identity account.
+ *
+ * An identity account represents a user or machine principal in Stigmer's
+ * authorization model. All FGA tuples use identity_account as the principal type.
+ *
+ * Accounts are provisioned in one of three ways:
+ * - direct: User signed up via Stigmer's Auth0 (idp_id is the Auth0 subject ID)
+ * - federated: JIT-provisioned via an external IdentityProvider during federated auth
+ *   (idp_id is a compound key: "federated:{provider_id}:{external_sub}")
+ * - machine: M2M client credentials (idp_id ends with "@clients")
+ *
+ * @generated from message ai.stigmer.iam.identityaccount.v1.IdentityAccountSpec
+ */
+export type IdentityAccountSpec = Message<"ai.stigmer.iam.identityaccount.v1.IdentityAccountSpec"> & {
+    /**
+     * IDP ID of the identity account.
+     *
+     * For direct accounts: the Auth0 subject ID (e.g., "auth0|abc123").
+     * For federated accounts: a compound key ensuring global uniqueness across
+     * identity providers (e.g., "federated:idp_01JXY:auth0|user-456").
+     * For machine accounts: the Auth0 client ID with "@clients" suffix.
+     *
+     * @generated from field: string idp_id = 1;
+     */
+    idpId: string;
+    /**
+     * Email of the identity account.
+     * For direct accounts: based on the email used to sign up.
+     * For federated accounts: fetched from the IdentityProvider's UserInfo endpoint
+     * during JIT provisioning.
+     * (ignored for create) this value is assigned by backend.
+     *
+     * @generated from field: string email = 2;
+     */
+    email: string;
+    /**
+     * First name of the identity account.
+     *
+     * @generated from field: string first_name = 3;
+     */
+    firstName: string;
+    /**
+     * Last name of the identity account.
+     *
+     * @generated from field: string last_name = 4;
+     */
+    lastName: string;
+    /**
+     * URL of the profile picture.
+     * For direct accounts: from Auth0 profile.
+     * For federated accounts: from the IdentityProvider's UserInfo endpoint.
+     *
+     * @generated from field: string picture_url = 5;
+     */
+    pictureUrl: string;
+    /**
+     * Indicates if this is a machine account used for inter-service communication.
+     * Machine accounts have idp_id values ending with "@clients" suffix.
+     * (ignored for create) this value is assigned by backend based on idp_id.
+     *
+     * @generated from field: bool is_machine_account = 6;
+     */
+    isMachineAccount: boolean;
+    /**
+     * How this identity account was provisioned.
+     * Unspecified for legacy accounts created before this field was introduced.
+     * (ignored for create) this value is assigned by backend.
+     *
+     * @generated from field: ai.stigmer.iam.identityaccount.v1.IdentityAccountProvisioningMode provisioning_mode = 7;
+     */
+    provisioningMode: IdentityAccountProvisioningMode;
+    /**
+     * Reference to the IdentityProvider that provisioned this account.
+     * Set only when provisioning_mode is FEDERATED. Identifies which external
+     * platform's trust relationship created this account during federated auth.
+     * (ignored for create) this value is assigned by backend.
+     *
+     * @generated from field: ai.stigmer.commons.apiresource.ApiResourceReference identity_provider_ref = 8;
+     */
+    identityProviderRef?: ApiResourceReference;
+};
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccountSpec.
+ * Use `create(IdentityAccountSpecSchema)` to create a new message.
+ */
+export declare const IdentityAccountSpecSchema: GenMessage<IdentityAccountSpec>;

package/ai/stigmer/iam/identityaccount/v1/spec_pb.js

@@ -0,0 +1,17 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/iam/identityaccount/v1/spec.proto (package ai.stigmer.iam.identityaccount.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_ai_stigmer_commons_apiresource_io } from "../../../commons/apiresource/io_pb";
+import { file_ai_stigmer_iam_identityaccount_v1_enum } from "./enum_pb";
+import { file_buf_validate_validate } from "../../../../../buf/validate/validate_pb";
+/**
+ * Describes the file ai/stigmer/iam/identityaccount/v1/spec.proto.
+ */
+export const file_ai_stigmer_iam_identityaccount_v1_spec = /*@__PURE__*/ fileDesc("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", [file_ai_stigmer_commons_apiresource_io, file_ai_stigmer_iam_identityaccount_v1_enum, file_buf_validate_validate]);
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.IdentityAccountSpec.
+ * Use `create(IdentityAccountSpecSchema)` to create a new message.
+ */
+export const IdentityAccountSpecSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityaccount_v1_spec, 0);
+//# sourceMappingURL=spec_pb.js.map

package/ai/stigmer/iam/identityaccount/v1/spec_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/spec_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,+HAA+H;AAC/H,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAC;AAE5F,OAAO,EAAE,2CAA2C,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAY,aAAa,CAC/E,QAAQ,CAAC,kjBAAkjB,EAAE,CAAC,sCAAsC,EAAE,2CAA2C,EAAE,0BAA0B,CAAC,CAAC,CAAC;AA4FlrB;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,aAAa,CACrF,WAAW,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC"}

package/ai/stigmer/iam/identityaccount/v1/webhook_pb.d.ts

@@ -0,0 +1,50 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ai/stigmer/iam/identityaccount/v1/webhook.proto.
+ */
+export declare const file_ai_stigmer_iam_identityaccount_v1_webhook: GenFile;
+/**
+ * https://auth0.com/docs/customize/log-streams/custom-log-streams
+ *
+ * @generated from message ai.stigmer.iam.identityaccount.v1.Auth0Webhook
+ */
+export type Auth0Webhook = Message<"ai.stigmer.iam.identityaccount.v1.Auth0Webhook"> & {
+    /**
+     * @generated from field: string date = 1;
+     */
+    date: string;
+    /**
+     * @generated from field: string type = 2;
+     */
+    type: string;
+    /**
+     * @generated from field: string description = 3;
+     */
+    description: string;
+    /**
+     * @generated from field: string client_id = 4;
+     */
+    clientId: string;
+    /**
+     * @generated from field: string client_name = 5;
+     */
+    clientName: string;
+    /**
+     * @generated from field: string ip = 6;
+     */
+    ip: string;
+    /**
+     * @generated from field: string user_agent = 7;
+     */
+    userAgent: string;
+    /**
+     * @generated from field: string user_id = 8;
+     */
+    userId: string;
+};
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.Auth0Webhook.
+ * Use `create(Auth0WebhookSchema)` to create a new message.
+ */
+export declare const Auth0WebhookSchema: GenMessage<Auth0Webhook>;

package/ai/stigmer/iam/identityaccount/v1/webhook_pb.js

@@ -0,0 +1,14 @@
+// @generated by protoc-gen-es v2.2.2 with parameter "target=ts"
+// @generated from file ai/stigmer/iam/identityaccount/v1/webhook.proto (package ai.stigmer.iam.identityaccount.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file ai/stigmer/iam/identityaccount/v1/webhook.proto.
+ */
+export const file_ai_stigmer_iam_identityaccount_v1_webhook = /*@__PURE__*/ fileDesc("Ci9haS9zdGlnbWVyL2lhbS9pZGVudGl0eWFjY291bnQvdjEvd2ViaG9vay5wcm90bxIhYWkuc3RpZ21lci5pYW0uaWRlbnRpdHlhY2NvdW50LnYxIpgBCgxBdXRoMFdlYmhvb2sSDAoEZGF0ZRgBIAEoCRIMCgR0eXBlGAIgASgJEhMKC2Rlc2NyaXB0aW9uGAMgASgJEhEKCWNsaWVudF9pZBgEIAEoCRITCgtjbGllbnRfbmFtZRgFIAEoCRIKCgJpcBgGIAEoCRISCgp1c2VyX2FnZW50GAcgASgJEg8KB3VzZXJfaWQYCCABKAliBnByb3RvMw");
+/**
+ * Describes the message ai.stigmer.iam.identityaccount.v1.Auth0Webhook.
+ * Use `create(Auth0WebhookSchema)` to create a new message.
+ */
+export const Auth0WebhookSchema = /*@__PURE__*/ messageDesc(file_ai_stigmer_iam_identityaccount_v1_webhook, 0);
+//# sourceMappingURL=webhook_pb.js.map

package/ai/stigmer/iam/identityaccount/v1/webhook_pb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook_pb.js","sourceRoot":"","sources":["../../../../../../ai/stigmer/iam/identityaccount/v1/webhook_pb.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,kIAAkI;AAClI,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAY,aAAa,CAClF,QAAQ,CAAC,4UAA4U,CAAC,CAAC;AAiDzV;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC"}