@structured-id/ui-core 0.1.5 → 1.0.1

package/dist/index.cjs

@@ -11010,6 +11010,14 @@ var CreateProfileRequest$Type = class extends _runtime.MessageType {
         T: 9
         /*ScalarType.STRING*/
       },
+      {
+        no: 17,
+        name: "phone",
+        kind: "scalar",
+        opt: true,
+        T: 9
+        /*ScalarType.STRING*/
+      },
       {
         no: 3,
         name: "given_name",
@@ -11090,6 +11098,10 @@ var CreateProfileRequest$Type = class extends _runtime.MessageType {
         2:
           message.email = reader.string();
           break;
+        case /* optional string phone */
+        17:
+          message.phone = reader.string();
+          break;
         case /* optional string given_name */
         3:
           message.givenName = reader.string();
@@ -11160,6 +11172,8 @@ var CreateProfileRequest$Type = class extends _runtime.MessageType {
       writer.tag(15, _runtime.WireType.LengthDelimited).string(message.honorificPrefix);
     if (message.honorificSuffix !== void 0)
       writer.tag(16, _runtime.WireType.LengthDelimited).string(message.honorificSuffix);
+    if (message.phone !== void 0)
+      writer.tag(17, _runtime.WireType.LengthDelimited).string(message.phone);
     let u = options.writeUnknownFields;
     if (u !== false)
       (u == true ? _runtime.UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);

package/dist/index.d.cts

@@ -5588,18 +5588,34 @@ declare class CreateProfileRequest$Type extends MessageType<CreateProfileRequest
     internalBinaryWrite(message: CreateProfileRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter;
 }
 /**
+ * Primary identifier — user provides exactly ONE at signup.
+ * Additional identifiers can be added later via profile settings.
+ * Username is a valuable identity — never auto-generated.
+ *
  * @generated from protobuf message sid.v1.identity.CreateProfileRequest
  */
 interface CreateProfileRequest {
     /**
+     * Login handle (no '@', no '+'). Global ('alice') or federated ('alice#acme.corp').
+     *
      * @generated from protobuf field: optional string username = 1
      */
     username?: string;
     /**
+     * Email address. Requires OTP/magic-link verification after signup.
+     *
      * @generated from protobuf field: optional string email = 2
      */
     email?: string;
     /**
+     * Phone number in E.164 format (+380501234567). Requires OTP verification after signup.
+     *
+     * @generated from protobuf field: optional string phone = 17
+     */
+    phone?: string;
+    /**
+     * Structured name components (OIDC + SCIM compliant). All optional.
+     *
      * @generated from protobuf field: optional string given_name = 3
      */
     givenName?: string;

package/dist/index.d.ts

@@ -5588,18 +5588,34 @@ declare class CreateProfileRequest$Type extends MessageType<CreateProfileRequest
     internalBinaryWrite(message: CreateProfileRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter;
 }
 /**
+ * Primary identifier — user provides exactly ONE at signup.
+ * Additional identifiers can be added later via profile settings.
+ * Username is a valuable identity — never auto-generated.
+ *
  * @generated from protobuf message sid.v1.identity.CreateProfileRequest
  */
 interface CreateProfileRequest {
     /**
+     * Login handle (no '@', no '+'). Global ('alice') or federated ('alice#acme.corp').
+     *
      * @generated from protobuf field: optional string username = 1
      */
     username?: string;
     /**
+     * Email address. Requires OTP/magic-link verification after signup.
+     *
      * @generated from protobuf field: optional string email = 2
      */
     email?: string;
     /**
+     * Phone number in E.164 format (+380501234567). Requires OTP verification after signup.
+     *
+     * @generated from protobuf field: optional string phone = 17
+     */
+    phone?: string;
+    /**
+     * Structured name components (OIDC + SCIM compliant). All optional.
+     *
      * @generated from protobuf field: optional string given_name = 3
      */
     givenName?: string;

package/dist/index.js

@@ -11010,6 +11010,14 @@ var CreateProfileRequest$Type = class extends MessageType5 {
         T: 9
         /*ScalarType.STRING*/
       },
+      {
+        no: 17,
+        name: "phone",
+        kind: "scalar",
+        opt: true,
+        T: 9
+        /*ScalarType.STRING*/
+      },
       {
         no: 3,
         name: "given_name",
@@ -11090,6 +11098,10 @@ var CreateProfileRequest$Type = class extends MessageType5 {
         2:
           message.email = reader.string();
           break;
+        case /* optional string phone */
+        17:
+          message.phone = reader.string();
+          break;
         case /* optional string given_name */
         3:
           message.givenName = reader.string();
@@ -11160,6 +11172,8 @@ var CreateProfileRequest$Type = class extends MessageType5 {
       writer.tag(15, WireType4.LengthDelimited).string(message.honorificPrefix);
     if (message.honorificSuffix !== void 0)
       writer.tag(16, WireType4.LengthDelimited).string(message.honorificSuffix);
+    if (message.phone !== void 0)
+      writer.tag(17, WireType4.LengthDelimited).string(message.phone);
     let u = options.writeUnknownFields;
     if (u !== false)
       (u == true ? UnknownFieldHandler5.onWrite : u)(this.typeName, message, writer);

package/package.json

@@ -1,12 +1,18 @@
 {
   "name": "@structured-id/ui-core",
-  "version": "0.1.5",
+  "version": "1.0.1",
   "type": "module",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org"
   },
   "description": "Shared UI package for StructuredID — proto clients, Vue 3 composables, Pinia stores, components.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/structured-id/ui-core.git"
+  },
+  "homepage": "https://github.com/structured-id/ui-core",
+  "bugs": "https://github.com/structured-id/ui-core/issues",
   "main": "dist/index.cjs",
   "module": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/generated/google/api/http.ts

@@ -2,7 +2,7 @@
 // @generated from protobuf file "google/api/http.proto" (package "google.api", syntax proto3)
 // tslint:disable
 //
-// Copyright 2025 Google LLC
+// Copyright 2026 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.

package/src/generated/sid/v1/admin/settings.ts

@@ -288,43 +288,103 @@ export interface SetFeatureRequest {
  */
 export interface EmailSettings {
     /**
+     * SMTP server hostname (e.g. "smtp.office365.com").
+     *
      * @generated from protobuf field: string smtp_host = 1
      */
     smtpHost: string;
     /**
+     * SMTP port. Canonical defaults: 587 (STARTTLS), 465 (SSL/TLS), 25 (none).
+     *
      * @generated from protobuf field: uint32 smtp_port = 2
      */
     smtpPort: number;
     /**
+     * Envelope From / From header address (e.g. "noreply@example.com").
+     *
      * @generated from protobuf field: string from_address = 3
      */
     fromAddress: string;
     /**
+     * Display name in From header (e.g. "Example IdP").
+     *
      * @generated from protobuf field: string from_display_name = 4
      */
     fromDisplayName: string;
     /**
+     * Optional Reply-To address. Empty = none.
+     *
      * @generated from protobuf field: string reply_to = 5
      */
     replyTo: string;
     /**
+     * TLS/encryption mode for the SMTP connection.
+     *
      * @generated from protobuf field: sid.v1.admin.SmtpEncryptionType encryption = 6
      */
     encryption: SmtpEncryptionType;
     /**
+     * Authentication method.
+     *
      * @generated from protobuf field: sid.v1.admin.SmtpAuthType auth_type = 7
      */
     authType: SmtpAuthType;
     /**
-     * Credentials (only set on update, never returned in get).
+     * SMTP username for PLAIN/LOGIN or the email address for XOAUTH2.
+     * Only set on update; never returned in GetEmailSettings.
      *
      * @generated from protobuf field: string username = 8
      */
     username: string;
     /**
+     * SMTP password for PLAIN/LOGIN. Write-only — never returned in GetEmailSettings.
+     *
      * @generated from protobuf field: string password = 9
      */
     password: string;
+    // ── XOAUTH2 fields (auth_type == SMTP_AUTH_TYPE_XOAUTH2 only) ──────────
+
+    /**
+     * OAuth2 provider: "m365" (Microsoft 365) or "google" (Google Workspace).
+     *
+     * @generated from protobuf field: sid.v1.admin.XOAuth2ProviderType xoauth2_provider = 10
+     */
+    xoauth2Provider: XOAuth2ProviderType;
+    /**
+     * Microsoft 365: Azure AD tenant ID (GUID or domain name).
+     * Required when xoauth2_provider == M365.
+     *
+     * @generated from protobuf field: string xoauth2_tenant_id = 11
+     */
+    xoauth2TenantId: string;
+    /**
+     * OAuth2 client ID (app registration). Required for both M365 and Google.
+     *
+     * @generated from protobuf field: string xoauth2_client_id = 12
+     */
+    xoauth2ClientId: string;
+    /**
+     * OAuth2 client secret. Write-only — never returned in GetEmailSettings.
+     * M365: Azure AD client secret. Google: not used (service account key instead).
+     *
+     * @generated from protobuf field: string xoauth2_client_secret = 13
+     */
+    xoauth2ClientSecret: string;
+    /**
+     * Google Workspace: service account key JSON. Write-only.
+     * Contains private key used to sign JWT assertions for the token exchange.
+     *
+     * @generated from protobuf field: string xoauth2_service_account_key = 14
+     */
+    xoauth2ServiceAccountKey: string;
+    /**
+     * Optional override for the OAuth2 token endpoint URL.
+     * Defaults: M365 = https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token
+     *           Google = https://oauth2.googleapis.com/token
+     *
+     * @generated from protobuf field: string xoauth2_token_endpoint = 15
+     */
+    xoauth2TokenEndpoint: string;
 }
 /**
  * @generated from protobuf message sid.v1.admin.TestEmailResponse
@@ -607,7 +667,42 @@ export enum SmtpAuthType {
     /**
      * @generated from protobuf enum value: SMTP_AUTH_TYPE_USERNAME_PASSWORD = 2;
      */
-    USERNAME_PASSWORD = 2
+    USERNAME_PASSWORD = 2,
+    /**
+     * OAuth2 bearer token via XOAUTH2 SASL mechanism.
+     * Required for Microsoft 365 (App Password deprecated Oct 2022) and
+     * Google Workspace SMTP relay. Credentials: OAuth2 client credentials flow
+     * (M365) or service account JWT exchange (Google).
+     *
+     * @generated from protobuf enum value: SMTP_AUTH_TYPE_XOAUTH2 = 3;
+     */
+    XOAUTH2 = 3
+}
+/**
+ * OAuth2 provider for XOAUTH2 SMTP authentication.
+ *
+ * @generated from protobuf enum sid.v1.admin.XOAuth2ProviderType
+ */
+export enum XOAuth2ProviderType {
+    /**
+     * @generated from protobuf enum value: XOAUTH2_PROVIDER_TYPE_UNSPECIFIED = 0;
+     */
+    XOAUTH2_PROVIDER_TYPE_UNSPECIFIED = 0,
+    /**
+     * Microsoft 365 via Azure AD OAuth2 client credentials flow.
+     * Required config: xoauth2_tenant_id, xoauth2_client_id, xoauth2_client_secret.
+     *
+     * @generated from protobuf enum value: XOAUTH2_PROVIDER_TYPE_M365 = 1;
+     */
+    XOAUTH2_PROVIDER_TYPE_M365 = 1,
+    /**
+     * Google Workspace via service account JWT bearer token exchange.
+     * Required config: xoauth2_client_id (service account email),
+     *                  xoauth2_service_account_key (JSON key file content).
+     *
+     * @generated from protobuf enum value: XOAUTH2_PROVIDER_TYPE_GOOGLE = 2;
+     */
+    XOAUTH2_PROVIDER_TYPE_GOOGLE = 2
 }
 /**
  * @generated from protobuf enum sid.v1.admin.ImportConflictStrategy
@@ -1483,7 +1578,13 @@ class EmailSettings$Type extends MessageType<EmailSettings> {
             { no: 6, name: "encryption", kind: "enum", T: () => ["sid.v1.admin.SmtpEncryptionType", SmtpEncryptionType, "SMTP_ENCRYPTION_TYPE_"] },
             { no: 7, name: "auth_type", kind: "enum", T: () => ["sid.v1.admin.SmtpAuthType", SmtpAuthType, "SMTP_AUTH_TYPE_"] },
             { no: 8, name: "username", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 9, name: "password", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+            { no: 9, name: "password", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 10, name: "xoauth2_provider", kind: "enum", T: () => ["sid.v1.admin.XOAuth2ProviderType", XOAuth2ProviderType] },
+            { no: 11, name: "xoauth2_tenant_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 12, name: "xoauth2_client_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 13, name: "xoauth2_client_secret", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 14, name: "xoauth2_service_account_key", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 15, name: "xoauth2_token_endpoint", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value?: PartialMessage<EmailSettings>): EmailSettings {
@@ -1497,6 +1598,12 @@ class EmailSettings$Type extends MessageType<EmailSettings> {
         message.authType = 0;
         message.username = "";
         message.password = "";
+        message.xoauth2Provider = 0;
+        message.xoauth2TenantId = "";
+        message.xoauth2ClientId = "";
+        message.xoauth2ClientSecret = "";
+        message.xoauth2ServiceAccountKey = "";
+        message.xoauth2TokenEndpoint = "";
         if (value !== undefined)
             reflectionMergePartial<EmailSettings>(this, message, value);
         return message;
@@ -1533,6 +1640,24 @@ class EmailSettings$Type extends MessageType<EmailSettings> {
                 case /* string password */ 9:
                     message.password = reader.string();
                     break;
+                case /* sid.v1.admin.XOAuth2ProviderType xoauth2_provider */ 10:
+                    message.xoauth2Provider = reader.int32();
+                    break;
+                case /* string xoauth2_tenant_id */ 11:
+                    message.xoauth2TenantId = reader.string();
+                    break;
+                case /* string xoauth2_client_id */ 12:
+                    message.xoauth2ClientId = reader.string();
+                    break;
+                case /* string xoauth2_client_secret */ 13:
+                    message.xoauth2ClientSecret = reader.string();
+                    break;
+                case /* string xoauth2_service_account_key */ 14:
+                    message.xoauth2ServiceAccountKey = reader.string();
+                    break;
+                case /* string xoauth2_token_endpoint */ 15:
+                    message.xoauth2TokenEndpoint = reader.string();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -1572,6 +1697,24 @@ class EmailSettings$Type extends MessageType<EmailSettings> {
         /* string password = 9; */
         if (message.password !== "")
             writer.tag(9, WireType.LengthDelimited).string(message.password);
+        /* sid.v1.admin.XOAuth2ProviderType xoauth2_provider = 10; */
+        if (message.xoauth2Provider !== 0)
+            writer.tag(10, WireType.Varint).int32(message.xoauth2Provider);
+        /* string xoauth2_tenant_id = 11; */
+        if (message.xoauth2TenantId !== "")
+            writer.tag(11, WireType.LengthDelimited).string(message.xoauth2TenantId);
+        /* string xoauth2_client_id = 12; */
+        if (message.xoauth2ClientId !== "")
+            writer.tag(12, WireType.LengthDelimited).string(message.xoauth2ClientId);
+        /* string xoauth2_client_secret = 13; */
+        if (message.xoauth2ClientSecret !== "")
+            writer.tag(13, WireType.LengthDelimited).string(message.xoauth2ClientSecret);
+        /* string xoauth2_service_account_key = 14; */
+        if (message.xoauth2ServiceAccountKey !== "")
+            writer.tag(14, WireType.LengthDelimited).string(message.xoauth2ServiceAccountKey);
+        /* string xoauth2_token_endpoint = 15; */
+        if (message.xoauth2TokenEndpoint !== "")
+            writer.tag(15, WireType.LengthDelimited).string(message.xoauth2TokenEndpoint);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);

package/src/generated/sid/v1/authn/auth.ts

@@ -223,6 +223,10 @@ export interface OpaqueLoginFinishResponse {
 // Graceful degradation: if client lacks WASM capability, zkpp_proof is empty.
 // Server sets zkpp_verified=false and starts a 24h deferred verification window
 // (see SubmitDeferredZkProof RPC).
+// 
+// Reference: Prudnikov, D. (2026). "Zero-Knowledge Proof System for Password Policy
+// Verification in Asymmetric Password-Authenticated Key Exchange."
+// doi:10.5281/zenodo.19387561 — https://doi.org/10.5281/zenodo.19387561
 // ══════════════════════════════════════════════════════════════════════════
 
 /**

package/src/generated/sid/v1/identity/identity.ts

@@ -444,18 +444,34 @@ export interface Session {
 // Request/Response messages.
 
 /**
+ * Primary identifier — user provides exactly ONE at signup.
+ * Additional identifiers can be added later via profile settings.
+ * Username is a valuable identity — never auto-generated.
+ *
  * @generated from protobuf message sid.v1.identity.CreateProfileRequest
  */
 export interface CreateProfileRequest {
     /**
+     * Login handle (no '@', no '+'). Global ('alice') or federated ('alice#acme.corp').
+     *
      * @generated from protobuf field: optional string username = 1
      */
     username?: string;
     /**
+     * Email address. Requires OTP/magic-link verification after signup.
+     *
      * @generated from protobuf field: optional string email = 2
      */
     email?: string;
     /**
+     * Phone number in E.164 format (+380501234567). Requires OTP verification after signup.
+     *
+     * @generated from protobuf field: optional string phone = 17
+     */
+    phone?: string;
+    /**
+     * Structured name components (OIDC + SCIM compliant). All optional.
+     *
      * @generated from protobuf field: optional string given_name = 3
      */
     givenName?: string;
@@ -2515,6 +2531,7 @@ class CreateProfileRequest$Type extends MessageType<CreateProfileRequest> {
         super("sid.v1.identity.CreateProfileRequest", [
             { no: 1, name: "username", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
             { no: 2, name: "email", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 17, name: "phone", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
             { no: 3, name: "given_name", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
             { no: 13, name: "family_name", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
             { no: 14, name: "middle_name", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
@@ -2544,6 +2561,9 @@ class CreateProfileRequest$Type extends MessageType<CreateProfileRequest> {
                 case /* optional string email */ 2:
                     message.email = reader.string();
                     break;
+                case /* optional string phone */ 17:
+                    message.phone = reader.string();
+                    break;
                 case /* optional string given_name */ 3:
                     message.givenName = reader.string();
                     break;
@@ -2616,6 +2636,9 @@ class CreateProfileRequest$Type extends MessageType<CreateProfileRequest> {
         /* optional string honorific_suffix = 16; */
         if (message.honorificSuffix !== undefined)
             writer.tag(16, WireType.LengthDelimited).string(message.honorificSuffix);
+        /* optional string phone = 17; */
+        if (message.phone !== undefined)
+            writer.tag(17, WireType.LengthDelimited).string(message.phone);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);

package/src/generated/sid/v1/projects/projects.ts

@@ -127,6 +127,17 @@ export interface Application {
      * @generated from protobuf field: bool dynamically_registered = 17
      */
     dynamicallyRegistered: boolean;
+    /**
+     * Organization this client belongs to. Used as the binding grouping
+     * key for pairwise sub derivation (org-model.md §Binding Grouping):
+     *   sub = HMAC(salt, profile_id || org_id || "sid-pairwise-sub-v1")
+     * All clients within the same org produce the same BindingId for a
+     * given profile — domain changes don't affect sub stability.
+     * Empty = no org association (legacy CE clients before org model).
+     *
+     * @generated from protobuf field: optional string org_id = 18
+     */
+    orgId?: string;
 }
 /**
  * Initial Access Token constrains DCR registrations.
@@ -289,6 +300,13 @@ export interface CreateApplicationRequest {
      * @generated from protobuf field: repeated string grant_types = 6
      */
     grantTypes: string[];
+    /**
+     * Organization to associate this client with (for pairwise sub derivation).
+     * Empty = inherit from project's org (if any).
+     *
+     * @generated from protobuf field: optional string org_id = 7
+     */
+    orgId?: string;
 }
 /**
  * Returns client_secret in plaintext (only on creation, never stored).
@@ -829,7 +847,8 @@ class Application$Type extends MessageType<Application> {
             { no: 14, name: "contacts", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
             { no: 15, name: "client_id_issued_at", kind: "message", T: () => Timestamp },
             { no: 16, name: "client_secret_expires_at", kind: "message", T: () => Timestamp },
-            { no: 17, name: "dynamically_registered", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+            { no: 17, name: "dynamically_registered", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 18, name: "org_id", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value?: PartialMessage<Application>): Application {
@@ -907,6 +926,9 @@ class Application$Type extends MessageType<Application> {
                 case /* bool dynamically_registered */ 17:
                     message.dynamicallyRegistered = reader.bool();
                     break;
+                case /* optional string org_id */ 18:
+                    message.orgId = reader.string();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -970,6 +992,9 @@ class Application$Type extends MessageType<Application> {
         /* bool dynamically_registered = 17; */
         if (message.dynamicallyRegistered !== false)
             writer.tag(17, WireType.Varint).bool(message.dynamicallyRegistered);
+        /* optional string org_id = 18; */
+        if (message.orgId !== undefined)
+            writer.tag(18, WireType.LengthDelimited).string(message.orgId);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -1442,7 +1467,8 @@ class CreateApplicationRequest$Type extends MessageType<CreateApplicationRequest
             { no: 3, name: "type", kind: "enum", T: () => ["sid.v1.projects.ApplicationType", ApplicationType, "APPLICATION_TYPE_"] },
             { no: 4, name: "redirect_uris", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
             { no: 5, name: "allowed_scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
-            { no: 6, name: "grant_types", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ }
+            { no: 6, name: "grant_types", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "org_id", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value?: PartialMessage<CreateApplicationRequest>): CreateApplicationRequest {
@@ -1480,6 +1506,9 @@ class CreateApplicationRequest$Type extends MessageType<CreateApplicationRequest
                 case /* repeated string grant_types */ 6:
                     message.grantTypes.push(reader.string());
                     break;
+                case /* optional string org_id */ 7:
+                    message.orgId = reader.string();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -1510,6 +1539,9 @@ class CreateApplicationRequest$Type extends MessageType<CreateApplicationRequest
         /* repeated string grant_types = 6; */
         for (let i = 0; i < message.grantTypes.length; i++)
             writer.tag(6, WireType.LengthDelimited).string(message.grantTypes[i]);
+        /* optional string org_id = 7; */
+        if (message.orgId !== undefined)
+            writer.tag(7, WireType.LengthDelimited).string(message.orgId);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);