@structured-id/ui-core 0.1.5

package/src/generated/sid/v1/admin/keys.ts

@@ -0,0 +1,931 @@
+// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
+// @generated from protobuf file "sid/v1/admin/keys.proto" (package "sid.v1.admin", syntax proto3)
+// tslint:disable
+import { Empty } from "../../../google/protobuf/empty";
+import { ServiceType } from "@protobuf-ts/runtime-rpc";
+import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
+import type { IBinaryWriter } from "@protobuf-ts/runtime";
+import { WireType } from "@protobuf-ts/runtime";
+import type { BinaryReadOptions } from "@protobuf-ts/runtime";
+import type { IBinaryReader } from "@protobuf-ts/runtime";
+import { UnknownFieldHandler } from "@protobuf-ts/runtime";
+import type { PartialMessage } from "@protobuf-ts/runtime";
+import { reflectionMergePartial } from "@protobuf-ts/runtime";
+import { MessageType } from "@protobuf-ts/runtime";
+import { Timestamp } from "../../../google/protobuf/timestamp";
+// ── Messages ──
+
+/**
+ * @generated from protobuf message sid.v1.admin.SigningKey
+ */
+export interface SigningKey {
+    /**
+     * @generated from protobuf field: string kid = 1
+     */
+    kid: string;
+    /**
+     * @generated from protobuf field: string algorithm = 2
+     */
+    algorithm: string; // RS256, ES256, PS256, EdDSA
+    /**
+     * @generated from protobuf field: string key_type = 3
+     */
+    keyType: string; // RSA, EC, OKP
+    /**
+     * @generated from protobuf field: sid.v1.admin.KeyStatus status = 4
+     */
+    status: KeyStatus;
+    /**
+     * @generated from protobuf field: sid.v1.admin.KeyUse use = 5
+     */
+    use: KeyUse;
+    /**
+     * @generated from protobuf field: string provider_id = 6
+     */
+    providerId: string;
+    /**
+     * @generated from protobuf field: int32 key_size = 7
+     */
+    keySize: number; // Bits (RSA: 2048/4096, EC: 256/384)
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 8
+     */
+    createdAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.ListKeysResponse
+ */
+export interface ListKeysResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.admin.SigningKey keys = 1
+     */
+    keys: SigningKey[];
+}
+/**
+ * @generated from protobuf message sid.v1.admin.GetPublicKeyRequest
+ */
+export interface GetPublicKeyRequest {
+    /**
+     * @generated from protobuf field: string kid = 1
+     */
+    kid: string;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.PublicKeyResponse
+ */
+export interface PublicKeyResponse {
+    /**
+     * @generated from protobuf field: string kid = 1
+     */
+    kid: string;
+    /**
+     * @generated from protobuf field: string algorithm = 2
+     */
+    algorithm: string;
+    /**
+     * @generated from protobuf field: string public_key_pem = 3
+     */
+    publicKeyPem: string;
+    /**
+     * @generated from protobuf field: string certificate_pem = 4
+     */
+    certificatePem: string; // If available
+}
+/**
+ * @generated from protobuf message sid.v1.admin.KeyProvider
+ */
+export interface KeyProvider {
+    /**
+     * @generated from protobuf field: string id = 1
+     */
+    id: string;
+    /**
+     * @generated from protobuf field: string name = 2
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: sid.v1.admin.KeyProviderType provider_type = 3
+     */
+    providerType: KeyProviderType;
+    /**
+     * @generated from protobuf field: int32 priority = 4
+     */
+    priority: number;
+    /**
+     * @generated from protobuf field: bool active = 5
+     */
+    active: boolean;
+    /**
+     * Provider-specific config
+     *
+     * @generated from protobuf field: string algorithm = 6
+     */
+    algorithm: string; // For generated: RS256, ES256, etc.
+    /**
+     * @generated from protobuf field: int32 key_size = 7
+     */
+    keySize: number; // For generated: 2048, 4096
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 8
+     */
+    createdAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.ListKeyProvidersResponse
+ */
+export interface ListKeyProvidersResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.admin.KeyProvider providers = 1
+     */
+    providers: KeyProvider[];
+}
+/**
+ * @generated from protobuf message sid.v1.admin.AddKeyProviderRequest
+ */
+export interface AddKeyProviderRequest {
+    /**
+     * @generated from protobuf field: string name = 1
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: sid.v1.admin.KeyProviderType provider_type = 2
+     */
+    providerType: KeyProviderType;
+    /**
+     * @generated from protobuf field: int32 priority = 3
+     */
+    priority: number;
+    /**
+     * @generated from protobuf field: string algorithm = 4
+     */
+    algorithm: string;
+    /**
+     * @generated from protobuf field: int32 key_size = 5
+     */
+    keySize: number;
+    /**
+     * For JKS import
+     *
+     * @generated from protobuf field: bytes keystore_data = 6
+     */
+    keystoreData: Uint8Array;
+    /**
+     * @generated from protobuf field: string keystore_password = 7
+     */
+    keystorePassword: string;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.UpdateKeyProviderRequest
+ */
+export interface UpdateKeyProviderRequest {
+    /**
+     * @generated from protobuf field: string provider_id = 1
+     */
+    providerId: string;
+    /**
+     * @generated from protobuf field: optional string name = 2
+     */
+    name?: string;
+    /**
+     * @generated from protobuf field: optional int32 priority = 3
+     */
+    priority?: number;
+    /**
+     * @generated from protobuf field: optional bool active = 4
+     */
+    active?: boolean;
+    /**
+     * @generated from protobuf field: optional sid.v1.admin.KeyStatus key_status = 5
+     */
+    keyStatus?: KeyStatus; // Change status of keys from this provider
+}
+/**
+ * @generated from protobuf message sid.v1.admin.DeleteKeyProviderRequest
+ */
+export interface DeleteKeyProviderRequest {
+    /**
+     * @generated from protobuf field: string provider_id = 1
+     */
+    providerId: string;
+}
+// ── Enums ──
+
+/**
+ * @generated from protobuf enum sid.v1.admin.KeyStatus
+ */
+export enum KeyStatus {
+    /**
+     * @generated from protobuf enum value: KEY_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Currently used for signing new tokens
+     *
+     * @generated from protobuf enum value: KEY_STATUS_ACTIVE = 1;
+     */
+    ACTIVE = 1,
+    /**
+     * Not used for new sigs, existing tokens still valid
+     *
+     * @generated from protobuf enum value: KEY_STATUS_PASSIVE = 2;
+     */
+    PASSIVE = 2,
+    /**
+     * Ignored entirely
+     *
+     * @generated from protobuf enum value: KEY_STATUS_DISABLED = 3;
+     */
+    DISABLED = 3
+}
+/**
+ * @generated from protobuf enum sid.v1.admin.KeyUse
+ */
+export enum KeyUse {
+    /**
+     * @generated from protobuf enum value: KEY_USE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Signing
+     *
+     * @generated from protobuf enum value: KEY_USE_SIG = 1;
+     */
+    SIG = 1,
+    /**
+     * Encryption
+     *
+     * @generated from protobuf enum value: KEY_USE_ENC = 2;
+     */
+    ENC = 2
+}
+/**
+ * @generated from protobuf enum sid.v1.admin.KeyProviderType
+ */
+export enum KeyProviderType {
+    /**
+     * @generated from protobuf enum value: KEY_PROVIDER_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Auto-generated key pair
+     *
+     * @generated from protobuf enum value: KEY_PROVIDER_TYPE_GENERATED = 1;
+     */
+    GENERATED = 1,
+    /**
+     * Import from JKS
+     *
+     * @generated from protobuf enum value: KEY_PROVIDER_TYPE_JAVA_KEYSTORE = 2;
+     */
+    JAVA_KEYSTORE = 2,
+    /**
+     * Load from external secret store (EE)
+     *
+     * @generated from protobuf enum value: KEY_PROVIDER_TYPE_VAULT = 3;
+     */
+    VAULT = 3
+}
+// @generated message type with reflection information, may provide speed optimized methods
+class SigningKey$Type extends MessageType<SigningKey> {
+    constructor() {
+        super("sid.v1.admin.SigningKey", [
+            { no: 1, name: "kid", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "key_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "status", kind: "enum", T: () => ["sid.v1.admin.KeyStatus", KeyStatus, "KEY_STATUS_"] },
+            { no: 5, name: "use", kind: "enum", T: () => ["sid.v1.admin.KeyUse", KeyUse, "KEY_USE_"] },
+            { no: 6, name: "provider_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "key_size", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 8, name: "created_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<SigningKey>): SigningKey {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.kid = "";
+        message.algorithm = "";
+        message.keyType = "";
+        message.status = 0;
+        message.use = 0;
+        message.providerId = "";
+        message.keySize = 0;
+        if (value !== undefined)
+            reflectionMergePartial<SigningKey>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: SigningKey): SigningKey {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string kid */ 1:
+                    message.kid = reader.string();
+                    break;
+                case /* string algorithm */ 2:
+                    message.algorithm = reader.string();
+                    break;
+                case /* string key_type */ 3:
+                    message.keyType = reader.string();
+                    break;
+                case /* sid.v1.admin.KeyStatus status */ 4:
+                    message.status = reader.int32();
+                    break;
+                case /* sid.v1.admin.KeyUse use */ 5:
+                    message.use = reader.int32();
+                    break;
+                case /* string provider_id */ 6:
+                    message.providerId = reader.string();
+                    break;
+                case /* int32 key_size */ 7:
+                    message.keySize = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 8:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: SigningKey, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string kid = 1; */
+        if (message.kid !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.kid);
+        /* string algorithm = 2; */
+        if (message.algorithm !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.algorithm);
+        /* string key_type = 3; */
+        if (message.keyType !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.keyType);
+        /* sid.v1.admin.KeyStatus status = 4; */
+        if (message.status !== 0)
+            writer.tag(4, WireType.Varint).int32(message.status);
+        /* sid.v1.admin.KeyUse use = 5; */
+        if (message.use !== 0)
+            writer.tag(5, WireType.Varint).int32(message.use);
+        /* string provider_id = 6; */
+        if (message.providerId !== "")
+            writer.tag(6, WireType.LengthDelimited).string(message.providerId);
+        /* int32 key_size = 7; */
+        if (message.keySize !== 0)
+            writer.tag(7, WireType.Varint).int32(message.keySize);
+        /* google.protobuf.Timestamp created_at = 8; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(8, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.SigningKey
+ */
+export const SigningKey = new SigningKey$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListKeysResponse$Type extends MessageType<ListKeysResponse> {
+    constructor() {
+        super("sid.v1.admin.ListKeysResponse", [
+            { no: 1, name: "keys", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => SigningKey }
+        ]);
+    }
+    create(value?: PartialMessage<ListKeysResponse>): ListKeysResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.keys = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListKeysResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListKeysResponse): ListKeysResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.admin.SigningKey keys */ 1:
+                    message.keys.push(SigningKey.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListKeysResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.admin.SigningKey keys = 1; */
+        for (let i = 0; i < message.keys.length; i++)
+            SigningKey.internalBinaryWrite(message.keys[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.ListKeysResponse
+ */
+export const ListKeysResponse = new ListKeysResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GetPublicKeyRequest$Type extends MessageType<GetPublicKeyRequest> {
+    constructor() {
+        super("sid.v1.admin.GetPublicKeyRequest", [
+            { no: 1, name: "kid", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetPublicKeyRequest>): GetPublicKeyRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.kid = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetPublicKeyRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetPublicKeyRequest): GetPublicKeyRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string kid */ 1:
+                    message.kid = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetPublicKeyRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string kid = 1; */
+        if (message.kid !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.kid);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.GetPublicKeyRequest
+ */
+export const GetPublicKeyRequest = new GetPublicKeyRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class PublicKeyResponse$Type extends MessageType<PublicKeyResponse> {
+    constructor() {
+        super("sid.v1.admin.PublicKeyResponse", [
+            { no: 1, name: "kid", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "public_key_pem", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "certificate_pem", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<PublicKeyResponse>): PublicKeyResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.kid = "";
+        message.algorithm = "";
+        message.publicKeyPem = "";
+        message.certificatePem = "";
+        if (value !== undefined)
+            reflectionMergePartial<PublicKeyResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: PublicKeyResponse): PublicKeyResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string kid */ 1:
+                    message.kid = reader.string();
+                    break;
+                case /* string algorithm */ 2:
+                    message.algorithm = reader.string();
+                    break;
+                case /* string public_key_pem */ 3:
+                    message.publicKeyPem = reader.string();
+                    break;
+                case /* string certificate_pem */ 4:
+                    message.certificatePem = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: PublicKeyResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string kid = 1; */
+        if (message.kid !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.kid);
+        /* string algorithm = 2; */
+        if (message.algorithm !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.algorithm);
+        /* string public_key_pem = 3; */
+        if (message.publicKeyPem !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.publicKeyPem);
+        /* string certificate_pem = 4; */
+        if (message.certificatePem !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.certificatePem);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.PublicKeyResponse
+ */
+export const PublicKeyResponse = new PublicKeyResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class KeyProvider$Type extends MessageType<KeyProvider> {
+    constructor() {
+        super("sid.v1.admin.KeyProvider", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "provider_type", kind: "enum", T: () => ["sid.v1.admin.KeyProviderType", KeyProviderType, "KEY_PROVIDER_TYPE_"] },
+            { no: 4, name: "priority", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 5, name: "active", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 6, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "key_size", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 8, name: "created_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<KeyProvider>): KeyProvider {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.name = "";
+        message.providerType = 0;
+        message.priority = 0;
+        message.active = false;
+        message.algorithm = "";
+        message.keySize = 0;
+        if (value !== undefined)
+            reflectionMergePartial<KeyProvider>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: KeyProvider): KeyProvider {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* sid.v1.admin.KeyProviderType provider_type */ 3:
+                    message.providerType = reader.int32();
+                    break;
+                case /* int32 priority */ 4:
+                    message.priority = reader.int32();
+                    break;
+                case /* bool active */ 5:
+                    message.active = reader.bool();
+                    break;
+                case /* string algorithm */ 6:
+                    message.algorithm = reader.string();
+                    break;
+                case /* int32 key_size */ 7:
+                    message.keySize = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 8:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: KeyProvider, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* string name = 2; */
+        if (message.name !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* sid.v1.admin.KeyProviderType provider_type = 3; */
+        if (message.providerType !== 0)
+            writer.tag(3, WireType.Varint).int32(message.providerType);
+        /* int32 priority = 4; */
+        if (message.priority !== 0)
+            writer.tag(4, WireType.Varint).int32(message.priority);
+        /* bool active = 5; */
+        if (message.active !== false)
+            writer.tag(5, WireType.Varint).bool(message.active);
+        /* string algorithm = 6; */
+        if (message.algorithm !== "")
+            writer.tag(6, WireType.LengthDelimited).string(message.algorithm);
+        /* int32 key_size = 7; */
+        if (message.keySize !== 0)
+            writer.tag(7, WireType.Varint).int32(message.keySize);
+        /* google.protobuf.Timestamp created_at = 8; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(8, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.KeyProvider
+ */
+export const KeyProvider = new KeyProvider$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListKeyProvidersResponse$Type extends MessageType<ListKeyProvidersResponse> {
+    constructor() {
+        super("sid.v1.admin.ListKeyProvidersResponse", [
+            { no: 1, name: "providers", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => KeyProvider }
+        ]);
+    }
+    create(value?: PartialMessage<ListKeyProvidersResponse>): ListKeyProvidersResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providers = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListKeyProvidersResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListKeyProvidersResponse): ListKeyProvidersResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.admin.KeyProvider providers */ 1:
+                    message.providers.push(KeyProvider.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListKeyProvidersResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.admin.KeyProvider providers = 1; */
+        for (let i = 0; i < message.providers.length; i++)
+            KeyProvider.internalBinaryWrite(message.providers[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.ListKeyProvidersResponse
+ */
+export const ListKeyProvidersResponse = new ListKeyProvidersResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AddKeyProviderRequest$Type extends MessageType<AddKeyProviderRequest> {
+    constructor() {
+        super("sid.v1.admin.AddKeyProviderRequest", [
+            { no: 1, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "provider_type", kind: "enum", T: () => ["sid.v1.admin.KeyProviderType", KeyProviderType, "KEY_PROVIDER_TYPE_"] },
+            { no: 3, name: "priority", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 4, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "key_size", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 6, name: "keystore_data", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
+            { no: 7, name: "keystore_password", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AddKeyProviderRequest>): AddKeyProviderRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.name = "";
+        message.providerType = 0;
+        message.priority = 0;
+        message.algorithm = "";
+        message.keySize = 0;
+        message.keystoreData = new Uint8Array(0);
+        message.keystorePassword = "";
+        if (value !== undefined)
+            reflectionMergePartial<AddKeyProviderRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AddKeyProviderRequest): AddKeyProviderRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string name */ 1:
+                    message.name = reader.string();
+                    break;
+                case /* sid.v1.admin.KeyProviderType provider_type */ 2:
+                    message.providerType = reader.int32();
+                    break;
+                case /* int32 priority */ 3:
+                    message.priority = reader.int32();
+                    break;
+                case /* string algorithm */ 4:
+                    message.algorithm = reader.string();
+                    break;
+                case /* int32 key_size */ 5:
+                    message.keySize = reader.int32();
+                    break;
+                case /* bytes keystore_data */ 6:
+                    message.keystoreData = reader.bytes();
+                    break;
+                case /* string keystore_password */ 7:
+                    message.keystorePassword = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AddKeyProviderRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string name = 1; */
+        if (message.name !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.name);
+        /* sid.v1.admin.KeyProviderType provider_type = 2; */
+        if (message.providerType !== 0)
+            writer.tag(2, WireType.Varint).int32(message.providerType);
+        /* int32 priority = 3; */
+        if (message.priority !== 0)
+            writer.tag(3, WireType.Varint).int32(message.priority);
+        /* string algorithm = 4; */
+        if (message.algorithm !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.algorithm);
+        /* int32 key_size = 5; */
+        if (message.keySize !== 0)
+            writer.tag(5, WireType.Varint).int32(message.keySize);
+        /* bytes keystore_data = 6; */
+        if (message.keystoreData.length)
+            writer.tag(6, WireType.LengthDelimited).bytes(message.keystoreData);
+        /* string keystore_password = 7; */
+        if (message.keystorePassword !== "")
+            writer.tag(7, WireType.LengthDelimited).string(message.keystorePassword);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.AddKeyProviderRequest
+ */
+export const AddKeyProviderRequest = new AddKeyProviderRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpdateKeyProviderRequest$Type extends MessageType<UpdateKeyProviderRequest> {
+    constructor() {
+        super("sid.v1.admin.UpdateKeyProviderRequest", [
+            { no: 1, name: "provider_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "priority", kind: "scalar", opt: true, T: 5 /*ScalarType.INT32*/ },
+            { no: 4, name: "active", kind: "scalar", opt: true, T: 8 /*ScalarType.BOOL*/ },
+            { no: 5, name: "key_status", kind: "enum", opt: true, T: () => ["sid.v1.admin.KeyStatus", KeyStatus, "KEY_STATUS_"] }
+        ]);
+    }
+    create(value?: PartialMessage<UpdateKeyProviderRequest>): UpdateKeyProviderRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providerId = "";
+        if (value !== undefined)
+            reflectionMergePartial<UpdateKeyProviderRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpdateKeyProviderRequest): UpdateKeyProviderRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string provider_id */ 1:
+                    message.providerId = reader.string();
+                    break;
+                case /* optional string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* optional int32 priority */ 3:
+                    message.priority = reader.int32();
+                    break;
+                case /* optional bool active */ 4:
+                    message.active = reader.bool();
+                    break;
+                case /* optional sid.v1.admin.KeyStatus key_status */ 5:
+                    message.keyStatus = reader.int32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpdateKeyProviderRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string provider_id = 1; */
+        if (message.providerId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.providerId);
+        /* optional string name = 2; */
+        if (message.name !== undefined)
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* optional int32 priority = 3; */
+        if (message.priority !== undefined)
+            writer.tag(3, WireType.Varint).int32(message.priority);
+        /* optional bool active = 4; */
+        if (message.active !== undefined)
+            writer.tag(4, WireType.Varint).bool(message.active);
+        /* optional sid.v1.admin.KeyStatus key_status = 5; */
+        if (message.keyStatus !== undefined)
+            writer.tag(5, WireType.Varint).int32(message.keyStatus);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.UpdateKeyProviderRequest
+ */
+export const UpdateKeyProviderRequest = new UpdateKeyProviderRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DeleteKeyProviderRequest$Type extends MessageType<DeleteKeyProviderRequest> {
+    constructor() {
+        super("sid.v1.admin.DeleteKeyProviderRequest", [
+            { no: 1, name: "provider_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<DeleteKeyProviderRequest>): DeleteKeyProviderRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.providerId = "";
+        if (value !== undefined)
+            reflectionMergePartial<DeleteKeyProviderRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeleteKeyProviderRequest): DeleteKeyProviderRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string provider_id */ 1:
+                    message.providerId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DeleteKeyProviderRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string provider_id = 1; */
+        if (message.providerId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.providerId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.DeleteKeyProviderRequest
+ */
+export const DeleteKeyProviderRequest = new DeleteKeyProviderRequest$Type();
+/**
+ * @generated ServiceType for protobuf service sid.v1.admin.KeyService
+ */
+export const KeyService = new ServiceType("sid.v1.admin.KeyService", [
+    { name: "ListKeys", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/keys" } }, I: Empty, O: ListKeysResponse },
+    { name: "GetPublicKey", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/keys/{kid}/public" } }, I: GetPublicKeyRequest, O: PublicKeyResponse },
+    { name: "ListKeyProviders", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/key-providers" } }, I: Empty, O: ListKeyProvidersResponse },
+    { name: "AddKeyProvider", options: { "google.api.http": { post: "/v1/admin/key-providers", body: "*" } }, I: AddKeyProviderRequest, O: KeyProvider },
+    { name: "UpdateKeyProvider", idempotency: "IDEMPOTENT", options: { "google.api.http": { patch: "/v1/admin/key-providers/{provider_id}", body: "*" } }, I: UpdateKeyProviderRequest, O: KeyProvider },
+    { name: "DeleteKeyProvider", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/admin/key-providers/{provider_id}" } }, I: DeleteKeyProviderRequest, O: Empty }
+]);