@structured-id/ui-core 0.1.5

package/src/generated/sid/v1/authn/flows.ts

@@ -0,0 +1,3217 @@
+// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
+// @generated from protobuf file "sid/v1/authn/flows.proto" (package "sid.v1.authn", syntax proto3)
+// tslint:disable
+import { Empty } from "../../../google/protobuf/empty";
+import { ServiceType } from "@protobuf-ts/runtime-rpc";
+import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
+import type { IBinaryWriter } from "@protobuf-ts/runtime";
+import { WireType } from "@protobuf-ts/runtime";
+import type { BinaryReadOptions } from "@protobuf-ts/runtime";
+import type { IBinaryReader } from "@protobuf-ts/runtime";
+import { UnknownFieldHandler } from "@protobuf-ts/runtime";
+import type { PartialMessage } from "@protobuf-ts/runtime";
+import { reflectionMergePartial } from "@protobuf-ts/runtime";
+import { MessageType } from "@protobuf-ts/runtime";
+import { Struct } from "../../../google/protobuf/struct";
+import { Timestamp } from "../../../google/protobuf/timestamp";
+// ══════════════════════════════════════════════════════════════════════════
+// Flow messages
+// ══════════════════════════════════════════════════════════════════════════
+
+/**
+ * @generated from protobuf message sid.v1.authn.Flow
+ */
+export interface Flow {
+    /**
+     * @generated from protobuf field: string id = 1
+     */
+    id: string;
+    /**
+     * @generated from protobuf field: string name = 2
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: string description = 3
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: sid.v1.authn.FlowPurpose purpose = 4
+     */
+    purpose: FlowPurpose;
+    /**
+     * @generated from protobuf field: bool built_in = 5
+     */
+    builtIn: boolean; // True = system default, cannot delete
+    /**
+     * @generated from protobuf field: bool bound = 6
+     */
+    bound: boolean; // True = currently active for its purpose
+    /**
+     * @generated from protobuf field: int32 step_count = 7
+     */
+    stepCount: number;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 8
+     */
+    createdAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp updated_at = 9
+     */
+    updatedAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ListFlowsResponse
+ */
+export interface ListFlowsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.authn.Flow flows = 1
+     */
+    flows: Flow[];
+}
+/**
+ * @generated from protobuf message sid.v1.authn.GetFlowRequest
+ */
+export interface GetFlowRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.CreateFlowRequest
+ */
+export interface CreateFlowRequest {
+    /**
+     * @generated from protobuf field: string name = 1
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: string description = 2
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: sid.v1.authn.FlowPurpose purpose = 3
+     */
+    purpose: FlowPurpose;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.UpdateFlowRequest
+ */
+export interface UpdateFlowRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+    /**
+     * @generated from protobuf field: optional string name = 2
+     */
+    name?: string;
+    /**
+     * @generated from protobuf field: optional string description = 3
+     */
+    description?: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.DeleteFlowRequest
+ */
+export interface DeleteFlowRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.DuplicateFlowRequest
+ */
+export interface DuplicateFlowRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+    /**
+     * @generated from protobuf field: string new_name = 2
+     */
+    newName: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.BindFlowRequest
+ */
+export interface BindFlowRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+    /**
+     * @generated from protobuf field: sid.v1.authn.FlowPurpose purpose = 2
+     */
+    purpose: FlowPurpose;
+}
+// ── Blueprint ──
+
+/**
+ * @generated from protobuf message sid.v1.authn.ExportBlueprintRequest
+ */
+export interface ExportBlueprintRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.BlueprintResponse
+ */
+export interface BlueprintResponse {
+    /**
+     * @generated from protobuf field: string yaml = 1
+     */
+    yaml: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ImportBlueprintRequest
+ */
+export interface ImportBlueprintRequest {
+    /**
+     * @generated from protobuf field: string yaml = 1
+     */
+    yaml: string;
+    /**
+     * @generated from protobuf field: string name = 2
+     */
+    name: string;
+}
+// ══════════════════════════════════════════════════════════════════════════
+// Step Binding messages
+// ══════════════════════════════════════════════════════════════════════════
+
+/**
+ * @generated from protobuf message sid.v1.authn.StepBinding
+ */
+export interface StepBinding {
+    /**
+     * @generated from protobuf field: string id = 1
+     */
+    id: string;
+    /**
+     * @generated from protobuf field: string flow_id = 2
+     */
+    flowId: string;
+    /**
+     * @generated from protobuf field: string step_type = 3
+     */
+    stepType: string; // Reference to step type
+    /**
+     * @generated from protobuf field: string display_name = 4
+     */
+    displayName: string;
+    /**
+     * @generated from protobuf field: sid.v1.authn.StepRequirement requirement = 5
+     */
+    requirement: StepRequirement;
+    /**
+     * @generated from protobuf field: int32 order = 6
+     */
+    order: number;
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 7
+     */
+    config?: Struct; // Step-specific configuration
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ListStepBindingsRequest
+ */
+export interface ListStepBindingsRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ListStepBindingsResponse
+ */
+export interface ListStepBindingsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.authn.StepBinding bindings = 1
+     */
+    bindings: StepBinding[];
+}
+/**
+ * @generated from protobuf message sid.v1.authn.AddStepBindingRequest
+ */
+export interface AddStepBindingRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+    /**
+     * @generated from protobuf field: string step_type = 2
+     */
+    stepType: string;
+    /**
+     * @generated from protobuf field: string display_name = 3
+     */
+    displayName: string;
+    /**
+     * @generated from protobuf field: sid.v1.authn.StepRequirement requirement = 4
+     */
+    requirement: StepRequirement;
+    /**
+     * @generated from protobuf field: int32 order = 5
+     */
+    order: number;
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 6
+     */
+    config?: Struct;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.UpdateStepBindingRequest
+ */
+export interface UpdateStepBindingRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+    /**
+     * @generated from protobuf field: string binding_id = 2
+     */
+    bindingId: string;
+    /**
+     * @generated from protobuf field: optional string display_name = 3
+     */
+    displayName?: string;
+    /**
+     * @generated from protobuf field: optional sid.v1.authn.StepRequirement requirement = 4
+     */
+    requirement?: StepRequirement;
+    /**
+     * @generated from protobuf field: optional int32 order = 5
+     */
+    order?: number;
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 6
+     */
+    config?: Struct;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.RemoveStepBindingRequest
+ */
+export interface RemoveStepBindingRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+    /**
+     * @generated from protobuf field: string binding_id = 2
+     */
+    bindingId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ReorderStepBindingsRequest
+ */
+export interface ReorderStepBindingsRequest {
+    /**
+     * @generated from protobuf field: string flow_id = 1
+     */
+    flowId: string;
+    /**
+     * @generated from protobuf field: repeated string binding_ids = 2
+     */
+    bindingIds: string[]; // Ordered list of IDs
+}
+// ══════════════════════════════════════════════════════════════════════════
+// Step Type messages
+// ══════════════════════════════════════════════════════════════════════════
+
+/**
+ * @generated from protobuf message sid.v1.authn.StepType
+ */
+export interface StepType {
+    /**
+     * @generated from protobuf field: string type = 1
+     */
+    type: string; // "username-password", "otp", "webauthn", etc.
+    /**
+     * @generated from protobuf field: string display_name = 2
+     */
+    displayName: string;
+    /**
+     * @generated from protobuf field: string description = 3
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: string category = 4
+     */
+    category: string; // "authenticator", "identity", "verification"
+    /**
+     * @generated from protobuf field: string tier = 5
+     */
+    tier: string; // "ce" or "ee"
+    /**
+     * @generated from protobuf field: bool configurable = 6
+     */
+    configurable: boolean;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ListStepTypesResponse
+ */
+export interface ListStepTypesResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.authn.StepType types = 1
+     */
+    types: StepType[];
+}
+/**
+ * @generated from protobuf message sid.v1.authn.StepConfig
+ */
+export interface StepConfig {
+    /**
+     * @generated from protobuf field: string step_type = 1
+     */
+    stepType: string;
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 2
+     */
+    config?: Struct;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.GetStepConfigRequest
+ */
+export interface GetStepConfigRequest {
+    /**
+     * @generated from protobuf field: string step_type = 1
+     */
+    stepType: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.UpdateStepConfigRequest
+ */
+export interface UpdateStepConfigRequest {
+    /**
+     * @generated from protobuf field: string step_type = 1
+     */
+    stepType: string;
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 2
+     */
+    config?: Struct;
+}
+// ══════════════════════════════════════════════════════════════════════════
+// Action messages
+// ══════════════════════════════════════════════════════════════════════════
+
+/**
+ * @generated from protobuf message sid.v1.authn.Action
+ */
+export interface Action {
+    /**
+     * @generated from protobuf field: string id = 1
+     */
+    id: string;
+    /**
+     * @generated from protobuf field: string name = 2
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: string description = 3
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: sid.v1.authn.ActionType type = 4
+     */
+    type: ActionType;
+    /**
+     * @generated from protobuf field: sid.v1.authn.ActionHookPoint hook_point = 5
+     */
+    hookPoint: ActionHookPoint;
+    /**
+     * @generated from protobuf field: bool enabled = 6
+     */
+    enabled: boolean;
+    /**
+     * @generated from protobuf field: int32 priority = 7
+     */
+    priority: number;
+    /**
+     * Type-specific config
+     *
+     * @generated from protobuf field: string webhook_url = 8
+     */
+    webhookUrl: string; // For WEBHOOK type
+    /**
+     * @generated from protobuf field: string webhook_secret = 9
+     */
+    webhookSecret: string; // Write-only
+    /**
+     * @generated from protobuf field: int32 webhook_timeout_ms = 10
+     */
+    webhookTimeoutMs: number;
+    /**
+     * @generated from protobuf field: repeated string event_filters = 11
+     */
+    eventFilters: string[]; // Filter which events trigger action
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 12
+     */
+    config?: Struct; // Additional type-specific config
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 13
+     */
+    createdAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp updated_at = 14
+     */
+    updatedAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ListActionsResponse
+ */
+export interface ListActionsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.authn.Action actions = 1
+     */
+    actions: Action[];
+}
+/**
+ * @generated from protobuf message sid.v1.authn.GetActionRequest
+ */
+export interface GetActionRequest {
+    /**
+     * @generated from protobuf field: string action_id = 1
+     */
+    actionId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.CreateActionRequest
+ */
+export interface CreateActionRequest {
+    /**
+     * @generated from protobuf field: string name = 1
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: string description = 2
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: sid.v1.authn.ActionType type = 3
+     */
+    type: ActionType;
+    /**
+     * @generated from protobuf field: sid.v1.authn.ActionHookPoint hook_point = 4
+     */
+    hookPoint: ActionHookPoint;
+    /**
+     * @generated from protobuf field: bool enabled = 5
+     */
+    enabled: boolean;
+    /**
+     * @generated from protobuf field: int32 priority = 6
+     */
+    priority: number;
+    /**
+     * @generated from protobuf field: string webhook_url = 7
+     */
+    webhookUrl: string;
+    /**
+     * @generated from protobuf field: string webhook_secret = 8
+     */
+    webhookSecret: string;
+    /**
+     * @generated from protobuf field: int32 webhook_timeout_ms = 9
+     */
+    webhookTimeoutMs: number;
+    /**
+     * @generated from protobuf field: repeated string event_filters = 10
+     */
+    eventFilters: string[];
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 11
+     */
+    config?: Struct;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.UpdateActionRequest
+ */
+export interface UpdateActionRequest {
+    /**
+     * @generated from protobuf field: string action_id = 1
+     */
+    actionId: string;
+    /**
+     * @generated from protobuf field: optional string name = 2
+     */
+    name?: string;
+    /**
+     * @generated from protobuf field: optional string description = 3
+     */
+    description?: string;
+    /**
+     * @generated from protobuf field: optional bool enabled = 4
+     */
+    enabled?: boolean;
+    /**
+     * @generated from protobuf field: optional int32 priority = 5
+     */
+    priority?: number;
+    /**
+     * @generated from protobuf field: optional string webhook_url = 6
+     */
+    webhookUrl?: string;
+    /**
+     * @generated from protobuf field: optional string webhook_secret = 7
+     */
+    webhookSecret?: string;
+    /**
+     * @generated from protobuf field: optional int32 webhook_timeout_ms = 8
+     */
+    webhookTimeoutMs?: number;
+    /**
+     * @generated from protobuf field: repeated string event_filters = 9
+     */
+    eventFilters: string[];
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 10
+     */
+    config?: Struct;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.DeleteActionRequest
+ */
+export interface DeleteActionRequest {
+    /**
+     * @generated from protobuf field: string action_id = 1
+     */
+    actionId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.TestActionRequest
+ */
+export interface TestActionRequest {
+    /**
+     * @generated from protobuf field: string action_id = 1
+     */
+    actionId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.TestActionResponse
+ */
+export interface TestActionResponse {
+    /**
+     * @generated from protobuf field: bool success = 1
+     */
+    success: boolean;
+    /**
+     * @generated from protobuf field: int32 status_code = 2
+     */
+    statusCode: number;
+    /**
+     * @generated from protobuf field: string response_body = 3
+     */
+    responseBody: string;
+    /**
+     * @generated from protobuf field: int32 latency_ms = 4
+     */
+    latencyMs: number;
+    /**
+     * @generated from protobuf field: string error = 5
+     */
+    error: string;
+}
+// ── Built-in Actions ──
+
+/**
+ * @generated from protobuf message sid.v1.authn.BuiltinAction
+ */
+export interface BuiltinAction {
+    /**
+     * @generated from protobuf field: string action_type = 1
+     */
+    actionType: string; // "log_event", "notify_admin", etc.
+    /**
+     * @generated from protobuf field: string display_name = 2
+     */
+    displayName: string;
+    /**
+     * @generated from protobuf field: string description = 3
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: bool enabled = 4
+     */
+    enabled: boolean;
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 5
+     */
+    config?: Struct;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ListBuiltinActionsResponse
+ */
+export interface ListBuiltinActionsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.authn.BuiltinAction actions = 1
+     */
+    actions: BuiltinAction[];
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ConfigureBuiltinActionRequest
+ */
+export interface ConfigureBuiltinActionRequest {
+    /**
+     * @generated from protobuf field: string action_type = 1
+     */
+    actionType: string;
+    /**
+     * @generated from protobuf field: bool enabled = 2
+     */
+    enabled: boolean;
+    /**
+     * @generated from protobuf field: google.protobuf.Struct config = 3
+     */
+    config?: Struct;
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ListEventTypesResponse
+ */
+export interface ListEventTypesResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.authn.ActionEventType event_types = 1
+     */
+    eventTypes: ActionEventType[];
+}
+/**
+ * @generated from protobuf message sid.v1.authn.ActionEventType
+ */
+export interface ActionEventType {
+    /**
+     * @generated from protobuf field: string type = 1
+     */
+    type: string; // "login.success", "login.failure", etc.
+    /**
+     * @generated from protobuf field: string display_name = 2
+     */
+    displayName: string;
+    /**
+     * @generated from protobuf field: string category = 3
+     */
+    category: string; // "authentication", "account", "admin"
+}
+// ══════════════════════════════════════════════════════════════════════════
+// Flow types
+// ══════════════════════════════════════════════════════════════════════════
+
+/**
+ * @generated from protobuf enum sid.v1.authn.FlowPurpose
+ */
+export enum FlowPurpose {
+    /**
+     * @generated from protobuf enum value: FLOW_PURPOSE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: FLOW_PURPOSE_LOGIN = 1;
+     */
+    LOGIN = 1,
+    /**
+     * @generated from protobuf enum value: FLOW_PURPOSE_REGISTRATION = 2;
+     */
+    REGISTRATION = 2,
+    /**
+     * @generated from protobuf enum value: FLOW_PURPOSE_RESET_CREDENTIALS = 3;
+     */
+    RESET_CREDENTIALS = 3,
+    /**
+     * @generated from protobuf enum value: FLOW_PURPOSE_FIRST_BROKER_LOGIN = 4;
+     */
+    FIRST_BROKER_LOGIN = 4,
+    /**
+     * @generated from protobuf enum value: FLOW_PURPOSE_POST_BROKER_LOGIN = 5;
+     */
+    POST_BROKER_LOGIN = 5,
+    /**
+     * @generated from protobuf enum value: FLOW_PURPOSE_DOCKER_AUTH = 6;
+     */
+    DOCKER_AUTH = 6
+}
+/**
+ * @generated from protobuf enum sid.v1.authn.StepRequirement
+ */
+export enum StepRequirement {
+    /**
+     * @generated from protobuf enum value: STEP_REQUIREMENT_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: STEP_REQUIREMENT_REQUIRED = 1;
+     */
+    REQUIRED = 1,
+    /**
+     * @generated from protobuf enum value: STEP_REQUIREMENT_ALTERNATIVE = 2;
+     */
+    ALTERNATIVE = 2,
+    /**
+     * @generated from protobuf enum value: STEP_REQUIREMENT_OPTIONAL = 3;
+     */
+    OPTIONAL = 3,
+    /**
+     * @generated from protobuf enum value: STEP_REQUIREMENT_CONDITIONAL = 4;
+     */
+    CONDITIONAL = 4,
+    /**
+     * @generated from protobuf enum value: STEP_REQUIREMENT_DISABLED = 5;
+     */
+    DISABLED = 5
+}
+/**
+ * @generated from protobuf enum sid.v1.authn.ActionHookPoint
+ */
+export enum ActionHookPoint {
+    /**
+     * @generated from protobuf enum value: ACTION_HOOK_POINT_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: ACTION_HOOK_POINT_PRE_AUTHENTICATION = 1;
+     */
+    PRE_AUTHENTICATION = 1,
+    /**
+     * @generated from protobuf enum value: ACTION_HOOK_POINT_POST_AUTHENTICATION = 2;
+     */
+    POST_AUTHENTICATION = 2,
+    /**
+     * @generated from protobuf enum value: ACTION_HOOK_POINT_POST_MFA = 3;
+     */
+    POST_MFA = 3,
+    /**
+     * @generated from protobuf enum value: ACTION_HOOK_POINT_PRE_TOKEN_CREATION = 4;
+     */
+    PRE_TOKEN_CREATION = 4,
+    /**
+     * @generated from protobuf enum value: ACTION_HOOK_POINT_POST_LOGIN = 5;
+     */
+    POST_LOGIN = 5,
+    /**
+     * @generated from protobuf enum value: ACTION_HOOK_POINT_POST_REGISTRATION = 6;
+     */
+    POST_REGISTRATION = 6,
+    /**
+     * @generated from protobuf enum value: ACTION_HOOK_POINT_PRE_CONSENT = 7;
+     */
+    PRE_CONSENT = 7
+}
+/**
+ * @generated from protobuf enum sid.v1.authn.ActionType
+ */
+export enum ActionType {
+    /**
+     * @generated from protobuf enum value: ACTION_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: ACTION_TYPE_WEBHOOK = 1;
+     */
+    WEBHOOK = 1,
+    /**
+     * @generated from protobuf enum value: ACTION_TYPE_LOG = 2;
+     */
+    LOG = 2,
+    /**
+     * @generated from protobuf enum value: ACTION_TYPE_ASSIGN_ROLE = 3;
+     */
+    ASSIGN_ROLE = 3,
+    /**
+     * @generated from protobuf enum value: ACTION_TYPE_ADD_CLAIM = 4;
+     */
+    ADD_CLAIM = 4,
+    /**
+     * @generated from protobuf enum value: ACTION_TYPE_SEND_EMAIL = 5;
+     */
+    SEND_EMAIL = 5,
+    /**
+     * @generated from protobuf enum value: ACTION_TYPE_DENY = 6;
+     */
+    DENY = 6,
+    /**
+     * @generated from protobuf enum value: ACTION_TYPE_REDIRECT = 7;
+     */
+    REDIRECT = 7
+}
+// @generated message type with reflection information, may provide speed optimized methods
+class Flow$Type extends MessageType<Flow> {
+    constructor() {
+        super("sid.v1.authn.Flow", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "purpose", kind: "enum", T: () => ["sid.v1.authn.FlowPurpose", FlowPurpose, "FLOW_PURPOSE_"] },
+            { no: 5, name: "built_in", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 6, name: "bound", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 7, name: "step_count", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 8, name: "created_at", kind: "message", T: () => Timestamp },
+            { no: 9, name: "updated_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<Flow>): Flow {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.name = "";
+        message.description = "";
+        message.purpose = 0;
+        message.builtIn = false;
+        message.bound = false;
+        message.stepCount = 0;
+        if (value !== undefined)
+            reflectionMergePartial<Flow>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: Flow): Flow {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* string description */ 3:
+                    message.description = reader.string();
+                    break;
+                case /* sid.v1.authn.FlowPurpose purpose */ 4:
+                    message.purpose = reader.int32();
+                    break;
+                case /* bool built_in */ 5:
+                    message.builtIn = reader.bool();
+                    break;
+                case /* bool bound */ 6:
+                    message.bound = reader.bool();
+                    break;
+                case /* int32 step_count */ 7:
+                    message.stepCount = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 8:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                case /* google.protobuf.Timestamp updated_at */ 9:
+                    message.updatedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.updatedAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: Flow, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* string name = 2; */
+        if (message.name !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* string description = 3; */
+        if (message.description !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.description);
+        /* sid.v1.authn.FlowPurpose purpose = 4; */
+        if (message.purpose !== 0)
+            writer.tag(4, WireType.Varint).int32(message.purpose);
+        /* bool built_in = 5; */
+        if (message.builtIn !== false)
+            writer.tag(5, WireType.Varint).bool(message.builtIn);
+        /* bool bound = 6; */
+        if (message.bound !== false)
+            writer.tag(6, WireType.Varint).bool(message.bound);
+        /* int32 step_count = 7; */
+        if (message.stepCount !== 0)
+            writer.tag(7, WireType.Varint).int32(message.stepCount);
+        /* google.protobuf.Timestamp created_at = 8; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(8, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp updated_at = 9; */
+        if (message.updatedAt)
+            Timestamp.internalBinaryWrite(message.updatedAt, writer.tag(9, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.Flow
+ */
+export const Flow = new Flow$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListFlowsResponse$Type extends MessageType<ListFlowsResponse> {
+    constructor() {
+        super("sid.v1.authn.ListFlowsResponse", [
+            { no: 1, name: "flows", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => Flow }
+        ]);
+    }
+    create(value?: PartialMessage<ListFlowsResponse>): ListFlowsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flows = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListFlowsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListFlowsResponse): ListFlowsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.authn.Flow flows */ 1:
+                    message.flows.push(Flow.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListFlowsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.authn.Flow flows = 1; */
+        for (let i = 0; i < message.flows.length; i++)
+            Flow.internalBinaryWrite(message.flows[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ListFlowsResponse
+ */
+export const ListFlowsResponse = new ListFlowsResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GetFlowRequest$Type extends MessageType<GetFlowRequest> {
+    constructor() {
+        super("sid.v1.authn.GetFlowRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetFlowRequest>): GetFlowRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetFlowRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetFlowRequest): GetFlowRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetFlowRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.GetFlowRequest
+ */
+export const GetFlowRequest = new GetFlowRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class CreateFlowRequest$Type extends MessageType<CreateFlowRequest> {
+    constructor() {
+        super("sid.v1.authn.CreateFlowRequest", [
+            { no: 1, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "purpose", kind: "enum", T: () => ["sid.v1.authn.FlowPurpose", FlowPurpose, "FLOW_PURPOSE_"] }
+        ]);
+    }
+    create(value?: PartialMessage<CreateFlowRequest>): CreateFlowRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.name = "";
+        message.description = "";
+        message.purpose = 0;
+        if (value !== undefined)
+            reflectionMergePartial<CreateFlowRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CreateFlowRequest): CreateFlowRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string name */ 1:
+                    message.name = reader.string();
+                    break;
+                case /* string description */ 2:
+                    message.description = reader.string();
+                    break;
+                case /* sid.v1.authn.FlowPurpose purpose */ 3:
+                    message.purpose = reader.int32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: CreateFlowRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string name = 1; */
+        if (message.name !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.name);
+        /* string description = 2; */
+        if (message.description !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.description);
+        /* sid.v1.authn.FlowPurpose purpose = 3; */
+        if (message.purpose !== 0)
+            writer.tag(3, WireType.Varint).int32(message.purpose);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.CreateFlowRequest
+ */
+export const CreateFlowRequest = new CreateFlowRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpdateFlowRequest$Type extends MessageType<UpdateFlowRequest> {
+    constructor() {
+        super("sid.v1.authn.UpdateFlowRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "description", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<UpdateFlowRequest>): UpdateFlowRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        if (value !== undefined)
+            reflectionMergePartial<UpdateFlowRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpdateFlowRequest): UpdateFlowRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                case /* optional string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* optional string description */ 3:
+                    message.description = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpdateFlowRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        /* optional string name = 2; */
+        if (message.name !== undefined)
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* optional string description = 3; */
+        if (message.description !== undefined)
+            writer.tag(3, WireType.LengthDelimited).string(message.description);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.UpdateFlowRequest
+ */
+export const UpdateFlowRequest = new UpdateFlowRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DeleteFlowRequest$Type extends MessageType<DeleteFlowRequest> {
+    constructor() {
+        super("sid.v1.authn.DeleteFlowRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<DeleteFlowRequest>): DeleteFlowRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        if (value !== undefined)
+            reflectionMergePartial<DeleteFlowRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeleteFlowRequest): DeleteFlowRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DeleteFlowRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.DeleteFlowRequest
+ */
+export const DeleteFlowRequest = new DeleteFlowRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DuplicateFlowRequest$Type extends MessageType<DuplicateFlowRequest> {
+    constructor() {
+        super("sid.v1.authn.DuplicateFlowRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "new_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<DuplicateFlowRequest>): DuplicateFlowRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        message.newName = "";
+        if (value !== undefined)
+            reflectionMergePartial<DuplicateFlowRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DuplicateFlowRequest): DuplicateFlowRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                case /* string new_name */ 2:
+                    message.newName = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DuplicateFlowRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        /* string new_name = 2; */
+        if (message.newName !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.newName);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.DuplicateFlowRequest
+ */
+export const DuplicateFlowRequest = new DuplicateFlowRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class BindFlowRequest$Type extends MessageType<BindFlowRequest> {
+    constructor() {
+        super("sid.v1.authn.BindFlowRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "purpose", kind: "enum", T: () => ["sid.v1.authn.FlowPurpose", FlowPurpose, "FLOW_PURPOSE_"] }
+        ]);
+    }
+    create(value?: PartialMessage<BindFlowRequest>): BindFlowRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        message.purpose = 0;
+        if (value !== undefined)
+            reflectionMergePartial<BindFlowRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: BindFlowRequest): BindFlowRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                case /* sid.v1.authn.FlowPurpose purpose */ 2:
+                    message.purpose = reader.int32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: BindFlowRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        /* sid.v1.authn.FlowPurpose purpose = 2; */
+        if (message.purpose !== 0)
+            writer.tag(2, WireType.Varint).int32(message.purpose);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.BindFlowRequest
+ */
+export const BindFlowRequest = new BindFlowRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ExportBlueprintRequest$Type extends MessageType<ExportBlueprintRequest> {
+    constructor() {
+        super("sid.v1.authn.ExportBlueprintRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ExportBlueprintRequest>): ExportBlueprintRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        if (value !== undefined)
+            reflectionMergePartial<ExportBlueprintRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ExportBlueprintRequest): ExportBlueprintRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ExportBlueprintRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ExportBlueprintRequest
+ */
+export const ExportBlueprintRequest = new ExportBlueprintRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class BlueprintResponse$Type extends MessageType<BlueprintResponse> {
+    constructor() {
+        super("sid.v1.authn.BlueprintResponse", [
+            { no: 1, name: "yaml", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<BlueprintResponse>): BlueprintResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.yaml = "";
+        if (value !== undefined)
+            reflectionMergePartial<BlueprintResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: BlueprintResponse): BlueprintResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string yaml */ 1:
+                    message.yaml = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: BlueprintResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string yaml = 1; */
+        if (message.yaml !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.yaml);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.BlueprintResponse
+ */
+export const BlueprintResponse = new BlueprintResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ImportBlueprintRequest$Type extends MessageType<ImportBlueprintRequest> {
+    constructor() {
+        super("sid.v1.authn.ImportBlueprintRequest", [
+            { no: 1, name: "yaml", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ImportBlueprintRequest>): ImportBlueprintRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.yaml = "";
+        message.name = "";
+        if (value !== undefined)
+            reflectionMergePartial<ImportBlueprintRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ImportBlueprintRequest): ImportBlueprintRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string yaml */ 1:
+                    message.yaml = reader.string();
+                    break;
+                case /* string name */ 2:
+                    message.name = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ImportBlueprintRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string yaml = 1; */
+        if (message.yaml !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.yaml);
+        /* string name = 2; */
+        if (message.name !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ImportBlueprintRequest
+ */
+export const ImportBlueprintRequest = new ImportBlueprintRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class StepBinding$Type extends MessageType<StepBinding> {
+    constructor() {
+        super("sid.v1.authn.StepBinding", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "step_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "requirement", kind: "enum", T: () => ["sid.v1.authn.StepRequirement", StepRequirement, "STEP_REQUIREMENT_"] },
+            { no: 6, name: "order", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 7, name: "config", kind: "message", T: () => Struct }
+        ]);
+    }
+    create(value?: PartialMessage<StepBinding>): StepBinding {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.flowId = "";
+        message.stepType = "";
+        message.displayName = "";
+        message.requirement = 0;
+        message.order = 0;
+        if (value !== undefined)
+            reflectionMergePartial<StepBinding>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: StepBinding): StepBinding {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* string flow_id */ 2:
+                    message.flowId = reader.string();
+                    break;
+                case /* string step_type */ 3:
+                    message.stepType = reader.string();
+                    break;
+                case /* string display_name */ 4:
+                    message.displayName = reader.string();
+                    break;
+                case /* sid.v1.authn.StepRequirement requirement */ 5:
+                    message.requirement = reader.int32();
+                    break;
+                case /* int32 order */ 6:
+                    message.order = reader.int32();
+                    break;
+                case /* google.protobuf.Struct config */ 7:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: StepBinding, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* string flow_id = 2; */
+        if (message.flowId !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.flowId);
+        /* string step_type = 3; */
+        if (message.stepType !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.stepType);
+        /* string display_name = 4; */
+        if (message.displayName !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.displayName);
+        /* sid.v1.authn.StepRequirement requirement = 5; */
+        if (message.requirement !== 0)
+            writer.tag(5, WireType.Varint).int32(message.requirement);
+        /* int32 order = 6; */
+        if (message.order !== 0)
+            writer.tag(6, WireType.Varint).int32(message.order);
+        /* google.protobuf.Struct config = 7; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(7, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.StepBinding
+ */
+export const StepBinding = new StepBinding$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListStepBindingsRequest$Type extends MessageType<ListStepBindingsRequest> {
+    constructor() {
+        super("sid.v1.authn.ListStepBindingsRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ListStepBindingsRequest>): ListStepBindingsRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        if (value !== undefined)
+            reflectionMergePartial<ListStepBindingsRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListStepBindingsRequest): ListStepBindingsRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListStepBindingsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ListStepBindingsRequest
+ */
+export const ListStepBindingsRequest = new ListStepBindingsRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListStepBindingsResponse$Type extends MessageType<ListStepBindingsResponse> {
+    constructor() {
+        super("sid.v1.authn.ListStepBindingsResponse", [
+            { no: 1, name: "bindings", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => StepBinding }
+        ]);
+    }
+    create(value?: PartialMessage<ListStepBindingsResponse>): ListStepBindingsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.bindings = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListStepBindingsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListStepBindingsResponse): ListStepBindingsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.authn.StepBinding bindings */ 1:
+                    message.bindings.push(StepBinding.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListStepBindingsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.authn.StepBinding bindings = 1; */
+        for (let i = 0; i < message.bindings.length; i++)
+            StepBinding.internalBinaryWrite(message.bindings[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ListStepBindingsResponse
+ */
+export const ListStepBindingsResponse = new ListStepBindingsResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AddStepBindingRequest$Type extends MessageType<AddStepBindingRequest> {
+    constructor() {
+        super("sid.v1.authn.AddStepBindingRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "step_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "requirement", kind: "enum", T: () => ["sid.v1.authn.StepRequirement", StepRequirement, "STEP_REQUIREMENT_"] },
+            { no: 5, name: "order", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 6, name: "config", kind: "message", T: () => Struct }
+        ]);
+    }
+    create(value?: PartialMessage<AddStepBindingRequest>): AddStepBindingRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        message.stepType = "";
+        message.displayName = "";
+        message.requirement = 0;
+        message.order = 0;
+        if (value !== undefined)
+            reflectionMergePartial<AddStepBindingRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AddStepBindingRequest): AddStepBindingRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                case /* string step_type */ 2:
+                    message.stepType = reader.string();
+                    break;
+                case /* string display_name */ 3:
+                    message.displayName = reader.string();
+                    break;
+                case /* sid.v1.authn.StepRequirement requirement */ 4:
+                    message.requirement = reader.int32();
+                    break;
+                case /* int32 order */ 5:
+                    message.order = reader.int32();
+                    break;
+                case /* google.protobuf.Struct config */ 6:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AddStepBindingRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        /* string step_type = 2; */
+        if (message.stepType !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.stepType);
+        /* string display_name = 3; */
+        if (message.displayName !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.displayName);
+        /* sid.v1.authn.StepRequirement requirement = 4; */
+        if (message.requirement !== 0)
+            writer.tag(4, WireType.Varint).int32(message.requirement);
+        /* int32 order = 5; */
+        if (message.order !== 0)
+            writer.tag(5, WireType.Varint).int32(message.order);
+        /* google.protobuf.Struct config = 6; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.AddStepBindingRequest
+ */
+export const AddStepBindingRequest = new AddStepBindingRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpdateStepBindingRequest$Type extends MessageType<UpdateStepBindingRequest> {
+    constructor() {
+        super("sid.v1.authn.UpdateStepBindingRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "binding_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "display_name", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "requirement", kind: "enum", opt: true, T: () => ["sid.v1.authn.StepRequirement", StepRequirement, "STEP_REQUIREMENT_"] },
+            { no: 5, name: "order", kind: "scalar", opt: true, T: 5 /*ScalarType.INT32*/ },
+            { no: 6, name: "config", kind: "message", T: () => Struct }
+        ]);
+    }
+    create(value?: PartialMessage<UpdateStepBindingRequest>): UpdateStepBindingRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        message.bindingId = "";
+        if (value !== undefined)
+            reflectionMergePartial<UpdateStepBindingRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpdateStepBindingRequest): UpdateStepBindingRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                case /* string binding_id */ 2:
+                    message.bindingId = reader.string();
+                    break;
+                case /* optional string display_name */ 3:
+                    message.displayName = reader.string();
+                    break;
+                case /* optional sid.v1.authn.StepRequirement requirement */ 4:
+                    message.requirement = reader.int32();
+                    break;
+                case /* optional int32 order */ 5:
+                    message.order = reader.int32();
+                    break;
+                case /* google.protobuf.Struct config */ 6:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpdateStepBindingRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        /* string binding_id = 2; */
+        if (message.bindingId !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.bindingId);
+        /* optional string display_name = 3; */
+        if (message.displayName !== undefined)
+            writer.tag(3, WireType.LengthDelimited).string(message.displayName);
+        /* optional sid.v1.authn.StepRequirement requirement = 4; */
+        if (message.requirement !== undefined)
+            writer.tag(4, WireType.Varint).int32(message.requirement);
+        /* optional int32 order = 5; */
+        if (message.order !== undefined)
+            writer.tag(5, WireType.Varint).int32(message.order);
+        /* google.protobuf.Struct config = 6; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.UpdateStepBindingRequest
+ */
+export const UpdateStepBindingRequest = new UpdateStepBindingRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RemoveStepBindingRequest$Type extends MessageType<RemoveStepBindingRequest> {
+    constructor() {
+        super("sid.v1.authn.RemoveStepBindingRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "binding_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RemoveStepBindingRequest>): RemoveStepBindingRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        message.bindingId = "";
+        if (value !== undefined)
+            reflectionMergePartial<RemoveStepBindingRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RemoveStepBindingRequest): RemoveStepBindingRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                case /* string binding_id */ 2:
+                    message.bindingId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RemoveStepBindingRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        /* string binding_id = 2; */
+        if (message.bindingId !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.bindingId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.RemoveStepBindingRequest
+ */
+export const RemoveStepBindingRequest = new RemoveStepBindingRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ReorderStepBindingsRequest$Type extends MessageType<ReorderStepBindingsRequest> {
+    constructor() {
+        super("sid.v1.authn.ReorderStepBindingsRequest", [
+            { no: 1, name: "flow_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "binding_ids", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ReorderStepBindingsRequest>): ReorderStepBindingsRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.flowId = "";
+        message.bindingIds = [];
+        if (value !== undefined)
+            reflectionMergePartial<ReorderStepBindingsRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ReorderStepBindingsRequest): ReorderStepBindingsRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string flow_id */ 1:
+                    message.flowId = reader.string();
+                    break;
+                case /* repeated string binding_ids */ 2:
+                    message.bindingIds.push(reader.string());
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ReorderStepBindingsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string flow_id = 1; */
+        if (message.flowId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.flowId);
+        /* repeated string binding_ids = 2; */
+        for (let i = 0; i < message.bindingIds.length; i++)
+            writer.tag(2, WireType.LengthDelimited).string(message.bindingIds[i]);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ReorderStepBindingsRequest
+ */
+export const ReorderStepBindingsRequest = new ReorderStepBindingsRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class StepType$Type extends MessageType<StepType> {
+    constructor() {
+        super("sid.v1.authn.StepType", [
+            { no: 1, name: "type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "category", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "tier", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "configurable", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+        ]);
+    }
+    create(value?: PartialMessage<StepType>): StepType {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.type = "";
+        message.displayName = "";
+        message.description = "";
+        message.category = "";
+        message.tier = "";
+        message.configurable = false;
+        if (value !== undefined)
+            reflectionMergePartial<StepType>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: StepType): StepType {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string type */ 1:
+                    message.type = reader.string();
+                    break;
+                case /* string display_name */ 2:
+                    message.displayName = reader.string();
+                    break;
+                case /* string description */ 3:
+                    message.description = reader.string();
+                    break;
+                case /* string category */ 4:
+                    message.category = reader.string();
+                    break;
+                case /* string tier */ 5:
+                    message.tier = reader.string();
+                    break;
+                case /* bool configurable */ 6:
+                    message.configurable = reader.bool();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: StepType, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string type = 1; */
+        if (message.type !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.type);
+        /* string display_name = 2; */
+        if (message.displayName !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.displayName);
+        /* string description = 3; */
+        if (message.description !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.description);
+        /* string category = 4; */
+        if (message.category !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.category);
+        /* string tier = 5; */
+        if (message.tier !== "")
+            writer.tag(5, WireType.LengthDelimited).string(message.tier);
+        /* bool configurable = 6; */
+        if (message.configurable !== false)
+            writer.tag(6, WireType.Varint).bool(message.configurable);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.StepType
+ */
+export const StepType = new StepType$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListStepTypesResponse$Type extends MessageType<ListStepTypesResponse> {
+    constructor() {
+        super("sid.v1.authn.ListStepTypesResponse", [
+            { no: 1, name: "types", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => StepType }
+        ]);
+    }
+    create(value?: PartialMessage<ListStepTypesResponse>): ListStepTypesResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.types = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListStepTypesResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListStepTypesResponse): ListStepTypesResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.authn.StepType types */ 1:
+                    message.types.push(StepType.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListStepTypesResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.authn.StepType types = 1; */
+        for (let i = 0; i < message.types.length; i++)
+            StepType.internalBinaryWrite(message.types[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ListStepTypesResponse
+ */
+export const ListStepTypesResponse = new ListStepTypesResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class StepConfig$Type extends MessageType<StepConfig> {
+    constructor() {
+        super("sid.v1.authn.StepConfig", [
+            { no: 1, name: "step_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "config", kind: "message", T: () => Struct }
+        ]);
+    }
+    create(value?: PartialMessage<StepConfig>): StepConfig {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.stepType = "";
+        if (value !== undefined)
+            reflectionMergePartial<StepConfig>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: StepConfig): StepConfig {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string step_type */ 1:
+                    message.stepType = reader.string();
+                    break;
+                case /* google.protobuf.Struct config */ 2:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: StepConfig, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string step_type = 1; */
+        if (message.stepType !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.stepType);
+        /* google.protobuf.Struct config = 2; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.StepConfig
+ */
+export const StepConfig = new StepConfig$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GetStepConfigRequest$Type extends MessageType<GetStepConfigRequest> {
+    constructor() {
+        super("sid.v1.authn.GetStepConfigRequest", [
+            { no: 1, name: "step_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetStepConfigRequest>): GetStepConfigRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.stepType = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetStepConfigRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetStepConfigRequest): GetStepConfigRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string step_type */ 1:
+                    message.stepType = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetStepConfigRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string step_type = 1; */
+        if (message.stepType !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.stepType);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.GetStepConfigRequest
+ */
+export const GetStepConfigRequest = new GetStepConfigRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpdateStepConfigRequest$Type extends MessageType<UpdateStepConfigRequest> {
+    constructor() {
+        super("sid.v1.authn.UpdateStepConfigRequest", [
+            { no: 1, name: "step_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "config", kind: "message", T: () => Struct }
+        ]);
+    }
+    create(value?: PartialMessage<UpdateStepConfigRequest>): UpdateStepConfigRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.stepType = "";
+        if (value !== undefined)
+            reflectionMergePartial<UpdateStepConfigRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpdateStepConfigRequest): UpdateStepConfigRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string step_type */ 1:
+                    message.stepType = reader.string();
+                    break;
+                case /* google.protobuf.Struct config */ 2:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpdateStepConfigRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string step_type = 1; */
+        if (message.stepType !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.stepType);
+        /* google.protobuf.Struct config = 2; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.UpdateStepConfigRequest
+ */
+export const UpdateStepConfigRequest = new UpdateStepConfigRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class Action$Type extends MessageType<Action> {
+    constructor() {
+        super("sid.v1.authn.Action", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "type", kind: "enum", T: () => ["sid.v1.authn.ActionType", ActionType, "ACTION_TYPE_"] },
+            { no: 5, name: "hook_point", kind: "enum", T: () => ["sid.v1.authn.ActionHookPoint", ActionHookPoint, "ACTION_HOOK_POINT_"] },
+            { no: 6, name: "enabled", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 7, name: "priority", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 8, name: "webhook_url", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 9, name: "webhook_secret", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 10, name: "webhook_timeout_ms", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 11, name: "event_filters", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 12, name: "config", kind: "message", T: () => Struct },
+            { no: 13, name: "created_at", kind: "message", T: () => Timestamp },
+            { no: 14, name: "updated_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<Action>): Action {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.name = "";
+        message.description = "";
+        message.type = 0;
+        message.hookPoint = 0;
+        message.enabled = false;
+        message.priority = 0;
+        message.webhookUrl = "";
+        message.webhookSecret = "";
+        message.webhookTimeoutMs = 0;
+        message.eventFilters = [];
+        if (value !== undefined)
+            reflectionMergePartial<Action>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: Action): Action {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* string description */ 3:
+                    message.description = reader.string();
+                    break;
+                case /* sid.v1.authn.ActionType type */ 4:
+                    message.type = reader.int32();
+                    break;
+                case /* sid.v1.authn.ActionHookPoint hook_point */ 5:
+                    message.hookPoint = reader.int32();
+                    break;
+                case /* bool enabled */ 6:
+                    message.enabled = reader.bool();
+                    break;
+                case /* int32 priority */ 7:
+                    message.priority = reader.int32();
+                    break;
+                case /* string webhook_url */ 8:
+                    message.webhookUrl = reader.string();
+                    break;
+                case /* string webhook_secret */ 9:
+                    message.webhookSecret = reader.string();
+                    break;
+                case /* int32 webhook_timeout_ms */ 10:
+                    message.webhookTimeoutMs = reader.int32();
+                    break;
+                case /* repeated string event_filters */ 11:
+                    message.eventFilters.push(reader.string());
+                    break;
+                case /* google.protobuf.Struct config */ 12:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 13:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                case /* google.protobuf.Timestamp updated_at */ 14:
+                    message.updatedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.updatedAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: Action, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* string name = 2; */
+        if (message.name !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* string description = 3; */
+        if (message.description !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.description);
+        /* sid.v1.authn.ActionType type = 4; */
+        if (message.type !== 0)
+            writer.tag(4, WireType.Varint).int32(message.type);
+        /* sid.v1.authn.ActionHookPoint hook_point = 5; */
+        if (message.hookPoint !== 0)
+            writer.tag(5, WireType.Varint).int32(message.hookPoint);
+        /* bool enabled = 6; */
+        if (message.enabled !== false)
+            writer.tag(6, WireType.Varint).bool(message.enabled);
+        /* int32 priority = 7; */
+        if (message.priority !== 0)
+            writer.tag(7, WireType.Varint).int32(message.priority);
+        /* string webhook_url = 8; */
+        if (message.webhookUrl !== "")
+            writer.tag(8, WireType.LengthDelimited).string(message.webhookUrl);
+        /* string webhook_secret = 9; */
+        if (message.webhookSecret !== "")
+            writer.tag(9, WireType.LengthDelimited).string(message.webhookSecret);
+        /* int32 webhook_timeout_ms = 10; */
+        if (message.webhookTimeoutMs !== 0)
+            writer.tag(10, WireType.Varint).int32(message.webhookTimeoutMs);
+        /* repeated string event_filters = 11; */
+        for (let i = 0; i < message.eventFilters.length; i++)
+            writer.tag(11, WireType.LengthDelimited).string(message.eventFilters[i]);
+        /* google.protobuf.Struct config = 12; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(12, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp created_at = 13; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(13, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp updated_at = 14; */
+        if (message.updatedAt)
+            Timestamp.internalBinaryWrite(message.updatedAt, writer.tag(14, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.Action
+ */
+export const Action = new Action$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListActionsResponse$Type extends MessageType<ListActionsResponse> {
+    constructor() {
+        super("sid.v1.authn.ListActionsResponse", [
+            { no: 1, name: "actions", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => Action }
+        ]);
+    }
+    create(value?: PartialMessage<ListActionsResponse>): ListActionsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.actions = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListActionsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListActionsResponse): ListActionsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.authn.Action actions */ 1:
+                    message.actions.push(Action.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListActionsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.authn.Action actions = 1; */
+        for (let i = 0; i < message.actions.length; i++)
+            Action.internalBinaryWrite(message.actions[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ListActionsResponse
+ */
+export const ListActionsResponse = new ListActionsResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GetActionRequest$Type extends MessageType<GetActionRequest> {
+    constructor() {
+        super("sid.v1.authn.GetActionRequest", [
+            { no: 1, name: "action_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetActionRequest>): GetActionRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.actionId = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetActionRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetActionRequest): GetActionRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string action_id */ 1:
+                    message.actionId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetActionRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string action_id = 1; */
+        if (message.actionId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.actionId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.GetActionRequest
+ */
+export const GetActionRequest = new GetActionRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class CreateActionRequest$Type extends MessageType<CreateActionRequest> {
+    constructor() {
+        super("sid.v1.authn.CreateActionRequest", [
+            { no: 1, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "type", kind: "enum", T: () => ["sid.v1.authn.ActionType", ActionType, "ACTION_TYPE_"] },
+            { no: 4, name: "hook_point", kind: "enum", T: () => ["sid.v1.authn.ActionHookPoint", ActionHookPoint, "ACTION_HOOK_POINT_"] },
+            { no: 5, name: "enabled", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 6, name: "priority", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 7, name: "webhook_url", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 8, name: "webhook_secret", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 9, name: "webhook_timeout_ms", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 10, name: "event_filters", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 11, name: "config", kind: "message", T: () => Struct }
+        ]);
+    }
+    create(value?: PartialMessage<CreateActionRequest>): CreateActionRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.name = "";
+        message.description = "";
+        message.type = 0;
+        message.hookPoint = 0;
+        message.enabled = false;
+        message.priority = 0;
+        message.webhookUrl = "";
+        message.webhookSecret = "";
+        message.webhookTimeoutMs = 0;
+        message.eventFilters = [];
+        if (value !== undefined)
+            reflectionMergePartial<CreateActionRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CreateActionRequest): CreateActionRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string name */ 1:
+                    message.name = reader.string();
+                    break;
+                case /* string description */ 2:
+                    message.description = reader.string();
+                    break;
+                case /* sid.v1.authn.ActionType type */ 3:
+                    message.type = reader.int32();
+                    break;
+                case /* sid.v1.authn.ActionHookPoint hook_point */ 4:
+                    message.hookPoint = reader.int32();
+                    break;
+                case /* bool enabled */ 5:
+                    message.enabled = reader.bool();
+                    break;
+                case /* int32 priority */ 6:
+                    message.priority = reader.int32();
+                    break;
+                case /* string webhook_url */ 7:
+                    message.webhookUrl = reader.string();
+                    break;
+                case /* string webhook_secret */ 8:
+                    message.webhookSecret = reader.string();
+                    break;
+                case /* int32 webhook_timeout_ms */ 9:
+                    message.webhookTimeoutMs = reader.int32();
+                    break;
+                case /* repeated string event_filters */ 10:
+                    message.eventFilters.push(reader.string());
+                    break;
+                case /* google.protobuf.Struct config */ 11:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: CreateActionRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string name = 1; */
+        if (message.name !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.name);
+        /* string description = 2; */
+        if (message.description !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.description);
+        /* sid.v1.authn.ActionType type = 3; */
+        if (message.type !== 0)
+            writer.tag(3, WireType.Varint).int32(message.type);
+        /* sid.v1.authn.ActionHookPoint hook_point = 4; */
+        if (message.hookPoint !== 0)
+            writer.tag(4, WireType.Varint).int32(message.hookPoint);
+        /* bool enabled = 5; */
+        if (message.enabled !== false)
+            writer.tag(5, WireType.Varint).bool(message.enabled);
+        /* int32 priority = 6; */
+        if (message.priority !== 0)
+            writer.tag(6, WireType.Varint).int32(message.priority);
+        /* string webhook_url = 7; */
+        if (message.webhookUrl !== "")
+            writer.tag(7, WireType.LengthDelimited).string(message.webhookUrl);
+        /* string webhook_secret = 8; */
+        if (message.webhookSecret !== "")
+            writer.tag(8, WireType.LengthDelimited).string(message.webhookSecret);
+        /* int32 webhook_timeout_ms = 9; */
+        if (message.webhookTimeoutMs !== 0)
+            writer.tag(9, WireType.Varint).int32(message.webhookTimeoutMs);
+        /* repeated string event_filters = 10; */
+        for (let i = 0; i < message.eventFilters.length; i++)
+            writer.tag(10, WireType.LengthDelimited).string(message.eventFilters[i]);
+        /* google.protobuf.Struct config = 11; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(11, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.CreateActionRequest
+ */
+export const CreateActionRequest = new CreateActionRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpdateActionRequest$Type extends MessageType<UpdateActionRequest> {
+    constructor() {
+        super("sid.v1.authn.UpdateActionRequest", [
+            { no: 1, name: "action_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "description", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "enabled", kind: "scalar", opt: true, T: 8 /*ScalarType.BOOL*/ },
+            { no: 5, name: "priority", kind: "scalar", opt: true, T: 5 /*ScalarType.INT32*/ },
+            { no: 6, name: "webhook_url", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "webhook_secret", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 8, name: "webhook_timeout_ms", kind: "scalar", opt: true, T: 5 /*ScalarType.INT32*/ },
+            { no: 9, name: "event_filters", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 10, name: "config", kind: "message", T: () => Struct }
+        ]);
+    }
+    create(value?: PartialMessage<UpdateActionRequest>): UpdateActionRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.actionId = "";
+        message.eventFilters = [];
+        if (value !== undefined)
+            reflectionMergePartial<UpdateActionRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpdateActionRequest): UpdateActionRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string action_id */ 1:
+                    message.actionId = reader.string();
+                    break;
+                case /* optional string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* optional string description */ 3:
+                    message.description = reader.string();
+                    break;
+                case /* optional bool enabled */ 4:
+                    message.enabled = reader.bool();
+                    break;
+                case /* optional int32 priority */ 5:
+                    message.priority = reader.int32();
+                    break;
+                case /* optional string webhook_url */ 6:
+                    message.webhookUrl = reader.string();
+                    break;
+                case /* optional string webhook_secret */ 7:
+                    message.webhookSecret = reader.string();
+                    break;
+                case /* optional int32 webhook_timeout_ms */ 8:
+                    message.webhookTimeoutMs = reader.int32();
+                    break;
+                case /* repeated string event_filters */ 9:
+                    message.eventFilters.push(reader.string());
+                    break;
+                case /* google.protobuf.Struct config */ 10:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpdateActionRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string action_id = 1; */
+        if (message.actionId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.actionId);
+        /* optional string name = 2; */
+        if (message.name !== undefined)
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* optional string description = 3; */
+        if (message.description !== undefined)
+            writer.tag(3, WireType.LengthDelimited).string(message.description);
+        /* optional bool enabled = 4; */
+        if (message.enabled !== undefined)
+            writer.tag(4, WireType.Varint).bool(message.enabled);
+        /* optional int32 priority = 5; */
+        if (message.priority !== undefined)
+            writer.tag(5, WireType.Varint).int32(message.priority);
+        /* optional string webhook_url = 6; */
+        if (message.webhookUrl !== undefined)
+            writer.tag(6, WireType.LengthDelimited).string(message.webhookUrl);
+        /* optional string webhook_secret = 7; */
+        if (message.webhookSecret !== undefined)
+            writer.tag(7, WireType.LengthDelimited).string(message.webhookSecret);
+        /* optional int32 webhook_timeout_ms = 8; */
+        if (message.webhookTimeoutMs !== undefined)
+            writer.tag(8, WireType.Varint).int32(message.webhookTimeoutMs);
+        /* repeated string event_filters = 9; */
+        for (let i = 0; i < message.eventFilters.length; i++)
+            writer.tag(9, WireType.LengthDelimited).string(message.eventFilters[i]);
+        /* google.protobuf.Struct config = 10; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(10, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.UpdateActionRequest
+ */
+export const UpdateActionRequest = new UpdateActionRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DeleteActionRequest$Type extends MessageType<DeleteActionRequest> {
+    constructor() {
+        super("sid.v1.authn.DeleteActionRequest", [
+            { no: 1, name: "action_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<DeleteActionRequest>): DeleteActionRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.actionId = "";
+        if (value !== undefined)
+            reflectionMergePartial<DeleteActionRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeleteActionRequest): DeleteActionRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string action_id */ 1:
+                    message.actionId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DeleteActionRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string action_id = 1; */
+        if (message.actionId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.actionId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.DeleteActionRequest
+ */
+export const DeleteActionRequest = new DeleteActionRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class TestActionRequest$Type extends MessageType<TestActionRequest> {
+    constructor() {
+        super("sid.v1.authn.TestActionRequest", [
+            { no: 1, name: "action_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<TestActionRequest>): TestActionRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.actionId = "";
+        if (value !== undefined)
+            reflectionMergePartial<TestActionRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: TestActionRequest): TestActionRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string action_id */ 1:
+                    message.actionId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: TestActionRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string action_id = 1; */
+        if (message.actionId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.actionId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.TestActionRequest
+ */
+export const TestActionRequest = new TestActionRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class TestActionResponse$Type extends MessageType<TestActionResponse> {
+    constructor() {
+        super("sid.v1.authn.TestActionResponse", [
+            { no: 1, name: "success", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 2, name: "status_code", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 3, name: "response_body", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "latency_ms", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 5, name: "error", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<TestActionResponse>): TestActionResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.success = false;
+        message.statusCode = 0;
+        message.responseBody = "";
+        message.latencyMs = 0;
+        message.error = "";
+        if (value !== undefined)
+            reflectionMergePartial<TestActionResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: TestActionResponse): TestActionResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* bool success */ 1:
+                    message.success = reader.bool();
+                    break;
+                case /* int32 status_code */ 2:
+                    message.statusCode = reader.int32();
+                    break;
+                case /* string response_body */ 3:
+                    message.responseBody = reader.string();
+                    break;
+                case /* int32 latency_ms */ 4:
+                    message.latencyMs = reader.int32();
+                    break;
+                case /* string error */ 5:
+                    message.error = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: TestActionResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* bool success = 1; */
+        if (message.success !== false)
+            writer.tag(1, WireType.Varint).bool(message.success);
+        /* int32 status_code = 2; */
+        if (message.statusCode !== 0)
+            writer.tag(2, WireType.Varint).int32(message.statusCode);
+        /* string response_body = 3; */
+        if (message.responseBody !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.responseBody);
+        /* int32 latency_ms = 4; */
+        if (message.latencyMs !== 0)
+            writer.tag(4, WireType.Varint).int32(message.latencyMs);
+        /* string error = 5; */
+        if (message.error !== "")
+            writer.tag(5, WireType.LengthDelimited).string(message.error);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.TestActionResponse
+ */
+export const TestActionResponse = new TestActionResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class BuiltinAction$Type extends MessageType<BuiltinAction> {
+    constructor() {
+        super("sid.v1.authn.BuiltinAction", [
+            { no: 1, name: "action_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "enabled", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 5, name: "config", kind: "message", T: () => Struct }
+        ]);
+    }
+    create(value?: PartialMessage<BuiltinAction>): BuiltinAction {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.actionType = "";
+        message.displayName = "";
+        message.description = "";
+        message.enabled = false;
+        if (value !== undefined)
+            reflectionMergePartial<BuiltinAction>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: BuiltinAction): BuiltinAction {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string action_type */ 1:
+                    message.actionType = reader.string();
+                    break;
+                case /* string display_name */ 2:
+                    message.displayName = reader.string();
+                    break;
+                case /* string description */ 3:
+                    message.description = reader.string();
+                    break;
+                case /* bool enabled */ 4:
+                    message.enabled = reader.bool();
+                    break;
+                case /* google.protobuf.Struct config */ 5:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: BuiltinAction, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string action_type = 1; */
+        if (message.actionType !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.actionType);
+        /* string display_name = 2; */
+        if (message.displayName !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.displayName);
+        /* string description = 3; */
+        if (message.description !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.description);
+        /* bool enabled = 4; */
+        if (message.enabled !== false)
+            writer.tag(4, WireType.Varint).bool(message.enabled);
+        /* google.protobuf.Struct config = 5; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(5, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.BuiltinAction
+ */
+export const BuiltinAction = new BuiltinAction$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListBuiltinActionsResponse$Type extends MessageType<ListBuiltinActionsResponse> {
+    constructor() {
+        super("sid.v1.authn.ListBuiltinActionsResponse", [
+            { no: 1, name: "actions", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => BuiltinAction }
+        ]);
+    }
+    create(value?: PartialMessage<ListBuiltinActionsResponse>): ListBuiltinActionsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.actions = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListBuiltinActionsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListBuiltinActionsResponse): ListBuiltinActionsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.authn.BuiltinAction actions */ 1:
+                    message.actions.push(BuiltinAction.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListBuiltinActionsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.authn.BuiltinAction actions = 1; */
+        for (let i = 0; i < message.actions.length; i++)
+            BuiltinAction.internalBinaryWrite(message.actions[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ListBuiltinActionsResponse
+ */
+export const ListBuiltinActionsResponse = new ListBuiltinActionsResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ConfigureBuiltinActionRequest$Type extends MessageType<ConfigureBuiltinActionRequest> {
+    constructor() {
+        super("sid.v1.authn.ConfigureBuiltinActionRequest", [
+            { no: 1, name: "action_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "enabled", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 3, name: "config", kind: "message", T: () => Struct }
+        ]);
+    }
+    create(value?: PartialMessage<ConfigureBuiltinActionRequest>): ConfigureBuiltinActionRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.actionType = "";
+        message.enabled = false;
+        if (value !== undefined)
+            reflectionMergePartial<ConfigureBuiltinActionRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ConfigureBuiltinActionRequest): ConfigureBuiltinActionRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string action_type */ 1:
+                    message.actionType = reader.string();
+                    break;
+                case /* bool enabled */ 2:
+                    message.enabled = reader.bool();
+                    break;
+                case /* google.protobuf.Struct config */ 3:
+                    message.config = Struct.internalBinaryRead(reader, reader.uint32(), options, message.config);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ConfigureBuiltinActionRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string action_type = 1; */
+        if (message.actionType !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.actionType);
+        /* bool enabled = 2; */
+        if (message.enabled !== false)
+            writer.tag(2, WireType.Varint).bool(message.enabled);
+        /* google.protobuf.Struct config = 3; */
+        if (message.config)
+            Struct.internalBinaryWrite(message.config, writer.tag(3, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ConfigureBuiltinActionRequest
+ */
+export const ConfigureBuiltinActionRequest = new ConfigureBuiltinActionRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListEventTypesResponse$Type extends MessageType<ListEventTypesResponse> {
+    constructor() {
+        super("sid.v1.authn.ListEventTypesResponse", [
+            { no: 1, name: "event_types", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => ActionEventType }
+        ]);
+    }
+    create(value?: PartialMessage<ListEventTypesResponse>): ListEventTypesResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.eventTypes = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListEventTypesResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListEventTypesResponse): ListEventTypesResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.authn.ActionEventType event_types */ 1:
+                    message.eventTypes.push(ActionEventType.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListEventTypesResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.authn.ActionEventType event_types = 1; */
+        for (let i = 0; i < message.eventTypes.length; i++)
+            ActionEventType.internalBinaryWrite(message.eventTypes[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ListEventTypesResponse
+ */
+export const ListEventTypesResponse = new ListEventTypesResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ActionEventType$Type extends MessageType<ActionEventType> {
+    constructor() {
+        super("sid.v1.authn.ActionEventType", [
+            { no: 1, name: "type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "category", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ActionEventType>): ActionEventType {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.type = "";
+        message.displayName = "";
+        message.category = "";
+        if (value !== undefined)
+            reflectionMergePartial<ActionEventType>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ActionEventType): ActionEventType {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string type */ 1:
+                    message.type = reader.string();
+                    break;
+                case /* string display_name */ 2:
+                    message.displayName = reader.string();
+                    break;
+                case /* string category */ 3:
+                    message.category = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ActionEventType, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string type = 1; */
+        if (message.type !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.type);
+        /* string display_name = 2; */
+        if (message.displayName !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.displayName);
+        /* string category = 3; */
+        if (message.category !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.category);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authn.ActionEventType
+ */
+export const ActionEventType = new ActionEventType$Type();
+/**
+ * @generated ServiceType for protobuf service sid.v1.authn.FlowService
+ */
+export const FlowService = new ServiceType("sid.v1.authn.FlowService", [
+    { name: "ListFlows", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/flows" } }, I: Empty, O: ListFlowsResponse },
+    { name: "GetFlow", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/flows/{flow_id}" } }, I: GetFlowRequest, O: Flow },
+    { name: "CreateFlow", options: { "google.api.http": { post: "/v1/admin/flows", body: "*" } }, I: CreateFlowRequest, O: Flow },
+    { name: "UpdateFlow", idempotency: "IDEMPOTENT", options: { "google.api.http": { patch: "/v1/admin/flows/{flow_id}", body: "*" } }, I: UpdateFlowRequest, O: Flow },
+    { name: "DeleteFlow", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/admin/flows/{flow_id}" } }, I: DeleteFlowRequest, O: Empty },
+    { name: "DuplicateFlow", options: { "google.api.http": { post: "/v1/admin/flows/{flow_id}/duplicate", body: "*" } }, I: DuplicateFlowRequest, O: Flow },
+    { name: "BindFlow", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/admin/flows/{flow_id}/bind", body: "*" } }, I: BindFlowRequest, O: Empty },
+    { name: "ExportBlueprint", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/flows/{flow_id}/blueprint" } }, I: ExportBlueprintRequest, O: BlueprintResponse },
+    { name: "ImportBlueprint", options: { "google.api.http": { post: "/v1/admin/flows/import", body: "*" } }, I: ImportBlueprintRequest, O: Flow },
+    { name: "ListStepBindings", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/flows/{flow_id}/steps" } }, I: ListStepBindingsRequest, O: ListStepBindingsResponse },
+    { name: "AddStepBinding", options: { "google.api.http": { post: "/v1/admin/flows/{flow_id}/steps", body: "*" } }, I: AddStepBindingRequest, O: StepBinding },
+    { name: "UpdateStepBinding", idempotency: "IDEMPOTENT", options: { "google.api.http": { patch: "/v1/admin/flows/{flow_id}/steps/{binding_id}", body: "*" } }, I: UpdateStepBindingRequest, O: StepBinding },
+    { name: "RemoveStepBinding", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/admin/flows/{flow_id}/steps/{binding_id}" } }, I: RemoveStepBindingRequest, O: Empty },
+    { name: "ReorderStepBindings", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/admin/flows/{flow_id}/steps/reorder", body: "*" } }, I: ReorderStepBindingsRequest, O: ListStepBindingsResponse }
+]);
+/**
+ * @generated ServiceType for protobuf service sid.v1.authn.StepService
+ */
+export const StepService = new ServiceType("sid.v1.authn.StepService", [
+    { name: "ListStepTypes", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/steps" } }, I: Empty, O: ListStepTypesResponse },
+    { name: "GetStepConfig", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/steps/{step_type}/config" } }, I: GetStepConfigRequest, O: StepConfig },
+    { name: "UpdateStepConfig", idempotency: "IDEMPOTENT", options: { "google.api.http": { patch: "/v1/admin/steps/{step_type}/config", body: "*" } }, I: UpdateStepConfigRequest, O: StepConfig }
+]);
+/**
+ * @generated ServiceType for protobuf service sid.v1.authn.ActionService
+ */
+export const ActionService = new ServiceType("sid.v1.authn.ActionService", [
+    { name: "ListActions", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/actions" } }, I: Empty, O: ListActionsResponse },
+    { name: "GetAction", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/actions/{action_id}" } }, I: GetActionRequest, O: Action },
+    { name: "CreateAction", options: { "google.api.http": { post: "/v1/admin/actions", body: "*" } }, I: CreateActionRequest, O: Action },
+    { name: "UpdateAction", idempotency: "IDEMPOTENT", options: { "google.api.http": { patch: "/v1/admin/actions/{action_id}", body: "*" } }, I: UpdateActionRequest, O: Action },
+    { name: "DeleteAction", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/admin/actions/{action_id}" } }, I: DeleteActionRequest, O: Empty },
+    { name: "TestAction", options: { "google.api.http": { post: "/v1/admin/actions/{action_id}/test", body: "*" } }, I: TestActionRequest, O: TestActionResponse },
+    { name: "ListBuiltinActions", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/actions/builtin" } }, I: Empty, O: ListBuiltinActionsResponse },
+    { name: "ConfigureBuiltinAction", idempotency: "IDEMPOTENT", options: { "google.api.http": { patch: "/v1/admin/actions/builtin/{action_type}", body: "*" } }, I: ConfigureBuiltinActionRequest, O: BuiltinAction },
+    { name: "ListEventTypes", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/actions/event-types" } }, I: Empty, O: ListEventTypesResponse }
+]);