@structured-id/ui-core 1.1.0 → 1.3.0

package/src/generated/sid/v1/machine/pat.ts

@@ -100,7 +100,7 @@ export interface CreatePatRequest {
     /**
      * @generated from protobuf field: repeated string ip_allowlist = 5
      */
-    ipAllowlist: string[]; // EE: restrict by IP.
+    ipAllowlist: string[]; // Client addresses the token is restricted to.
 }
 /**
  * @generated from protobuf message sid.v1.machine.CreatePatResponse
@@ -205,50 +205,6 @@ export interface ExchangePatResponse {
      */
     scope: string; // Space-separated scopes.
 }
-// ── Introspection messages (RFC 7662) ──
-
-/**
- * @generated from protobuf message sid.v1.machine.IntrospectPatRequest
- */
-export interface IntrospectPatRequest {
-    /**
-     * @generated from protobuf field: string token = 1
-     */
-    token: string;
-}
-/**
- * @generated from protobuf message sid.v1.machine.IntrospectPatResponse
- */
-export interface IntrospectPatResponse {
-    /**
-     * @generated from protobuf field: bool active = 1
-     */
-    active: boolean;
-    /**
-     * @generated from protobuf field: string sub = 2
-     */
-    sub: string; // profile_id.
-    /**
-     * @generated from protobuf field: string scope = 3
-     */
-    scope: string; // Space-separated.
-    /**
-     * @generated from protobuf field: string client_id = 4
-     */
-    clientId: string; // pat_id.
-    /**
-     * @generated from protobuf field: string token_type = 5
-     */
-    tokenType: string; // "pat".
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp exp = 6
-     */
-    exp?: Timestamp;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp iat = 7
-     */
-    iat?: Timestamp;
-}
 // ── Admin messages ──
 
 /**
@@ -982,146 +938,6 @@ class ExchangePatResponse$Type extends MessageType<ExchangePatResponse> {
  */
 export const ExchangePatResponse = new ExchangePatResponse$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class IntrospectPatRequest$Type extends MessageType<IntrospectPatRequest> {
-    constructor() {
-        super("sid.v1.machine.IntrospectPatRequest", [
-            { no: 1, name: "token", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<IntrospectPatRequest>): IntrospectPatRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.token = "";
-        if (value !== undefined)
-            reflectionMergePartial<IntrospectPatRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: IntrospectPatRequest): IntrospectPatRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string token */ 1:
-                    message.token = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: IntrospectPatRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string token = 1; */
-        if (message.token !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.token);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.IntrospectPatRequest
- */
-export const IntrospectPatRequest = new IntrospectPatRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class IntrospectPatResponse$Type extends MessageType<IntrospectPatResponse> {
-    constructor() {
-        super("sid.v1.machine.IntrospectPatResponse", [
-            { no: 1, name: "active", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
-            { no: 2, name: "sub", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "scope", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "client_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 5, name: "token_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 6, name: "exp", kind: "message", T: () => Timestamp },
-            { no: 7, name: "iat", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<IntrospectPatResponse>): IntrospectPatResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.active = false;
-        message.sub = "";
-        message.scope = "";
-        message.clientId = "";
-        message.tokenType = "";
-        if (value !== undefined)
-            reflectionMergePartial<IntrospectPatResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: IntrospectPatResponse): IntrospectPatResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* bool active */ 1:
-                    message.active = reader.bool();
-                    break;
-                case /* string sub */ 2:
-                    message.sub = reader.string();
-                    break;
-                case /* string scope */ 3:
-                    message.scope = reader.string();
-                    break;
-                case /* string client_id */ 4:
-                    message.clientId = reader.string();
-                    break;
-                case /* string token_type */ 5:
-                    message.tokenType = reader.string();
-                    break;
-                case /* google.protobuf.Timestamp exp */ 6:
-                    message.exp = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.exp);
-                    break;
-                case /* google.protobuf.Timestamp iat */ 7:
-                    message.iat = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.iat);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: IntrospectPatResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* bool active = 1; */
-        if (message.active !== false)
-            writer.tag(1, WireType.Varint).bool(message.active);
-        /* string sub = 2; */
-        if (message.sub !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.sub);
-        /* string scope = 3; */
-        if (message.scope !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.scope);
-        /* string client_id = 4; */
-        if (message.clientId !== "")
-            writer.tag(4, WireType.LengthDelimited).string(message.clientId);
-        /* string token_type = 5; */
-        if (message.tokenType !== "")
-            writer.tag(5, WireType.LengthDelimited).string(message.tokenType);
-        /* google.protobuf.Timestamp exp = 6; */
-        if (message.exp)
-            Timestamp.internalBinaryWrite(message.exp, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
-        /* google.protobuf.Timestamp iat = 7; */
-        if (message.iat)
-            Timestamp.internalBinaryWrite(message.iat, writer.tag(7, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.IntrospectPatResponse
- */
-export const IntrospectPatResponse = new IntrospectPatResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
 class ListAllPatsRequest$Type extends MessageType<ListAllPatsRequest> {
     constructor() {
         super("sid.v1.machine.ListAllPatsRequest", []);
@@ -1262,7 +1078,6 @@ export const PatService = new ServiceType("sid.v1.machine.PatService", [
     { name: "GetPat", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/pats/{pat_id}" } }, I: GetPatRequest, O: PatResponse },
     { name: "RevokePat", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/pats/{pat_id}" } }, I: RevokePatRequest, O: RevokePatResponse },
     { name: "ExchangePat", options: { "google.api.http": { post: "/v1/pats/exchange", body: "*" } }, I: ExchangePatRequest, O: ExchangePatResponse },
-    { name: "IntrospectPat", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { post: "/v1/pats/introspect", body: "*" } }, I: IntrospectPatRequest, O: IntrospectPatResponse },
     { name: "ListAllPats", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/pats" } }, I: ListAllPatsRequest, O: ListAllPatsResponse },
     { name: "AdminRevokePat", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/admin/pats/{pat_id}" } }, I: AdminRevokePatRequest, O: RevokePatResponse }
 ]);

package/src/generated/sid/v1/projects/projects.client.ts

@@ -11,12 +11,23 @@ import type { CreateInitialAccessTokenResponse } from "./projects";
 import type { CreateInitialAccessTokenRequest } from "./projects";
 import type { DeleteRegisteredClientRequest } from "./projects";
 import type { UpdateRegisteredClientRequest } from "./projects";
+import type { OAuthClient } from "./projects";
 import type { GetRegisteredClientRequest } from "./projects";
 import type { RegisterClientResponse } from "./projects";
 import type { RegisterClientRequest } from "./projects";
 import type { RemoveRoleRequest } from "./projects";
 import type { Role } from "../authz/authz";
 import type { AddRoleRequest } from "./projects";
+import type { ListResourceAccessResponse } from "./projects";
+import type { ListResourceAccessRequest } from "./projects";
+import type { RemoveResourceAccessRequest } from "./projects";
+import type { ResourceAccess } from "./projects";
+import type { SetResourceAccessRequest } from "./projects";
+import type { ProtectedResource } from "./projects";
+import type { UpdateResourceRoleRequest } from "./projects";
+import type { AddResourceRoleRequest } from "./projects";
+import type { UpdateClientRoleRequest } from "./projects";
+import type { AddClientRoleRequest } from "./projects";
 import type { DeleteApplicationRequest } from "./projects";
 import type { UpdateApplicationRequest } from "./projects";
 import type { ListApplicationsResponse } from "./projects";
@@ -65,7 +76,8 @@ export interface IProjectServiceClient {
      */
     deleteProject(input: DeleteProjectRequest, options?: RpcOptions): UnaryCall<DeleteProjectRequest, Empty>;
     /**
-     * Applications within project.
+     * Applications within a project. Creating one registers the roles it
+     * starts with in one step.
      *
      * @generated from protobuf rpc: CreateApplication
      */
@@ -83,9 +95,46 @@ export interface IProjectServiceClient {
      */
     updateApplication(input: UpdateApplicationRequest, options?: RpcOptions): UnaryCall<UpdateApplicationRequest, Application>;
     /**
+     * Removes the application: its client role and the client's access are
+     * deleted, its resource role is retired and access to it ends.
+     *
      * @generated from protobuf rpc: DeleteApplication
      */
     deleteApplication(input: DeleteApplicationRequest, options?: RpcOptions): UnaryCall<DeleteApplicationRequest, Empty>;
+    /**
+     * Client role.
+     *
+     * @generated from protobuf rpc: AddClientRole
+     */
+    addClientRole(input: AddClientRoleRequest, options?: RpcOptions): UnaryCall<AddClientRoleRequest, CreateApplicationResponse>;
+    /**
+     * @generated from protobuf rpc: UpdateClientRole
+     */
+    updateClientRole(input: UpdateClientRoleRequest, options?: RpcOptions): UnaryCall<UpdateClientRoleRequest, Application>;
+    /**
+     * Protected-resource role.
+     *
+     * @generated from protobuf rpc: AddResourceRole
+     */
+    addResourceRole(input: AddResourceRoleRequest, options?: RpcOptions): UnaryCall<AddResourceRoleRequest, Application>;
+    /**
+     * @generated from protobuf rpc: UpdateResourceRole
+     */
+    updateResourceRole(input: UpdateResourceRoleRequest, options?: RpcOptions): UnaryCall<UpdateResourceRoleRequest, ProtectedResource>;
+    /**
+     * Client-to-resource access.
+     *
+     * @generated from protobuf rpc: SetResourceAccess
+     */
+    setResourceAccess(input: SetResourceAccessRequest, options?: RpcOptions): UnaryCall<SetResourceAccessRequest, ResourceAccess>;
+    /**
+     * @generated from protobuf rpc: RemoveResourceAccess
+     */
+    removeResourceAccess(input: RemoveResourceAccessRequest, options?: RpcOptions): UnaryCall<RemoveResourceAccessRequest, Empty>;
+    /**
+     * @generated from protobuf rpc: ListResourceAccess
+     */
+    listResourceAccess(input: ListResourceAccessRequest, options?: RpcOptions): UnaryCall<ListResourceAccessRequest, ListResourceAccessResponse>;
     /**
      * Roles within project (uses Role type from authz.proto).
      *
@@ -97,7 +146,12 @@ export interface IProjectServiceClient {
      */
     removeRole(input: RemoveRoleRequest, options?: RpcOptions): UnaryCall<RemoveRoleRequest, Empty>;
     /**
-     * Dynamic Client Registration (RFC 7591).
+     * Dynamic Client Registration (RFC 7591) and client management (RFC 7592)
+     * under one issuer. No HTTP binding here: the RFC form of these RPCs is
+     * OidcProviderService's registration endpoints under the issuer path.
+     * RegisterClient creates a new client on every call; it is not advertised
+     * as safely retryable. A registration creates a client, never a resource or
+     * access to one.
      *
      * @generated from protobuf rpc: RegisterClient
      */
@@ -105,11 +159,11 @@ export interface IProjectServiceClient {
     /**
      * @generated from protobuf rpc: GetRegisteredClient
      */
-    getRegisteredClient(input: GetRegisteredClientRequest, options?: RpcOptions): UnaryCall<GetRegisteredClientRequest, Application>;
+    getRegisteredClient(input: GetRegisteredClientRequest, options?: RpcOptions): UnaryCall<GetRegisteredClientRequest, OAuthClient>;
     /**
      * @generated from protobuf rpc: UpdateRegisteredClient
      */
-    updateRegisteredClient(input: UpdateRegisteredClientRequest, options?: RpcOptions): UnaryCall<UpdateRegisteredClientRequest, Application>;
+    updateRegisteredClient(input: UpdateRegisteredClientRequest, options?: RpcOptions): UnaryCall<UpdateRegisteredClientRequest, OAuthClient>;
     /**
      * @generated from protobuf rpc: DeleteRegisteredClient
      */
@@ -178,7 +232,8 @@ export class ProjectServiceClient implements IProjectServiceClient, ServiceInfo
         return stackIntercept<DeleteProjectRequest, Empty>("unary", this._transport, method, opt, input);
     }
     /**
-     * Applications within project.
+     * Applications within a project. Creating one registers the roles it
+     * starts with in one step.
      *
      * @generated from protobuf rpc: CreateApplication
      */
@@ -208,56 +263,119 @@ export class ProjectServiceClient implements IProjectServiceClient, ServiceInfo
         return stackIntercept<UpdateApplicationRequest, Application>("unary", this._transport, method, opt, input);
     }
     /**
+     * Removes the application: its client role and the client's access are
+     * deleted, its resource role is retired and access to it ends.
+     *
      * @generated from protobuf rpc: DeleteApplication
      */
     deleteApplication(input: DeleteApplicationRequest, options?: RpcOptions): UnaryCall<DeleteApplicationRequest, Empty> {
         const method = this.methods[9], opt = this._transport.mergeOptions(options);
         return stackIntercept<DeleteApplicationRequest, Empty>("unary", this._transport, method, opt, input);
     }
+    /**
+     * Client role.
+     *
+     * @generated from protobuf rpc: AddClientRole
+     */
+    addClientRole(input: AddClientRoleRequest, options?: RpcOptions): UnaryCall<AddClientRoleRequest, CreateApplicationResponse> {
+        const method = this.methods[10], opt = this._transport.mergeOptions(options);
+        return stackIntercept<AddClientRoleRequest, CreateApplicationResponse>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * @generated from protobuf rpc: UpdateClientRole
+     */
+    updateClientRole(input: UpdateClientRoleRequest, options?: RpcOptions): UnaryCall<UpdateClientRoleRequest, Application> {
+        const method = this.methods[11], opt = this._transport.mergeOptions(options);
+        return stackIntercept<UpdateClientRoleRequest, Application>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Protected-resource role.
+     *
+     * @generated from protobuf rpc: AddResourceRole
+     */
+    addResourceRole(input: AddResourceRoleRequest, options?: RpcOptions): UnaryCall<AddResourceRoleRequest, Application> {
+        const method = this.methods[12], opt = this._transport.mergeOptions(options);
+        return stackIntercept<AddResourceRoleRequest, Application>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * @generated from protobuf rpc: UpdateResourceRole
+     */
+    updateResourceRole(input: UpdateResourceRoleRequest, options?: RpcOptions): UnaryCall<UpdateResourceRoleRequest, ProtectedResource> {
+        const method = this.methods[13], opt = this._transport.mergeOptions(options);
+        return stackIntercept<UpdateResourceRoleRequest, ProtectedResource>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Client-to-resource access.
+     *
+     * @generated from protobuf rpc: SetResourceAccess
+     */
+    setResourceAccess(input: SetResourceAccessRequest, options?: RpcOptions): UnaryCall<SetResourceAccessRequest, ResourceAccess> {
+        const method = this.methods[14], opt = this._transport.mergeOptions(options);
+        return stackIntercept<SetResourceAccessRequest, ResourceAccess>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * @generated from protobuf rpc: RemoveResourceAccess
+     */
+    removeResourceAccess(input: RemoveResourceAccessRequest, options?: RpcOptions): UnaryCall<RemoveResourceAccessRequest, Empty> {
+        const method = this.methods[15], opt = this._transport.mergeOptions(options);
+        return stackIntercept<RemoveResourceAccessRequest, Empty>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * @generated from protobuf rpc: ListResourceAccess
+     */
+    listResourceAccess(input: ListResourceAccessRequest, options?: RpcOptions): UnaryCall<ListResourceAccessRequest, ListResourceAccessResponse> {
+        const method = this.methods[16], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ListResourceAccessRequest, ListResourceAccessResponse>("unary", this._transport, method, opt, input);
+    }
     /**
      * Roles within project (uses Role type from authz.proto).
      *
      * @generated from protobuf rpc: AddRole
      */
     addRole(input: AddRoleRequest, options?: RpcOptions): UnaryCall<AddRoleRequest, Role> {
-        const method = this.methods[10], opt = this._transport.mergeOptions(options);
+        const method = this.methods[17], opt = this._transport.mergeOptions(options);
         return stackIntercept<AddRoleRequest, Role>("unary", this._transport, method, opt, input);
     }
     /**
      * @generated from protobuf rpc: RemoveRole
      */
     removeRole(input: RemoveRoleRequest, options?: RpcOptions): UnaryCall<RemoveRoleRequest, Empty> {
-        const method = this.methods[11], opt = this._transport.mergeOptions(options);
+        const method = this.methods[18], opt = this._transport.mergeOptions(options);
         return stackIntercept<RemoveRoleRequest, Empty>("unary", this._transport, method, opt, input);
     }
     /**
-     * Dynamic Client Registration (RFC 7591).
+     * Dynamic Client Registration (RFC 7591) and client management (RFC 7592)
+     * under one issuer. No HTTP binding here: the RFC form of these RPCs is
+     * OidcProviderService's registration endpoints under the issuer path.
+     * RegisterClient creates a new client on every call; it is not advertised
+     * as safely retryable. A registration creates a client, never a resource or
+     * access to one.
      *
      * @generated from protobuf rpc: RegisterClient
      */
     registerClient(input: RegisterClientRequest, options?: RpcOptions): UnaryCall<RegisterClientRequest, RegisterClientResponse> {
-        const method = this.methods[12], opt = this._transport.mergeOptions(options);
+        const method = this.methods[19], opt = this._transport.mergeOptions(options);
         return stackIntercept<RegisterClientRequest, RegisterClientResponse>("unary", this._transport, method, opt, input);
     }
     /**
      * @generated from protobuf rpc: GetRegisteredClient
      */
-    getRegisteredClient(input: GetRegisteredClientRequest, options?: RpcOptions): UnaryCall<GetRegisteredClientRequest, Application> {
-        const method = this.methods[13], opt = this._transport.mergeOptions(options);
-        return stackIntercept<GetRegisteredClientRequest, Application>("unary", this._transport, method, opt, input);
+    getRegisteredClient(input: GetRegisteredClientRequest, options?: RpcOptions): UnaryCall<GetRegisteredClientRequest, OAuthClient> {
+        const method = this.methods[20], opt = this._transport.mergeOptions(options);
+        return stackIntercept<GetRegisteredClientRequest, OAuthClient>("unary", this._transport, method, opt, input);
     }
     /**
      * @generated from protobuf rpc: UpdateRegisteredClient
      */
-    updateRegisteredClient(input: UpdateRegisteredClientRequest, options?: RpcOptions): UnaryCall<UpdateRegisteredClientRequest, Application> {
-        const method = this.methods[14], opt = this._transport.mergeOptions(options);
-        return stackIntercept<UpdateRegisteredClientRequest, Application>("unary", this._transport, method, opt, input);
+    updateRegisteredClient(input: UpdateRegisteredClientRequest, options?: RpcOptions): UnaryCall<UpdateRegisteredClientRequest, OAuthClient> {
+        const method = this.methods[21], opt = this._transport.mergeOptions(options);
+        return stackIntercept<UpdateRegisteredClientRequest, OAuthClient>("unary", this._transport, method, opt, input);
     }
     /**
      * @generated from protobuf rpc: DeleteRegisteredClient
      */
     deleteRegisteredClient(input: DeleteRegisteredClientRequest, options?: RpcOptions): UnaryCall<DeleteRegisteredClientRequest, Empty> {
-        const method = this.methods[15], opt = this._transport.mergeOptions(options);
+        const method = this.methods[22], opt = this._transport.mergeOptions(options);
         return stackIntercept<DeleteRegisteredClientRequest, Empty>("unary", this._transport, method, opt, input);
     }
     /**
@@ -266,21 +384,21 @@ export class ProjectServiceClient implements IProjectServiceClient, ServiceInfo
      * @generated from protobuf rpc: CreateInitialAccessToken
      */
     createInitialAccessToken(input: CreateInitialAccessTokenRequest, options?: RpcOptions): UnaryCall<CreateInitialAccessTokenRequest, CreateInitialAccessTokenResponse> {
-        const method = this.methods[16], opt = this._transport.mergeOptions(options);
+        const method = this.methods[23], opt = this._transport.mergeOptions(options);
         return stackIntercept<CreateInitialAccessTokenRequest, CreateInitialAccessTokenResponse>("unary", this._transport, method, opt, input);
     }
     /**
      * @generated from protobuf rpc: ListInitialAccessTokens
      */
     listInitialAccessTokens(input: ListInitialAccessTokensRequest, options?: RpcOptions): UnaryCall<ListInitialAccessTokensRequest, ListInitialAccessTokensResponse> {
-        const method = this.methods[17], opt = this._transport.mergeOptions(options);
+        const method = this.methods[24], opt = this._transport.mergeOptions(options);
         return stackIntercept<ListInitialAccessTokensRequest, ListInitialAccessTokensResponse>("unary", this._transport, method, opt, input);
     }
     /**
      * @generated from protobuf rpc: RevokeInitialAccessToken
      */
     revokeInitialAccessToken(input: RevokeInitialAccessTokenRequest, options?: RpcOptions): UnaryCall<RevokeInitialAccessTokenRequest, Empty> {
-        const method = this.methods[18], opt = this._transport.mergeOptions(options);
+        const method = this.methods[25], opt = this._transport.mergeOptions(options);
         return stackIntercept<RevokeInitialAccessTokenRequest, Empty>("unary", this._transport, method, opt, input);
     }
 }