@structured-id/ui-core 1.2.0 → 1.3.0

package/src/generated/sid/v1/scim/scim.client.ts

@@ -1,6 +1,9 @@
 // @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
 // @generated from protobuf file "sid/v1/scim/scim.proto" (package "sid.v1.scim", syntax proto3)
 // tslint:disable
+import { ScimProtocolService } from "./scim";
+import type { HttpBody } from "../../../google/api/httpbody";
+import type { ScimHttpRequest } from "./scim";
 import type { RpcTransport } from "@protobuf-ts/runtime-rpc";
 import type { ServiceInfo } from "@protobuf-ts/runtime-rpc";
 import { ScimService } from "./scim";
@@ -31,7 +34,9 @@ import type { UnaryCall } from "@protobuf-ts/runtime-rpc";
 import type { RpcOptions } from "@protobuf-ts/runtime-rpc";
 /**
  * ScimService implements SCIM 2.0 inbound provisioning (HR → SID).
- * Creates/updates/deactivates corporate profiles and groups.
+ * Creates/updates/deactivates corporate profiles and groups. Typed gRPC
+ * only: SCIM clients speak HTTP through ScimProtocolService, which reads and
+ * writes the RFC 7643/7644 JSON and calls these same operations.
  *
  * ── Users (RFC 7644 §3.3–§3.6) ──
  *
@@ -129,7 +134,9 @@ export interface IScimServiceClient {
 }
 /**
  * ScimService implements SCIM 2.0 inbound provisioning (HR → SID).
- * Creates/updates/deactivates corporate profiles and groups.
+ * Creates/updates/deactivates corporate profiles and groups. Typed gRPC
+ * only: SCIM clients speak HTTP through ScimProtocolService, which reads and
+ * writes the RFC 7643/7644 JSON and calls these same operations.
  *
  * ── Users (RFC 7644 §3.3–§3.6) ──
  *
@@ -272,3 +279,242 @@ export class ScimServiceClient implements IScimServiceClient, ServiceInfo {
         return stackIntercept<ScimGetSchemasRequest, ScimSchemasResponse>("unary", this._transport, method, opt, input);
     }
 }
+/**
+ * The SCIM 2.0 HTTP endpoint (RFC 7644) for independent SCIM clients. Each
+ * RPC reads the request in its RFC 7643/7644 JSON (`application/scim+json`,
+ * also `application/json`, RFC 7644 §3.1) and answers with the RFC's JSON,
+ * status and headers: 201 and `Location` for a created resource (§3.3), 204
+ * for a deletion (§3.6), the §3.12 error body for a refusal. The operations
+ * are those of ScimService, with the same authentication and authorization.
+ *
+ * @generated from protobuf service sid.v1.scim.ScimProtocolService
+ */
+export interface IScimProtocolServiceClient {
+    /**
+     * Create a user (RFC 7644 §3.3).
+     *
+     * @generated from protobuf rpc: CreateUser
+     */
+    createUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Read a user (RFC 7644 §3.4.1).
+     *
+     * @generated from protobuf rpc: GetUser
+     */
+    getUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Query users (RFC 7644 §3.4.2).
+     *
+     * @generated from protobuf rpc: ListUsers
+     */
+    listUsers(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Replace a user (RFC 7644 §3.5.1).
+     *
+     * @generated from protobuf rpc: ReplaceUser
+     */
+    replaceUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Modify a user (RFC 7644 §3.5.2).
+     *
+     * @generated from protobuf rpc: PatchUser
+     */
+    patchUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Delete a user (RFC 7644 §3.6).
+     *
+     * @generated from protobuf rpc: DeleteUser
+     */
+    deleteUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Create a group (RFC 7644 §3.3).
+     *
+     * @generated from protobuf rpc: CreateGroup
+     */
+    createGroup(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Read a group (RFC 7644 §3.4.1).
+     *
+     * @generated from protobuf rpc: GetGroup
+     */
+    getGroup(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Query groups (RFC 7644 §3.4.2).
+     *
+     * @generated from protobuf rpc: ListGroups
+     */
+    listGroups(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Modify a group (RFC 7644 §3.5.2).
+     *
+     * @generated from protobuf rpc: PatchGroup
+     */
+    patchGroup(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * Delete a group (RFC 7644 §3.6).
+     *
+     * @generated from protobuf rpc: DeleteGroup
+     */
+    deleteGroup(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * The service provider configuration (RFC 7644 §4, RFC 7643 §5).
+     *
+     * @generated from protobuf rpc: GetServiceProviderConfig
+     */
+    getServiceProviderConfig(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * The resource types (RFC 7644 §4, RFC 7643 §6).
+     *
+     * @generated from protobuf rpc: GetResourceTypes
+     */
+    getResourceTypes(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+    /**
+     * The schemas (RFC 7644 §4, RFC 7643 §7).
+     *
+     * @generated from protobuf rpc: GetSchemas
+     */
+    getSchemas(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody>;
+}
+/**
+ * The SCIM 2.0 HTTP endpoint (RFC 7644) for independent SCIM clients. Each
+ * RPC reads the request in its RFC 7643/7644 JSON (`application/scim+json`,
+ * also `application/json`, RFC 7644 §3.1) and answers with the RFC's JSON,
+ * status and headers: 201 and `Location` for a created resource (§3.3), 204
+ * for a deletion (§3.6), the §3.12 error body for a refusal. The operations
+ * are those of ScimService, with the same authentication and authorization.
+ *
+ * @generated from protobuf service sid.v1.scim.ScimProtocolService
+ */
+export class ScimProtocolServiceClient implements IScimProtocolServiceClient, ServiceInfo {
+    typeName = ScimProtocolService.typeName;
+    methods = ScimProtocolService.methods;
+    options = ScimProtocolService.options;
+    constructor(private readonly _transport: RpcTransport) {
+    }
+    /**
+     * Create a user (RFC 7644 §3.3).
+     *
+     * @generated from protobuf rpc: CreateUser
+     */
+    createUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[0], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Read a user (RFC 7644 §3.4.1).
+     *
+     * @generated from protobuf rpc: GetUser
+     */
+    getUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[1], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Query users (RFC 7644 §3.4.2).
+     *
+     * @generated from protobuf rpc: ListUsers
+     */
+    listUsers(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[2], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Replace a user (RFC 7644 §3.5.1).
+     *
+     * @generated from protobuf rpc: ReplaceUser
+     */
+    replaceUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[3], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Modify a user (RFC 7644 §3.5.2).
+     *
+     * @generated from protobuf rpc: PatchUser
+     */
+    patchUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[4], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Delete a user (RFC 7644 §3.6).
+     *
+     * @generated from protobuf rpc: DeleteUser
+     */
+    deleteUser(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[5], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Create a group (RFC 7644 §3.3).
+     *
+     * @generated from protobuf rpc: CreateGroup
+     */
+    createGroup(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[6], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Read a group (RFC 7644 §3.4.1).
+     *
+     * @generated from protobuf rpc: GetGroup
+     */
+    getGroup(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[7], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Query groups (RFC 7644 §3.4.2).
+     *
+     * @generated from protobuf rpc: ListGroups
+     */
+    listGroups(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[8], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Modify a group (RFC 7644 §3.5.2).
+     *
+     * @generated from protobuf rpc: PatchGroup
+     */
+    patchGroup(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[9], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * Delete a group (RFC 7644 §3.6).
+     *
+     * @generated from protobuf rpc: DeleteGroup
+     */
+    deleteGroup(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[10], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * The service provider configuration (RFC 7644 §4, RFC 7643 §5).
+     *
+     * @generated from protobuf rpc: GetServiceProviderConfig
+     */
+    getServiceProviderConfig(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[11], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * The resource types (RFC 7644 §4, RFC 7643 §6).
+     *
+     * @generated from protobuf rpc: GetResourceTypes
+     */
+    getResourceTypes(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[12], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+    /**
+     * The schemas (RFC 7644 §4, RFC 7643 §7).
+     *
+     * @generated from protobuf rpc: GetSchemas
+     */
+    getSchemas(input: ScimHttpRequest, options?: RpcOptions): UnaryCall<ScimHttpRequest, HttpBody> {
+        const method = this.methods[13], opt = this._transport.mergeOptions(options);
+        return stackIntercept<ScimHttpRequest, HttpBody>("unary", this._transport, method, opt, input);
+    }
+}

package/src/generated/sid/v1/scim/scim.ts

@@ -13,6 +13,49 @@ import type { PartialMessage } from "@protobuf-ts/runtime";
 import { reflectionMergePartial } from "@protobuf-ts/runtime";
 import { MessageType } from "@protobuf-ts/runtime";
 import { Timestamp } from "../../../google/protobuf/timestamp";
+import { HttpBody } from "../../../google/api/httpbody";
+/**
+ * A request to the SCIM HTTP endpoint: what its path, query and body carry.
+ *
+ * @generated from protobuf message sid.v1.scim.ScimHttpRequest
+ */
+export interface ScimHttpRequest {
+    /**
+     * The resource identifier from the path (`/Users/{id}`, `/Groups/{id}`);
+     * empty for an endpoint without one.
+     *
+     * @generated from protobuf field: string id = 1
+     */
+    id: string;
+    /**
+     * The request body as the client sent it, with its `Content-Type`; absent
+     * for a request without one (GET, DELETE).
+     *
+     * @generated from protobuf field: google.api.HttpBody body = 2
+     */
+    body?: HttpBody;
+    /**
+     * The `filter` query parameter of a query (RFC 7644 §3.4.2.2).
+     *
+     * @generated from protobuf field: string filter = 3
+     */
+    filter: string;
+    /**
+     * The `startIndex` query parameter: the 1-based index of the first result
+     * (RFC 7644 §3.4.2.4); 0 when absent, read as 1.
+     *
+     * @generated from protobuf field: int32 start_index = 4
+     */
+    startIndex: number;
+    /**
+     * The `count` query parameter: the most results wanted (RFC 7644
+     * §3.4.2.4); absent means the service provider's default, and 0 asks for
+     * `totalResults` alone.
+     *
+     * @generated from protobuf field: optional int32 count = 5
+     */
+    count?: number;
+}
 // ── User Messages ──
 
 /**
@@ -755,6 +798,83 @@ export interface ScimSchemaAttribute {
     subAttributes: ScimSchemaAttribute[];
 }
 // @generated message type with reflection information, may provide speed optimized methods
+class ScimHttpRequest$Type extends MessageType<ScimHttpRequest> {
+    constructor() {
+        super("sid.v1.scim.ScimHttpRequest", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "body", kind: "message", T: () => HttpBody },
+            { no: 3, name: "filter", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "start_index", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 5, name: "count", kind: "scalar", opt: true, T: 5 /*ScalarType.INT32*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ScimHttpRequest>): ScimHttpRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.filter = "";
+        message.startIndex = 0;
+        if (value !== undefined)
+            reflectionMergePartial<ScimHttpRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ScimHttpRequest): ScimHttpRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* google.api.HttpBody body */ 2:
+                    message.body = HttpBody.internalBinaryRead(reader, reader.uint32(), options, message.body);
+                    break;
+                case /* string filter */ 3:
+                    message.filter = reader.string();
+                    break;
+                case /* int32 start_index */ 4:
+                    message.startIndex = reader.int32();
+                    break;
+                case /* optional int32 count */ 5:
+                    message.count = reader.int32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ScimHttpRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* google.api.HttpBody body = 2; */
+        if (message.body)
+            HttpBody.internalBinaryWrite(message.body, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+        /* string filter = 3; */
+        if (message.filter !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.filter);
+        /* int32 start_index = 4; */
+        if (message.startIndex !== 0)
+            writer.tag(4, WireType.Varint).int32(message.startIndex);
+        /* optional int32 count = 5; */
+        if (message.count !== undefined)
+            writer.tag(5, WireType.Varint).int32(message.count);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.scim.ScimHttpRequest
+ */
+export const ScimHttpRequest = new ScimHttpRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
 class ScimUser$Type extends MessageType<ScimUser> {
     constructor() {
         super("sid.v1.scim.ScimUser", [
@@ -3026,18 +3146,37 @@ export const ScimSchemaAttribute = new ScimSchemaAttribute$Type();
  * @generated ServiceType for protobuf service sid.v1.scim.ScimService
  */
 export const ScimService = new ServiceType("sid.v1.scim.ScimService", [
-    { name: "CreateUser", options: { "google.api.http": { post: "/scim/v2/Users", body: "*" } }, I: ScimCreateUserRequest, O: ScimUser },
-    { name: "GetUser", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Users/{id}" } }, I: ScimGetUserRequest, O: ScimUser },
-    { name: "ListUsers", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Users" } }, I: ScimListUsersRequest, O: ScimListUsersResponse },
-    { name: "ReplaceUser", options: { "google.api.http": { put: "/scim/v2/Users/{id}", body: "*" } }, I: ScimReplaceUserRequest, O: ScimUser },
-    { name: "PatchUser", options: { "google.api.http": { patch: "/scim/v2/Users/{id}", body: "*" } }, I: ScimPatchUserRequest, O: ScimUser },
-    { name: "DeleteUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/scim/v2/Users/{id}" } }, I: ScimDeleteUserRequest, O: Empty },
-    { name: "CreateGroup", options: { "google.api.http": { post: "/scim/v2/Groups", body: "*" } }, I: ScimCreateGroupRequest, O: ScimGroup },
-    { name: "GetGroup", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Groups/{id}" } }, I: ScimGetGroupRequest, O: ScimGroup },
-    { name: "ListGroups", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Groups" } }, I: ScimListGroupsRequest, O: ScimListGroupsResponse },
-    { name: "PatchGroup", options: { "google.api.http": { patch: "/scim/v2/Groups/{id}", body: "*" } }, I: ScimPatchGroupRequest, O: ScimGroup },
-    { name: "DeleteGroup", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/scim/v2/Groups/{id}" } }, I: ScimDeleteGroupRequest, O: Empty },
-    { name: "GetServiceProviderConfig", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/ServiceProviderConfig" } }, I: ScimGetServiceProviderConfigRequest, O: ScimServiceProviderConfig },
-    { name: "GetResourceTypes", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/ResourceTypes" } }, I: ScimGetResourceTypesRequest, O: ScimResourceTypesResponse },
-    { name: "GetSchemas", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Schemas" } }, I: ScimGetSchemasRequest, O: ScimSchemasResponse }
+    { name: "CreateUser", options: {}, I: ScimCreateUserRequest, O: ScimUser },
+    { name: "GetUser", idempotency: "NO_SIDE_EFFECTS", options: {}, I: ScimGetUserRequest, O: ScimUser },
+    { name: "ListUsers", idempotency: "NO_SIDE_EFFECTS", options: {}, I: ScimListUsersRequest, O: ScimListUsersResponse },
+    { name: "ReplaceUser", options: {}, I: ScimReplaceUserRequest, O: ScimUser },
+    { name: "PatchUser", options: {}, I: ScimPatchUserRequest, O: ScimUser },
+    { name: "DeleteUser", idempotency: "IDEMPOTENT", options: {}, I: ScimDeleteUserRequest, O: Empty },
+    { name: "CreateGroup", options: {}, I: ScimCreateGroupRequest, O: ScimGroup },
+    { name: "GetGroup", idempotency: "NO_SIDE_EFFECTS", options: {}, I: ScimGetGroupRequest, O: ScimGroup },
+    { name: "ListGroups", idempotency: "NO_SIDE_EFFECTS", options: {}, I: ScimListGroupsRequest, O: ScimListGroupsResponse },
+    { name: "PatchGroup", options: {}, I: ScimPatchGroupRequest, O: ScimGroup },
+    { name: "DeleteGroup", idempotency: "IDEMPOTENT", options: {}, I: ScimDeleteGroupRequest, O: Empty },
+    { name: "GetServiceProviderConfig", idempotency: "NO_SIDE_EFFECTS", options: {}, I: ScimGetServiceProviderConfigRequest, O: ScimServiceProviderConfig },
+    { name: "GetResourceTypes", idempotency: "NO_SIDE_EFFECTS", options: {}, I: ScimGetResourceTypesRequest, O: ScimResourceTypesResponse },
+    { name: "GetSchemas", idempotency: "NO_SIDE_EFFECTS", options: {}, I: ScimGetSchemasRequest, O: ScimSchemasResponse }
+]);
+/**
+ * @generated ServiceType for protobuf service sid.v1.scim.ScimProtocolService
+ */
+export const ScimProtocolService = new ServiceType("sid.v1.scim.ScimProtocolService", [
+    { name: "CreateUser", options: { "google.api.http": { post: "/scim/v2/Users", body: "body" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "GetUser", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Users/{id}" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "ListUsers", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Users" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "ReplaceUser", options: { "google.api.http": { put: "/scim/v2/Users/{id}", body: "body" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "PatchUser", options: { "google.api.http": { patch: "/scim/v2/Users/{id}", body: "body" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "DeleteUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/scim/v2/Users/{id}" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "CreateGroup", options: { "google.api.http": { post: "/scim/v2/Groups", body: "body" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "GetGroup", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Groups/{id}" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "ListGroups", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Groups" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "PatchGroup", options: { "google.api.http": { patch: "/scim/v2/Groups/{id}", body: "body" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "DeleteGroup", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/scim/v2/Groups/{id}" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "GetServiceProviderConfig", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/ServiceProviderConfig" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "GetResourceTypes", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/ResourceTypes" } }, I: ScimHttpRequest, O: HttpBody },
+    { name: "GetSchemas", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/scim/v2/Schemas" } }, I: ScimHttpRequest, O: HttpBody }
 ]);

package/src/generated/sid/v1/test/test.ts

@@ -16,7 +16,7 @@ import { MessageType } from "@protobuf-ts/runtime";
  */
 export interface PerfTestRequest {
     /**
-     * Cipher suite identifier: "ristretto255", "p256", "p384", "p521", "proprietary".
+     * Cipher suite identifier: "ristretto255", "p256", "p384", "p521".
      *
      * @generated from protobuf field: string suite = 1
      */

package/src/i18n/index.ts

@@ -19,17 +19,6 @@ export const AUTH_KEYS = {
   LOGOUT_SUBMIT: "auth.logout.submit",
 } as const;
 
-export const ERROR_KEYS = {
-  INVALID_CREDENTIALS: "errors.auth.invalid_credentials",
-  ACCOUNT_LOCKED: "errors.auth.account_locked",
-  SESSION_EXPIRED: "errors.auth.session_expired",
-  MFA_REQUIRED: "errors.auth.mfa_required",
-  PERMISSION_DENIED: "errors.rbac.permission_denied",
-  NOT_FOUND: "errors.general.not_found",
-  INTERNAL_ERROR: "errors.general.internal_error",
-  RATE_LIMITED: "errors.general.rate_limited",
-} as const;
-
 export const COMMON_KEYS = {
   SAVE: "common.buttons.save",
   CANCEL: "common.buttons.cancel",

package/src/index.ts

@@ -1,5 +1,4 @@
 // Composables
-export { useAuth } from "./composables/useAuth";
 export {
   useGrpc,
   initGrpc,
@@ -16,8 +15,15 @@ export {
   checkBffSession,
   startBffLogin,
   bffLogout,
+  bffCsrfToken,
   type BffUserInfo,
 } from "./composables/useBffAuth";
+export {
+  initAccountApi,
+  getAccountTransport,
+  closeAccountTransport,
+  type AccountApiConfig,
+} from "./composables/useAccountTransport";
 
 // Stores
 export { useAuthStore } from "./stores/auth";
@@ -48,17 +54,28 @@ export {
   type NormalizedPrincipal,
 } from "./utils/normalizePrincipal";
 
+export {
+  rpcRefusal,
+  rpcReason,
+  refusalMessage,
+  REFUSAL_TEXTS,
+  SID_ERROR_DOMAIN,
+  type RpcRefusal,
+} from "./utils/rpcRefusal";
+
 // Types
 export type { AuthState, SessionInfo, GrpcConfig } from "./types";
 
 // i18n key constants
-export { AUTH_KEYS, ERROR_KEYS, COMMON_KEYS } from "./i18n";
+export { AUTH_KEYS, COMMON_KEYS } from "./i18n";
 
 // Generated proto clients and types
 export { AuthServiceClient } from "./generated/sid/v1/authn/auth.client";
 export { IdentityServiceClient } from "./generated/sid/v1/identity/identity.client";
 export { AccountServiceClient } from "./generated/sid/v1/account/account.client";
 export { UpstreamServiceClient } from "./generated/sid/v1/federation/upstream.client";
+export { EnrollmentServiceClient } from "./generated/sid/v1/admin/enrollment.client";
+export type { InstanceStatus } from "./generated/sid/v1/admin/enrollment";
 
 // Re-export commonly used proto types
 export type {
@@ -103,9 +120,26 @@ export type {
   VerifyMagicLinkResponse,
   RequestPasswordResetResponse,
   VerifyPasswordResetResponse,
+  ExecutePasswordResetResponse,
   CompletePasswordResetResponse,
+  OpaqueZkppRegistrationStartResponse,
+  OpaqueZkppRegistrationFinishResponse,
+  PasswordChangeChallengeResponse,
+  PasswordChangeExecuteResponse,
+  PasswordChangeFinishResponse,
 } from "./generated/sid/v1/authn/auth";
 
+// Password operations: the history evaluator and the proof the finish carries
+export { PasswordHistoryEvaluatorServiceClient } from "./generated/sid/v1/authn/password_history.client";
+export type {
+  PasswordHistoryContext,
+  PasswordHistoryDomain,
+  PasswordHistoryEvaluation,
+  PasswordHistoryEvaluationProof,
+  PasswordRegistrationProof,
+} from "./generated/sid/v1/authn/password_history";
+export type { PasswordOperationId } from "./generated/sid/v1/ids/ids";
+
 export type {
   Profile,
   Session,

package/src/package-exports.test.ts

@@ -0,0 +1,18 @@
+import { describe, it, expect } from "vitest";
+import pkg from "../package.json";
+
+/**
+ * The root entry and the source subpaths (`./profile`, `./components`,
+ * `./quasar`) must load the same module graph for an ES module consumer.
+ * The subpaths are shipped as sources and import the root through
+ * `src/index.ts`; if the root resolved to the built `dist` instead, the app
+ * would hold two copies of the module state: the transports `initGrpc` and
+ * `initAccountApi` set, the BFF configuration `initBff` sets, and the
+ * profile composables would read the copy nobody initialized.
+ */
+describe("package exports", () => {
+  it("resolves the root to the sources the subpaths import", () => {
+    expect(pkg.exports["."].import).toBe("./src/index.ts");
+    expect(pkg.exports["./profile"].import).toBe("./src/profile/index.ts");
+  });
+});

package/src/profile/components/SidLoginForm.vue

@@ -38,6 +38,7 @@
           v-model="identifier"
           :disable="loading"
           :label="identifierLabel"
+          data-test="principal"
           @update:principal-type="principalType = $event"
         />
 
@@ -48,6 +49,7 @@
           outlined
           :disable="loading"
           :rules="[(v: string) => !!v || passwordRequiredText]"
+          data-test="password"
         >
           <template v-slot:prepend>
             <q-icon name="sym_o_lock" />
@@ -70,6 +72,7 @@
           class="full-width"
           :loading="loading"
           :disable="!identifier || !password"
+          data-test="submit"
         />
       </q-form>
 
@@ -115,7 +118,7 @@
 import { ref } from "vue";
 import { SidPrincipalInput } from "../../quasar";
 import type { PrincipalType } from "../../quasar";
-import { normalizePrincipal } from "../../index";
+import { normalizePrincipal, refusalMessage } from "../../index";
 
 void SidPrincipalInput;
 
@@ -220,7 +223,7 @@ async function onSubmit() {
     emit("success", result);
   } catch (e) {
     const err = e instanceof Error ? e : new Error("Login failed");
-    error.value = err.message;
+    error.value = refusalMessage(e, "Login failed");
     emit("error", err);
   } finally {
     loading.value = false;