@structured-id/ui-core 2.0.0 → 3.0.0

package/src/generated/sid/v1/authz/forward_auth.client.ts

@@ -1,97 +0,0 @@
-// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
-// @generated from protobuf file "sid/v1/authz/forward_auth.proto" (package "sid.v1.authz", syntax proto3)
-// tslint:disable
-import type { RpcTransport } from "@protobuf-ts/runtime-rpc";
-import type { ServiceInfo } from "@protobuf-ts/runtime-rpc";
-import { ForwardAuthService } from "./forward_auth";
-import { stackIntercept } from "@protobuf-ts/runtime-rpc";
-import type { HttpBody } from "../../../google/api/httpbody";
-import type { VerifyRequest } from "./forward_auth";
-import type { UnaryCall } from "@protobuf-ts/runtime-rpc";
-import type { RpcOptions } from "@protobuf-ts/runtime-rpc";
-/**
- * @generated from protobuf service sid.v1.authz.ForwardAuthService
- */
-export interface IForwardAuthServiceClient {
-    /**
-     * Decide whether the original request may reach `application`.
-     *
-     * The reverse proxy sub-requests `/auth/verify/{application}` with the
-     * original request's method, so the rule binds every method. The
-     * application comes from the address the proxy is configured with, never
-     * from anything the client sends; it names a protected application of the
-     * route configuration, which pins the registered resource (exact issuer
-     * and resource indicator) its access tokens must be issued for.
-     *
-     * Request metadata, as the proxy forwards the original request:
-     * `authorization` (`Bearer`, RFC 6750 §2.1, or `DPoP`, RFC 9449 §7.1),
-     * `dpop` (the proof, RFC 9449 §4), `x-original-uri` or `x-forwarded-uri`
-     * (path and query), `x-original-method` or `x-forwarded-method`.
-     *
-     * The decision is the HTTP answer the proxy acts on, carried in the
-     * `x-http-code` response metadata with an empty body:
-     * - 200: allowed; response metadata carries the identity headers of the
-     *   route (`x-forwarded-user` = the token's recipient-scoped `sub`,
-     *   `x-auth-request-*` for disclosed claims), which the proxy copies to
-     *   the upstream request after removing any client-supplied copies;
-     * - 401: no acceptable access token for this application, with
-     *   `www-authenticate` (a DPoP challenge when a sender constraint failed,
-     *   RFC 9449 §7.1) and, when a login URL is configured, `location`;
-     * - 403: authenticated but not allowed, or the application's resource is
-     *   not registered or not active.
-     * An application not in the route configuration is NOT_FOUND (ErrorInfo
-     * reason FORWARD_AUTH_APPLICATION_NOT_FOUND, ResourceInfo naming it); a
-     * registry or revocation check that cannot be answered is UNAVAILABLE. The
-     * proxy denies on both.
-     *
-     * @generated from protobuf rpc: Verify
-     */
-    verify(input: VerifyRequest, options?: RpcOptions): UnaryCall<VerifyRequest, HttpBody>;
-}
-/**
- * @generated from protobuf service sid.v1.authz.ForwardAuthService
- */
-export class ForwardAuthServiceClient implements IForwardAuthServiceClient, ServiceInfo {
-    typeName = ForwardAuthService.typeName;
-    methods = ForwardAuthService.methods;
-    options = ForwardAuthService.options;
-    constructor(private readonly _transport: RpcTransport) {
-    }
-    /**
-     * Decide whether the original request may reach `application`.
-     *
-     * The reverse proxy sub-requests `/auth/verify/{application}` with the
-     * original request's method, so the rule binds every method. The
-     * application comes from the address the proxy is configured with, never
-     * from anything the client sends; it names a protected application of the
-     * route configuration, which pins the registered resource (exact issuer
-     * and resource indicator) its access tokens must be issued for.
-     *
-     * Request metadata, as the proxy forwards the original request:
-     * `authorization` (`Bearer`, RFC 6750 §2.1, or `DPoP`, RFC 9449 §7.1),
-     * `dpop` (the proof, RFC 9449 §4), `x-original-uri` or `x-forwarded-uri`
-     * (path and query), `x-original-method` or `x-forwarded-method`.
-     *
-     * The decision is the HTTP answer the proxy acts on, carried in the
-     * `x-http-code` response metadata with an empty body:
-     * - 200: allowed; response metadata carries the identity headers of the
-     *   route (`x-forwarded-user` = the token's recipient-scoped `sub`,
-     *   `x-auth-request-*` for disclosed claims), which the proxy copies to
-     *   the upstream request after removing any client-supplied copies;
-     * - 401: no acceptable access token for this application, with
-     *   `www-authenticate` (a DPoP challenge when a sender constraint failed,
-     *   RFC 9449 §7.1) and, when a login URL is configured, `location`;
-     * - 403: authenticated but not allowed, or the application's resource is
-     *   not registered or not active.
-     * An application not in the route configuration is NOT_FOUND (ErrorInfo
-     * reason FORWARD_AUTH_APPLICATION_NOT_FOUND, ResourceInfo naming it); a
-     * registry or revocation check that cannot be answered is UNAVAILABLE. The
-     * proxy denies on both.
-     *
-     * @generated from protobuf rpc: Verify
-     */
-    verify(input: VerifyRequest, options?: RpcOptions): UnaryCall<VerifyRequest, HttpBody> {
-        const method = this.methods[0], opt = this._transport.mergeOptions(options);
-        return stackIntercept<VerifyRequest, HttpBody>("unary", this._transport, method, opt, input);
-    }
-}

package/src/generated/sid/v1/authz/forward_auth.ts

@@ -1,79 +0,0 @@
-// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
-// @generated from protobuf file "sid/v1/authz/forward_auth.proto" (package "sid.v1.authz", syntax proto3)
-// tslint:disable
-import { HttpBody } from "../../../google/api/httpbody";
-import { ServiceType } from "@protobuf-ts/runtime-rpc";
-import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
-import type { IBinaryWriter } from "@protobuf-ts/runtime";
-import { WireType } from "@protobuf-ts/runtime";
-import type { BinaryReadOptions } from "@protobuf-ts/runtime";
-import type { IBinaryReader } from "@protobuf-ts/runtime";
-import { UnknownFieldHandler } from "@protobuf-ts/runtime";
-import type { PartialMessage } from "@protobuf-ts/runtime";
-import { reflectionMergePartial } from "@protobuf-ts/runtime";
-import { MessageType } from "@protobuf-ts/runtime";
-/**
- * @generated from protobuf message sid.v1.authz.VerifyRequest
- */
-export interface VerifyRequest {
-    /**
-     * Name of the protected application in the route configuration: letters,
-     * digits, '-' and '_'. Set by the reverse proxy's configured address.
-     *
-     * @generated from protobuf field: string application = 1
-     */
-    application: string;
-}
-// @generated message type with reflection information, may provide speed optimized methods
-class VerifyRequest$Type extends MessageType<VerifyRequest> {
-    constructor() {
-        super("sid.v1.authz.VerifyRequest", [
-            { no: 1, name: "application", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<VerifyRequest>): VerifyRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.application = "";
-        if (value !== undefined)
-            reflectionMergePartial<VerifyRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: VerifyRequest): VerifyRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string application */ 1:
-                    message.application = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: VerifyRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string application = 1; */
-        if (message.application !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.application);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.VerifyRequest
- */
-export const VerifyRequest = new VerifyRequest$Type();
-/**
- * @generated ServiceType for protobuf service sid.v1.authz.ForwardAuthService
- */
-export const ForwardAuthService = new ServiceType("sid.v1.authz.ForwardAuthService", [
-    { name: "Verify", options: { "google.api.http": { custom: { kind: "*", path: "/auth/verify/{application}" } } }, I: VerifyRequest, O: HttpBody }
-]);

package/src/generated/sid/v1/authz/governance.client.ts

@@ -1,102 +0,0 @@
-// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
-// @generated from protobuf file "sid/v1/authz/governance.proto" (package "sid.v1.authz", syntax proto3)
-// tslint:disable
-import type { RpcTransport } from "@protobuf-ts/runtime-rpc";
-import type { ServiceInfo } from "@protobuf-ts/runtime-rpc";
-import { GovernanceService } from "./governance";
-import type { GrantTemporaryRoleResponse } from "./governance";
-import type { GrantTemporaryRoleRequest } from "./governance";
-import type { DecideRequestResponse } from "./governance";
-import type { DecideRequestRequest } from "./governance";
-import type { ListPendingRequestsResponse } from "./governance";
-import type { ListPendingRequestsRequest } from "./governance";
-import { stackIntercept } from "@protobuf-ts/runtime-rpc";
-import type { AccessRequestResponse } from "./governance";
-import type { AccessRequestMessage } from "./governance";
-import type { UnaryCall } from "@protobuf-ts/runtime-rpc";
-import type { RpcOptions } from "@protobuf-ts/runtime-rpc";
-// ────────────────────────────────────────────────────────────────────────────
-// GovernanceService: access lifecycle (4 RPCs)
-// SoD checks + role assignment listing → AuthzService (authz.proto)
-// ────────────────────────────────────────────────────────────────────────────
-
-/**
- * @generated from protobuf service sid.v1.authz.GovernanceService
- */
-export interface IGovernanceServiceClient {
-    /**
-     * Request access to a role/permission.
-     *
-     * @generated from protobuf rpc: RequestAccess
-     */
-    requestAccess(input: AccessRequestMessage, options?: RpcOptions): UnaryCall<AccessRequestMessage, AccessRequestResponse>;
-    /**
-     * List pending access requests (for approver dashboard).
-     *
-     * @generated from protobuf rpc: ListPendingRequests
-     */
-    listPendingRequests(input: ListPendingRequestsRequest, options?: RpcOptions): UnaryCall<ListPendingRequestsRequest, ListPendingRequestsResponse>;
-    /**
-     * Approve or deny an access request.
-     *
-     * @generated from protobuf rpc: DecideRequest
-     */
-    decideRequest(input: DecideRequestRequest, options?: RpcOptions): UnaryCall<DecideRequestRequest, DecideRequestResponse>;
-    /**
-     * Grant temporary role with auto-expiry.
-     *
-     * @generated from protobuf rpc: GrantTemporaryRole
-     */
-    grantTemporaryRole(input: GrantTemporaryRoleRequest, options?: RpcOptions): UnaryCall<GrantTemporaryRoleRequest, GrantTemporaryRoleResponse>;
-}
-// ────────────────────────────────────────────────────────────────────────────
-// GovernanceService: access lifecycle (4 RPCs)
-// SoD checks + role assignment listing → AuthzService (authz.proto)
-// ────────────────────────────────────────────────────────────────────────────
-
-/**
- * @generated from protobuf service sid.v1.authz.GovernanceService
- */
-export class GovernanceServiceClient implements IGovernanceServiceClient, ServiceInfo {
-    typeName = GovernanceService.typeName;
-    methods = GovernanceService.methods;
-    options = GovernanceService.options;
-    constructor(private readonly _transport: RpcTransport) {
-    }
-    /**
-     * Request access to a role/permission.
-     *
-     * @generated from protobuf rpc: RequestAccess
-     */
-    requestAccess(input: AccessRequestMessage, options?: RpcOptions): UnaryCall<AccessRequestMessage, AccessRequestResponse> {
-        const method = this.methods[0], opt = this._transport.mergeOptions(options);
-        return stackIntercept<AccessRequestMessage, AccessRequestResponse>("unary", this._transport, method, opt, input);
-    }
-    /**
-     * List pending access requests (for approver dashboard).
-     *
-     * @generated from protobuf rpc: ListPendingRequests
-     */
-    listPendingRequests(input: ListPendingRequestsRequest, options?: RpcOptions): UnaryCall<ListPendingRequestsRequest, ListPendingRequestsResponse> {
-        const method = this.methods[1], opt = this._transport.mergeOptions(options);
-        return stackIntercept<ListPendingRequestsRequest, ListPendingRequestsResponse>("unary", this._transport, method, opt, input);
-    }
-    /**
-     * Approve or deny an access request.
-     *
-     * @generated from protobuf rpc: DecideRequest
-     */
-    decideRequest(input: DecideRequestRequest, options?: RpcOptions): UnaryCall<DecideRequestRequest, DecideRequestResponse> {
-        const method = this.methods[2], opt = this._transport.mergeOptions(options);
-        return stackIntercept<DecideRequestRequest, DecideRequestResponse>("unary", this._transport, method, opt, input);
-    }
-    /**
-     * Grant temporary role with auto-expiry.
-     *
-     * @generated from protobuf rpc: GrantTemporaryRole
-     */
-    grantTemporaryRole(input: GrantTemporaryRoleRequest, options?: RpcOptions): UnaryCall<GrantTemporaryRoleRequest, GrantTemporaryRoleResponse> {
-        const method = this.methods[3], opt = this._transport.mergeOptions(options);
-        return stackIntercept<GrantTemporaryRoleRequest, GrantTemporaryRoleResponse>("unary", this._transport, method, opt, input);
-    }
-}