@tarkahq/sdk 0.0.0-stage → 0.3.0

package/dist/cjs/generated/tarka/iam/v1/iam.d.ts

@@ -0,0 +1,1291 @@
+import { BinaryReader, BinaryWriter } from "@bufbuild/protobuf/wire";
+import { Empty } from "../../../google/protobuf/empty.js";
+export declare const protobufPackage = "tarka.iam.v1";
+/**
+ * Copyright 2026 Tarka
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export interface Project {
+    id: string;
+    orgId: string;
+    realmId: string;
+    /** active, suspended, revoked, or provisioning; validated by resource kind. */
+    status: string;
+    /** Optimistic concurrency version, managed by the server. */
+    version: bigint;
+    createdAt: Date | undefined;
+    updatedAt: Date | undefined;
+    name: string;
+}
+export interface CreateProjectRequest {
+    orgId: string;
+    realmId: string;
+    project: Project | undefined;
+}
+export interface UpdateProjectRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    project: Project | undefined;
+    expectedVersion: bigint;
+}
+export interface GetProjectRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+}
+export interface DeleteProjectRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    expectedVersion: bigint;
+}
+export interface ListProjectsRequest {
+    orgId: string;
+    realmId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListProjectsResponse {
+    items: Project[];
+    nextPageToken: string;
+}
+export interface Realm {
+    id: string;
+    orgId: string;
+    realmId: string;
+    /** active, suspended, revoked, or provisioning; validated by resource kind. */
+    status: string;
+    /** Optimistic concurrency version, managed by the server. */
+    version: bigint;
+    createdAt: Date | undefined;
+    updatedAt: Date | undefined;
+    projectId: string;
+    environment: string;
+    tenantKey: string;
+    name: string;
+    /**
+     * Customer login policy. Optional client_registration has cimd/dcr booleans
+     * (default false) and allowed_audiences: exact published gateway API/MCP
+     * audiences in this realm. Public onboarding grants no permissions; users
+     * still approve consent and every action checks current authorization.
+     */
+    authentication: {
+        [key: string]: any;
+    } | undefined;
+    /** Output only: realm-specific authorization issuer. */
+    issuer: string;
+    /** Output only: current provisioning stage and a safe dependency error code. */
+    provisioningPhase: string;
+    provisioningError: string;
+}
+export interface CreateRealmRequest {
+    orgId: string;
+    realmId: string;
+    realm: Realm | undefined;
+}
+export interface UpdateRealmRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    realm: Realm | undefined;
+    expectedVersion: bigint;
+}
+export interface GetRealmRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+}
+export interface DeleteRealmRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    expectedVersion: bigint;
+}
+export interface ListRealmsRequest {
+    orgId: string;
+    realmId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListRealmsResponse {
+    items: Realm[];
+    nextPageToken: string;
+}
+export interface Principal {
+    id: string;
+    orgId: string;
+    realmId: string;
+    /** active, suspended, revoked, or provisioning; validated by resource kind. */
+    status: string;
+    /** Optimistic concurrency version, managed by the server. */
+    version: bigint;
+    createdAt: Date | undefined;
+    updatedAt: Date | undefined;
+    /** user, agent, or service. */
+    kind: string;
+    name: string;
+    externalId: string;
+    traits: {
+        [key: string]: any;
+    } | undefined;
+}
+export interface CreatePrincipalRequest {
+    orgId: string;
+    realmId: string;
+    principal: Principal | undefined;
+}
+export interface UpdatePrincipalRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    principal: Principal | undefined;
+    expectedVersion: bigint;
+}
+export interface GetPrincipalRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+}
+export interface DeletePrincipalRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    expectedVersion: bigint;
+}
+export interface ListPrincipalsRequest {
+    orgId: string;
+    realmId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListPrincipalsResponse {
+    items: Principal[];
+    nextPageToken: string;
+}
+export interface IdentityProvider {
+    id: string;
+    orgId: string;
+    realmId: string;
+    /** active, suspended, revoked, or provisioning; validated by resource kind. */
+    status: string;
+    /** Optimistic concurrency version, managed by the server. */
+    version: bigint;
+    createdAt: Date | undefined;
+    updatedAt: Date | undefined;
+    /** oidc, saml, or scim. */
+    protocol: string;
+    name: string;
+    /** Public configuration only. Credentials use the write-only secret endpoint. */
+    configuration: {
+        [key: string]: any;
+    } | undefined;
+    /**
+     * Output only: an OIDC client secret has been stored. This does not imply
+     * successful provider reconciliation or a completed sign-in test.
+     */
+    credentialConfigured: boolean;
+}
+export interface UploadIdentityProviderSecretRequest {
+    orgId: string;
+    realmId: string;
+    providerId: string;
+    expectedVersion: bigint;
+    /** Write only. OIDC client secret, stored in the environment's vault. */
+    clientSecret: string;
+}
+export interface CreateIdentityProviderRequest {
+    orgId: string;
+    realmId: string;
+    identityProvider: IdentityProvider | undefined;
+}
+export interface UpdateIdentityProviderRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    identityProvider: IdentityProvider | undefined;
+    expectedVersion: bigint;
+}
+export interface GetIdentityProviderRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+}
+export interface DeleteIdentityProviderRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    expectedVersion: bigint;
+}
+export interface ListIdentityProvidersRequest {
+    orgId: string;
+    realmId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListIdentityProvidersResponse {
+    items: IdentityProvider[];
+    nextPageToken: string;
+}
+export interface Role {
+    id: string;
+    orgId: string;
+    realmId: string;
+    /** active, suspended, revoked, or provisioning; validated by resource kind. */
+    status: string;
+    /** Optimistic concurrency version, managed by the server. */
+    version: bigint;
+    createdAt: Date | undefined;
+    updatedAt: Date | undefined;
+    name: string;
+    members: string[];
+    permissions: Permission[];
+}
+export interface CreateRoleRequest {
+    orgId: string;
+    realmId: string;
+    role: Role | undefined;
+}
+export interface UpdateRoleRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    role: Role | undefined;
+    expectedVersion: bigint;
+}
+export interface GetRoleRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+}
+export interface DeleteRoleRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    expectedVersion: bigint;
+}
+export interface ListRolesRequest {
+    orgId: string;
+    realmId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListRolesResponse {
+    items: Role[];
+    nextPageToken: string;
+}
+export interface Grant {
+    id: string;
+    orgId: string;
+    realmId: string;
+    /** active, suspended, revoked, or provisioning; validated by resource kind. */
+    status: string;
+    /** Optimistic concurrency version, managed by the server. */
+    version: bigint;
+    createdAt: Date | undefined;
+    updatedAt: Date | undefined;
+    subjectId: string;
+    actorId: string;
+    permissions: Permission[];
+    expiresAt: Date | undefined;
+}
+export interface CreateGrantRequest {
+    orgId: string;
+    realmId: string;
+    grant: Grant | undefined;
+}
+export interface UpdateGrantRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    grant: Grant | undefined;
+    expectedVersion: bigint;
+}
+export interface GetGrantRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+}
+export interface DeleteGrantRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    expectedVersion: bigint;
+}
+export interface ListGrantsRequest {
+    orgId: string;
+    realmId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListGrantsResponse {
+    items: Grant[];
+    nextPageToken: string;
+}
+export interface Run {
+    id: string;
+    orgId: string;
+    realmId: string;
+    /** Output only: running, completed, failed, cancelled, invalidated, or revoked. */
+    status: string;
+    /** Optimistic concurrency version, managed by the server. */
+    version: bigint;
+    createdAt: Date | undefined;
+    updatedAt: Date | undefined;
+    subjectId: string;
+    actorId: string;
+    grantId: string;
+    conversationId: string;
+    policyRevision: bigint;
+    /** Output only: the immutable capability subset requested by the trusted harness. */
+    permissions: Permission[];
+    gatewayId: string;
+    transport: string;
+    expiresAt: Date | undefined;
+    terminalReason: string;
+}
+export interface CreateRunRequest {
+    orgId: string;
+    realmId: string;
+    run: Run | undefined;
+}
+export interface UpdateRunRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    run: Run | undefined;
+    expectedVersion: bigint;
+}
+export interface GetRunRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+}
+export interface DeleteRunRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    expectedVersion: bigint;
+}
+export interface ListRunsRequest {
+    orgId: string;
+    realmId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListRunsResponse {
+    items: Run[];
+    nextPageToken: string;
+}
+/** Directory data is observed provider state, never an automatic grant. */
+export interface DirectoryUser {
+    sourceId: string;
+    externalId: string;
+    principalId: string;
+    name: string;
+    email: string;
+    department: string;
+    providerRoles: string[];
+    /** Provider activation, distinct from an operator's principal restriction. */
+    active: boolean;
+    present: boolean;
+    principalStatus: string;
+}
+export interface DirectoryGroup {
+    sourceId: string;
+    name: string;
+    present: boolean;
+    memberCount: bigint;
+}
+export interface DirectoryStatus {
+    providerId: string;
+    realmId: string;
+    /** pending, syncing, current, stale, or blocked. Output only. */
+    syncState: string;
+    requestedGeneration: bigint;
+    appliedGeneration: bigint;
+    lastSyncedAt: Date | undefined;
+    nextAttemptAt: Date | undefined;
+    validUntil: Date | undefined;
+    errorCode: string;
+}
+export interface GetDirectoryStatusRequest {
+    orgId: string;
+    realmId: string;
+    providerId: string;
+}
+/**
+ * Customer SCIM credentials authenticate only this provider's directory API.
+ * Native provider credentials are internal and never returned by these methods.
+ */
+export interface DirectoryConnection {
+    providerId: string;
+    realmId: string;
+    endpoint: string;
+    /** Zero until the first token is generated. Independent of provider version. */
+    credentialVersion: bigint;
+    providerVersion: bigint;
+    ready: boolean;
+    credentialConfigured: boolean;
+}
+export interface GetDirectoryConnectionRequest {
+    orgId: string;
+    realmId: string;
+    providerId: string;
+}
+export interface RotateDirectoryTokenRequest {
+    orgId: string;
+    realmId: string;
+    providerId: string;
+    /** Current credential_version, or zero to generate the initial token. */
+    expectedVersion: bigint;
+}
+export interface DirectoryTokenRegistration {
+    connection: DirectoryConnection | undefined;
+    /** Returned once on successful generation/rotation; never returned by Get/List. */
+    token: string;
+}
+export interface ListDirectoryUsersRequest {
+    orgId: string;
+    realmId: string;
+    providerId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListDirectoryUsersResponse {
+    items: DirectoryUser[];
+    nextPageToken: string;
+}
+export interface ListDirectoryGroupsRequest {
+    orgId: string;
+    realmId: string;
+    providerId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListDirectoryGroupsResponse {
+    items: DirectoryGroup[];
+    nextPageToken: string;
+}
+export interface ListDirectoryGroupMembersRequest {
+    orgId: string;
+    realmId: string;
+    providerId: string;
+    groupId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface DirectoryRoleBinding {
+    providerId: string;
+    /** group (stable group ID), department, or provider_role (exact value). */
+    kind: string;
+    value: string;
+}
+export interface DirectoryRoleBindings {
+    roleId: string;
+    roleVersion: bigint;
+    bindings: DirectoryRoleBinding[];
+}
+export interface GetDirectoryRoleBindingsRequest {
+    orgId: string;
+    realmId: string;
+    roleId: string;
+}
+export interface ReplaceDirectoryRoleBindingsRequest {
+    orgId: string;
+    realmId: string;
+    roleId: string;
+    expectedVersion: bigint;
+    /** Replaces directory selectors; manual role members stay separate. */
+    bindings: DirectoryRoleBinding[];
+}
+export interface Permission {
+    resource: string;
+    action: string;
+}
+export interface CheckPermissionRequest {
+    orgId: string;
+    realmId: string;
+    subjectId: string;
+    actorId: string;
+    grantId: string;
+    resource: string;
+    action: string;
+}
+export interface CheckPermissionResponse {
+    allowed: boolean;
+    reason: string;
+    policyRevision: bigint;
+}
+/** A client belongs to one realm. Credentials are never returned by Get/List. */
+export interface OAuthClient {
+    id: string;
+    orgId: string;
+    realmId: string;
+    clientId: string;
+    status: string;
+    version: bigint;
+    name: string;
+    /** public, confidential, or autonomous. Autonomous clients require an agent. */
+    kind: string;
+    agentId: string;
+    redirectUris: string[];
+    /** Exact gateway or realm runtime resource URIs, never URL prefixes. */
+    allowedAudiences: string[];
+    scopes: string[];
+    createdAt: Date | undefined;
+    updatedAt: Date | undefined;
+    /** Output only: registered, cimd, or dcr. */
+    registrationMethod: string;
+}
+export interface CreateOAuthClientRequest {
+    orgId: string;
+    realmId: string;
+    oauthClient: OAuthClient | undefined;
+}
+export interface OAuthClientRegistration {
+    oauthClient: OAuthClient | undefined;
+    /** Returned once on creation/rotation for confidential/autonomous clients. */
+    clientSecret: string;
+}
+export interface GetOAuthClientRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+}
+export interface ListOAuthClientsRequest {
+    orgId: string;
+    realmId: string;
+    pageSize: number;
+    pageToken: string;
+}
+export interface ListOAuthClientsResponse {
+    items: OAuthClient[];
+    nextPageToken: string;
+}
+export interface DeleteOAuthClientRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    expectedVersion: bigint;
+}
+export interface RotateOAuthClientSecretRequest {
+    orgId: string;
+    realmId: string;
+    id: string;
+    expectedVersion: bigint;
+}
+export declare const Project: MessageFns<Project>;
+export declare const CreateProjectRequest: MessageFns<CreateProjectRequest>;
+export declare const UpdateProjectRequest: MessageFns<UpdateProjectRequest>;
+export declare const GetProjectRequest: MessageFns<GetProjectRequest>;
+export declare const DeleteProjectRequest: MessageFns<DeleteProjectRequest>;
+export declare const ListProjectsRequest: MessageFns<ListProjectsRequest>;
+export declare const ListProjectsResponse: MessageFns<ListProjectsResponse>;
+export declare const Realm: MessageFns<Realm>;
+export declare const CreateRealmRequest: MessageFns<CreateRealmRequest>;
+export declare const UpdateRealmRequest: MessageFns<UpdateRealmRequest>;
+export declare const GetRealmRequest: MessageFns<GetRealmRequest>;
+export declare const DeleteRealmRequest: MessageFns<DeleteRealmRequest>;
+export declare const ListRealmsRequest: MessageFns<ListRealmsRequest>;
+export declare const ListRealmsResponse: MessageFns<ListRealmsResponse>;
+export declare const Principal: MessageFns<Principal>;
+export declare const CreatePrincipalRequest: MessageFns<CreatePrincipalRequest>;
+export declare const UpdatePrincipalRequest: MessageFns<UpdatePrincipalRequest>;
+export declare const GetPrincipalRequest: MessageFns<GetPrincipalRequest>;
+export declare const DeletePrincipalRequest: MessageFns<DeletePrincipalRequest>;
+export declare const ListPrincipalsRequest: MessageFns<ListPrincipalsRequest>;
+export declare const ListPrincipalsResponse: MessageFns<ListPrincipalsResponse>;
+export declare const IdentityProvider: MessageFns<IdentityProvider>;
+export declare const UploadIdentityProviderSecretRequest: MessageFns<UploadIdentityProviderSecretRequest>;
+export declare const CreateIdentityProviderRequest: MessageFns<CreateIdentityProviderRequest>;
+export declare const UpdateIdentityProviderRequest: MessageFns<UpdateIdentityProviderRequest>;
+export declare const GetIdentityProviderRequest: MessageFns<GetIdentityProviderRequest>;
+export declare const DeleteIdentityProviderRequest: MessageFns<DeleteIdentityProviderRequest>;
+export declare const ListIdentityProvidersRequest: MessageFns<ListIdentityProvidersRequest>;
+export declare const ListIdentityProvidersResponse: MessageFns<ListIdentityProvidersResponse>;
+export declare const Role: MessageFns<Role>;
+export declare const CreateRoleRequest: MessageFns<CreateRoleRequest>;
+export declare const UpdateRoleRequest: MessageFns<UpdateRoleRequest>;
+export declare const GetRoleRequest: MessageFns<GetRoleRequest>;
+export declare const DeleteRoleRequest: MessageFns<DeleteRoleRequest>;
+export declare const ListRolesRequest: MessageFns<ListRolesRequest>;
+export declare const ListRolesResponse: MessageFns<ListRolesResponse>;
+export declare const Grant: MessageFns<Grant>;
+export declare const CreateGrantRequest: MessageFns<CreateGrantRequest>;
+export declare const UpdateGrantRequest: MessageFns<UpdateGrantRequest>;
+export declare const GetGrantRequest: MessageFns<GetGrantRequest>;
+export declare const DeleteGrantRequest: MessageFns<DeleteGrantRequest>;
+export declare const ListGrantsRequest: MessageFns<ListGrantsRequest>;
+export declare const ListGrantsResponse: MessageFns<ListGrantsResponse>;
+export declare const Run: MessageFns<Run>;
+export declare const CreateRunRequest: MessageFns<CreateRunRequest>;
+export declare const UpdateRunRequest: MessageFns<UpdateRunRequest>;
+export declare const GetRunRequest: MessageFns<GetRunRequest>;
+export declare const DeleteRunRequest: MessageFns<DeleteRunRequest>;
+export declare const ListRunsRequest: MessageFns<ListRunsRequest>;
+export declare const ListRunsResponse: MessageFns<ListRunsResponse>;
+export declare const DirectoryUser: MessageFns<DirectoryUser>;
+export declare const DirectoryGroup: MessageFns<DirectoryGroup>;
+export declare const DirectoryStatus: MessageFns<DirectoryStatus>;
+export declare const GetDirectoryStatusRequest: MessageFns<GetDirectoryStatusRequest>;
+export declare const DirectoryConnection: MessageFns<DirectoryConnection>;
+export declare const GetDirectoryConnectionRequest: MessageFns<GetDirectoryConnectionRequest>;
+export declare const RotateDirectoryTokenRequest: MessageFns<RotateDirectoryTokenRequest>;
+export declare const DirectoryTokenRegistration: MessageFns<DirectoryTokenRegistration>;
+export declare const ListDirectoryUsersRequest: MessageFns<ListDirectoryUsersRequest>;
+export declare const ListDirectoryUsersResponse: MessageFns<ListDirectoryUsersResponse>;
+export declare const ListDirectoryGroupsRequest: MessageFns<ListDirectoryGroupsRequest>;
+export declare const ListDirectoryGroupsResponse: MessageFns<ListDirectoryGroupsResponse>;
+export declare const ListDirectoryGroupMembersRequest: MessageFns<ListDirectoryGroupMembersRequest>;
+export declare const DirectoryRoleBinding: MessageFns<DirectoryRoleBinding>;
+export declare const DirectoryRoleBindings: MessageFns<DirectoryRoleBindings>;
+export declare const GetDirectoryRoleBindingsRequest: MessageFns<GetDirectoryRoleBindingsRequest>;
+export declare const ReplaceDirectoryRoleBindingsRequest: MessageFns<ReplaceDirectoryRoleBindingsRequest>;
+export declare const Permission: MessageFns<Permission>;
+export declare const CheckPermissionRequest: MessageFns<CheckPermissionRequest>;
+export declare const CheckPermissionResponse: MessageFns<CheckPermissionResponse>;
+export declare const OAuthClient: MessageFns<OAuthClient>;
+export declare const CreateOAuthClientRequest: MessageFns<CreateOAuthClientRequest>;
+export declare const OAuthClientRegistration: MessageFns<OAuthClientRegistration>;
+export declare const GetOAuthClientRequest: MessageFns<GetOAuthClientRequest>;
+export declare const ListOAuthClientsRequest: MessageFns<ListOAuthClientsRequest>;
+export declare const ListOAuthClientsResponse: MessageFns<ListOAuthClientsResponse>;
+export declare const DeleteOAuthClientRequest: MessageFns<DeleteOAuthClientRequest>;
+export declare const RotateOAuthClientSecretRequest: MessageFns<RotateOAuthClientSecretRequest>;
+export type IAMServiceDefinition = typeof IAMServiceDefinition;
+export declare const IAMServiceDefinition: {
+    readonly name: "IAMService";
+    readonly fullName: "tarka.iam.v1.IAMService";
+    readonly methods: {
+        readonly getDirectoryConnection: {
+            readonly name: "GetDirectoryConnection";
+            readonly requestType: typeof GetDirectoryConnectionRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof DirectoryConnection;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly rotateDirectoryToken: {
+            readonly name: "RotateDirectoryToken";
+            readonly requestType: typeof RotateDirectoryTokenRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof DirectoryTokenRegistration;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly uploadIdentityProviderSecret: {
+            readonly name: "UploadIdentityProviderSecret";
+            readonly requestType: typeof UploadIdentityProviderSecretRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof IdentityProvider;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getDirectoryStatus: {
+            readonly name: "GetDirectoryStatus";
+            readonly requestType: typeof GetDirectoryStatusRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof DirectoryStatus;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listDirectoryUsers: {
+            readonly name: "ListDirectoryUsers";
+            readonly requestType: typeof ListDirectoryUsersRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListDirectoryUsersResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listDirectoryGroups: {
+            readonly name: "ListDirectoryGroups";
+            readonly requestType: typeof ListDirectoryGroupsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListDirectoryGroupsResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listDirectoryGroupMembers: {
+            readonly name: "ListDirectoryGroupMembers";
+            readonly requestType: typeof ListDirectoryGroupMembersRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListDirectoryUsersResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getDirectoryRoleBindings: {
+            readonly name: "GetDirectoryRoleBindings";
+            readonly requestType: typeof GetDirectoryRoleBindingsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof DirectoryRoleBindings;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly replaceDirectoryRoleBindings: {
+            readonly name: "ReplaceDirectoryRoleBindings";
+            readonly requestType: typeof ReplaceDirectoryRoleBindingsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof DirectoryRoleBindings;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly createOAuthClient: {
+            readonly name: "CreateOAuthClient";
+            readonly requestType: typeof CreateOAuthClientRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof OAuthClientRegistration;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getOAuthClient: {
+            readonly name: "GetOAuthClient";
+            readonly requestType: typeof GetOAuthClientRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof OAuthClient;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listOAuthClients: {
+            readonly name: "ListOAuthClients";
+            readonly requestType: typeof ListOAuthClientsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListOAuthClientsResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly deleteOAuthClient: {
+            readonly name: "DeleteOAuthClient";
+            readonly requestType: typeof DeleteOAuthClientRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Empty;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly rotateOAuthClientSecret: {
+            readonly name: "RotateOAuthClientSecret";
+            readonly requestType: typeof RotateOAuthClientSecretRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof OAuthClientRegistration;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly createProject: {
+            readonly name: "CreateProject";
+            readonly requestType: typeof CreateProjectRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Project;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly updateProject: {
+            readonly name: "UpdateProject";
+            readonly requestType: typeof UpdateProjectRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Project;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getProject: {
+            readonly name: "GetProject";
+            readonly requestType: typeof GetProjectRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Project;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly deleteProject: {
+            readonly name: "DeleteProject";
+            readonly requestType: typeof DeleteProjectRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Empty;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listProjects: {
+            readonly name: "ListProjects";
+            readonly requestType: typeof ListProjectsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListProjectsResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly createRealm: {
+            readonly name: "CreateRealm";
+            readonly requestType: typeof CreateRealmRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Realm;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly updateRealm: {
+            readonly name: "UpdateRealm";
+            readonly requestType: typeof UpdateRealmRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Realm;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getRealm: {
+            readonly name: "GetRealm";
+            readonly requestType: typeof GetRealmRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Realm;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly deleteRealm: {
+            readonly name: "DeleteRealm";
+            readonly requestType: typeof DeleteRealmRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Empty;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listRealms: {
+            readonly name: "ListRealms";
+            readonly requestType: typeof ListRealmsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListRealmsResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly createPrincipal: {
+            readonly name: "CreatePrincipal";
+            readonly requestType: typeof CreatePrincipalRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Principal;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly updatePrincipal: {
+            readonly name: "UpdatePrincipal";
+            readonly requestType: typeof UpdatePrincipalRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Principal;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getPrincipal: {
+            readonly name: "GetPrincipal";
+            readonly requestType: typeof GetPrincipalRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Principal;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly deletePrincipal: {
+            readonly name: "DeletePrincipal";
+            readonly requestType: typeof DeletePrincipalRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Empty;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listPrincipals: {
+            readonly name: "ListPrincipals";
+            readonly requestType: typeof ListPrincipalsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListPrincipalsResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly createIdentityProvider: {
+            readonly name: "CreateIdentityProvider";
+            readonly requestType: typeof CreateIdentityProviderRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof IdentityProvider;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly updateIdentityProvider: {
+            readonly name: "UpdateIdentityProvider";
+            readonly requestType: typeof UpdateIdentityProviderRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof IdentityProvider;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getIdentityProvider: {
+            readonly name: "GetIdentityProvider";
+            readonly requestType: typeof GetIdentityProviderRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof IdentityProvider;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly deleteIdentityProvider: {
+            readonly name: "DeleteIdentityProvider";
+            readonly requestType: typeof DeleteIdentityProviderRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Empty;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listIdentityProviders: {
+            readonly name: "ListIdentityProviders";
+            readonly requestType: typeof ListIdentityProvidersRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListIdentityProvidersResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly createRole: {
+            readonly name: "CreateRole";
+            readonly requestType: typeof CreateRoleRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Role;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly updateRole: {
+            readonly name: "UpdateRole";
+            readonly requestType: typeof UpdateRoleRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Role;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getRole: {
+            readonly name: "GetRole";
+            readonly requestType: typeof GetRoleRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Role;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly deleteRole: {
+            readonly name: "DeleteRole";
+            readonly requestType: typeof DeleteRoleRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Empty;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listRoles: {
+            readonly name: "ListRoles";
+            readonly requestType: typeof ListRolesRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListRolesResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly createGrant: {
+            readonly name: "CreateGrant";
+            readonly requestType: typeof CreateGrantRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Grant;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly updateGrant: {
+            readonly name: "UpdateGrant";
+            readonly requestType: typeof UpdateGrantRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Grant;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getGrant: {
+            readonly name: "GetGrant";
+            readonly requestType: typeof GetGrantRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Grant;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly deleteGrant: {
+            readonly name: "DeleteGrant";
+            readonly requestType: typeof DeleteGrantRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Empty;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listGrants: {
+            readonly name: "ListGrants";
+            readonly requestType: typeof ListGrantsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListGrantsResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        /**
+         * Unsupported for identity issuance. Use the authenticated runtime HTTP lifecycle.
+         *
+         * @deprecated
+         */
+        readonly createRun: {
+            readonly name: "CreateRun";
+            readonly requestType: typeof CreateRunRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Run;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        /**
+         * Runs are immutable outside the authenticated runtime lifecycle.
+         *
+         * @deprecated
+         */
+        readonly updateRun: {
+            readonly name: "UpdateRun";
+            readonly requestType: typeof UpdateRunRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Run;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly getRun: {
+            readonly name: "GetRun";
+            readonly requestType: typeof GetRunRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Run;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly deleteRun: {
+            readonly name: "DeleteRun";
+            readonly requestType: typeof DeleteRunRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof Empty;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly listRuns: {
+            readonly name: "ListRuns";
+            readonly requestType: typeof ListRunsRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof ListRunsResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+        readonly checkPermission: {
+            readonly name: "CheckPermission";
+            readonly requestType: typeof CheckPermissionRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof CheckPermissionResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Buffer<ArrayBufferLike>];
+                };
+            };
+        };
+    };
+};
+type Builtin = Date | Function | Uint8Array | string | number | boolean | bigint | undefined;
+export type DeepPartial<T> = T extends bigint ? string | number | bigint : T extends Builtin ? T : T extends globalThis.Array<infer U> ? globalThis.Array<DeepPartial<U>> : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial<U>> : T extends {
+    $case: string;
+    value: unknown;
+} ? {
+    $case: T["$case"];
+    value?: DeepPartial<T["value"]>;
+} : T extends {} ? {
+    [K in keyof T]?: DeepPartial<T[K]>;
+} : Partial<T>;
+export interface MessageFns<T> {
+    encode(message: T, writer?: BinaryWriter): BinaryWriter;
+    decode(input: BinaryReader | Uint8Array, length?: number): T;
+    fromJSON(object: any): T;
+    toJSON(message: T): unknown;
+    create(base?: DeepPartial<T>): T;
+    fromPartial(object: DeepPartial<T>): T;
+}
+export {};