meshtrade 1.23.0__py3-none-any.whl → 1.24.0__py3-none-any.whl

meshtrade/compliance/client/v1/__init__.py

@@ -55,6 +55,13 @@ from .service_meshpy import (
 #
 # ===================================================================
 
+from .client_roles import (
+    get_client_default_role_index,
+    get_client_default_roles,
+    must_get_client_default_role_index,
+    must_get_client_default_roles,
+)
+
 # ===================================================================
 # MODULE EXPORTS
 # ===================================================================
@@ -84,4 +91,9 @@ __all__ = [
     "TaxResidency",
     "Trust",
     "VerificationStatus",
+    # Manual exports
+    "get_client_default_role_index",
+    "get_client_default_roles",
+    "must_get_client_default_role_index",
+    "must_get_client_default_roles",
 ]

meshtrade/compliance/client/v1/service_meshpy.py

@@ -9,6 +9,7 @@ the service interface with resource management capabilities, providing authentic
 timeouts, and proper connection handling.
 """
 
+from collections.abc import Iterator
 from datetime import timedelta
 from typing import Optional
 

meshtrade/iam/api_user/v1/__init__.py

@@ -17,14 +17,14 @@ from .api_credentials_pb2 import APICredentials
 from .api_user_pb2 import APIUser, APIUserAction, APIUserState
 from .service_pb2 import (
     ActivateApiUserRequest,
-    AssignRoleToAPIUserRequest,
+    AssignRolesToAPIUserRequest,
     CreateApiUserRequest,
     DeactivateApiUserRequest,
     GetApiUserByKeyHashRequest,
     GetApiUserRequest,
     ListApiUsersRequest,
     ListApiUsersResponse,
-    RevokeRoleFromAPIUserRequest,
+    RevokeRolesFromAPIUserRequest,
     SearchApiUsersRequest,
     SearchApiUsersResponse,
 )
@@ -62,7 +62,10 @@ from meshtrade.common import (
 from .api_credentials import (
     MESH_API_CREDENTIALS_ENV_VAR,
     api_credentials_from_environment,
+    default_credentials_path,
+    find_credentials,
     load_api_credentials_from_file,
+    load_default_credentials,
 )
 
 # ===================================================================
@@ -79,14 +82,14 @@ __all__ = [
     "ApiUserService",
     "ApiUserServiceGRPCClient",
     "ApiUserServiceGRPCClientInterface",
-    "AssignRoleToAPIUserRequest",
+    "AssignRolesToAPIUserRequest",
     "CreateApiUserRequest",
     "DeactivateApiUserRequest",
     "GetApiUserByKeyHashRequest",
     "GetApiUserRequest",
     "ListApiUsersRequest",
     "ListApiUsersResponse",
-    "RevokeRoleFromAPIUserRequest",
+    "RevokeRolesFromAPIUserRequest",
     "SearchApiUsersRequest",
     "SearchApiUsersResponse",
     # Manual exports
@@ -97,5 +100,8 @@ __all__ = [
     "MESH_API_CREDENTIALS_ENV_VAR",
     "api_credentials_from_environment",
     "create_auth_metadata",
+    "default_credentials_path",
+    "find_credentials",
     "load_api_credentials_from_file",
+    "load_default_credentials",
 ]

meshtrade/iam/api_user/v1/api_user_pb2.py

@@ -25,7 +25,7 @@ _sym_db = _symbol_database.Default()
 from buf.validate import validate_pb2 as buf_dot_validate_dot_validate__pb2
 
 
-DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n(meshtrade/iam/api_user/v1/api_user.proto\x12\x19meshtrade.iam.api_user.v1\x1a\x1b\x62uf/validate/validate.proto\"\x97\x06\n\x07\x41PIUser\x12\xc2\x01\n\x04name\x18\x01 \x01(\tB\xad\x01\xbaH\xa9\x01\xba\x01\xa5\x01\n\x14name.format.optional\x12\x36name must be empty or in the format api_users/{ULIDv2}\x1aUsize(this) == 0 || this.matches(\'^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\')R\x04name\x12R\n\x05owner\x18\x02 \x01(\tB<\xbaH9r42/^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01!\xc8\x01\x01R\x05owner\x12\xb4\x01\n\x0c\x64isplay_name\x18\x04 \x01(\tB\x90\x01\xbaH\x8c\x01r\x05\x10\x01\x18\xff\x01\xba\x01\x7f\n\x15\x64isplay_name.required\x12\x41\x64isplay name is required and must be between 1 and 255 characters\x1a#size(this) > 0 && size(this) <= 255\xc8\x01\x01R\x0b\x64isplayName\x12\xbe\x01\n\x05state\x18\x05 \x01(\x0e\x32\'.meshtrade.iam.api_user.v1.APIUserStateB\x7f\xbaH|\x82\x01\x02\x10\x01\xba\x01t\n\x0bstate.valid\x12/state must be a valid APIUserState if specified\x1a\x34int(this) == 0 || (int(this) >= 1 && int(this) <= 2)R\x05state\x12\x62\n\x05roles\x18\x06 \x03(\tBL\xbaHI\x92\x01\x46\"DrB2=^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/[1-9][0-9]{6}$\x98\x01)R\x05roles\x12\x17\n\x07\x61pi_key\x18\x07 \x01(\tR\x06\x61piKey*f\n\x0c\x41PIUserState\x12\x1e\n\x1a\x41PI_USER_STATE_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41PI_USER_STATE_ACTIVE\x10\x01\x12\x1b\n\x17\x41PI_USER_STATE_INACTIVE\x10\x02*\xa6\x01\n\rAPIUserAction\x12\x1f\n\x1b\x41PI_USER_ACTION_UNSPECIFIED\x10\x00\x12\x1c\n\x18\x41PI_USER_ACTION_ACTIVATE\x10\x01\x12\x1e\n\x1a\x41PI_USER_ACTION_DEACTIVATE\x10\x02\x12\x1a\n\x16\x41PI_USER_ACTION_CREATE\x10\x03\x12\x1a\n\x16\x41PI_USER_ACTION_UPDATE\x10\x04\x42[\n co.meshtrade.api.iam.api_user.v1Z7github.com/meshtrade/api/go/iam/api_user/v1;api_user_v1b\x06proto3')
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n(meshtrade/iam/api_user/v1/api_user.proto\x12\x19meshtrade.iam.api_user.v1\x1a\x1b\x62uf/validate/validate.proto\"\xa0\x06\n\x07\x41PIUser\x12\xc2\x01\n\x04name\x18\x01 \x01(\tB\xad\x01\xbaH\xa9\x01\xba\x01\xa5\x01\n\x14name.format.optional\x12\x36name must be empty or in the format api_users/{ULIDv2}\x1aUsize(this) == 0 || this.matches(\'^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\')R\x04name\x12R\n\x05owner\x18\x02 \x01(\tB<\xbaH9r42/^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01!\xc8\x01\x01R\x05owner\x12\xb4\x01\n\x0c\x64isplay_name\x18\x03 \x01(\tB\x90\x01\xbaH\x8c\x01r\x05\x10\x01\x18\xff\x01\xba\x01\x7f\n\x15\x64isplay_name.required\x12\x41\x64isplay name is required and must be between 1 and 255 characters\x1a#size(this) > 0 && size(this) <= 255\xc8\x01\x01R\x0b\x64isplayName\x12\xbe\x01\n\x05state\x18\x04 \x01(\x0e\x32\'.meshtrade.iam.api_user.v1.APIUserStateB\x7f\xbaH|\x82\x01\x02\x10\x01\xba\x01t\n\x0bstate.valid\x12/state must be a valid APIUserState if specified\x1a\x34int(this) == 0 || (int(this) >= 1 && int(this) <= 2)R\x05state\x12k\n\x05roles\x18\x05 \x03(\tBU\xbaHR\x92\x01O\"MrK\x10/\x18\x30\x32\x45^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/roles/[1-9][0-9]{6,7}$R\x05roles\x12\x17\n\x07\x61pi_key\x18\x06 \x01(\tR\x06\x61piKey*f\n\x0c\x41PIUserState\x12\x1e\n\x1a\x41PI_USER_STATE_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41PI_USER_STATE_ACTIVE\x10\x01\x12\x1b\n\x17\x41PI_USER_STATE_INACTIVE\x10\x02*\xa6\x01\n\rAPIUserAction\x12\x1f\n\x1b\x41PI_USER_ACTION_UNSPECIFIED\x10\x00\x12\x1c\n\x18\x41PI_USER_ACTION_ACTIVATE\x10\x01\x12\x1e\n\x1a\x41PI_USER_ACTION_DEACTIVATE\x10\x02\x12\x1a\n\x16\x41PI_USER_ACTION_CREATE\x10\x03\x12\x1a\n\x16\x41PI_USER_ACTION_UPDATE\x10\x04\x42[\n co.meshtrade.api.iam.api_user.v1Z7github.com/meshtrade/api/go/iam/api_user/v1;api_user_v1b\x06proto3')
 
 _globals = globals()
 _builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
@@ -42,11 +42,11 @@ if not _descriptor._USE_C_DESCRIPTORS:
   _globals['_APIUSER'].fields_by_name['state']._loaded_options = None
   _globals['_APIUSER'].fields_by_name['state']._serialized_options = b'\272H|\202\001\002\020\001\272\001t\n\013state.valid\022/state must be a valid APIUserState if specified\0324int(this) == 0 || (int(this) >= 1 && int(this) <= 2)'
   _globals['_APIUSER'].fields_by_name['roles']._loaded_options = None
-  _globals['_APIUSER'].fields_by_name['roles']._serialized_options = b'\272HI\222\001F\"DrB2=^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/[1-9][0-9]{6}$\230\001)'
-  _globals['_APIUSERSTATE']._serialized_start=894
-  _globals['_APIUSERSTATE']._serialized_end=996
-  _globals['_APIUSERACTION']._serialized_start=999
-  _globals['_APIUSERACTION']._serialized_end=1165
+  _globals['_APIUSER'].fields_by_name['roles']._serialized_options = b'\272HR\222\001O\"MrK\020/\03002E^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/roles/[1-9][0-9]{6,7}$'
+  _globals['_APIUSERSTATE']._serialized_start=903
+  _globals['_APIUSERSTATE']._serialized_end=1005
+  _globals['_APIUSERACTION']._serialized_start=1008
+  _globals['_APIUSERACTION']._serialized_end=1174
   _globals['_APIUSER']._serialized_start=101
-  _globals['_APIUSER']._serialized_end=892
+  _globals['_APIUSER']._serialized_end=901
 # @@protoc_insertion_point(module_scope)

meshtrade/iam/api_user/v1/service_meshpy.py

@@ -9,6 +9,7 @@ the service interface with resource management capabilities, providing authentic
 timeouts, and proper connection handling.
 """
 
+from collections.abc import Iterator
 from datetime import timedelta
 from typing import Optional
 
@@ -19,14 +20,14 @@ from .api_user_pb2 import APIUser
 from meshtrade.common.service_options import ServiceOptions
 from .service_pb2 import (
 ActivateApiUserRequest,
-AssignRoleToAPIUserRequest,
+AssignRolesToAPIUserRequest,
 CreateApiUserRequest,
 DeactivateApiUserRequest,
 GetApiUserByKeyHashRequest,
 GetApiUserRequest,
 ListApiUsersRequest,
 ListApiUsersResponse,
-RevokeRoleFromAPIUserRequest,
+RevokeRolesFromAPIUserRequest,
 SearchApiUsersRequest,
 SearchApiUsersResponse,
 )
@@ -171,37 +172,37 @@ class ApiUserService(BaseGRPCClient):
         """
         return self._execute_method("CreateApiUser", request, timeout)
 
-    def assign_role_to_apiuser(self, request: AssignRoleToAPIUserRequest, timeout: Optional[timedelta] = None) -> APIUser:
-        """AssignRoleToAPIUser method.
+    def assign_roles_to_apiuser(self, request: AssignRolesToAPIUserRequest, timeout: Optional[timedelta] = None) -> APIUser:
+        """AssignRolesToAPIUser method.
 
         Args:
-            request: The AssignRoleToAPIUser request message
+            request: The AssignRolesToAPIUser request message
             timeout: Optional timeout override for this call
 
         Returns:
-            The AssignRoleToAPIUser response message
+            The AssignRolesToAPIUser response message
 
         Raises:
             grpc.RpcError: If the gRPC call fails
             ValueError: If authentication credentials are missing
         """
-        return self._execute_method("AssignRoleToAPIUser", request, timeout)
+        return self._execute_method("AssignRolesToAPIUser", request, timeout)
 
-    def revoke_role_from_apiuser(self, request: RevokeRoleFromAPIUserRequest, timeout: Optional[timedelta] = None) -> APIUser:
-        """RevokeRoleFromAPIUser method.
+    def revoke_roles_from_apiuser(self, request: RevokeRolesFromAPIUserRequest, timeout: Optional[timedelta] = None) -> APIUser:
+        """RevokeRolesFromAPIUser method.
 
         Args:
-            request: The RevokeRoleFromAPIUser request message
+            request: The RevokeRolesFromAPIUser request message
             timeout: Optional timeout override for this call
 
         Returns:
-            The RevokeRoleFromAPIUser response message
+            The RevokeRolesFromAPIUser response message
 
         Raises:
             grpc.RpcError: If the gRPC call fails
             ValueError: If authentication credentials are missing
         """
-        return self._execute_method("RevokeRoleFromAPIUser", request, timeout)
+        return self._execute_method("RevokeRolesFromAPIUser", request, timeout)
 
     def list_api_users(self, request: ListApiUsersRequest, timeout: Optional[timedelta] = None) -> ListApiUsersResponse:
         """ListApiUsers method.

meshtrade/iam/api_user/v1/service_pb2.py

@@ -28,7 +28,7 @@ from meshtrade.iam.role.v1 import role_pb2 as meshtrade_dot_iam_dot_role_dot_v1_
 from meshtrade.option.v1 import method_type_pb2 as meshtrade_dot_option_dot_v1_dot_method__type__pb2
 
 
-DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\'meshtrade/iam/api_user/v1/service.proto\x12\x19meshtrade.iam.api_user.v1\x1a\x1b\x62uf/validate/validate.proto\x1a(meshtrade/iam/api_user/v1/api_user.proto\x1a meshtrade/iam/role/v1/role.proto\x1a%meshtrade/option/v1/method_type.proto\"h\n\x11GetApiUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name\"Z\n\x1aGetApiUserByKeyHashRequest\x12<\n\x08key_hash\x18\x01 \x01(\tB!\xbaH\x1er\x19\x32\x14^[A-Za-z0-9+/]{43}=$\x98\x01,\xc8\x01\x01R\x07keyHash\"]\n\x14\x43reateApiUserRequest\x12\x45\n\x08\x61pi_user\x18\x01 \x01(\x0b\x32\".meshtrade.iam.api_user.v1.APIUserB\x06\xbaH\x03\xc8\x01\x01R\x07\x61piUser\"\xd1\x01\n\x1a\x41ssignRoleToAPIUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name\x12^\n\x04role\x18\x04 \x01(\tBJ\xbaHGrB2=^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/[1-9][0-9]{6}$\x98\x01)\xc8\x01\x01R\x04role\"\xd3\x01\n\x1cRevokeRoleFromAPIUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name\x12^\n\x04role\x18\x02 \x01(\tBJ\xbaHGrB2=^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/[1-9][0-9]{6}$\x98\x01)\xc8\x01\x01R\x04role\"\x15\n\x13ListApiUsersRequest\"W\n\x14ListApiUsersResponse\x12?\n\tapi_users\x18\x01 \x03(\x0b\x32\".meshtrade.iam.api_user.v1.APIUserR\x08\x61piUsers\":\n\x15SearchApiUsersRequest\x12!\n\x0c\x64isplay_name\x18\x01 \x01(\tR\x0b\x64isplayName\"Y\n\x16SearchApiUsersResponse\x12?\n\tapi_users\x18\x01 \x03(\x0b\x32\".meshtrade.iam.api_user.v1.APIUserR\x08\x61piUsers\"m\n\x16\x41\x63tivateApiUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name\"o\n\x18\x44\x65\x61\x63tivateApiUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name2\xca\t\n\x0e\x41piUserService\x12z\n\nGetApiUser\x12,.meshtrade.iam.api_user.v1.GetApiUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x1a\xa0\xb5\x18\x01\xaa\xb5\x18\x12\n\x10\xc0\x8d\xb7\x01\xc1\x8d\xb7\x01\xc2\x8d\xb7\x01\xc3\x8d\xb7\x01\x12x\n\rCreateApiUser\x12/.meshtrade.iam.api_user.v1.CreateApiUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x84\x01\n\x13\x41ssignRoleToAPIUser\x12\x35.meshtrade.iam.api_user.v1.AssignRoleToAPIUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x88\x01\n\x15RevokeRoleFromAPIUser\x12\x37.meshtrade.iam.api_user.v1.RevokeRoleFromAPIUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x8b\x01\n\x0cListApiUsers\x12..meshtrade.iam.api_user.v1.ListApiUsersRequest\x1a/.meshtrade.iam.api_user.v1.ListApiUsersResponse\"\x1a\xa0\xb5\x18\x01\xaa\xb5\x18\x12\n\x10\xc0\x8d\xb7\x01\xc1\x8d\xb7\x01\xc2\x8d\xb7\x01\xc3\x8d\xb7\x01\x12\x91\x01\n\x0eSearchApiUsers\x12\x30.meshtrade.iam.api_user.v1.SearchApiUsersRequest\x1a\x31.meshtrade.iam.api_user.v1.SearchApiUsersResponse\"\x1a\xa0\xb5\x18\x01\xaa\xb5\x18\x12\n\x10\xc0\x8d\xb7\x01\xc1\x8d\xb7\x01\xc2\x8d\xb7\x01\xc3\x8d\xb7\x01\x12|\n\x0f\x41\x63tivateApiUser\x12\x31.meshtrade.iam.api_user.v1.ActivateApiUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x80\x01\n\x11\x44\x65\x61\x63tivateApiUser\x12\x33.meshtrade.iam.api_user.v1.DeactivateApiUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x8c\x01\n\x13GetApiUserByKeyHash\x12\x35.meshtrade.iam.api_user.v1.GetApiUserByKeyHashRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x1a\xa0\xb5\x18\x01\xaa\xb5\x18\x12\n\x10\xc0\x8d\xb7\x01\xc1\x8d\xb7\x01\xc2\x8d\xb7\x01\xc3\x8d\xb7\x01\x42[\n co.meshtrade.api.iam.api_user.v1Z7github.com/meshtrade/api/go/iam/api_user/v1;api_user_v1b\x06proto3')
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\'meshtrade/iam/api_user/v1/service.proto\x12\x19meshtrade.iam.api_user.v1\x1a\x1b\x62uf/validate/validate.proto\x1a(meshtrade/iam/api_user/v1/api_user.proto\x1a meshtrade/iam/role/v1/role.proto\x1a%meshtrade/option/v1/method_type.proto\"h\n\x11GetApiUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name\"Z\n\x1aGetApiUserByKeyHashRequest\x12<\n\x08key_hash\x18\x01 \x01(\tB!\xbaH\x1er\x19\x32\x14^[A-Za-z0-9+/]{43}=$\x98\x01,\xc8\x01\x01R\x07keyHash\"]\n\x14\x43reateApiUserRequest\x12\x45\n\x08\x61pi_user\x18\x01 \x01(\x0b\x32\".meshtrade.iam.api_user.v1.APIUserB\x06\xbaH\x03\xc8\x01\x01R\x07\x61piUser\"\xe2\x01\n\x1b\x41ssignRolesToAPIUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name\x12n\n\x05roles\x18\x02 \x03(\tBX\xbaHU\x92\x01O\"MrK\x10/\x18\x30\x32\x45^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/roles/[1-9][0-9]{6,7}$\xc8\x01\x01R\x05roles\"\xe4\x01\n\x1dRevokeRolesFromAPIUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name\x12n\n\x05roles\x18\x02 \x03(\tBX\xbaHU\x92\x01O\"MrK\x10/\x18\x30\x32\x45^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/roles/[1-9][0-9]{6,7}$\xc8\x01\x01R\x05roles\"\x15\n\x13ListApiUsersRequest\"W\n\x14ListApiUsersResponse\x12?\n\tapi_users\x18\x01 \x03(\x0b\x32\".meshtrade.iam.api_user.v1.APIUserR\x08\x61piUsers\":\n\x15SearchApiUsersRequest\x12!\n\x0c\x64isplay_name\x18\x01 \x01(\tR\x0b\x64isplayName\"Y\n\x16SearchApiUsersResponse\x12?\n\tapi_users\x18\x01 \x03(\x0b\x32\".meshtrade.iam.api_user.v1.APIUserR\x08\x61piUsers\"m\n\x16\x41\x63tivateApiUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name\"o\n\x18\x44\x65\x61\x63tivateApiUserRequest\x12S\n\x04name\x18\x01 \x01(\tB?\xbaH<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\x98\x01$\xc8\x01\x01R\x04name2\xce\t\n\x0e\x41piUserService\x12z\n\nGetApiUser\x12,.meshtrade.iam.api_user.v1.GetApiUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x1a\xa0\xb5\x18\x01\xaa\xb5\x18\x12\n\x10\xc0\x8d\xb7\x01\xc1\x8d\xb7\x01\xc2\x8d\xb7\x01\xc3\x8d\xb7\x01\x12x\n\rCreateApiUser\x12/.meshtrade.iam.api_user.v1.CreateApiUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x86\x01\n\x14\x41ssignRolesToAPIUser\x12\x36.meshtrade.iam.api_user.v1.AssignRolesToAPIUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x8a\x01\n\x16RevokeRolesFromAPIUser\x12\x38.meshtrade.iam.api_user.v1.RevokeRolesFromAPIUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x8b\x01\n\x0cListApiUsers\x12..meshtrade.iam.api_user.v1.ListApiUsersRequest\x1a/.meshtrade.iam.api_user.v1.ListApiUsersResponse\"\x1a\xa0\xb5\x18\x01\xaa\xb5\x18\x12\n\x10\xc0\x8d\xb7\x01\xc1\x8d\xb7\x01\xc2\x8d\xb7\x01\xc3\x8d\xb7\x01\x12\x91\x01\n\x0eSearchApiUsers\x12\x30.meshtrade.iam.api_user.v1.SearchApiUsersRequest\x1a\x31.meshtrade.iam.api_user.v1.SearchApiUsersResponse\"\x1a\xa0\xb5\x18\x01\xaa\xb5\x18\x12\n\x10\xc0\x8d\xb7\x01\xc1\x8d\xb7\x01\xc2\x8d\xb7\x01\xc3\x8d\xb7\x01\x12|\n\x0f\x41\x63tivateApiUser\x12\x31.meshtrade.iam.api_user.v1.ActivateApiUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x80\x01\n\x11\x44\x65\x61\x63tivateApiUser\x12\x33.meshtrade.iam.api_user.v1.DeactivateApiUserRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x12\xa0\xb5\x18\x02\xaa\xb5\x18\n\n\x08\xc0\x8d\xb7\x01\xc2\x8d\xb7\x01\x12\x8c\x01\n\x13GetApiUserByKeyHash\x12\x35.meshtrade.iam.api_user.v1.GetApiUserByKeyHashRequest\x1a\".meshtrade.iam.api_user.v1.APIUser\"\x1a\xa0\xb5\x18\x01\xaa\xb5\x18\x12\n\x10\xc0\x8d\xb7\x01\xc1\x8d\xb7\x01\xc2\x8d\xb7\x01\xc3\x8d\xb7\x01\x42[\n co.meshtrade.api.iam.api_user.v1Z7github.com/meshtrade/api/go/iam/api_user/v1;api_user_v1b\x06proto3')
 
 _globals = globals()
 _builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
@@ -42,14 +42,14 @@ if not _descriptor._USE_C_DESCRIPTORS:
   _globals['_GETAPIUSERBYKEYHASHREQUEST'].fields_by_name['key_hash']._serialized_options = b'\272H\036r\0312\024^[A-Za-z0-9+/]{43}=$\230\001,\310\001\001'
   _globals['_CREATEAPIUSERREQUEST'].fields_by_name['api_user']._loaded_options = None
   _globals['_CREATEAPIUSERREQUEST'].fields_by_name['api_user']._serialized_options = b'\272H\003\310\001\001'
-  _globals['_ASSIGNROLETOAPIUSERREQUEST'].fields_by_name['name']._loaded_options = None
-  _globals['_ASSIGNROLETOAPIUSERREQUEST'].fields_by_name['name']._serialized_options = b'\272H<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\230\001$\310\001\001'
-  _globals['_ASSIGNROLETOAPIUSERREQUEST'].fields_by_name['role']._loaded_options = None
-  _globals['_ASSIGNROLETOAPIUSERREQUEST'].fields_by_name['role']._serialized_options = b'\272HGrB2=^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/[1-9][0-9]{6}$\230\001)\310\001\001'
-  _globals['_REVOKEROLEFROMAPIUSERREQUEST'].fields_by_name['name']._loaded_options = None
-  _globals['_REVOKEROLEFROMAPIUSERREQUEST'].fields_by_name['name']._serialized_options = b'\272H<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\230\001$\310\001\001'
-  _globals['_REVOKEROLEFROMAPIUSERREQUEST'].fields_by_name['role']._loaded_options = None
-  _globals['_REVOKEROLEFROMAPIUSERREQUEST'].fields_by_name['role']._serialized_options = b'\272HGrB2=^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/[1-9][0-9]{6}$\230\001)\310\001\001'
+  _globals['_ASSIGNROLESTOAPIUSERREQUEST'].fields_by_name['name']._loaded_options = None
+  _globals['_ASSIGNROLESTOAPIUSERREQUEST'].fields_by_name['name']._serialized_options = b'\272H<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\230\001$\310\001\001'
+  _globals['_ASSIGNROLESTOAPIUSERREQUEST'].fields_by_name['roles']._loaded_options = None
+  _globals['_ASSIGNROLESTOAPIUSERREQUEST'].fields_by_name['roles']._serialized_options = b'\272HU\222\001O\"MrK\020/\03002E^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/roles/[1-9][0-9]{6,7}$\310\001\001'
+  _globals['_REVOKEROLESFROMAPIUSERREQUEST'].fields_by_name['name']._loaded_options = None
+  _globals['_REVOKEROLESFROMAPIUSERREQUEST'].fields_by_name['name']._serialized_options = b'\272H<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\230\001$\310\001\001'
+  _globals['_REVOKEROLESFROMAPIUSERREQUEST'].fields_by_name['roles']._loaded_options = None
+  _globals['_REVOKEROLESFROMAPIUSERREQUEST'].fields_by_name['roles']._serialized_options = b'\272HU\222\001O\"MrK\020/\03002E^groups/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}/roles/[1-9][0-9]{6,7}$\310\001\001'
   _globals['_ACTIVATEAPIUSERREQUEST'].fields_by_name['name']._loaded_options = None
   _globals['_ACTIVATEAPIUSERREQUEST'].fields_by_name['name']._serialized_options = b'\272H<r722^api_users/[0123456789ABCDEFGHJKMNPQRSTVWXYZ]{26}$\230\001$\310\001\001'
   _globals['_DEACTIVATEAPIUSERREQUEST'].fields_by_name['name']._loaded_options = None
@@ -58,10 +58,10 @@ if not _descriptor._USE_C_DESCRIPTORS:
   _globals['_APIUSERSERVICE'].methods_by_name['GetApiUser']._serialized_options = b'\240\265\030\001\252\265\030\022\n\020\300\215\267\001\301\215\267\001\302\215\267\001\303\215\267\001'
   _globals['_APIUSERSERVICE'].methods_by_name['CreateApiUser']._loaded_options = None
   _globals['_APIUSERSERVICE'].methods_by_name['CreateApiUser']._serialized_options = b'\240\265\030\002\252\265\030\n\n\010\300\215\267\001\302\215\267\001'
-  _globals['_APIUSERSERVICE'].methods_by_name['AssignRoleToAPIUser']._loaded_options = None
-  _globals['_APIUSERSERVICE'].methods_by_name['AssignRoleToAPIUser']._serialized_options = b'\240\265\030\002\252\265\030\n\n\010\300\215\267\001\302\215\267\001'
-  _globals['_APIUSERSERVICE'].methods_by_name['RevokeRoleFromAPIUser']._loaded_options = None
-  _globals['_APIUSERSERVICE'].methods_by_name['RevokeRoleFromAPIUser']._serialized_options = b'\240\265\030\002\252\265\030\n\n\010\300\215\267\001\302\215\267\001'
+  _globals['_APIUSERSERVICE'].methods_by_name['AssignRolesToAPIUser']._loaded_options = None
+  _globals['_APIUSERSERVICE'].methods_by_name['AssignRolesToAPIUser']._serialized_options = b'\240\265\030\002\252\265\030\n\n\010\300\215\267\001\302\215\267\001'
+  _globals['_APIUSERSERVICE'].methods_by_name['RevokeRolesFromAPIUser']._loaded_options = None
+  _globals['_APIUSERSERVICE'].methods_by_name['RevokeRolesFromAPIUser']._serialized_options = b'\240\265\030\002\252\265\030\n\n\010\300\215\267\001\302\215\267\001'
   _globals['_APIUSERSERVICE'].methods_by_name['ListApiUsers']._loaded_options = None
   _globals['_APIUSERSERVICE'].methods_by_name['ListApiUsers']._serialized_options = b'\240\265\030\001\252\265\030\022\n\020\300\215\267\001\301\215\267\001\302\215\267\001\303\215\267\001'
   _globals['_APIUSERSERVICE'].methods_by_name['SearchApiUsers']._loaded_options = None
@@ -78,22 +78,22 @@ if not _descriptor._USE_C_DESCRIPTORS:
   _globals['_GETAPIUSERBYKEYHASHREQUEST']._serialized_end=410
   _globals['_CREATEAPIUSERREQUEST']._serialized_start=412
   _globals['_CREATEAPIUSERREQUEST']._serialized_end=505
-  _globals['_ASSIGNROLETOAPIUSERREQUEST']._serialized_start=508
-  _globals['_ASSIGNROLETOAPIUSERREQUEST']._serialized_end=717
-  _globals['_REVOKEROLEFROMAPIUSERREQUEST']._serialized_start=720
-  _globals['_REVOKEROLEFROMAPIUSERREQUEST']._serialized_end=931
-  _globals['_LISTAPIUSERSREQUEST']._serialized_start=933
-  _globals['_LISTAPIUSERSREQUEST']._serialized_end=954
-  _globals['_LISTAPIUSERSRESPONSE']._serialized_start=956
-  _globals['_LISTAPIUSERSRESPONSE']._serialized_end=1043
-  _globals['_SEARCHAPIUSERSREQUEST']._serialized_start=1045
-  _globals['_SEARCHAPIUSERSREQUEST']._serialized_end=1103
-  _globals['_SEARCHAPIUSERSRESPONSE']._serialized_start=1105
-  _globals['_SEARCHAPIUSERSRESPONSE']._serialized_end=1194
-  _globals['_ACTIVATEAPIUSERREQUEST']._serialized_start=1196
-  _globals['_ACTIVATEAPIUSERREQUEST']._serialized_end=1305
-  _globals['_DEACTIVATEAPIUSERREQUEST']._serialized_start=1307
-  _globals['_DEACTIVATEAPIUSERREQUEST']._serialized_end=1418
-  _globals['_APIUSERSERVICE']._serialized_start=1421
-  _globals['_APIUSERSERVICE']._serialized_end=2647
+  _globals['_ASSIGNROLESTOAPIUSERREQUEST']._serialized_start=508
+  _globals['_ASSIGNROLESTOAPIUSERREQUEST']._serialized_end=734
+  _globals['_REVOKEROLESFROMAPIUSERREQUEST']._serialized_start=737
+  _globals['_REVOKEROLESFROMAPIUSERREQUEST']._serialized_end=965
+  _globals['_LISTAPIUSERSREQUEST']._serialized_start=967
+  _globals['_LISTAPIUSERSREQUEST']._serialized_end=988
+  _globals['_LISTAPIUSERSRESPONSE']._serialized_start=990
+  _globals['_LISTAPIUSERSRESPONSE']._serialized_end=1077
+  _globals['_SEARCHAPIUSERSREQUEST']._serialized_start=1079
+  _globals['_SEARCHAPIUSERSREQUEST']._serialized_end=1137
+  _globals['_SEARCHAPIUSERSRESPONSE']._serialized_start=1139
+  _globals['_SEARCHAPIUSERSRESPONSE']._serialized_end=1228
+  _globals['_ACTIVATEAPIUSERREQUEST']._serialized_start=1230
+  _globals['_ACTIVATEAPIUSERREQUEST']._serialized_end=1339
+  _globals['_DEACTIVATEAPIUSERREQUEST']._serialized_start=1341
+  _globals['_DEACTIVATEAPIUSERREQUEST']._serialized_end=1452
+  _globals['_APIUSERSERVICE']._serialized_start=1455
+  _globals['_APIUSERSERVICE']._serialized_end=2685
 # @@protoc_insertion_point(module_scope)

meshtrade/iam/api_user/v1/service_pb2.pyi

@@ -28,21 +28,21 @@ class CreateApiUserRequest(_message.Message):
     api_user: _api_user_pb2.APIUser
     def __init__(self, api_user: _Optional[_Union[_api_user_pb2.APIUser, _Mapping]] = ...) -> None: ...
 
-class AssignRoleToAPIUserRequest(_message.Message):
-    __slots__ = ("name", "role")
+class AssignRolesToAPIUserRequest(_message.Message):
+    __slots__ = ("name", "roles")
     NAME_FIELD_NUMBER: _ClassVar[int]
-    ROLE_FIELD_NUMBER: _ClassVar[int]
+    ROLES_FIELD_NUMBER: _ClassVar[int]
     name: str
-    role: str
-    def __init__(self, name: _Optional[str] = ..., role: _Optional[str] = ...) -> None: ...
+    roles: _containers.RepeatedScalarFieldContainer[str]
+    def __init__(self, name: _Optional[str] = ..., roles: _Optional[_Iterable[str]] = ...) -> None: ...
 
-class RevokeRoleFromAPIUserRequest(_message.Message):
-    __slots__ = ("name", "role")
+class RevokeRolesFromAPIUserRequest(_message.Message):
+    __slots__ = ("name", "roles")
     NAME_FIELD_NUMBER: _ClassVar[int]
-    ROLE_FIELD_NUMBER: _ClassVar[int]
+    ROLES_FIELD_NUMBER: _ClassVar[int]
     name: str
-    role: str
-    def __init__(self, name: _Optional[str] = ..., role: _Optional[str] = ...) -> None: ...
+    roles: _containers.RepeatedScalarFieldContainer[str]
+    def __init__(self, name: _Optional[str] = ..., roles: _Optional[_Iterable[str]] = ...) -> None: ...
 
 class ListApiUsersRequest(_message.Message):
     __slots__ = ()

meshtrade/iam/api_user/v1/service_pb2_grpc.py

@@ -37,14 +37,14 @@ class ApiUserServiceStub(object):
                 request_serializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.CreateApiUserRequest.SerializeToString,
                 response_deserializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_api__user__pb2.APIUser.FromString,
                 _registered_method=True)
-        self.AssignRoleToAPIUser = channel.unary_unary(
-                '/meshtrade.iam.api_user.v1.ApiUserService/AssignRoleToAPIUser',
-                request_serializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.AssignRoleToAPIUserRequest.SerializeToString,
+        self.AssignRolesToAPIUser = channel.unary_unary(
+                '/meshtrade.iam.api_user.v1.ApiUserService/AssignRolesToAPIUser',
+                request_serializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.AssignRolesToAPIUserRequest.SerializeToString,
                 response_deserializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_api__user__pb2.APIUser.FromString,
                 _registered_method=True)
-        self.RevokeRoleFromAPIUser = channel.unary_unary(
-                '/meshtrade.iam.api_user.v1.ApiUserService/RevokeRoleFromAPIUser',
-                request_serializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.RevokeRoleFromAPIUserRequest.SerializeToString,
+        self.RevokeRolesFromAPIUser = channel.unary_unary(
+                '/meshtrade.iam.api_user.v1.ApiUserService/RevokeRolesFromAPIUser',
+                request_serializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.RevokeRolesFromAPIUserRequest.SerializeToString,
                 response_deserializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_api__user__pb2.APIUser.FromString,
                 _registered_method=True)
         self.ListApiUsers = channel.unary_unary(
@@ -109,9 +109,9 @@ class ApiUserServiceServicer(object):
         context.set_details('Method not implemented!')
         raise NotImplementedError('Method not implemented!')
 
-    def AssignRoleToAPIUser(self, request, context):
+    def AssignRolesToAPIUser(self, request, context):
         """
-        Assigns a role to an existing api user within the authenticated group context.
+        Assign roles to an existing api user within the authenticated group context.
 
         The role assignment enables the api user to perform operations according
         to the permissions associated with that role within the group hierarchy.
@@ -120,9 +120,9 @@ class ApiUserServiceServicer(object):
         context.set_details('Method not implemented!')
         raise NotImplementedError('Method not implemented!')
 
-    def RevokeRoleFromAPIUser(self, request, context):
+    def RevokeRolesFromAPIUser(self, request, context):
         """
-        Revokes a role from an existing API user within the authenticated group context.
+        Revoke roles from an existing API user within the authenticated group context.
 
         The role revocation removes the permissions associated with that role from
         the API user within the group hierarchy. The API user will no longer be able
@@ -200,14 +200,14 @@ def add_ApiUserServiceServicer_to_server(servicer, server):
                     request_deserializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.CreateApiUserRequest.FromString,
                     response_serializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_api__user__pb2.APIUser.SerializeToString,
             ),
-            'AssignRoleToAPIUser': grpc.unary_unary_rpc_method_handler(
-                    servicer.AssignRoleToAPIUser,
-                    request_deserializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.AssignRoleToAPIUserRequest.FromString,
+            'AssignRolesToAPIUser': grpc.unary_unary_rpc_method_handler(
+                    servicer.AssignRolesToAPIUser,
+                    request_deserializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.AssignRolesToAPIUserRequest.FromString,
                     response_serializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_api__user__pb2.APIUser.SerializeToString,
             ),
-            'RevokeRoleFromAPIUser': grpc.unary_unary_rpc_method_handler(
-                    servicer.RevokeRoleFromAPIUser,
-                    request_deserializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.RevokeRoleFromAPIUserRequest.FromString,
+            'RevokeRolesFromAPIUser': grpc.unary_unary_rpc_method_handler(
+                    servicer.RevokeRolesFromAPIUser,
+                    request_deserializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.RevokeRolesFromAPIUserRequest.FromString,
                     response_serializer=meshtrade_dot_iam_dot_api__user_dot_v1_dot_api__user__pb2.APIUser.SerializeToString,
             ),
             'ListApiUsers': grpc.unary_unary_rpc_method_handler(
@@ -313,7 +313,7 @@ class ApiUserService(object):
             _registered_method=True)
 
     @staticmethod
-    def AssignRoleToAPIUser(request,
+    def AssignRolesToAPIUser(request,
             target,
             options=(),
             channel_credentials=None,
@@ -326,8 +326,8 @@ class ApiUserService(object):
         return grpc.experimental.unary_unary(
             request,
             target,
-            '/meshtrade.iam.api_user.v1.ApiUserService/AssignRoleToAPIUser',
-            meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.AssignRoleToAPIUserRequest.SerializeToString,
+            '/meshtrade.iam.api_user.v1.ApiUserService/AssignRolesToAPIUser',
+            meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.AssignRolesToAPIUserRequest.SerializeToString,
             meshtrade_dot_iam_dot_api__user_dot_v1_dot_api__user__pb2.APIUser.FromString,
             options,
             channel_credentials,
@@ -340,7 +340,7 @@ class ApiUserService(object):
             _registered_method=True)
 
     @staticmethod
-    def RevokeRoleFromAPIUser(request,
+    def RevokeRolesFromAPIUser(request,
             target,
             options=(),
             channel_credentials=None,
@@ -353,8 +353,8 @@ class ApiUserService(object):
         return grpc.experimental.unary_unary(
             request,
             target,
-            '/meshtrade.iam.api_user.v1.ApiUserService/RevokeRoleFromAPIUser',
-            meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.RevokeRoleFromAPIUserRequest.SerializeToString,
+            '/meshtrade.iam.api_user.v1.ApiUserService/RevokeRolesFromAPIUser',
+            meshtrade_dot_iam_dot_api__user_dot_v1_dot_service__pb2.RevokeRolesFromAPIUserRequest.SerializeToString,
             meshtrade_dot_iam_dot_api__user_dot_v1_dot_api__user__pb2.APIUser.FromString,
             options,
             channel_credentials,

meshtrade/iam/group/v1/service_meshpy.py

@@ -9,6 +9,7 @@ the service interface with resource management capabilities, providing authentic
 timeouts, and proper connection handling.
 """
 
+from collections.abc import Iterator
 from datetime import timedelta
 from typing import Optional
 

meshtrade/iam/role/v1/__init__.py

@@ -29,7 +29,15 @@ from .role_pb2 import Role, RoleList
 #
 # ===================================================================
 
-from .role import role_full_resource_name_from_group
+from .role import (
+    must_parse_role_parts,
+    parse_role_parts,
+    role_from_full_resource_name,
+    role_full_resource_name_from_group,
+    role_full_resource_name_from_group_id,
+    role_is_valid,
+    role_is_valid_and_specified,
+)
 
 # ===================================================================
 # MODULE EXPORTS
@@ -40,5 +48,11 @@ __all__ = [
     "Role",
     "RoleList",
     # Manual exports
+    "must_parse_role_parts",
+    "parse_role_parts",
+    "role_from_full_resource_name",
     "role_full_resource_name_from_group",
+    "role_full_resource_name_from_group_id",
+    "role_is_valid",
+    "role_is_valid_and_specified",
 ]

meshtrade/iam/role/v1/role.py

@@ -1,7 +1,7 @@
 """Role utility functions for Mesh API.
 
 This module provides helper functions for working with Role enums and their resource names.
-All functions use the 3-part integer format: groups/{groupID}/{roleNumber}
+All functions use the 4-part integer format: groups/{groupID}/roles/{roleNumber}
 for cross-language compatibility.
 """
 
@@ -47,7 +47,7 @@ def role_is_valid_and_specified(role: Role) -> bool:
 def role_full_resource_name_from_group_id(role: Role, group_id: str) -> str:
     """Generate full resource name from role and group ID.
 
-    Format: groups/{group_id}/{role_int}
+    Format: groups/{group_id}/roles/{role_int}
 
     Args:
         role: Role enum value (integer)
@@ -58,9 +58,9 @@ def role_full_resource_name_from_group_id(role: Role, group_id: str) -> str:
 
     Example:
         >>> role_full_resource_name_from_group_id(Role.ROLE_IAM_ADMIN, "01DD32GZ7R0000000000000001")
-        'groups/01DD32GZ7R0000000000000001/3000000'
+        'groups/01DD32GZ7R0000000000000001/roles/3000000'
     """
-    return f"groups/{group_id}/{int(role)}"
+    return f"groups/{group_id}/roles/{int(role)}"
 
 
 def role_full_resource_name_from_group(role: Role, group: str) -> str:
@@ -78,7 +78,7 @@ def role_full_resource_name_from_group(role: Role, group: str) -> str:
 
     Example:
         >>> role_full_resource_name_from_group(Role.ROLE_IAM_ADMIN, "groups/01DD32GZ7R0000000000000001")
-        'groups/01DD32GZ7R0000000000000001/3000000'
+        'groups/01DD32GZ7R0000000000000001/roles/3000000'
     """
     if not group.startswith("groups/"):
         raise ValueError(f"invalid group format, expected groups/{{groupID}}, got: {group}")
@@ -94,13 +94,13 @@ def role_from_full_resource_name(full_resource_name: str) -> Role:
     """Extract Role from full resource name.
 
     Args:
-        full_resource_name: Full resource name (e.g., "groups/{id}/{role_int}")
+        full_resource_name: Full resource name (e.g., "groups/{id}/roles/{role_int}")
 
     Returns:
         Role enum value (integer), or ROLE_UNSPECIFIED if parsing fails
 
     Example:
-        >>> role_from_full_resource_name("groups/01DD32GZ7R0000000000000001/3000000")
+        >>> role_from_full_resource_name("groups/01DD32GZ7R0000000000000001/roles/3000000")
         3000000
         >>> role_from_full_resource_name("invalid/format")
         0
@@ -118,7 +118,7 @@ def role_from_full_resource_name(full_resource_name: str) -> Role:
 def parse_role_parts(role_full_resource_name: str) -> tuple[str, int]:
     """Parse full resource name into group ID and Role.
 
-    Expected format: groups/{group_id}/{role_int}
+    Expected format: groups/{group_id}/roles/{role_int}
 
     Args:
         role_full_resource_name: Full resource name
@@ -130,21 +130,21 @@ def parse_role_parts(role_full_resource_name: str) -> tuple[str, int]:
         ValueError: If format is invalid or role number cannot be parsed
 
     Example:
-        >>> parse_role_parts("groups/01DD32GZ7R0000000000000001/3000000")
+        >>> parse_role_parts("groups/01DD32GZ7R0000000000000001/roles/3000000")
         ('01DD32GZ7R0000000000000001', 3000000)
     """
     parts = role_full_resource_name.split("/")
-    if len(parts) != 3 or parts[0] != "groups":
-        raise ValueError(f"invalid role format, expected groups/{{groupID}}/{{role}}, got {role_full_resource_name}")
+    if len(parts) != 4 or parts[0] != "groups" or parts[2] != "roles":
+        raise ValueError(f"invalid role format, expected groups/{{groupID}}/roles/{{role}}, got {role_full_resource_name}")
 
     group_id = parts[1]
     if not group_id:
         raise ValueError("group ID cannot be empty")
 
     try:
-        role_int = int(parts[2])
+        role_int = int(parts[3])
     except ValueError as e:
-        raise ValueError(f"error parsing role enum value '{parts[2]}'") from e
+        raise ValueError(f"error parsing role enum value '{parts[3]}'") from e
 
     if role_int < 0:
         raise ValueError(f"invalid role number in full resource name: {role_full_resource_name}")
@@ -168,7 +168,7 @@ def must_parse_role_parts(role_full_resource_name: str) -> tuple[str, int]:
         ValueError: If format is invalid
 
     Example:
-        >>> must_parse_role_parts("groups/01DD32GZ7R0000000000000001/3000000")
+        >>> must_parse_role_parts("groups/01DD32GZ7R0000000000000001/roles/3000000")
         ('01DD32GZ7R0000000000000001', 3000000)
     """
     return parse_role_parts(role_full_resource_name)

meshtrade/iam/user/v1/__init__.py

@@ -15,11 +15,12 @@
 # Generated protobuf imports
 from .user_pb2 import User
 from .service_pb2 import (
-    AssignRoleToUserRequest,
+    AssignRolesToUserRequest,
     CreateUserRequest,
     GetUserRequest,
     ListUsersRequest,
     ListUsersResponse,
+    RevokeRolesFromUserRequest,
     SearchUsersRequest,
     SearchUsersResponse,
     UpdateUserRequest,
@@ -52,11 +53,12 @@ from .service_meshpy import (
 # Combined auto-generated and manual exports
 __all__ = [
     # Generated exports
-    "AssignRoleToUserRequest",
+    "AssignRolesToUserRequest",
     "CreateUserRequest",
     "GetUserRequest",
     "ListUsersRequest",
     "ListUsersResponse",
+    "RevokeRolesFromUserRequest",
     "SearchUsersRequest",
     "SearchUsersResponse",
     "UpdateUserRequest",