identity

type AcceptInvitationRequest struct {
	InvitationToken string `protobuf:"bytes,1,opt,name=invitation_token,json=invitationToken,proto3" json:"invitation_token,omitempty"`
	Password        string `protobuf:"bytes,2,opt,name=password,proto3" json:"password,omitempty"`
	Name            string `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type AcceptInvitationResponse struct {
	User         *User  `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	AccessToken  string `protobuf:"bytes,2,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
	RefreshToken string `protobuf:"bytes,3,opt,name=refresh_token,json=refreshToken,proto3" json:"refresh_token,omitempty"`
	ExpiresIn    int32  `protobuf:"varint,4,opt,name=expires_in,json=expiresIn,proto3" json:"expires_in,omitempty"`
	// contains filtered or unexported fields
}

type AddGroupMemberRequest struct {
	GroupId  string `protobuf:"bytes,1,opt,name=group_id,json=groupId,proto3" json:"group_id,omitempty"`
	UserId   string `protobuf:"bytes,2,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
	TenantId string `protobuf:"bytes,3,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	// contains filtered or unexported fields
}

type AddGroupMemberResponse struct {
	// contains filtered or unexported fields
}

type AdminHelpRequest struct {
	Id              string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Email           string                 `protobuf:"bytes,2,opt,name=email,proto3" json:"email,omitempty"`
	Reason          string                 `protobuf:"bytes,3,opt,name=reason,proto3" json:"reason,omitempty"`
	SourceIp        string                 `protobuf:"bytes,4,opt,name=source_ip,json=sourceIp,proto3" json:"source_ip,omitempty"`
	UserAgent       string                 `protobuf:"bytes,5,opt,name=user_agent,json=userAgent,proto3" json:"user_agent,omitempty"`
	Status          HelpRequestStatus      `protobuf:"varint,6,opt,name=status,proto3,enum=identity.HelpRequestStatus" json:"status,omitempty"`
	ResolvedBy      string                 `protobuf:"bytes,7,opt,name=resolved_by,json=resolvedBy,proto3" json:"resolved_by,omitempty"`
	ResolutionNotes string                 `protobuf:"bytes,8,opt,name=resolution_notes,json=resolutionNotes,proto3" json:"resolution_notes,omitempty"`
	ResolvedAt      *timestamppb.Timestamp `protobuf:"bytes,9,opt,name=resolved_at,json=resolvedAt,proto3" json:"resolved_at,omitempty"`
	CreatedAt       *timestamppb.Timestamp `protobuf:"bytes,10,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// contains filtered or unexported fields
}

type ApproveQrLoginRequest struct {
	SessionId string `protobuf:"bytes,1,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	Approve   bool   `protobuf:"varint,2,opt,name=approve,proto3" json:"approve,omitempty"`
	// contains filtered or unexported fields
}

type ApproveQrLoginResponse struct {
	Status QrLoginStatus `protobuf:"varint,1,opt,name=status,proto3,enum=identity.QrLoginStatus" json:"status,omitempty"`
	// contains filtered or unexported fields
}

type AuditEvent struct {
	Id           string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	EventType    string                 `protobuf:"bytes,2,opt,name=event_type,json=eventType,proto3" json:"event_type,omitempty"` // see AuditEventType enum values in schema.yaml
	ActorUserId  string                 `protobuf:"bytes,3,opt,name=actor_user_id,json=actorUserId,proto3" json:"actor_user_id,omitempty"`
	TargetUserId string                 `protobuf:"bytes,4,opt,name=target_user_id,json=targetUserId,proto3" json:"target_user_id,omitempty"`
	IpAddress    string                 `protobuf:"bytes,5,opt,name=ip_address,json=ipAddress,proto3" json:"ip_address,omitempty"`
	UserAgent    string                 `protobuf:"bytes,6,opt,name=user_agent,json=userAgent,proto3" json:"user_agent,omitempty"`
	Success      bool                   `protobuf:"varint,7,opt,name=success,proto3" json:"success,omitempty"`
	Details      string                 `protobuf:"bytes,8,opt,name=details,proto3" json:"details,omitempty"` // JSON blob for event-specific data
	CreatedAt    *timestamppb.Timestamp `protobuf:"bytes,9,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// contains filtered or unexported fields
}

type BeginOAuthLoginRequest struct {
	RedirectUri string `protobuf:"bytes,1,opt,name=redirect_uri,json=redirectUri,proto3" json:"redirect_uri,omitempty"`
	Provider    string `protobuf:"bytes,2,opt,name=provider,proto3" json:"provider,omitempty"` // "google", "microsoft", or "github"
	Tenant      string `protobuf:"bytes,3,opt,name=tenant,proto3" json:"tenant,omitempty"`     // Microsoft tenant ID (optional)
	// contains filtered or unexported fields
}

type BeginOAuthLoginResponse struct {
	AuthorizationUrl string `protobuf:"bytes,1,opt,name=authorization_url,json=authorizationUrl,proto3" json:"authorization_url,omitempty"`
	State            string `protobuf:"bytes,2,opt,name=state,proto3" json:"state,omitempty"`
	StateToken       string `protobuf:"bytes,3,opt,name=state_token,json=stateToken,proto3" json:"state_token,omitempty"`
	CodeVerifier     string `protobuf:"bytes,4,opt,name=code_verifier,json=codeVerifier,proto3" json:"code_verifier,omitempty"`
	ExpiresIn        int32  `protobuf:"varint,5,opt,name=expires_in,json=expiresIn,proto3" json:"expires_in,omitempty"`
	// contains filtered or unexported fields
}

type BeginPasskeyLoginRequest struct {
	Email string `protobuf:"bytes,1,opt,name=email,proto3" json:"email,omitempty"` // optional — if empty, allows discoverable credentials (resident keys)
	// contains filtered or unexported fields
}

type BeginPasskeyLoginResponse struct {
	OptionsJson string `protobuf:"bytes,1,opt,name=options_json,json=optionsJson,proto3" json:"options_json,omitempty"`
	ChallengeId string `protobuf:"bytes,2,opt,name=challenge_id,json=challengeId,proto3" json:"challenge_id,omitempty"`
	// contains filtered or unexported fields
}

type BeginPasskeyRegistrationRequest struct {
	DeviceName string `protobuf:"bytes,1,opt,name=device_name,json=deviceName,proto3" json:"device_name,omitempty"`
	// contains filtered or unexported fields
}

type BeginPasskeyRegistrationResponse struct {

	// JSON string of PublicKeyCredentialCreationOptions (frontend passes to navigator.credentials.create)
	OptionsJson string `protobuf:"bytes,1,opt,name=options_json,json=optionsJson,proto3" json:"options_json,omitempty"`
	ChallengeId string `protobuf:"bytes,2,opt,name=challenge_id,json=challengeId,proto3" json:"challenge_id,omitempty"`
	// contains filtered or unexported fields
}

type BeginTotpSetupRequest struct {
	// contains filtered or unexported fields
}

type BeginTotpSetupResponse struct {
	Secret        string   `protobuf:"bytes,1,opt,name=secret,proto3" json:"secret,omitempty"`                                    // Base32 (shown to user once)
	QrCodeUri     string   `protobuf:"bytes,2,opt,name=qr_code_uri,json=qrCodeUri,proto3" json:"qr_code_uri,omitempty"`           // otpauth://totp/Glassa:user@example.com?secret=...&issuer=Glassa
	RecoveryCodes []string `protobuf:"bytes,3,rep,name=recovery_codes,json=recoveryCodes,proto3" json:"recovery_codes,omitempty"` // 10 one-time recovery codes (shown once)
	// contains filtered or unexported fields
}

type ChangePasswordRequest struct {
	CurrentPassword string `protobuf:"bytes,1,opt,name=current_password,json=currentPassword,proto3" json:"current_password,omitempty"`
	NewPassword     string `protobuf:"bytes,2,opt,name=new_password,json=newPassword,proto3" json:"new_password,omitempty"`
	// contains filtered or unexported fields
}

type ChangePasswordResponse struct {
	// contains filtered or unexported fields
}

type CompletePasskeyLoginRequest struct {
	ChallengeId    string `protobuf:"bytes,1,opt,name=challenge_id,json=challengeId,proto3" json:"challenge_id,omitempty"`
	CredentialJson string `protobuf:"bytes,2,opt,name=credential_json,json=credentialJson,proto3" json:"credential_json,omitempty"`
	// contains filtered or unexported fields
}

type CompletePasskeyLoginResponse struct {
	User         *User  `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	AccessToken  string `protobuf:"bytes,2,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
	RefreshToken string `protobuf:"bytes,3,opt,name=refresh_token,json=refreshToken,proto3" json:"refresh_token,omitempty"`
	ExpiresIn    int32  `protobuf:"varint,4,opt,name=expires_in,json=expiresIn,proto3" json:"expires_in,omitempty"`
	// contains filtered or unexported fields
}

type CompletePasskeyRegistrationRequest struct {
	ChallengeId string `protobuf:"bytes,1,opt,name=challenge_id,json=challengeId,proto3" json:"challenge_id,omitempty"`
	// JSON string of the PublicKeyCredential returned by navigator.credentials.create
	CredentialJson string `protobuf:"bytes,2,opt,name=credential_json,json=credentialJson,proto3" json:"credential_json,omitempty"`
	DeviceName     string `protobuf:"bytes,3,opt,name=device_name,json=deviceName,proto3" json:"device_name,omitempty"`
	// contains filtered or unexported fields
}

type CompletePasskeyRegistrationResponse struct {
	Credential *PasskeyCredentialInfo `protobuf:"bytes,1,opt,name=credential,proto3" json:"credential,omitempty"`
	// contains filtered or unexported fields
}

type ConfirmEmailChangeRequest struct {
	Token string `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
	// contains filtered or unexported fields
}

type ConfirmEmailChangeResponse struct {
	User *User `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	// contains filtered or unexported fields
}

type ConfirmPasswordResetRequest struct {
	Token       string `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
	NewPassword string `protobuf:"bytes,2,opt,name=new_password,json=newPassword,proto3" json:"new_password,omitempty"`
	// contains filtered or unexported fields
}

type ConfirmPasswordResetResponse struct {
	// contains filtered or unexported fields
}

type CreateGroupRequest struct {
	Name        string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	TenantId    string `protobuf:"bytes,3,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	CreatedBy   string `protobuf:"bytes,4,opt,name=created_by,json=createdBy,proto3" json:"created_by,omitempty"` // user_id of creator
	// contains filtered or unexported fields
}

type CreateGroupResponse struct {
	Group *Group `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
	// contains filtered or unexported fields
}

type CreateUserRequest struct {
	Email     string `protobuf:"bytes,1,opt,name=email,proto3" json:"email,omitempty"`
	Name      string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	AvatarUrl string `protobuf:"bytes,3,opt,name=avatar_url,json=avatarUrl,proto3" json:"avatar_url,omitempty"`
	Role      string `protobuf:"bytes,4,opt,name=role,proto3" json:"role,omitempty"`
	TenantId  string `protobuf:"bytes,5,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	// contains filtered or unexported fields
}

type CreateUserResponse struct {
	User *User `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	// contains filtered or unexported fields
}

type DeactivateUserRequest struct {
	UserId string `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
	Reason string `protobuf:"bytes,2,opt,name=reason,proto3" json:"reason,omitempty"`
	// contains filtered or unexported fields
}

type DeactivateUserResponse struct {
	// contains filtered or unexported fields
}

type DeleteGroupRequest struct {
	GroupId  string `protobuf:"bytes,1,opt,name=group_id,json=groupId,proto3" json:"group_id,omitempty"`
	TenantId string `protobuf:"bytes,2,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	// contains filtered or unexported fields
}

type DeleteGroupResponse struct {
	// contains filtered or unexported fields
}

type DeletePasskeyRequest struct {
	CredentialId string `protobuf:"bytes,1,opt,name=credential_id,json=credentialId,proto3" json:"credential_id,omitempty"`
	// contains filtered or unexported fields
}

type DeletePasskeyResponse struct {
	// contains filtered or unexported fields
}

type DeleteUserRequest struct {
	UserId   string `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
	TenantId string `protobuf:"bytes,2,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	// contains filtered or unexported fields
}

type DeleteUserResponse struct {
	// contains filtered or unexported fields
}

type DisableTotpRequest struct {
	Password string `protobuf:"bytes,1,opt,name=password,proto3" json:"password,omitempty"` // Require password confirmation to disable
	// contains filtered or unexported fields
}

type DisableTotpResponse struct {
	// contains filtered or unexported fields
}

type GetCurrentUserRequest struct {
	// contains filtered or unexported fields
}

type GetCurrentUserResponse struct {
	User *User `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	// contains filtered or unexported fields
}

type GetQrLoginSessionRequest struct {
	SessionId string `protobuf:"bytes,1,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	// contains filtered or unexported fields
}

type GetQrLoginSessionResponse struct {
	Status        QrLoginStatus          `protobuf:"varint,1,opt,name=status,proto3,enum=identity.QrLoginStatus" json:"status,omitempty"`
	NewDeviceInfo string                 `protobuf:"bytes,2,opt,name=new_device_info,json=newDeviceInfo,proto3" json:"new_device_info,omitempty"`
	NewDeviceIp   string                 `protobuf:"bytes,3,opt,name=new_device_ip,json=newDeviceIp,proto3" json:"new_device_ip,omitempty"`
	ExpiresAt     *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=expires_at,json=expiresAt,proto3" json:"expires_at,omitempty"`
	// contains filtered or unexported fields
}

type GetUserRequest struct {
	UserId   string `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
	TenantId string `protobuf:"bytes,2,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	// contains filtered or unexported fields
}

type GetUserResponse struct {
	User *User `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	// contains filtered or unexported fields
}

type Group struct {
	Id          string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Name        string                 `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Description string                 `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
	CreatedAt   *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	UpdatedAt   *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=updated_at,json=updatedAt,proto3" json:"updated_at,omitempty"`
	// contains filtered or unexported fields
}

type HelpRequestStatus int32

type InitiateQrLoginRequest struct {
	DeviceInfo string `protobuf:"bytes,1,opt,name=device_info,json=deviceInfo,proto3" json:"device_info,omitempty"` // e.g. "Pixel 8 Pro"
	UserAgent  string `protobuf:"bytes,2,opt,name=user_agent,json=userAgent,proto3" json:"user_agent,omitempty"`
	// contains filtered or unexported fields
}

type InitiateQrLoginResponse struct {
	SessionId string `protobuf:"bytes,1,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`  // opaque token for polling
	QrUrl     string `protobuf:"bytes,2,opt,name=qr_url,json=qrUrl,proto3" json:"qr_url,omitempty"`              // URL to encode in the QR code
	ExpiresIn int32  `protobuf:"varint,3,opt,name=expires_in,json=expiresIn,proto3" json:"expires_in,omitempty"` // seconds until session expires
	// contains filtered or unexported fields
}

type InviteUserRequest struct {
	Email         string `protobuf:"bytes,1,opt,name=email,proto3" json:"email,omitempty"`
	Name          string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Role          string `protobuf:"bytes,3,opt,name=role,proto3" json:"role,omitempty"` // "admin", "member", "guest"
	RecoveryEmail string `protobuf:"bytes,4,opt,name=recovery_email,json=recoveryEmail,proto3" json:"recovery_email,omitempty"`
	QuotaBytes    int64  `protobuf:"varint,5,opt,name=quota_bytes,json=quotaBytes,proto3" json:"quota_bytes,omitempty"`
	// If false: create a pending invitation; the user completes signup via AcceptInvitation.
	// If true: create a fully-active user and return a temporary password to the admin.
	CreateImmediately bool `protobuf:"varint,6,opt,name=create_immediately,json=createImmediately,proto3" json:"create_immediately,omitempty"`
	// contains filtered or unexported fields
}

type InviteUserResponse struct {
	User              *User  `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	InvitationToken   string `protobuf:"bytes,2,opt,name=invitation_token,json=invitationToken,proto3" json:"invitation_token,omitempty"`       // One-time setup token (shown to admin once, emailed in prod)
	SetupUrl          string `protobuf:"bytes,3,opt,name=setup_url,json=setupUrl,proto3" json:"setup_url,omitempty"`                            // Full URL with token embedded
	TemporaryPassword string `protobuf:"bytes,4,opt,name=temporary_password,json=temporaryPassword,proto3" json:"temporary_password,omitempty"` // Only set when create_immediately = true
	// contains filtered or unexported fields
}

type ListAuditEventsRequest struct {
	ActorUserId  string `protobuf:"bytes,1,opt,name=actor_user_id,json=actorUserId,proto3" json:"actor_user_id,omitempty"`    // optional filter
	TargetUserId string `protobuf:"bytes,2,opt,name=target_user_id,json=targetUserId,proto3" json:"target_user_id,omitempty"` // optional filter
	EventType    string `protobuf:"bytes,3,opt,name=event_type,json=eventType,proto3" json:"event_type,omitempty"`            // optional filter
	StartTimeMs  int64  `protobuf:"varint,4,opt,name=start_time_ms,json=startTimeMs,proto3" json:"start_time_ms,omitempty"`   // optional: events >= this ms epoch
	EndTimeMs    int64  `protobuf:"varint,5,opt,name=end_time_ms,json=endTimeMs,proto3" json:"end_time_ms,omitempty"`         // optional: events <= this ms epoch
	Limit        int32  `protobuf:"varint,6,opt,name=limit,proto3" json:"limit,omitempty"`                                    // default 50, max 500
	Cursor       string `protobuf:"bytes,7,opt,name=cursor,proto3" json:"cursor,omitempty"`                                   // opaque pagination cursor (offset-based)
	// contains filtered or unexported fields
}

type ListAuditEventsResponse struct {
	Events     []*AuditEvent `protobuf:"bytes,1,rep,name=events,proto3" json:"events,omitempty"`
	NextCursor string        `protobuf:"bytes,2,opt,name=next_cursor,json=nextCursor,proto3" json:"next_cursor,omitempty"`
	// contains filtered or unexported fields
}

type ListGroupMembersRequest struct {
	GroupId  string `protobuf:"bytes,1,opt,name=group_id,json=groupId,proto3" json:"group_id,omitempty"`
	TenantId string `protobuf:"bytes,2,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	// contains filtered or unexported fields
}

type ListGroupMembersResponse struct {
	Members []*User `protobuf:"bytes,1,rep,name=members,proto3" json:"members,omitempty"`
	// contains filtered or unexported fields
}

type ListGroupsRequest struct {
	TenantId   string `protobuf:"bytes,1,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	Cursor     string `protobuf:"bytes,2,opt,name=cursor,proto3" json:"cursor,omitempty"`
	Limit      int32  `protobuf:"varint,3,opt,name=limit,proto3" json:"limit,omitempty"`
	NameFilter string `protobuf:"bytes,4,opt,name=name_filter,json=nameFilter,proto3" json:"name_filter,omitempty"` // optional substring match on group name
	// contains filtered or unexported fields
}

type ListGroupsResponse struct {
	Groups     []*Group `protobuf:"bytes,1,rep,name=groups,proto3" json:"groups,omitempty"`
	NextCursor string   `protobuf:"bytes,2,opt,name=next_cursor,json=nextCursor,proto3" json:"next_cursor,omitempty"`
	// contains filtered or unexported fields
}

type ListHelpRequestsRequest struct {
	StatusFilter HelpRequestStatus `` // 0 = all
	/* 130-byte string literal not displayed */
	Cursor string `protobuf:"bytes,2,opt,name=cursor,proto3" json:"cursor,omitempty"`
	Limit  int32  `protobuf:"varint,3,opt,name=limit,proto3" json:"limit,omitempty"`
	// contains filtered or unexported fields
}

type ListHelpRequestsResponse struct {
	Requests     []*AdminHelpRequest `protobuf:"bytes,1,rep,name=requests,proto3" json:"requests,omitempty"`
	NextCursor   string              `protobuf:"bytes,2,opt,name=next_cursor,json=nextCursor,proto3" json:"next_cursor,omitempty"`
	PendingCount int32               `protobuf:"varint,3,opt,name=pending_count,json=pendingCount,proto3" json:"pending_count,omitempty"`
	// contains filtered or unexported fields
}