@conduitplatform/grpc-sdk 0.17.0-alpha.8 → 0.17.0-alpha.9

package/dist/index.esm.js

@@ -3,11 +3,11 @@ var ConduitError = class _ConduitError extends Error {
   message;
   name;
   status;
-  constructor(name, status2, message) {
+  constructor(name, status3, message) {
     super(message);
     this.name = name;
     this.message = message;
-    this.status = status2;
+    this.status = status3;
   }
   static unauthorized(message = "Unauthorized") {
     return new _ConduitError("UNAUTHORIZED", 401, message);
@@ -154,7 +154,7 @@ function validateAccessTokenResponse_StatusToJSON(object) {
   }
 }
 function createBaseUserLoginRequest() {
-  return { userId: "", clientId: "" };
+  return { userId: "", clientId: "", realm: void 0 };
 }
 var UserLoginRequest = {
   encode(message, writer = new BinaryWriter2()) {
@@ -164,6 +164,9 @@ var UserLoginRequest = {
     if (message.clientId !== "") {
       writer.uint32(18).string(message.clientId);
     }
+    if (message.realm !== void 0) {
+      writer.uint32(26).string(message.realm);
+    }
     return writer;
   },
   decode(input, length) {
@@ -193,6 +196,13 @@ var UserLoginRequest = {
             message.clientId = reader.string();
             continue;
           }
+          case 3: {
+            if (tag !== 26) {
+              break;
+            }
+            message.realm = reader.string();
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -207,7 +217,8 @@ var UserLoginRequest = {
   fromJSON(object) {
     return {
       userId: isSet(object.userId) ? globalThis.String(object.userId) : "",
-      clientId: isSet(object.clientId) ? globalThis.String(object.clientId) : ""
+      clientId: isSet(object.clientId) ? globalThis.String(object.clientId) : "",
+      realm: isSet(object.realm) ? globalThis.String(object.realm) : void 0
     };
   },
   toJSON(message) {
@@ -218,6 +229,9 @@ var UserLoginRequest = {
     if (message.clientId !== "") {
       obj.clientId = message.clientId;
     }
+    if (message.realm !== void 0) {
+      obj.realm = message.realm;
+    }
     return obj;
   },
   create(base) {
@@ -227,11 +241,19 @@ var UserLoginRequest = {
     const message = createBaseUserLoginRequest();
     message.userId = object.userId ?? "";
     message.clientId = object.clientId ?? "";
+    message.realm = object.realm ?? void 0;
     return message;
   }
 };
 function createBaseUserCreateRequest() {
-  return { email: "", password: void 0, verify: false, anonymousId: void 0, userData: void 0 };
+  return {
+    email: "",
+    password: void 0,
+    verify: false,
+    anonymousId: void 0,
+    userData: void 0,
+    realm: void 0
+  };
 }
 var UserCreateRequest = {
   encode(message, writer = new BinaryWriter2()) {
@@ -250,6 +272,9 @@ var UserCreateRequest = {
     if (message.userData !== void 0) {
       writer.uint32(42).string(message.userData);
     }
+    if (message.realm !== void 0) {
+      writer.uint32(50).string(message.realm);
+    }
     return writer;
   },
   decode(input, length) {
@@ -300,6 +325,13 @@ var UserCreateRequest = {
             message.userData = reader.string();
             continue;
           }
+          case 6: {
+            if (tag !== 50) {
+              break;
+            }
+            message.realm = reader.string();
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -317,7 +349,8 @@ var UserCreateRequest = {
       password: isSet(object.password) ? globalThis.String(object.password) : void 0,
       verify: isSet(object.verify) ? globalThis.Boolean(object.verify) : false,
       anonymousId: isSet(object.anonymousId) ? globalThis.String(object.anonymousId) : void 0,
-      userData: isSet(object.userData) ? globalThis.String(object.userData) : void 0
+      userData: isSet(object.userData) ? globalThis.String(object.userData) : void 0,
+      realm: isSet(object.realm) ? globalThis.String(object.realm) : void 0
     };
   },
   toJSON(message) {
@@ -337,6 +370,9 @@ var UserCreateRequest = {
     if (message.userData !== void 0) {
       obj.userData = message.userData;
     }
+    if (message.realm !== void 0) {
+      obj.realm = message.realm;
+    }
     return obj;
   },
   create(base) {
@@ -349,11 +385,12 @@ var UserCreateRequest = {
     message.verify = object.verify ?? false;
     message.anonymousId = object.anonymousId ?? void 0;
     message.userData = object.userData ?? void 0;
+    message.realm = object.realm ?? void 0;
     return message;
   }
 };
 function createBaseUserCreateByUsernameRequest() {
-  return { username: "", password: void 0, anonymousId: void 0 };
+  return { username: "", password: void 0, anonymousId: void 0, realm: void 0 };
 }
 var UserCreateByUsernameRequest = {
   encode(message, writer = new BinaryWriter2()) {
@@ -366,6 +403,9 @@ var UserCreateByUsernameRequest = {
     if (message.anonymousId !== void 0) {
       writer.uint32(26).string(message.anonymousId);
     }
+    if (message.realm !== void 0) {
+      writer.uint32(34).string(message.realm);
+    }
     return writer;
   },
   decode(input, length) {
@@ -402,6 +442,13 @@ var UserCreateByUsernameRequest = {
             message.anonymousId = reader.string();
             continue;
           }
+          case 4: {
+            if (tag !== 34) {
+              break;
+            }
+            message.realm = reader.string();
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -417,7 +464,8 @@ var UserCreateByUsernameRequest = {
     return {
       username: isSet(object.username) ? globalThis.String(object.username) : "",
       password: isSet(object.password) ? globalThis.String(object.password) : void 0,
-      anonymousId: isSet(object.anonymousId) ? globalThis.String(object.anonymousId) : void 0
+      anonymousId: isSet(object.anonymousId) ? globalThis.String(object.anonymousId) : void 0,
+      realm: isSet(object.realm) ? globalThis.String(object.realm) : void 0
     };
   },
   toJSON(message) {
@@ -431,6 +479,9 @@ var UserCreateByUsernameRequest = {
     if (message.anonymousId !== void 0) {
       obj.anonymousId = message.anonymousId;
     }
+    if (message.realm !== void 0) {
+      obj.realm = message.realm;
+    }
     return obj;
   },
   create(base) {
@@ -441,11 +492,12 @@ var UserCreateByUsernameRequest = {
     message.username = object.username ?? "";
     message.password = object.password ?? void 0;
     message.anonymousId = object.anonymousId ?? void 0;
+    message.realm = object.realm ?? void 0;
     return message;
   }
 };
 function createBaseUserChangePass() {
-  return { email: "", password: void 0 };
+  return { email: "", password: void 0, realm: void 0 };
 }
 var UserChangePass = {
   encode(message, writer = new BinaryWriter2()) {
@@ -455,6 +507,9 @@ var UserChangePass = {
     if (message.password !== void 0) {
       writer.uint32(18).string(message.password);
     }
+    if (message.realm !== void 0) {
+      writer.uint32(26).string(message.realm);
+    }
     return writer;
   },
   decode(input, length) {
@@ -484,6 +539,13 @@ var UserChangePass = {
             message.password = reader.string();
             continue;
           }
+          case 3: {
+            if (tag !== 26) {
+              break;
+            }
+            message.realm = reader.string();
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -498,7 +560,8 @@ var UserChangePass = {
   fromJSON(object) {
     return {
       email: isSet(object.email) ? globalThis.String(object.email) : "",
-      password: isSet(object.password) ? globalThis.String(object.password) : void 0
+      password: isSet(object.password) ? globalThis.String(object.password) : void 0,
+      realm: isSet(object.realm) ? globalThis.String(object.realm) : void 0
     };
   },
   toJSON(message) {
@@ -509,6 +572,9 @@ var UserChangePass = {
     if (message.password !== void 0) {
       obj.password = message.password;
     }
+    if (message.realm !== void 0) {
+      obj.realm = message.realm;
+    }
     return obj;
   },
   create(base) {
@@ -518,6 +584,7 @@ var UserChangePass = {
     const message = createBaseUserChangePass();
     message.email = object.email ?? "";
     message.password = object.password ?? void 0;
+    message.realm = object.realm ?? void 0;
     return message;
   }
 };
@@ -1128,7 +1195,7 @@ var UserCreateResponse = {
   }
 };
 function createBaseTeam() {
-  return { id: "", name: "", parentTeam: "", isDefault: false };
+  return { id: "", name: "", parentTeam: "", isDefault: false, realmEnabled: false, realmSlug: void 0 };
 }
 var Team = {
   encode(message, writer = new BinaryWriter2()) {
@@ -1144,6 +1211,12 @@ var Team = {
     if (message.isDefault !== false) {
       writer.uint32(32).bool(message.isDefault);
     }
+    if (message.realmEnabled !== false) {
+      writer.uint32(40).bool(message.realmEnabled);
+    }
+    if (message.realmSlug !== void 0) {
+      writer.uint32(50).string(message.realmSlug);
+    }
     return writer;
   },
   decode(input, length) {
@@ -1187,6 +1260,20 @@ var Team = {
             message.isDefault = reader.bool();
             continue;
           }
+          case 5: {
+            if (tag !== 40) {
+              break;
+            }
+            message.realmEnabled = reader.bool();
+            continue;
+          }
+          case 6: {
+            if (tag !== 50) {
+              break;
+            }
+            message.realmSlug = reader.string();
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -1203,7 +1290,9 @@ var Team = {
       id: isSet(object.id) ? globalThis.String(object.id) : "",
       name: isSet(object.name) ? globalThis.String(object.name) : "",
       parentTeam: isSet(object.parentTeam) ? globalThis.String(object.parentTeam) : "",
-      isDefault: isSet(object.isDefault) ? globalThis.Boolean(object.isDefault) : false
+      isDefault: isSet(object.isDefault) ? globalThis.Boolean(object.isDefault) : false,
+      realmEnabled: isSet(object.realmEnabled) ? globalThis.Boolean(object.realmEnabled) : false,
+      realmSlug: isSet(object.realmSlug) ? globalThis.String(object.realmSlug) : void 0
     };
   },
   toJSON(message) {
@@ -1220,6 +1309,12 @@ var Team = {
     if (message.isDefault !== false) {
       obj.isDefault = message.isDefault;
     }
+    if (message.realmEnabled !== false) {
+      obj.realmEnabled = message.realmEnabled;
+    }
+    if (message.realmSlug !== void 0) {
+      obj.realmSlug = message.realmSlug;
+    }
     return obj;
   },
   create(base) {
@@ -1231,6 +1326,8 @@ var Team = {
     message.name = object.name ?? "";
     message.parentTeam = object.parentTeam ?? "";
     message.isDefault = object.isDefault ?? false;
+    message.realmEnabled = object.realmEnabled ?? false;
+    message.realmSlug = object.realmSlug ?? void 0;
     return message;
   }
 };
@@ -1371,6 +1468,126 @@ var ModifyTeamMembersRequest = {
     return message;
   }
 };
+function createBaseGetUserRequest() {
+  return { userId: "" };
+}
+var GetUserRequest = {
+  encode(message, writer = new BinaryWriter2()) {
+    if (message.userId !== "") {
+      writer.uint32(10).string(message.userId);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader2 ? input : new BinaryReader2(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseGetUserRequest();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.userId = reader.string();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return { userId: isSet(object.userId) ? globalThis.String(object.userId) : "" };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.userId !== "") {
+      obj.userId = message.userId;
+    }
+    return obj;
+  },
+  create(base) {
+    return GetUserRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseGetUserRequest();
+    message.userId = object.userId ?? "";
+    return message;
+  }
+};
+function createBaseGetUserResponse() {
+  return { user: "" };
+}
+var GetUserResponse = {
+  encode(message, writer = new BinaryWriter2()) {
+    if (message.user !== "") {
+      writer.uint32(10).string(message.user);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader2 ? input : new BinaryReader2(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseGetUserResponse();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.user = reader.string();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return { user: isSet(object.user) ? globalThis.String(object.user) : "" };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.user !== "") {
+      obj.user = message.user;
+    }
+    return obj;
+  },
+  create(base) {
+    return GetUserResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseGetUserResponse();
+    message.user = object.user ?? "";
+    return message;
+  }
+};
 function createBaseValidateAccessTokenRequest() {
   return { accessToken: "", path: void 0 };
 }
@@ -1449,7 +1666,7 @@ var ValidateAccessTokenRequest = {
   }
 };
 function createBaseValidateAccessTokenResponse() {
-  return { status: 0, userId: void 0 };
+  return { status: 0, userId: void 0, realm: void 0, homeRealm: void 0 };
 }
 var ValidateAccessTokenResponse = {
   encode(message, writer = new BinaryWriter2()) {
@@ -1459,6 +1676,12 @@ var ValidateAccessTokenResponse = {
     if (message.userId !== void 0) {
       writer.uint32(18).string(message.userId);
     }
+    if (message.realm !== void 0) {
+      writer.uint32(26).string(message.realm);
+    }
+    if (message.homeRealm !== void 0) {
+      writer.uint32(34).string(message.homeRealm);
+    }
     return writer;
   },
   decode(input, length) {
@@ -1488,6 +1711,20 @@ var ValidateAccessTokenResponse = {
             message.userId = reader.string();
             continue;
           }
+          case 3: {
+            if (tag !== 26) {
+              break;
+            }
+            message.realm = reader.string();
+            continue;
+          }
+          case 4: {
+            if (tag !== 34) {
+              break;
+            }
+            message.homeRealm = reader.string();
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -1502,7 +1739,9 @@ var ValidateAccessTokenResponse = {
   fromJSON(object) {
     return {
       status: isSet(object.status) ? validateAccessTokenResponse_StatusFromJSON(object.status) : 0,
-      userId: isSet(object.userId) ? globalThis.String(object.userId) : void 0
+      userId: isSet(object.userId) ? globalThis.String(object.userId) : void 0,
+      realm: isSet(object.realm) ? globalThis.String(object.realm) : void 0,
+      homeRealm: isSet(object.homeRealm) ? globalThis.String(object.homeRealm) : void 0
     };
   },
   toJSON(message) {
@@ -1513,6 +1752,12 @@ var ValidateAccessTokenResponse = {
     if (message.userId !== void 0) {
       obj.userId = message.userId;
     }
+    if (message.realm !== void 0) {
+      obj.realm = message.realm;
+    }
+    if (message.homeRealm !== void 0) {
+      obj.homeRealm = message.homeRealm;
+    }
     return obj;
   },
   create(base) {
@@ -1522,17 +1767,22 @@ var ValidateAccessTokenResponse = {
     const message = createBaseValidateAccessTokenResponse();
     message.status = object.status ?? 0;
     message.userId = object.userId ?? void 0;
+    message.realm = object.realm ?? void 0;
+    message.homeRealm = object.homeRealm ?? void 0;
     return message;
   }
 };
 function createBaseAnonymousUserCreateRequest() {
-  return { clientId: "" };
+  return { clientId: "", realm: void 0 };
 }
 var AnonymousUserCreateRequest = {
   encode(message, writer = new BinaryWriter2()) {
     if (message.clientId !== "") {
       writer.uint32(10).string(message.clientId);
     }
+    if (message.realm !== void 0) {
+      writer.uint32(18).string(message.realm);
+    }
     return writer;
   },
   decode(input, length) {
@@ -1555,6 +1805,13 @@ var AnonymousUserCreateRequest = {
             message.clientId = reader.string();
             continue;
           }
+          case 2: {
+            if (tag !== 18) {
+              break;
+            }
+            message.realm = reader.string();
+            continue;
+          }
         }
         if ((tag & 7) === 4 || tag === 0) {
           break;
@@ -1567,13 +1824,19 @@ var AnonymousUserCreateRequest = {
     }
   },
   fromJSON(object) {
-    return { clientId: isSet(object.clientId) ? globalThis.String(object.clientId) : "" };
+    return {
+      clientId: isSet(object.clientId) ? globalThis.String(object.clientId) : "",
+      realm: isSet(object.realm) ? globalThis.String(object.realm) : void 0
+    };
   },
   toJSON(message) {
     const obj = {};
     if (message.clientId !== "") {
       obj.clientId = message.clientId;
     }
+    if (message.realm !== void 0) {
+      obj.realm = message.realm;
+    }
     return obj;
   },
   create(base) {
@@ -1582,6 +1845,7 @@ var AnonymousUserCreateRequest = {
   fromPartial(object) {
     const message = createBaseAnonymousUserCreateRequest();
     message.clientId = object.clientId ?? "";
+    message.realm = object.realm ?? void 0;
     return message;
   }
 };
@@ -2148,80 +2412,615 @@ var UpdateTeamRequest = {
     return message;
   }
 };
-var AuthenticationDefinition = {
-  name: "Authentication",
-  fullName: "authentication.Authentication",
-  methods: {
-    userLogin: {
-      name: "UserLogin",
-      requestType: UserLoginRequest,
-      requestStream: false,
-      responseType: UserLoginResponse,
-      responseStream: false,
-      options: {}
-    },
-    userCreate: {
-      name: "UserCreate",
-      requestType: UserCreateRequest,
-      requestStream: false,
-      responseType: UserCreateResponse,
-      responseStream: false,
-      options: {}
-    },
-    userCreateByUsername: {
-      name: "UserCreateByUsername",
-      requestType: UserCreateByUsernameRequest,
-      requestStream: false,
-      responseType: UserCreateResponse,
-      responseStream: false,
-      options: {}
-    },
-    userModifyStatus: {
-      name: "UserModifyStatus",
-      requestType: UserModifyStatusRequest,
-      requestStream: false,
-      responseType: UserModifyStatusResponse,
-      responseStream: false,
-      options: {}
-    },
-    anonymousUserCreate: {
-      name: "AnonymousUserCreate",
-      requestType: AnonymousUserCreateRequest,
-      requestStream: false,
-      responseType: UserLoginResponse,
-      responseStream: false,
-      options: {}
-    },
-    changePass: {
-      name: "ChangePass",
-      requestType: UserChangePass,
-      requestStream: false,
-      responseType: UserCreateResponse,
-      responseStream: false,
-      options: {}
-    },
-    changeEmail: {
-      name: "ChangeEmail",
-      requestType: UserChangeEmail,
-      requestStream: false,
-      responseType: UserChangeEmailResponse,
-      responseStream: false,
-      options: {}
-    },
-    userDelete: {
-      name: "UserDelete",
-      requestType: UserDeleteRequest,
-      requestStream: false,
-      responseType: UserDeleteResponse,
-      responseStream: false,
-      options: {}
-    },
-    getTeam: {
-      name: "GetTeam",
-      requestType: GetTeamRequest,
-      requestStream: false,
-      responseType: Team,
-      responseStream: false,
+function createBaseSetTeamRealmRequest() {
+  return { teamId: "", slug: "", settingsJson: void 0, force: false };
+}
+var SetTeamRealmRequest = {
+  encode(message, writer = new BinaryWriter2()) {
+    if (message.teamId !== "") {
+      writer.uint32(10).string(message.teamId);
+    }
+    if (message.slug !== "") {
+      writer.uint32(18).string(message.slug);
+    }
+    if (message.settingsJson !== void 0) {
+      writer.uint32(26).string(message.settingsJson);
+    }
+    if (message.force !== false) {
+      writer.uint32(32).bool(message.force);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader2 ? input : new BinaryReader2(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseSetTeamRealmRequest();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.teamId = reader.string();
+            continue;
+          }
+          case 2: {
+            if (tag !== 18) {
+              break;
+            }
+            message.slug = reader.string();
+            continue;
+          }
+          case 3: {
+            if (tag !== 26) {
+              break;
+            }
+            message.settingsJson = reader.string();
+            continue;
+          }
+          case 4: {
+            if (tag !== 32) {
+              break;
+            }
+            message.force = reader.bool();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return {
+      teamId: isSet(object.teamId) ? globalThis.String(object.teamId) : "",
+      slug: isSet(object.slug) ? globalThis.String(object.slug) : "",
+      settingsJson: isSet(object.settingsJson) ? globalThis.String(object.settingsJson) : void 0,
+      force: isSet(object.force) ? globalThis.Boolean(object.force) : false
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.teamId !== "") {
+      obj.teamId = message.teamId;
+    }
+    if (message.slug !== "") {
+      obj.slug = message.slug;
+    }
+    if (message.settingsJson !== void 0) {
+      obj.settingsJson = message.settingsJson;
+    }
+    if (message.force !== false) {
+      obj.force = message.force;
+    }
+    return obj;
+  },
+  create(base) {
+    return SetTeamRealmRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseSetTeamRealmRequest();
+    message.teamId = object.teamId ?? "";
+    message.slug = object.slug ?? "";
+    message.settingsJson = object.settingsJson ?? void 0;
+    message.force = object.force ?? false;
+    return message;
+  }
+};
+function createBaseGetRealmSettingsRequest() {
+  return { teamId: "" };
+}
+var GetRealmSettingsRequest = {
+  encode(message, writer = new BinaryWriter2()) {
+    if (message.teamId !== "") {
+      writer.uint32(10).string(message.teamId);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader2 ? input : new BinaryReader2(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseGetRealmSettingsRequest();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.teamId = reader.string();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return { teamId: isSet(object.teamId) ? globalThis.String(object.teamId) : "" };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.teamId !== "") {
+      obj.teamId = message.teamId;
+    }
+    return obj;
+  },
+  create(base) {
+    return GetRealmSettingsRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseGetRealmSettingsRequest();
+    message.teamId = object.teamId ?? "";
+    return message;
+  }
+};
+function createBaseRealmResponse() {
+  return { team: void 0, settingsJson: "", homeCount: 0, guestCount: 0 };
+}
+var RealmResponse = {
+  encode(message, writer = new BinaryWriter2()) {
+    if (message.team !== void 0) {
+      Team.encode(message.team, writer.uint32(10).fork()).join();
+    }
+    if (message.settingsJson !== "") {
+      writer.uint32(18).string(message.settingsJson);
+    }
+    if (message.homeCount !== 0) {
+      writer.uint32(24).int32(message.homeCount);
+    }
+    if (message.guestCount !== 0) {
+      writer.uint32(32).int32(message.guestCount);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader2 ? input : new BinaryReader2(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseRealmResponse();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.team = Team.decode(reader, reader.uint32());
+            continue;
+          }
+          case 2: {
+            if (tag !== 18) {
+              break;
+            }
+            message.settingsJson = reader.string();
+            continue;
+          }
+          case 3: {
+            if (tag !== 24) {
+              break;
+            }
+            message.homeCount = reader.int32();
+            continue;
+          }
+          case 4: {
+            if (tag !== 32) {
+              break;
+            }
+            message.guestCount = reader.int32();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return {
+      team: isSet(object.team) ? Team.fromJSON(object.team) : void 0,
+      settingsJson: isSet(object.settingsJson) ? globalThis.String(object.settingsJson) : "",
+      homeCount: isSet(object.homeCount) ? globalThis.Number(object.homeCount) : 0,
+      guestCount: isSet(object.guestCount) ? globalThis.Number(object.guestCount) : 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.team !== void 0) {
+      obj.team = Team.toJSON(message.team);
+    }
+    if (message.settingsJson !== "") {
+      obj.settingsJson = message.settingsJson;
+    }
+    if (message.homeCount !== 0) {
+      obj.homeCount = Math.round(message.homeCount);
+    }
+    if (message.guestCount !== 0) {
+      obj.guestCount = Math.round(message.guestCount);
+    }
+    return obj;
+  },
+  create(base) {
+    return RealmResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseRealmResponse();
+    message.team = object.team !== void 0 && object.team !== null ? Team.fromPartial(object.team) : void 0;
+    message.settingsJson = object.settingsJson ?? "";
+    message.homeCount = object.homeCount ?? 0;
+    message.guestCount = object.guestCount ?? 0;
+    return message;
+  }
+};
+function createBaseUnsetTeamRealmRequest() {
+  return { teamId: "", force: false };
+}
+var UnsetTeamRealmRequest = {
+  encode(message, writer = new BinaryWriter2()) {
+    if (message.teamId !== "") {
+      writer.uint32(10).string(message.teamId);
+    }
+    if (message.force !== false) {
+      writer.uint32(16).bool(message.force);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader2 ? input : new BinaryReader2(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseUnsetTeamRealmRequest();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.teamId = reader.string();
+            continue;
+          }
+          case 2: {
+            if (tag !== 16) {
+              break;
+            }
+            message.force = reader.bool();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return {
+      teamId: isSet(object.teamId) ? globalThis.String(object.teamId) : "",
+      force: isSet(object.force) ? globalThis.Boolean(object.force) : false
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.teamId !== "") {
+      obj.teamId = message.teamId;
+    }
+    if (message.force !== false) {
+      obj.force = message.force;
+    }
+    return obj;
+  },
+  create(base) {
+    return UnsetTeamRealmRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseUnsetTeamRealmRequest();
+    message.teamId = object.teamId ?? "";
+    message.force = object.force ?? false;
+    return message;
+  }
+};
+function createBaseUnsetTeamRealmResponse() {
+  return { message: "", blockedUsers: 0 };
+}
+var UnsetTeamRealmResponse = {
+  encode(message, writer = new BinaryWriter2()) {
+    if (message.message !== "") {
+      writer.uint32(10).string(message.message);
+    }
+    if (message.blockedUsers !== 0) {
+      writer.uint32(16).int32(message.blockedUsers);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader2 ? input : new BinaryReader2(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseUnsetTeamRealmResponse();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.message = reader.string();
+            continue;
+          }
+          case 2: {
+            if (tag !== 16) {
+              break;
+            }
+            message.blockedUsers = reader.int32();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return {
+      message: isSet(object.message) ? globalThis.String(object.message) : "",
+      blockedUsers: isSet(object.blockedUsers) ? globalThis.Number(object.blockedUsers) : 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.message !== "") {
+      obj.message = message.message;
+    }
+    if (message.blockedUsers !== 0) {
+      obj.blockedUsers = Math.round(message.blockedUsers);
+    }
+    return obj;
+  },
+  create(base) {
+    return UnsetTeamRealmResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseUnsetTeamRealmResponse();
+    message.message = object.message ?? "";
+    message.blockedUsers = object.blockedUsers ?? 0;
+    return message;
+  }
+};
+function createBaseRealmMembershipRequest() {
+  return { teamId: "", userId: "", type: "", force: false };
+}
+var RealmMembershipRequest = {
+  encode(message, writer = new BinaryWriter2()) {
+    if (message.teamId !== "") {
+      writer.uint32(10).string(message.teamId);
+    }
+    if (message.userId !== "") {
+      writer.uint32(18).string(message.userId);
+    }
+    if (message.type !== "") {
+      writer.uint32(26).string(message.type);
+    }
+    if (message.force !== false) {
+      writer.uint32(32).bool(message.force);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader2 ? input : new BinaryReader2(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseRealmMembershipRequest();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.teamId = reader.string();
+            continue;
+          }
+          case 2: {
+            if (tag !== 18) {
+              break;
+            }
+            message.userId = reader.string();
+            continue;
+          }
+          case 3: {
+            if (tag !== 26) {
+              break;
+            }
+            message.type = reader.string();
+            continue;
+          }
+          case 4: {
+            if (tag !== 32) {
+              break;
+            }
+            message.force = reader.bool();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return {
+      teamId: isSet(object.teamId) ? globalThis.String(object.teamId) : "",
+      userId: isSet(object.userId) ? globalThis.String(object.userId) : "",
+      type: isSet(object.type) ? globalThis.String(object.type) : "",
+      force: isSet(object.force) ? globalThis.Boolean(object.force) : false
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.teamId !== "") {
+      obj.teamId = message.teamId;
+    }
+    if (message.userId !== "") {
+      obj.userId = message.userId;
+    }
+    if (message.type !== "") {
+      obj.type = message.type;
+    }
+    if (message.force !== false) {
+      obj.force = message.force;
+    }
+    return obj;
+  },
+  create(base) {
+    return RealmMembershipRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseRealmMembershipRequest();
+    message.teamId = object.teamId ?? "";
+    message.userId = object.userId ?? "";
+    message.type = object.type ?? "";
+    message.force = object.force ?? false;
+    return message;
+  }
+};
+var AuthenticationDefinition = {
+  name: "Authentication",
+  fullName: "authentication.Authentication",
+  methods: {
+    userLogin: {
+      name: "UserLogin",
+      requestType: UserLoginRequest,
+      requestStream: false,
+      responseType: UserLoginResponse,
+      responseStream: false,
+      options: {}
+    },
+    userCreate: {
+      name: "UserCreate",
+      requestType: UserCreateRequest,
+      requestStream: false,
+      responseType: UserCreateResponse,
+      responseStream: false,
+      options: {}
+    },
+    userCreateByUsername: {
+      name: "UserCreateByUsername",
+      requestType: UserCreateByUsernameRequest,
+      requestStream: false,
+      responseType: UserCreateResponse,
+      responseStream: false,
+      options: {}
+    },
+    userModifyStatus: {
+      name: "UserModifyStatus",
+      requestType: UserModifyStatusRequest,
+      requestStream: false,
+      responseType: UserModifyStatusResponse,
+      responseStream: false,
+      options: {}
+    },
+    anonymousUserCreate: {
+      name: "AnonymousUserCreate",
+      requestType: AnonymousUserCreateRequest,
+      requestStream: false,
+      responseType: UserLoginResponse,
+      responseStream: false,
+      options: {}
+    },
+    changePass: {
+      name: "ChangePass",
+      requestType: UserChangePass,
+      requestStream: false,
+      responseType: UserCreateResponse,
+      responseStream: false,
+      options: {}
+    },
+    changeEmail: {
+      name: "ChangeEmail",
+      requestType: UserChangeEmail,
+      requestStream: false,
+      responseType: UserChangeEmailResponse,
+      responseStream: false,
+      options: {}
+    },
+    userDelete: {
+      name: "UserDelete",
+      requestType: UserDeleteRequest,
+      requestStream: false,
+      responseType: UserDeleteResponse,
+      responseStream: false,
+      options: {}
+    },
+    getTeam: {
+      name: "GetTeam",
+      requestType: GetTeamRequest,
+      requestStream: false,
+      responseType: Team,
+      responseStream: false,
       options: {}
     },
     createTeam: {
@@ -2256,6 +3055,14 @@ var AuthenticationDefinition = {
       responseStream: false,
       options: {}
     },
+    getUser: {
+      name: "GetUser",
+      requestType: GetUserRequest,
+      requestStream: false,
+      responseType: GetUserResponse,
+      responseStream: false,
+      options: {}
+    },
     validateAccessToken: {
       name: "ValidateAccessToken",
       requestType: ValidateAccessTokenRequest,
@@ -2287,6 +3094,46 @@ var AuthenticationDefinition = {
       responseType: Team,
       responseStream: false,
       options: {}
+    },
+    setTeamRealm: {
+      name: "SetTeamRealm",
+      requestType: SetTeamRealmRequest,
+      requestStream: false,
+      responseType: RealmResponse,
+      responseStream: false,
+      options: {}
+    },
+    getRealmSettings: {
+      name: "GetRealmSettings",
+      requestType: GetRealmSettingsRequest,
+      requestStream: false,
+      responseType: RealmResponse,
+      responseStream: false,
+      options: {}
+    },
+    unsetTeamRealm: {
+      name: "UnsetTeamRealm",
+      requestType: UnsetTeamRealmRequest,
+      requestStream: false,
+      responseType: UnsetTeamRealmResponse,
+      responseStream: false,
+      options: {}
+    },
+    grantRealmMembership: {
+      name: "GrantRealmMembership",
+      requestType: RealmMembershipRequest,
+      requestStream: false,
+      responseType: Empty,
+      responseStream: false,
+      options: {}
+    },
+    revokeRealmMembership: {
+      name: "RevokeRealmMembership",
+      requestType: RealmMembershipRequest,
+      requestStream: false,
+      responseType: Empty,
+      responseStream: false,
+      options: {}
     }
   }
 };
@@ -3035,21 +3882,230 @@ var FindRelationRequest = {
             if (tag !== 18) {
               break;
             }
-            message.relation = reader.string();
-            continue;
-          }
-          case 3: {
-            if (tag !== 26) {
-              break;
-            }
-            message.resource = reader.string();
-            continue;
-          }
-          case 4: {
-            if (tag !== 34) {
-              break;
-            }
-            message.subjectType = reader.string();
+            message.relation = reader.string();
+            continue;
+          }
+          case 3: {
+            if (tag !== 26) {
+              break;
+            }
+            message.resource = reader.string();
+            continue;
+          }
+          case 4: {
+            if (tag !== 34) {
+              break;
+            }
+            message.subjectType = reader.string();
+            continue;
+          }
+          case 5: {
+            if (tag !== 42) {
+              break;
+            }
+            message.resourceType = reader.string();
+            continue;
+          }
+          case 6: {
+            if (tag !== 48) {
+              break;
+            }
+            message.skip = reader.int32();
+            continue;
+          }
+          case 7: {
+            if (tag !== 56) {
+              break;
+            }
+            message.limit = reader.int32();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return {
+      subject: isSet2(object.subject) ? globalThis.String(object.subject) : void 0,
+      relation: isSet2(object.relation) ? globalThis.String(object.relation) : void 0,
+      resource: isSet2(object.resource) ? globalThis.String(object.resource) : void 0,
+      subjectType: isSet2(object.subjectType) ? globalThis.String(object.subjectType) : void 0,
+      resourceType: isSet2(object.resourceType) ? globalThis.String(object.resourceType) : void 0,
+      skip: isSet2(object.skip) ? globalThis.Number(object.skip) : void 0,
+      limit: isSet2(object.limit) ? globalThis.Number(object.limit) : void 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.subject !== void 0) {
+      obj.subject = message.subject;
+    }
+    if (message.relation !== void 0) {
+      obj.relation = message.relation;
+    }
+    if (message.resource !== void 0) {
+      obj.resource = message.resource;
+    }
+    if (message.subjectType !== void 0) {
+      obj.subjectType = message.subjectType;
+    }
+    if (message.resourceType !== void 0) {
+      obj.resourceType = message.resourceType;
+    }
+    if (message.skip !== void 0) {
+      obj.skip = Math.round(message.skip);
+    }
+    if (message.limit !== void 0) {
+      obj.limit = Math.round(message.limit);
+    }
+    return obj;
+  },
+  create(base) {
+    return FindRelationRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFindRelationRequest();
+    message.subject = object.subject ?? void 0;
+    message.relation = object.relation ?? void 0;
+    message.resource = object.resource ?? void 0;
+    message.subjectType = object.subjectType ?? void 0;
+    message.resourceType = object.resourceType ?? void 0;
+    message.skip = object.skip ?? void 0;
+    message.limit = object.limit ?? void 0;
+    return message;
+  }
+};
+function createBaseFindRelationResponse() {
+  return { relations: [], count: 0 };
+}
+var FindRelationResponse = {
+  encode(message, writer = new BinaryWriter3()) {
+    for (const v of message.relations) {
+      Relation.encode(v, writer.uint32(10).fork()).join();
+    }
+    if (message.count !== 0) {
+      writer.uint32(16).int32(message.count);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader3 ? input : new BinaryReader3(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseFindRelationResponse();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.relations.push(Relation.decode(reader, reader.uint32()));
+            continue;
+          }
+          case 2: {
+            if (tag !== 16) {
+              break;
+            }
+            message.count = reader.int32();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return {
+      relations: globalThis.Array.isArray(object?.relations) ? object.relations.map((e) => Relation.fromJSON(e)) : [],
+      count: isSet2(object.count) ? globalThis.Number(object.count) : 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.relations?.length) {
+      obj.relations = message.relations.map((e) => Relation.toJSON(e));
+    }
+    if (message.count !== 0) {
+      obj.count = Math.round(message.count);
+    }
+    return obj;
+  },
+  create(base) {
+    return FindRelationResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFindRelationResponse();
+    message.relations = object.relations?.map((e) => Relation.fromPartial(e)) || [];
+    message.count = object.count ?? 0;
+    return message;
+  }
+};
+function createBaseAllowedResourcesRequest() {
+  return { subject: "", action: "", resourceType: "", skip: 0, limit: 0 };
+}
+var AllowedResourcesRequest = {
+  encode(message, writer = new BinaryWriter3()) {
+    if (message.subject !== "") {
+      writer.uint32(10).string(message.subject);
+    }
+    if (message.action !== "") {
+      writer.uint32(18).string(message.action);
+    }
+    if (message.resourceType !== "") {
+      writer.uint32(42).string(message.resourceType);
+    }
+    if (message.skip !== 0) {
+      writer.uint32(48).int32(message.skip);
+    }
+    if (message.limit !== 0) {
+      writer.uint32(56).int32(message.limit);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader3 ? input : new BinaryReader3(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseAllowedResourcesRequest();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.subject = reader.string();
+            continue;
+          }
+          case 2: {
+            if (tag !== 18) {
+              break;
+            }
+            message.action = reader.string();
             continue;
           }
           case 5: {
@@ -3086,62 +4142,52 @@ var FindRelationRequest = {
   },
   fromJSON(object) {
     return {
-      subject: isSet2(object.subject) ? globalThis.String(object.subject) : void 0,
-      relation: isSet2(object.relation) ? globalThis.String(object.relation) : void 0,
-      resource: isSet2(object.resource) ? globalThis.String(object.resource) : void 0,
-      subjectType: isSet2(object.subjectType) ? globalThis.String(object.subjectType) : void 0,
-      resourceType: isSet2(object.resourceType) ? globalThis.String(object.resourceType) : void 0,
-      skip: isSet2(object.skip) ? globalThis.Number(object.skip) : void 0,
-      limit: isSet2(object.limit) ? globalThis.Number(object.limit) : void 0
+      subject: isSet2(object.subject) ? globalThis.String(object.subject) : "",
+      action: isSet2(object.action) ? globalThis.String(object.action) : "",
+      resourceType: isSet2(object.resourceType) ? globalThis.String(object.resourceType) : "",
+      skip: isSet2(object.skip) ? globalThis.Number(object.skip) : 0,
+      limit: isSet2(object.limit) ? globalThis.Number(object.limit) : 0
     };
   },
   toJSON(message) {
     const obj = {};
-    if (message.subject !== void 0) {
+    if (message.subject !== "") {
       obj.subject = message.subject;
     }
-    if (message.relation !== void 0) {
-      obj.relation = message.relation;
-    }
-    if (message.resource !== void 0) {
-      obj.resource = message.resource;
-    }
-    if (message.subjectType !== void 0) {
-      obj.subjectType = message.subjectType;
+    if (message.action !== "") {
+      obj.action = message.action;
     }
-    if (message.resourceType !== void 0) {
+    if (message.resourceType !== "") {
       obj.resourceType = message.resourceType;
     }
-    if (message.skip !== void 0) {
+    if (message.skip !== 0) {
       obj.skip = Math.round(message.skip);
     }
-    if (message.limit !== void 0) {
+    if (message.limit !== 0) {
       obj.limit = Math.round(message.limit);
     }
     return obj;
   },
   create(base) {
-    return FindRelationRequest.fromPartial(base ?? {});
+    return AllowedResourcesRequest.fromPartial(base ?? {});
   },
   fromPartial(object) {
-    const message = createBaseFindRelationRequest();
-    message.subject = object.subject ?? void 0;
-    message.relation = object.relation ?? void 0;
-    message.resource = object.resource ?? void 0;
-    message.subjectType = object.subjectType ?? void 0;
-    message.resourceType = object.resourceType ?? void 0;
-    message.skip = object.skip ?? void 0;
-    message.limit = object.limit ?? void 0;
+    const message = createBaseAllowedResourcesRequest();
+    message.subject = object.subject ?? "";
+    message.action = object.action ?? "";
+    message.resourceType = object.resourceType ?? "";
+    message.skip = object.skip ?? 0;
+    message.limit = object.limit ?? 0;
     return message;
   }
 };
-function createBaseFindRelationResponse() {
-  return { relations: [], count: 0 };
+function createBaseAllowedResourcesResponse() {
+  return { resources: [], count: 0 };
 }
-var FindRelationResponse = {
+var AllowedResourcesResponse = {
   encode(message, writer = new BinaryWriter3()) {
-    for (const v of message.relations) {
-      Relation.encode(v, writer.uint32(10).fork()).join();
+    for (const v of message.resources) {
+      writer.uint32(10).string(v);
     }
     if (message.count !== 0) {
       writer.uint32(16).int32(message.count);
@@ -3157,7 +4203,7 @@ var FindRelationResponse = {
     reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
     try {
       const end = length === void 0 ? reader.len : reader.pos + length;
-      const message = createBaseFindRelationResponse();
+      const message = createBaseAllowedResourcesResponse();
       while (reader.pos < end) {
         const tag = reader.uint32();
         switch (tag >>> 3) {
@@ -3165,7 +4211,7 @@ var FindRelationResponse = {
             if (tag !== 10) {
               break;
             }
-            message.relations.push(Relation.decode(reader, reader.uint32()));
+            message.resources.push(reader.string());
             continue;
           }
           case 2: {
@@ -3188,14 +4234,14 @@ var FindRelationResponse = {
   },
   fromJSON(object) {
     return {
-      relations: globalThis.Array.isArray(object?.relations) ? object.relations.map((e) => Relation.fromJSON(e)) : [],
+      resources: globalThis.Array.isArray(object?.resources) ? object.resources.map((e) => globalThis.String(e)) : [],
       count: isSet2(object.count) ? globalThis.Number(object.count) : 0
     };
   },
   toJSON(message) {
     const obj = {};
-    if (message.relations?.length) {
-      obj.relations = message.relations.map((e) => Relation.toJSON(e));
+    if (message.resources?.length) {
+      obj.resources = message.resources;
     }
     if (message.count !== 0) {
       obj.count = Math.round(message.count);
@@ -3203,19 +4249,19 @@ var FindRelationResponse = {
     return obj;
   },
   create(base) {
-    return FindRelationResponse.fromPartial(base ?? {});
+    return AllowedResourcesResponse.fromPartial(base ?? {});
   },
   fromPartial(object) {
-    const message = createBaseFindRelationResponse();
-    message.relations = object.relations?.map((e) => Relation.fromPartial(e)) || [];
+    const message = createBaseAllowedResourcesResponse();
+    message.resources = object.resources?.map((e) => e) || [];
     message.count = object.count ?? 0;
     return message;
   }
 };
-function createBaseAllowedResourcesRequest() {
-  return { subject: "", action: "", resourceType: "", skip: 0, limit: 0 };
+function createBaseResourceAccessListRequest() {
+  return { subject: "", action: "", viewName: void 0, resourceType: "" };
 }
-var AllowedResourcesRequest = {
+var ResourceAccessListRequest = {
   encode(message, writer = new BinaryWriter3()) {
     if (message.subject !== "") {
       writer.uint32(10).string(message.subject);
@@ -3223,15 +4269,12 @@ var AllowedResourcesRequest = {
     if (message.action !== "") {
       writer.uint32(18).string(message.action);
     }
+    if (message.viewName !== void 0) {
+      writer.uint32(26).string(message.viewName);
+    }
     if (message.resourceType !== "") {
       writer.uint32(42).string(message.resourceType);
     }
-    if (message.skip !== 0) {
-      writer.uint32(48).int32(message.skip);
-    }
-    if (message.limit !== 0) {
-      writer.uint32(56).int32(message.limit);
-    }
     return writer;
   },
   decode(input, length) {
@@ -3243,7 +4286,7 @@ var AllowedResourcesRequest = {
     reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
     try {
       const end = length === void 0 ? reader.len : reader.pos + length;
-      const message = createBaseAllowedResourcesRequest();
+      const message = createBaseResourceAccessListRequest();
       while (reader.pos < end) {
         const tag = reader.uint32();
         switch (tag >>> 3) {
@@ -3261,25 +4304,18 @@ var AllowedResourcesRequest = {
             message.action = reader.string();
             continue;
           }
-          case 5: {
-            if (tag !== 42) {
-              break;
-            }
-            message.resourceType = reader.string();
-            continue;
-          }
-          case 6: {
-            if (tag !== 48) {
+          case 3: {
+            if (tag !== 26) {
               break;
             }
-            message.skip = reader.int32();
+            message.viewName = reader.string();
             continue;
           }
-          case 7: {
-            if (tag !== 56) {
+          case 5: {
+            if (tag !== 42) {
               break;
             }
-            message.limit = reader.int32();
+            message.resourceType = reader.string();
             continue;
           }
         }
@@ -3297,9 +4333,8 @@ var AllowedResourcesRequest = {
     return {
       subject: isSet2(object.subject) ? globalThis.String(object.subject) : "",
       action: isSet2(object.action) ? globalThis.String(object.action) : "",
-      resourceType: isSet2(object.resourceType) ? globalThis.String(object.resourceType) : "",
-      skip: isSet2(object.skip) ? globalThis.Number(object.skip) : 0,
-      limit: isSet2(object.limit) ? globalThis.Number(object.limit) : 0
+      viewName: isSet2(object.viewName) ? globalThis.String(object.viewName) : void 0,
+      resourceType: isSet2(object.resourceType) ? globalThis.String(object.resourceType) : ""
     };
   },
   toJSON(message) {
@@ -3310,40 +4345,99 @@ var AllowedResourcesRequest = {
     if (message.action !== "") {
       obj.action = message.action;
     }
+    if (message.viewName !== void 0) {
+      obj.viewName = message.viewName;
+    }
     if (message.resourceType !== "") {
       obj.resourceType = message.resourceType;
     }
-    if (message.skip !== 0) {
-      obj.skip = Math.round(message.skip);
-    }
-    if (message.limit !== 0) {
-      obj.limit = Math.round(message.limit);
-    }
     return obj;
   },
   create(base) {
-    return AllowedResourcesRequest.fromPartial(base ?? {});
+    return ResourceAccessListRequest.fromPartial(base ?? {});
   },
   fromPartial(object) {
-    const message = createBaseAllowedResourcesRequest();
+    const message = createBaseResourceAccessListRequest();
     message.subject = object.subject ?? "";
     message.action = object.action ?? "";
+    message.viewName = object.viewName ?? void 0;
     message.resourceType = object.resourceType ?? "";
-    message.skip = object.skip ?? 0;
-    message.limit = object.limit ?? 0;
     return message;
   }
 };
-function createBaseAllowedResourcesResponse() {
-  return { resources: [], count: 0 };
+function createBaseResourceAccessListResponse() {
+  return { viewName: "" };
 }
-var AllowedResourcesResponse = {
+var ResourceAccessListResponse = {
   encode(message, writer = new BinaryWriter3()) {
-    for (const v of message.resources) {
-      writer.uint32(10).string(v);
+    if (message.viewName !== "") {
+      writer.uint32(10).string(message.viewName);
     }
-    if (message.count !== 0) {
-      writer.uint32(16).int32(message.count);
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader3 ? input : new BinaryReader3(input);
+    const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+    if (previousRecursionDepth >= 100) {
+      throw new globalThis.Error("protobuf decode recursion limit exceeded");
+    }
+    reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+    try {
+      const end = length === void 0 ? reader.len : reader.pos + length;
+      const message = createBaseResourceAccessListResponse();
+      while (reader.pos < end) {
+        const tag = reader.uint32();
+        switch (tag >>> 3) {
+          case 1: {
+            if (tag !== 10) {
+              break;
+            }
+            message.viewName = reader.string();
+            continue;
+          }
+        }
+        if ((tag & 7) === 4 || tag === 0) {
+          break;
+        }
+        reader.skip(tag & 7);
+      }
+      return message;
+    } finally {
+      reader.__tsProtoDecodeDepth = previousRecursionDepth;
+    }
+  },
+  fromJSON(object) {
+    return { viewName: isSet2(object.viewName) ? globalThis.String(object.viewName) : "" };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.viewName !== "") {
+      obj.viewName = message.viewName;
+    }
+    return obj;
+  },
+  create(base) {
+    return ResourceAccessListResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseResourceAccessListResponse();
+    message.viewName = object.viewName ?? "";
+    return message;
+  }
+};
+function createBasePermissionCheck() {
+  return { subject: "", actions: [], resource: "" };
+}
+var PermissionCheck = {
+  encode(message, writer = new BinaryWriter3()) {
+    if (message.subject !== "") {
+      writer.uint32(10).string(message.subject);
+    }
+    for (const v of message.actions) {
+      writer.uint32(18).string(v);
+    }
+    if (message.resource !== "") {
+      writer.uint32(26).string(message.resource);
     }
     return writer;
   },
@@ -3356,7 +4450,7 @@ var AllowedResourcesResponse = {
     reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
     try {
       const end = length === void 0 ? reader.len : reader.pos + length;
-      const message = createBaseAllowedResourcesResponse();
+      const message = createBasePermissionCheck();
       while (reader.pos < end) {
         const tag = reader.uint32();
         switch (tag >>> 3) {
@@ -3364,14 +4458,21 @@ var AllowedResourcesResponse = {
             if (tag !== 10) {
               break;
             }
-            message.resources.push(reader.string());
+            message.subject = reader.string();
             continue;
           }
           case 2: {
-            if (tag !== 16) {
+            if (tag !== 18) {
               break;
             }
-            message.count = reader.int32();
+            message.actions.push(reader.string());
+            continue;
+          }
+          case 3: {
+            if (tag !== 26) {
+              break;
+            }
+            message.resource = reader.string();
             continue;
           }
         }
@@ -3387,34 +4488,39 @@ var AllowedResourcesResponse = {
   },
   fromJSON(object) {
     return {
-      resources: globalThis.Array.isArray(object?.resources) ? object.resources.map((e) => globalThis.String(e)) : [],
-      count: isSet2(object.count) ? globalThis.Number(object.count) : 0
+      subject: isSet2(object.subject) ? globalThis.String(object.subject) : "",
+      actions: globalThis.Array.isArray(object?.actions) ? object.actions.map((e) => globalThis.String(e)) : [],
+      resource: isSet2(object.resource) ? globalThis.String(object.resource) : ""
     };
   },
   toJSON(message) {
     const obj = {};
-    if (message.resources?.length) {
-      obj.resources = message.resources;
+    if (message.subject !== "") {
+      obj.subject = message.subject;
     }
-    if (message.count !== 0) {
-      obj.count = Math.round(message.count);
+    if (message.actions?.length) {
+      obj.actions = message.actions;
+    }
+    if (message.resource !== "") {
+      obj.resource = message.resource;
     }
     return obj;
   },
   create(base) {
-    return AllowedResourcesResponse.fromPartial(base ?? {});
+    return PermissionCheck.fromPartial(base ?? {});
   },
   fromPartial(object) {
-    const message = createBaseAllowedResourcesResponse();
-    message.resources = object.resources?.map((e) => e) || [];
-    message.count = object.count ?? 0;
+    const message = createBasePermissionCheck();
+    message.subject = object.subject ?? "";
+    message.actions = object.actions?.map((e) => e) || [];
+    message.resource = object.resource ?? "";
     return message;
   }
 };
-function createBaseResourceAccessListRequest() {
-  return { subject: "", action: "", viewName: void 0, resourceType: "" };
+function createBasePermissionRequest() {
+  return { subject: "", action: "", resource: "" };
 }
-var ResourceAccessListRequest = {
+var PermissionRequest = {
   encode(message, writer = new BinaryWriter3()) {
     if (message.subject !== "") {
       writer.uint32(10).string(message.subject);
@@ -3422,11 +4528,8 @@ var ResourceAccessListRequest = {
     if (message.action !== "") {
       writer.uint32(18).string(message.action);
     }
-    if (message.viewName !== void 0) {
-      writer.uint32(26).string(message.viewName);
-    }
-    if (message.resourceType !== "") {
-      writer.uint32(42).string(message.resourceType);
+    if (message.resource !== "") {
+      writer.uint32(26).string(message.resource);
     }
     return writer;
   },
@@ -3439,7 +4542,7 @@ var ResourceAccessListRequest = {
     reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
     try {
       const end = length === void 0 ? reader.len : reader.pos + length;
-      const message = createBaseResourceAccessListRequest();
+      const message = createBasePermissionRequest();
       while (reader.pos < end) {
         const tag = reader.uint32();
         switch (tag >>> 3) {
@@ -3461,14 +4564,7 @@ var ResourceAccessListRequest = {
             if (tag !== 26) {
               break;
             }
-            message.viewName = reader.string();
-            continue;
-          }
-          case 5: {
-            if (tag !== 42) {
-              break;
-            }
-            message.resourceType = reader.string();
+            message.resource = reader.string();
             continue;
           }
         }
@@ -3486,8 +4582,7 @@ var ResourceAccessListRequest = {
     return {
       subject: isSet2(object.subject) ? globalThis.String(object.subject) : "",
       action: isSet2(object.action) ? globalThis.String(object.action) : "",
-      viewName: isSet2(object.viewName) ? globalThis.String(object.viewName) : void 0,
-      resourceType: isSet2(object.resourceType) ? globalThis.String(object.resourceType) : ""
+      resource: isSet2(object.resource) ? globalThis.String(object.resource) : ""
     };
   },
   toJSON(message) {
@@ -3498,33 +4593,29 @@ var ResourceAccessListRequest = {
     if (message.action !== "") {
       obj.action = message.action;
     }
-    if (message.viewName !== void 0) {
-      obj.viewName = message.viewName;
-    }
-    if (message.resourceType !== "") {
-      obj.resourceType = message.resourceType;
+    if (message.resource !== "") {
+      obj.resource = message.resource;
     }
     return obj;
   },
   create(base) {
-    return ResourceAccessListRequest.fromPartial(base ?? {});
+    return PermissionRequest.fromPartial(base ?? {});
   },
   fromPartial(object) {
-    const message = createBaseResourceAccessListRequest();
+    const message = createBasePermissionRequest();
     message.subject = object.subject ?? "";
     message.action = object.action ?? "";
-    message.viewName = object.viewName ?? void 0;
-    message.resourceType = object.resourceType ?? "";
+    message.resource = object.resource ?? "";
     return message;
   }
 };
-function createBaseResourceAccessListResponse() {
-  return { viewName: "" };
+function createBaseDecision() {
+  return { allow: false };
 }
-var ResourceAccessListResponse = {
+var Decision = {
   encode(message, writer = new BinaryWriter3()) {
-    if (message.viewName !== "") {
-      writer.uint32(10).string(message.viewName);
+    if (message.allow !== false) {
+      writer.uint32(8).bool(message.allow);
     }
     return writer;
   },
@@ -3537,15 +4628,15 @@ var ResourceAccessListResponse = {
     reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
     try {
       const end = length === void 0 ? reader.len : reader.pos + length;
-      const message = createBaseResourceAccessListResponse();
+      const message = createBaseDecision();
       while (reader.pos < end) {
         const tag = reader.uint32();
         switch (tag >>> 3) {
           case 1: {
-            if (tag !== 10) {
+            if (tag !== 8) {
               break;
             }
-            message.viewName = reader.string();
+            message.allow = reader.bool();
             continue;
           }
         }
@@ -3560,37 +4651,37 @@ var ResourceAccessListResponse = {
     }
   },
   fromJSON(object) {
-    return { viewName: isSet2(object.viewName) ? globalThis.String(object.viewName) : "" };
+    return { allow: isSet2(object.allow) ? globalThis.Boolean(object.allow) : false };
   },
   toJSON(message) {
     const obj = {};
-    if (message.viewName !== "") {
-      obj.viewName = message.viewName;
+    if (message.allow !== false) {
+      obj.allow = message.allow;
     }
     return obj;
   },
   create(base) {
-    return ResourceAccessListResponse.fromPartial(base ?? {});
+    return Decision.fromPartial(base ?? {});
   },
   fromPartial(object) {
-    const message = createBaseResourceAccessListResponse();
-    message.viewName = object.viewName ?? "";
+    const message = createBaseDecision();
+    message.allow = object.allow ?? false;
     return message;
   }
 };
-function createBasePermissionCheck() {
-  return { subject: "", actions: [], resource: "" };
+function createBaseSubjectPermissionsRequest() {
+  return { subject: "", resource: "", actionPrefix: void 0 };
 }
-var PermissionCheck = {
+var SubjectPermissionsRequest = {
   encode(message, writer = new BinaryWriter3()) {
     if (message.subject !== "") {
       writer.uint32(10).string(message.subject);
     }
-    for (const v of message.actions) {
-      writer.uint32(18).string(v);
-    }
     if (message.resource !== "") {
-      writer.uint32(26).string(message.resource);
+      writer.uint32(18).string(message.resource);
+    }
+    if (message.actionPrefix !== void 0) {
+      writer.uint32(26).string(message.actionPrefix);
     }
     return writer;
   },
@@ -3603,7 +4694,7 @@ var PermissionCheck = {
     reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
     try {
       const end = length === void 0 ? reader.len : reader.pos + length;
-      const message = createBasePermissionCheck();
+      const message = createBaseSubjectPermissionsRequest();
       while (reader.pos < end) {
         const tag = reader.uint32();
         switch (tag >>> 3) {
@@ -3618,14 +4709,14 @@ var PermissionCheck = {
             if (tag !== 18) {
               break;
             }
-            message.actions.push(reader.string());
+            message.resource = reader.string();
             continue;
           }
           case 3: {
             if (tag !== 26) {
               break;
             }
-            message.resource = reader.string();
+            message.actionPrefix = reader.string();
             continue;
           }
         }
@@ -3642,8 +4733,8 @@ var PermissionCheck = {
   fromJSON(object) {
     return {
       subject: isSet2(object.subject) ? globalThis.String(object.subject) : "",
-      actions: globalThis.Array.isArray(object?.actions) ? object.actions.map((e) => globalThis.String(e)) : [],
-      resource: isSet2(object.resource) ? globalThis.String(object.resource) : ""
+      resource: isSet2(object.resource) ? globalThis.String(object.resource) : "",
+      actionPrefix: isSet2(object.actionPrefix) ? globalThis.String(object.actionPrefix) : void 0
     };
   },
   toJSON(message) {
@@ -3651,38 +4742,44 @@ var PermissionCheck = {
     if (message.subject !== "") {
       obj.subject = message.subject;
     }
-    if (message.actions?.length) {
-      obj.actions = message.actions;
-    }
     if (message.resource !== "") {
       obj.resource = message.resource;
     }
+    if (message.actionPrefix !== void 0) {
+      obj.actionPrefix = message.actionPrefix;
+    }
     return obj;
   },
   create(base) {
-    return PermissionCheck.fromPartial(base ?? {});
+    return SubjectPermissionsRequest.fromPartial(base ?? {});
   },
   fromPartial(object) {
-    const message = createBasePermissionCheck();
+    const message = createBaseSubjectPermissionsRequest();
     message.subject = object.subject ?? "";
-    message.actions = object.actions?.map((e) => e) || [];
     message.resource = object.resource ?? "";
+    message.actionPrefix = object.actionPrefix ?? void 0;
     return message;
   }
 };
-function createBasePermissionRequest() {
-  return { subject: "", action: "", resource: "" };
+function createBaseSubjectPermission() {
+  return { action: "", direct: false, inherited: false, implicit: false, allowed: false };
 }
-var PermissionRequest = {
+var SubjectPermission = {
   encode(message, writer = new BinaryWriter3()) {
-    if (message.subject !== "") {
-      writer.uint32(10).string(message.subject);
-    }
     if (message.action !== "") {
-      writer.uint32(18).string(message.action);
+      writer.uint32(10).string(message.action);
     }
-    if (message.resource !== "") {
-      writer.uint32(26).string(message.resource);
+    if (message.direct !== false) {
+      writer.uint32(16).bool(message.direct);
+    }
+    if (message.inherited !== false) {
+      writer.uint32(24).bool(message.inherited);
+    }
+    if (message.implicit !== false) {
+      writer.uint32(32).bool(message.implicit);
+    }
+    if (message.allowed !== false) {
+      writer.uint32(40).bool(message.allowed);
     }
     return writer;
   },
@@ -3695,7 +4792,7 @@ var PermissionRequest = {
     reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
     try {
       const end = length === void 0 ? reader.len : reader.pos + length;
-      const message = createBasePermissionRequest();
+      const message = createBaseSubjectPermission();
       while (reader.pos < end) {
         const tag = reader.uint32();
         switch (tag >>> 3) {
@@ -3703,21 +4800,35 @@ var PermissionRequest = {
             if (tag !== 10) {
               break;
             }
-            message.subject = reader.string();
+            message.action = reader.string();
             continue;
           }
           case 2: {
-            if (tag !== 18) {
+            if (tag !== 16) {
               break;
             }
-            message.action = reader.string();
+            message.direct = reader.bool();
             continue;
           }
           case 3: {
-            if (tag !== 26) {
+            if (tag !== 24) {
               break;
             }
-            message.resource = reader.string();
+            message.inherited = reader.bool();
+            continue;
+          }
+          case 4: {
+            if (tag !== 32) {
+              break;
+            }
+            message.implicit = reader.bool();
+            continue;
+          }
+          case 5: {
+            if (tag !== 40) {
+              break;
+            }
+            message.allowed = reader.bool();
             continue;
           }
         }
@@ -3733,42 +4844,52 @@ var PermissionRequest = {
   },
   fromJSON(object) {
     return {
-      subject: isSet2(object.subject) ? globalThis.String(object.subject) : "",
       action: isSet2(object.action) ? globalThis.String(object.action) : "",
-      resource: isSet2(object.resource) ? globalThis.String(object.resource) : ""
+      direct: isSet2(object.direct) ? globalThis.Boolean(object.direct) : false,
+      inherited: isSet2(object.inherited) ? globalThis.Boolean(object.inherited) : false,
+      implicit: isSet2(object.implicit) ? globalThis.Boolean(object.implicit) : false,
+      allowed: isSet2(object.allowed) ? globalThis.Boolean(object.allowed) : false
     };
   },
   toJSON(message) {
     const obj = {};
-    if (message.subject !== "") {
-      obj.subject = message.subject;
-    }
     if (message.action !== "") {
       obj.action = message.action;
     }
-    if (message.resource !== "") {
-      obj.resource = message.resource;
+    if (message.direct !== false) {
+      obj.direct = message.direct;
+    }
+    if (message.inherited !== false) {
+      obj.inherited = message.inherited;
+    }
+    if (message.implicit !== false) {
+      obj.implicit = message.implicit;
+    }
+    if (message.allowed !== false) {
+      obj.allowed = message.allowed;
     }
     return obj;
   },
   create(base) {
-    return PermissionRequest.fromPartial(base ?? {});
+    return SubjectPermission.fromPartial(base ?? {});
   },
   fromPartial(object) {
-    const message = createBasePermissionRequest();
-    message.subject = object.subject ?? "";
+    const message = createBaseSubjectPermission();
     message.action = object.action ?? "";
-    message.resource = object.resource ?? "";
+    message.direct = object.direct ?? false;
+    message.inherited = object.inherited ?? false;
+    message.implicit = object.implicit ?? false;
+    message.allowed = object.allowed ?? false;
     return message;
   }
 };
-function createBaseDecision() {
-  return { allow: false };
+function createBaseSubjectPermissionsResponse() {
+  return { permissions: [] };
 }
-var Decision = {
+var SubjectPermissionsResponse = {
   encode(message, writer = new BinaryWriter3()) {
-    if (message.allow !== false) {
-      writer.uint32(8).bool(message.allow);
+    for (const v of message.permissions) {
+      SubjectPermission.encode(v, writer.uint32(10).fork()).join();
     }
     return writer;
   },
@@ -3781,15 +4902,15 @@ var Decision = {
     reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
     try {
       const end = length === void 0 ? reader.len : reader.pos + length;
-      const message = createBaseDecision();
+      const message = createBaseSubjectPermissionsResponse();
       while (reader.pos < end) {
         const tag = reader.uint32();
         switch (tag >>> 3) {
           case 1: {
-            if (tag !== 8) {
+            if (tag !== 10) {
               break;
             }
-            message.allow = reader.bool();
+            message.permissions.push(SubjectPermission.decode(reader, reader.uint32()));
             continue;
           }
         }
@@ -3804,21 +4925,23 @@ var Decision = {
     }
   },
   fromJSON(object) {
-    return { allow: isSet2(object.allow) ? globalThis.Boolean(object.allow) : false };
+    return {
+      permissions: globalThis.Array.isArray(object?.permissions) ? object.permissions.map((e) => SubjectPermission.fromJSON(e)) : []
+    };
   },
   toJSON(message) {
     const obj = {};
-    if (message.allow !== false) {
-      obj.allow = message.allow;
+    if (message.permissions?.length) {
+      obj.permissions = message.permissions.map((e) => SubjectPermission.toJSON(e));
     }
     return obj;
   },
   create(base) {
-    return Decision.fromPartial(base ?? {});
+    return SubjectPermissionsResponse.fromPartial(base ?? {});
   },
   fromPartial(object) {
-    const message = createBaseDecision();
-    message.allow = object.allow ?? false;
+    const message = createBaseSubjectPermissionsResponse();
+    message.permissions = object.permissions?.map((e) => SubjectPermission.fromPartial(e)) || [];
     return message;
   }
 };
@@ -3914,6 +5037,14 @@ var AuthorizationDefinition = {
       responseStream: false,
       options: {}
     },
+    getSubjectPermissions: {
+      name: "GetSubjectPermissions",
+      requestType: SubjectPermissionsRequest,
+      requestStream: false,
+      responseType: SubjectPermissionsResponse,
+      responseStream: false,
+      options: {}
+    },
     getAllowedResources: {
       name: "GetAllowedResources",
       requestType: AllowedResourcesRequest,
@@ -22601,12 +23732,12 @@ async function checkModuleHealth(clientName, serviceUrl, service = "", grpcToken
   }
   const _healthClient = clientFactory.create(HealthDefinition, channel);
   let error;
-  const status2 = await _healthClient.check({ service }).then((res) => {
+  const status3 = await _healthClient.check({ service }).then((res) => {
     return res.status;
   }).catch((err) => error = err);
   channel.close();
   if (!error) {
-    return status2;
+    return status3;
   }
   throw error;
 }
@@ -23717,6 +24848,16 @@ var Authorization = class extends ConduitModule {
   can(data) {
     return this.client.can(data);
   }
+  /**
+   * Lists actions declared on the resource definition.
+   * A direct grant for an undeclared action can still pass `can()` and is omitted.
+   * `actionPrefix` is literal (`overview` also matches `overviewer`; prefer `overview_`).
+   * Subject and resource-definition changes drop the ~60s cache immediately.
+   * Inherited access through an intermediate subject can lag until the TTL, as with `can()`.
+   */
+  getSubjectPermissions(data) {
+    return this.client.getSubjectPermissions(data);
+  }
   grantPermission(data) {
     return this.client.grantPermission(data);
   }
@@ -23732,6 +24873,7 @@ var Authorization = class extends ConduitModule {
 };
 
 // src/modules/authentication/index.ts
+import { status } from "@grpc/grpc-js";
 var Authentication = class extends ConduitModule {
   constructor(moduleName, url, grpcToken) {
     super(moduleName, "authentication", url, grpcToken);
@@ -23739,29 +24881,76 @@ var Authentication = class extends ConduitModule {
     this.initializeClient(AuthenticationDefinition);
   }
   moduleName;
-  userLogin(userId, clientId) {
-    return this.client.userLogin({ userId, clientId });
+  userCacheProvider;
+  /**
+   * Attaches a cache (or a lazy provider of one, resolved on every `getUser` call so that
+   * no Redis connection is opened until it is needed) that `getUser` reads through.
+   */
+  attachUserCache(cache) {
+    this.userCacheProvider = typeof cache === "function" ? cache : cache ? () => cache : void 0;
+  }
+  hasUserCache() {
+    return this.userCacheProvider !== void 0;
+  }
+  /**
+   * Fetches a user document (never includes `hashedPassword`), reading through the
+   * attached user cache (5 s TTL, see UserCache) when there is one. Cache problems never
+   * fail or delay the call beyond the cache's own timeout; the cache write is fire-and-forget.
+   *
+   * The server answers gRPC NOT_FOUND for an unknown id and this method rejects with that
+   * error (an empty response is also turned into a `GrpcError` NOT_FOUND).
+   */
+  async getUser(userId) {
+    let cache;
+    try {
+      cache = this.userCacheProvider?.();
+    } catch {
+      cache = void 0;
+    }
+    const cached = await cache?.get(userId);
+    if (cached) return cached;
+    const res = await this.client.getUser({ userId });
+    if (!res?.user) {
+      throw new GrpcError(status.NOT_FOUND, "User not found");
+    }
+    const user = JSON.parse(res.user);
+    void cache?.set(userId, user);
+    return user;
+  }
+  /**
+   * Issues tokens for a user without a login. Trusted path: it runs no login strategy
+   * and satisfies a realm's `requireTwoFa` policy without a 2FA step. `realm` (slug)
+   * defaults to the user's home realm.
+   */
+  userLogin(userId, clientId, realm) {
+    return this.client.userLogin({ userId, clientId, realm });
   }
   userDelete(userId) {
     return this.client.userDelete({ userId });
   }
-  userCreate(email, verify = false, password, anonymousId, userData) {
+  userCreate(email, verify = false, password, anonymousId, userData, realm) {
     return this.client.userCreate({
       email,
       verify,
       password,
       anonymousId,
-      userData: JSON.stringify(userData)
+      userData: JSON.stringify(userData),
+      realm
     });
   }
-  userCreateByUsername(username, password, anonymousId) {
-    return this.client.userCreateByUsername({ username, password, anonymousId });
+  userCreateByUsername(username, password, anonymousId, realm) {
+    return this.client.userCreateByUsername({ username, password, anonymousId, realm });
   }
-  anonymousUserCreate(clientId) {
-    return this.client.anonymousUserCreate({ clientId });
+  anonymousUserCreate(clientId, realm) {
+    return this.client.anonymousUserCreate({ clientId, realm });
   }
-  changePass(email, password) {
-    return this.client.changePass({ email, password });
+  /**
+   * Sets a new password. `realm` picks the account when the email is held by several accounts
+   * (isolated identity mode): a realm slug picks that realm's account, `'global'` picks the
+   * account without a home realm. Without it such an email is refused with FAILED_PRECONDITION.
+   */
+  changePass(email, password, realm) {
+    return this.client.changePass({ email, password, realm });
   }
   changeEmail(userId, newEmail) {
     return this.client.changeEmail({ userId, newEmail });
@@ -23803,6 +24992,46 @@ var Authentication = class extends ConduitModule {
   updateTeam(teamId, name, newParentTeamId) {
     return this.client.updateTeam({ teamId, name, newParentTeamId });
   }
+  /**
+   * Turns a top-level team into a realm, or updates the settings of an existing realm.
+   * `settings` is the realm settings body (strategies, policies, registration, active);
+   * it may carry OAuth secrets (write-only). Changing the slug of an existing realm
+   * needs `force`.
+   * Errors keep their gRPC code; module errors (REALM_SLUG_TAKEN, REALM_NESTED,
+   * GUESTS_NOT_ALLOWED...) carry a JSON string message (`{"conduitCode", "message"}`),
+   * so key on `conduitCode`.
+   */
+  setTeamRealm(teamId, slug, settings, force = false) {
+    return this.client.setTeamRealm({
+      teamId,
+      slug,
+      settingsJson: settings === void 0 ? void 0 : JSON.stringify(settings),
+      force
+    });
+  }
+  /** The team, its masked realm settings (`settingsJson`, no secrets) and user counts. */
+  getRealmSettings(teamId) {
+    return this.client.getRealmSettings({ teamId });
+  }
+  /** Demotes a realm. Refused while home users exist unless `force`, which blocks them. */
+  unsetTeamRealm(teamId, force = false) {
+    return this.client.unsetTeamRealm({ teamId, force });
+  }
+  /**
+   * `home` makes the realm the user's home realm, `guest` adds a guest membership.
+   * Fails with FAILED_PRECONDITION when `home` would replace a different home realm
+   * (unless `force`, which moves the user and revokes all their tokens) and when `guest`
+   * is requested for a user whose home realm is this realm.
+   * Errors keep their gRPC code; module errors carry a JSON string message
+   * (`{"conduitCode", "message"}`), so key on `conduitCode`.
+   */
+  grantRealmMembership(teamId, userId, type, force = false) {
+    return this.client.grantRealmMembership({ teamId, userId, type, force });
+  }
+  /** Removes a guest membership (home users are moved, not removed). */
+  revokeRealmMembership(teamId, userId) {
+    return this.client.revokeRealmMembership({ teamId, userId, type: "", force: false });
+  }
 };
 
 // src/modules/communications/index.ts
@@ -24262,6 +25491,22 @@ async function isLockContention(error) {
   );
   return voteErrors.length > 0 && voteErrors.every((voteError) => voteError instanceof ResourceLockedError);
 }
+var CONSUME_KEY_IF_MATCHES_SCRIPT = `
+local stored = redis.call('GET', KEYS[1])
+if not stored then return 0 end
+if stored == ARGV[1] then
+  redis.call('DEL', KEYS[1], KEYS[2])
+  return 1
+end
+local attempts = redis.call('INCR', KEYS[2])
+if attempts >= tonumber(ARGV[2]) then
+  redis.call('DEL', KEYS[1], KEYS[2])
+elseif attempts == 1 then
+  local ttl = redis.call('PTTL', KEYS[1])
+  if ttl > 0 then redis.call('PEXPIRE', KEYS[2], ttl) end
+end
+return 0
+`;
 var StateManager = class {
   redisClient;
   redLock;
@@ -24357,13 +25602,175 @@ var StateManager = class {
   getKey(keyName) {
     return this.redisClient.get(keyName);
   }
+  /**
+   * Deletes keyName and resolves true when it holds value. A mismatch is counted in
+   * attemptsKey (expiring with keyName), and the maxAttempts-th mismatch deletes keyName.
+   * Both keys must share a hash tag for Redis Cluster.
+   */
+  async consumeKeyIfMatches(keyName, attemptsKey, value, maxAttempts) {
+    const result = await this.redisClient.eval(
+      CONSUME_KEY_IF_MATCHES_SCRIPT,
+      2,
+      keyName,
+      attemptsKey,
+      value,
+      maxAttempts
+    );
+    return result === 1;
+  }
   incr(keyName) {
     return this.redisClient.incr(keyName);
   }
 };
 
+// src/utilities/redisHelpers.ts
+var RedisTimeoutError = class extends Error {
+  constructor(ms) {
+    super(`Redis operation timed out after ${ms}ms`);
+  }
+};
+function withTimeout(op, ms) {
+  let timer;
+  const timeout = new Promise((_, reject) => {
+    timer = setTimeout(() => reject(new RedisTimeoutError(ms)), ms);
+  });
+  let pending;
+  try {
+    pending = op();
+  } catch (e) {
+    clearTimeout(timer);
+    return Promise.reject(e);
+  }
+  return Promise.race([pending, timeout]).finally(() => clearTimeout(timer));
+}
+function silenceClientErrors(client, label) {
+  const emitter = client;
+  emitter.on?.("error", (e) => {
+    const logger = getLogger();
+    logger.debug?.(`${label} redis error: ${e?.message}`);
+  });
+}
+async function inChunks(items, size, fn) {
+  const failed = [];
+  for (let i = 0; i < items.length; i += size) {
+    const chunk = items.slice(i, i + size);
+    try {
+      await fn(chunk);
+    } catch {
+      failed.push(...chunk);
+    }
+  }
+  return failed;
+}
+
+// src/utilities/UserCache.ts
+var USER_CACHE_PREFIX = "auth_user_";
+var USER_CACHE_TTL_MS = 5e3;
+var OP_TIMEOUT_MS = 200;
+var CHUNK_SIZE = 100;
+var UserCache = class {
+  client;
+  constructor(redisManager) {
+    const client = redisManager.getClient();
+    silenceClientErrors(client, "UserCache");
+    this.client = client;
+  }
+  key(id) {
+    return USER_CACHE_PREFIX + id;
+  }
+  async get(id) {
+    try {
+      const raw = await withTimeout(() => this.client.get(this.key(id)), OP_TIMEOUT_MS);
+      return raw ? JSON.parse(raw) : null;
+    } catch {
+      return null;
+    }
+  }
+  async set(id, user) {
+    try {
+      await withTimeout(
+        () => this.client.set(this.key(id), JSON.stringify(user), "PX", USER_CACHE_TTL_MS),
+        OP_TIMEOUT_MS
+      );
+    } catch {
+    }
+  }
+  async invalidate(id) {
+    try {
+      await withTimeout(() => this.client.del(this.key(id)), OP_TIMEOUT_MS);
+    } catch {
+    }
+  }
+  async invalidateMany(ids) {
+    await inChunks(
+      ids,
+      CHUNK_SIZE,
+      (chunk) => Promise.all(chunk.map((id) => this.invalidate(id))).then(() => void 0)
+    );
+  }
+};
+
+// src/utilities/SessionRegistry.ts
+var SESSION_REGISTRY_PREFIX = "auth_session_";
+var OP_TIMEOUT_MS2 = 500;
+var CHUNK_SIZE2 = 100;
+var SessionRegistry = class _SessionRegistry {
+  client;
+  constructor(redisManager) {
+    const client = redisManager.getClient();
+    silenceClientErrors(client, "SessionRegistry");
+    this.client = client;
+  }
+  key(sid) {
+    return SESSION_REGISTRY_PREFIX + sid;
+  }
+  async run(op) {
+    try {
+      return await withTimeout(op, OP_TIMEOUT_MS2);
+    } catch {
+      throw new Error("Session registry unavailable");
+    }
+  }
+  static ttl(ttlMs) {
+    return Math.max(1, Math.ceil(ttlMs));
+  }
+  async register(sid, data, ttlMs) {
+    const value = JSON.stringify({
+      user: data.user,
+      clientId: data.clientId,
+      realm: data.realm ?? null
+    });
+    await this.run(
+      () => this.client.set(this.key(sid), value, "PX", _SessionRegistry.ttl(ttlMs))
+    );
+  }
+  /** Extends the session's lifetime. Does nothing for an unknown session. */
+  async touch(sid, ttlMs) {
+    await this.run(() => this.client.pexpire(this.key(sid), _SessionRegistry.ttl(ttlMs)));
+  }
+  async exists(sid) {
+    return await this.run(() => this.client.exists(this.key(sid))) === 1;
+  }
+  async revoke(sid) {
+    await this.run(() => this.client.del(this.key(sid)));
+  }
+  /** Attempts every sid; throws an Error listing the sids that could not be revoked. */
+  async revokeMany(sids) {
+    const failed = [];
+    await inChunks(sids, CHUNK_SIZE2, async (chunk) => {
+      const results = await Promise.allSettled(chunk.map((sid) => this.revoke(sid)));
+      results.forEach((r, i) => {
+        if (r.status === "rejected") failed.push(chunk[i]);
+      });
+    });
+    if (failed.length > 0) {
+      throw new Error(`Failed to revoke sessions: ${failed.join(", ")}`);
+    }
+  }
+};
+
 // src/index.ts
-import { status } from "@grpc/grpc-js";
+import { status as status2 } from "@grpc/grpc-js";
 import { createSigner } from "fast-jwt";
 
 // src/interfaces/Route.ts
@@ -24438,6 +25845,8 @@ var ConduitGrpcSdk = class _ConduitGrpcSdk {
   _dynamicModules = {};
   _eventBus;
   _stateManager;
+  _userCache;
+  _sessionRegistry;
   lastSearch = Date.now();
   urlRemap;
   _serviceHealthStatusGetter;
@@ -24521,6 +25930,20 @@ var ConduitGrpcSdk = class _ConduitGrpcSdk {
       return null;
     }
   }
+  /** Redis-backed user cache. Throws when Redis is not initialized. */
+  get userCache() {
+    if (!this._userCache) {
+      this._userCache = new UserCache(this.redisManager);
+    }
+    return this._userCache;
+  }
+  /** Redis-backed session registry. Throws when Redis is not initialized. */
+  get sessionRegistry() {
+    if (!this._sessionRegistry) {
+      this._sessionRegistry = new SessionRegistry(this.redisManager);
+    }
+    return this._sessionRegistry;
+  }
   get core() {
     return this._core;
   }
@@ -24638,7 +26061,7 @@ var ConduitGrpcSdk = class _ConduitGrpcSdk {
           return;
         }
       } catch (err) {
-        if (err.code === status.PERMISSION_DENIED) {
+        if (err.code === status2.PERMISSION_DENIED) {
           _ConduitGrpcSdk.Logger.error(err);
           throw err;
         }
@@ -24727,7 +26150,7 @@ var ConduitGrpcSdk = class _ConduitGrpcSdk {
         this.waitForExistence(moduleName, onlyIfServing),
         sleep(options.timeoutMs).then(() => {
           throw new GrpcError(
-            status.DEADLINE_EXCEEDED,
+            status2.DEADLINE_EXCEEDED,
             `awaitPeer(${moduleName}) timed out after ${options.timeoutMs}ms`
           );
         })
@@ -24916,6 +26339,11 @@ var ConduitGrpcSdk = class _ConduitGrpcSdk {
         moduleUrl,
         this._grpcToken
       );
+      if (moduleName === "authentication") {
+        this._modules[moduleName].attachUserCache(
+          () => this._redisManager ? this.userCache : void 0
+        );
+      }
     } else if (this._dynamicModules[moduleName]) {
       _ConduitGrpcSdk.Logger.info(`Creating gRPC client for ${moduleName}`);
       this._modules[moduleName] = new ConduitModule(
@@ -25150,6 +26578,7 @@ export {
   GetMessageStatusResponse,
   GetNotificationTokensRequest,
   GetNotificationTokensResponse,
+  GetRealmSettingsRequest,
   GetRedisDetailsResponse,
   GetRoomResponse,
   GetSchemaRequest,
@@ -25158,6 +26587,8 @@ export {
   GetStatusRequest,
   GetStatusResponse,
   GetTeamRequest,
+  GetUserRequest,
+  GetUserResponse,
   GrpcError,
   HealthCheckRequest,
   HealthCheckResponse,
@@ -25198,6 +26629,8 @@ export {
   RawQueryRequest_RawQuery,
   RawQueryRequest_RawQuery_MongoQuery,
   RawQueryRequest_RawQuery_SQLQuery,
+  RealmMembershipRequest,
+  RealmResponse,
   RegisterAdminRouteRequest,
   RegisterAdminRouteRequest_ConduitRouteOptions,
   RegisterAdminRouteRequest_ConduitRouteReturnDefinition,
@@ -25235,6 +26668,7 @@ export {
   Room,
   Router,
   RouterDefinition,
+  SESSION_REGISTRY_PREFIX,
   SMS,
   SQLDataType,
   Schema,
@@ -25266,10 +26700,12 @@ export {
   SendWithFallbackRequest_SendCommunicationParams,
   SendWithFallbackResponse,
   SendWithFallbackResponse_ChannelResult,
+  SessionRegistry,
   SetConfigRequest,
   SetConfigResponse,
   SetNotificationTokenRequest,
   SetNotificationTokenResponse,
+  SetTeamRealmRequest,
   SocketData,
   SocketPushRequest,
   SocketRequest,
@@ -25278,10 +26714,17 @@ export {
   StartBackfillResponse,
   Storage,
   StorageDefinition,
+  SubjectPermission,
+  SubjectPermissionsRequest,
+  SubjectPermissionsResponse,
   TYPE,
   Team,
   TeamDeleteRequest,
   TeamDeleteResponse,
+  USER_CACHE_PREFIX,
+  USER_CACHE_TTL_MS,
+  UnsetTeamRealmRequest,
+  UnsetTeamRealmResponse,
   UpdateCommunicationTemplateRequest,
   UpdateConfigRequest,
   UpdateConfigResponse,
@@ -25293,6 +26736,7 @@ export {
   UpdateTemplateRequest,
   UpsertConfigRequest,
   UpsertConfigResponse,
+  UserCache,
   UserChangeEmail,
   UserChangeEmailResponse,
   UserChangePass,