@cratis/chronicle.contracts 19.136.1 → 19.138.0

package/dist/cjs/generated/security.js

@@ -4,6 +4,80 @@ var wire = require('@bufbuild/protobuf/wire');
 var empty = require('./google/protobuf/empty.js');
 var bcl = require('./protobuf-net/bcl.js');
 
+exports.EventStoreAccessGrantSource = void 0;
+(function (EventStoreAccessGrantSource) {
+    EventStoreAccessGrantSource[EventStoreAccessGrantSource["Configuration"] = 0] = "Configuration";
+    EventStoreAccessGrantSource[EventStoreAccessGrantSource["Command"] = 1] = "Command";
+    EventStoreAccessGrantSource[EventStoreAccessGrantSource["UNRECOGNIZED"] = -1] = "UNRECOGNIZED";
+})(exports.EventStoreAccessGrantSource || (exports.EventStoreAccessGrantSource = {}));
+function eventStoreAccessGrantSourceFromJSON(object) {
+    switch (object) {
+        case 0:
+        case "Configuration":
+            return exports.EventStoreAccessGrantSource.Configuration;
+        case 1:
+        case "Command":
+            return exports.EventStoreAccessGrantSource.Command;
+        case -1:
+        case "UNRECOGNIZED":
+        default:
+            return exports.EventStoreAccessGrantSource.UNRECOGNIZED;
+    }
+}
+function eventStoreAccessGrantSourceToJSON(object) {
+    switch (object) {
+        case exports.EventStoreAccessGrantSource.Configuration:
+            return "Configuration";
+        case exports.EventStoreAccessGrantSource.Command:
+            return "Command";
+        case exports.EventStoreAccessGrantSource.UNRECOGNIZED:
+        default:
+            return "UNRECOGNIZED";
+    }
+}
+exports.StoreAccess = void 0;
+(function (StoreAccess) {
+    StoreAccess[StoreAccess["None"] = 0] = "None";
+    StoreAccess[StoreAccess["Read"] = 1] = "Read";
+    StoreAccess[StoreAccess["Append"] = 2] = "Append";
+    StoreAccess[StoreAccess["Manage"] = 4] = "Manage";
+    StoreAccess[StoreAccess["UNRECOGNIZED"] = -1] = "UNRECOGNIZED";
+})(exports.StoreAccess || (exports.StoreAccess = {}));
+function storeAccessFromJSON(object) {
+    switch (object) {
+        case 0:
+        case "None":
+            return exports.StoreAccess.None;
+        case 1:
+        case "Read":
+            return exports.StoreAccess.Read;
+        case 2:
+        case "Append":
+            return exports.StoreAccess.Append;
+        case 4:
+        case "Manage":
+            return exports.StoreAccess.Manage;
+        case -1:
+        case "UNRECOGNIZED":
+        default:
+            return exports.StoreAccess.UNRECOGNIZED;
+    }
+}
+function storeAccessToJSON(object) {
+    switch (object) {
+        case exports.StoreAccess.None:
+            return "None";
+        case exports.StoreAccess.Read:
+            return "Read";
+        case exports.StoreAccess.Append:
+            return "Append";
+        case exports.StoreAccess.Manage:
+            return "Manage";
+        case exports.StoreAccess.UNRECOGNIZED:
+        default:
+            return "UNRECOGNIZED";
+    }
+}
 exports.ValidationResultSeverity = void 0;
 (function (ValidationResultSeverity) {
     ValidationResultSeverity[ValidationResultSeverity["Unknown"] = 0] = "Unknown";
@@ -729,30 +803,1081 @@ const ChangeUserPasswordRequest = {
         return obj;
     },
     create(base) {
-        return ChangeUserPasswordRequest.fromPartial(base ?? {});
+        return ChangeUserPasswordRequest.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseChangeUserPasswordRequest();
+        message.UserId = (object.UserId !== undefined && object.UserId !== null)
+            ? bcl.Guid.fromPartial(object.UserId)
+            : undefined;
+        message.OldPassword = object.OldPassword ?? "";
+        message.Password = object.Password ?? "";
+        message.ConfirmedPassword = object.ConfirmedPassword ?? "";
+        return message;
+    },
+};
+function createBaseCommandResult() {
+    return {
+        CorrelationId: undefined,
+        IsAuthorized: false,
+        ValidationResults: [],
+        ExceptionMessages: [],
+        ExceptionStackTrace: "",
+        AuthorizationFailureReason: "",
+    };
+}
+const CommandResult = {
+    encode(message, writer = new wire.BinaryWriter()) {
+        if (message.CorrelationId !== undefined) {
+            bcl.Guid.encode(message.CorrelationId, writer.uint32(10).fork()).join();
+        }
+        if (message.IsAuthorized !== false) {
+            writer.uint32(16).bool(message.IsAuthorized);
+        }
+        for (const v of message.ValidationResults) {
+            ValidationResult.encode(v, writer.uint32(26).fork()).join();
+        }
+        for (const v of message.ExceptionMessages) {
+            writer.uint32(34).string(v);
+        }
+        if (message.ExceptionStackTrace !== "") {
+            writer.uint32(42).string(message.ExceptionStackTrace);
+        }
+        if (message.AuthorizationFailureReason !== "") {
+            writer.uint32(50).string(message.AuthorizationFailureReason);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
+        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+        if (previousRecursionDepth >= 100) {
+            throw new globalThis.Error("protobuf decode recursion limit exceeded");
+        }
+        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+        try {
+            const end = length === undefined ? reader.len : reader.pos + length;
+            const message = createBaseCommandResult();
+            while (reader.pos < end) {
+                const tag = reader.uint32();
+                switch (tag >>> 3) {
+                    case 1: {
+                        if (tag !== 10) {
+                            break;
+                        }
+                        message.CorrelationId = bcl.Guid.decode(reader, reader.uint32());
+                        continue;
+                    }
+                    case 2: {
+                        if (tag !== 16) {
+                            break;
+                        }
+                        message.IsAuthorized = reader.bool();
+                        continue;
+                    }
+                    case 3: {
+                        if (tag !== 26) {
+                            break;
+                        }
+                        message.ValidationResults.push(ValidationResult.decode(reader, reader.uint32()));
+                        continue;
+                    }
+                    case 4: {
+                        if (tag !== 34) {
+                            break;
+                        }
+                        message.ExceptionMessages.push(reader.string());
+                        continue;
+                    }
+                    case 5: {
+                        if (tag !== 42) {
+                            break;
+                        }
+                        message.ExceptionStackTrace = reader.string();
+                        continue;
+                    }
+                    case 6: {
+                        if (tag !== 50) {
+                            break;
+                        }
+                        message.AuthorizationFailureReason = reader.string();
+                        continue;
+                    }
+                }
+                if ((tag & 7) === 4 || tag === 0) {
+                    break;
+                }
+                reader.skip(tag & 7);
+            }
+            return message;
+        }
+        finally {
+            reader.__tsProtoDecodeDepth = previousRecursionDepth;
+        }
+    },
+    fromJSON(object) {
+        return {
+            CorrelationId: isSet(object.CorrelationId) ? bcl.Guid.fromJSON(object.CorrelationId) : undefined,
+            IsAuthorized: isSet(object.IsAuthorized) ? globalThis.Boolean(object.IsAuthorized) : false,
+            ValidationResults: globalThis.Array.isArray(object?.ValidationResults)
+                ? object.ValidationResults.map((e) => ValidationResult.fromJSON(e))
+                : [],
+            ExceptionMessages: globalThis.Array.isArray(object?.ExceptionMessages)
+                ? object.ExceptionMessages.map((e) => globalThis.String(e))
+                : [],
+            ExceptionStackTrace: isSet(object.ExceptionStackTrace) ? globalThis.String(object.ExceptionStackTrace) : "",
+            AuthorizationFailureReason: isSet(object.AuthorizationFailureReason)
+                ? globalThis.String(object.AuthorizationFailureReason)
+                : "",
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.CorrelationId !== undefined) {
+            obj.CorrelationId = bcl.Guid.toJSON(message.CorrelationId);
+        }
+        if (message.IsAuthorized !== false) {
+            obj.IsAuthorized = message.IsAuthorized;
+        }
+        if (message.ValidationResults?.length) {
+            obj.ValidationResults = message.ValidationResults.map((e) => ValidationResult.toJSON(e));
+        }
+        if (message.ExceptionMessages?.length) {
+            obj.ExceptionMessages = message.ExceptionMessages;
+        }
+        if (message.ExceptionStackTrace !== "") {
+            obj.ExceptionStackTrace = message.ExceptionStackTrace;
+        }
+        if (message.AuthorizationFailureReason !== "") {
+            obj.AuthorizationFailureReason = message.AuthorizationFailureReason;
+        }
+        return obj;
+    },
+    create(base) {
+        return CommandResult.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseCommandResult();
+        message.CorrelationId = (object.CorrelationId !== undefined && object.CorrelationId !== null)
+            ? bcl.Guid.fromPartial(object.CorrelationId)
+            : undefined;
+        message.IsAuthorized = object.IsAuthorized ?? false;
+        message.ValidationResults = object.ValidationResults?.map((e) => ValidationResult.fromPartial(e)) || [];
+        message.ExceptionMessages = object.ExceptionMessages?.map((e) => e) || [];
+        message.ExceptionStackTrace = object.ExceptionStackTrace ?? "";
+        message.AuthorizationFailureReason = object.AuthorizationFailureReason ?? "";
+        return message;
+    },
+};
+function createBaseCommandResultBoolean() {
+    return {
+        CorrelationId: undefined,
+        IsAuthorized: false,
+        ValidationResults: [],
+        ExceptionMessages: [],
+        ExceptionStackTrace: "",
+        AuthorizationFailureReason: "",
+        Response: false,
+    };
+}
+const CommandResultBoolean = {
+    encode(message, writer = new wire.BinaryWriter()) {
+        if (message.CorrelationId !== undefined) {
+            bcl.Guid.encode(message.CorrelationId, writer.uint32(10).fork()).join();
+        }
+        if (message.IsAuthorized !== false) {
+            writer.uint32(16).bool(message.IsAuthorized);
+        }
+        for (const v of message.ValidationResults) {
+            ValidationResult.encode(v, writer.uint32(26).fork()).join();
+        }
+        for (const v of message.ExceptionMessages) {
+            writer.uint32(34).string(v);
+        }
+        if (message.ExceptionStackTrace !== "") {
+            writer.uint32(42).string(message.ExceptionStackTrace);
+        }
+        if (message.AuthorizationFailureReason !== "") {
+            writer.uint32(50).string(message.AuthorizationFailureReason);
+        }
+        if (message.Response !== false) {
+            writer.uint32(56).bool(message.Response);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
+        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+        if (previousRecursionDepth >= 100) {
+            throw new globalThis.Error("protobuf decode recursion limit exceeded");
+        }
+        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+        try {
+            const end = length === undefined ? reader.len : reader.pos + length;
+            const message = createBaseCommandResultBoolean();
+            while (reader.pos < end) {
+                const tag = reader.uint32();
+                switch (tag >>> 3) {
+                    case 1: {
+                        if (tag !== 10) {
+                            break;
+                        }
+                        message.CorrelationId = bcl.Guid.decode(reader, reader.uint32());
+                        continue;
+                    }
+                    case 2: {
+                        if (tag !== 16) {
+                            break;
+                        }
+                        message.IsAuthorized = reader.bool();
+                        continue;
+                    }
+                    case 3: {
+                        if (tag !== 26) {
+                            break;
+                        }
+                        message.ValidationResults.push(ValidationResult.decode(reader, reader.uint32()));
+                        continue;
+                    }
+                    case 4: {
+                        if (tag !== 34) {
+                            break;
+                        }
+                        message.ExceptionMessages.push(reader.string());
+                        continue;
+                    }
+                    case 5: {
+                        if (tag !== 42) {
+                            break;
+                        }
+                        message.ExceptionStackTrace = reader.string();
+                        continue;
+                    }
+                    case 6: {
+                        if (tag !== 50) {
+                            break;
+                        }
+                        message.AuthorizationFailureReason = reader.string();
+                        continue;
+                    }
+                    case 7: {
+                        if (tag !== 56) {
+                            break;
+                        }
+                        message.Response = reader.bool();
+                        continue;
+                    }
+                }
+                if ((tag & 7) === 4 || tag === 0) {
+                    break;
+                }
+                reader.skip(tag & 7);
+            }
+            return message;
+        }
+        finally {
+            reader.__tsProtoDecodeDepth = previousRecursionDepth;
+        }
+    },
+    fromJSON(object) {
+        return {
+            CorrelationId: isSet(object.CorrelationId) ? bcl.Guid.fromJSON(object.CorrelationId) : undefined,
+            IsAuthorized: isSet(object.IsAuthorized) ? globalThis.Boolean(object.IsAuthorized) : false,
+            ValidationResults: globalThis.Array.isArray(object?.ValidationResults)
+                ? object.ValidationResults.map((e) => ValidationResult.fromJSON(e))
+                : [],
+            ExceptionMessages: globalThis.Array.isArray(object?.ExceptionMessages)
+                ? object.ExceptionMessages.map((e) => globalThis.String(e))
+                : [],
+            ExceptionStackTrace: isSet(object.ExceptionStackTrace) ? globalThis.String(object.ExceptionStackTrace) : "",
+            AuthorizationFailureReason: isSet(object.AuthorizationFailureReason)
+                ? globalThis.String(object.AuthorizationFailureReason)
+                : "",
+            Response: isSet(object.Response) ? globalThis.Boolean(object.Response) : false,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.CorrelationId !== undefined) {
+            obj.CorrelationId = bcl.Guid.toJSON(message.CorrelationId);
+        }
+        if (message.IsAuthorized !== false) {
+            obj.IsAuthorized = message.IsAuthorized;
+        }
+        if (message.ValidationResults?.length) {
+            obj.ValidationResults = message.ValidationResults.map((e) => ValidationResult.toJSON(e));
+        }
+        if (message.ExceptionMessages?.length) {
+            obj.ExceptionMessages = message.ExceptionMessages;
+        }
+        if (message.ExceptionStackTrace !== "") {
+            obj.ExceptionStackTrace = message.ExceptionStackTrace;
+        }
+        if (message.AuthorizationFailureReason !== "") {
+            obj.AuthorizationFailureReason = message.AuthorizationFailureReason;
+        }
+        if (message.Response !== false) {
+            obj.Response = message.Response;
+        }
+        return obj;
+    },
+    create(base) {
+        return CommandResultBoolean.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseCommandResultBoolean();
+        message.CorrelationId = (object.CorrelationId !== undefined && object.CorrelationId !== null)
+            ? bcl.Guid.fromPartial(object.CorrelationId)
+            : undefined;
+        message.IsAuthorized = object.IsAuthorized ?? false;
+        message.ValidationResults = object.ValidationResults?.map((e) => ValidationResult.fromPartial(e)) || [];
+        message.ExceptionMessages = object.ExceptionMessages?.map((e) => e) || [];
+        message.ExceptionStackTrace = object.ExceptionStackTrace ?? "";
+        message.AuthorizationFailureReason = object.AuthorizationFailureReason ?? "";
+        message.Response = object.Response ?? false;
+        return message;
+    },
+};
+function createBaseEventStoreAccessGrantsResponse() {
+    return { EventStore: "", Namespace: "", Access: 0, Source: 0, Holder: undefined };
+}
+const EventStoreAccessGrantsResponse = {
+    encode(message, writer = new wire.BinaryWriter()) {
+        if (message.EventStore !== "") {
+            writer.uint32(34).string(message.EventStore);
+        }
+        if (message.Namespace !== "") {
+            writer.uint32(42).string(message.Namespace);
+        }
+        if (message.Access !== 0) {
+            writer.uint32(48).int32(message.Access);
+        }
+        if (message.Source !== 0) {
+            writer.uint32(56).int32(message.Source);
+        }
+        if (message.Holder !== undefined) {
+            EventStoreAccessHolder.encode(message.Holder, writer.uint32(66).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
+        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+        if (previousRecursionDepth >= 100) {
+            throw new globalThis.Error("protobuf decode recursion limit exceeded");
+        }
+        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+        try {
+            const end = length === undefined ? reader.len : reader.pos + length;
+            const message = createBaseEventStoreAccessGrantsResponse();
+            while (reader.pos < end) {
+                const tag = reader.uint32();
+                switch (tag >>> 3) {
+                    case 4: {
+                        if (tag !== 34) {
+                            break;
+                        }
+                        message.EventStore = reader.string();
+                        continue;
+                    }
+                    case 5: {
+                        if (tag !== 42) {
+                            break;
+                        }
+                        message.Namespace = reader.string();
+                        continue;
+                    }
+                    case 6: {
+                        if (tag !== 48) {
+                            break;
+                        }
+                        message.Access = reader.int32();
+                        continue;
+                    }
+                    case 7: {
+                        if (tag !== 56) {
+                            break;
+                        }
+                        message.Source = reader.int32();
+                        continue;
+                    }
+                    case 8: {
+                        if (tag !== 66) {
+                            break;
+                        }
+                        message.Holder = EventStoreAccessHolder.decode(reader, reader.uint32());
+                        continue;
+                    }
+                }
+                if ((tag & 7) === 4 || tag === 0) {
+                    break;
+                }
+                reader.skip(tag & 7);
+            }
+            return message;
+        }
+        finally {
+            reader.__tsProtoDecodeDepth = previousRecursionDepth;
+        }
+    },
+    fromJSON(object) {
+        return {
+            EventStore: isSet(object.EventStore) ? globalThis.String(object.EventStore) : "",
+            Namespace: isSet(object.Namespace) ? globalThis.String(object.Namespace) : "",
+            Access: isSet(object.Access) ? storeAccessFromJSON(object.Access) : 0,
+            Source: isSet(object.Source) ? eventStoreAccessGrantSourceFromJSON(object.Source) : 0,
+            Holder: isSet(object.Holder) ? EventStoreAccessHolder.fromJSON(object.Holder) : undefined,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.EventStore !== "") {
+            obj.EventStore = message.EventStore;
+        }
+        if (message.Namespace !== "") {
+            obj.Namespace = message.Namespace;
+        }
+        if (message.Access !== 0) {
+            obj.Access = storeAccessToJSON(message.Access);
+        }
+        if (message.Source !== 0) {
+            obj.Source = eventStoreAccessGrantSourceToJSON(message.Source);
+        }
+        if (message.Holder !== undefined) {
+            obj.Holder = EventStoreAccessHolder.toJSON(message.Holder);
+        }
+        return obj;
+    },
+    create(base) {
+        return EventStoreAccessGrantsResponse.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseEventStoreAccessGrantsResponse();
+        message.EventStore = object.EventStore ?? "";
+        message.Namespace = object.Namespace ?? "";
+        message.Access = object.Access ?? 0;
+        message.Source = object.Source ?? 0;
+        message.Holder = (object.Holder !== undefined && object.Holder !== null)
+            ? EventStoreAccessHolder.fromPartial(object.Holder)
+            : undefined;
+        return message;
+    },
+};
+function createBaseEventStoreAccessHolder() {
+    return { Issuer: "", Subject: "", IsClient: false };
+}
+const EventStoreAccessHolder = {
+    encode(message, writer = new wire.BinaryWriter()) {
+        if (message.Issuer !== "") {
+            writer.uint32(10).string(message.Issuer);
+        }
+        if (message.Subject !== "") {
+            writer.uint32(18).string(message.Subject);
+        }
+        if (message.IsClient !== false) {
+            writer.uint32(24).bool(message.IsClient);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
+        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+        if (previousRecursionDepth >= 100) {
+            throw new globalThis.Error("protobuf decode recursion limit exceeded");
+        }
+        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+        try {
+            const end = length === undefined ? reader.len : reader.pos + length;
+            const message = createBaseEventStoreAccessHolder();
+            while (reader.pos < end) {
+                const tag = reader.uint32();
+                switch (tag >>> 3) {
+                    case 1: {
+                        if (tag !== 10) {
+                            break;
+                        }
+                        message.Issuer = reader.string();
+                        continue;
+                    }
+                    case 2: {
+                        if (tag !== 18) {
+                            break;
+                        }
+                        message.Subject = reader.string();
+                        continue;
+                    }
+                    case 3: {
+                        if (tag !== 24) {
+                            break;
+                        }
+                        message.IsClient = reader.bool();
+                        continue;
+                    }
+                }
+                if ((tag & 7) === 4 || tag === 0) {
+                    break;
+                }
+                reader.skip(tag & 7);
+            }
+            return message;
+        }
+        finally {
+            reader.__tsProtoDecodeDepth = previousRecursionDepth;
+        }
+    },
+    fromJSON(object) {
+        return {
+            Issuer: isSet(object.Issuer) ? globalThis.String(object.Issuer) : "",
+            Subject: isSet(object.Subject) ? globalThis.String(object.Subject) : "",
+            IsClient: isSet(object.IsClient) ? globalThis.Boolean(object.IsClient) : false,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.Issuer !== "") {
+            obj.Issuer = message.Issuer;
+        }
+        if (message.Subject !== "") {
+            obj.Subject = message.Subject;
+        }
+        if (message.IsClient !== false) {
+            obj.IsClient = message.IsClient;
+        }
+        return obj;
+    },
+    create(base) {
+        return EventStoreAccessHolder.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseEventStoreAccessHolder();
+        message.Issuer = object.Issuer ?? "";
+        message.Subject = object.Subject ?? "";
+        message.IsClient = object.IsClient ?? false;
+        return message;
+    },
+};
+function createBaseEventStoreAccessPreflightResponse() {
+    return {
+        EventStore: "",
+        Namespace: "",
+        Access: 0,
+        FirstSeen: undefined,
+        LastSeen: undefined,
+        Count: 0n,
+        Holder: undefined,
+    };
+}
+const EventStoreAccessPreflightResponse = {
+    encode(message, writer = new wire.BinaryWriter()) {
+        if (message.EventStore !== "") {
+            writer.uint32(34).string(message.EventStore);
+        }
+        if (message.Namespace !== "") {
+            writer.uint32(42).string(message.Namespace);
+        }
+        if (message.Access !== 0) {
+            writer.uint32(48).int32(message.Access);
+        }
+        if (message.FirstSeen !== undefined) {
+            SerializableDateTimeOffset.encode(message.FirstSeen, writer.uint32(58).fork()).join();
+        }
+        if (message.LastSeen !== undefined) {
+            SerializableDateTimeOffset.encode(message.LastSeen, writer.uint32(66).fork()).join();
+        }
+        if (message.Count !== 0n) {
+            if (BigInt.asIntN(64, message.Count) !== message.Count) {
+                throw new globalThis.Error("value provided for field message.Count of type int64 too large");
+            }
+            writer.uint32(72).int64(message.Count);
+        }
+        if (message.Holder !== undefined) {
+            EventStoreAccessHolder.encode(message.Holder, writer.uint32(82).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
+        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+        if (previousRecursionDepth >= 100) {
+            throw new globalThis.Error("protobuf decode recursion limit exceeded");
+        }
+        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+        try {
+            const end = length === undefined ? reader.len : reader.pos + length;
+            const message = createBaseEventStoreAccessPreflightResponse();
+            while (reader.pos < end) {
+                const tag = reader.uint32();
+                switch (tag >>> 3) {
+                    case 4: {
+                        if (tag !== 34) {
+                            break;
+                        }
+                        message.EventStore = reader.string();
+                        continue;
+                    }
+                    case 5: {
+                        if (tag !== 42) {
+                            break;
+                        }
+                        message.Namespace = reader.string();
+                        continue;
+                    }
+                    case 6: {
+                        if (tag !== 48) {
+                            break;
+                        }
+                        message.Access = reader.int32();
+                        continue;
+                    }
+                    case 7: {
+                        if (tag !== 58) {
+                            break;
+                        }
+                        message.FirstSeen = SerializableDateTimeOffset.decode(reader, reader.uint32());
+                        continue;
+                    }
+                    case 8: {
+                        if (tag !== 66) {
+                            break;
+                        }
+                        message.LastSeen = SerializableDateTimeOffset.decode(reader, reader.uint32());
+                        continue;
+                    }
+                    case 9: {
+                        if (tag !== 72) {
+                            break;
+                        }
+                        message.Count = reader.int64();
+                        continue;
+                    }
+                    case 10: {
+                        if (tag !== 82) {
+                            break;
+                        }
+                        message.Holder = EventStoreAccessHolder.decode(reader, reader.uint32());
+                        continue;
+                    }
+                }
+                if ((tag & 7) === 4 || tag === 0) {
+                    break;
+                }
+                reader.skip(tag & 7);
+            }
+            return message;
+        }
+        finally {
+            reader.__tsProtoDecodeDepth = previousRecursionDepth;
+        }
+    },
+    fromJSON(object) {
+        return {
+            EventStore: isSet(object.EventStore) ? globalThis.String(object.EventStore) : "",
+            Namespace: isSet(object.Namespace) ? globalThis.String(object.Namespace) : "",
+            Access: isSet(object.Access) ? storeAccessFromJSON(object.Access) : 0,
+            FirstSeen: isSet(object.FirstSeen) ? SerializableDateTimeOffset.fromJSON(object.FirstSeen) : undefined,
+            LastSeen: isSet(object.LastSeen) ? SerializableDateTimeOffset.fromJSON(object.LastSeen) : undefined,
+            Count: isSet(object.Count) ? BigInt(object.Count) : 0n,
+            Holder: isSet(object.Holder) ? EventStoreAccessHolder.fromJSON(object.Holder) : undefined,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.EventStore !== "") {
+            obj.EventStore = message.EventStore;
+        }
+        if (message.Namespace !== "") {
+            obj.Namespace = message.Namespace;
+        }
+        if (message.Access !== 0) {
+            obj.Access = storeAccessToJSON(message.Access);
+        }
+        if (message.FirstSeen !== undefined) {
+            obj.FirstSeen = SerializableDateTimeOffset.toJSON(message.FirstSeen);
+        }
+        if (message.LastSeen !== undefined) {
+            obj.LastSeen = SerializableDateTimeOffset.toJSON(message.LastSeen);
+        }
+        if (message.Count !== 0n) {
+            obj.Count = message.Count.toString();
+        }
+        if (message.Holder !== undefined) {
+            obj.Holder = EventStoreAccessHolder.toJSON(message.Holder);
+        }
+        return obj;
+    },
+    create(base) {
+        return EventStoreAccessPreflightResponse.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseEventStoreAccessPreflightResponse();
+        message.EventStore = object.EventStore ?? "";
+        message.Namespace = object.Namespace ?? "";
+        message.Access = object.Access ?? 0;
+        message.FirstSeen = (object.FirstSeen !== undefined && object.FirstSeen !== null)
+            ? SerializableDateTimeOffset.fromPartial(object.FirstSeen)
+            : undefined;
+        message.LastSeen = (object.LastSeen !== undefined && object.LastSeen !== null)
+            ? SerializableDateTimeOffset.fromPartial(object.LastSeen)
+            : undefined;
+        message.Count = (object.Count !== undefined && object.Count !== null) ? BigInt(object.Count) : 0n;
+        message.Holder = (object.Holder !== undefined && object.Holder !== null)
+            ? EventStoreAccessHolder.fromPartial(object.Holder)
+            : undefined;
+        return message;
+    },
+};
+function createBaseGrantAdministratorRequest() {
+    return { UserId: undefined };
+}
+const GrantAdministratorRequest = {
+    encode(message, writer = new wire.BinaryWriter()) {
+        if (message.UserId !== undefined) {
+            bcl.Guid.encode(message.UserId, writer.uint32(10).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
+        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+        if (previousRecursionDepth >= 100) {
+            throw new globalThis.Error("protobuf decode recursion limit exceeded");
+        }
+        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+        try {
+            const end = length === undefined ? reader.len : reader.pos + length;
+            const message = createBaseGrantAdministratorRequest();
+            while (reader.pos < end) {
+                const tag = reader.uint32();
+                switch (tag >>> 3) {
+                    case 1: {
+                        if (tag !== 10) {
+                            break;
+                        }
+                        message.UserId = bcl.Guid.decode(reader, reader.uint32());
+                        continue;
+                    }
+                }
+                if ((tag & 7) === 4 || tag === 0) {
+                    break;
+                }
+                reader.skip(tag & 7);
+            }
+            return message;
+        }
+        finally {
+            reader.__tsProtoDecodeDepth = previousRecursionDepth;
+        }
+    },
+    fromJSON(object) {
+        return { UserId: isSet(object.UserId) ? bcl.Guid.fromJSON(object.UserId) : undefined };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.UserId !== undefined) {
+            obj.UserId = bcl.Guid.toJSON(message.UserId);
+        }
+        return obj;
+    },
+    create(base) {
+        return GrantAdministratorRequest.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseGrantAdministratorRequest();
+        message.UserId = (object.UserId !== undefined && object.UserId !== null)
+            ? bcl.Guid.fromPartial(object.UserId)
+            : undefined;
+        return message;
+    },
+};
+function createBaseGrantEventStoreAccessRequest() {
+    return { EventStore: "", Namespace: "", Access: 0, Holder: undefined, AllEventStores: false };
+}
+const GrantEventStoreAccessRequest = {
+    encode(message, writer = new wire.BinaryWriter()) {
+        if (message.EventStore !== "") {
+            writer.uint32(34).string(message.EventStore);
+        }
+        if (message.Namespace !== "") {
+            writer.uint32(42).string(message.Namespace);
+        }
+        if (message.Access !== 0) {
+            writer.uint32(48).int32(message.Access);
+        }
+        if (message.Holder !== undefined) {
+            EventStoreAccessHolder.encode(message.Holder, writer.uint32(58).fork()).join();
+        }
+        if (message.AllEventStores !== false) {
+            writer.uint32(64).bool(message.AllEventStores);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
+        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+        if (previousRecursionDepth >= 100) {
+            throw new globalThis.Error("protobuf decode recursion limit exceeded");
+        }
+        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+        try {
+            const end = length === undefined ? reader.len : reader.pos + length;
+            const message = createBaseGrantEventStoreAccessRequest();
+            while (reader.pos < end) {
+                const tag = reader.uint32();
+                switch (tag >>> 3) {
+                    case 4: {
+                        if (tag !== 34) {
+                            break;
+                        }
+                        message.EventStore = reader.string();
+                        continue;
+                    }
+                    case 5: {
+                        if (tag !== 42) {
+                            break;
+                        }
+                        message.Namespace = reader.string();
+                        continue;
+                    }
+                    case 6: {
+                        if (tag !== 48) {
+                            break;
+                        }
+                        message.Access = reader.int32();
+                        continue;
+                    }
+                    case 7: {
+                        if (tag !== 58) {
+                            break;
+                        }
+                        message.Holder = EventStoreAccessHolder.decode(reader, reader.uint32());
+                        continue;
+                    }
+                    case 8: {
+                        if (tag !== 64) {
+                            break;
+                        }
+                        message.AllEventStores = reader.bool();
+                        continue;
+                    }
+                }
+                if ((tag & 7) === 4 || tag === 0) {
+                    break;
+                }
+                reader.skip(tag & 7);
+            }
+            return message;
+        }
+        finally {
+            reader.__tsProtoDecodeDepth = previousRecursionDepth;
+        }
+    },
+    fromJSON(object) {
+        return {
+            EventStore: isSet(object.EventStore) ? globalThis.String(object.EventStore) : "",
+            Namespace: isSet(object.Namespace) ? globalThis.String(object.Namespace) : "",
+            Access: isSet(object.Access) ? storeAccessFromJSON(object.Access) : 0,
+            Holder: isSet(object.Holder) ? EventStoreAccessHolder.fromJSON(object.Holder) : undefined,
+            AllEventStores: isSet(object.AllEventStores) ? globalThis.Boolean(object.AllEventStores) : false,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.EventStore !== "") {
+            obj.EventStore = message.EventStore;
+        }
+        if (message.Namespace !== "") {
+            obj.Namespace = message.Namespace;
+        }
+        if (message.Access !== 0) {
+            obj.Access = storeAccessToJSON(message.Access);
+        }
+        if (message.Holder !== undefined) {
+            obj.Holder = EventStoreAccessHolder.toJSON(message.Holder);
+        }
+        if (message.AllEventStores !== false) {
+            obj.AllEventStores = message.AllEventStores;
+        }
+        return obj;
+    },
+    create(base) {
+        return GrantEventStoreAccessRequest.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseGrantEventStoreAccessRequest();
+        message.EventStore = object.EventStore ?? "";
+        message.Namespace = object.Namespace ?? "";
+        message.Access = object.Access ?? 0;
+        message.Holder = (object.Holder !== undefined && object.Holder !== null)
+            ? EventStoreAccessHolder.fromPartial(object.Holder)
+            : undefined;
+        message.AllEventStores = object.AllEventStores ?? false;
+        return message;
+    },
+};
+function createBaseQueryResultAdminPasswordStatusResponse() {
+    return {
+        CorrelationId: undefined,
+        IsAuthorized: false,
+        ValidationResults: [],
+        ExceptionMessages: [],
+        ExceptionStackTrace: "",
+        Data: undefined,
+    };
+}
+const QueryResultAdminPasswordStatusResponse = {
+    encode(message, writer = new wire.BinaryWriter()) {
+        if (message.CorrelationId !== undefined) {
+            bcl.Guid.encode(message.CorrelationId, writer.uint32(10).fork()).join();
+        }
+        if (message.IsAuthorized !== false) {
+            writer.uint32(16).bool(message.IsAuthorized);
+        }
+        for (const v of message.ValidationResults) {
+            ValidationResult.encode(v, writer.uint32(26).fork()).join();
+        }
+        for (const v of message.ExceptionMessages) {
+            writer.uint32(34).string(v);
+        }
+        if (message.ExceptionStackTrace !== "") {
+            writer.uint32(42).string(message.ExceptionStackTrace);
+        }
+        if (message.Data !== undefined) {
+            AdminPasswordStatusResponse.encode(message.Data, writer.uint32(50).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
+        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+        if (previousRecursionDepth >= 100) {
+            throw new globalThis.Error("protobuf decode recursion limit exceeded");
+        }
+        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+        try {
+            const end = length === undefined ? reader.len : reader.pos + length;
+            const message = createBaseQueryResultAdminPasswordStatusResponse();
+            while (reader.pos < end) {
+                const tag = reader.uint32();
+                switch (tag >>> 3) {
+                    case 1: {
+                        if (tag !== 10) {
+                            break;
+                        }
+                        message.CorrelationId = bcl.Guid.decode(reader, reader.uint32());
+                        continue;
+                    }
+                    case 2: {
+                        if (tag !== 16) {
+                            break;
+                        }
+                        message.IsAuthorized = reader.bool();
+                        continue;
+                    }
+                    case 3: {
+                        if (tag !== 26) {
+                            break;
+                        }
+                        message.ValidationResults.push(ValidationResult.decode(reader, reader.uint32()));
+                        continue;
+                    }
+                    case 4: {
+                        if (tag !== 34) {
+                            break;
+                        }
+                        message.ExceptionMessages.push(reader.string());
+                        continue;
+                    }
+                    case 5: {
+                        if (tag !== 42) {
+                            break;
+                        }
+                        message.ExceptionStackTrace = reader.string();
+                        continue;
+                    }
+                    case 6: {
+                        if (tag !== 50) {
+                            break;
+                        }
+                        message.Data = AdminPasswordStatusResponse.decode(reader, reader.uint32());
+                        continue;
+                    }
+                }
+                if ((tag & 7) === 4 || tag === 0) {
+                    break;
+                }
+                reader.skip(tag & 7);
+            }
+            return message;
+        }
+        finally {
+            reader.__tsProtoDecodeDepth = previousRecursionDepth;
+        }
+    },
+    fromJSON(object) {
+        return {
+            CorrelationId: isSet(object.CorrelationId) ? bcl.Guid.fromJSON(object.CorrelationId) : undefined,
+            IsAuthorized: isSet(object.IsAuthorized) ? globalThis.Boolean(object.IsAuthorized) : false,
+            ValidationResults: globalThis.Array.isArray(object?.ValidationResults)
+                ? object.ValidationResults.map((e) => ValidationResult.fromJSON(e))
+                : [],
+            ExceptionMessages: globalThis.Array.isArray(object?.ExceptionMessages)
+                ? object.ExceptionMessages.map((e) => globalThis.String(e))
+                : [],
+            ExceptionStackTrace: isSet(object.ExceptionStackTrace) ? globalThis.String(object.ExceptionStackTrace) : "",
+            Data: isSet(object.Data) ? AdminPasswordStatusResponse.fromJSON(object.Data) : undefined,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.CorrelationId !== undefined) {
+            obj.CorrelationId = bcl.Guid.toJSON(message.CorrelationId);
+        }
+        if (message.IsAuthorized !== false) {
+            obj.IsAuthorized = message.IsAuthorized;
+        }
+        if (message.ValidationResults?.length) {
+            obj.ValidationResults = message.ValidationResults.map((e) => ValidationResult.toJSON(e));
+        }
+        if (message.ExceptionMessages?.length) {
+            obj.ExceptionMessages = message.ExceptionMessages;
+        }
+        if (message.ExceptionStackTrace !== "") {
+            obj.ExceptionStackTrace = message.ExceptionStackTrace;
+        }
+        if (message.Data !== undefined) {
+            obj.Data = AdminPasswordStatusResponse.toJSON(message.Data);
+        }
+        return obj;
+    },
+    create(base) {
+        return QueryResultAdminPasswordStatusResponse.fromPartial(base ?? {});
     },
     fromPartial(object) {
-        const message = createBaseChangeUserPasswordRequest();
-        message.UserId = (object.UserId !== undefined && object.UserId !== null)
-            ? bcl.Guid.fromPartial(object.UserId)
+        const message = createBaseQueryResultAdminPasswordStatusResponse();
+        message.CorrelationId = (object.CorrelationId !== undefined && object.CorrelationId !== null)
+            ? bcl.Guid.fromPartial(object.CorrelationId)
+            : undefined;
+        message.IsAuthorized = object.IsAuthorized ?? false;
+        message.ValidationResults = object.ValidationResults?.map((e) => ValidationResult.fromPartial(e)) || [];
+        message.ExceptionMessages = object.ExceptionMessages?.map((e) => e) || [];
+        message.ExceptionStackTrace = object.ExceptionStackTrace ?? "";
+        message.Data = (object.Data !== undefined && object.Data !== null)
+            ? AdminPasswordStatusResponse.fromPartial(object.Data)
             : undefined;
-        message.OldPassword = object.OldPassword ?? "";
-        message.Password = object.Password ?? "";
-        message.ConfirmedPassword = object.ConfirmedPassword ?? "";
         return message;
     },
 };
-function createBaseCommandResult() {
+function createBaseQueryResultIEnumerableAdministratorResponse() {
     return {
         CorrelationId: undefined,
         IsAuthorized: false,
         ValidationResults: [],
         ExceptionMessages: [],
         ExceptionStackTrace: "",
-        AuthorizationFailureReason: "",
+        Data: [],
     };
 }
-const CommandResult = {
+const QueryResultIEnumerableAdministratorResponse = {
     encode(message, writer = new wire.BinaryWriter()) {
         if (message.CorrelationId !== undefined) {
             bcl.Guid.encode(message.CorrelationId, writer.uint32(10).fork()).join();
@@ -769,8 +1894,8 @@ const CommandResult = {
         if (message.ExceptionStackTrace !== "") {
             writer.uint32(42).string(message.ExceptionStackTrace);
         }
-        if (message.AuthorizationFailureReason !== "") {
-            writer.uint32(50).string(message.AuthorizationFailureReason);
+        for (const v of message.Data) {
+            AdministratorResponse.encode(v, writer.uint32(50).fork()).join();
         }
         return writer;
     },
@@ -783,7 +1908,7 @@ const CommandResult = {
         reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
         try {
             const end = length === undefined ? reader.len : reader.pos + length;
-            const message = createBaseCommandResult();
+            const message = createBaseQueryResultIEnumerableAdministratorResponse();
             while (reader.pos < end) {
                 const tag = reader.uint32();
                 switch (tag >>> 3) {
@@ -826,7 +1951,7 @@ const CommandResult = {
                         if (tag !== 50) {
                             break;
                         }
-                        message.AuthorizationFailureReason = reader.string();
+                        message.Data.push(AdministratorResponse.decode(reader, reader.uint32()));
                         continue;
                     }
                 }
@@ -852,9 +1977,9 @@ const CommandResult = {
                 ? object.ExceptionMessages.map((e) => globalThis.String(e))
                 : [],
             ExceptionStackTrace: isSet(object.ExceptionStackTrace) ? globalThis.String(object.ExceptionStackTrace) : "",
-            AuthorizationFailureReason: isSet(object.AuthorizationFailureReason)
-                ? globalThis.String(object.AuthorizationFailureReason)
-                : "",
+            Data: globalThis.Array.isArray(object?.Data)
+                ? object.Data.map((e) => AdministratorResponse.fromJSON(e))
+                : [],
         };
     },
     toJSON(message) {
@@ -874,16 +1999,16 @@ const CommandResult = {
         if (message.ExceptionStackTrace !== "") {
             obj.ExceptionStackTrace = message.ExceptionStackTrace;
         }
-        if (message.AuthorizationFailureReason !== "") {
-            obj.AuthorizationFailureReason = message.AuthorizationFailureReason;
+        if (message.Data?.length) {
+            obj.Data = message.Data.map((e) => AdministratorResponse.toJSON(e));
         }
         return obj;
     },
     create(base) {
-        return CommandResult.fromPartial(base ?? {});
+        return QueryResultIEnumerableAdministratorResponse.fromPartial(base ?? {});
     },
     fromPartial(object) {
-        const message = createBaseCommandResult();
+        const message = createBaseQueryResultIEnumerableAdministratorResponse();
         message.CorrelationId = (object.CorrelationId !== undefined && object.CorrelationId !== null)
             ? bcl.Guid.fromPartial(object.CorrelationId)
             : undefined;
@@ -891,84 +2016,21 @@ const CommandResult = {
         message.ValidationResults = object.ValidationResults?.map((e) => ValidationResult.fromPartial(e)) || [];
         message.ExceptionMessages = object.ExceptionMessages?.map((e) => e) || [];
         message.ExceptionStackTrace = object.ExceptionStackTrace ?? "";
-        message.AuthorizationFailureReason = object.AuthorizationFailureReason ?? "";
-        return message;
-    },
-};
-function createBaseGrantAdministratorRequest() {
-    return { UserId: undefined };
-}
-const GrantAdministratorRequest = {
-    encode(message, writer = new wire.BinaryWriter()) {
-        if (message.UserId !== undefined) {
-            bcl.Guid.encode(message.UserId, writer.uint32(10).fork()).join();
-        }
-        return writer;
-    },
-    decode(input, length) {
-        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
-        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
-        if (previousRecursionDepth >= 100) {
-            throw new globalThis.Error("protobuf decode recursion limit exceeded");
-        }
-        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
-        try {
-            const end = length === undefined ? reader.len : reader.pos + length;
-            const message = createBaseGrantAdministratorRequest();
-            while (reader.pos < end) {
-                const tag = reader.uint32();
-                switch (tag >>> 3) {
-                    case 1: {
-                        if (tag !== 10) {
-                            break;
-                        }
-                        message.UserId = bcl.Guid.decode(reader, reader.uint32());
-                        continue;
-                    }
-                }
-                if ((tag & 7) === 4 || tag === 0) {
-                    break;
-                }
-                reader.skip(tag & 7);
-            }
-            return message;
-        }
-        finally {
-            reader.__tsProtoDecodeDepth = previousRecursionDepth;
-        }
-    },
-    fromJSON(object) {
-        return { UserId: isSet(object.UserId) ? bcl.Guid.fromJSON(object.UserId) : undefined };
-    },
-    toJSON(message) {
-        const obj = {};
-        if (message.UserId !== undefined) {
-            obj.UserId = bcl.Guid.toJSON(message.UserId);
-        }
-        return obj;
-    },
-    create(base) {
-        return GrantAdministratorRequest.fromPartial(base ?? {});
-    },
-    fromPartial(object) {
-        const message = createBaseGrantAdministratorRequest();
-        message.UserId = (object.UserId !== undefined && object.UserId !== null)
-            ? bcl.Guid.fromPartial(object.UserId)
-            : undefined;
+        message.Data = object.Data?.map((e) => AdministratorResponse.fromPartial(e)) || [];
         return message;
     },
 };
-function createBaseQueryResultAdminPasswordStatusResponse() {
+function createBaseQueryResultIEnumerableApplicationResponse() {
     return {
         CorrelationId: undefined,
         IsAuthorized: false,
         ValidationResults: [],
         ExceptionMessages: [],
         ExceptionStackTrace: "",
-        Data: undefined,
+        Data: [],
     };
 }
-const QueryResultAdminPasswordStatusResponse = {
+const QueryResultIEnumerableApplicationResponse = {
     encode(message, writer = new wire.BinaryWriter()) {
         if (message.CorrelationId !== undefined) {
             bcl.Guid.encode(message.CorrelationId, writer.uint32(10).fork()).join();
@@ -985,8 +2047,8 @@ const QueryResultAdminPasswordStatusResponse = {
         if (message.ExceptionStackTrace !== "") {
             writer.uint32(42).string(message.ExceptionStackTrace);
         }
-        if (message.Data !== undefined) {
-            AdminPasswordStatusResponse.encode(message.Data, writer.uint32(50).fork()).join();
+        for (const v of message.Data) {
+            ApplicationResponse.encode(v, writer.uint32(50).fork()).join();
         }
         return writer;
     },
@@ -999,7 +2061,7 @@ const QueryResultAdminPasswordStatusResponse = {
         reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
         try {
             const end = length === undefined ? reader.len : reader.pos + length;
-            const message = createBaseQueryResultAdminPasswordStatusResponse();
+            const message = createBaseQueryResultIEnumerableApplicationResponse();
             while (reader.pos < end) {
                 const tag = reader.uint32();
                 switch (tag >>> 3) {
@@ -1042,7 +2104,7 @@ const QueryResultAdminPasswordStatusResponse = {
                         if (tag !== 50) {
                             break;
                         }
-                        message.Data = AdminPasswordStatusResponse.decode(reader, reader.uint32());
+                        message.Data.push(ApplicationResponse.decode(reader, reader.uint32()));
                         continue;
                     }
                 }
@@ -1068,7 +2130,7 @@ const QueryResultAdminPasswordStatusResponse = {
                 ? object.ExceptionMessages.map((e) => globalThis.String(e))
                 : [],
             ExceptionStackTrace: isSet(object.ExceptionStackTrace) ? globalThis.String(object.ExceptionStackTrace) : "",
-            Data: isSet(object.Data) ? AdminPasswordStatusResponse.fromJSON(object.Data) : undefined,
+            Data: globalThis.Array.isArray(object?.Data) ? object.Data.map((e) => ApplicationResponse.fromJSON(e)) : [],
         };
     },
     toJSON(message) {
@@ -1088,16 +2150,16 @@ const QueryResultAdminPasswordStatusResponse = {
         if (message.ExceptionStackTrace !== "") {
             obj.ExceptionStackTrace = message.ExceptionStackTrace;
         }
-        if (message.Data !== undefined) {
-            obj.Data = AdminPasswordStatusResponse.toJSON(message.Data);
+        if (message.Data?.length) {
+            obj.Data = message.Data.map((e) => ApplicationResponse.toJSON(e));
         }
         return obj;
     },
     create(base) {
-        return QueryResultAdminPasswordStatusResponse.fromPartial(base ?? {});
+        return QueryResultIEnumerableApplicationResponse.fromPartial(base ?? {});
     },
     fromPartial(object) {
-        const message = createBaseQueryResultAdminPasswordStatusResponse();
+        const message = createBaseQueryResultIEnumerableApplicationResponse();
         message.CorrelationId = (object.CorrelationId !== undefined && object.CorrelationId !== null)
             ? bcl.Guid.fromPartial(object.CorrelationId)
             : undefined;
@@ -1105,13 +2167,11 @@ const QueryResultAdminPasswordStatusResponse = {
         message.ValidationResults = object.ValidationResults?.map((e) => ValidationResult.fromPartial(e)) || [];
         message.ExceptionMessages = object.ExceptionMessages?.map((e) => e) || [];
         message.ExceptionStackTrace = object.ExceptionStackTrace ?? "";
-        message.Data = (object.Data !== undefined && object.Data !== null)
-            ? AdminPasswordStatusResponse.fromPartial(object.Data)
-            : undefined;
+        message.Data = object.Data?.map((e) => ApplicationResponse.fromPartial(e)) || [];
         return message;
     },
 };
-function createBaseQueryResultIEnumerableAdministratorResponse() {
+function createBaseQueryResultIEnumerableEventStoreAccessGrantsResponse() {
     return {
         CorrelationId: undefined,
         IsAuthorized: false,
@@ -1121,7 +2181,7 @@ function createBaseQueryResultIEnumerableAdministratorResponse() {
         Data: [],
     };
 }
-const QueryResultIEnumerableAdministratorResponse = {
+const QueryResultIEnumerableEventStoreAccessGrantsResponse = {
     encode(message, writer = new wire.BinaryWriter()) {
         if (message.CorrelationId !== undefined) {
             bcl.Guid.encode(message.CorrelationId, writer.uint32(10).fork()).join();
@@ -1139,7 +2199,7 @@ const QueryResultIEnumerableAdministratorResponse = {
             writer.uint32(42).string(message.ExceptionStackTrace);
         }
         for (const v of message.Data) {
-            AdministratorResponse.encode(v, writer.uint32(50).fork()).join();
+            EventStoreAccessGrantsResponse.encode(v, writer.uint32(50).fork()).join();
         }
         return writer;
     },
@@ -1152,7 +2212,7 @@ const QueryResultIEnumerableAdministratorResponse = {
         reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
         try {
             const end = length === undefined ? reader.len : reader.pos + length;
-            const message = createBaseQueryResultIEnumerableAdministratorResponse();
+            const message = createBaseQueryResultIEnumerableEventStoreAccessGrantsResponse();
             while (reader.pos < end) {
                 const tag = reader.uint32();
                 switch (tag >>> 3) {
@@ -1195,7 +2255,7 @@ const QueryResultIEnumerableAdministratorResponse = {
                         if (tag !== 50) {
                             break;
                         }
-                        message.Data.push(AdministratorResponse.decode(reader, reader.uint32()));
+                        message.Data.push(EventStoreAccessGrantsResponse.decode(reader, reader.uint32()));
                         continue;
                     }
                 }
@@ -1222,7 +2282,7 @@ const QueryResultIEnumerableAdministratorResponse = {
                 : [],
             ExceptionStackTrace: isSet(object.ExceptionStackTrace) ? globalThis.String(object.ExceptionStackTrace) : "",
             Data: globalThis.Array.isArray(object?.Data)
-                ? object.Data.map((e) => AdministratorResponse.fromJSON(e))
+                ? object.Data.map((e) => EventStoreAccessGrantsResponse.fromJSON(e))
                 : [],
         };
     },
@@ -1244,15 +2304,15 @@ const QueryResultIEnumerableAdministratorResponse = {
             obj.ExceptionStackTrace = message.ExceptionStackTrace;
         }
         if (message.Data?.length) {
-            obj.Data = message.Data.map((e) => AdministratorResponse.toJSON(e));
+            obj.Data = message.Data.map((e) => EventStoreAccessGrantsResponse.toJSON(e));
         }
         return obj;
     },
     create(base) {
-        return QueryResultIEnumerableAdministratorResponse.fromPartial(base ?? {});
+        return QueryResultIEnumerableEventStoreAccessGrantsResponse.fromPartial(base ?? {});
     },
     fromPartial(object) {
-        const message = createBaseQueryResultIEnumerableAdministratorResponse();
+        const message = createBaseQueryResultIEnumerableEventStoreAccessGrantsResponse();
         message.CorrelationId = (object.CorrelationId !== undefined && object.CorrelationId !== null)
             ? bcl.Guid.fromPartial(object.CorrelationId)
             : undefined;
@@ -1260,11 +2320,11 @@ const QueryResultIEnumerableAdministratorResponse = {
         message.ValidationResults = object.ValidationResults?.map((e) => ValidationResult.fromPartial(e)) || [];
         message.ExceptionMessages = object.ExceptionMessages?.map((e) => e) || [];
         message.ExceptionStackTrace = object.ExceptionStackTrace ?? "";
-        message.Data = object.Data?.map((e) => AdministratorResponse.fromPartial(e)) || [];
+        message.Data = object.Data?.map((e) => EventStoreAccessGrantsResponse.fromPartial(e)) || [];
         return message;
     },
 };
-function createBaseQueryResultIEnumerableApplicationResponse() {
+function createBaseQueryResultIEnumerableEventStoreAccessPreflightResponse() {
     return {
         CorrelationId: undefined,
         IsAuthorized: false,
@@ -1274,7 +2334,7 @@ function createBaseQueryResultIEnumerableApplicationResponse() {
         Data: [],
     };
 }
-const QueryResultIEnumerableApplicationResponse = {
+const QueryResultIEnumerableEventStoreAccessPreflightResponse = {
     encode(message, writer = new wire.BinaryWriter()) {
         if (message.CorrelationId !== undefined) {
             bcl.Guid.encode(message.CorrelationId, writer.uint32(10).fork()).join();
@@ -1292,7 +2352,7 @@ const QueryResultIEnumerableApplicationResponse = {
             writer.uint32(42).string(message.ExceptionStackTrace);
         }
         for (const v of message.Data) {
-            ApplicationResponse.encode(v, writer.uint32(50).fork()).join();
+            EventStoreAccessPreflightResponse.encode(v, writer.uint32(50).fork()).join();
         }
         return writer;
     },
@@ -1305,7 +2365,7 @@ const QueryResultIEnumerableApplicationResponse = {
         reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
         try {
             const end = length === undefined ? reader.len : reader.pos + length;
-            const message = createBaseQueryResultIEnumerableApplicationResponse();
+            const message = createBaseQueryResultIEnumerableEventStoreAccessPreflightResponse();
             while (reader.pos < end) {
                 const tag = reader.uint32();
                 switch (tag >>> 3) {
@@ -1348,7 +2408,7 @@ const QueryResultIEnumerableApplicationResponse = {
                         if (tag !== 50) {
                             break;
                         }
-                        message.Data.push(ApplicationResponse.decode(reader, reader.uint32()));
+                        message.Data.push(EventStoreAccessPreflightResponse.decode(reader, reader.uint32()));
                         continue;
                     }
                 }
@@ -1374,7 +2434,9 @@ const QueryResultIEnumerableApplicationResponse = {
                 ? object.ExceptionMessages.map((e) => globalThis.String(e))
                 : [],
             ExceptionStackTrace: isSet(object.ExceptionStackTrace) ? globalThis.String(object.ExceptionStackTrace) : "",
-            Data: globalThis.Array.isArray(object?.Data) ? object.Data.map((e) => ApplicationResponse.fromJSON(e)) : [],
+            Data: globalThis.Array.isArray(object?.Data)
+                ? object.Data.map((e) => EventStoreAccessPreflightResponse.fromJSON(e))
+                : [],
         };
     },
     toJSON(message) {
@@ -1395,15 +2457,15 @@ const QueryResultIEnumerableApplicationResponse = {
             obj.ExceptionStackTrace = message.ExceptionStackTrace;
         }
         if (message.Data?.length) {
-            obj.Data = message.Data.map((e) => ApplicationResponse.toJSON(e));
+            obj.Data = message.Data.map((e) => EventStoreAccessPreflightResponse.toJSON(e));
         }
         return obj;
     },
     create(base) {
-        return QueryResultIEnumerableApplicationResponse.fromPartial(base ?? {});
+        return QueryResultIEnumerableEventStoreAccessPreflightResponse.fromPartial(base ?? {});
     },
     fromPartial(object) {
-        const message = createBaseQueryResultIEnumerableApplicationResponse();
+        const message = createBaseQueryResultIEnumerableEventStoreAccessPreflightResponse();
         message.CorrelationId = (object.CorrelationId !== undefined && object.CorrelationId !== null)
             ? bcl.Guid.fromPartial(object.CorrelationId)
             : undefined;
@@ -1411,7 +2473,7 @@ const QueryResultIEnumerableApplicationResponse = {
         message.ValidationResults = object.ValidationResults?.map((e) => ValidationResult.fromPartial(e)) || [];
         message.ExceptionMessages = object.ExceptionMessages?.map((e) => e) || [];
         message.ExceptionStackTrace = object.ExceptionStackTrace ?? "";
-        message.Data = object.Data?.map((e) => ApplicationResponse.fromPartial(e)) || [];
+        message.Data = object.Data?.map((e) => EventStoreAccessPreflightResponse.fromPartial(e)) || [];
         return message;
     },
 };
@@ -1833,6 +2895,116 @@ const RevokeAdministratorRequest = {
         return message;
     },
 };
+function createBaseRevokeEventStoreAccessRequest() {
+    return { EventStore: "", Namespace: "", Holder: undefined, AllEventStores: false };
+}
+const RevokeEventStoreAccessRequest = {
+    encode(message, writer = new wire.BinaryWriter()) {
+        if (message.EventStore !== "") {
+            writer.uint32(34).string(message.EventStore);
+        }
+        if (message.Namespace !== "") {
+            writer.uint32(42).string(message.Namespace);
+        }
+        if (message.Holder !== undefined) {
+            EventStoreAccessHolder.encode(message.Holder, writer.uint32(50).fork()).join();
+        }
+        if (message.AllEventStores !== false) {
+            writer.uint32(56).bool(message.AllEventStores);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire.BinaryReader ? input : new wire.BinaryReader(input);
+        const previousRecursionDepth = reader.__tsProtoDecodeDepth ?? 0;
+        if (previousRecursionDepth >= 100) {
+            throw new globalThis.Error("protobuf decode recursion limit exceeded");
+        }
+        reader.__tsProtoDecodeDepth = previousRecursionDepth + 1;
+        try {
+            const end = length === undefined ? reader.len : reader.pos + length;
+            const message = createBaseRevokeEventStoreAccessRequest();
+            while (reader.pos < end) {
+                const tag = reader.uint32();
+                switch (tag >>> 3) {
+                    case 4: {
+                        if (tag !== 34) {
+                            break;
+                        }
+                        message.EventStore = reader.string();
+                        continue;
+                    }
+                    case 5: {
+                        if (tag !== 42) {
+                            break;
+                        }
+                        message.Namespace = reader.string();
+                        continue;
+                    }
+                    case 6: {
+                        if (tag !== 50) {
+                            break;
+                        }
+                        message.Holder = EventStoreAccessHolder.decode(reader, reader.uint32());
+                        continue;
+                    }
+                    case 7: {
+                        if (tag !== 56) {
+                            break;
+                        }
+                        message.AllEventStores = reader.bool();
+                        continue;
+                    }
+                }
+                if ((tag & 7) === 4 || tag === 0) {
+                    break;
+                }
+                reader.skip(tag & 7);
+            }
+            return message;
+        }
+        finally {
+            reader.__tsProtoDecodeDepth = previousRecursionDepth;
+        }
+    },
+    fromJSON(object) {
+        return {
+            EventStore: isSet(object.EventStore) ? globalThis.String(object.EventStore) : "",
+            Namespace: isSet(object.Namespace) ? globalThis.String(object.Namespace) : "",
+            Holder: isSet(object.Holder) ? EventStoreAccessHolder.fromJSON(object.Holder) : undefined,
+            AllEventStores: isSet(object.AllEventStores) ? globalThis.Boolean(object.AllEventStores) : false,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.EventStore !== "") {
+            obj.EventStore = message.EventStore;
+        }
+        if (message.Namespace !== "") {
+            obj.Namespace = message.Namespace;
+        }
+        if (message.Holder !== undefined) {
+            obj.Holder = EventStoreAccessHolder.toJSON(message.Holder);
+        }
+        if (message.AllEventStores !== false) {
+            obj.AllEventStores = message.AllEventStores;
+        }
+        return obj;
+    },
+    create(base) {
+        return RevokeEventStoreAccessRequest.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseRevokeEventStoreAccessRequest();
+        message.EventStore = object.EventStore ?? "";
+        message.Namespace = object.Namespace ?? "";
+        message.Holder = (object.Holder !== undefined && object.Holder !== null)
+            ? EventStoreAccessHolder.fromPartial(object.Holder)
+            : undefined;
+        message.AllEventStores = object.AllEventStores ?? false;
+        return message;
+    },
+};
 function createBaseSerializableDateTimeOffset() {
     return { Value: "" };
 }
@@ -2268,6 +3440,14 @@ const AdministratorsDefinition = {
     name: "Administrators",
     fullName: "Cratis.Chronicle.Contracts.Security.Administrators",
     methods: {
+        all: {
+            name: "All",
+            requestType: empty.Empty,
+            requestStream: false,
+            responseType: QueryResultIEnumerableEventStoreAccessGrantsResponse,
+            responseStream: false,
+            options: {},
+        },
         allAdministrators: {
             name: "AllAdministrators",
             requestType: empty.Empty,
@@ -2284,6 +3464,14 @@ const AdministratorsDefinition = {
             responseStream: false,
             options: {},
         },
+        grantEventStoreAccess: {
+            name: "GrantEventStoreAccess",
+            requestType: GrantEventStoreAccessRequest,
+            requestStream: false,
+            responseType: CommandResult,
+            responseStream: false,
+            options: {},
+        },
         revokeAdministrator: {
             name: "RevokeAdministrator",
             requestType: RevokeAdministratorRequest,
@@ -2292,6 +3480,22 @@ const AdministratorsDefinition = {
             responseStream: false,
             options: {},
         },
+        revokeEventStoreAccess: {
+            name: "RevokeEventStoreAccess",
+            requestType: RevokeEventStoreAccessRequest,
+            requestStream: false,
+            responseType: CommandResultBoolean,
+            responseStream: false,
+            options: {},
+        },
+        uncovered: {
+            name: "Uncovered",
+            requestType: empty.Empty,
+            requestStream: false,
+            responseType: QueryResultIEnumerableEventStoreAccessPreflightResponse,
+            responseStream: false,
+            options: {},
+        },
     },
 };
 const ApplicationsDefinition = {
@@ -2408,20 +3612,32 @@ exports.ApplicationsDefinition = ApplicationsDefinition;
 exports.ChangeApplicationSecretRequest = ChangeApplicationSecretRequest;
 exports.ChangeUserPasswordRequest = ChangeUserPasswordRequest;
 exports.CommandResult = CommandResult;
+exports.CommandResultBoolean = CommandResultBoolean;
+exports.EventStoreAccessGrantsResponse = EventStoreAccessGrantsResponse;
+exports.EventStoreAccessHolder = EventStoreAccessHolder;
+exports.EventStoreAccessPreflightResponse = EventStoreAccessPreflightResponse;
 exports.GrantAdministratorRequest = GrantAdministratorRequest;
+exports.GrantEventStoreAccessRequest = GrantEventStoreAccessRequest;
 exports.QueryResultAdminPasswordStatusResponse = QueryResultAdminPasswordStatusResponse;
 exports.QueryResultIEnumerableAdministratorResponse = QueryResultIEnumerableAdministratorResponse;
 exports.QueryResultIEnumerableApplicationResponse = QueryResultIEnumerableApplicationResponse;
+exports.QueryResultIEnumerableEventStoreAccessGrantsResponse = QueryResultIEnumerableEventStoreAccessGrantsResponse;
+exports.QueryResultIEnumerableEventStoreAccessPreflightResponse = QueryResultIEnumerableEventStoreAccessPreflightResponse;
 exports.QueryResultIEnumerableUserResponse = QueryResultIEnumerableUserResponse;
 exports.RemoveApplicationRequest = RemoveApplicationRequest;
 exports.RemoveUserRequest = RemoveUserRequest;
 exports.RequirePasswordChangeRequest = RequirePasswordChangeRequest;
 exports.RevokeAdministratorRequest = RevokeAdministratorRequest;
+exports.RevokeEventStoreAccessRequest = RevokeEventStoreAccessRequest;
 exports.SerializableDateTimeOffset = SerializableDateTimeOffset;
 exports.SetInitialAdminPasswordRequest = SetInitialAdminPasswordRequest;
 exports.UserResponse = UserResponse;
 exports.UsersDefinition = UsersDefinition;
 exports.ValidationResult = ValidationResult;
+exports.eventStoreAccessGrantSourceFromJSON = eventStoreAccessGrantSourceFromJSON;
+exports.eventStoreAccessGrantSourceToJSON = eventStoreAccessGrantSourceToJSON;
+exports.storeAccessFromJSON = storeAccessFromJSON;
+exports.storeAccessToJSON = storeAccessToJSON;
 exports.validationResultSeverityFromJSON = validationResultSeverityFromJSON;
 exports.validationResultSeverityToJSON = validationResultSeverityToJSON;
 //# sourceMappingURL=security.js.map