@fivenet-app/gen 2026.5.1 → 2026.7.0

package/services/citizens/labels.ts

@@ -91,48 +91,18 @@ export interface DeleteLabelRequest {
 export interface DeleteLabelResponse {
 }
 /**
- * @generated from protobuf message services.citizens.AddCitizenLabelsRequest
+ * @generated from protobuf message services.citizens.ReorderLabelsRequest
  */
-export interface AddCitizenLabelsRequest {
+export interface ReorderLabelsRequest {
     /**
-     * @generated from protobuf field: int32 user_id = 1
+     * @generated from protobuf field: repeated int64 label_ids = 1
      */
-    userId: number;
-    /**
-     * @generated from protobuf field: repeated resources.citizens.labels.Label labels = 2
-     */
-    labels: Label[];
-    /**
-     * @generated from protobuf field: string reason = 3
-     */
-    reason: string;
-}
-/**
- * @generated from protobuf message services.citizens.AddCitizenLabelsResponse
- */
-export interface AddCitizenLabelsResponse {
-}
-/**
- * @generated from protobuf message services.citizens.RemoveCitizenLabelsRequest
- */
-export interface RemoveCitizenLabelsRequest {
-    /**
-     * @generated from protobuf field: int32 user_id = 1
-     */
-    userId: number;
-    /**
-     * @generated from protobuf field: repeated int64 ids = 2
-     */
-    ids: number[];
-    /**
-     * @generated from protobuf field: string reason = 3
-     */
-    reason: string;
+    labelIds: number[];
 }
 /**
- * @generated from protobuf message services.citizens.RemoveCitizenLabelsResponse
+ * @generated from protobuf message services.citizens.ReorderLabelsResponse
  */
-export interface RemoveCitizenLabelsResponse {
+export interface ReorderLabelsResponse {
 }
 // @generated message type with reflection information, may provide speed optimized methods
 class ListLabelsRequest$Type extends MessageType<ListLabelsRequest> {
@@ -512,141 +482,30 @@ class DeleteLabelResponse$Type extends MessageType<DeleteLabelResponse> {
  */
 export const DeleteLabelResponse = new DeleteLabelResponse$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class AddCitizenLabelsRequest$Type extends MessageType<AddCitizenLabelsRequest> {
-    constructor() {
-        super("services.citizens.AddCitizenLabelsRequest", [
-            { no: 1, name: "user_id", kind: "scalar", T: 5 /*ScalarType.INT32*/, options: { "buf.validate.field": { int32: { gt: 0 } } } },
-            { no: 2, name: "labels", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => Label },
-            { no: 3, name: "reason", kind: "scalar", T: 9 /*ScalarType.STRING*/, options: { "buf.validate.field": { string: { maxLen: "255" } } } }
-        ]);
-    }
-    create(value?: PartialMessage<AddCitizenLabelsRequest>): AddCitizenLabelsRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.userId = 0;
-        message.labels = [];
-        message.reason = "";
-        if (value !== undefined)
-            reflectionMergePartial<AddCitizenLabelsRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AddCitizenLabelsRequest): AddCitizenLabelsRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* int32 user_id */ 1:
-                    message.userId = reader.int32();
-                    break;
-                case /* repeated resources.citizens.labels.Label labels */ 2:
-                    message.labels.push(Label.internalBinaryRead(reader, reader.uint32(), options));
-                    break;
-                case /* string reason */ 3:
-                    message.reason = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: AddCitizenLabelsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* int32 user_id = 1; */
-        if (message.userId !== 0)
-            writer.tag(1, WireType.Varint).int32(message.userId);
-        /* repeated resources.citizens.labels.Label labels = 2; */
-        for (let i = 0; i < message.labels.length; i++)
-            Label.internalBinaryWrite(message.labels[i], writer.tag(2, WireType.LengthDelimited).fork(), options).join();
-        /* string reason = 3; */
-        if (message.reason !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.reason);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message services.citizens.AddCitizenLabelsRequest
- */
-export const AddCitizenLabelsRequest = new AddCitizenLabelsRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class AddCitizenLabelsResponse$Type extends MessageType<AddCitizenLabelsResponse> {
+class ReorderLabelsRequest$Type extends MessageType<ReorderLabelsRequest> {
     constructor() {
-        super("services.citizens.AddCitizenLabelsResponse", []);
-    }
-    create(value?: PartialMessage<AddCitizenLabelsResponse>): AddCitizenLabelsResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        if (value !== undefined)
-            reflectionMergePartial<AddCitizenLabelsResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AddCitizenLabelsResponse): AddCitizenLabelsResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: AddCitizenLabelsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message services.citizens.AddCitizenLabelsResponse
- */
-export const AddCitizenLabelsResponse = new AddCitizenLabelsResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class RemoveCitizenLabelsRequest$Type extends MessageType<RemoveCitizenLabelsRequest> {
-    constructor() {
-        super("services.citizens.RemoveCitizenLabelsRequest", [
-            { no: 1, name: "user_id", kind: "scalar", T: 5 /*ScalarType.INT32*/, options: { "buf.validate.field": { int32: { gt: 0 } } } },
-            { no: 2, name: "ids", kind: "scalar", repeat: 1 /*RepeatType.PACKED*/, T: 3 /*ScalarType.INT64*/, L: 2 /*LongType.NUMBER*/ },
-            { no: 3, name: "reason", kind: "scalar", T: 9 /*ScalarType.STRING*/, options: { "buf.validate.field": { string: { maxLen: "255" } } } }
+        super("services.citizens.ReorderLabelsRequest", [
+            { no: 1, name: "label_ids", kind: "scalar", repeat: 1 /*RepeatType.PACKED*/, T: 3 /*ScalarType.INT64*/, L: 2 /*LongType.NUMBER*/, options: { "buf.validate.field": { repeated: { minItems: "1", maxItems: "50", items: { int64: { gt: "0" } } } } } }
         ]);
     }
-    create(value?: PartialMessage<RemoveCitizenLabelsRequest>): RemoveCitizenLabelsRequest {
+    create(value?: PartialMessage<ReorderLabelsRequest>): ReorderLabelsRequest {
         const message = globalThis.Object.create((this.messagePrototype!));
-        message.userId = 0;
-        message.ids = [];
-        message.reason = "";
+        message.labelIds = [];
         if (value !== undefined)
-            reflectionMergePartial<RemoveCitizenLabelsRequest>(this, message, value);
+            reflectionMergePartial<ReorderLabelsRequest>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RemoveCitizenLabelsRequest): RemoveCitizenLabelsRequest {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ReorderLabelsRequest): ReorderLabelsRequest {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
-                case /* int32 user_id */ 1:
-                    message.userId = reader.int32();
-                    break;
-                case /* repeated int64 ids */ 2:
+                case /* repeated int64 label_ids */ 1:
                     if (wireType === WireType.LengthDelimited)
                         for (let e = reader.int32() + reader.pos; reader.pos < e;)
-                            message.ids.push(reader.int64().toNumber());
+                            message.labelIds.push(reader.int64().toNumber());
                     else
-                        message.ids.push(reader.int64().toNumber());
-                    break;
-                case /* string reason */ 3:
-                    message.reason = reader.string();
+                        message.labelIds.push(reader.int64().toNumber());
                     break;
                 default:
                     let u = options.readUnknownField;
@@ -659,20 +518,14 @@ class RemoveCitizenLabelsRequest$Type extends MessageType<RemoveCitizenLabelsReq
         }
         return message;
     }
-    internalBinaryWrite(message: RemoveCitizenLabelsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* int32 user_id = 1; */
-        if (message.userId !== 0)
-            writer.tag(1, WireType.Varint).int32(message.userId);
-        /* repeated int64 ids = 2; */
-        if (message.ids.length) {
-            writer.tag(2, WireType.LengthDelimited).fork();
-            for (let i = 0; i < message.ids.length; i++)
-                writer.int64(message.ids[i]);
+    internalBinaryWrite(message: ReorderLabelsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated int64 label_ids = 1; */
+        if (message.labelIds.length) {
+            writer.tag(1, WireType.LengthDelimited).fork();
+            for (let i = 0; i < message.labelIds.length; i++)
+                writer.int64(message.labelIds[i]);
             writer.join();
         }
-        /* string reason = 3; */
-        if (message.reason !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.reason);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -680,21 +533,21 @@ class RemoveCitizenLabelsRequest$Type extends MessageType<RemoveCitizenLabelsReq
     }
 }
 /**
- * @generated MessageType for protobuf message services.citizens.RemoveCitizenLabelsRequest
+ * @generated MessageType for protobuf message services.citizens.ReorderLabelsRequest
  */
-export const RemoveCitizenLabelsRequest = new RemoveCitizenLabelsRequest$Type();
+export const ReorderLabelsRequest = new ReorderLabelsRequest$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class RemoveCitizenLabelsResponse$Type extends MessageType<RemoveCitizenLabelsResponse> {
+class ReorderLabelsResponse$Type extends MessageType<ReorderLabelsResponse> {
     constructor() {
-        super("services.citizens.RemoveCitizenLabelsResponse", []);
+        super("services.citizens.ReorderLabelsResponse", []);
     }
-    create(value?: PartialMessage<RemoveCitizenLabelsResponse>): RemoveCitizenLabelsResponse {
+    create(value?: PartialMessage<ReorderLabelsResponse>): ReorderLabelsResponse {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<RemoveCitizenLabelsResponse>(this, message, value);
+            reflectionMergePartial<ReorderLabelsResponse>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RemoveCitizenLabelsResponse): RemoveCitizenLabelsResponse {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ReorderLabelsResponse): ReorderLabelsResponse {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -710,7 +563,7 @@ class RemoveCitizenLabelsResponse$Type extends MessageType<RemoveCitizenLabelsRe
         }
         return message;
     }
-    internalBinaryWrite(message: RemoveCitizenLabelsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: ReorderLabelsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -718,17 +571,16 @@ class RemoveCitizenLabelsResponse$Type extends MessageType<RemoveCitizenLabelsRe
     }
 }
 /**
- * @generated MessageType for protobuf message services.citizens.RemoveCitizenLabelsResponse
+ * @generated MessageType for protobuf message services.citizens.ReorderLabelsResponse
  */
-export const RemoveCitizenLabelsResponse = new RemoveCitizenLabelsResponse$Type();
+export const ReorderLabelsResponse = new ReorderLabelsResponse$Type();
 /**
  * @generated ServiceType for protobuf service services.citizens.LabelsService
  */
 export const LabelsService = new ServiceType("services.citizens.LabelsService", [
-    { name: "ListLabels", options: { "codegen.perms.perms": { enabled: true } }, I: ListLabelsRequest, O: ListLabelsResponse },
-    { name: "GetLabel", options: { "codegen.perms.perms": { enabled: true, name: "ListLabels" } }, I: GetLabelRequest, O: GetLabelResponse },
+    { name: "ListLabels", options: { "codegen.perms.perms": { enabled: true, service: "CitizensService", name: "GetUser" } }, I: ListLabelsRequest, O: ListLabelsResponse },
+    { name: "GetLabel", options: { "codegen.perms.perms": { enabled: true, service: "CitizensService", name: "GetUser" } }, I: GetLabelRequest, O: GetLabelResponse },
     { name: "CreateOrUpdateLabel", options: { "codegen.perms.perms": { enabled: true } }, I: CreateOrUpdateLabelRequest, O: CreateOrUpdateLabelResponse },
     { name: "DeleteLabel", options: { "codegen.perms.perms": { enabled: true } }, I: DeleteLabelRequest, O: DeleteLabelResponse },
-    { name: "AddCitizenLabels", options: { "codegen.perms.perms": { enabled: true, name: "SetUserProps" } }, I: AddCitizenLabelsRequest, O: AddCitizenLabelsResponse },
-    { name: "RemoveCitizenLabels", options: { "codegen.perms.perms": { enabled: true, name: "SetUserProps" } }, I: RemoveCitizenLabelsRequest, O: RemoveCitizenLabelsResponse }
+    { name: "ReorderLabels", options: { "codegen.perms.perms": { enabled: true, name: "CreateOrUpdateLabel" } }, I: ReorderLabelsRequest, O: ReorderLabelsResponse }
 ], { "codegen.perms.perms_svc": { order: 32, icon: "i-mdi-label-multiple" } });

package/services/documents/approval.ts

@@ -314,6 +314,10 @@ export interface RevokeApprovalResponse {
      * @generated from protobuf field: resources.documents.approval.Approval approval = 1
      */
     approval?: Approval;
+    /**
+     * @generated from protobuf field: resources.documents.DocumentMeta doc_meta = 2
+     */
+    docMeta?: DocumentMeta;
 }
 /**
  * @generated from protobuf message services.documents.DecideApprovalRequest
@@ -416,7 +420,7 @@ class ListApprovalTasksInboxRequest$Type extends MessageType<ListApprovalTasksIn
     constructor() {
         super("services.documents.ListApprovalTasksInboxRequest", [
             { no: 1, name: "pagination", kind: "message", T: () => PaginationRequest, options: { "buf.validate.field": { required: true } } },
-            { no: 2, name: "statuses", kind: "enum", repeat: 1 /*RepeatType.PACKED*/, T: () => ["resources.documents.approval.ApprovalTaskStatus", ApprovalTaskStatus, "APPROVAL_TASK_STATUS_"], options: { "buf.validate.field": { repeated: { maxItems: "4" } } } },
+            { no: 2, name: "statuses", kind: "enum", repeat: 1 /*RepeatType.PACKED*/, T: () => ["resources.documents.approval.ApprovalTaskStatus", ApprovalTaskStatus, "APPROVAL_TASK_STATUS_"], options: { "buf.validate.field": { repeated: { maxItems: "4", items: { enum: { definedOnly: true } } } } } },
             { no: 3, name: "only_drafts", kind: "scalar", opt: true, T: 8 /*ScalarType.BOOL*/ },
             { no: 4, name: "not_already_acted", kind: "scalar", opt: true, T: 8 /*ScalarType.BOOL*/ }
         ]);
@@ -745,7 +749,7 @@ class ListApprovalTasksRequest$Type extends MessageType<ListApprovalTasksRequest
     constructor() {
         super("services.documents.ListApprovalTasksRequest", [
             { no: 1, name: "document_id", kind: "scalar", T: 3 /*ScalarType.INT64*/, L: 2 /*LongType.NUMBER*/, options: { "buf.validate.field": { int64: { gt: "0" } } } },
-            { no: 2, name: "statuses", kind: "enum", repeat: 1 /*RepeatType.PACKED*/, T: () => ["resources.documents.approval.ApprovalTaskStatus", ApprovalTaskStatus, "APPROVAL_TASK_STATUS_"], options: { "buf.validate.field": { repeated: { maxItems: "4" } } } }
+            { no: 2, name: "statuses", kind: "enum", repeat: 1 /*RepeatType.PACKED*/, T: () => ["resources.documents.approval.ApprovalTaskStatus", ApprovalTaskStatus, "APPROVAL_TASK_STATUS_"], options: { "buf.validate.field": { repeated: { maxItems: "4", items: { enum: { definedOnly: true } } } } } }
         ]);
     }
     create(value?: PartialMessage<ListApprovalTasksRequest>): ListApprovalTasksRequest {
@@ -1190,7 +1194,7 @@ class ListApprovalsRequest$Type extends MessageType<ListApprovalsRequest> {
             { no: 1, name: "document_id", kind: "scalar", T: 3 /*ScalarType.INT64*/, L: 2 /*LongType.NUMBER*/, options: { "buf.validate.field": { int64: { gt: "0" } } } },
             { no: 2, name: "task_id", kind: "scalar", opt: true, T: 3 /*ScalarType.INT64*/, L: 2 /*LongType.NUMBER*/, options: { "buf.validate.field": { int64: { gt: "0" } } } },
             { no: 3, name: "snapshot_date", kind: "message", T: () => Timestamp },
-            { no: 4, name: "status", kind: "enum", opt: true, T: () => ["resources.documents.approval.ApprovalStatus", ApprovalStatus, "APPROVAL_STATUS_"] },
+            { no: 4, name: "status", kind: "enum", opt: true, T: () => ["resources.documents.approval.ApprovalStatus", ApprovalStatus, "APPROVAL_STATUS_"], options: { "buf.validate.field": { enum: { definedOnly: true } } } },
             { no: 5, name: "user_id", kind: "scalar", opt: true, T: 5 /*ScalarType.INT32*/ }
         ]);
     }
@@ -1364,7 +1368,8 @@ export const RevokeApprovalRequest = new RevokeApprovalRequest$Type();
 class RevokeApprovalResponse$Type extends MessageType<RevokeApprovalResponse> {
     constructor() {
         super("services.documents.RevokeApprovalResponse", [
-            { no: 1, name: "approval", kind: "message", T: () => Approval }
+            { no: 1, name: "approval", kind: "message", T: () => Approval },
+            { no: 2, name: "doc_meta", kind: "message", T: () => DocumentMeta }
         ]);
     }
     create(value?: PartialMessage<RevokeApprovalResponse>): RevokeApprovalResponse {
@@ -1381,6 +1386,9 @@ class RevokeApprovalResponse$Type extends MessageType<RevokeApprovalResponse> {
                 case /* resources.documents.approval.Approval approval */ 1:
                     message.approval = Approval.internalBinaryRead(reader, reader.uint32(), options, message.approval);
                     break;
+                case /* resources.documents.DocumentMeta doc_meta */ 2:
+                    message.docMeta = DocumentMeta.internalBinaryRead(reader, reader.uint32(), options, message.docMeta);
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -1396,6 +1404,9 @@ class RevokeApprovalResponse$Type extends MessageType<RevokeApprovalResponse> {
         /* resources.documents.approval.Approval approval = 1; */
         if (message.approval)
             Approval.internalBinaryWrite(message.approval, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        /* resources.documents.DocumentMeta doc_meta = 2; */
+        if (message.docMeta)
+            DocumentMeta.internalBinaryWrite(message.docMeta, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);

package/services/documents/collab.ts

@@ -9,5 +9,5 @@ import { ServiceType } from "@protobuf-ts/runtime-rpc";
  * @generated ServiceType for protobuf service services.documents.CollabService
  */
 export const CollabService = new ServiceType("services.documents.CollabService", [
-    { name: "JoinRoom", serverStreaming: true, clientStreaming: true, options: { "codegen.perms.perms": { enabled: true, namespace: "documents", service: "DocumentsService", name: "UpdateDocument" } }, I: ClientPacket, O: ServerPacket }
+    { name: "JoinRoom", serverStreaming: true, clientStreaming: true, options: { "codegen.perms.perms": { enabled: true, namespace: "documents", service: "DocumentsService", names: ["UpdateDocument", "ListDocuments"], internal: true } }, I: ClientPacket, O: ServerPacket }
 ]);

package/services/documents/documents.ts

@@ -28,7 +28,7 @@ import { TemplateData } from "../../resources/documents/templates/templates";
 import { ContentType } from "../../resources/common/content/content";
 import { DocumentRelation } from "../../resources/documents/relations/relations";
 import { DocumentReference } from "../../resources/documents/references/references";
-import { DocumentAccess } from "../../resources/documents/access/access";
+import { Access } from "../../resources/access/access";
 import { Document } from "../../resources/documents/documents";
 import { DocumentShort } from "../../resources/documents/documents";
 import { PaginationResponse } from "../../resources/common/database/database";
@@ -124,9 +124,9 @@ export interface GetDocumentResponse {
      */
     document?: Document;
     /**
-     * @generated from protobuf field: resources.documents.access.DocumentAccess access = 2
+     * @generated from protobuf field: resources.access.Access access = 2
      */
-    access?: DocumentAccess;
+    access?: Access;
 }
 /**
  * @generated from protobuf message services.documents.GetDocumentReferencesRequest
@@ -350,9 +350,9 @@ export interface UpdateDocumentRequest {
      */
     meta?: DocumentMeta;
     /**
-     * @generated from protobuf field: optional resources.documents.access.DocumentAccess access = 11
+     * @generated from protobuf field: optional resources.access.Access access = 11
      */
-    access?: DocumentAccess;
+    access?: Access;
     /**
      * @generated from protobuf field: repeated resources.file.File files = 12
      */
@@ -512,9 +512,9 @@ export interface GetDocumentAccessRequest {
  */
 export interface GetDocumentAccessResponse {
     /**
-     * @generated from protobuf field: resources.documents.access.DocumentAccess access = 1
+     * @generated from protobuf field: resources.access.Access access = 1
      */
-    access?: DocumentAccess;
+    access?: Access;
 }
 /**
  * @generated from protobuf message services.documents.SetDocumentAccessRequest
@@ -525,9 +525,9 @@ export interface SetDocumentAccessRequest {
      */
     documentId: number;
     /**
-     * @generated from protobuf field: resources.documents.access.DocumentAccess access = 2
+     * @generated from protobuf field: resources.access.Access access = 2
      */
-    access?: DocumentAccess;
+    access?: Access;
 }
 /**
  * @generated from protobuf message services.documents.SetDocumentAccessResponse
@@ -914,7 +914,7 @@ class GetDocumentResponse$Type extends MessageType<GetDocumentResponse> {
     constructor() {
         super("services.documents.GetDocumentResponse", [
             { no: 1, name: "document", kind: "message", T: () => Document },
-            { no: 2, name: "access", kind: "message", T: () => DocumentAccess }
+            { no: 2, name: "access", kind: "message", T: () => Access }
         ]);
     }
     create(value?: PartialMessage<GetDocumentResponse>): GetDocumentResponse {
@@ -931,8 +931,8 @@ class GetDocumentResponse$Type extends MessageType<GetDocumentResponse> {
                 case /* resources.documents.Document document */ 1:
                     message.document = Document.internalBinaryRead(reader, reader.uint32(), options, message.document);
                     break;
-                case /* resources.documents.access.DocumentAccess access */ 2:
-                    message.access = DocumentAccess.internalBinaryRead(reader, reader.uint32(), options, message.access);
+                case /* resources.access.Access access */ 2:
+                    message.access = Access.internalBinaryRead(reader, reader.uint32(), options, message.access);
                     break;
                 default:
                     let u = options.readUnknownField;
@@ -949,9 +949,9 @@ class GetDocumentResponse$Type extends MessageType<GetDocumentResponse> {
         /* resources.documents.Document document = 1; */
         if (message.document)
             Document.internalBinaryWrite(message.document, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        /* resources.documents.access.DocumentAccess access = 2; */
+        /* resources.access.Access access = 2; */
         if (message.access)
-            DocumentAccess.internalBinaryWrite(message.access, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+            Access.internalBinaryWrite(message.access, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -1948,8 +1948,8 @@ class UpdateDocumentRequest$Type extends MessageType<UpdateDocumentRequest> {
             { no: 5, name: "content_type", kind: "enum", T: () => ["resources.common.content.ContentType", ContentType, "CONTENT_TYPE_"], options: { "buf.validate.field": { enum: { definedOnly: true } } } },
             { no: 6, name: "data", kind: "message", T: () => DocumentData },
             { no: 7, name: "meta", kind: "message", T: () => DocumentMeta, options: { "buf.validate.field": { required: true } } },
-            { no: 11, name: "access", kind: "message", T: () => DocumentAccess },
-            { no: 12, name: "files", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => File, options: { "tagger.tags": "alias:\"files\"" } }
+            { no: 11, name: "access", kind: "message", T: () => Access },
+            { no: 12, name: "files", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => File, options: { "buf.validate.field": { repeated: { maxItems: "5" } }, "tagger.tags": "alias:\"files\"" } }
         ]);
     }
     create(value?: PartialMessage<UpdateDocumentRequest>): UpdateDocumentRequest {
@@ -1988,8 +1988,8 @@ class UpdateDocumentRequest$Type extends MessageType<UpdateDocumentRequest> {
                 case /* resources.documents.DocumentMeta meta */ 7:
                     message.meta = DocumentMeta.internalBinaryRead(reader, reader.uint32(), options, message.meta);
                     break;
-                case /* optional resources.documents.access.DocumentAccess access */ 11:
-                    message.access = DocumentAccess.internalBinaryRead(reader, reader.uint32(), options, message.access);
+                case /* optional resources.access.Access access */ 11:
+                    message.access = Access.internalBinaryRead(reader, reader.uint32(), options, message.access);
                     break;
                 case /* repeated resources.file.File files */ 12:
                     message.files.push(File.internalBinaryRead(reader, reader.uint32(), options));
@@ -2027,9 +2027,9 @@ class UpdateDocumentRequest$Type extends MessageType<UpdateDocumentRequest> {
         /* resources.documents.DocumentMeta meta = 7; */
         if (message.meta)
             DocumentMeta.internalBinaryWrite(message.meta, writer.tag(7, WireType.LengthDelimited).fork(), options).join();
-        /* optional resources.documents.access.DocumentAccess access = 11; */
+        /* optional resources.access.Access access = 11; */
         if (message.access)
-            DocumentAccess.internalBinaryWrite(message.access, writer.tag(11, WireType.LengthDelimited).fork(), options).join();
+            Access.internalBinaryWrite(message.access, writer.tag(11, WireType.LengthDelimited).fork(), options).join();
         /* repeated resources.file.File files = 12; */
         for (let i = 0; i < message.files.length; i++)
             File.internalBinaryWrite(message.files[i], writer.tag(12, WireType.LengthDelimited).fork(), options).join();
@@ -2049,7 +2049,7 @@ class ListDocumentActivityRequest$Type extends MessageType<ListDocumentActivityR
         super("services.documents.ListDocumentActivityRequest", [
             { no: 1, name: "pagination", kind: "message", T: () => PaginationRequest, options: { "buf.validate.field": { required: true } } },
             { no: 2, name: "document_id", kind: "scalar", T: 3 /*ScalarType.INT64*/, L: 2 /*LongType.NUMBER*/ },
-            { no: 3, name: "activity_types", kind: "enum", repeat: 1 /*RepeatType.PACKED*/, T: () => ["resources.documents.activity.DocActivityType", DocActivityType, "DOC_ACTIVITY_TYPE_"], options: { "buf.validate.field": { repeated: { maxItems: "10", items: { enum: { in: [13, 14, 15, 16, 17, 18] } } } } } }
+            { no: 3, name: "activity_types", kind: "enum", repeat: 1 /*RepeatType.PACKED*/, T: () => ["resources.documents.activity.DocActivityType", DocActivityType, "DOC_ACTIVITY_TYPE_"], options: { "buf.validate.field": { repeated: { maxItems: "10", items: { enum: { definedOnly: true, in: [13, 14, 15, 16, 17, 18] } } } } } }
         ]);
     }
     create(value?: PartialMessage<ListDocumentActivityRequest>): ListDocumentActivityRequest {
@@ -2280,7 +2280,7 @@ class CreateDocumentReqRequest$Type extends MessageType<CreateDocumentReqRequest
     constructor() {
         super("services.documents.CreateDocumentReqRequest", [
             { no: 1, name: "document_id", kind: "scalar", T: 3 /*ScalarType.INT64*/, L: 2 /*LongType.NUMBER*/ },
-            { no: 2, name: "request_type", kind: "enum", T: () => ["resources.documents.activity.DocActivityType", DocActivityType, "DOC_ACTIVITY_TYPE_"], options: { "buf.validate.field": { enum: { in: [13, 14, 15, 16, 17, 18] } } } },
+            { no: 2, name: "request_type", kind: "enum", T: () => ["resources.documents.activity.DocActivityType", DocActivityType, "DOC_ACTIVITY_TYPE_"], options: { "buf.validate.field": { enum: { definedOnly: true, in: [13, 14, 15, 16, 17, 18] } } } },
             { no: 3, name: "reason", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/, options: { "buf.validate.field": { string: { maxLen: "255" } }, "codegen.sanitizer.sanitizer": { enabled: true } } },
             { no: 4, name: "data", kind: "message", T: () => DocActivityData }
         ]);
@@ -2649,7 +2649,7 @@ export const GetDocumentAccessRequest = new GetDocumentAccessRequest$Type();
 class GetDocumentAccessResponse$Type extends MessageType<GetDocumentAccessResponse> {
     constructor() {
         super("services.documents.GetDocumentAccessResponse", [
-            { no: 1, name: "access", kind: "message", T: () => DocumentAccess, options: { "buf.validate.field": { required: true } } }
+            { no: 1, name: "access", kind: "message", T: () => Access, options: { "buf.validate.field": { required: true } } }
         ]);
     }
     create(value?: PartialMessage<GetDocumentAccessResponse>): GetDocumentAccessResponse {
@@ -2663,8 +2663,8 @@ class GetDocumentAccessResponse$Type extends MessageType<GetDocumentAccessRespon
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
-                case /* resources.documents.access.DocumentAccess access */ 1:
-                    message.access = DocumentAccess.internalBinaryRead(reader, reader.uint32(), options, message.access);
+                case /* resources.access.Access access */ 1:
+                    message.access = Access.internalBinaryRead(reader, reader.uint32(), options, message.access);
                     break;
                 default:
                     let u = options.readUnknownField;
@@ -2678,9 +2678,9 @@ class GetDocumentAccessResponse$Type extends MessageType<GetDocumentAccessRespon
         return message;
     }
     internalBinaryWrite(message: GetDocumentAccessResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* resources.documents.access.DocumentAccess access = 1; */
+        /* resources.access.Access access = 1; */
         if (message.access)
-            DocumentAccess.internalBinaryWrite(message.access, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+            Access.internalBinaryWrite(message.access, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -2696,7 +2696,7 @@ class SetDocumentAccessRequest$Type extends MessageType<SetDocumentAccessRequest
     constructor() {
         super("services.documents.SetDocumentAccessRequest", [
             { no: 1, name: "document_id", kind: "scalar", T: 3 /*ScalarType.INT64*/, L: 2 /*LongType.NUMBER*/ },
-            { no: 2, name: "access", kind: "message", T: () => DocumentAccess, options: { "buf.validate.field": { required: true } } }
+            { no: 2, name: "access", kind: "message", T: () => Access, options: { "buf.validate.field": { required: true } } }
         ]);
     }
     create(value?: PartialMessage<SetDocumentAccessRequest>): SetDocumentAccessRequest {
@@ -2714,8 +2714,8 @@ class SetDocumentAccessRequest$Type extends MessageType<SetDocumentAccessRequest
                 case /* int64 document_id */ 1:
                     message.documentId = reader.int64().toNumber();
                     break;
-                case /* resources.documents.access.DocumentAccess access */ 2:
-                    message.access = DocumentAccess.internalBinaryRead(reader, reader.uint32(), options, message.access);
+                case /* resources.access.Access access */ 2:
+                    message.access = Access.internalBinaryRead(reader, reader.uint32(), options, message.access);
                     break;
                 default:
                     let u = options.readUnknownField;
@@ -2732,9 +2732,9 @@ class SetDocumentAccessRequest$Type extends MessageType<SetDocumentAccessRequest
         /* int64 document_id = 1; */
         if (message.documentId !== 0)
             writer.tag(1, WireType.Varint).int64(message.documentId);
-        /* resources.documents.access.DocumentAccess access = 2; */
+        /* resources.access.Access access = 2; */
         if (message.access)
-            DocumentAccess.internalBinaryWrite(message.access, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+            Access.internalBinaryWrite(message.access, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -2790,7 +2790,7 @@ class ListUserDocumentsRequest$Type extends MessageType<ListUserDocumentsRequest
             { no: 1, name: "pagination", kind: "message", T: () => PaginationRequest, options: { "buf.validate.field": { required: true } } },
             { no: 2, name: "sort", kind: "message", T: () => Sort },
             { no: 3, name: "user_id", kind: "scalar", T: 5 /*ScalarType.INT32*/, options: { "buf.validate.field": { int32: { gt: 0 } } } },
-            { no: 4, name: "relations", kind: "enum", repeat: 1 /*RepeatType.PACKED*/, T: () => ["resources.documents.relations.DocRelation", DocRelation, "DOC_RELATION_"], options: { "buf.validate.field": { repeated: { maxItems: "3" } } } },
+            { no: 4, name: "relations", kind: "enum", repeat: 1 /*RepeatType.PACKED*/, T: () => ["resources.documents.relations.DocRelation", DocRelation, "DOC_RELATION_"], options: { "buf.validate.field": { repeated: { maxItems: "3", items: { enum: { definedOnly: true } } } } } },
             { no: 5, name: "closed", kind: "scalar", opt: true, T: 8 /*ScalarType.BOOL*/ },
             { no: 6, name: "include_created", kind: "scalar", opt: true, T: 8 /*ScalarType.BOOL*/ }
         ]);
@@ -3257,16 +3257,16 @@ export const DocumentsService = new ServiceType("services.documents.DocumentsSer
     { name: "ListDocuments", options: { "codegen.perms.perms": { enabled: true } }, I: ListDocumentsRequest, O: ListDocumentsResponse },
     { name: "GetDocument", options: { "codegen.perms.perms": { enabled: true, name: "ListDocuments" } }, I: GetDocumentRequest, O: GetDocumentResponse },
     { name: "CreateDocument", options: { "codegen.perms.perms": { enabled: true, name: "UpdateDocument" } }, I: CreateDocumentRequest, O: CreateDocumentResponse },
-    { name: "UpdateDocument", options: { "codegen.perms.perms": { enabled: true, attrs: [{ key: "Access", type: "ATTRIBUTE_TYPE_STRING_LIST", validStringList: ["Own", "Lower_Rank", "Same_Rank", "Any"] }] } }, I: UpdateDocumentRequest, O: UpdateDocumentResponse },
+    { name: "UpdateDocument", options: { "codegen.perms.perms": { enabled: true, names: ["UpdateDocument", "ListDocuments"], attrs: [{ key: "Access", type: "ATTRIBUTE_TYPE_STRING_LIST", validStringList: ["Own", "Lower_Rank", "Same_Rank", "Any"] }] } }, I: UpdateDocumentRequest, O: UpdateDocumentResponse },
     { name: "DeleteDocument", options: { "codegen.perms.perms": { enabled: true, attrs: [{ key: "Access", type: "ATTRIBUTE_TYPE_STRING_LIST", validStringList: ["Own", "Lower_Rank", "Same_Rank", "Any"] }] } }, I: DeleteDocumentRequest, O: DeleteDocumentResponse },
     { name: "ToggleDocument", options: { "codegen.perms.perms": { enabled: true, attrs: [{ key: "Access", type: "ATTRIBUTE_TYPE_STRING_LIST", validStringList: ["Own", "Lower_Rank", "Same_Rank", "Any"] }] } }, I: ToggleDocumentRequest, O: ToggleDocumentResponse },
     { name: "ChangeDocumentOwner", options: { "codegen.perms.perms": { enabled: true, attrs: [{ key: "Access", type: "ATTRIBUTE_TYPE_STRING_LIST", validStringList: ["Own", "Lower_Rank", "Same_Rank", "Any"] }] } }, I: ChangeDocumentOwnerRequest, O: ChangeDocumentOwnerResponse },
     { name: "GetDocumentReferences", options: { "codegen.perms.perms": { enabled: true, name: "ListDocuments" } }, I: GetDocumentReferencesRequest, O: GetDocumentReferencesResponse },
     { name: "GetDocumentRelations", options: { "codegen.perms.perms": { enabled: true, name: "ListDocuments" } }, I: GetDocumentRelationsRequest, O: GetDocumentRelationsResponse },
-    { name: "AddDocumentReference", options: { "codegen.perms.perms": { enabled: true } }, I: AddDocumentReferenceRequest, O: AddDocumentReferenceResponse },
-    { name: "RemoveDocumentReference", options: { "codegen.perms.perms": { enabled: true, name: "AddDocumentReference" } }, I: RemoveDocumentReferenceRequest, O: RemoveDocumentReferenceResponse },
-    { name: "AddDocumentRelation", options: { "codegen.perms.perms": { enabled: true } }, I: AddDocumentRelationRequest, O: AddDocumentRelationResponse },
-    { name: "RemoveDocumentRelation", options: { "codegen.perms.perms": { enabled: true, name: "AddDocumentRelation" } }, I: RemoveDocumentRelationRequest, O: RemoveDocumentRelationResponse },
+    { name: "AddDocumentReference", options: { "codegen.perms.perms": { enabled: true, names: ["AddDocumentReference", "ListDocuments"] } }, I: AddDocumentReferenceRequest, O: AddDocumentReferenceResponse },
+    { name: "RemoveDocumentReference", options: { "codegen.perms.perms": { enabled: true, name: "ListDocuments" } }, I: RemoveDocumentReferenceRequest, O: RemoveDocumentReferenceResponse },
+    { name: "AddDocumentRelation", options: { "codegen.perms.perms": { enabled: true, names: ["AddDocumentRelation", "ListDocuments"] } }, I: AddDocumentRelationRequest, O: AddDocumentRelationResponse },
+    { name: "RemoveDocumentRelation", options: { "codegen.perms.perms": { enabled: true, name: "ListDocuments" } }, I: RemoveDocumentRelationRequest, O: RemoveDocumentRelationResponse },
     { name: "GetDocumentAccess", options: { "codegen.perms.perms": { enabled: true, name: "ListDocuments" } }, I: GetDocumentAccessRequest, O: GetDocumentAccessResponse },
     { name: "SetDocumentAccess", options: { "codegen.perms.perms": { enabled: true, name: "UpdateDocument" } }, I: SetDocumentAccessRequest, O: SetDocumentAccessResponse },
     { name: "ListDocumentActivity", options: { "codegen.perms.perms": { enabled: true } }, I: ListDocumentActivityRequest, O: ListDocumentActivityResponse },