@milaboratories/pl-client 2.18.5 → 3.1.0

package/src/proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api.ts

@@ -11,6 +11,7 @@ import { UnknownFieldHandler } from "@protobuf-ts/runtime";
 import type { PartialMessage } from "@protobuf-ts/runtime";
 import { reflectionMergePartial } from "@protobuf-ts/runtime";
 import { MessageType } from "@protobuf-ts/runtime";
+import { Timestamp } from "../../../../../google/protobuf/timestamp";
 import { Duration } from "../../../../../google/protobuf/duration";
 import { ResourceAPIFeature } from "./api_types";
 import { Controller } from "./api_types";
@@ -26,22 +27,22 @@ import { ResourceType } from "./base_types";
 import { Tx } from "./api_types";
 import { Status } from "../../../../googleapis/googleapis/google/rpc/status";
 /**
- * Platform transactions on API level are implemented as bidirectional
+ * Platform transactions at the API level are implemented as bidirectional
  * streams that exist in parallel with transactions.
  * One stream = one transaction at all times.
  *
- * Long story short from client side:
+ * Long story short from the client side:
  *   - client initializes stream and immediately gets transaction info
  *     message from server;
  *   - client calls server methods by sending messages to the server,
  *     each message has its own request ID starting from 1, request ID number
  *     grows as new messages are sent to the server;
- *   - client reads server responses for each messages sent. Client can batch
+ *   - client reads server responses for each message sent. Client can batch
  *     writes and reads: e.g. send 3 messages, read 2 responses, send one
  *     more, read 2;
- *   - to finish communication client sends 'commit' or 'discard' message and reads last
+ *   - to finish communication, the client sends a 'commit' or 'discard' message and reads last
  *     response;
- *   - to make server interrupt communication, client sends 'stream_close' message and reads to the last
+ *   - to make the server interrupt communication, the client sends a 'stream_close' message and reads up to the last
  *     server response. This allows graceful stream close, waiting for all queued server responses
  *     to be sent before closing the stream.
  *
@@ -51,24 +52,24 @@ import { Status } from "../../../../googleapis/googleapis/google/rpc/status";
  *
  * 1. Initialization:
  *
- *   - client opens new bidirectional stream by calling 'Tx' gRPC method;
- *   - client sends 'tx_open' message with request_id = 0 to open RO or RW
+ *   - the client opens a new bidirectional stream by calling 'Tx' gRPC method;
+ *   - the client sends a 'tx_open' message with request_id = 0 to open RO or RW
  *     transaction.
- *     Any message from client other than 'tx_open' during initialization is
- *     treated as communication error and causes server to close the stream;
- *   - server opens new transaction and sends transaction info to the client
- *     'tx_open' server message;
+ *     Any message from the client other than 'tx_open' during initialization is
+ *     treated as a communication error and causes the server to close the stream;
+ *   - the server opens a new transaction and sends transaction info to the client
+ *     in a 'tx_open' server message;
  *
  * 2. Communication:
  *
  *     Once the transaction gets initialized, all the communication between
- * client and server should be considered as request-response sequence.
- * The only difference to simple gRPC call is that sending a request does not
- * block client until the response arrives from server.
+ * client and server should be considered a request-response sequence.
+ * The only difference from a simple gRPC call is that sending a request does not
+ * block the client until the response arrives from the server.
  *
- *     Client can send as many requests to the server as it wants before
- * reading responses. This allows client to batch method calls, when it is not
- * interested in result of each action, but needs only overall summary of
+ *     The client can send as many requests to the server as it wants before
+ * reading responses. This allows the client to batch method calls, when it is not
+ * interested in the result of each action, but needs only the overall summary of
  * transaction commit.
  * For example, the following sequence is totally valid from client side:
  *   1. send reqA.
@@ -78,69 +79,69 @@ import { Status } from "../../../../googleapis/googleapis/google/rpc/status";
  *   5. get respB.
  *   6. get respC.
  *
- * Here are detailed rules of client-server communication inside transaction
+ * Here are the detailed rules of client-server communication inside transaction
  * stream:
- *   - if stream is closed by client or interrupted by any unrecoverable
- *     communication error, the accompanied transaction is discarded;
- *   - each message in client stream (from client to server) is considered as
- *     method call.
- *     E.g. 'resource_remove' makes server to actually remove resource inside
- *     transaction, bound to current stream;
- *   - each message in client stream MUST have its own ID (request_id),
- *     generated by client, UNIQUE for transaction. Numeration starts from
- *     1 for each at this step. request_id == 0 is treated as unrecoverable
- *     communication error by server and cancels transaction;
- *   - server expects 'request_id' from client to grow constantly by one as
+ *   - if the stream is closed by the client or interrupted by any unrecoverable
+ *     communication error, the accompanying transaction is discarded;
+ *   - each message in the client stream (from client to server) is considered
+ *     a method call.
+ *     E.g. 'resource_remove' makes the server actually remove the resource inside
+ *     the transaction bound to the current stream;
+ *   - each message in the client stream MUST have its own ID (request_id),
+ *     generated by the client, UNIQUE for the transaction. Numbering starts from
+ *     1 for each new transaction. request_id == 0 is treated as an unrecoverable
+ *     communication error by the server and cancels the transaction;
+ *   - server expects 'request_id' from the client to grow consecutively by one as
  *     messages come. If message M2 arrives next to M1 and
  *       M2.request_id != (M1.request_id + 1)
- *     server treats it as unrecoverable communication error and cancels
- *     transaction;
- *   - all messages in server stream (from server to client) in communication
- *     stage have the same 'request_id' as the client messages, that triggered
- *     the operation. This allows client to match server responses to the
+ *     server treats it as an unrecoverable communication error and cancels
+ *     the transaction;
+ *   - all messages in the server stream (from server to client) in the communication
+ *     stage have the same 'request_id' as the client messages that triggered
+ *     the operation. This allows the client to match server responses to the
  *     requests it sent earlier;
- *   - messages order in server stream matches order in client stream: if
- *     client sent sequence [ReqA, ReqB], the server will always response
+ *   - message order in the server stream matches the order in the client stream: if
+ *     the client sent sequence [ReqA, ReqB], the server will always respond with
  *     [RespA, RespB];
- *   - server can send several responses to single client request (multi-message
+ *   - the server can send several responses to a single client request (multi-message
  *     response). In that case, all such responses will have the same 'request_id'
- *     (the one from client request), but different message IDs. See
+ *     (the one from the client request), but different message IDs. See
  *     'Multi-message responses' section below for more info.
- *   - client is allowed (but not obligated) to generate local IDs for new
+ *   - the client is allowed (but not obligated) to generate local IDs for new
  *     instances and use them in links and other references. These local IDs
- *     are valid only within current transaction;
- *   - any instance in server stream always has _real_ global ID that is valid
- *     at any times in any other request outside current transaction;
+ *     are valid only within the current transaction;
+ *   - any instance in the server stream always has a _real_ global ID that is valid
+ *     at any time in any other request outside the current transaction;
  *
  * 3. Finalization:
  *
- *    - client finalizes transaction by sending 'tx_commit' or 'tx_discard'
- *      message to the server. After that client can close client stream as any
+ *    - the client finalizes the transaction by sending a 'tx_commit' or 'tx_discard'
+ *      message to the server. After that, the client can close the client stream as any
  *      message sent to the server after commit/discard will be ignored anyway;
- *    - server stops reading client stream and does the commit/discard action.
- *    - once transaction is closed, server sends the result to client and
- *      closes server stream.
- *    - client stream reading may be interrupted by special 'stream_close' message, which
- *      causes transaction automatic discard and does not produce additional reply message.
+ *    - the server stops reading the client stream and does the commit/discard action.
+ *    - once the transaction is closed, the server sends the result to the client and
+ *      closes the server stream.
+ *    - the client stream reading may be interrupted by a special 'stream_close' message, which
+ *      causes automatic transaction discard and does not produce an additional reply message.
  *      This 'stream_close' message also does not require any 'request_id' value and does not
- *      produce any response from server side.
+ *      produce any response from the server side.
  *
- * At this point the transaction over gRPC is considered as finalized, all
+ * At this point the transaction over gRPC is considered finalized, all
  * local IDs generated within the transaction are no longer valid.
  *
  * Multi-message responses
  *
  * Some transaction methods produce several messages by design, causing
- * single call to result in multiple responses. Listings are the clear
+ * a single call to result in multiple responses. Listings are a clear
  * example of that.
- * All responses from server have special field (multi_message) with all meta
- * info on multi-message response:
+ * All responses from the server have a special field (multi_message) with all meta
+ * info on multi-message responses:
  *  - for single-message responses, multi_message is always empty;
  *  - for multi-message responses, multi_message.id is always > 0;
- *  - all messages in multi-message response have request_id equal to request_id from
- *    original client's request message;
- *  - last message in multi-message response always has multi_message.is_last = true;
- *  - empty multi-message response always has:
+ *  - all messages in a multi-message response have request_id equal to request_id from
+ *    the original client's request message;
+ *  - the last message in a multi-message response always has multi_message.is_last = true;
+ *  - an empty multi-message response always has:
  *      multi_message.is_last = true;
  *      multi_message.is_empty = true.
  *
@@ -181,15 +182,15 @@ export interface TxAPI_ClientMessage {
     } | {
         oneofKind: "streamClose";
         /**
-         * Interrupt the transaction network stream on server side.
+         * Interrupt the transaction network stream on the server side.
          *
-         * This allows to gracefully close network connection and discard the associated transaction,
+         * This allows one to gracefully close the network connection and discard the associated transaction,
          * ensuring all pending server responses are sent to the client before closing.
-         * We use this in RO transactions to imitate the feature of 'half-open' connection
+         * We use this in RO transactions to imitate the feature of a 'half-open' connection
          * available in pure gRPC, when we work with WebSockets.
-         * Pure gRPC uses 'end of client messages stream' as a criteria for graceful discard.
-         * Pure WebSocket does not allow this, breaking entire connection at once. stream_close helps to get
-         * behaviour as we have for gRPC.
+         * Pure gRPC uses 'end of the client message stream' as a criterion for graceful discard.
+         * Pure WebSocket does not allow this, breaking the entire connection at once. stream_close helps
+         * achieve the same behavior as in gRPC.
          *
          * @generated from protobuf field: MiLaboratories.PL.API.TxAPI.CloseStream.Request stream_close = 14
          */
@@ -277,7 +278,7 @@ export interface TxAPI_ClientMessage {
         /**
          * @generated from protobuf field: MiLaboratories.PL.API.ResourceAPI.SetError.Request resource_set_error = 61
          */
-        resourceSetError: ResourceAPI_SetError_Request; // create a special field and set error there.
+        resourceSetError: ResourceAPI_SetError_Request; // create a special field and set an error there.
     } | {
         oneofKind: "resourceListByType";
         /**
@@ -331,7 +332,7 @@ export interface TxAPI_ClientMessage {
         /**
          * @generated from protobuf field: MiLaboratories.PL.API.FieldAPI.Exists.Request field_exists = 107
          */
-        fieldExists: FieldAPI_Exists_Request; // add field to resource
+        fieldExists: FieldAPI_Exists_Request; // check if field exists
     } | {
         oneofKind: "fieldSet";
         /**
@@ -385,7 +386,7 @@ export interface TxAPI_ClientMessage {
         /**
          * @generated from protobuf field: MiLaboratories.PL.API.SubscriptionAPI.DetachFilter.Request subscription_detach_filter = 113
          */
-        subscriptionDetachFilter: SubscriptionAPI_DetachFilter_Request; // add filter to existing subscription
+        subscriptionDetachFilter: SubscriptionAPI_DetachFilter_Request; // detach filter from existing subscription
     } | {
         oneofKind: "subscriptionCreateFilter";
         /**
@@ -403,13 +404,13 @@ export interface TxAPI_ClientMessage {
         /**
          * @generated from protobuf field: MiLaboratories.PL.API.NotificationAPI.Ack.Request notification_ack = 155
          */
-        notificationAck: NotificationAPI_Ack_Request; // acknowledge notification handle by controller
+        notificationAck: NotificationAPI_Ack_Request; // acknowledge notification handled by controller
     } | {
         oneofKind: "notificationDiscard";
         /**
          * @generated from protobuf field: MiLaboratories.PL.API.NotificationAPI.Discard.Request notification_discard = 156
          */
-        notificationDiscard: NotificationAPI_Discard_Request; // discard notification handle by controller
+        notificationDiscard: NotificationAPI_Discard_Request; // discard notification handled by controller
     } | {
         oneofKind: "resourceKeyValueSet";
         /**
@@ -503,9 +504,10 @@ export interface TxAPI_ClientMessage {
     } | {
         oneofKind: "cacheDeleteExpiredRecords";
         /**
-         * @generated from protobuf field: MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Request cache_delete_expired_records = 301
+         * @deprecated
+         * @generated from protobuf field: MiLaboratories.PL.API.Util.Deprecated cache_delete_expired_records = 301 [deprecated = true]
          */
-        cacheDeleteExpiredRecords: CacheAPI_DeleteExpiredRecords_Request; // iterate through all records and delete expired.
+        cacheDeleteExpiredRecords: Util_Deprecated;
     } | {
         oneofKind: "controllerFeaturesSet";
         /**
@@ -518,6 +520,12 @@ export interface TxAPI_ClientMessage {
          * @generated from protobuf field: MiLaboratories.PL.API.ControllerAPI.ClearFeatures.Request controller_features_clear = 351
          */
         controllerFeaturesClear: ControllerAPI_ClearFeatures_Request; // clear list of resource features, provided by controller.
+    } | {
+        oneofKind: "setDefaultColor";
+        /**
+         * @generated from protobuf field: MiLaboratories.PL.API.TxAPI.SetDefaultColor.Request set_default_color = 400
+         */
+        setDefaultColor: TxAPI_SetDefaultColor_Request; // set default color for resource creation
     } | {
         oneofKind: undefined;
     };
@@ -873,9 +881,10 @@ export interface TxAPI_ServerMessage {
     } | {
         oneofKind: "cacheDeleteExpiredRecords";
         /**
-         * @generated from protobuf field: MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Response cache_delete_expired_records = 301
+         * @deprecated
+         * @generated from protobuf field: MiLaboratories.PL.API.Util.Deprecated cache_delete_expired_records = 301 [deprecated = true]
          */
-        cacheDeleteExpiredRecords: CacheAPI_DeleteExpiredRecords_Response;
+        cacheDeleteExpiredRecords: Util_Deprecated;
     } | {
         oneofKind: "controllerFeaturesSet";
         /**
@@ -888,6 +897,12 @@ export interface TxAPI_ServerMessage {
          * @generated from protobuf field: MiLaboratories.PL.API.ControllerAPI.ClearFeatures.Response controller_features_clear = 351
          */
         controllerFeaturesClear: ControllerAPI_ClearFeatures_Response;
+    } | {
+        oneofKind: "setDefaultColor";
+        /**
+         * @generated from protobuf field: MiLaboratories.PL.API.TxAPI.SetDefaultColor.Response set_default_color = 400
+         */
+        setDefaultColor: TxAPI_SetDefaultColor_Response;
     } | {
         oneofKind: undefined;
     };
@@ -904,7 +919,7 @@ export interface TxAPI_ServerMessage_Multi {
      * Sequential message ID for multi-message response, starting from 1.
      * Caller can use 'id > 0' check as a sign of multi-message response.
      * Some API requests produce several messages in response by design (say, listings)
-     * In that case, the server responses to the client with many messages, each having
+     * In that case, the server responds to the client with many messages, each having
      * the same <request_id> value and different <message_id> values.
      *
      * @generated from protobuf field: uint32 id = 1
@@ -919,7 +934,7 @@ export interface TxAPI_ServerMessage_Multi {
     isLast: boolean;
     /**
      * Sign of empty multi-message response. Some multi-message responses can produce nothing
-     * (like listing of empty directory). In that case client still has to know that the request was
+     * (like a listing of an empty directory). In that case, the client still has to know that the request was
      * handled and the empty result is OK.
      *
      * @generated from protobuf field: bool is_empty = 3
@@ -1042,6 +1057,25 @@ export interface TxAPI_Sync_Request {
  */
 export interface TxAPI_Sync_Response {
 }
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.TxAPI.SetDefaultColor
+ */
+export interface TxAPI_SetDefaultColor {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.TxAPI.SetDefaultColor.Request
+ */
+export interface TxAPI_SetDefaultColor_Request {
+    /**
+     * @generated from protobuf field: optional bytes color_proof = 1
+     */
+    colorProof?: Uint8Array;
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.TxAPI.SetDefaultColor.Response
+ */
+export interface TxAPI_SetDefaultColor_Response {
+}
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI
  */
@@ -1068,6 +1102,10 @@ export interface ResourceAPI_CreateStruct_Request {
      * @generated from protobuf field: optional bytes data = 4
      */
     data?: Uint8Array;
+    /**
+     * @generated from protobuf field: optional bytes color_proof = 5
+     */
+    colorProof?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateStruct.Response
@@ -1077,6 +1115,10 @@ export interface ResourceAPI_CreateStruct_Response {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateEphemeral
@@ -1099,6 +1141,10 @@ export interface ResourceAPI_CreateEphemeral_Request {
      * @generated from protobuf field: optional bytes data = 4
      */
     data?: Uint8Array;
+    /**
+     * @generated from protobuf field: optional bytes color_proof = 5
+     */
+    colorProof?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateEphemeral.Response
@@ -1108,6 +1154,10 @@ export interface ResourceAPI_CreateEphemeral_Response {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateChild
@@ -1165,6 +1215,10 @@ export interface ResourceAPI_CreateValue_Request {
      * @generated from protobuf field: bool error_if_exists = 7
      */
     errorIfExists: boolean;
+    /**
+     * @generated from protobuf field: optional bytes color_proof = 8
+     */
+    colorProof?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateValue.Response
@@ -1174,6 +1228,10 @@ export interface ResourceAPI_CreateValue_Response {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.GetValueID
@@ -1201,6 +1259,10 @@ export interface ResourceAPI_GetValueID_Response {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateSingleton
@@ -1227,6 +1289,10 @@ export interface ResourceAPI_CreateSingleton_Request {
      * @generated from protobuf field: bool error_if_exists = 7
      */
     errorIfExists: boolean;
+    /**
+     * @generated from protobuf field: optional bytes color_proof = 8
+     */
+    colorProof?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateSingleton.Response
@@ -1236,6 +1302,10 @@ export interface ResourceAPI_CreateSingleton_Response {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.GetSingleton
@@ -1281,6 +1351,10 @@ export interface ResourceAPI_LockInputs_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.LockInputs.Response
@@ -1300,6 +1374,10 @@ export interface ResourceAPI_LockOutputs_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.LockOutputs.Response
@@ -1319,6 +1397,10 @@ export interface ResourceAPI_Exists_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.Exists.Response
@@ -1342,10 +1424,18 @@ export interface ResourceAPI_SetError_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 3
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: uint64 error_resource_id = 2
      */
     errorResourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes error_resource_signature = 4
+     */
+    errorResourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.SetError.Response
@@ -1365,6 +1455,10 @@ export interface ResourceAPI_Get_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 3
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: bool load_fields = 2
      */
@@ -1398,9 +1492,9 @@ export interface ResourceAPI_List_ByType_Request {
      */
     resourceType?: ResourceType;
     /**
-     * Non-zero value makes API to limit its responses count to at most
+     * Non-zero value makes the API limit its response count to at most
      * <limit> number of items.
-     * Zero value makes API to return all available items.
+     * Zero value makes the API return all available items.
      *
      * @generated from protobuf field: uint32 limit = 3
      */
@@ -1413,7 +1507,7 @@ export interface ResourceAPI_List_ByType_Request {
      */
     after: bigint;
     /**
-     * True value makes API to return original resources instead of duplicates.
+     * True value makes the API return original resources instead of duplicates.
      *
      * @generated from protobuf field: bool resolve_duplicates = 4
      */
@@ -1462,11 +1556,15 @@ export interface ResourceAPI_CreateRoot_Response {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 // FIXME: add CreateResource method to API
 
 /**
- * Remove any resource, that has garbage collection disabled
+ * Remove any resource that has garbage collection disabled
  *
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.Remove
  */
@@ -1477,9 +1575,13 @@ export interface ResourceAPI_Remove {
  */
 export interface ResourceAPI_Remove_Request {
     /**
-     * @generated from protobuf field: uint64 id = 1
+     * @generated from protobuf field: uint64 resource_id = 1
      */
-    id: bigint;
+    resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.Remove.Response
@@ -1504,6 +1606,10 @@ export interface ResourceAPI_Name_Set_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 3
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: string name = 2
      */
@@ -1536,6 +1642,10 @@ export interface ResourceAPI_Name_Get_Response {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.Name.Exists
@@ -1593,11 +1703,15 @@ export interface ResourceAPI_Tree_Request {
      */
     resourceId: bigint;
     /**
-     * Limit maximum depth the tree is traversed.
-     * The resource <resource_id> is considered on depth = 0, the values of its fiels
+     * @generated from protobuf field: optional bytes resource_signature = 3
+     */
+    resourceSignature?: Uint8Array;
+    /**
+     * Limit the maximum depth the tree is traversed.
+     * The resource <resource_id> is considered at depth = 0, the values of its fields
      * are on depth = 1 and so on.
-     * The maximum uint32 value disables the limit at all.
-     * 0 value makes API to return only single resource <resource_id> and is actually
+     * The maximum uint32 value disables the limit entirely.
+     * A 0 value makes the API return only a single resource <resource_id> and is actually
      * equal to Get.Request
      *
      * @generated from protobuf field: optional uint32 max_depth = 2
@@ -1628,6 +1742,10 @@ export interface ResourceAPI_TreeSize_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.TreeSize.Response
@@ -1635,7 +1753,7 @@ export interface ResourceAPI_TreeSize_Request {
 export interface ResourceAPI_TreeSize_Response {
     /**
      * size of all tree resources in bytes
-     * could change between call regarding compression algorithm
+     * could change between calls depending on compression algorithm
      *
      * @generated from protobuf field: uint64 size = 1
      */
@@ -1739,9 +1857,13 @@ export interface FieldAPI_SetError_Request {
      */
     field?: FieldRef;
     /**
-     * @generated from protobuf field: uint64 err_resource_id = 2
+     * @generated from protobuf field: uint64 error_resource_id = 2
+     */
+    errorResourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes error_resource_signature = 3
      */
-    errResourceId: bigint;
+    errorResourceSignature?: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.FieldAPI.SetError.Response
@@ -1822,6 +1944,10 @@ export interface FieldAPI_List_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 4
+     */
+    resourceSignature?: Uint8Array;
     /**
      * Start the listing from given position, returning first field with
      * name >= start_from.
@@ -1830,9 +1956,9 @@ export interface FieldAPI_List_Request {
      */
     startFrom: string;
     /**
-     * Non-zero value makes API to limit number of returned fields to at
+     * Non-zero value makes the API limit the number of returned fields to at
      * most <limit>.
-     * Zero value makes API to return all available fields of the resource.
+     * Zero value makes the API return all available fields of the resource.
      *
      * @generated from protobuf field: uint32 limit = 3
      */
@@ -1852,7 +1978,7 @@ export interface FieldAPI_List_Response {
      * The name of field next to the current one.
      *
      * Is not empty only for the last message in the current listing, when <limit> was > 0 in List.Request AND
-     * there is more items to read (the listing was stopped because of that limit)
+     * there are more items to read (the listing was stopped because of that limit)
      *
      * Use <next> value as <start_from> in the List.Request to continue listing.
      *
@@ -2433,6 +2559,10 @@ export interface ResourceKVAPI_List_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 4
+     */
+    resourceSignature?: Uint8Array;
     /**
      * Start the listing from given position, returning first item with
      * key >= start_from.
@@ -2441,9 +2571,9 @@ export interface ResourceKVAPI_List_Request {
      */
     startFrom: string;
     /**
-     * Non-zero value makes API to limit its responses count to at most
+     * Non-zero value makes the API limit its response count to at most
      * <limit> number of items.
-     * Zero value makes API to return all available items.
+     * Zero value makes the API return all available items.
      *
      * @generated from protobuf field: uint32 limit = 3
      */
@@ -2463,7 +2593,7 @@ export interface ResourceKVAPI_List_Response {
      * The key of the KV item next to the last returned item.
      *
      * Is not empty only for the last message in the current listing, when <limit> was > 0 in List.Request AND
-     * there is more items to read (the listing was stopped because of that limit)
+     * there are more items to read (the listing was stopped because of that limit)
      *
      * Use <next> value as <start_from> of the List.Request to continue listing.
      *
@@ -2497,6 +2627,10 @@ export interface ResourceKVAPI_Set_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 4
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2524,6 +2658,10 @@ export interface ResourceKVAPI_Get_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 3
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2551,6 +2689,10 @@ export interface ResourceKVAPI_GetIfExists_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 3
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2582,6 +2724,10 @@ export interface ResourceKVAPI_Delete_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 3
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2605,6 +2751,10 @@ export interface ResourceKVAPI_SetFlag_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 4
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2632,6 +2782,10 @@ export interface ResourceKVAPI_GetFlag_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 3
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2850,24 +3004,85 @@ export interface CacheAPI_SetToField_Request {
 export interface CacheAPI_SetToField_Response {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords
+ * @generated from protobuf message MiLaboratories.PL.API.LocksAPI
  */
-export interface CacheAPI_DeleteExpiredRecords {
+export interface LocksAPI {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Request
+ * @generated from protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues
  */
-export interface CacheAPI_DeleteExpiredRecords_Request {
+export interface LocksAPI_LockFieldValues {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Response
+ * @generated from protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create
  */
-export interface CacheAPI_DeleteExpiredRecords_Response {
+export interface LocksAPI_LockFieldValues_Create {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.LocksAPI
+ * @generated from protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Request
  */
-export interface LocksAPI {
+export interface LocksAPI_LockFieldValues_Create_Request {
+    /**
+     * @generated from protobuf field: uint64 resource_id = 1
+     */
+    resourceId: bigint; // resource ID that will own the lock
+    /**
+     * @generated from protobuf field: repeated string lock_references_of = 2
+     */
+    lockReferencesOf: string[]; // list of fields whose values should be locked
+    /**
+     * @generated from protobuf field: string comment = 3
+     */
+    comment: string; // comment to show for other lockers on lock conflict. Truncated to 1024 bytes.
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Response
+ */
+export interface LocksAPI_LockFieldValues_Create_Response {
+    /**
+     * true when lock was acquired (new, or already owned by the owner)
+     * Client MUST pay attention to this flag, as it shows if lock was successful.
+     *
+     * @generated from protobuf field: bool acquired = 1
+     */
+    acquired: boolean;
+    /**
+     * Info about why lock was not acquired.
+     * Limited number of conflicts is reported: i.e. if lock operation failed for 20 fields, only first 10 are listed here.
+     * The number '10' is not a fixed contract for external clients. It is just 'somehow truncated'.
+     *
+     * @generated from protobuf field: repeated MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Response.LockInfo conflicting_locks = 2
+     */
+    conflictingLocks: LocksAPI_LockFieldValues_Create_Response_LockInfo[];
+    /**
+     * @generated from protobuf field: bool conflicts_list_truncated = 3
+     */
+    conflictsListTruncated: boolean; // true if there were more conflicts than reported
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Response.LockInfo
+ */
+export interface LocksAPI_LockFieldValues_Create_Response_LockInfo {
+    /**
+     * @generated from protobuf field: uint64 target_id = 1
+     */
+    targetId: bigint; // ID of resource that failed to be locked
+    /**
+     * @generated from protobuf field: string field_name = 2
+     */
+    fieldName: string; // what field was referencing this <target_id>
+    /**
+     * @generated from protobuf field: uint64 locked_by = 3
+     */
+    lockedBy: bigint; // Who is owning the lock for <target_id>
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp locked_at = 4
+     */
+    lockedAt?: Timestamp; // when the lock was obtained
+    /**
+     * @generated from protobuf field: string comment = 5
+     */
+    comment: string; // comment from the locker holding the lock
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.LocksAPI.Lease
@@ -2887,6 +3102,10 @@ export interface LocksAPI_Lease_Create_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 5
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: google.protobuf.Duration timeout = 3
      */
@@ -2918,6 +3137,10 @@ export interface LocksAPI_Lease_Update_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 5
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: bytes lease_id = 2
      */
@@ -2949,6 +3172,10 @@ export interface LocksAPI_Lease_Release_Request {
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 3
+     */
+    resourceSignature?: Uint8Array;
     /**
      * @generated from protobuf field: bytes lease_id = 2
      */
@@ -3015,6 +3242,10 @@ export interface AuthAPI_GetJWTToken_Request {
      * @generated from protobuf field: google.protobuf.Duration expiration = 1
      */
     expiration?: Duration;
+    /**
+     * @generated from protobuf field: optional MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role requested_role = 2
+     */
+    requestedRole?: AuthAPI_GetJWTToken_Role;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GetJWTToken.Response
@@ -3024,135 +3255,388 @@ export interface AuthAPI_GetJWTToken_Response {
      * @generated from protobuf field: string token = 1
      */
     token: string;
+    /**
+     * @generated from protobuf field: bytes session_id = 2
+     */
+    sessionId: Uint8Array;
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MiscAPI
+ * @generated from protobuf enum MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role
  */
-export interface MiscAPI {
+export enum AuthAPI_GetJWTToken_Role {
+    /**
+     * issue JWT with caller's natural role
+     *
+     * @generated from protobuf enum value: ROLE_UNSPECIFIED = 0;
+     */
+    ROLE_UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: USER = 1;
+     */
+    USER = 1,
+    /**
+     * @generated from protobuf enum value: CONTROLLER = 2;
+     */
+    CONTROLLER = 2,
+    /**
+     * @generated from protobuf enum value: WORKFLOW = 3;
+     */
+    WORKFLOW = 3
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GrantAccess
  */
-export interface MiscAPI_ListResourceTypes {
+export interface AuthAPI_GrantAccess {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Request
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GrantAccess.Request
  */
-export interface MiscAPI_ListResourceTypes_Request {
+export interface AuthAPI_GrantAccess_Request {
+    /**
+     * @generated from protobuf field: uint64 resource_id = 1
+     */
+    resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
+    /**
+     * @generated from protobuf field: string target_user = 3
+     */
+    targetUser: string; // user login to grant access to
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 4
+     */
+    permissions?: AuthAPI_Grant_Permissions; // access level to grant
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Response
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GrantAccess.Response
  */
-export interface MiscAPI_ListResourceTypes_Response {
-    /**
-     * @generated from protobuf field: repeated MiLaboratories.PL.Base.ResourceType types = 1
-     */
-    types: ResourceType[];
+export interface AuthAPI_GrantAccess_Response {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant
  */
-export interface MaintenanceAPI {
+export interface AuthAPI_RevokeGrant {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant.Request
  */
-export interface MaintenanceAPI_Ping {
+export interface AuthAPI_RevokeGrant_Request {
+    /**
+     * @generated from protobuf field: uint64 resource_id = 1
+     */
+    resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
+    /**
+     * @generated from protobuf field: string target_user = 3
+     */
+    targetUser: string; // user login whose grant to revoke
 }
 /**
- * Early connection check
- *
- * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping.Request
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant.Response
  */
-export interface MaintenanceAPI_Ping_Request {
+export interface AuthAPI_RevokeGrant_Response {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping.Response
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListGrants
  */
-export interface MaintenanceAPI_Ping_Response {
+export interface AuthAPI_ListGrants {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListGrants.Request
+ */
+export interface AuthAPI_ListGrants_Request {
     /**
-     * @generated from protobuf field: string core_version = 1
+     * @generated from protobuf field: uint64 resource_id = 1
      */
-    coreVersion: string;
+    resourceId: bigint;
     /**
-     * @generated from protobuf field: string core_full_version = 2
+     * @generated from protobuf field: optional bytes resource_signature = 2
      */
-    coreFullVersion: string;
+    resourceSignature?: Uint8Array;
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListGrants.Response
+ */
+export interface AuthAPI_ListGrants_Response {
     /**
-     * @generated from protobuf field: string server_info = 3
+     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.Grant grant = 1
      */
-    serverInfo: string;
+    grant?: AuthAPI_Grant; // one per stream message
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.Grant
+ */
+export interface AuthAPI_Grant {
     /**
-     * @generated from protobuf field: MiLaboratories.PL.API.MaintenanceAPI.Ping.Response.Compression compression = 4
+     * @generated from protobuf field: string user = 1
      */
-    compression: MaintenanceAPI_Ping_Response_Compression;
+    user: string;
     /**
-     * instanceID is a unique ID that changes when we reset DB state.
-     * If we reset a state and a database, but the address of the backend is still the same,
-     * without instanceID we are not sure if it's the same state or not,
-     * and UI can't detect it and clear its state (e.g. caches of drivers).
-     *
-     * @generated from protobuf field: string instance_id = 5
+     * @generated from protobuf field: uint64 resource_id = 2
      */
-    instanceId: string;
+    resourceId: bigint;
     /**
-     * @generated from protobuf field: string platform = 6
+     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 3
      */
-    platform: string; // <os>-<arch>
+    permissions?: AuthAPI_Grant_Permissions; // access level from grant table
     /**
-     * @generated from protobuf field: string os = 7
+     * @generated from protobuf field: string granted_by = 4
      */
-    os: string; // linux / windows / macosx
+    grantedBy: string; // login of the user who created this grant
     /**
-     * @generated from protobuf field: string arch = 8
+     * @generated from protobuf field: int64 granted_at = 5
      */
-    arch: string; // x64 / aarch64
+    grantedAt: bigint; // unix timestamp in milliseconds
 }
 /**
- * @generated from protobuf enum MiLaboratories.PL.API.MaintenanceAPI.Ping.Response.Compression
+ * Permissions describes access level for a grant.
+ *
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.Grant.Permissions
  */
-export enum MaintenanceAPI_Ping_Response_Compression {
-    /**
-     * @generated from protobuf enum value: NONE = 0;
-     */
-    NONE = 0,
+export interface AuthAPI_Grant_Permissions {
     /**
-     * @generated from protobuf enum value: GZIP = 1;
+     * @generated from protobuf field: bool writable = 1
      */
-    GZIP = 1
+    writable: boolean; // write access = ability to modify resource tree + share access
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.License
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources
  */
-export interface MaintenanceAPI_License {
+export interface AuthAPI_ListUserResources {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.License.Request
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.Request
  */
-export interface MaintenanceAPI_License_Request {
+export interface AuthAPI_ListUserResources_Request {
+    /**
+     * User login to list resources for.
+     * Is ignored for regular user role: it can list only its own resources.
+     *
+     * @generated from protobuf field: string login = 1
+     */
+    login: string;
+    /**
+     * Start listing shared resources from given resource ID.
+     * User root is returned only on the first page (when start_from == 0).
+     *
+     * @generated from protobuf field: uint64 start_from = 2
+     */
+    startFrom: bigint;
+    /**
+     * Non-zero value limits total resource count to at most <limit>.
+     * limit = 1 with start_from = 0 returns solely user's root
+     * limit = 2 with non-zero start_from returns 2 shared resources.
+     * Zero returns all resources.
+     *
+     * @generated from protobuf field: uint32 limit = 3
+     */
+    limit: number;
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.License.Response
+ * Multi-message: first message contains UserRoot (only when start_from == 0),
+ *
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.Response
  */
-export interface MaintenanceAPI_License_Response {
-    /**
-     * @generated from protobuf field: int32 status = 1
-     */
-    status: number; // HTTP status code of the last valid response from license server.
+export interface AuthAPI_ListUserResources_Response {
     /**
-     * @generated from protobuf field: bool is_ok = 2
+     * @generated from protobuf oneof: entry
      */
-    isOk: boolean; // true if status is 200
+    entry: {
+        oneofKind: "userRoot";
+        /**
+         * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot user_root = 1
+         */
+        userRoot: AuthAPI_ListUserResources_UserRoot;
+    } | {
+        oneofKind: "sharedResource";
+        /**
+         * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource shared_resource = 2
+         */
+        sharedResource: AuthAPI_ListUserResources_SharedResource;
+    } | {
+        oneofKind: undefined;
+    };
     /**
-     * Raw response body as it was received from the license server.
+     * Set only on the last message when limit > 0 and more items exist.
+     * Use as 'start_from' in the next request to continue listing.
      *
-     * @generated from protobuf field: bytes response_body = 3
+     * @generated from protobuf field: uint64 next_resource_id = 3
      */
-    responseBody: Uint8Array;
+    nextResourceId: bigint;
 }
-// @generated message type with reflection information, may provide speed optimized methods
-class TxAPI$Type extends MessageType<TxAPI> {
-    constructor() {
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot
+ */
+export interface AuthAPI_ListUserResources_UserRoot {
+    /**
+     * @generated from protobuf field: uint64 resource_id = 1
+     */
+    resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource
+ */
+export interface AuthAPI_ListUserResources_SharedResource {
+    /**
+     * @generated from protobuf field: uint64 resource_id = 1
+     */
+    resourceId: bigint;
+    /**
+     * @generated from protobuf field: optional bytes resource_signature = 2
+     */
+    resourceSignature?: Uint8Array;
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.Base.ResourceType resource_type = 3
+     */
+    resourceType?: ResourceType;
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 4
+     */
+    permissions?: AuthAPI_Grant_Permissions;
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MiscAPI
+ */
+export interface MiscAPI {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes
+ */
+export interface MiscAPI_ListResourceTypes {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Request
+ */
+export interface MiscAPI_ListResourceTypes_Request {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Response
+ */
+export interface MiscAPI_ListResourceTypes_Response {
+    /**
+     * @generated from protobuf field: repeated MiLaboratories.PL.Base.ResourceType types = 1
+     */
+    types: ResourceType[];
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI
+ */
+export interface MaintenanceAPI {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping
+ */
+export interface MaintenanceAPI_Ping {
+}
+/**
+ * Early connection check
+ *
+ * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping.Request
+ */
+export interface MaintenanceAPI_Ping_Request {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping.Response
+ */
+export interface MaintenanceAPI_Ping_Response {
+    /**
+     * @generated from protobuf field: string core_version = 1
+     */
+    coreVersion: string;
+    /**
+     * @generated from protobuf field: string core_full_version = 2
+     */
+    coreFullVersion: string;
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.API.MaintenanceAPI.Ping.Response.Compression compression = 4
+     */
+    compression: MaintenanceAPI_Ping_Response_Compression;
+    /**
+     * instanceID is a unique ID that changes when we reset DB state.
+     * If we reset a state and a database, but the address of the backend is still the same,
+     * without instanceID we are not sure if it's the same state or not,
+     * and UI can't detect it and clear its state (e.g. caches of drivers).
+     *
+     * @generated from protobuf field: string instance_id = 5
+     */
+    instanceId: string;
+    /**
+     * @generated from protobuf field: string platform = 6
+     */
+    platform: string; // <os>-<arch>
+    /**
+     * @generated from protobuf field: string os = 7
+     */
+    os: string; // linux / windows / macosx
+    /**
+     * @generated from protobuf field: string arch = 8
+     */
+    arch: string; // x64 / aarch64
+}
+/**
+ * @generated from protobuf enum MiLaboratories.PL.API.MaintenanceAPI.Ping.Response.Compression
+ */
+export enum MaintenanceAPI_Ping_Response_Compression {
+    /**
+     * @generated from protobuf enum value: NONE = 0;
+     */
+    NONE = 0,
+    /**
+     * @generated from protobuf enum value: GZIP = 1;
+     */
+    GZIP = 1
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.License
+ */
+export interface MaintenanceAPI_License {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.License.Request
+ */
+export interface MaintenanceAPI_License_Request {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.MaintenanceAPI.License.Response
+ */
+export interface MaintenanceAPI_License_Response {
+    /**
+     * @generated from protobuf field: int32 status = 1
+     */
+    status: number; // HTTP status code of the last valid response from license server.
+    /**
+     * @generated from protobuf field: bool is_ok = 2
+     */
+    isOk: boolean; // true if status is 200
+    /**
+     * Raw response body as it was received from the license server.
+     *
+     * @generated from protobuf field: bytes response_body = 3
+     */
+    responseBody: Uint8Array;
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.Util
+ */
+export interface Util {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.Util.Deprecated
+ */
+export interface Util_Deprecated {
+}
+// @generated message type with reflection information, may provide speed optimized methods
+class TxAPI$Type extends MessageType<TxAPI> {
+    constructor() {
         super("MiLaboratories.PL.API.TxAPI", []);
     }
     create(value?: PartialMessage<TxAPI>): TxAPI {
@@ -3248,9 +3732,10 @@ class TxAPI_ClientMessage$Type extends MessageType<TxAPI_ClientMessage> {
             { no: 254, name: "controller_key_value_get_flag", kind: "message", oneof: "request", T: () => ControllerKVAPI_GetFlag_Request },
             { no: 255, name: "controller_key_value_get_flag_if_exists", kind: "message", oneof: "request", T: () => ControllerKVAPI_GetFlagIfExists_Request },
             { no: 300, name: "cache_set_to_field", kind: "message", oneof: "request", T: () => CacheAPI_SetToField_Request },
-            { no: 301, name: "cache_delete_expired_records", kind: "message", oneof: "request", T: () => CacheAPI_DeleteExpiredRecords_Request },
+            { no: 301, name: "cache_delete_expired_records", kind: "message", oneof: "request", T: () => Util_Deprecated },
             { no: 350, name: "controller_features_set", kind: "message", oneof: "request", T: () => ControllerAPI_SetFeatures_Request },
-            { no: 351, name: "controller_features_clear", kind: "message", oneof: "request", T: () => ControllerAPI_ClearFeatures_Request }
+            { no: 351, name: "controller_features_clear", kind: "message", oneof: "request", T: () => ControllerAPI_ClearFeatures_Request },
+            { no: 400, name: "set_default_color", kind: "message", oneof: "request", T: () => TxAPI_SetDefaultColor_Request }
         ]);
     }
     create(value?: PartialMessage<TxAPI_ClientMessage>): TxAPI_ClientMessage {
@@ -3599,10 +4084,10 @@ class TxAPI_ClientMessage$Type extends MessageType<TxAPI_ClientMessage> {
                         cacheSetToField: CacheAPI_SetToField_Request.internalBinaryRead(reader, reader.uint32(), options, (message.request as any).cacheSetToField)
                     };
                     break;
-                case /* MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Request cache_delete_expired_records */ 301:
+                case /* MiLaboratories.PL.API.Util.Deprecated cache_delete_expired_records = 301 [deprecated = true] */ 301:
                     message.request = {
                         oneofKind: "cacheDeleteExpiredRecords",
-                        cacheDeleteExpiredRecords: CacheAPI_DeleteExpiredRecords_Request.internalBinaryRead(reader, reader.uint32(), options, (message.request as any).cacheDeleteExpiredRecords)
+                        cacheDeleteExpiredRecords: Util_Deprecated.internalBinaryRead(reader, reader.uint32(), options, (message.request as any).cacheDeleteExpiredRecords)
                     };
                     break;
                 case /* MiLaboratories.PL.API.ControllerAPI.SetFeatures.Request controller_features_set */ 350:
@@ -3617,6 +4102,12 @@ class TxAPI_ClientMessage$Type extends MessageType<TxAPI_ClientMessage> {
                         controllerFeaturesClear: ControllerAPI_ClearFeatures_Request.internalBinaryRead(reader, reader.uint32(), options, (message.request as any).controllerFeaturesClear)
                     };
                     break;
+                case /* MiLaboratories.PL.API.TxAPI.SetDefaultColor.Request set_default_color */ 400:
+                    message.request = {
+                        oneofKind: "setDefaultColor",
+                        setDefaultColor: TxAPI_SetDefaultColor_Request.internalBinaryRead(reader, reader.uint32(), options, (message.request as any).setDefaultColor)
+                    };
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -3797,15 +4288,18 @@ class TxAPI_ClientMessage$Type extends MessageType<TxAPI_ClientMessage> {
         /* MiLaboratories.PL.API.CacheAPI.SetToField.Request cache_set_to_field = 300; */
         if (message.request.oneofKind === "cacheSetToField")
             CacheAPI_SetToField_Request.internalBinaryWrite(message.request.cacheSetToField, writer.tag(300, WireType.LengthDelimited).fork(), options).join();
-        /* MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Request cache_delete_expired_records = 301; */
+        /* MiLaboratories.PL.API.Util.Deprecated cache_delete_expired_records = 301 [deprecated = true]; */
         if (message.request.oneofKind === "cacheDeleteExpiredRecords")
-            CacheAPI_DeleteExpiredRecords_Request.internalBinaryWrite(message.request.cacheDeleteExpiredRecords, writer.tag(301, WireType.LengthDelimited).fork(), options).join();
+            Util_Deprecated.internalBinaryWrite(message.request.cacheDeleteExpiredRecords, writer.tag(301, WireType.LengthDelimited).fork(), options).join();
         /* MiLaboratories.PL.API.ControllerAPI.SetFeatures.Request controller_features_set = 350; */
         if (message.request.oneofKind === "controllerFeaturesSet")
             ControllerAPI_SetFeatures_Request.internalBinaryWrite(message.request.controllerFeaturesSet, writer.tag(350, WireType.LengthDelimited).fork(), options).join();
         /* MiLaboratories.PL.API.ControllerAPI.ClearFeatures.Request controller_features_clear = 351; */
         if (message.request.oneofKind === "controllerFeaturesClear")
             ControllerAPI_ClearFeatures_Request.internalBinaryWrite(message.request.controllerFeaturesClear, writer.tag(351, WireType.LengthDelimited).fork(), options).join();
+        /* MiLaboratories.PL.API.TxAPI.SetDefaultColor.Request set_default_color = 400; */
+        if (message.request.oneofKind === "setDefaultColor")
+            TxAPI_SetDefaultColor_Request.internalBinaryWrite(message.request.setDefaultColor, writer.tag(400, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -3877,9 +4371,10 @@ class TxAPI_ServerMessage$Type extends MessageType<TxAPI_ServerMessage> {
             { no: 254, name: "controller_key_value_get_flag", kind: "message", oneof: "response", T: () => ControllerKVAPI_GetFlag_Response },
             { no: 255, name: "controller_key_value_get_flag_if_exists", kind: "message", oneof: "response", T: () => ControllerKVAPI_GetFlagIfExists_Response },
             { no: 300, name: "cache_set_to_field", kind: "message", oneof: "response", T: () => CacheAPI_SetToField_Response },
-            { no: 301, name: "cache_delete_expired_records", kind: "message", oneof: "response", T: () => CacheAPI_DeleteExpiredRecords_Response },
+            { no: 301, name: "cache_delete_expired_records", kind: "message", oneof: "response", T: () => Util_Deprecated },
             { no: 350, name: "controller_features_set", kind: "message", oneof: "response", T: () => ControllerAPI_SetFeatures_Response },
             { no: 351, name: "controller_features_clear", kind: "message", oneof: "response", T: () => ControllerAPI_ClearFeatures_Response },
+            { no: 400, name: "set_default_color", kind: "message", oneof: "response", T: () => TxAPI_SetDefaultColor_Response },
             { no: 3, name: "error", kind: "message", T: () => Status }
         ]);
     }
@@ -4232,10 +4727,10 @@ class TxAPI_ServerMessage$Type extends MessageType<TxAPI_ServerMessage> {
                         cacheSetToField: CacheAPI_SetToField_Response.internalBinaryRead(reader, reader.uint32(), options, (message.response as any).cacheSetToField)
                     };
                     break;
-                case /* MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Response cache_delete_expired_records */ 301:
+                case /* MiLaboratories.PL.API.Util.Deprecated cache_delete_expired_records = 301 [deprecated = true] */ 301:
                     message.response = {
                         oneofKind: "cacheDeleteExpiredRecords",
-                        cacheDeleteExpiredRecords: CacheAPI_DeleteExpiredRecords_Response.internalBinaryRead(reader, reader.uint32(), options, (message.response as any).cacheDeleteExpiredRecords)
+                        cacheDeleteExpiredRecords: Util_Deprecated.internalBinaryRead(reader, reader.uint32(), options, (message.response as any).cacheDeleteExpiredRecords)
                     };
                     break;
                 case /* MiLaboratories.PL.API.ControllerAPI.SetFeatures.Response controller_features_set */ 350:
@@ -4250,6 +4745,12 @@ class TxAPI_ServerMessage$Type extends MessageType<TxAPI_ServerMessage> {
                         controllerFeaturesClear: ControllerAPI_ClearFeatures_Response.internalBinaryRead(reader, reader.uint32(), options, (message.response as any).controllerFeaturesClear)
                     };
                     break;
+                case /* MiLaboratories.PL.API.TxAPI.SetDefaultColor.Response set_default_color */ 400:
+                    message.response = {
+                        oneofKind: "setDefaultColor",
+                        setDefaultColor: TxAPI_SetDefaultColor_Response.internalBinaryRead(reader, reader.uint32(), options, (message.response as any).setDefaultColor)
+                    };
+                    break;
                 case /* google.rpc.Status error */ 3:
                     message.error = Status.internalBinaryRead(reader, reader.uint32(), options, message.error);
                     break;
@@ -4439,15 +4940,18 @@ class TxAPI_ServerMessage$Type extends MessageType<TxAPI_ServerMessage> {
         /* MiLaboratories.PL.API.CacheAPI.SetToField.Response cache_set_to_field = 300; */
         if (message.response.oneofKind === "cacheSetToField")
             CacheAPI_SetToField_Response.internalBinaryWrite(message.response.cacheSetToField, writer.tag(300, WireType.LengthDelimited).fork(), options).join();
-        /* MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Response cache_delete_expired_records = 301; */
+        /* MiLaboratories.PL.API.Util.Deprecated cache_delete_expired_records = 301 [deprecated = true]; */
         if (message.response.oneofKind === "cacheDeleteExpiredRecords")
-            CacheAPI_DeleteExpiredRecords_Response.internalBinaryWrite(message.response.cacheDeleteExpiredRecords, writer.tag(301, WireType.LengthDelimited).fork(), options).join();
+            Util_Deprecated.internalBinaryWrite(message.response.cacheDeleteExpiredRecords, writer.tag(301, WireType.LengthDelimited).fork(), options).join();
         /* MiLaboratories.PL.API.ControllerAPI.SetFeatures.Response controller_features_set = 350; */
         if (message.response.oneofKind === "controllerFeaturesSet")
             ControllerAPI_SetFeatures_Response.internalBinaryWrite(message.response.controllerFeaturesSet, writer.tag(350, WireType.LengthDelimited).fork(), options).join();
         /* MiLaboratories.PL.API.ControllerAPI.ClearFeatures.Response controller_features_clear = 351; */
         if (message.response.oneofKind === "controllerFeaturesClear")
             ControllerAPI_ClearFeatures_Response.internalBinaryWrite(message.response.controllerFeaturesClear, writer.tag(351, WireType.LengthDelimited).fork(), options).join();
+        /* MiLaboratories.PL.API.TxAPI.SetDefaultColor.Response set_default_color = 400; */
+        if (message.response.oneofKind === "setDefaultColor")
+            TxAPI_SetDefaultColor_Response.internalBinaryWrite(message.response.setDefaultColor, writer.tag(400, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -5143,6 +5647,128 @@ class TxAPI_Sync_Response$Type extends MessageType<TxAPI_Sync_Response> {
  */
 export const TxAPI_Sync_Response = new TxAPI_Sync_Response$Type();
 // @generated message type with reflection information, may provide speed optimized methods
+class TxAPI_SetDefaultColor$Type extends MessageType<TxAPI_SetDefaultColor> {
+    constructor() {
+        super("MiLaboratories.PL.API.TxAPI.SetDefaultColor", []);
+    }
+    create(value?: PartialMessage<TxAPI_SetDefaultColor>): TxAPI_SetDefaultColor {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<TxAPI_SetDefaultColor>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: TxAPI_SetDefaultColor): TxAPI_SetDefaultColor {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: TxAPI_SetDefaultColor, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.TxAPI.SetDefaultColor
+ */
+export const TxAPI_SetDefaultColor = new TxAPI_SetDefaultColor$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class TxAPI_SetDefaultColor_Request$Type extends MessageType<TxAPI_SetDefaultColor_Request> {
+    constructor() {
+        super("MiLaboratories.PL.API.TxAPI.SetDefaultColor.Request", [
+            { no: 1, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+        ]);
+    }
+    create(value?: PartialMessage<TxAPI_SetDefaultColor_Request>): TxAPI_SetDefaultColor_Request {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<TxAPI_SetDefaultColor_Request>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: TxAPI_SetDefaultColor_Request): TxAPI_SetDefaultColor_Request {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* optional bytes color_proof */ 1:
+                    message.colorProof = reader.bytes();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: TxAPI_SetDefaultColor_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* optional bytes color_proof = 1; */
+        if (message.colorProof !== undefined)
+            writer.tag(1, WireType.LengthDelimited).bytes(message.colorProof);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.TxAPI.SetDefaultColor.Request
+ */
+export const TxAPI_SetDefaultColor_Request = new TxAPI_SetDefaultColor_Request$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class TxAPI_SetDefaultColor_Response$Type extends MessageType<TxAPI_SetDefaultColor_Response> {
+    constructor() {
+        super("MiLaboratories.PL.API.TxAPI.SetDefaultColor.Response", []);
+    }
+    create(value?: PartialMessage<TxAPI_SetDefaultColor_Response>): TxAPI_SetDefaultColor_Response {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<TxAPI_SetDefaultColor_Response>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: TxAPI_SetDefaultColor_Response): TxAPI_SetDefaultColor_Response {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: TxAPI_SetDefaultColor_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.TxAPI.SetDefaultColor.Response
+ */
+export const TxAPI_SetDefaultColor_Response = new TxAPI_SetDefaultColor_Response$Type();
+// @generated message type with reflection information, may provide speed optimized methods
 class ResourceAPI$Type extends MessageType<ResourceAPI> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI", []);
@@ -5224,12 +5850,14 @@ class ResourceAPI_CreateStruct_Request$Type extends MessageType<ResourceAPI_Crea
         super("MiLaboratories.PL.API.ResourceAPI.CreateStruct.Request", [
             { no: 2, name: "id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
             { no: 3, name: "type", kind: "message", T: () => ResourceType },
-            { no: 4, name: "data", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 4, name: "data", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 5, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateStruct_Request>): ResourceAPI_CreateStruct_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.id = 0n;
+        message.colorProof = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_CreateStruct_Request>(this, message, value);
         return message;
@@ -5248,6 +5876,9 @@ class ResourceAPI_CreateStruct_Request$Type extends MessageType<ResourceAPI_Crea
                 case /* optional bytes data */ 4:
                     message.data = reader.bytes();
                     break;
+                case /* optional bytes color_proof */ 5:
+                    message.colorProof = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -5269,6 +5900,9 @@ class ResourceAPI_CreateStruct_Request$Type extends MessageType<ResourceAPI_Crea
         /* optional bytes data = 4; */
         if (message.data !== undefined)
             writer.tag(4, WireType.LengthDelimited).bytes(message.data);
+        /* optional bytes color_proof = 5; */
+        if (message.colorProof !== undefined)
+            writer.tag(5, WireType.LengthDelimited).bytes(message.colorProof);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -5283,7 +5917,8 @@ export const ResourceAPI_CreateStruct_Request = new ResourceAPI_CreateStruct_Req
 class ResourceAPI_CreateStruct_Response$Type extends MessageType<ResourceAPI_CreateStruct_Response> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateStruct.Response", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateStruct_Response>): ResourceAPI_CreateStruct_Response {
@@ -5301,6 +5936,9 @@ class ResourceAPI_CreateStruct_Response$Type extends MessageType<ResourceAPI_Cre
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -5316,6 +5954,9 @@ class ResourceAPI_CreateStruct_Response$Type extends MessageType<ResourceAPI_Cre
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -5370,12 +6011,14 @@ class ResourceAPI_CreateEphemeral_Request$Type extends MessageType<ResourceAPI_C
         super("MiLaboratories.PL.API.ResourceAPI.CreateEphemeral.Request", [
             { no: 2, name: "id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
             { no: 3, name: "type", kind: "message", T: () => ResourceType },
-            { no: 4, name: "data", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 4, name: "data", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 5, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateEphemeral_Request>): ResourceAPI_CreateEphemeral_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.id = 0n;
+        message.colorProof = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_CreateEphemeral_Request>(this, message, value);
         return message;
@@ -5394,6 +6037,9 @@ class ResourceAPI_CreateEphemeral_Request$Type extends MessageType<ResourceAPI_C
                 case /* optional bytes data */ 4:
                     message.data = reader.bytes();
                     break;
+                case /* optional bytes color_proof */ 5:
+                    message.colorProof = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -5415,6 +6061,9 @@ class ResourceAPI_CreateEphemeral_Request$Type extends MessageType<ResourceAPI_C
         /* optional bytes data = 4; */
         if (message.data !== undefined)
             writer.tag(4, WireType.LengthDelimited).bytes(message.data);
+        /* optional bytes color_proof = 5; */
+        if (message.colorProof !== undefined)
+            writer.tag(5, WireType.LengthDelimited).bytes(message.colorProof);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -5429,7 +6078,8 @@ export const ResourceAPI_CreateEphemeral_Request = new ResourceAPI_CreateEphemer
 class ResourceAPI_CreateEphemeral_Response$Type extends MessageType<ResourceAPI_CreateEphemeral_Response> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateEphemeral.Response", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateEphemeral_Response>): ResourceAPI_CreateEphemeral_Response {
@@ -5447,6 +6097,9 @@ class ResourceAPI_CreateEphemeral_Response$Type extends MessageType<ResourceAPI_
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -5462,6 +6115,9 @@ class ResourceAPI_CreateEphemeral_Response$Type extends MessageType<ResourceAPI_
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -5663,7 +6319,8 @@ class ResourceAPI_CreateValue_Request$Type extends MessageType<ResourceAPI_Creat
             { no: 2, name: "id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
             { no: 3, name: "type", kind: "message", T: () => ResourceType },
             { no: 6, name: "data", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
-            { no: 7, name: "error_if_exists", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+            { no: 7, name: "error_if_exists", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 8, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateValue_Request>): ResourceAPI_CreateValue_Request {
@@ -5671,6 +6328,7 @@ class ResourceAPI_CreateValue_Request$Type extends MessageType<ResourceAPI_Creat
         message.id = 0n;
         message.data = new Uint8Array(0);
         message.errorIfExists = false;
+        message.colorProof = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_CreateValue_Request>(this, message, value);
         return message;
@@ -5692,6 +6350,9 @@ class ResourceAPI_CreateValue_Request$Type extends MessageType<ResourceAPI_Creat
                 case /* bool error_if_exists */ 7:
                     message.errorIfExists = reader.bool();
                     break;
+                case /* optional bytes color_proof */ 8:
+                    message.colorProof = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -5716,6 +6377,9 @@ class ResourceAPI_CreateValue_Request$Type extends MessageType<ResourceAPI_Creat
         /* bool error_if_exists = 7; */
         if (message.errorIfExists !== false)
             writer.tag(7, WireType.Varint).bool(message.errorIfExists);
+        /* optional bytes color_proof = 8; */
+        if (message.colorProof !== undefined)
+            writer.tag(8, WireType.LengthDelimited).bytes(message.colorProof);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -5730,7 +6394,8 @@ export const ResourceAPI_CreateValue_Request = new ResourceAPI_CreateValue_Reque
 class ResourceAPI_CreateValue_Response$Type extends MessageType<ResourceAPI_CreateValue_Response> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateValue.Response", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateValue_Response>): ResourceAPI_CreateValue_Response {
@@ -5748,6 +6413,9 @@ class ResourceAPI_CreateValue_Response$Type extends MessageType<ResourceAPI_Crea
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -5763,6 +6431,9 @@ class ResourceAPI_CreateValue_Response$Type extends MessageType<ResourceAPI_Crea
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -5869,7 +6540,8 @@ export const ResourceAPI_GetValueID_Request = new ResourceAPI_GetValueID_Request
 class ResourceAPI_GetValueID_Response$Type extends MessageType<ResourceAPI_GetValueID_Response> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.GetValueID.Response", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_GetValueID_Response>): ResourceAPI_GetValueID_Response {
@@ -5887,6 +6559,9 @@ class ResourceAPI_GetValueID_Response$Type extends MessageType<ResourceAPI_GetVa
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -5902,6 +6577,9 @@ class ResourceAPI_GetValueID_Response$Type extends MessageType<ResourceAPI_GetVa
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -5957,7 +6635,8 @@ class ResourceAPI_CreateSingleton_Request$Type extends MessageType<ResourceAPI_C
             { no: 2, name: "id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
             { no: 3, name: "type", kind: "message", T: () => ResourceType },
             { no: 6, name: "data", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
-            { no: 7, name: "error_if_exists", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+            { no: 7, name: "error_if_exists", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 8, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateSingleton_Request>): ResourceAPI_CreateSingleton_Request {
@@ -5965,6 +6644,7 @@ class ResourceAPI_CreateSingleton_Request$Type extends MessageType<ResourceAPI_C
         message.id = 0n;
         message.data = new Uint8Array(0);
         message.errorIfExists = false;
+        message.colorProof = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_CreateSingleton_Request>(this, message, value);
         return message;
@@ -5986,6 +6666,9 @@ class ResourceAPI_CreateSingleton_Request$Type extends MessageType<ResourceAPI_C
                 case /* bool error_if_exists */ 7:
                     message.errorIfExists = reader.bool();
                     break;
+                case /* optional bytes color_proof */ 8:
+                    message.colorProof = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -6010,6 +6693,9 @@ class ResourceAPI_CreateSingleton_Request$Type extends MessageType<ResourceAPI_C
         /* bool error_if_exists = 7; */
         if (message.errorIfExists !== false)
             writer.tag(7, WireType.Varint).bool(message.errorIfExists);
+        /* optional bytes color_proof = 8; */
+        if (message.colorProof !== undefined)
+            writer.tag(8, WireType.LengthDelimited).bytes(message.colorProof);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -6024,7 +6710,8 @@ export const ResourceAPI_CreateSingleton_Request = new ResourceAPI_CreateSinglet
 class ResourceAPI_CreateSingleton_Response$Type extends MessageType<ResourceAPI_CreateSingleton_Response> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateSingleton.Response", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateSingleton_Response>): ResourceAPI_CreateSingleton_Response {
@@ -6042,6 +6729,9 @@ class ResourceAPI_CreateSingleton_Response$Type extends MessageType<ResourceAPI_
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -6057,6 +6747,9 @@ class ResourceAPI_CreateSingleton_Response$Type extends MessageType<ResourceAPI_
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -6255,7 +6948,8 @@ export const ResourceAPI_LockInputs = new ResourceAPI_LockInputs$Type();
 class ResourceAPI_LockInputs_Request$Type extends MessageType<ResourceAPI_LockInputs_Request> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.LockInputs.Request", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_LockInputs_Request>): ResourceAPI_LockInputs_Request {
@@ -6273,6 +6967,9 @@ class ResourceAPI_LockInputs_Request$Type extends MessageType<ResourceAPI_LockIn
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -6288,6 +6985,9 @@ class ResourceAPI_LockInputs_Request$Type extends MessageType<ResourceAPI_LockIn
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -6378,7 +7078,8 @@ export const ResourceAPI_LockOutputs = new ResourceAPI_LockOutputs$Type();
 class ResourceAPI_LockOutputs_Request$Type extends MessageType<ResourceAPI_LockOutputs_Request> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.LockOutputs.Request", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_LockOutputs_Request>): ResourceAPI_LockOutputs_Request {
@@ -6396,6 +7097,9 @@ class ResourceAPI_LockOutputs_Request$Type extends MessageType<ResourceAPI_LockO
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -6411,6 +7115,9 @@ class ResourceAPI_LockOutputs_Request$Type extends MessageType<ResourceAPI_LockO
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -6501,7 +7208,8 @@ export const ResourceAPI_Exists = new ResourceAPI_Exists$Type();
 class ResourceAPI_Exists_Request$Type extends MessageType<ResourceAPI_Exists_Request> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Exists.Request", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_Exists_Request>): ResourceAPI_Exists_Request {
@@ -6519,6 +7227,9 @@ class ResourceAPI_Exists_Request$Type extends MessageType<ResourceAPI_Exists_Req
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -6534,6 +7245,9 @@ class ResourceAPI_Exists_Request$Type extends MessageType<ResourceAPI_Exists_Req
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -6634,7 +7348,9 @@ class ResourceAPI_SetError_Request$Type extends MessageType<ResourceAPI_SetError
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.SetError.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "error_resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 2, name: "error_resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 4, name: "error_resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_SetError_Request>): ResourceAPI_SetError_Request {
@@ -6653,9 +7369,15 @@ class ResourceAPI_SetError_Request$Type extends MessageType<ResourceAPI_SetError
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 3:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* uint64 error_resource_id */ 2:
                     message.errorResourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes error_resource_signature */ 4:
+                    message.errorResourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -6674,6 +7396,12 @@ class ResourceAPI_SetError_Request$Type extends MessageType<ResourceAPI_SetError
         /* uint64 error_resource_id = 2; */
         if (message.errorResourceId !== 0n)
             writer.tag(2, WireType.Varint).uint64(message.errorResourceId);
+        /* optional bytes resource_signature = 3; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
+        /* optional bytes error_resource_signature = 4; */
+        if (message.errorResourceSignature !== undefined)
+            writer.tag(4, WireType.LengthDelimited).bytes(message.errorResourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -6765,6 +7493,7 @@ class ResourceAPI_Get_Request$Type extends MessageType<ResourceAPI_Get_Request>
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Get.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "load_fields", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
         ]);
     }
@@ -6784,6 +7513,9 @@ class ResourceAPI_Get_Request$Type extends MessageType<ResourceAPI_Get_Request>
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 3:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* bool load_fields */ 2:
                     message.loadFields = reader.bool();
                     break;
@@ -6805,6 +7537,9 @@ class ResourceAPI_Get_Request$Type extends MessageType<ResourceAPI_Get_Request>
         /* bool load_fields = 2; */
         if (message.loadFields !== false)
             writer.tag(2, WireType.Varint).bool(message.loadFields);
+        /* optional bytes resource_signature = 3; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -7157,7 +7892,8 @@ export const ResourceAPI_CreateRoot_Request = new ResourceAPI_CreateRoot_Request
 class ResourceAPI_CreateRoot_Response$Type extends MessageType<ResourceAPI_CreateRoot_Response> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateRoot.Response", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateRoot_Response>): ResourceAPI_CreateRoot_Response {
@@ -7175,6 +7911,9 @@ class ResourceAPI_CreateRoot_Response$Type extends MessageType<ResourceAPI_Creat
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -7190,6 +7929,9 @@ class ResourceAPI_CreateRoot_Response$Type extends MessageType<ResourceAPI_Creat
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -7242,12 +7984,13 @@ export const ResourceAPI_Remove = new ResourceAPI_Remove$Type();
 class ResourceAPI_Remove_Request$Type extends MessageType<ResourceAPI_Remove_Request> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Remove.Request", [
-            { no: 1, name: "id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_Remove_Request>): ResourceAPI_Remove_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
-        message.id = 0n;
+        message.resourceId = 0n;
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_Remove_Request>(this, message, value);
         return message;
@@ -7257,8 +8000,11 @@ class ResourceAPI_Remove_Request$Type extends MessageType<ResourceAPI_Remove_Req
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
-                case /* uint64 id */ 1:
-                    message.id = reader.uint64().toBigInt();
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
                     break;
                 default:
                     let u = options.readUnknownField;
@@ -7272,9 +8018,12 @@ class ResourceAPI_Remove_Request$Type extends MessageType<ResourceAPI_Remove_Req
         return message;
     }
     internalBinaryWrite(message: ResourceAPI_Remove_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* uint64 id = 1; */
-        if (message.id !== 0n)
-            writer.tag(1, WireType.Varint).uint64(message.id);
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -7404,6 +8153,7 @@ class ResourceAPI_Name_Set_Request$Type extends MessageType<ResourceAPI_Name_Set
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Name.Set.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
@@ -7423,6 +8173,9 @@ class ResourceAPI_Name_Set_Request$Type extends MessageType<ResourceAPI_Name_Set
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 3:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* string name */ 2:
                     message.name = reader.string();
                     break;
@@ -7444,6 +8197,9 @@ class ResourceAPI_Name_Set_Request$Type extends MessageType<ResourceAPI_Name_Set
         /* string name = 2; */
         if (message.name !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* optional bytes resource_signature = 3; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -7581,7 +8337,8 @@ export const ResourceAPI_Name_Get_Request = new ResourceAPI_Name_Get_Request$Typ
 class ResourceAPI_Name_Get_Response$Type extends MessageType<ResourceAPI_Name_Get_Response> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Name.Get.Response", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_Name_Get_Response>): ResourceAPI_Name_Get_Response {
@@ -7599,6 +8356,9 @@ class ResourceAPI_Name_Get_Response$Type extends MessageType<ResourceAPI_Name_Ge
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -7614,6 +8374,9 @@ class ResourceAPI_Name_Get_Response$Type extends MessageType<ResourceAPI_Name_Ge
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -7922,6 +8685,7 @@ class ResourceAPI_Tree_Request$Type extends MessageType<ResourceAPI_Tree_Request
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Tree.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "max_depth", kind: "scalar", opt: true, T: 13 /*ScalarType.UINT32*/ }
         ]);
     }
@@ -7940,6 +8704,9 @@ class ResourceAPI_Tree_Request$Type extends MessageType<ResourceAPI_Tree_Request
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 3:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* optional uint32 max_depth */ 2:
                     message.maxDepth = reader.uint32();
                     break;
@@ -7961,6 +8728,9 @@ class ResourceAPI_Tree_Request$Type extends MessageType<ResourceAPI_Tree_Request
         /* optional uint32 max_depth = 2; */
         if (message.maxDepth !== undefined)
             writer.tag(2, WireType.Varint).uint32(message.maxDepth);
+        /* optional bytes resource_signature = 3; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -8059,7 +8829,8 @@ export const ResourceAPI_TreeSize = new ResourceAPI_TreeSize$Type();
 class ResourceAPI_TreeSize_Request$Type extends MessageType<ResourceAPI_TreeSize_Request> {
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.TreeSize.Request", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_TreeSize_Request>): ResourceAPI_TreeSize_Request {
@@ -8077,6 +8848,9 @@ class ResourceAPI_TreeSize_Request$Type extends MessageType<ResourceAPI_TreeSize
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -8092,6 +8866,9 @@ class ResourceAPI_TreeSize_Request$Type extends MessageType<ResourceAPI_TreeSize
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -8636,12 +9413,13 @@ class FieldAPI_SetError_Request$Type extends MessageType<FieldAPI_SetError_Reque
     constructor() {
         super("MiLaboratories.PL.API.FieldAPI.SetError.Request", [
             { no: 1, name: "field", kind: "message", T: () => FieldRef },
-            { no: 2, name: "err_resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+            { no: 2, name: "error_resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "error_resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<FieldAPI_SetError_Request>): FieldAPI_SetError_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
-        message.errResourceId = 0n;
+        message.errorResourceId = 0n;
         if (value !== undefined)
             reflectionMergePartial<FieldAPI_SetError_Request>(this, message, value);
         return message;
@@ -8654,8 +9432,11 @@ class FieldAPI_SetError_Request$Type extends MessageType<FieldAPI_SetError_Reque
                 case /* MiLaboratories.PL.Base.FieldRef field */ 1:
                     message.field = FieldRef.internalBinaryRead(reader, reader.uint32(), options, message.field);
                     break;
-                case /* uint64 err_resource_id */ 2:
-                    message.errResourceId = reader.uint64().toBigInt();
+                case /* uint64 error_resource_id */ 2:
+                    message.errorResourceId = reader.uint64().toBigInt();
+                    break;
+                case /* optional bytes error_resource_signature */ 3:
+                    message.errorResourceSignature = reader.bytes();
                     break;
                 default:
                     let u = options.readUnknownField;
@@ -8672,9 +9453,12 @@ class FieldAPI_SetError_Request$Type extends MessageType<FieldAPI_SetError_Reque
         /* MiLaboratories.PL.Base.FieldRef field = 1; */
         if (message.field)
             FieldRef.internalBinaryWrite(message.field, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        /* uint64 err_resource_id = 2; */
-        if (message.errResourceId !== 0n)
-            writer.tag(2, WireType.Varint).uint64(message.errResourceId);
+        /* uint64 error_resource_id = 2; */
+        if (message.errorResourceId !== 0n)
+            writer.tag(2, WireType.Varint).uint64(message.errorResourceId);
+        /* optional bytes error_resource_signature = 3; */
+        if (message.errorResourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.errorResourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -9140,6 +9924,7 @@ class FieldAPI_List_Request$Type extends MessageType<FieldAPI_List_Request> {
     constructor() {
         super("MiLaboratories.PL.API.FieldAPI.List.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 4, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "start_from", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 3, name: "limit", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
         ]);
@@ -9161,6 +9946,9 @@ class FieldAPI_List_Request$Type extends MessageType<FieldAPI_List_Request> {
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 4:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* string start_from */ 2:
                     message.startFrom = reader.string();
                     break;
@@ -9188,6 +9976,9 @@ class FieldAPI_List_Request$Type extends MessageType<FieldAPI_List_Request> {
         /* uint32 limit = 3; */
         if (message.limit !== 0)
             writer.tag(3, WireType.Varint).uint32(message.limit);
+        /* optional bytes resource_signature = 4; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(4, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -12379,6 +13170,7 @@ class ResourceKVAPI_List_Request$Type extends MessageType<ResourceKVAPI_List_Req
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.List.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 4, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "start_from", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 3, name: "limit", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
         ]);
@@ -12400,6 +13192,9 @@ class ResourceKVAPI_List_Request$Type extends MessageType<ResourceKVAPI_List_Req
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 4:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* string start_from */ 2:
                     message.startFrom = reader.string();
                     break;
@@ -12427,6 +13222,9 @@ class ResourceKVAPI_List_Request$Type extends MessageType<ResourceKVAPI_List_Req
         /* uint32 limit = 3; */
         if (message.limit !== 0)
             writer.tag(3, WireType.Varint).uint32(message.limit);
+        /* optional bytes resource_signature = 4; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(4, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -12589,6 +13387,7 @@ class ResourceKVAPI_Set_Request$Type extends MessageType<ResourceKVAPI_Set_Reque
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.Set.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 4, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 3, name: "value", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
@@ -12610,6 +13409,9 @@ class ResourceKVAPI_Set_Request$Type extends MessageType<ResourceKVAPI_Set_Reque
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 4:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* string key */ 2:
                     message.key = reader.string();
                     break;
@@ -12637,6 +13439,9 @@ class ResourceKVAPI_Set_Request$Type extends MessageType<ResourceKVAPI_Set_Reque
         /* bytes value = 3; */
         if (message.value.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.value);
+        /* optional bytes resource_signature = 4; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(4, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -12728,6 +13533,7 @@ class ResourceKVAPI_Get_Request$Type extends MessageType<ResourceKVAPI_Get_Reque
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.Get.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
@@ -12747,6 +13553,9 @@ class ResourceKVAPI_Get_Request$Type extends MessageType<ResourceKVAPI_Get_Reque
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 3:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* string key */ 2:
                     message.key = reader.string();
                     break;
@@ -12768,6 +13577,9 @@ class ResourceKVAPI_Get_Request$Type extends MessageType<ResourceKVAPI_Get_Reque
         /* string key = 2; */
         if (message.key !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.key);
+        /* optional bytes resource_signature = 3; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -12868,6 +13680,7 @@ class ResourceKVAPI_GetIfExists_Request$Type extends MessageType<ResourceKVAPI_G
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.GetIfExists.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
@@ -12887,6 +13700,9 @@ class ResourceKVAPI_GetIfExists_Request$Type extends MessageType<ResourceKVAPI_G
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 3:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* string key */ 2:
                     message.key = reader.string();
                     break;
@@ -12908,6 +13724,9 @@ class ResourceKVAPI_GetIfExists_Request$Type extends MessageType<ResourceKVAPI_G
         /* string key = 2; */
         if (message.key !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.key);
+        /* optional bytes resource_signature = 3; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -13016,6 +13835,7 @@ class ResourceKVAPI_Delete_Request$Type extends MessageType<ResourceKVAPI_Delete
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.Delete.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
@@ -13035,6 +13855,9 @@ class ResourceKVAPI_Delete_Request$Type extends MessageType<ResourceKVAPI_Delete
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 3:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* string key */ 2:
                     message.key = reader.string();
                     break;
@@ -13056,6 +13879,9 @@ class ResourceKVAPI_Delete_Request$Type extends MessageType<ResourceKVAPI_Delete
         /* string key = 2; */
         if (message.key !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.key);
+        /* optional bytes resource_signature = 3; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -13147,6 +13973,7 @@ class ResourceKVAPI_SetFlag_Request$Type extends MessageType<ResourceKVAPI_SetFl
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.SetFlag.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 4, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 3, name: "value", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
         ]);
@@ -13168,6 +13995,9 @@ class ResourceKVAPI_SetFlag_Request$Type extends MessageType<ResourceKVAPI_SetFl
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 4:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* string key */ 2:
                     message.key = reader.string();
                     break;
@@ -13195,6 +14025,9 @@ class ResourceKVAPI_SetFlag_Request$Type extends MessageType<ResourceKVAPI_SetFl
         /* bool value = 3; */
         if (message.value !== false)
             writer.tag(3, WireType.Varint).bool(message.value);
+        /* optional bytes resource_signature = 4; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(4, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -13286,6 +14119,7 @@ class ResourceKVAPI_GetFlag_Request$Type extends MessageType<ResourceKVAPI_GetFl
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.GetFlag.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
@@ -13305,6 +14139,9 @@ class ResourceKVAPI_GetFlag_Request$Type extends MessageType<ResourceKVAPI_GetFl
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 3:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* string key */ 2:
                     message.key = reader.string();
                     break;
@@ -13326,6 +14163,9 @@ class ResourceKVAPI_GetFlag_Request$Type extends MessageType<ResourceKVAPI_GetFl
         /* string key = 2; */
         if (message.key !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.key);
+        /* optional bytes resource_signature = 3; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -14443,17 +15283,17 @@ class CacheAPI_SetToField_Response$Type extends MessageType<CacheAPI_SetToField_
  */
 export const CacheAPI_SetToField_Response = new CacheAPI_SetToField_Response$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class CacheAPI_DeleteExpiredRecords$Type extends MessageType<CacheAPI_DeleteExpiredRecords> {
+class LocksAPI$Type extends MessageType<LocksAPI> {
     constructor() {
-        super("MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords", []);
+        super("MiLaboratories.PL.API.LocksAPI", []);
     }
-    create(value?: PartialMessage<CacheAPI_DeleteExpiredRecords>): CacheAPI_DeleteExpiredRecords {
+    create(value?: PartialMessage<LocksAPI>): LocksAPI {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<CacheAPI_DeleteExpiredRecords>(this, message, value);
+            reflectionMergePartial<LocksAPI>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CacheAPI_DeleteExpiredRecords): CacheAPI_DeleteExpiredRecords {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: LocksAPI): LocksAPI {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -14469,7 +15309,7 @@ class CacheAPI_DeleteExpiredRecords$Type extends MessageType<CacheAPI_DeleteExpi
         }
         return message;
     }
-    internalBinaryWrite(message: CacheAPI_DeleteExpiredRecords, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: LocksAPI, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -14477,21 +15317,21 @@ class CacheAPI_DeleteExpiredRecords$Type extends MessageType<CacheAPI_DeleteExpi
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.LocksAPI
  */
-export const CacheAPI_DeleteExpiredRecords = new CacheAPI_DeleteExpiredRecords$Type();
+export const LocksAPI = new LocksAPI$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class CacheAPI_DeleteExpiredRecords_Request$Type extends MessageType<CacheAPI_DeleteExpiredRecords_Request> {
+class LocksAPI_LockFieldValues$Type extends MessageType<LocksAPI_LockFieldValues> {
     constructor() {
-        super("MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Request", []);
+        super("MiLaboratories.PL.API.LocksAPI.LockFieldValues", []);
     }
-    create(value?: PartialMessage<CacheAPI_DeleteExpiredRecords_Request>): CacheAPI_DeleteExpiredRecords_Request {
+    create(value?: PartialMessage<LocksAPI_LockFieldValues>): LocksAPI_LockFieldValues {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<CacheAPI_DeleteExpiredRecords_Request>(this, message, value);
+            reflectionMergePartial<LocksAPI_LockFieldValues>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CacheAPI_DeleteExpiredRecords_Request): CacheAPI_DeleteExpiredRecords_Request {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: LocksAPI_LockFieldValues): LocksAPI_LockFieldValues {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -14507,7 +15347,7 @@ class CacheAPI_DeleteExpiredRecords_Request$Type extends MessageType<CacheAPI_De
         }
         return message;
     }
-    internalBinaryWrite(message: CacheAPI_DeleteExpiredRecords_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: LocksAPI_LockFieldValues, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -14515,21 +15355,21 @@ class CacheAPI_DeleteExpiredRecords_Request$Type extends MessageType<CacheAPI_De
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Request
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues
  */
-export const CacheAPI_DeleteExpiredRecords_Request = new CacheAPI_DeleteExpiredRecords_Request$Type();
+export const LocksAPI_LockFieldValues = new LocksAPI_LockFieldValues$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class CacheAPI_DeleteExpiredRecords_Response$Type extends MessageType<CacheAPI_DeleteExpiredRecords_Response> {
+class LocksAPI_LockFieldValues_Create$Type extends MessageType<LocksAPI_LockFieldValues_Create> {
     constructor() {
-        super("MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Response", []);
+        super("MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create", []);
     }
-    create(value?: PartialMessage<CacheAPI_DeleteExpiredRecords_Response>): CacheAPI_DeleteExpiredRecords_Response {
+    create(value?: PartialMessage<LocksAPI_LockFieldValues_Create>): LocksAPI_LockFieldValues_Create {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<CacheAPI_DeleteExpiredRecords_Response>(this, message, value);
+            reflectionMergePartial<LocksAPI_LockFieldValues_Create>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CacheAPI_DeleteExpiredRecords_Response): CacheAPI_DeleteExpiredRecords_Response {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: LocksAPI_LockFieldValues_Create): LocksAPI_LockFieldValues_Create {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -14545,7 +15385,7 @@ class CacheAPI_DeleteExpiredRecords_Response$Type extends MessageType<CacheAPI_D
         }
         return message;
     }
-    internalBinaryWrite(message: CacheAPI_DeleteExpiredRecords_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: LocksAPI_LockFieldValues_Create, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -14553,25 +15393,41 @@ class CacheAPI_DeleteExpiredRecords_Response$Type extends MessageType<CacheAPI_D
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.CacheAPI.DeleteExpiredRecords.Response
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create
  */
-export const CacheAPI_DeleteExpiredRecords_Response = new CacheAPI_DeleteExpiredRecords_Response$Type();
+export const LocksAPI_LockFieldValues_Create = new LocksAPI_LockFieldValues_Create$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class LocksAPI$Type extends MessageType<LocksAPI> {
+class LocksAPI_LockFieldValues_Create_Request$Type extends MessageType<LocksAPI_LockFieldValues_Create_Request> {
     constructor() {
-        super("MiLaboratories.PL.API.LocksAPI", []);
+        super("MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Request", [
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "lock_references_of", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "comment", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
     }
-    create(value?: PartialMessage<LocksAPI>): LocksAPI {
+    create(value?: PartialMessage<LocksAPI_LockFieldValues_Create_Request>): LocksAPI_LockFieldValues_Create_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
+        message.resourceId = 0n;
+        message.lockReferencesOf = [];
+        message.comment = "";
         if (value !== undefined)
-            reflectionMergePartial<LocksAPI>(this, message, value);
+            reflectionMergePartial<LocksAPI_LockFieldValues_Create_Request>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: LocksAPI): LocksAPI {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: LocksAPI_LockFieldValues_Create_Request): LocksAPI_LockFieldValues_Create_Request {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* repeated string lock_references_of */ 2:
+                    message.lockReferencesOf.push(reader.string());
+                    break;
+                case /* string comment */ 3:
+                    message.comment = reader.string();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -14583,7 +15439,16 @@ class LocksAPI$Type extends MessageType<LocksAPI> {
         }
         return message;
     }
-    internalBinaryWrite(message: LocksAPI, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: LocksAPI_LockFieldValues_Create_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* repeated string lock_references_of = 2; */
+        for (let i = 0; i < message.lockReferencesOf.length; i++)
+            writer.tag(2, WireType.LengthDelimited).string(message.lockReferencesOf[i]);
+        /* string comment = 3; */
+        if (message.comment !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.comment);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -14591,9 +15456,150 @@ class LocksAPI$Type extends MessageType<LocksAPI> {
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.LocksAPI
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Request
  */
-export const LocksAPI = new LocksAPI$Type();
+export const LocksAPI_LockFieldValues_Create_Request = new LocksAPI_LockFieldValues_Create_Request$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class LocksAPI_LockFieldValues_Create_Response$Type extends MessageType<LocksAPI_LockFieldValues_Create_Response> {
+    constructor() {
+        super("MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Response", [
+            { no: 1, name: "acquired", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 2, name: "conflicting_locks", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => LocksAPI_LockFieldValues_Create_Response_LockInfo },
+            { no: 3, name: "conflicts_list_truncated", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+        ]);
+    }
+    create(value?: PartialMessage<LocksAPI_LockFieldValues_Create_Response>): LocksAPI_LockFieldValues_Create_Response {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.acquired = false;
+        message.conflictingLocks = [];
+        message.conflictsListTruncated = false;
+        if (value !== undefined)
+            reflectionMergePartial<LocksAPI_LockFieldValues_Create_Response>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: LocksAPI_LockFieldValues_Create_Response): LocksAPI_LockFieldValues_Create_Response {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* bool acquired */ 1:
+                    message.acquired = reader.bool();
+                    break;
+                case /* repeated MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Response.LockInfo conflicting_locks */ 2:
+                    message.conflictingLocks.push(LocksAPI_LockFieldValues_Create_Response_LockInfo.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                case /* bool conflicts_list_truncated */ 3:
+                    message.conflictsListTruncated = reader.bool();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: LocksAPI_LockFieldValues_Create_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* bool acquired = 1; */
+        if (message.acquired !== false)
+            writer.tag(1, WireType.Varint).bool(message.acquired);
+        /* repeated MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Response.LockInfo conflicting_locks = 2; */
+        for (let i = 0; i < message.conflictingLocks.length; i++)
+            LocksAPI_LockFieldValues_Create_Response_LockInfo.internalBinaryWrite(message.conflictingLocks[i], writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+        /* bool conflicts_list_truncated = 3; */
+        if (message.conflictsListTruncated !== false)
+            writer.tag(3, WireType.Varint).bool(message.conflictsListTruncated);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Response
+ */
+export const LocksAPI_LockFieldValues_Create_Response = new LocksAPI_LockFieldValues_Create_Response$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class LocksAPI_LockFieldValues_Create_Response_LockInfo$Type extends MessageType<LocksAPI_LockFieldValues_Create_Response_LockInfo> {
+    constructor() {
+        super("MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Response.LockInfo", [
+            { no: 1, name: "target_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "field_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "locked_by", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 4, name: "locked_at", kind: "message", T: () => Timestamp },
+            { no: 5, name: "comment", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<LocksAPI_LockFieldValues_Create_Response_LockInfo>): LocksAPI_LockFieldValues_Create_Response_LockInfo {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.targetId = 0n;
+        message.fieldName = "";
+        message.lockedBy = 0n;
+        message.comment = "";
+        if (value !== undefined)
+            reflectionMergePartial<LocksAPI_LockFieldValues_Create_Response_LockInfo>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: LocksAPI_LockFieldValues_Create_Response_LockInfo): LocksAPI_LockFieldValues_Create_Response_LockInfo {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* uint64 target_id */ 1:
+                    message.targetId = reader.uint64().toBigInt();
+                    break;
+                case /* string field_name */ 2:
+                    message.fieldName = reader.string();
+                    break;
+                case /* uint64 locked_by */ 3:
+                    message.lockedBy = reader.uint64().toBigInt();
+                    break;
+                case /* google.protobuf.Timestamp locked_at */ 4:
+                    message.lockedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.lockedAt);
+                    break;
+                case /* string comment */ 5:
+                    message.comment = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: LocksAPI_LockFieldValues_Create_Response_LockInfo, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 target_id = 1; */
+        if (message.targetId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.targetId);
+        /* string field_name = 2; */
+        if (message.fieldName !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.fieldName);
+        /* uint64 locked_by = 3; */
+        if (message.lockedBy !== 0n)
+            writer.tag(3, WireType.Varint).uint64(message.lockedBy);
+        /* google.protobuf.Timestamp locked_at = 4; */
+        if (message.lockedAt)
+            Timestamp.internalBinaryWrite(message.lockedAt, writer.tag(4, WireType.LengthDelimited).fork(), options).join();
+        /* string comment = 5; */
+        if (message.comment !== "")
+            writer.tag(5, WireType.LengthDelimited).string(message.comment);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.LocksAPI.LockFieldValues.Create.Response.LockInfo
+ */
+export const LocksAPI_LockFieldValues_Create_Response_LockInfo = new LocksAPI_LockFieldValues_Create_Response_LockInfo$Type();
 // @generated message type with reflection information, may provide speed optimized methods
 class LocksAPI_Lease$Type extends MessageType<LocksAPI_Lease> {
     constructor() {
@@ -14675,6 +15681,7 @@ class LocksAPI_Lease_Create_Request$Type extends MessageType<LocksAPI_Lease_Crea
     constructor() {
         super("MiLaboratories.PL.API.LocksAPI.Lease.Create.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 5, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 3, name: "timeout", kind: "message", T: () => Duration },
             { no: 4, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
@@ -14695,6 +15702,9 @@ class LocksAPI_Lease_Create_Request$Type extends MessageType<LocksAPI_Lease_Crea
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 5:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* google.protobuf.Duration timeout */ 3:
                     message.timeout = Duration.internalBinaryRead(reader, reader.uint32(), options, message.timeout);
                     break;
@@ -14722,6 +15732,9 @@ class LocksAPI_Lease_Create_Request$Type extends MessageType<LocksAPI_Lease_Crea
         /* string name = 4; */
         if (message.name !== "")
             writer.tag(4, WireType.LengthDelimited).string(message.name);
+        /* optional bytes resource_signature = 5; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(5, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -14822,6 +15835,7 @@ class LocksAPI_Lease_Update_Request$Type extends MessageType<LocksAPI_Lease_Upda
     constructor() {
         super("MiLaboratories.PL.API.LocksAPI.Lease.Update.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 5, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "lease_id", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 3, name: "timeout", kind: "message", T: () => Duration },
             { no: 4, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
@@ -14844,6 +15858,9 @@ class LocksAPI_Lease_Update_Request$Type extends MessageType<LocksAPI_Lease_Upda
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 5:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* bytes lease_id */ 2:
                     message.leaseId = reader.bytes();
                     break;
@@ -14877,6 +15894,9 @@ class LocksAPI_Lease_Update_Request$Type extends MessageType<LocksAPI_Lease_Upda
         /* string name = 4; */
         if (message.name !== "")
             writer.tag(4, WireType.LengthDelimited).string(message.name);
+        /* optional bytes resource_signature = 5; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(5, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -14968,6 +15988,7 @@ class LocksAPI_Lease_Release_Request$Type extends MessageType<LocksAPI_Lease_Rel
     constructor() {
         super("MiLaboratories.PL.API.LocksAPI.Lease.Release.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "lease_id", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
@@ -14987,6 +16008,9 @@ class LocksAPI_Lease_Release_Request$Type extends MessageType<LocksAPI_Lease_Rel
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
+                case /* optional bytes resource_signature */ 3:
+                    message.resourceSignature = reader.bytes();
+                    break;
                 case /* bytes lease_id */ 2:
                     message.leaseId = reader.bytes();
                     break;
@@ -15008,6 +16032,9 @@ class LocksAPI_Lease_Release_Request$Type extends MessageType<LocksAPI_Lease_Rel
         /* bytes lease_id = 2; */
         if (message.leaseId.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.leaseId);
+        /* optional bytes resource_signature = 3; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15338,7 +16365,8 @@ export const AuthAPI_GetJWTToken = new AuthAPI_GetJWTToken$Type();
 class AuthAPI_GetJWTToken_Request$Type extends MessageType<AuthAPI_GetJWTToken_Request> {
     constructor() {
         super("MiLaboratories.PL.API.AuthAPI.GetJWTToken.Request", [
-            { no: 1, name: "expiration", kind: "message", T: () => Duration }
+            { no: 1, name: "expiration", kind: "message", T: () => Duration },
+            { no: 2, name: "requested_role", kind: "enum", opt: true, T: () => ["MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role", AuthAPI_GetJWTToken_Role] }
         ]);
     }
     create(value?: PartialMessage<AuthAPI_GetJWTToken_Request>): AuthAPI_GetJWTToken_Request {
@@ -15355,6 +16383,9 @@ class AuthAPI_GetJWTToken_Request$Type extends MessageType<AuthAPI_GetJWTToken_R
                 case /* google.protobuf.Duration expiration */ 1:
                     message.expiration = Duration.internalBinaryRead(reader, reader.uint32(), options, message.expiration);
                     break;
+                case /* optional MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role requested_role */ 2:
+                    message.requestedRole = reader.int32();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -15370,6 +16401,9 @@ class AuthAPI_GetJWTToken_Request$Type extends MessageType<AuthAPI_GetJWTToken_R
         /* google.protobuf.Duration expiration = 1; */
         if (message.expiration)
             Duration.internalBinaryWrite(message.expiration, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        /* optional MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role requested_role = 2; */
+        if (message.requestedRole !== undefined)
+            writer.tag(2, WireType.Varint).int32(message.requestedRole);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15384,12 +16418,14 @@ export const AuthAPI_GetJWTToken_Request = new AuthAPI_GetJWTToken_Request$Type(
 class AuthAPI_GetJWTToken_Response$Type extends MessageType<AuthAPI_GetJWTToken_Response> {
     constructor() {
         super("MiLaboratories.PL.API.AuthAPI.GetJWTToken.Response", [
-            { no: 1, name: "token", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+            { no: 1, name: "token", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "session_id", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<AuthAPI_GetJWTToken_Response>): AuthAPI_GetJWTToken_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.token = "";
+        message.sessionId = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<AuthAPI_GetJWTToken_Response>(this, message, value);
         return message;
@@ -15402,6 +16438,9 @@ class AuthAPI_GetJWTToken_Response$Type extends MessageType<AuthAPI_GetJWTToken_
                 case /* string token */ 1:
                     message.token = reader.string();
                     break;
+                case /* bytes session_id */ 2:
+                    message.sessionId = reader.bytes();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -15417,6 +16456,9 @@ class AuthAPI_GetJWTToken_Response$Type extends MessageType<AuthAPI_GetJWTToken_
         /* string token = 1; */
         if (message.token !== "")
             writer.tag(1, WireType.LengthDelimited).string(message.token);
+        /* bytes session_id = 2; */
+        if (message.sessionId.length)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.sessionId);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15428,17 +16470,17 @@ class AuthAPI_GetJWTToken_Response$Type extends MessageType<AuthAPI_GetJWTToken_
  */
 export const AuthAPI_GetJWTToken_Response = new AuthAPI_GetJWTToken_Response$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class MiscAPI$Type extends MessageType<MiscAPI> {
+class AuthAPI_GrantAccess$Type extends MessageType<AuthAPI_GrantAccess> {
     constructor() {
-        super("MiLaboratories.PL.API.MiscAPI", []);
+        super("MiLaboratories.PL.API.AuthAPI.GrantAccess", []);
     }
-    create(value?: PartialMessage<MiscAPI>): MiscAPI {
+    create(value?: PartialMessage<AuthAPI_GrantAccess>): AuthAPI_GrantAccess {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<MiscAPI>(this, message, value);
+            reflectionMergePartial<AuthAPI_GrantAccess>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MiscAPI): MiscAPI {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_GrantAccess): AuthAPI_GrantAccess {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -15454,7 +16496,7 @@ class MiscAPI$Type extends MessageType<MiscAPI> {
         }
         return message;
     }
-    internalBinaryWrite(message: MiscAPI, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_GrantAccess, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15462,25 +16504,44 @@ class MiscAPI$Type extends MessageType<MiscAPI> {
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.MiscAPI
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.GrantAccess
  */
-export const MiscAPI = new MiscAPI$Type();
+export const AuthAPI_GrantAccess = new AuthAPI_GrantAccess$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class MiscAPI_ListResourceTypes$Type extends MessageType<MiscAPI_ListResourceTypes> {
+class AuthAPI_GrantAccess_Request$Type extends MessageType<AuthAPI_GrantAccess_Request> {
     constructor() {
-        super("MiLaboratories.PL.API.MiscAPI.ListResourceTypes", []);
+        super("MiLaboratories.PL.API.AuthAPI.GrantAccess.Request", [
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "target_user", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "permissions", kind: "message", T: () => AuthAPI_Grant_Permissions }
+        ]);
     }
-    create(value?: PartialMessage<MiscAPI_ListResourceTypes>): MiscAPI_ListResourceTypes {
+    create(value?: PartialMessage<AuthAPI_GrantAccess_Request>): AuthAPI_GrantAccess_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
+        message.resourceId = 0n;
+        message.targetUser = "";
         if (value !== undefined)
-            reflectionMergePartial<MiscAPI_ListResourceTypes>(this, message, value);
+            reflectionMergePartial<AuthAPI_GrantAccess_Request>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MiscAPI_ListResourceTypes): MiscAPI_ListResourceTypes {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_GrantAccess_Request): AuthAPI_GrantAccess_Request {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
+                case /* string target_user */ 3:
+                    message.targetUser = reader.string();
+                    break;
+                case /* MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions */ 4:
+                    message.permissions = AuthAPI_Grant_Permissions.internalBinaryRead(reader, reader.uint32(), options, message.permissions);
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -15492,7 +16553,19 @@ class MiscAPI_ListResourceTypes$Type extends MessageType<MiscAPI_ListResourceTyp
         }
         return message;
     }
-    internalBinaryWrite(message: MiscAPI_ListResourceTypes, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_GrantAccess_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
+        /* string target_user = 3; */
+        if (message.targetUser !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.targetUser);
+        /* MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 4; */
+        if (message.permissions)
+            AuthAPI_Grant_Permissions.internalBinaryWrite(message.permissions, writer.tag(4, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15500,21 +16573,21 @@ class MiscAPI_ListResourceTypes$Type extends MessageType<MiscAPI_ListResourceTyp
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.GrantAccess.Request
  */
-export const MiscAPI_ListResourceTypes = new MiscAPI_ListResourceTypes$Type();
+export const AuthAPI_GrantAccess_Request = new AuthAPI_GrantAccess_Request$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class MiscAPI_ListResourceTypes_Request$Type extends MessageType<MiscAPI_ListResourceTypes_Request> {
+class AuthAPI_GrantAccess_Response$Type extends MessageType<AuthAPI_GrantAccess_Response> {
     constructor() {
-        super("MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Request", []);
+        super("MiLaboratories.PL.API.AuthAPI.GrantAccess.Response", []);
     }
-    create(value?: PartialMessage<MiscAPI_ListResourceTypes_Request>): MiscAPI_ListResourceTypes_Request {
+    create(value?: PartialMessage<AuthAPI_GrantAccess_Response>): AuthAPI_GrantAccess_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<MiscAPI_ListResourceTypes_Request>(this, message, value);
+            reflectionMergePartial<AuthAPI_GrantAccess_Response>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MiscAPI_ListResourceTypes_Request): MiscAPI_ListResourceTypes_Request {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_GrantAccess_Response): AuthAPI_GrantAccess_Response {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -15530,7 +16603,7 @@ class MiscAPI_ListResourceTypes_Request$Type extends MessageType<MiscAPI_ListRes
         }
         return message;
     }
-    internalBinaryWrite(message: MiscAPI_ListResourceTypes_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_GrantAccess_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15538,31 +16611,25 @@ class MiscAPI_ListResourceTypes_Request$Type extends MessageType<MiscAPI_ListRes
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Request
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.GrantAccess.Response
  */
-export const MiscAPI_ListResourceTypes_Request = new MiscAPI_ListResourceTypes_Request$Type();
+export const AuthAPI_GrantAccess_Response = new AuthAPI_GrantAccess_Response$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class MiscAPI_ListResourceTypes_Response$Type extends MessageType<MiscAPI_ListResourceTypes_Response> {
+class AuthAPI_RevokeGrant$Type extends MessageType<AuthAPI_RevokeGrant> {
     constructor() {
-        super("MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Response", [
-            { no: 1, name: "types", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => ResourceType }
-        ]);
+        super("MiLaboratories.PL.API.AuthAPI.RevokeGrant", []);
     }
-    create(value?: PartialMessage<MiscAPI_ListResourceTypes_Response>): MiscAPI_ListResourceTypes_Response {
+    create(value?: PartialMessage<AuthAPI_RevokeGrant>): AuthAPI_RevokeGrant {
         const message = globalThis.Object.create((this.messagePrototype!));
-        message.types = [];
         if (value !== undefined)
-            reflectionMergePartial<MiscAPI_ListResourceTypes_Response>(this, message, value);
+            reflectionMergePartial<AuthAPI_RevokeGrant>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MiscAPI_ListResourceTypes_Response): MiscAPI_ListResourceTypes_Response {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_RevokeGrant): AuthAPI_RevokeGrant {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
-                case /* repeated MiLaboratories.PL.Base.ResourceType types */ 1:
-                    message.types.push(ResourceType.internalBinaryRead(reader, reader.uint32(), options));
-                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -15574,10 +16641,7 @@ class MiscAPI_ListResourceTypes_Response$Type extends MessageType<MiscAPI_ListRe
         }
         return message;
     }
-    internalBinaryWrite(message: MiscAPI_ListResourceTypes_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* repeated MiLaboratories.PL.Base.ResourceType types = 1; */
-        for (let i = 0; i < message.types.length; i++)
-            ResourceType.internalBinaryWrite(message.types[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+    internalBinaryWrite(message: AuthAPI_RevokeGrant, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15585,25 +16649,40 @@ class MiscAPI_ListResourceTypes_Response$Type extends MessageType<MiscAPI_ListRe
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Response
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant
  */
-export const MiscAPI_ListResourceTypes_Response = new MiscAPI_ListResourceTypes_Response$Type();
+export const AuthAPI_RevokeGrant = new AuthAPI_RevokeGrant$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class MaintenanceAPI$Type extends MessageType<MaintenanceAPI> {
+class AuthAPI_RevokeGrant_Request$Type extends MessageType<AuthAPI_RevokeGrant_Request> {
     constructor() {
-        super("MiLaboratories.PL.API.MaintenanceAPI", []);
+        super("MiLaboratories.PL.API.AuthAPI.RevokeGrant.Request", [
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "target_user", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
     }
-    create(value?: PartialMessage<MaintenanceAPI>): MaintenanceAPI {
+    create(value?: PartialMessage<AuthAPI_RevokeGrant_Request>): AuthAPI_RevokeGrant_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
+        message.resourceId = 0n;
+        message.targetUser = "";
         if (value !== undefined)
-            reflectionMergePartial<MaintenanceAPI>(this, message, value);
+            reflectionMergePartial<AuthAPI_RevokeGrant_Request>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MaintenanceAPI): MaintenanceAPI {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_RevokeGrant_Request): AuthAPI_RevokeGrant_Request {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
+                case /* string target_user */ 3:
+                    message.targetUser = reader.string();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -15615,7 +16694,16 @@ class MaintenanceAPI$Type extends MessageType<MaintenanceAPI> {
         }
         return message;
     }
-    internalBinaryWrite(message: MaintenanceAPI, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_RevokeGrant_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
+        /* string target_user = 3; */
+        if (message.targetUser !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.targetUser);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15623,21 +16711,21 @@ class MaintenanceAPI$Type extends MessageType<MaintenanceAPI> {
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.MaintenanceAPI
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant.Request
  */
-export const MaintenanceAPI = new MaintenanceAPI$Type();
+export const AuthAPI_RevokeGrant_Request = new AuthAPI_RevokeGrant_Request$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class MaintenanceAPI_Ping$Type extends MessageType<MaintenanceAPI_Ping> {
+class AuthAPI_RevokeGrant_Response$Type extends MessageType<AuthAPI_RevokeGrant_Response> {
     constructor() {
-        super("MiLaboratories.PL.API.MaintenanceAPI.Ping", []);
+        super("MiLaboratories.PL.API.AuthAPI.RevokeGrant.Response", []);
     }
-    create(value?: PartialMessage<MaintenanceAPI_Ping>): MaintenanceAPI_Ping {
+    create(value?: PartialMessage<AuthAPI_RevokeGrant_Response>): AuthAPI_RevokeGrant_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<MaintenanceAPI_Ping>(this, message, value);
+            reflectionMergePartial<AuthAPI_RevokeGrant_Response>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MaintenanceAPI_Ping): MaintenanceAPI_Ping {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_RevokeGrant_Response): AuthAPI_RevokeGrant_Response {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -15653,7 +16741,7 @@ class MaintenanceAPI_Ping$Type extends MessageType<MaintenanceAPI_Ping> {
         }
         return message;
     }
-    internalBinaryWrite(message: MaintenanceAPI_Ping, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_RevokeGrant_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15661,21 +16749,21 @@ class MaintenanceAPI_Ping$Type extends MessageType<MaintenanceAPI_Ping> {
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant.Response
  */
-export const MaintenanceAPI_Ping = new MaintenanceAPI_Ping$Type();
+export const AuthAPI_RevokeGrant_Response = new AuthAPI_RevokeGrant_Response$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class MaintenanceAPI_Ping_Request$Type extends MessageType<MaintenanceAPI_Ping_Request> {
+class AuthAPI_ListGrants$Type extends MessageType<AuthAPI_ListGrants> {
     constructor() {
-        super("MiLaboratories.PL.API.MaintenanceAPI.Ping.Request", []);
+        super("MiLaboratories.PL.API.AuthAPI.ListGrants", []);
     }
-    create(value?: PartialMessage<MaintenanceAPI_Ping_Request>): MaintenanceAPI_Ping_Request {
+    create(value?: PartialMessage<AuthAPI_ListGrants>): AuthAPI_ListGrants {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<MaintenanceAPI_Ping_Request>(this, message, value);
+            reflectionMergePartial<AuthAPI_ListGrants>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MaintenanceAPI_Ping_Request): MaintenanceAPI_Ping_Request {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListGrants): AuthAPI_ListGrants {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -15691,7 +16779,7 @@ class MaintenanceAPI_Ping_Request$Type extends MessageType<MaintenanceAPI_Ping_R
         }
         return message;
     }
-    internalBinaryWrite(message: MaintenanceAPI_Ping_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_ListGrants, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -15699,16 +16787,806 @@ class MaintenanceAPI_Ping_Request$Type extends MessageType<MaintenanceAPI_Ping_R
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping.Request
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListGrants
  */
-export const MaintenanceAPI_Ping_Request = new MaintenanceAPI_Ping_Request$Type();
+export const AuthAPI_ListGrants = new AuthAPI_ListGrants$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_ListGrants_Request$Type extends MessageType<AuthAPI_ListGrants_Request> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.ListGrants.Request", [
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_ListGrants_Request>): AuthAPI_ListGrants_Request {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.resourceId = 0n;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_ListGrants_Request>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListGrants_Request): AuthAPI_ListGrants_Request {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_ListGrants_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListGrants.Request
+ */
+export const AuthAPI_ListGrants_Request = new AuthAPI_ListGrants_Request$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_ListGrants_Response$Type extends MessageType<AuthAPI_ListGrants_Response> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.ListGrants.Response", [
+            { no: 1, name: "grant", kind: "message", T: () => AuthAPI_Grant }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_ListGrants_Response>): AuthAPI_ListGrants_Response {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_ListGrants_Response>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListGrants_Response): AuthAPI_ListGrants_Response {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* MiLaboratories.PL.API.AuthAPI.Grant grant */ 1:
+                    message.grant = AuthAPI_Grant.internalBinaryRead(reader, reader.uint32(), options, message.grant);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_ListGrants_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* MiLaboratories.PL.API.AuthAPI.Grant grant = 1; */
+        if (message.grant)
+            AuthAPI_Grant.internalBinaryWrite(message.grant, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListGrants.Response
+ */
+export const AuthAPI_ListGrants_Response = new AuthAPI_ListGrants_Response$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_Grant$Type extends MessageType<AuthAPI_Grant> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.Grant", [
+            { no: 1, name: "user", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "permissions", kind: "message", T: () => AuthAPI_Grant_Permissions },
+            { no: 4, name: "granted_by", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "granted_at", kind: "scalar", T: 3 /*ScalarType.INT64*/, L: 0 /*LongType.BIGINT*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_Grant>): AuthAPI_Grant {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.user = "";
+        message.resourceId = 0n;
+        message.grantedBy = "";
+        message.grantedAt = 0n;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_Grant>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_Grant): AuthAPI_Grant {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string user */ 1:
+                    message.user = reader.string();
+                    break;
+                case /* uint64 resource_id */ 2:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions */ 3:
+                    message.permissions = AuthAPI_Grant_Permissions.internalBinaryRead(reader, reader.uint32(), options, message.permissions);
+                    break;
+                case /* string granted_by */ 4:
+                    message.grantedBy = reader.string();
+                    break;
+                case /* int64 granted_at */ 5:
+                    message.grantedAt = reader.int64().toBigInt();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_Grant, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string user = 1; */
+        if (message.user !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.user);
+        /* uint64 resource_id = 2; */
+        if (message.resourceId !== 0n)
+            writer.tag(2, WireType.Varint).uint64(message.resourceId);
+        /* MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 3; */
+        if (message.permissions)
+            AuthAPI_Grant_Permissions.internalBinaryWrite(message.permissions, writer.tag(3, WireType.LengthDelimited).fork(), options).join();
+        /* string granted_by = 4; */
+        if (message.grantedBy !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.grantedBy);
+        /* int64 granted_at = 5; */
+        if (message.grantedAt !== 0n)
+            writer.tag(5, WireType.Varint).int64(message.grantedAt);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.Grant
+ */
+export const AuthAPI_Grant = new AuthAPI_Grant$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_Grant_Permissions$Type extends MessageType<AuthAPI_Grant_Permissions> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.Grant.Permissions", [
+            { no: 1, name: "writable", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_Grant_Permissions>): AuthAPI_Grant_Permissions {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.writable = false;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_Grant_Permissions>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_Grant_Permissions): AuthAPI_Grant_Permissions {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* bool writable */ 1:
+                    message.writable = reader.bool();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_Grant_Permissions, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* bool writable = 1; */
+        if (message.writable !== false)
+            writer.tag(1, WireType.Varint).bool(message.writable);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.Grant.Permissions
+ */
+export const AuthAPI_Grant_Permissions = new AuthAPI_Grant_Permissions$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_ListUserResources$Type extends MessageType<AuthAPI_ListUserResources> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.ListUserResources", []);
+    }
+    create(value?: PartialMessage<AuthAPI_ListUserResources>): AuthAPI_ListUserResources {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_ListUserResources>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources): AuthAPI_ListUserResources {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_ListUserResources, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources
+ */
+export const AuthAPI_ListUserResources = new AuthAPI_ListUserResources$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_ListUserResources_Request$Type extends MessageType<AuthAPI_ListUserResources_Request> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.ListUserResources.Request", [
+            { no: 1, name: "login", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "start_from", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "limit", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_ListUserResources_Request>): AuthAPI_ListUserResources_Request {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.login = "";
+        message.startFrom = 0n;
+        message.limit = 0;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_ListUserResources_Request>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources_Request): AuthAPI_ListUserResources_Request {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string login */ 1:
+                    message.login = reader.string();
+                    break;
+                case /* uint64 start_from */ 2:
+                    message.startFrom = reader.uint64().toBigInt();
+                    break;
+                case /* uint32 limit */ 3:
+                    message.limit = reader.uint32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_ListUserResources_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string login = 1; */
+        if (message.login !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.login);
+        /* uint64 start_from = 2; */
+        if (message.startFrom !== 0n)
+            writer.tag(2, WireType.Varint).uint64(message.startFrom);
+        /* uint32 limit = 3; */
+        if (message.limit !== 0)
+            writer.tag(3, WireType.Varint).uint32(message.limit);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.Request
+ */
+export const AuthAPI_ListUserResources_Request = new AuthAPI_ListUserResources_Request$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_ListUserResources_Response$Type extends MessageType<AuthAPI_ListUserResources_Response> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.ListUserResources.Response", [
+            { no: 1, name: "user_root", kind: "message", oneof: "entry", T: () => AuthAPI_ListUserResources_UserRoot },
+            { no: 2, name: "shared_resource", kind: "message", oneof: "entry", T: () => AuthAPI_ListUserResources_SharedResource },
+            { no: 3, name: "next_resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_ListUserResources_Response>): AuthAPI_ListUserResources_Response {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.entry = { oneofKind: undefined };
+        message.nextResourceId = 0n;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_ListUserResources_Response>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources_Response): AuthAPI_ListUserResources_Response {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot user_root */ 1:
+                    message.entry = {
+                        oneofKind: "userRoot",
+                        userRoot: AuthAPI_ListUserResources_UserRoot.internalBinaryRead(reader, reader.uint32(), options, (message.entry as any).userRoot)
+                    };
+                    break;
+                case /* MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource shared_resource */ 2:
+                    message.entry = {
+                        oneofKind: "sharedResource",
+                        sharedResource: AuthAPI_ListUserResources_SharedResource.internalBinaryRead(reader, reader.uint32(), options, (message.entry as any).sharedResource)
+                    };
+                    break;
+                case /* uint64 next_resource_id */ 3:
+                    message.nextResourceId = reader.uint64().toBigInt();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_ListUserResources_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot user_root = 1; */
+        if (message.entry.oneofKind === "userRoot")
+            AuthAPI_ListUserResources_UserRoot.internalBinaryWrite(message.entry.userRoot, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        /* MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource shared_resource = 2; */
+        if (message.entry.oneofKind === "sharedResource")
+            AuthAPI_ListUserResources_SharedResource.internalBinaryWrite(message.entry.sharedResource, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+        /* uint64 next_resource_id = 3; */
+        if (message.nextResourceId !== 0n)
+            writer.tag(3, WireType.Varint).uint64(message.nextResourceId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.Response
+ */
+export const AuthAPI_ListUserResources_Response = new AuthAPI_ListUserResources_Response$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_ListUserResources_UserRoot$Type extends MessageType<AuthAPI_ListUserResources_UserRoot> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot", [
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_ListUserResources_UserRoot>): AuthAPI_ListUserResources_UserRoot {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.resourceId = 0n;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_ListUserResources_UserRoot>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources_UserRoot): AuthAPI_ListUserResources_UserRoot {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_ListUserResources_UserRoot, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot
+ */
+export const AuthAPI_ListUserResources_UserRoot = new AuthAPI_ListUserResources_UserRoot$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_ListUserResources_SharedResource$Type extends MessageType<AuthAPI_ListUserResources_SharedResource> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource", [
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_type", kind: "message", T: () => ResourceType },
+            { no: 4, name: "permissions", kind: "message", T: () => AuthAPI_Grant_Permissions }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_ListUserResources_SharedResource>): AuthAPI_ListUserResources_SharedResource {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.resourceId = 0n;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_ListUserResources_SharedResource>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources_SharedResource): AuthAPI_ListUserResources_SharedResource {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* optional bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
+                case /* MiLaboratories.PL.Base.ResourceType resource_type */ 3:
+                    message.resourceType = ResourceType.internalBinaryRead(reader, reader.uint32(), options, message.resourceType);
+                    break;
+                case /* MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions */ 4:
+                    message.permissions = AuthAPI_Grant_Permissions.internalBinaryRead(reader, reader.uint32(), options, message.permissions);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_ListUserResources_SharedResource, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* optional bytes resource_signature = 2; */
+        if (message.resourceSignature !== undefined)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
+        /* MiLaboratories.PL.Base.ResourceType resource_type = 3; */
+        if (message.resourceType)
+            ResourceType.internalBinaryWrite(message.resourceType, writer.tag(3, WireType.LengthDelimited).fork(), options).join();
+        /* MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 4; */
+        if (message.permissions)
+            AuthAPI_Grant_Permissions.internalBinaryWrite(message.permissions, writer.tag(4, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource
+ */
+export const AuthAPI_ListUserResources_SharedResource = new AuthAPI_ListUserResources_SharedResource$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class MiscAPI$Type extends MessageType<MiscAPI> {
+    constructor() {
+        super("MiLaboratories.PL.API.MiscAPI", []);
+    }
+    create(value?: PartialMessage<MiscAPI>): MiscAPI {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<MiscAPI>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MiscAPI): MiscAPI {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MiscAPI, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.MiscAPI
+ */
+export const MiscAPI = new MiscAPI$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class MiscAPI_ListResourceTypes$Type extends MessageType<MiscAPI_ListResourceTypes> {
+    constructor() {
+        super("MiLaboratories.PL.API.MiscAPI.ListResourceTypes", []);
+    }
+    create(value?: PartialMessage<MiscAPI_ListResourceTypes>): MiscAPI_ListResourceTypes {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<MiscAPI_ListResourceTypes>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MiscAPI_ListResourceTypes): MiscAPI_ListResourceTypes {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MiscAPI_ListResourceTypes, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes
+ */
+export const MiscAPI_ListResourceTypes = new MiscAPI_ListResourceTypes$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class MiscAPI_ListResourceTypes_Request$Type extends MessageType<MiscAPI_ListResourceTypes_Request> {
+    constructor() {
+        super("MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Request", []);
+    }
+    create(value?: PartialMessage<MiscAPI_ListResourceTypes_Request>): MiscAPI_ListResourceTypes_Request {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<MiscAPI_ListResourceTypes_Request>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MiscAPI_ListResourceTypes_Request): MiscAPI_ListResourceTypes_Request {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MiscAPI_ListResourceTypes_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Request
+ */
+export const MiscAPI_ListResourceTypes_Request = new MiscAPI_ListResourceTypes_Request$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class MiscAPI_ListResourceTypes_Response$Type extends MessageType<MiscAPI_ListResourceTypes_Response> {
+    constructor() {
+        super("MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Response", [
+            { no: 1, name: "types", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => ResourceType }
+        ]);
+    }
+    create(value?: PartialMessage<MiscAPI_ListResourceTypes_Response>): MiscAPI_ListResourceTypes_Response {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.types = [];
+        if (value !== undefined)
+            reflectionMergePartial<MiscAPI_ListResourceTypes_Response>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MiscAPI_ListResourceTypes_Response): MiscAPI_ListResourceTypes_Response {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated MiLaboratories.PL.Base.ResourceType types */ 1:
+                    message.types.push(ResourceType.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MiscAPI_ListResourceTypes_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated MiLaboratories.PL.Base.ResourceType types = 1; */
+        for (let i = 0; i < message.types.length; i++)
+            ResourceType.internalBinaryWrite(message.types[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.MiscAPI.ListResourceTypes.Response
+ */
+export const MiscAPI_ListResourceTypes_Response = new MiscAPI_ListResourceTypes_Response$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class MaintenanceAPI$Type extends MessageType<MaintenanceAPI> {
+    constructor() {
+        super("MiLaboratories.PL.API.MaintenanceAPI", []);
+    }
+    create(value?: PartialMessage<MaintenanceAPI>): MaintenanceAPI {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<MaintenanceAPI>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MaintenanceAPI): MaintenanceAPI {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MaintenanceAPI, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.MaintenanceAPI
+ */
+export const MaintenanceAPI = new MaintenanceAPI$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class MaintenanceAPI_Ping$Type extends MessageType<MaintenanceAPI_Ping> {
+    constructor() {
+        super("MiLaboratories.PL.API.MaintenanceAPI.Ping", []);
+    }
+    create(value?: PartialMessage<MaintenanceAPI_Ping>): MaintenanceAPI_Ping {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<MaintenanceAPI_Ping>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MaintenanceAPI_Ping): MaintenanceAPI_Ping {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MaintenanceAPI_Ping, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping
+ */
+export const MaintenanceAPI_Ping = new MaintenanceAPI_Ping$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class MaintenanceAPI_Ping_Request$Type extends MessageType<MaintenanceAPI_Ping_Request> {
+    constructor() {
+        super("MiLaboratories.PL.API.MaintenanceAPI.Ping.Request", []);
+    }
+    create(value?: PartialMessage<MaintenanceAPI_Ping_Request>): MaintenanceAPI_Ping_Request {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<MaintenanceAPI_Ping_Request>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MaintenanceAPI_Ping_Request): MaintenanceAPI_Ping_Request {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MaintenanceAPI_Ping_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.MaintenanceAPI.Ping.Request
+ */
+export const MaintenanceAPI_Ping_Request = new MaintenanceAPI_Ping_Request$Type();
 // @generated message type with reflection information, may provide speed optimized methods
 class MaintenanceAPI_Ping_Response$Type extends MessageType<MaintenanceAPI_Ping_Response> {
     constructor() {
         super("MiLaboratories.PL.API.MaintenanceAPI.Ping.Response", [
             { no: 1, name: "core_version", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 2, name: "core_full_version", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "server_info", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 4, name: "compression", kind: "enum", T: () => ["MiLaboratories.PL.API.MaintenanceAPI.Ping.Response.Compression", MaintenanceAPI_Ping_Response_Compression] },
             { no: 5, name: "instance_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 6, name: "platform", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
@@ -15720,7 +17598,6 @@ class MaintenanceAPI_Ping_Response$Type extends MessageType<MaintenanceAPI_Ping_
         const message = globalThis.Object.create((this.messagePrototype!));
         message.coreVersion = "";
         message.coreFullVersion = "";
-        message.serverInfo = "";
         message.compression = 0;
         message.instanceId = "";
         message.platform = "";
@@ -15741,9 +17618,6 @@ class MaintenanceAPI_Ping_Response$Type extends MessageType<MaintenanceAPI_Ping_
                 case /* string core_full_version */ 2:
                     message.coreFullVersion = reader.string();
                     break;
-                case /* string server_info */ 3:
-                    message.serverInfo = reader.string();
-                    break;
                 case /* MiLaboratories.PL.API.MaintenanceAPI.Ping.Response.Compression compression */ 4:
                     message.compression = reader.int32();
                     break;
@@ -15777,9 +17651,6 @@ class MaintenanceAPI_Ping_Response$Type extends MessageType<MaintenanceAPI_Ping_
         /* string core_full_version = 2; */
         if (message.coreFullVersion !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.coreFullVersion);
-        /* string server_info = 3; */
-        if (message.serverInfo !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.serverInfo);
         /* MiLaboratories.PL.API.MaintenanceAPI.Ping.Response.Compression compression = 4; */
         if (message.compression !== 0)
             writer.tag(4, WireType.Varint).int32(message.compression);
@@ -15944,6 +17815,82 @@ class MaintenanceAPI_License_Response$Type extends MessageType<MaintenanceAPI_Li
  * @generated MessageType for protobuf message MiLaboratories.PL.API.MaintenanceAPI.License.Response
  */
 export const MaintenanceAPI_License_Response = new MaintenanceAPI_License_Response$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class Util$Type extends MessageType<Util> {
+    constructor() {
+        super("MiLaboratories.PL.API.Util", []);
+    }
+    create(value?: PartialMessage<Util>): Util {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<Util>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: Util): Util {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: Util, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.Util
+ */
+export const Util = new Util$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class Util_Deprecated$Type extends MessageType<Util_Deprecated> {
+    constructor() {
+        super("MiLaboratories.PL.API.Util.Deprecated", []);
+    }
+    create(value?: PartialMessage<Util_Deprecated>): Util_Deprecated {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<Util_Deprecated>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: Util_Deprecated): Util_Deprecated {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: Util_Deprecated, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.Util.Deprecated
+ */
+export const Util_Deprecated = new Util_Deprecated$Type();
 /**
  * @generated ServiceType for protobuf service MiLaboratories.PL.API.Platform
  */
@@ -15966,11 +17913,16 @@ export const Platform = new ServiceType("MiLaboratories.PL.API.Platform", [
     { name: "GetControllerUrl", options: { "google.api.http": { post: "/v1/controller/url", body: "*" } }, I: ControllerAPI_GetUrl_Request, O: ControllerAPI_GetUrl_Response },
     { name: "ControllerSetFeatures", options: { "google.api.http": { post: "/v1/controller/features", body: "*" } }, I: ControllerAPI_SetFeatures_Request, O: ControllerAPI_SetFeatures_Response },
     { name: "ControllerClearFeatures", options: { "google.api.http": { delete: "/v1/controller/features", body: "*" } }, I: ControllerAPI_ClearFeatures_Request, O: ControllerAPI_ClearFeatures_Response },
-    { name: "LeaseResource", options: { "google.api.http": { post: "/v1/locks/lease", body: "*" } }, I: LocksAPI_Lease_Create_Request, O: LocksAPI_Lease_Create_Response },
-    { name: "UpdateLease", options: { "google.api.http": { put: "/v1/locks/lease", body: "*" } }, I: LocksAPI_Lease_Update_Request, O: LocksAPI_Lease_Update_Response },
-    { name: "ReleaseLease", options: { "google.api.http": { delete: "/v1/locks/lease", body: "*" } }, I: LocksAPI_Lease_Release_Request, O: LocksAPI_Lease_Release_Response },
+    { name: "LockFieldValues", options: { "google.api.http": { post: "/v1/locks/lock/create", body: "*" } }, I: LocksAPI_LockFieldValues_Create_Request, O: LocksAPI_LockFieldValues_Create_Response },
+    { name: "LeaseResource", options: { "google.api.http": { post: "/v1/locks/lease/create", body: "*" } }, I: LocksAPI_Lease_Create_Request, O: LocksAPI_Lease_Create_Response },
+    { name: "UpdateLease", options: { "google.api.http": { post: "/v1/locks/lease/update", body: "*" } }, I: LocksAPI_Lease_Update_Request, O: LocksAPI_Lease_Update_Response },
+    { name: "ReleaseLease", options: { "google.api.http": { post: "/v1/locks/lease/release", body: "*" } }, I: LocksAPI_Lease_Release_Request, O: LocksAPI_Lease_Release_Response },
     { name: "AuthMethods", options: { "google.api.http": { get: "/v1/auth/methods" } }, I: AuthAPI_ListMethods_Request, O: AuthAPI_ListMethods_Response },
     { name: "GetJWTToken", options: { "google.api.http": { post: "/v1/auth/jwt-token", body: "*" } }, I: AuthAPI_GetJWTToken_Request, O: AuthAPI_GetJWTToken_Response },
+    { name: "GrantAccess", options: { "google.api.http": { post: "/v1/auth/grant-access", body: "*" } }, I: AuthAPI_GrantAccess_Request, O: AuthAPI_GrantAccess_Response },
+    { name: "RevokeGrant", options: { "google.api.http": { post: "/v1/auth/revoke-grant", body: "*" } }, I: AuthAPI_RevokeGrant_Request, O: AuthAPI_RevokeGrant_Response },
+    { name: "ListGrants", serverStreaming: true, options: {}, I: AuthAPI_ListGrants_Request, O: AuthAPI_ListGrants_Response },
+    { name: "ListUserResources", serverStreaming: true, options: {}, I: AuthAPI_ListUserResources_Request, O: AuthAPI_ListUserResources_Response },
     { name: "ListResourceTypes", options: { "google.api.http": { get: "/v1/resource-types" } }, I: MiscAPI_ListResourceTypes_Request, O: MiscAPI_ListResourceTypes_Response },
     { name: "Ping", options: { "google.api.http": { get: "/v1/ping" } }, I: MaintenanceAPI_Ping_Request, O: MaintenanceAPI_Ping_Response },
     { name: "License", options: { "google.api.http": { get: "/v1/license" } }, I: MaintenanceAPI_License_Request, O: MaintenanceAPI_License_Response }