@milaboratories/pl-client 3.12.0 → 3.12.1

package/dist/core/user_resources.js.map

@@ -1 +1 @@
-{"version":3,"file":"user_resources.js","names":[],"sources":["../../src/core/user_resources.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { LLPlClient } from \"./ll_client\";\nimport type { PlTransaction } from \"./transaction\";\nimport { toGlobalResourceId } from \"./transaction\";\nimport type { OptionalSignedResourceId, SignedResourceId, ResourceType } from \"./types\";\nimport {\n  createSignedResourceId,\n  isNotNullSignedResourceId,\n  NullSignedResourceId,\n  toResourceSignature,\n} from \"./types\";\nimport { isUnimplementedError } from \"./errors\";\nimport { ClientRoot } from \"../helpers/pl\";\n\nconst AnonymousClientRoot = \"AnonymousRoot\";\nconst LsStorageTypePrefix = \"LS/\"; // implements ls API in particular storage\nconst LsProviderFieldPrefix = \"storage/\"; // provides access to storages list\n\n/** Information about a single data library (LS storage). */\nexport interface StorageInfo {\n  /** Machine-stable identifier, e.g. \"library\". Used for filtering and map keys. */\n  readonly storageId: string;\n  /** Human-readable display name. For V1/legacy equals storageId; for V2 from resource JSON data. */\n  readonly storageName: string;\n  /** Signed resource ID for this storage resource. */\n  readonly resourceId: SignedResourceId;\n  /** Full resource type including correct version (\"1\" or \"2\"). */\n  readonly resourceType: ResourceType;\n}\n\n/** V2 LsStorage resource JSON data shape (contract with backend). */\ninterface LsStorageV2Data {\n  storageName: string;\n  storageID: string;\n}\n\n/**\n * Callback type for running transactions. Matches PlClient._withTx signature\n * so the index can run transactions before PlClient is fully initialized.\n */\nexport type TxRunner = <T>(\n  name: string,\n  writable: boolean,\n  clientRoot: OptionalSignedResourceId,\n  body: (tx: PlTransaction) => Promise<T>,\n) => Promise<T>;\n\ntype BackendCapability = \"getUserRoot\" | \"listUserResources\" | \"legacy\";\n\n/**\n * Abstracts user resource discovery with backward compatibility.\n *\n * Detects backend capability on the first getUserRoot() call and remembers\n * the result. Three-tier fallback:\n * 1. getUserRoot RPC (newest, supports createIfNotExists)\n * 2. listUserResources RPC (streams all resources, picks userRoot)\n * 3. Named resource lookup/creation via transaction (legacy)\n */\nexport class UserResources {\n  private backendCapability: BackendCapability | undefined;\n\n  constructor(\n    private readonly ll: LLPlClient,\n    private readonly runTx: TxRunner,\n    public readonly authUser: string | null,\n  ) {}\n\n  /**\n   * Returns the user's root resource ID.\n   *\n   * On first call, detects backend capability by trying methods in order:\n   * 1. getUserRoot RPC (newest)\n   * 2. listUserResources RPC\n   * 3. Named resource lookup/creation via transaction (legacy)\n   */\n  async getUserRoot(opts: { login?: string; createIfNotExists: true }): Promise<SignedResourceId>;\n  async getUserRoot(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  async getUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    if (this.backendCapability === undefined) {\n      return await this.detectAndGetUserRoot(opts);\n    }\n    return await this.getUserRootWith(this.backendCapability, opts);\n  }\n\n  private async detectAndGetUserRoot(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  private async detectAndGetUserRoot(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  private async detectAndGetUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    // 1. Try getUserRoot RPC\n    try {\n      const root = await this.getUserRootViaRpc(opts);\n      this.backendCapability = \"getUserRoot\";\n      return root;\n    } catch (err) {\n      if (!isUnimplementedError(err)) throw err;\n    }\n\n    // 2. Try listUserResources\n    try {\n      const root = await this.getUserRootViaList(opts);\n      this.backendCapability = \"listUserResources\";\n      return root;\n    } catch (err) {\n      if (!isUnimplementedError(err)) throw err;\n    }\n\n    // 3. Legacy fallback\n    this.backendCapability = \"legacy\";\n    return await this.getUserRootViaLegacy(opts);\n  }\n\n  private async getUserRootWith(\n    capability: BackendCapability,\n    opts: { login?: string; createIfNotExists: true },\n  ): Promise<SignedResourceId>;\n  private async getUserRootWith(\n    capability: BackendCapability,\n    opts?: { login?: string; createIfNotExists?: boolean },\n  ): Promise<SignedResourceId | undefined>;\n  private async getUserRootWith(\n    capability: BackendCapability,\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    switch (capability) {\n      case \"getUserRoot\":\n        return await this.getUserRootViaRpc(opts);\n      case \"listUserResources\":\n        return await this.getUserRootViaList(opts);\n      case \"legacy\":\n        return await this.getUserRootViaLegacy(opts);\n    }\n  }\n\n  /**\n   * Returns all data libraries the user has access to.\n   * Always fetches fresh from the server (no caching).\n   */\n  async getDataLibraries(\n    opts: { login?: string; createUserRootIfNotExists?: boolean } = {},\n  ): Promise<ReadonlyMap<string, StorageInfo>> {\n    if (this.backendCapability === undefined) {\n      // First call — detect backend capability\n      try {\n        const libs = await this.getDataLibrariesViaList(opts);\n        // getUserRoot RPC doesn't return libraries, but listUserResources does;\n        // record at least \"listUserResources\" so future getUserRoot calls don't re-detect.\n        this.backendCapability = \"listUserResources\";\n        return libs;\n      } catch (err) {\n        if (!isUnimplementedError(err)) throw err;\n        this.backendCapability = \"legacy\";\n        return await this.getDataLibrariesViaLegacy();\n      }\n    }\n\n    // A server that supports getUserRoot definitely supports listUserResources.\n    if (this.backendCapability !== \"legacy\") {\n      return await this.getDataLibrariesViaList(opts);\n    }\n    return await this.getDataLibrariesViaLegacy();\n  }\n\n  private async getUserRootViaRpc(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  private async getUserRootViaRpc(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  private async getUserRootViaRpc(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    const resp = await this.ll.getUserRoot({\n      login: opts.login,\n      createIfNotExists: opts.createIfNotExists,\n    });\n    if (resp.userRoot === undefined) {\n      if (!opts.createIfNotExists) return undefined;\n      throw new Error(\"getUserRoot returned no userRoot entry\");\n    }\n    return createSignedResourceId(\n      resp.userRoot.resourceId,\n      toResourceSignature(resp.userRoot.resourceSignature),\n    );\n  }\n\n  private async getUserRootViaList(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  private async getUserRootViaList(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  private async getUserRootViaList(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    const responses = await this.ll.listUserResources({ login: opts.login, limit: 1 });\n    for (const msg of responses) {\n      if (msg.entry.oneofKind === \"userRoot\") {\n        return createSignedResourceId(\n          msg.entry.userRoot.resourceId,\n          toResourceSignature(msg.entry.userRoot.resourceSignature),\n        );\n      }\n    }\n\n    if (opts.createIfNotExists) {\n      throw new Error(\"listUserResources returned no userRoot entry\");\n    }\n\n    return undefined;\n  }\n\n  private async getDataLibrariesViaList(\n    opts: { login?: string } = {},\n  ): Promise<ReadonlyMap<string, StorageInfo>> {\n    const responses = await this.ll.listUserResources({ login: opts.login });\n\n    // Collect all LS/* shared resources, separating V1 and V2\n    const v1Entries: StorageInfo[] = [];\n    const v2ResourceIds: { resourceId: SignedResourceId; resourceType: ResourceType }[] = [];\n\n    for (const msg of responses) {\n      if (msg.entry.oneofKind !== \"sharedResource\") continue;\n      const sr = msg.entry.sharedResource;\n\n      if (!sr.resourceType) continue;\n      const typeName = sr.resourceType.name;\n      const typeVersion = sr.resourceType.version;\n      if (!typeName.startsWith(LsStorageTypePrefix)) continue;\n\n      const rId = createSignedResourceId(sr.resourceId, toResourceSignature(sr.resourceSignature));\n      const rType: ResourceType = { name: typeName, version: typeVersion };\n\n      if (typeVersion === \"2\") {\n        v2ResourceIds.push({ resourceId: rId, resourceType: rType });\n      } else {\n        // V1 or unknown version: derive storageId from type name\n        const storageId = typeName.substring(LsStorageTypePrefix.length);\n        v1Entries.push({\n          storageId,\n          storageName: storageId,\n          resourceId: rId,\n          resourceType: rType,\n        });\n      }\n    }\n\n    // Read V2 resource data in a single transaction\n    let v2Entries: StorageInfo[] = [];\n    if (v2ResourceIds.length > 0) {\n      v2Entries = await this.runTx(\n        \"ReadLsStorageV2Data\",\n        false,\n        NullSignedResourceId,\n        async (tx) => {\n          const entries: StorageInfo[] = [];\n          for (const { resourceId, resourceType } of v2ResourceIds) {\n            const rd = await tx.getResourceData(resourceId, false);\n            if (rd.data) {\n              const v2Data = JSON.parse(Buffer.from(rd.data).toString(\"utf-8\")) as LsStorageV2Data;\n              entries.push({\n                storageId: v2Data.storageID,\n                storageName: v2Data.storageName,\n                resourceId,\n                resourceType,\n              });\n            }\n          }\n          return entries;\n        },\n      );\n    }\n\n    const result = new Map<string, StorageInfo>();\n    for (const entry of [...v1Entries, ...v2Entries]) {\n      result.set(entry.storageId, entry);\n    }\n    return result;\n  }\n\n  private async getUserRootViaLegacy(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  private async getUserRootViaLegacy(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  private async getUserRootViaLegacy(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    const login = opts.login ?? this.authUser;\n    const mainRootName =\n      login === null ? AnonymousClientRoot : createHash(\"sha256\").update(login).digest(\"hex\");\n\n    return await this.runTx(\"initialization\", true, NullSignedResourceId, async (tx) => {\n      if (await tx.checkResourceNameExists(mainRootName)) {\n        return await tx.getResourceByName(mainRootName);\n      }\n\n      if (!opts.createIfNotExists) {\n        return undefined;\n      }\n\n      const mainRoot = tx.createRoot(ClientRoot);\n      tx.setResourceName(mainRootName, mainRoot);\n      await tx.commit();\n      return await toGlobalResourceId(mainRoot);\n    });\n  }\n\n  private async getDataLibrariesViaLegacy(): Promise<ReadonlyMap<string, StorageInfo>> {\n    return await this.runTx(\"GetAvailableStorageIds\", false, NullSignedResourceId, async (tx) => {\n      const lsProviderId = await tx.getResourceByName(\"LSProvider\");\n      const provider = await tx.getResourceData(lsProviderId, true);\n\n      const result = new Map<string, StorageInfo>();\n      for (const field of provider.fields) {\n        if (field.type !== \"Dynamic\" || !isNotNullSignedResourceId(field.value)) continue;\n        if (!field.name.startsWith(LsProviderFieldPrefix)) continue;\n\n        const storageId = field.name.substring(LsProviderFieldPrefix.length);\n        result.set(storageId, {\n          storageId,\n          storageName: storageId,\n          resourceId: field.value,\n          resourceType: { name: `${LsStorageTypePrefix}${storageId}`, version: \"1\" },\n        });\n      }\n      return result;\n    });\n  }\n}\n"],"mappings":";;;;;;AAcA,MAAM,sBAAsB;AAC5B,MAAM,sBAAsB;AAC5B,MAAM,wBAAwB;;;;;;;;;;AA0C9B,IAAa,gBAAb,MAA2B;CAIN;CACA;CACD;CALlB;CAEA,YACE,IACA,OACA,UACA;EAHiB,KAAA,KAAA;EACA,KAAA,QAAA;EACD,KAAA,WAAA;CACf;CAeH,MAAM,YACJ,OAAwD,CAAC,GAClB;EACvC,IAAI,KAAK,sBAAsB,KAAA,GAC7B,OAAO,MAAM,KAAK,qBAAqB,IAAI;EAE7C,OAAO,MAAM,KAAK,gBAAgB,KAAK,mBAAmB,IAAI;CAChE;CAUA,MAAc,qBACZ,OAAwD,CAAC,GAClB;EAEvC,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,kBAAkB,IAAI;GAC9C,KAAK,oBAAoB;GACzB,OAAO;EACT,SAAS,KAAK;GACZ,IAAI,CAAC,qBAAqB,GAAG,GAAG,MAAM;EACxC;EAGA,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,mBAAmB,IAAI;GAC/C,KAAK,oBAAoB;GACzB,OAAO;EACT,SAAS,KAAK;GACZ,IAAI,CAAC,qBAAqB,GAAG,GAAG,MAAM;EACxC;EAGA,KAAK,oBAAoB;EACzB,OAAO,MAAM,KAAK,qBAAqB,IAAI;CAC7C;CAUA,MAAc,gBACZ,YACA,OAAwD,CAAC,GAClB;EACvC,QAAQ,YAAR;GACE,KAAK,eACH,OAAO,MAAM,KAAK,kBAAkB,IAAI;GAC1C,KAAK,qBACH,OAAO,MAAM,KAAK,mBAAmB,IAAI;GAC3C,KAAK,UACH,OAAO,MAAM,KAAK,qBAAqB,IAAI;EAC/C;CACF;;;;;CAMA,MAAM,iBACJ,OAAgE,CAAC,GACtB;EAC3C,IAAI,KAAK,sBAAsB,KAAA,GAE7B,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,wBAAwB,IAAI;GAGpD,KAAK,oBAAoB;GACzB,OAAO;EACT,SAAS,KAAK;GACZ,IAAI,CAAC,qBAAqB,GAAG,GAAG,MAAM;GACtC,KAAK,oBAAoB;GACzB,OAAO,MAAM,KAAK,0BAA0B;EAC9C;EAIF,IAAI,KAAK,sBAAsB,UAC7B,OAAO,MAAM,KAAK,wBAAwB,IAAI;EAEhD,OAAO,MAAM,KAAK,0BAA0B;CAC9C;CAUA,MAAc,kBACZ,OAAwD,CAAC,GAClB;EACvC,MAAM,OAAO,MAAM,KAAK,GAAG,YAAY;GACrC,OAAO,KAAK;GACZ,mBAAmB,KAAK;EAC1B,CAAC;EACD,IAAI,KAAK,aAAa,KAAA,GAAW;GAC/B,IAAI,CAAC,KAAK,mBAAmB,OAAO,KAAA;GACpC,MAAM,IAAI,MAAM,wCAAwC;EAC1D;EACA,OAAO,uBACL,KAAK,SAAS,YACd,oBAAoB,KAAK,SAAS,iBAAiB,CACrD;CACF;CAUA,MAAc,mBACZ,OAAwD,CAAC,GAClB;EACvC,MAAM,YAAY,MAAM,KAAK,GAAG,kBAAkB;GAAE,OAAO,KAAK;GAAO,OAAO;EAAE,CAAC;EACjF,KAAK,MAAM,OAAO,WAChB,IAAI,IAAI,MAAM,cAAc,YAC1B,OAAO,uBACL,IAAI,MAAM,SAAS,YACnB,oBAAoB,IAAI,MAAM,SAAS,iBAAiB,CAC1D;EAIJ,IAAI,KAAK,mBACP,MAAM,IAAI,MAAM,8CAA8C;CAIlE;CAEA,MAAc,wBACZ,OAA2B,CAAC,GACe;EAC3C,MAAM,YAAY,MAAM,KAAK,GAAG,kBAAkB,EAAE,OAAO,KAAK,MAAM,CAAC;EAGvE,MAAM,YAA2B,CAAC;EAClC,MAAM,gBAAgF,CAAC;EAEvF,KAAK,MAAM,OAAO,WAAW;GAC3B,IAAI,IAAI,MAAM,cAAc,kBAAkB;GAC9C,MAAM,KAAK,IAAI,MAAM;GAErB,IAAI,CAAC,GAAG,cAAc;GACtB,MAAM,WAAW,GAAG,aAAa;GACjC,MAAM,cAAc,GAAG,aAAa;GACpC,IAAI,CAAC,SAAS,WAAW,mBAAmB,GAAG;GAE/C,MAAM,MAAM,uBAAuB,GAAG,YAAY,oBAAoB,GAAG,iBAAiB,CAAC;GAC3F,MAAM,QAAsB;IAAE,MAAM;IAAU,SAAS;GAAY;GAEnE,IAAI,gBAAgB,KAClB,cAAc,KAAK;IAAE,YAAY;IAAK,cAAc;GAAM,CAAC;QACtD;IAEL,MAAM,YAAY,SAAS,UAAU,CAA0B;IAC/D,UAAU,KAAK;KACb;KACA,aAAa;KACb,YAAY;KACZ,cAAc;IAChB,CAAC;GACH;EACF;EAGA,IAAI,YAA2B,CAAC;EAChC,IAAI,cAAc,SAAS,GACzB,YAAY,MAAM,KAAK,MACrB,uBACA,OAAA,IAEA,OAAO,OAAO;GACZ,MAAM,UAAyB,CAAC;GAChC,KAAK,MAAM,EAAE,YAAY,kBAAkB,eAAe;IACxD,MAAM,KAAK,MAAM,GAAG,gBAAgB,YAAY,KAAK;IACrD,IAAI,GAAG,MAAM;KACX,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,SAAS,OAAO,CAAC;KAChE,QAAQ,KAAK;MACX,WAAW,OAAO;MAClB,aAAa,OAAO;MACpB;MACA;KACF,CAAC;IACH;GACF;GACA,OAAO;EACT,CACF;EAGF,MAAM,yBAAS,IAAI,IAAyB;EAC5C,KAAK,MAAM,SAAS,CAAC,GAAG,WAAW,GAAG,SAAS,GAC7C,OAAO,IAAI,MAAM,WAAW,KAAK;EAEnC,OAAO;CACT;CAUA,MAAc,qBACZ,OAAwD,CAAC,GAClB;EACvC,MAAM,QAAQ,KAAK,SAAS,KAAK;EACjC,MAAM,eACJ,UAAU,OAAO,sBAAsB,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;EAExF,OAAO,MAAM,KAAK,MAAM,kBAAkB,MAAA,IAA4B,OAAO,OAAO;GAClF,IAAI,MAAM,GAAG,wBAAwB,YAAY,GAC/C,OAAO,MAAM,GAAG,kBAAkB,YAAY;GAGhD,IAAI,CAAC,KAAK,mBACR;GAGF,MAAM,WAAW,GAAG,WAAW,UAAU;GACzC,GAAG,gBAAgB,cAAc,QAAQ;GACzC,MAAM,GAAG,OAAO;GAChB,OAAO,MAAM,mBAAmB,QAAQ;EAC1C,CAAC;CACH;CAEA,MAAc,4BAAuE;EACnF,OAAO,MAAM,KAAK,MAAM,0BAA0B,OAAA,IAA6B,OAAO,OAAO;GAC3F,MAAM,eAAe,MAAM,GAAG,kBAAkB,YAAY;GAC5D,MAAM,WAAW,MAAM,GAAG,gBAAgB,cAAc,IAAI;GAE5D,MAAM,yBAAS,IAAI,IAAyB;GAC5C,KAAK,MAAM,SAAS,SAAS,QAAQ;IACnC,IAAI,MAAM,SAAS,aAAa,CAAC,0BAA0B,MAAM,KAAK,GAAG;IACzE,IAAI,CAAC,MAAM,KAAK,WAAW,qBAAqB,GAAG;IAEnD,MAAM,YAAY,MAAM,KAAK,UAAU,CAA4B;IACnE,OAAO,IAAI,WAAW;KACpB;KACA,aAAa;KACb,YAAY,MAAM;KAClB,cAAc;MAAE,MAAM,GAAG,sBAAsB;MAAa,SAAS;KAAI;IAC3E,CAAC;GACH;GACA,OAAO;EACT,CAAC;CACH;AACF"}
+{"version":3,"file":"user_resources.js","names":[],"sources":["../../src/core/user_resources.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { LLPlClient } from \"./ll_client\";\nimport type { PlTransaction } from \"./transaction\";\nimport { toGlobalResourceId } from \"./transaction\";\nimport type { OptionalSignedResourceId, SignedResourceId, ResourceType } from \"./types\";\nimport {\n  createSignedResourceId,\n  isNotNullSignedResourceId,\n  NullSignedResourceId,\n  toResourceSignature,\n} from \"./types\";\nimport { isUnimplementedError } from \"./errors\";\nimport { ClientRoot } from \"../helpers/pl\";\n\nconst AnonymousClientRoot = \"AnonymousRoot\";\nconst LsStorageTypePrefix = \"LS/\"; // implements ls API in particular storage\nconst LsProviderFieldPrefix = \"storage/\"; // provides access to storages list\n\n/** One recipient of a resource, as returned by {@link UserResources.listGrants}. */\nexport interface GrantEntry {\n  /** Login the grant targets. An everyone-grant surfaces here as the backend's\n   *  everyone-sentinel — test with {@link isEveryoneUserLogin} (from \"./transaction\"); callers\n   *  map it to \"*\". */\n  readonly user: string;\n  /** True for a writable grant (copy / collaboration), false for read-only. */\n  readonly writable: boolean;\n  /** Login of the user who created the grant. */\n  readonly grantedBy: string;\n  /** When the grant was created (ms epoch). */\n  readonly grantedAt: number;\n}\n\n/** One user known to the server, as returned by {@link UserResources.listUsers}. */\nexport interface UserEntry {\n  /** Stable identifier of the user; the grant target and `GetUserRoot` key. */\n  readonly login: string;\n}\n\n/** Information about a single data library (LS storage). */\nexport interface StorageInfo {\n  /** Machine-stable identifier, e.g. \"library\". Used for filtering and map keys. */\n  readonly storageId: string;\n  /** Human-readable display name. For V1/legacy equals storageId; for V2 from resource JSON data. */\n  readonly storageName: string;\n  /** Signed resource ID for this storage resource. */\n  readonly resourceId: SignedResourceId;\n  /** Full resource type including correct version (\"1\" or \"2\"). */\n  readonly resourceType: ResourceType;\n}\n\n/** V2 LsStorage resource JSON data shape (contract with backend). */\ninterface LsStorageV2Data {\n  storageName: string;\n  storageID: string;\n}\n\n/**\n * Callback type for running transactions. Matches PlClient._withTx signature\n * so the index can run transactions before PlClient is fully initialized.\n */\nexport type TxRunner = <T>(\n  name: string,\n  writable: boolean,\n  clientRoot: OptionalSignedResourceId,\n  body: (tx: PlTransaction) => Promise<T>,\n) => Promise<T>;\n\ntype BackendCapability = \"getUserRoot\" | \"listUserResources\" | \"legacy\";\n\n/**\n * Abstracts user resource discovery with backward compatibility.\n *\n * Detects backend capability on the first getUserRoot() call and remembers\n * the result. Three-tier fallback:\n * 1. getUserRoot RPC (newest, supports createIfNotExists)\n * 2. listUserResources RPC (streams all resources, picks userRoot)\n * 3. Named resource lookup/creation via transaction (legacy)\n */\nexport class UserResources {\n  private backendCapability: BackendCapability | undefined;\n\n  constructor(\n    private readonly ll: LLPlClient,\n    private readonly runTx: TxRunner,\n    public readonly authUser: string | null,\n  ) {}\n\n  /**\n   * Returns the user's root resource ID.\n   *\n   * On first call, detects backend capability by trying methods in order:\n   * 1. getUserRoot RPC (newest)\n   * 2. listUserResources RPC\n   * 3. Named resource lookup/creation via transaction (legacy)\n   */\n  async getUserRoot(opts: { login?: string; createIfNotExists: true }): Promise<SignedResourceId>;\n  async getUserRoot(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  async getUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    if (this.backendCapability === undefined) {\n      return await this.detectAndGetUserRoot(opts);\n    }\n    return await this.getUserRootWith(this.backendCapability, opts);\n  }\n\n  private async detectAndGetUserRoot(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  private async detectAndGetUserRoot(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  private async detectAndGetUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    // 1. Try getUserRoot RPC\n    try {\n      const root = await this.getUserRootViaRpc(opts);\n      this.backendCapability = \"getUserRoot\";\n      return root;\n    } catch (err) {\n      if (!isUnimplementedError(err)) throw err;\n    }\n\n    // 2. Try listUserResources\n    try {\n      const root = await this.getUserRootViaList(opts);\n      this.backendCapability = \"listUserResources\";\n      return root;\n    } catch (err) {\n      if (!isUnimplementedError(err)) throw err;\n    }\n\n    // 3. Legacy fallback\n    this.backendCapability = \"legacy\";\n    return await this.getUserRootViaLegacy(opts);\n  }\n\n  private async getUserRootWith(\n    capability: BackendCapability,\n    opts: { login?: string; createIfNotExists: true },\n  ): Promise<SignedResourceId>;\n  private async getUserRootWith(\n    capability: BackendCapability,\n    opts?: { login?: string; createIfNotExists?: boolean },\n  ): Promise<SignedResourceId | undefined>;\n  private async getUserRootWith(\n    capability: BackendCapability,\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    switch (capability) {\n      case \"getUserRoot\":\n        return await this.getUserRootViaRpc(opts);\n      case \"listUserResources\":\n        return await this.getUserRootViaList(opts);\n      case \"legacy\":\n        return await this.getUserRootViaLegacy(opts);\n    }\n  }\n\n  /**\n   * Returns all data libraries the user has access to.\n   * Always fetches fresh from the server (no caching).\n   */\n  async getDataLibraries(\n    opts: { login?: string; createUserRootIfNotExists?: boolean } = {},\n  ): Promise<ReadonlyMap<string, StorageInfo>> {\n    if (this.backendCapability === undefined) {\n      // First call — detect backend capability\n      try {\n        const libs = await this.getDataLibrariesViaList(opts);\n        // getUserRoot RPC doesn't return libraries, but listUserResources does;\n        // record at least \"listUserResources\" so future getUserRoot calls don't re-detect.\n        this.backendCapability = \"listUserResources\";\n        return libs;\n      } catch (err) {\n        if (!isUnimplementedError(err)) throw err;\n        this.backendCapability = \"legacy\";\n        return await this.getDataLibrariesViaLegacy();\n      }\n    }\n\n    // A server that supports getUserRoot definitely supports listUserResources.\n    if (this.backendCapability !== \"legacy\") {\n      return await this.getDataLibrariesViaList(opts);\n    }\n    return await this.getDataLibrariesViaLegacy();\n  }\n\n  /**\n   * Discovers shared resources of a given type granted to the user, as signed resource ids.\n   *\n   * The public, type-filtered form of {@link getDataLibrariesViaList}: it polls the\n   * `ListUserResources` gRPC stream and returns every `sharedResource` entry whose\n   * `resourceType.name` matches `resourceTypeName`. Matching is by name only — the\n   * version is ignored (permissive, survives schema bumps).\n   *\n   * gRPC-only: `ListUserResources` throws on a REST-connected client\n   * ({@link LLPlClient.listUserResources}), so callers on REST get a thrown error.\n   */\n  async listSharedResourcesByType(\n    resourceTypeName: string,\n    opts: { login?: string } = {},\n  ): Promise<SignedResourceId[]> {\n    const responses = await this.ll.listUserResources({ login: opts.login });\n\n    const result: SignedResourceId[] = [];\n    for (const msg of responses) {\n      if (msg.entry.oneofKind !== \"sharedResource\") continue;\n      const sr = msg.entry.sharedResource;\n      if (!sr.resourceType) continue;\n      if (sr.resourceType.name !== resourceTypeName) continue;\n      result.push(createSignedResourceId(sr.resourceId, toResourceSignature(sr.resourceSignature)));\n    }\n    return result;\n  }\n\n  /**\n   * Enumerates the recipients of a single resource — the donor-side \"who did I\n   * share with\" view.\n   *\n   * Takes a signed, writable resource handle: the backend gates grant listing on a\n   * signed resource id with writable permission, so only the resource's owner can\n   * call it. An everyone-grant surfaces with `user` matching the backend's\n   * everyone-sentinel — test with {@link isEveryoneUserLogin} (from \"./transaction\");\n   * the caller maps that to \"*\".\n   *\n   * Runs over a read transaction ({@link PlTransaction.listGrants}), so it works on\n   * every wire protocol — including REST, where the standalone server-streaming\n   * `ListGrants` RPC has no binding.\n   */\n  async listGrants(resourceId: SignedResourceId): Promise<GrantEntry[]> {\n    const grants = await this.runTx(\"ListGrants\", false, NullSignedResourceId, (tx) =>\n      tx.listGrants(resourceId),\n    );\n    return grants.map((grant) => ({\n      user: grant.user,\n      writable: grant.permissions?.writable ?? false,\n      grantedBy: grant.grantedBy,\n      grantedAt: Number(grant.grantedAt),\n    }));\n  }\n\n  /**\n   * Lists the logins of users known to the server, for the recipient picker. A user becomes\n   * known on first login; provisioned users who have never logged in do not appear. gRPC-only\n   * (the underlying {@link LLPlClient.listUsers} has no REST binding) — throws on a\n   * REST-connected client, so callers gate on the `userListing:v1` capability.\n   */\n  async listUsers(): Promise<UserEntry[]> {\n    const users = await this.ll.listUsers();\n    return users.map((user) => ({ login: user.login }));\n  }\n\n  private async getUserRootViaRpc(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  private async getUserRootViaRpc(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  private async getUserRootViaRpc(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    const resp = await this.ll.getUserRoot({\n      login: opts.login,\n      createIfNotExists: opts.createIfNotExists,\n    });\n    if (resp.userRoot === undefined) {\n      if (!opts.createIfNotExists) return undefined;\n      throw new Error(\"getUserRoot returned no userRoot entry\");\n    }\n    return createSignedResourceId(\n      resp.userRoot.resourceId,\n      toResourceSignature(resp.userRoot.resourceSignature),\n    );\n  }\n\n  private async getUserRootViaList(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  private async getUserRootViaList(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  private async getUserRootViaList(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    const responses = await this.ll.listUserResources({ login: opts.login, limit: 1 });\n    for (const msg of responses) {\n      if (msg.entry.oneofKind === \"userRoot\") {\n        return createSignedResourceId(\n          msg.entry.userRoot.resourceId,\n          toResourceSignature(msg.entry.userRoot.resourceSignature),\n        );\n      }\n    }\n\n    if (opts.createIfNotExists) {\n      throw new Error(\"listUserResources returned no userRoot entry\");\n    }\n\n    return undefined;\n  }\n\n  private async getDataLibrariesViaList(\n    opts: { login?: string } = {},\n  ): Promise<ReadonlyMap<string, StorageInfo>> {\n    const responses = await this.ll.listUserResources({ login: opts.login });\n\n    // Collect all LS/* shared resources, separating V1 and V2\n    const v1Entries: StorageInfo[] = [];\n    const v2ResourceIds: { resourceId: SignedResourceId; resourceType: ResourceType }[] = [];\n\n    for (const msg of responses) {\n      if (msg.entry.oneofKind !== \"sharedResource\") continue;\n      const sr = msg.entry.sharedResource;\n\n      if (!sr.resourceType) continue;\n      const typeName = sr.resourceType.name;\n      const typeVersion = sr.resourceType.version;\n      if (!typeName.startsWith(LsStorageTypePrefix)) continue;\n\n      const rId = createSignedResourceId(sr.resourceId, toResourceSignature(sr.resourceSignature));\n      const rType: ResourceType = { name: typeName, version: typeVersion };\n\n      if (typeVersion === \"2\") {\n        v2ResourceIds.push({ resourceId: rId, resourceType: rType });\n      } else {\n        // V1 or unknown version: derive storageId from type name\n        const storageId = typeName.substring(LsStorageTypePrefix.length);\n        v1Entries.push({\n          storageId,\n          storageName: storageId,\n          resourceId: rId,\n          resourceType: rType,\n        });\n      }\n    }\n\n    // Read V2 resource data in a single transaction\n    let v2Entries: StorageInfo[] = [];\n    if (v2ResourceIds.length > 0) {\n      v2Entries = await this.runTx(\n        \"ReadLsStorageV2Data\",\n        false,\n        NullSignedResourceId,\n        async (tx) => {\n          const entries: StorageInfo[] = [];\n          for (const { resourceId, resourceType } of v2ResourceIds) {\n            const rd = await tx.getResourceData(resourceId, false);\n            if (rd.data) {\n              const v2Data = JSON.parse(Buffer.from(rd.data).toString(\"utf-8\")) as LsStorageV2Data;\n              entries.push({\n                storageId: v2Data.storageID,\n                storageName: v2Data.storageName,\n                resourceId,\n                resourceType,\n              });\n            }\n          }\n          return entries;\n        },\n      );\n    }\n\n    const result = new Map<string, StorageInfo>();\n    for (const entry of [...v1Entries, ...v2Entries]) {\n      result.set(entry.storageId, entry);\n    }\n    return result;\n  }\n\n  private async getUserRootViaLegacy(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  private async getUserRootViaLegacy(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  private async getUserRootViaLegacy(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    const login = opts.login ?? this.authUser;\n    const mainRootName =\n      login === null ? AnonymousClientRoot : createHash(\"sha256\").update(login).digest(\"hex\");\n\n    return await this.runTx(\"initialization\", true, NullSignedResourceId, async (tx) => {\n      if (await tx.checkResourceNameExists(mainRootName)) {\n        return await tx.getResourceByName(mainRootName);\n      }\n\n      if (!opts.createIfNotExists) {\n        return undefined;\n      }\n\n      const mainRoot = tx.createRoot(ClientRoot);\n      tx.setResourceName(mainRootName, mainRoot);\n      await tx.commit();\n      return await toGlobalResourceId(mainRoot);\n    });\n  }\n\n  private async getDataLibrariesViaLegacy(): Promise<ReadonlyMap<string, StorageInfo>> {\n    return await this.runTx(\"GetAvailableStorageIds\", false, NullSignedResourceId, async (tx) => {\n      const lsProviderId = await tx.getResourceByName(\"LSProvider\");\n      const provider = await tx.getResourceData(lsProviderId, true);\n\n      const result = new Map<string, StorageInfo>();\n      for (const field of provider.fields) {\n        if (field.type !== \"Dynamic\" || !isNotNullSignedResourceId(field.value)) continue;\n        if (!field.name.startsWith(LsProviderFieldPrefix)) continue;\n\n        const storageId = field.name.substring(LsProviderFieldPrefix.length);\n        result.set(storageId, {\n          storageId,\n          storageName: storageId,\n          resourceId: field.value,\n          resourceType: { name: `${LsStorageTypePrefix}${storageId}`, version: \"1\" },\n        });\n      }\n      return result;\n    });\n  }\n}\n"],"mappings":";;;;;;AAcA,MAAM,sBAAsB;AAC5B,MAAM,sBAAsB;AAC5B,MAAM,wBAAwB;;;;;;;;;;AA8D9B,IAAa,gBAAb,MAA2B;CAIN;CACA;CACD;CALlB;CAEA,YACE,IACA,OACA,UACA;EAHiB,KAAA,KAAA;EACA,KAAA,QAAA;EACD,KAAA,WAAA;CACf;CAeH,MAAM,YACJ,OAAwD,CAAC,GAClB;EACvC,IAAI,KAAK,sBAAsB,KAAA,GAC7B,OAAO,MAAM,KAAK,qBAAqB,IAAI;EAE7C,OAAO,MAAM,KAAK,gBAAgB,KAAK,mBAAmB,IAAI;CAChE;CAUA,MAAc,qBACZ,OAAwD,CAAC,GAClB;EAEvC,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,kBAAkB,IAAI;GAC9C,KAAK,oBAAoB;GACzB,OAAO;EACT,SAAS,KAAK;GACZ,IAAI,CAAC,qBAAqB,GAAG,GAAG,MAAM;EACxC;EAGA,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,mBAAmB,IAAI;GAC/C,KAAK,oBAAoB;GACzB,OAAO;EACT,SAAS,KAAK;GACZ,IAAI,CAAC,qBAAqB,GAAG,GAAG,MAAM;EACxC;EAGA,KAAK,oBAAoB;EACzB,OAAO,MAAM,KAAK,qBAAqB,IAAI;CAC7C;CAUA,MAAc,gBACZ,YACA,OAAwD,CAAC,GAClB;EACvC,QAAQ,YAAR;GACE,KAAK,eACH,OAAO,MAAM,KAAK,kBAAkB,IAAI;GAC1C,KAAK,qBACH,OAAO,MAAM,KAAK,mBAAmB,IAAI;GAC3C,KAAK,UACH,OAAO,MAAM,KAAK,qBAAqB,IAAI;EAC/C;CACF;;;;;CAMA,MAAM,iBACJ,OAAgE,CAAC,GACtB;EAC3C,IAAI,KAAK,sBAAsB,KAAA,GAE7B,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,wBAAwB,IAAI;GAGpD,KAAK,oBAAoB;GACzB,OAAO;EACT,SAAS,KAAK;GACZ,IAAI,CAAC,qBAAqB,GAAG,GAAG,MAAM;GACtC,KAAK,oBAAoB;GACzB,OAAO,MAAM,KAAK,0BAA0B;EAC9C;EAIF,IAAI,KAAK,sBAAsB,UAC7B,OAAO,MAAM,KAAK,wBAAwB,IAAI;EAEhD,OAAO,MAAM,KAAK,0BAA0B;CAC9C;;;;;;;;;;;;CAaA,MAAM,0BACJ,kBACA,OAA2B,CAAC,GACC;EAC7B,MAAM,YAAY,MAAM,KAAK,GAAG,kBAAkB,EAAE,OAAO,KAAK,MAAM,CAAC;EAEvE,MAAM,SAA6B,CAAC;EACpC,KAAK,MAAM,OAAO,WAAW;GAC3B,IAAI,IAAI,MAAM,cAAc,kBAAkB;GAC9C,MAAM,KAAK,IAAI,MAAM;GACrB,IAAI,CAAC,GAAG,cAAc;GACtB,IAAI,GAAG,aAAa,SAAS,kBAAkB;GAC/C,OAAO,KAAK,uBAAuB,GAAG,YAAY,oBAAoB,GAAG,iBAAiB,CAAC,CAAC;EAC9F;EACA,OAAO;CACT;;;;;;;;;;;;;;;CAgBA,MAAM,WAAW,YAAqD;EAIpE,QAAO,MAHc,KAAK,MAAM,cAAc,OAAA,KAA8B,OAC1E,GAAG,WAAW,UAAU,CAC1B,EAAA,CACc,KAAK,WAAW;GAC5B,MAAM,MAAM;GACZ,UAAU,MAAM,aAAa,YAAY;GACzC,WAAW,MAAM;GACjB,WAAW,OAAO,MAAM,SAAS;EACnC,EAAE;CACJ;;;;;;;CAQA,MAAM,YAAkC;EAEtC,QAAO,MADa,KAAK,GAAG,UAAU,EAAA,CACzB,KAAK,UAAU,EAAE,OAAO,KAAK,MAAM,EAAE;CACpD;CAUA,MAAc,kBACZ,OAAwD,CAAC,GAClB;EACvC,MAAM,OAAO,MAAM,KAAK,GAAG,YAAY;GACrC,OAAO,KAAK;GACZ,mBAAmB,KAAK;EAC1B,CAAC;EACD,IAAI,KAAK,aAAa,KAAA,GAAW;GAC/B,IAAI,CAAC,KAAK,mBAAmB,OAAO,KAAA;GACpC,MAAM,IAAI,MAAM,wCAAwC;EAC1D;EACA,OAAO,uBACL,KAAK,SAAS,YACd,oBAAoB,KAAK,SAAS,iBAAiB,CACrD;CACF;CAUA,MAAc,mBACZ,OAAwD,CAAC,GAClB;EACvC,MAAM,YAAY,MAAM,KAAK,GAAG,kBAAkB;GAAE,OAAO,KAAK;GAAO,OAAO;EAAE,CAAC;EACjF,KAAK,MAAM,OAAO,WAChB,IAAI,IAAI,MAAM,cAAc,YAC1B,OAAO,uBACL,IAAI,MAAM,SAAS,YACnB,oBAAoB,IAAI,MAAM,SAAS,iBAAiB,CAC1D;EAIJ,IAAI,KAAK,mBACP,MAAM,IAAI,MAAM,8CAA8C;CAIlE;CAEA,MAAc,wBACZ,OAA2B,CAAC,GACe;EAC3C,MAAM,YAAY,MAAM,KAAK,GAAG,kBAAkB,EAAE,OAAO,KAAK,MAAM,CAAC;EAGvE,MAAM,YAA2B,CAAC;EAClC,MAAM,gBAAgF,CAAC;EAEvF,KAAK,MAAM,OAAO,WAAW;GAC3B,IAAI,IAAI,MAAM,cAAc,kBAAkB;GAC9C,MAAM,KAAK,IAAI,MAAM;GAErB,IAAI,CAAC,GAAG,cAAc;GACtB,MAAM,WAAW,GAAG,aAAa;GACjC,MAAM,cAAc,GAAG,aAAa;GACpC,IAAI,CAAC,SAAS,WAAW,mBAAmB,GAAG;GAE/C,MAAM,MAAM,uBAAuB,GAAG,YAAY,oBAAoB,GAAG,iBAAiB,CAAC;GAC3F,MAAM,QAAsB;IAAE,MAAM;IAAU,SAAS;GAAY;GAEnE,IAAI,gBAAgB,KAClB,cAAc,KAAK;IAAE,YAAY;IAAK,cAAc;GAAM,CAAC;QACtD;IAEL,MAAM,YAAY,SAAS,UAAU,CAA0B;IAC/D,UAAU,KAAK;KACb;KACA,aAAa;KACb,YAAY;KACZ,cAAc;IAChB,CAAC;GACH;EACF;EAGA,IAAI,YAA2B,CAAC;EAChC,IAAI,cAAc,SAAS,GACzB,YAAY,MAAM,KAAK,MACrB,uBACA,OAAA,IAEA,OAAO,OAAO;GACZ,MAAM,UAAyB,CAAC;GAChC,KAAK,MAAM,EAAE,YAAY,kBAAkB,eAAe;IACxD,MAAM,KAAK,MAAM,GAAG,gBAAgB,YAAY,KAAK;IACrD,IAAI,GAAG,MAAM;KACX,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,SAAS,OAAO,CAAC;KAChE,QAAQ,KAAK;MACX,WAAW,OAAO;MAClB,aAAa,OAAO;MACpB;MACA;KACF,CAAC;IACH;GACF;GACA,OAAO;EACT,CACF;EAGF,MAAM,yBAAS,IAAI,IAAyB;EAC5C,KAAK,MAAM,SAAS,CAAC,GAAG,WAAW,GAAG,SAAS,GAC7C,OAAO,IAAI,MAAM,WAAW,KAAK;EAEnC,OAAO;CACT;CAUA,MAAc,qBACZ,OAAwD,CAAC,GAClB;EACvC,MAAM,QAAQ,KAAK,SAAS,KAAK;EACjC,MAAM,eACJ,UAAU,OAAO,sBAAsB,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;EAExF,OAAO,MAAM,KAAK,MAAM,kBAAkB,MAAA,IAA4B,OAAO,OAAO;GAClF,IAAI,MAAM,GAAG,wBAAwB,YAAY,GAC/C,OAAO,MAAM,GAAG,kBAAkB,YAAY;GAGhD,IAAI,CAAC,KAAK,mBACR;GAGF,MAAM,WAAW,GAAG,WAAW,UAAU;GACzC,GAAG,gBAAgB,cAAc,QAAQ;GACzC,MAAM,GAAG,OAAO;GAChB,OAAO,MAAM,mBAAmB,QAAQ;EAC1C,CAAC;CACH;CAEA,MAAc,4BAAuE;EACnF,OAAO,MAAM,KAAK,MAAM,0BAA0B,OAAA,IAA6B,OAAO,OAAO;GAC3F,MAAM,eAAe,MAAM,GAAG,kBAAkB,YAAY;GAC5D,MAAM,WAAW,MAAM,GAAG,gBAAgB,cAAc,IAAI;GAE5D,MAAM,yBAAS,IAAI,IAAyB;GAC5C,KAAK,MAAM,SAAS,SAAS,QAAQ;IACnC,IAAI,MAAM,SAAS,aAAa,CAAC,0BAA0B,MAAM,KAAK,GAAG;IACzE,IAAI,CAAC,MAAM,KAAK,WAAW,qBAAqB,GAAG;IAEnD,MAAM,YAAY,MAAM,KAAK,UAAU,CAA4B;IACnE,OAAO,IAAI,WAAW;KACpB;KACA,aAAa;KACb,YAAY,MAAM;KAClB,cAAc;MAAE,MAAM,GAAG,sBAAsB;MAAa,SAAS;KAAI;IAC3E,CAAC;GACH;GACA,OAAO;EACT,CAAC;CACH;AACF"}

package/dist/index.cjs

@@ -39,6 +39,7 @@ exports.DefaultRetryOptions = require_config.DefaultRetryOptions;
 exports.DisconnectedError = require_errors.DisconnectedError;
 exports.FilterOperatorType = require_api.ResourceAPI_Tree_Filter_OperatorType;
 exports.FilterProperty = require_api.ResourceAPI_Tree_Filter_Property;
+exports.GrantType = require_transaction.GrantType;
 exports.MaxLocalId = require_types.MaxLocalId;
 exports.MaxTxId = require_types.MaxTxId;
 exports.NullResourceId = require_types.NullResourceId;
@@ -66,6 +67,7 @@ Object.defineProperty(exports, "RestAPI", {
 		return require_index.proto_rest_exports;
 	}
 });
+exports.Role = require_transaction.Role;
 exports.SUPPORTED_WIRE_PROTOCOLS = require_config.SUPPORTED_WIRE_PROTOCOLS;
 Object.defineProperty(exports, "TestHelpers", {
 	enumerable: true,
@@ -100,6 +102,7 @@ exports.isAbortedError = require_errors.isAbortedError;
 exports.isAnyResourceId = require_types.isAnyResourceId;
 exports.isCancelError = require_errors.isCancelError;
 exports.isConnectionProblem = require_errors.isConnectionProblem;
+exports.isEveryoneUserLogin = require_transaction.isEveryoneUserLogin;
 exports.isField = require_transaction.isField;
 exports.isFieldRef = require_transaction.isFieldRef;
 exports.isLocalResourceId = require_types.isLocalResourceId;

package/dist/index.d.ts

@@ -1,14 +1,14 @@
 import { AnyResourceId, BasicResourceData, ColorProof, FieldData, FieldStatus, FieldType, FutureFieldType, GlobalResourceId, LocalResourceId, MaxLocalId, MaxTxId, NullResourceId, NullSignedResourceId, OptionalAnyResourceId, OptionalSignedResourceId, ResourceData, ResourceKind, ResourceSignature, ResourceType, SignedResourceId, anyResourceIdToBigint, asSignedResourceId, base64UrlToSignature, checkLocalityOfResourceId, createGlobalResourceId, createLocalResourceId, createSignedResourceId, ensureSignedResourceIdNotNull, extractBasicResourceData, extractTxId, getField, isAnyResourceId, isLocalResourceId, isNotNullSignedResourceId, isNullSignedResourceId, isRootResourceId, isSignedResourceId, jsonToData, parseResourceType, parseSignedResourceId, resDataToJson, resourceIdFromString, resourceIdToString, resourceType, resourceTypeToString, resourceTypesEqual, setResourceSignaturesRequired, signatureToBase64Url, stringifyWithResourceId, toResourceSignature } from "./core/types.js";
 import { ResourceAPI_Tree_Filter, ResourceAPI_Tree_Filter_OperatorType, ResourceAPI_Tree_Filter_Property } from "./proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api.js";
 import { DefaultFinalResourceDataPredicate, FinalResourceDataPredicate, ResourceTypeName, ResourceTypePrefix } from "./core/final.js";
-import { AnyFieldId, AnyFieldRef, AnyRef, AnyResourceRef, FieldId, FieldRef, KeyValue, KeyValueString, LocalFieldId, PlTransaction, ResourceIdWithSignature, ResourceRef, ResourceTreeFrame, ResourceTreeItem, TxCommitConflict, field, isField, isFieldRef, isResource, isResourceId, isResourceRef, toFieldId, toGlobalFieldId, toGlobalResourceId } from "./core/transaction.js";
+import { AnyFieldId, AnyFieldRef, AnyRef, AnyResourceRef, FieldId, FieldRef, GrantPermissions, GrantType, KeyValue, KeyValueString, LocalFieldId, PlTransaction, ResourceIdWithSignature, ResourceRef, ResourceTreeFrame, ResourceTreeItem, Role, TxCommitConflict, field, isEveryoneUserLogin, isField, isFieldRef, isResource, isResourceId, isResourceRef, toFieldId, toGlobalFieldId, toGlobalResourceId } from "./core/transaction.js";
 import { pl_d_exports } from "./helpers/pl.js";
 import { AnonymousAuthInformation, AuthInformation, AuthOps, DEFAULT_AUTH_MAX_REFRESH, DEFAULT_MAX_CACHE_BYTES, DEFAULT_REQUEST_TIMEOUT, DEFAULT_RETRY_BACKOFF_ALGORITHM, DEFAULT_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER, DEFAULT_RETRY_INITIAL_DELAY, DEFAULT_RETRY_JITTER, DEFAULT_RETRY_LINEAR_BACKOFF_STEP, DEFAULT_RETRY_MAX_ATTEMPTS, DEFAULT_RO_TX_TIMEOUT, DEFAULT_RW_TX_TIMEOUT, DEFAULT_TOKEN_TTL_SECONDS, DefaultRetryOptions, PlClientConfig, PlConnectionStatus, PlConnectionStatusListener, SUPPORTED_WIRE_PROTOCOLS, plAddressToConfig, wireProtocol } from "./core/config.js";
 import { BackendCapability, hasCapability } from "./core/capabilities.js";
 import { GrpcConnection, RestConnection, WireClientProvider, WireClientProviderFactory, WireConnection } from "./core/wire.js";
 import { index_d_exports } from "./proto-rest/index.js";
 import { PlDriver, PlDriverDefinition, addRTypeToMetadata, createRTypeRoutingHeader } from "./core/driver.js";
-import { StorageInfo, TxRunner, UserResources } from "./core/user_resources.js";
+import { GrantEntry, StorageInfo, TxRunner, UserEntry, UserResources } from "./core/user_resources.js";
 import { PlClient, TxOps } from "./core/client.js";
 import { DisconnectedError, PermissionDeniedError, PlError, PlErrorCodeNotFound, RESTError, RecoverablePlError, UnauthenticatedError, UnrecoverablePlError, isAbortedError, isCancelError, isConnectionProblem, isNotFoundError, isPermissionDenied, isTimeoutError, isTimeoutOrCancelError, isUnauthenticated, isUnimplementedError, rethrowMeaningfulError, throwPlNotFoundError } from "./core/errors.js";
 import { defaultPlClient, tryGetFileConfig } from "./core/default_client.js";
@@ -18,4 +18,4 @@ import { Filter, Property, treeFilter } from "./core/tree_filter.js";
 import { ValErr, valErr } from "./helpers/tx_helpers.js";
 import { ContinuePolling, DefaultPollingRetryOptions, PollFieldTraverseOps, PollResourceAccessor, PollTxAccessor, poll } from "./helpers/poll.js";
 import { test_config_d_exports } from "./test/test_config.js";
-export { AnonymousAuthInformation, AnyFieldId, AnyFieldRef, AnyRef, AnyResourceId, AnyResourceRef, AuthInformation, AuthOps, BackendCapability, BasicResourceData, ColorProof, ContinuePolling, DEFAULT_AUTH_MAX_REFRESH, DEFAULT_MAX_CACHE_BYTES, DEFAULT_REQUEST_TIMEOUT, DEFAULT_RETRY_BACKOFF_ALGORITHM, DEFAULT_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER, DEFAULT_RETRY_INITIAL_DELAY, DEFAULT_RETRY_JITTER, DEFAULT_RETRY_LINEAR_BACKOFF_STEP, DEFAULT_RETRY_MAX_ATTEMPTS, DEFAULT_RO_TX_TIMEOUT, DEFAULT_RW_TX_TIMEOUT, DEFAULT_TOKEN_TTL_SECONDS, DefaultFinalResourceDataPredicate, DefaultPollingRetryOptions, DefaultRetryOptions, DisconnectedError, FieldData, FieldId, FieldRef, FieldStatus, FieldType, Filter, ResourceAPI_Tree_Filter_OperatorType as FilterOperatorType, ResourceAPI_Tree_Filter_Property as FilterProperty, FinalResourceDataPredicate, FutureFieldType, GlobalResourceId, GrpcConnection, KeyValue, KeyValueString, LocalFieldId, LocalResourceId, MaxLocalId, MaxTxId, NullResourceId, NullSignedResourceId, OptionalAnyResourceId, OptionalSignedResourceId, PermissionDeniedError, pl_d_exports as Pl, PlClient, PlClientConfig, PlConnectionStatus, PlConnectionStatusListener, PlDriver, PlDriverDefinition, PlError, PlErrorCodeNotFound, PlTransaction, PollFieldTraverseOps, PollResourceAccessor, PollTxAccessor, Property, RESTError, RecoverablePlError, type ResourceAPI_Tree_Filter, ResourceData, ResourceIdWithSignature, ResourceKind, ResourceRef, ResourceSignature, ResourceTreeFrame, ResourceTreeItem, ResourceType, ResourceTypeName, ResourceTypePrefix, index_d_exports as RestAPI, RestConnection, SSOAuthMethod, SSOFlowType, SSOLoginAttempt, SUPPORTED_WIRE_PROTOCOLS, SignedResourceId, StorageInfo, test_config_d_exports as TestHelpers, TxCommitConflict, TxOps, TxRunner, UnauthenticatedError, UnauthenticatedPlClient, UnrecoverablePlError, UserResources, ValErr, WireClientProvider, WireClientProviderFactory, WireConnection, addRTypeToMetadata, anyResourceIdToBigint, asSignedResourceId, base64UrlToSignature, checkLocalityOfResourceId, createGlobalResourceId, createLocalResourceId, createRTypeRoutingHeader, createSignedResourceId, defaultPlClient, ensureSignedResourceIdNotNull, expirationFromAuthInformation, extractBasicResourceData, extractTxId, field, getField, hasCapability, inferAuthRefreshTime, isAbortedError, isAnyResourceId, isCancelError, isConnectionProblem, isField, isFieldRef, isLocalResourceId, isNotFoundError, isNotNullSignedResourceId, isNullSignedResourceId, isPermissionDenied, isResource, isResourceId, isResourceRef, isRootResourceId, isSignedResourceId, isTimeoutError, isTimeoutOrCancelError, isUnauthenticated, isUnimplementedError, jsonToData, parseResourceType, parseSignedResourceId, plAddressToConfig, poll, resDataToJson, resourceIdFromString, resourceIdToString, resourceType, resourceTypeToString, resourceTypesEqual, rethrowMeaningfulError, setResourceSignaturesRequired, signatureToBase64Url, stringifyWithResourceId, throwPlNotFoundError, toFieldId, toGlobalFieldId, toGlobalResourceId, toResourceSignature, treeFilter, tryGetFileConfig, valErr, wireProtocol };
+export { AnonymousAuthInformation, AnyFieldId, AnyFieldRef, AnyRef, AnyResourceId, AnyResourceRef, AuthInformation, AuthOps, BackendCapability, BasicResourceData, ColorProof, ContinuePolling, DEFAULT_AUTH_MAX_REFRESH, DEFAULT_MAX_CACHE_BYTES, DEFAULT_REQUEST_TIMEOUT, DEFAULT_RETRY_BACKOFF_ALGORITHM, DEFAULT_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER, DEFAULT_RETRY_INITIAL_DELAY, DEFAULT_RETRY_JITTER, DEFAULT_RETRY_LINEAR_BACKOFF_STEP, DEFAULT_RETRY_MAX_ATTEMPTS, DEFAULT_RO_TX_TIMEOUT, DEFAULT_RW_TX_TIMEOUT, DEFAULT_TOKEN_TTL_SECONDS, DefaultFinalResourceDataPredicate, DefaultPollingRetryOptions, DefaultRetryOptions, DisconnectedError, FieldData, FieldId, FieldRef, FieldStatus, FieldType, Filter, ResourceAPI_Tree_Filter_OperatorType as FilterOperatorType, ResourceAPI_Tree_Filter_Property as FilterProperty, FinalResourceDataPredicate, FutureFieldType, GlobalResourceId, GrantEntry, GrantPermissions, GrantType, GrpcConnection, KeyValue, KeyValueString, LocalFieldId, LocalResourceId, MaxLocalId, MaxTxId, NullResourceId, NullSignedResourceId, OptionalAnyResourceId, OptionalSignedResourceId, PermissionDeniedError, pl_d_exports as Pl, PlClient, PlClientConfig, PlConnectionStatus, PlConnectionStatusListener, PlDriver, PlDriverDefinition, PlError, PlErrorCodeNotFound, PlTransaction, PollFieldTraverseOps, PollResourceAccessor, PollTxAccessor, Property, RESTError, RecoverablePlError, type ResourceAPI_Tree_Filter, ResourceData, ResourceIdWithSignature, ResourceKind, ResourceRef, ResourceSignature, ResourceTreeFrame, ResourceTreeItem, ResourceType, ResourceTypeName, ResourceTypePrefix, index_d_exports as RestAPI, RestConnection, Role, SSOAuthMethod, SSOFlowType, SSOLoginAttempt, SUPPORTED_WIRE_PROTOCOLS, SignedResourceId, StorageInfo, test_config_d_exports as TestHelpers, TxCommitConflict, TxOps, TxRunner, UnauthenticatedError, UnauthenticatedPlClient, UnrecoverablePlError, UserEntry, UserResources, ValErr, WireClientProvider, WireClientProviderFactory, WireConnection, addRTypeToMetadata, anyResourceIdToBigint, asSignedResourceId, base64UrlToSignature, checkLocalityOfResourceId, createGlobalResourceId, createLocalResourceId, createRTypeRoutingHeader, createSignedResourceId, defaultPlClient, ensureSignedResourceIdNotNull, expirationFromAuthInformation, extractBasicResourceData, extractTxId, field, getField, hasCapability, inferAuthRefreshTime, isAbortedError, isAnyResourceId, isCancelError, isConnectionProblem, isEveryoneUserLogin, isField, isFieldRef, isLocalResourceId, isNotFoundError, isNotNullSignedResourceId, isNullSignedResourceId, isPermissionDenied, isResource, isResourceId, isResourceRef, isRootResourceId, isSignedResourceId, isTimeoutError, isTimeoutOrCancelError, isUnauthenticated, isUnimplementedError, jsonToData, parseResourceType, parseSignedResourceId, plAddressToConfig, poll, resDataToJson, resourceIdFromString, resourceIdToString, resourceType, resourceTypeToString, resourceTypesEqual, rethrowMeaningfulError, setResourceSignaturesRequired, signatureToBase64Url, stringifyWithResourceId, throwPlNotFoundError, toFieldId, toGlobalFieldId, toGlobalResourceId, toResourceSignature, treeFilter, tryGetFileConfig, valErr, wireProtocol };

package/dist/index.js

@@ -1,7 +1,7 @@
 import { MaxLocalId, MaxTxId, NullResourceId, NullSignedResourceId, anyResourceIdToBigint, asSignedResourceId, base64UrlToSignature, checkLocalityOfResourceId, createGlobalResourceId, createLocalResourceId, createSignedResourceId, ensureSignedResourceIdNotNull, extractBasicResourceData, extractTxId, getField, isAnyResourceId, isLocalResourceId, isNotNullSignedResourceId, isNullSignedResourceId, isRootResourceId, isSignedResourceId, jsonToData, parseResourceType, parseSignedResourceId, resDataToJson, resourceIdFromString, resourceIdToString, resourceType, resourceTypeToString, resourceTypesEqual, setResourceSignaturesRequired, signatureToBase64Url, stringifyWithResourceId, toResourceSignature } from "./core/types.js";
 import { ResourceAPI_Tree_Filter_OperatorType, ResourceAPI_Tree_Filter_Property } from "./proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api.js";
 import { DisconnectedError, PermissionDeniedError, PlError, PlErrorCodeNotFound, RESTError, RecoverablePlError, UnauthenticatedError, UnrecoverablePlError, isAbortedError, isCancelError, isConnectionProblem, isNotFoundError, isPermissionDenied, isTimeoutError, isTimeoutOrCancelError, isUnauthenticated, isUnimplementedError, rethrowMeaningfulError, throwPlNotFoundError } from "./core/errors.js";
-import { PlTransaction, TxCommitConflict, field, isField, isFieldRef, isResource, isResourceId, isResourceRef, toFieldId, toGlobalFieldId, toGlobalResourceId } from "./core/transaction.js";
+import { GrantType, PlTransaction, Role, TxCommitConflict, field, isEveryoneUserLogin, isField, isFieldRef, isResource, isResourceId, isResourceRef, toFieldId, toGlobalFieldId, toGlobalResourceId } from "./core/transaction.js";
 import { pl_exports } from "./helpers/pl.js";
 import { AnonymousAuthInformation, DEFAULT_AUTH_MAX_REFRESH, DEFAULT_MAX_CACHE_BYTES, DEFAULT_REQUEST_TIMEOUT, DEFAULT_RETRY_BACKOFF_ALGORITHM, DEFAULT_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER, DEFAULT_RETRY_INITIAL_DELAY, DEFAULT_RETRY_JITTER, DEFAULT_RETRY_LINEAR_BACKOFF_STEP, DEFAULT_RETRY_MAX_ATTEMPTS, DEFAULT_RO_TX_TIMEOUT, DEFAULT_RW_TX_TIMEOUT, DEFAULT_TOKEN_TTL_SECONDS, DefaultRetryOptions, SUPPORTED_WIRE_PROTOCOLS, plAddressToConfig } from "./core/config.js";
 import { expirationFromAuthInformation, inferAuthRefreshTime } from "./core/auth.js";
@@ -17,4 +17,4 @@ import { treeFilter } from "./core/tree_filter.js";
 import { valErr } from "./helpers/tx_helpers.js";
 import { ContinuePolling, DefaultPollingRetryOptions, PollResourceAccessor, PollTxAccessor, poll } from "./helpers/poll.js";
 import { test_config_exports } from "./test/test_config.js";
-export { AnonymousAuthInformation, ContinuePolling, DEFAULT_AUTH_MAX_REFRESH, DEFAULT_MAX_CACHE_BYTES, DEFAULT_REQUEST_TIMEOUT, DEFAULT_RETRY_BACKOFF_ALGORITHM, DEFAULT_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER, DEFAULT_RETRY_INITIAL_DELAY, DEFAULT_RETRY_JITTER, DEFAULT_RETRY_LINEAR_BACKOFF_STEP, DEFAULT_RETRY_MAX_ATTEMPTS, DEFAULT_RO_TX_TIMEOUT, DEFAULT_RW_TX_TIMEOUT, DEFAULT_TOKEN_TTL_SECONDS, DefaultFinalResourceDataPredicate, DefaultPollingRetryOptions, DefaultRetryOptions, DisconnectedError, ResourceAPI_Tree_Filter_OperatorType as FilterOperatorType, ResourceAPI_Tree_Filter_Property as FilterProperty, MaxLocalId, MaxTxId, NullResourceId, NullSignedResourceId, PermissionDeniedError, pl_exports as Pl, PlClient, PlError, PlErrorCodeNotFound, PlTransaction, PollResourceAccessor, PollTxAccessor, RESTError, RecoverablePlError, ResourceTypeName, ResourceTypePrefix, proto_rest_exports as RestAPI, SUPPORTED_WIRE_PROTOCOLS, test_config_exports as TestHelpers, TxCommitConflict, UnauthenticatedError, UnauthenticatedPlClient, UnrecoverablePlError, UserResources, addRTypeToMetadata, anyResourceIdToBigint, asSignedResourceId, base64UrlToSignature, checkLocalityOfResourceId, createGlobalResourceId, createLocalResourceId, createRTypeRoutingHeader, createSignedResourceId, defaultPlClient, ensureSignedResourceIdNotNull, expirationFromAuthInformation, extractBasicResourceData, extractTxId, field, getField, hasCapability, inferAuthRefreshTime, isAbortedError, isAnyResourceId, isCancelError, isConnectionProblem, isField, isFieldRef, isLocalResourceId, isNotFoundError, isNotNullSignedResourceId, isNullSignedResourceId, isPermissionDenied, isResource, isResourceId, isResourceRef, isRootResourceId, isSignedResourceId, isTimeoutError, isTimeoutOrCancelError, isUnauthenticated, isUnimplementedError, jsonToData, parseResourceType, parseSignedResourceId, plAddressToConfig, poll, resDataToJson, resourceIdFromString, resourceIdToString, resourceType, resourceTypeToString, resourceTypesEqual, rethrowMeaningfulError, setResourceSignaturesRequired, signatureToBase64Url, stringifyWithResourceId, throwPlNotFoundError, toFieldId, toGlobalFieldId, toGlobalResourceId, toResourceSignature, treeFilter, tryGetFileConfig, valErr };
+export { AnonymousAuthInformation, ContinuePolling, DEFAULT_AUTH_MAX_REFRESH, DEFAULT_MAX_CACHE_BYTES, DEFAULT_REQUEST_TIMEOUT, DEFAULT_RETRY_BACKOFF_ALGORITHM, DEFAULT_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER, DEFAULT_RETRY_INITIAL_DELAY, DEFAULT_RETRY_JITTER, DEFAULT_RETRY_LINEAR_BACKOFF_STEP, DEFAULT_RETRY_MAX_ATTEMPTS, DEFAULT_RO_TX_TIMEOUT, DEFAULT_RW_TX_TIMEOUT, DEFAULT_TOKEN_TTL_SECONDS, DefaultFinalResourceDataPredicate, DefaultPollingRetryOptions, DefaultRetryOptions, DisconnectedError, ResourceAPI_Tree_Filter_OperatorType as FilterOperatorType, ResourceAPI_Tree_Filter_Property as FilterProperty, GrantType, MaxLocalId, MaxTxId, NullResourceId, NullSignedResourceId, PermissionDeniedError, pl_exports as Pl, PlClient, PlError, PlErrorCodeNotFound, PlTransaction, PollResourceAccessor, PollTxAccessor, RESTError, RecoverablePlError, ResourceTypeName, ResourceTypePrefix, proto_rest_exports as RestAPI, Role, SUPPORTED_WIRE_PROTOCOLS, test_config_exports as TestHelpers, TxCommitConflict, UnauthenticatedError, UnauthenticatedPlClient, UnrecoverablePlError, UserResources, addRTypeToMetadata, anyResourceIdToBigint, asSignedResourceId, base64UrlToSignature, checkLocalityOfResourceId, createGlobalResourceId, createLocalResourceId, createRTypeRoutingHeader, createSignedResourceId, defaultPlClient, ensureSignedResourceIdNotNull, expirationFromAuthInformation, extractBasicResourceData, extractTxId, field, getField, hasCapability, inferAuthRefreshTime, isAbortedError, isAnyResourceId, isCancelError, isConnectionProblem, isEveryoneUserLogin, isField, isFieldRef, isLocalResourceId, isNotFoundError, isNotNullSignedResourceId, isNullSignedResourceId, isPermissionDenied, isResource, isResourceId, isResourceRef, isRootResourceId, isSignedResourceId, isTimeoutError, isTimeoutOrCancelError, isUnauthenticated, isUnimplementedError, jsonToData, parseResourceType, parseSignedResourceId, plAddressToConfig, poll, resDataToJson, resourceIdFromString, resourceIdToString, resourceType, resourceTypeToString, resourceTypesEqual, rethrowMeaningfulError, setResourceSignaturesRequired, signatureToBase64Url, stringifyWithResourceId, throwPlNotFoundError, toFieldId, toGlobalFieldId, toGlobalResourceId, toResourceSignature, treeFilter, tryGetFileConfig, valErr };

package/dist/proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api.cjs

@@ -133,17 +133,17 @@ let AuthAPI_ListMethods_SSOAuthMethod_FlowType = /* @__PURE__ */ function(AuthAP
 */
 let AuthAPI_GrantAccess_GrantType = /* @__PURE__ */ function(AuthAPI_GrantAccess_GrantType) {
 	/**
-	* regular user-to-user grant (default)
+	* grants access for single user (default).
 	*
-	* @generated from protobuf enum value: GENERAL = 0;
+	* @generated from protobuf enum value: SINGLE_USER = 0;
 	*/
-	AuthAPI_GrantAccess_GrantType[AuthAPI_GrantAccess_GrantType["GENERAL"] = 0] = "GENERAL";
+	AuthAPI_GrantAccess_GrantType[AuthAPI_GrantAccess_GrantType["SINGLE_USER"] = 0] = "SINGLE_USER";
 	/**
-	* make resource publically-accessible, showing it in ListUserResources for all users. Requires controller role.
+	* makes resource publically-accessible, showing it in ListUserResources for all authorised clients.
 	*
-	* @generated from protobuf enum value: MAKE_RESOURCE_PUBLIC = 1;
+	* @generated from protobuf enum value: ANY_AUTHORISED = 1;
 	*/
-	AuthAPI_GrantAccess_GrantType[AuthAPI_GrantAccess_GrantType["MAKE_RESOURCE_PUBLIC"] = 1] = "MAKE_RESOURCE_PUBLIC";
+	AuthAPI_GrantAccess_GrantType[AuthAPI_GrantAccess_GrantType["ANY_AUTHORISED"] = 1] = "ANY_AUTHORISED";
 	return AuthAPI_GrantAccess_GrantType;
 }({});
 /**