@milaboratories/pl-client 3.2.4 → 3.3.0

package/src/proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api.ts

@@ -11,6 +11,7 @@ import { UnknownFieldHandler } from "@protobuf-ts/runtime";
 import type { PartialMessage } from "@protobuf-ts/runtime";
 import { reflectionMergePartial } from "@protobuf-ts/runtime";
 import { MessageType } from "@protobuf-ts/runtime";
+import { Color } from "./base_types";
 import { Timestamp } from "../../../../../google/protobuf/timestamp";
 import { Duration } from "../../../../../google/protobuf/duration";
 import { ResourceAPIFeature } from "./api_types";
@@ -526,6 +527,18 @@ export interface TxAPI_ClientMessage {
          * @generated from protobuf field: MiLaboratories.PL.API.TxAPI.SetDefaultColor.Request set_default_color = 400
          */
         setDefaultColor: TxAPI_SetDefaultColor_Request; // set default color for resource creation
+    } | {
+        oneofKind: "grantAccess";
+        /**
+         * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.GrantAccess.Request grant_access = 410
+         */
+        grantAccess: AuthAPI_GrantAccess_Request; // grant access to a resource within transaction
+    } | {
+        oneofKind: "revokeAccess";
+        /**
+         * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.RevokeAccess.Request revoke_access = 411
+         */
+        revokeAccess: AuthAPI_RevokeAccess_Request; // revoke access to a resource within transaction
     } | {
         oneofKind: undefined;
     };
@@ -903,6 +916,18 @@ export interface TxAPI_ServerMessage {
          * @generated from protobuf field: MiLaboratories.PL.API.TxAPI.SetDefaultColor.Response set_default_color = 400
          */
         setDefaultColor: TxAPI_SetDefaultColor_Response;
+    } | {
+        oneofKind: "grantAccess";
+        /**
+         * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.GrantAccess.Response grant_access = 410
+         */
+        grantAccess: AuthAPI_GrantAccess_Response;
+    } | {
+        oneofKind: "revokeAccess";
+        /**
+         * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.RevokeAccess.Response revoke_access = 411
+         */
+        revokeAccess: AuthAPI_RevokeAccess_Response;
     } | {
         oneofKind: undefined;
     };
@@ -1067,9 +1092,9 @@ export interface TxAPI_SetDefaultColor {
  */
 export interface TxAPI_SetDefaultColor_Request {
     /**
-     * @generated from protobuf field: optional bytes color_proof = 1
+     * @generated from protobuf field: bytes color_proof = 1
      */
-    colorProof?: Uint8Array;
+    colorProof: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.TxAPI.SetDefaultColor.Response
@@ -1103,9 +1128,9 @@ export interface ResourceAPI_CreateStruct_Request {
      */
     data?: Uint8Array;
     /**
-     * @generated from protobuf field: optional bytes color_proof = 5
+     * @generated from protobuf field: bytes color_proof = 5
      */
-    colorProof?: Uint8Array;
+    colorProof: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateStruct.Response
@@ -1116,9 +1141,9 @@ export interface ResourceAPI_CreateStruct_Response {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateEphemeral
@@ -1142,9 +1167,9 @@ export interface ResourceAPI_CreateEphemeral_Request {
      */
     data?: Uint8Array;
     /**
-     * @generated from protobuf field: optional bytes color_proof = 5
+     * @generated from protobuf field: bytes color_proof = 5
      */
-    colorProof?: Uint8Array;
+    colorProof: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateEphemeral.Response
@@ -1155,9 +1180,9 @@ export interface ResourceAPI_CreateEphemeral_Response {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateChild
@@ -1216,9 +1241,9 @@ export interface ResourceAPI_CreateValue_Request {
      */
     errorIfExists: boolean;
     /**
-     * @generated from protobuf field: optional bytes color_proof = 8
+     * @generated from protobuf field: bytes color_proof = 8
      */
-    colorProof?: Uint8Array;
+    colorProof: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateValue.Response
@@ -1229,9 +1254,9 @@ export interface ResourceAPI_CreateValue_Response {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.GetValueID
@@ -1260,9 +1285,9 @@ export interface ResourceAPI_GetValueID_Response {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateSingleton
@@ -1290,9 +1315,9 @@ export interface ResourceAPI_CreateSingleton_Request {
      */
     errorIfExists: boolean;
     /**
-     * @generated from protobuf field: optional bytes color_proof = 8
+     * @generated from protobuf field: bytes color_proof = 8
      */
-    colorProof?: Uint8Array;
+    colorProof: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.CreateSingleton.Response
@@ -1303,9 +1328,9 @@ export interface ResourceAPI_CreateSingleton_Response {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.GetSingleton
@@ -1352,9 +1377,9 @@ export interface ResourceAPI_LockInputs_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.LockInputs.Response
@@ -1375,9 +1400,9 @@ export interface ResourceAPI_LockOutputs_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.LockOutputs.Response
@@ -1398,9 +1423,9 @@ export interface ResourceAPI_Exists_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.Exists.Response
@@ -1425,17 +1450,17 @@ export interface ResourceAPI_SetError_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 3
+     * @generated from protobuf field: bytes resource_signature = 3
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: uint64 error_resource_id = 2
      */
     errorResourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes error_resource_signature = 4
+     * @generated from protobuf field: bytes error_resource_signature = 4
      */
-    errorResourceSignature?: Uint8Array;
+    errorResourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.SetError.Response
@@ -1456,9 +1481,9 @@ export interface ResourceAPI_Get_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 3
+     * @generated from protobuf field: bytes resource_signature = 3
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: bool load_fields = 2
      */
@@ -1557,9 +1582,9 @@ export interface ResourceAPI_CreateRoot_Response {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 // FIXME: add CreateResource method to API
 
@@ -1579,9 +1604,9 @@ export interface ResourceAPI_Remove_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.Remove.Response
@@ -1607,9 +1632,9 @@ export interface ResourceAPI_Name_Set_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 3
+     * @generated from protobuf field: bytes resource_signature = 3
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: string name = 2
      */
@@ -1643,9 +1668,9 @@ export interface ResourceAPI_Name_Get_Response {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.Name.Exists
@@ -1703,9 +1728,9 @@ export interface ResourceAPI_Tree_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 3
+     * @generated from protobuf field: bytes resource_signature = 3
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * Limit the maximum depth the tree is traversed.
      * The resource <resource_id> is considered at depth = 0, the values of its fields
@@ -1743,9 +1768,9 @@ export interface ResourceAPI_TreeSize_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.ResourceAPI.TreeSize.Response
@@ -1861,9 +1886,9 @@ export interface FieldAPI_SetError_Request {
      */
     errorResourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes error_resource_signature = 3
+     * @generated from protobuf field: bytes error_resource_signature = 3
      */
-    errorResourceSignature?: Uint8Array;
+    errorResourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.FieldAPI.SetError.Response
@@ -1945,9 +1970,9 @@ export interface FieldAPI_List_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 4
+     * @generated from protobuf field: bytes resource_signature = 4
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * Start the listing from given position, returning first field with
      * name >= start_from.
@@ -2560,9 +2585,9 @@ export interface ResourceKVAPI_List_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 4
+     * @generated from protobuf field: bytes resource_signature = 4
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * Start the listing from given position, returning first item with
      * key >= start_from.
@@ -2628,9 +2653,9 @@ export interface ResourceKVAPI_Set_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 4
+     * @generated from protobuf field: bytes resource_signature = 4
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2659,9 +2684,9 @@ export interface ResourceKVAPI_Get_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 3
+     * @generated from protobuf field: bytes resource_signature = 3
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2690,9 +2715,9 @@ export interface ResourceKVAPI_GetIfExists_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 3
+     * @generated from protobuf field: bytes resource_signature = 3
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2725,9 +2750,9 @@ export interface ResourceKVAPI_Delete_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 3
+     * @generated from protobuf field: bytes resource_signature = 3
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2752,9 +2777,9 @@ export interface ResourceKVAPI_SetFlag_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 4
+     * @generated from protobuf field: bytes resource_signature = 4
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -2783,9 +2808,9 @@ export interface ResourceKVAPI_GetFlag_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 3
+     * @generated from protobuf field: bytes resource_signature = 3
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: string key = 2
      */
@@ -3103,9 +3128,9 @@ export interface LocksAPI_Lease_Create_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 5
+     * @generated from protobuf field: bytes resource_signature = 5
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: google.protobuf.Duration timeout = 3
      */
@@ -3138,9 +3163,9 @@ export interface LocksAPI_Lease_Update_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 5
+     * @generated from protobuf field: bytes resource_signature = 5
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: bytes lease_id = 2
      */
@@ -3173,9 +3198,9 @@ export interface LocksAPI_Lease_Release_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 3
+     * @generated from protobuf field: bytes resource_signature = 3
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: bytes lease_id = 2
      */
@@ -3243,9 +3268,9 @@ export interface AuthAPI_GetJWTToken_Request {
      */
     expiration?: Duration;
     /**
-     * @generated from protobuf field: optional MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role requested_role = 2
+     * @generated from protobuf field: optional MiLaboratories.PL.API.AuthAPI.Role requested_role = 2
      */
-    requestedRole?: AuthAPI_GetJWTToken_Role;
+    requestedRole?: AuthAPI_Role;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GetJWTToken.Response
@@ -3256,32 +3281,38 @@ export interface AuthAPI_GetJWTToken_Response {
      */
     token: string;
     /**
+     * Session info fields
+     *
      * @generated from protobuf field: bytes session_id = 2
      */
     sessionId: Uint8Array;
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.Role role = 3
+     */
+    role: AuthAPI_Role;
 }
 /**
- * @generated from protobuf enum MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GetSessionInfo
  */
-export enum AuthAPI_GetJWTToken_Role {
-    /**
-     * issue JWT with caller's natural role
-     *
-     * @generated from protobuf enum value: ROLE_UNSPECIFIED = 0;
-     */
-    ROLE_UNSPECIFIED = 0,
-    /**
-     * @generated from protobuf enum value: USER = 1;
-     */
-    USER = 1,
+export interface AuthAPI_GetSessionInfo {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GetSessionInfo.Request
+ */
+export interface AuthAPI_GetSessionInfo_Request {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GetSessionInfo.Response
+ */
+export interface AuthAPI_GetSessionInfo_Response {
     /**
-     * @generated from protobuf enum value: CONTROLLER = 2;
+     * @generated from protobuf field: bytes session_id = 1
      */
-    CONTROLLER = 2,
+    sessionId: Uint8Array;
     /**
-     * @generated from protobuf enum value: WORKFLOW = 3;
+     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.Role role = 2
      */
-    WORKFLOW = 3
+    role: AuthAPI_Role;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GrantAccess
@@ -3297,9 +3328,9 @@ export interface AuthAPI_GrantAccess_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: string target_user = 3
      */
@@ -3308,6 +3339,10 @@ export interface AuthAPI_GrantAccess_Request {
      * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 4
      */
     permissions?: AuthAPI_Grant_Permissions; // access level to grant
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.GrantAccess.GrantType grant_type = 5
+     */
+    grantType: AuthAPI_GrantAccess_GrantType; // default: GENERAL
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GrantAccess.Response
@@ -3315,31 +3350,50 @@ export interface AuthAPI_GrantAccess_Request {
 export interface AuthAPI_GrantAccess_Response {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant
+ * GrantType distinguishes regular grants from system-level grants.
+ *
+ * @generated from protobuf enum MiLaboratories.PL.API.AuthAPI.GrantAccess.GrantType
+ */
+export enum AuthAPI_GrantAccess_GrantType {
+    /**
+     * regular user-to-user grant (default)
+     *
+     * @generated from protobuf enum value: GENERAL = 0;
+     */
+    GENERAL = 0,
+    /**
+     * make resource publically-accessible, showing it in ListUserResources for all users. Requires controller role.
+     *
+     * @generated from protobuf enum value: MAKE_RESOURCE_PUBLIC = 1;
+     */
+    MAKE_RESOURCE_PUBLIC = 1
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.RevokeAccess
  */
-export interface AuthAPI_RevokeGrant {
+export interface AuthAPI_RevokeAccess {
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant.Request
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.RevokeAccess.Request
  */
-export interface AuthAPI_RevokeGrant_Request {
+export interface AuthAPI_RevokeAccess_Request {
     /**
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
     /**
      * @generated from protobuf field: string target_user = 3
      */
     targetUser: string; // user login whose grant to revoke
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant.Response
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.RevokeAccess.Response
  */
-export interface AuthAPI_RevokeGrant_Response {
+export interface AuthAPI_RevokeAccess_Response {
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListGrants
@@ -3355,9 +3409,9 @@ export interface AuthAPI_ListGrants_Request {
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
      */
-    resourceSignature?: Uint8Array;
+    resourceSignature: Uint8Array;
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListGrants.Response
@@ -3404,6 +3458,81 @@ export interface AuthAPI_Grant_Permissions {
      */
     writable: boolean; // write access = ability to modify resource tree + share access
 }
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.MintSignature
+ */
+export interface AuthAPI_MintSignature {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.MintSignature.Request
+ */
+export interface AuthAPI_MintSignature_Request {
+    /**
+     * @generated from protobuf field: uint64 resource_id = 1
+     */
+    resourceId: bigint;
+    /**
+     * @generated from protobuf field: bytes target_sid = 2
+     */
+    targetSid: Uint8Array;
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.Base.Color color = 3
+     */
+    color?: Color;
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.MintSignature.Response
+ */
+export interface AuthAPI_MintSignature_Response {
+    /**
+     * @generated from protobuf field: uint64 resource_id = 1
+     */
+    resourceId: bigint;
+    /**
+     * @generated from protobuf field: bytes resource_signature = 2
+     */
+    resourceSignature: Uint8Array;
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.UserRoot
+ */
+export interface AuthAPI_UserRoot {
+    /**
+     * @generated from protobuf field: uint64 resource_id = 1
+     */
+    resourceId: bigint;
+    /**
+     * @generated from protobuf field: bytes resource_signature = 2
+     */
+    resourceSignature: Uint8Array;
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GetUserRoot
+ */
+export interface AuthAPI_GetUserRoot {
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GetUserRoot.Request
+ */
+export interface AuthAPI_GetUserRoot_Request {
+    /**
+     * @generated from protobuf field: string login = 1
+     */
+    login: string;
+    /**
+     * @generated from protobuf field: bool do_not_create = 2
+     */
+    doNotCreate: boolean;
+}
+/**
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.GetUserRoot.Response
+ */
+export interface AuthAPI_GetUserRoot_Response {
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.UserRoot user_root = 1
+     */
+    userRoot?: AuthAPI_UserRoot;
+}
 /**
  * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources
  */
@@ -3449,9 +3578,9 @@ export interface AuthAPI_ListUserResources_Response {
     entry: {
         oneofKind: "userRoot";
         /**
-         * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot user_root = 1
+         * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.UserRoot user_root = 1
          */
-        userRoot: AuthAPI_ListUserResources_UserRoot;
+        userRoot: AuthAPI_UserRoot;
     } | {
         oneofKind: "sharedResource";
         /**
@@ -3470,38 +3599,56 @@ export interface AuthAPI_ListUserResources_Response {
     nextResourceId: bigint;
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot
+ * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource
  */
-export interface AuthAPI_ListUserResources_UserRoot {
+export interface AuthAPI_ListUserResources_SharedResource {
     /**
      * @generated from protobuf field: uint64 resource_id = 1
      */
     resourceId: bigint;
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * @generated from protobuf field: bytes resource_signature = 2
+     */
+    resourceSignature: Uint8Array;
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.Base.ResourceType resource_type = 3
+     */
+    resourceType?: ResourceType;
+    /**
+     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 4
      */
-    resourceSignature?: Uint8Array;
+    permissions?: AuthAPI_Grant_Permissions;
 }
 /**
- * @generated from protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource
+ * @generated from protobuf enum MiLaboratories.PL.API.AuthAPI.Role
  */
-export interface AuthAPI_ListUserResources_SharedResource {
+export enum AuthAPI_Role {
     /**
-     * @generated from protobuf field: uint64 resource_id = 1
+     * issue JWT with caller's natural role. Never appears in server responses.
+     *
+     * @generated from protobuf enum value: ROLE_UNSPECIFIED = 0;
      */
-    resourceId: bigint;
+    UNSPECIFIED = 0,
     /**
-     * @generated from protobuf field: optional bytes resource_signature = 2
+     * Controller roles
+     *
+     * @generated from protobuf enum value: ROLE_CONTROLLER = 2;
      */
-    resourceSignature?: Uint8Array;
+    CONTROLLER = 2,
     /**
-     * @generated from protobuf field: MiLaboratories.PL.Base.ResourceType resource_type = 3
+     * @generated from protobuf enum value: ROLE_WORKFLOW = 3;
      */
-    resourceType?: ResourceType;
+    WORKFLOW = 3,
     /**
-     * @generated from protobuf field: MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 4
+     * User roles
+     *
+     * @generated from protobuf enum value: ROLE_USER = 1;
      */
-    permissions?: AuthAPI_Grant_Permissions;
+    USER = 1,
+    /**
+     * @generated from protobuf enum value: ROLE_ADMIN = 4;
+     */
+    ADMIN = 4
 }
 /**
  * @generated from protobuf message MiLaboratories.PL.API.MiscAPI
@@ -3735,7 +3882,9 @@ class TxAPI_ClientMessage$Type extends MessageType<TxAPI_ClientMessage> {
             { no: 301, name: "cache_delete_expired_records", kind: "message", oneof: "request", T: () => Util_Deprecated },
             { no: 350, name: "controller_features_set", kind: "message", oneof: "request", T: () => ControllerAPI_SetFeatures_Request },
             { no: 351, name: "controller_features_clear", kind: "message", oneof: "request", T: () => ControllerAPI_ClearFeatures_Request },
-            { no: 400, name: "set_default_color", kind: "message", oneof: "request", T: () => TxAPI_SetDefaultColor_Request }
+            { no: 400, name: "set_default_color", kind: "message", oneof: "request", T: () => TxAPI_SetDefaultColor_Request },
+            { no: 410, name: "grant_access", kind: "message", oneof: "request", T: () => AuthAPI_GrantAccess_Request },
+            { no: 411, name: "revoke_access", kind: "message", oneof: "request", T: () => AuthAPI_RevokeAccess_Request }
         ]);
     }
     create(value?: PartialMessage<TxAPI_ClientMessage>): TxAPI_ClientMessage {
@@ -4108,6 +4257,18 @@ class TxAPI_ClientMessage$Type extends MessageType<TxAPI_ClientMessage> {
                         setDefaultColor: TxAPI_SetDefaultColor_Request.internalBinaryRead(reader, reader.uint32(), options, (message.request as any).setDefaultColor)
                     };
                     break;
+                case /* MiLaboratories.PL.API.AuthAPI.GrantAccess.Request grant_access */ 410:
+                    message.request = {
+                        oneofKind: "grantAccess",
+                        grantAccess: AuthAPI_GrantAccess_Request.internalBinaryRead(reader, reader.uint32(), options, (message.request as any).grantAccess)
+                    };
+                    break;
+                case /* MiLaboratories.PL.API.AuthAPI.RevokeAccess.Request revoke_access */ 411:
+                    message.request = {
+                        oneofKind: "revokeAccess",
+                        revokeAccess: AuthAPI_RevokeAccess_Request.internalBinaryRead(reader, reader.uint32(), options, (message.request as any).revokeAccess)
+                    };
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -4300,6 +4461,12 @@ class TxAPI_ClientMessage$Type extends MessageType<TxAPI_ClientMessage> {
         /* MiLaboratories.PL.API.TxAPI.SetDefaultColor.Request set_default_color = 400; */
         if (message.request.oneofKind === "setDefaultColor")
             TxAPI_SetDefaultColor_Request.internalBinaryWrite(message.request.setDefaultColor, writer.tag(400, WireType.LengthDelimited).fork(), options).join();
+        /* MiLaboratories.PL.API.AuthAPI.GrantAccess.Request grant_access = 410; */
+        if (message.request.oneofKind === "grantAccess")
+            AuthAPI_GrantAccess_Request.internalBinaryWrite(message.request.grantAccess, writer.tag(410, WireType.LengthDelimited).fork(), options).join();
+        /* MiLaboratories.PL.API.AuthAPI.RevokeAccess.Request revoke_access = 411; */
+        if (message.request.oneofKind === "revokeAccess")
+            AuthAPI_RevokeAccess_Request.internalBinaryWrite(message.request.revokeAccess, writer.tag(411, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -4375,6 +4542,8 @@ class TxAPI_ServerMessage$Type extends MessageType<TxAPI_ServerMessage> {
             { no: 350, name: "controller_features_set", kind: "message", oneof: "response", T: () => ControllerAPI_SetFeatures_Response },
             { no: 351, name: "controller_features_clear", kind: "message", oneof: "response", T: () => ControllerAPI_ClearFeatures_Response },
             { no: 400, name: "set_default_color", kind: "message", oneof: "response", T: () => TxAPI_SetDefaultColor_Response },
+            { no: 410, name: "grant_access", kind: "message", oneof: "response", T: () => AuthAPI_GrantAccess_Response },
+            { no: 411, name: "revoke_access", kind: "message", oneof: "response", T: () => AuthAPI_RevokeAccess_Response },
             { no: 3, name: "error", kind: "message", T: () => Status }
         ]);
     }
@@ -4751,6 +4920,18 @@ class TxAPI_ServerMessage$Type extends MessageType<TxAPI_ServerMessage> {
                         setDefaultColor: TxAPI_SetDefaultColor_Response.internalBinaryRead(reader, reader.uint32(), options, (message.response as any).setDefaultColor)
                     };
                     break;
+                case /* MiLaboratories.PL.API.AuthAPI.GrantAccess.Response grant_access */ 410:
+                    message.response = {
+                        oneofKind: "grantAccess",
+                        grantAccess: AuthAPI_GrantAccess_Response.internalBinaryRead(reader, reader.uint32(), options, (message.response as any).grantAccess)
+                    };
+                    break;
+                case /* MiLaboratories.PL.API.AuthAPI.RevokeAccess.Response revoke_access */ 411:
+                    message.response = {
+                        oneofKind: "revokeAccess",
+                        revokeAccess: AuthAPI_RevokeAccess_Response.internalBinaryRead(reader, reader.uint32(), options, (message.response as any).revokeAccess)
+                    };
+                    break;
                 case /* google.rpc.Status error */ 3:
                     message.error = Status.internalBinaryRead(reader, reader.uint32(), options, message.error);
                     break;
@@ -4952,6 +5133,12 @@ class TxAPI_ServerMessage$Type extends MessageType<TxAPI_ServerMessage> {
         /* MiLaboratories.PL.API.TxAPI.SetDefaultColor.Response set_default_color = 400; */
         if (message.response.oneofKind === "setDefaultColor")
             TxAPI_SetDefaultColor_Response.internalBinaryWrite(message.response.setDefaultColor, writer.tag(400, WireType.LengthDelimited).fork(), options).join();
+        /* MiLaboratories.PL.API.AuthAPI.GrantAccess.Response grant_access = 410; */
+        if (message.response.oneofKind === "grantAccess")
+            AuthAPI_GrantAccess_Response.internalBinaryWrite(message.response.grantAccess, writer.tag(410, WireType.LengthDelimited).fork(), options).join();
+        /* MiLaboratories.PL.API.AuthAPI.RevokeAccess.Response revoke_access = 411; */
+        if (message.response.oneofKind === "revokeAccess")
+            AuthAPI_RevokeAccess_Response.internalBinaryWrite(message.response.revokeAccess, writer.tag(411, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -5688,11 +5875,12 @@ export const TxAPI_SetDefaultColor = new TxAPI_SetDefaultColor$Type();
 class TxAPI_SetDefaultColor_Request$Type extends MessageType<TxAPI_SetDefaultColor_Request> {
     constructor() {
         super("MiLaboratories.PL.API.TxAPI.SetDefaultColor.Request", [
-            { no: 1, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 1, name: "color_proof", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<TxAPI_SetDefaultColor_Request>): TxAPI_SetDefaultColor_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
+        message.colorProof = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<TxAPI_SetDefaultColor_Request>(this, message, value);
         return message;
@@ -5702,7 +5890,7 @@ class TxAPI_SetDefaultColor_Request$Type extends MessageType<TxAPI_SetDefaultCol
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
-                case /* optional bytes color_proof */ 1:
+                case /* bytes color_proof */ 1:
                     message.colorProof = reader.bytes();
                     break;
                 default:
@@ -5717,8 +5905,8 @@ class TxAPI_SetDefaultColor_Request$Type extends MessageType<TxAPI_SetDefaultCol
         return message;
     }
     internalBinaryWrite(message: TxAPI_SetDefaultColor_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* optional bytes color_proof = 1; */
-        if (message.colorProof !== undefined)
+        /* bytes color_proof = 1; */
+        if (message.colorProof.length)
             writer.tag(1, WireType.LengthDelimited).bytes(message.colorProof);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -5851,7 +6039,7 @@ class ResourceAPI_CreateStruct_Request$Type extends MessageType<ResourceAPI_Crea
             { no: 2, name: "id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
             { no: 3, name: "type", kind: "message", T: () => ResourceType },
             { no: 4, name: "data", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
-            { no: 5, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 5, name: "color_proof", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateStruct_Request>): ResourceAPI_CreateStruct_Request {
@@ -5876,7 +6064,7 @@ class ResourceAPI_CreateStruct_Request$Type extends MessageType<ResourceAPI_Crea
                 case /* optional bytes data */ 4:
                     message.data = reader.bytes();
                     break;
-                case /* optional bytes color_proof */ 5:
+                case /* bytes color_proof */ 5:
                     message.colorProof = reader.bytes();
                     break;
                 default:
@@ -5900,8 +6088,8 @@ class ResourceAPI_CreateStruct_Request$Type extends MessageType<ResourceAPI_Crea
         /* optional bytes data = 4; */
         if (message.data !== undefined)
             writer.tag(4, WireType.LengthDelimited).bytes(message.data);
-        /* optional bytes color_proof = 5; */
-        if (message.colorProof !== undefined)
+        /* bytes color_proof = 5; */
+        if (message.colorProof.length)
             writer.tag(5, WireType.LengthDelimited).bytes(message.colorProof);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -5918,12 +6106,13 @@ class ResourceAPI_CreateStruct_Response$Type extends MessageType<ResourceAPI_Cre
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateStruct.Response", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateStruct_Response>): ResourceAPI_CreateStruct_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_CreateStruct_Response>(this, message, value);
         return message;
@@ -5936,7 +6125,7 @@ class ResourceAPI_CreateStruct_Response$Type extends MessageType<ResourceAPI_Cre
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -5954,8 +6143,8 @@ class ResourceAPI_CreateStruct_Response$Type extends MessageType<ResourceAPI_Cre
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -6012,7 +6201,7 @@ class ResourceAPI_CreateEphemeral_Request$Type extends MessageType<ResourceAPI_C
             { no: 2, name: "id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
             { no: 3, name: "type", kind: "message", T: () => ResourceType },
             { no: 4, name: "data", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
-            { no: 5, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 5, name: "color_proof", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateEphemeral_Request>): ResourceAPI_CreateEphemeral_Request {
@@ -6037,7 +6226,7 @@ class ResourceAPI_CreateEphemeral_Request$Type extends MessageType<ResourceAPI_C
                 case /* optional bytes data */ 4:
                     message.data = reader.bytes();
                     break;
-                case /* optional bytes color_proof */ 5:
+                case /* bytes color_proof */ 5:
                     message.colorProof = reader.bytes();
                     break;
                 default:
@@ -6061,8 +6250,8 @@ class ResourceAPI_CreateEphemeral_Request$Type extends MessageType<ResourceAPI_C
         /* optional bytes data = 4; */
         if (message.data !== undefined)
             writer.tag(4, WireType.LengthDelimited).bytes(message.data);
-        /* optional bytes color_proof = 5; */
-        if (message.colorProof !== undefined)
+        /* bytes color_proof = 5; */
+        if (message.colorProof.length)
             writer.tag(5, WireType.LengthDelimited).bytes(message.colorProof);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -6079,12 +6268,13 @@ class ResourceAPI_CreateEphemeral_Response$Type extends MessageType<ResourceAPI_
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateEphemeral.Response", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateEphemeral_Response>): ResourceAPI_CreateEphemeral_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_CreateEphemeral_Response>(this, message, value);
         return message;
@@ -6097,7 +6287,7 @@ class ResourceAPI_CreateEphemeral_Response$Type extends MessageType<ResourceAPI_
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -6115,8 +6305,8 @@ class ResourceAPI_CreateEphemeral_Response$Type extends MessageType<ResourceAPI_
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -6320,7 +6510,7 @@ class ResourceAPI_CreateValue_Request$Type extends MessageType<ResourceAPI_Creat
             { no: 3, name: "type", kind: "message", T: () => ResourceType },
             { no: 6, name: "data", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 7, name: "error_if_exists", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
-            { no: 8, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 8, name: "color_proof", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateValue_Request>): ResourceAPI_CreateValue_Request {
@@ -6350,7 +6540,7 @@ class ResourceAPI_CreateValue_Request$Type extends MessageType<ResourceAPI_Creat
                 case /* bool error_if_exists */ 7:
                     message.errorIfExists = reader.bool();
                     break;
-                case /* optional bytes color_proof */ 8:
+                case /* bytes color_proof */ 8:
                     message.colorProof = reader.bytes();
                     break;
                 default:
@@ -6377,8 +6567,8 @@ class ResourceAPI_CreateValue_Request$Type extends MessageType<ResourceAPI_Creat
         /* bool error_if_exists = 7; */
         if (message.errorIfExists !== false)
             writer.tag(7, WireType.Varint).bool(message.errorIfExists);
-        /* optional bytes color_proof = 8; */
-        if (message.colorProof !== undefined)
+        /* bytes color_proof = 8; */
+        if (message.colorProof.length)
             writer.tag(8, WireType.LengthDelimited).bytes(message.colorProof);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -6395,12 +6585,13 @@ class ResourceAPI_CreateValue_Response$Type extends MessageType<ResourceAPI_Crea
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateValue.Response", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateValue_Response>): ResourceAPI_CreateValue_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_CreateValue_Response>(this, message, value);
         return message;
@@ -6413,7 +6604,7 @@ class ResourceAPI_CreateValue_Response$Type extends MessageType<ResourceAPI_Crea
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -6431,8 +6622,8 @@ class ResourceAPI_CreateValue_Response$Type extends MessageType<ResourceAPI_Crea
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -6541,12 +6732,13 @@ class ResourceAPI_GetValueID_Response$Type extends MessageType<ResourceAPI_GetVa
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.GetValueID.Response", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_GetValueID_Response>): ResourceAPI_GetValueID_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_GetValueID_Response>(this, message, value);
         return message;
@@ -6559,7 +6751,7 @@ class ResourceAPI_GetValueID_Response$Type extends MessageType<ResourceAPI_GetVa
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -6577,8 +6769,8 @@ class ResourceAPI_GetValueID_Response$Type extends MessageType<ResourceAPI_GetVa
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -6636,7 +6828,7 @@ class ResourceAPI_CreateSingleton_Request$Type extends MessageType<ResourceAPI_C
             { no: 3, name: "type", kind: "message", T: () => ResourceType },
             { no: 6, name: "data", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 7, name: "error_if_exists", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
-            { no: 8, name: "color_proof", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 8, name: "color_proof", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateSingleton_Request>): ResourceAPI_CreateSingleton_Request {
@@ -6666,7 +6858,7 @@ class ResourceAPI_CreateSingleton_Request$Type extends MessageType<ResourceAPI_C
                 case /* bool error_if_exists */ 7:
                     message.errorIfExists = reader.bool();
                     break;
-                case /* optional bytes color_proof */ 8:
+                case /* bytes color_proof */ 8:
                     message.colorProof = reader.bytes();
                     break;
                 default:
@@ -6693,8 +6885,8 @@ class ResourceAPI_CreateSingleton_Request$Type extends MessageType<ResourceAPI_C
         /* bool error_if_exists = 7; */
         if (message.errorIfExists !== false)
             writer.tag(7, WireType.Varint).bool(message.errorIfExists);
-        /* optional bytes color_proof = 8; */
-        if (message.colorProof !== undefined)
+        /* bytes color_proof = 8; */
+        if (message.colorProof.length)
             writer.tag(8, WireType.LengthDelimited).bytes(message.colorProof);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -6711,12 +6903,13 @@ class ResourceAPI_CreateSingleton_Response$Type extends MessageType<ResourceAPI_
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateSingleton.Response", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateSingleton_Response>): ResourceAPI_CreateSingleton_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_CreateSingleton_Response>(this, message, value);
         return message;
@@ -6729,7 +6922,7 @@ class ResourceAPI_CreateSingleton_Response$Type extends MessageType<ResourceAPI_
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -6747,8 +6940,8 @@ class ResourceAPI_CreateSingleton_Response$Type extends MessageType<ResourceAPI_
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -6949,12 +7142,13 @@ class ResourceAPI_LockInputs_Request$Type extends MessageType<ResourceAPI_LockIn
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.LockInputs.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_LockInputs_Request>): ResourceAPI_LockInputs_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_LockInputs_Request>(this, message, value);
         return message;
@@ -6967,7 +7161,7 @@ class ResourceAPI_LockInputs_Request$Type extends MessageType<ResourceAPI_LockIn
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -6985,8 +7179,8 @@ class ResourceAPI_LockInputs_Request$Type extends MessageType<ResourceAPI_LockIn
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -7079,12 +7273,13 @@ class ResourceAPI_LockOutputs_Request$Type extends MessageType<ResourceAPI_LockO
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.LockOutputs.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_LockOutputs_Request>): ResourceAPI_LockOutputs_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_LockOutputs_Request>(this, message, value);
         return message;
@@ -7097,7 +7292,7 @@ class ResourceAPI_LockOutputs_Request$Type extends MessageType<ResourceAPI_LockO
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -7115,8 +7310,8 @@ class ResourceAPI_LockOutputs_Request$Type extends MessageType<ResourceAPI_LockO
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -7209,12 +7404,13 @@ class ResourceAPI_Exists_Request$Type extends MessageType<ResourceAPI_Exists_Req
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Exists.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_Exists_Request>): ResourceAPI_Exists_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_Exists_Request>(this, message, value);
         return message;
@@ -7227,7 +7423,7 @@ class ResourceAPI_Exists_Request$Type extends MessageType<ResourceAPI_Exists_Req
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -7245,8 +7441,8 @@ class ResourceAPI_Exists_Request$Type extends MessageType<ResourceAPI_Exists_Req
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -7348,15 +7544,17 @@ class ResourceAPI_SetError_Request$Type extends MessageType<ResourceAPI_SetError
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.SetError.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "error_resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 4, name: "error_resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 4, name: "error_resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_SetError_Request>): ResourceAPI_SetError_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.errorResourceId = 0n;
+        message.errorResourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_SetError_Request>(this, message, value);
         return message;
@@ -7369,13 +7567,13 @@ class ResourceAPI_SetError_Request$Type extends MessageType<ResourceAPI_SetError
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 3:
+                case /* bytes resource_signature */ 3:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* uint64 error_resource_id */ 2:
                     message.errorResourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes error_resource_signature */ 4:
+                case /* bytes error_resource_signature */ 4:
                     message.errorResourceSignature = reader.bytes();
                     break;
                 default:
@@ -7396,11 +7594,11 @@ class ResourceAPI_SetError_Request$Type extends MessageType<ResourceAPI_SetError
         /* uint64 error_resource_id = 2; */
         if (message.errorResourceId !== 0n)
             writer.tag(2, WireType.Varint).uint64(message.errorResourceId);
-        /* optional bytes resource_signature = 3; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 3; */
+        if (message.resourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
-        /* optional bytes error_resource_signature = 4; */
-        if (message.errorResourceSignature !== undefined)
+        /* bytes error_resource_signature = 4; */
+        if (message.errorResourceSignature.length)
             writer.tag(4, WireType.LengthDelimited).bytes(message.errorResourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -7493,13 +7691,14 @@ class ResourceAPI_Get_Request$Type extends MessageType<ResourceAPI_Get_Request>
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Get.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "load_fields", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_Get_Request>): ResourceAPI_Get_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.loadFields = false;
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_Get_Request>(this, message, value);
@@ -7513,7 +7712,7 @@ class ResourceAPI_Get_Request$Type extends MessageType<ResourceAPI_Get_Request>
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 3:
+                case /* bytes resource_signature */ 3:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* bool load_fields */ 2:
@@ -7537,8 +7736,8 @@ class ResourceAPI_Get_Request$Type extends MessageType<ResourceAPI_Get_Request>
         /* bool load_fields = 2; */
         if (message.loadFields !== false)
             writer.tag(2, WireType.Varint).bool(message.loadFields);
-        /* optional bytes resource_signature = 3; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 3; */
+        if (message.resourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -7893,12 +8092,13 @@ class ResourceAPI_CreateRoot_Response$Type extends MessageType<ResourceAPI_Creat
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.CreateRoot.Response", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_CreateRoot_Response>): ResourceAPI_CreateRoot_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_CreateRoot_Response>(this, message, value);
         return message;
@@ -7911,7 +8111,7 @@ class ResourceAPI_CreateRoot_Response$Type extends MessageType<ResourceAPI_Creat
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -7929,8 +8129,8 @@ class ResourceAPI_CreateRoot_Response$Type extends MessageType<ResourceAPI_Creat
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -7985,12 +8185,13 @@ class ResourceAPI_Remove_Request$Type extends MessageType<ResourceAPI_Remove_Req
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Remove.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_Remove_Request>): ResourceAPI_Remove_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_Remove_Request>(this, message, value);
         return message;
@@ -8003,7 +8204,7 @@ class ResourceAPI_Remove_Request$Type extends MessageType<ResourceAPI_Remove_Req
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -8021,8 +8222,8 @@ class ResourceAPI_Remove_Request$Type extends MessageType<ResourceAPI_Remove_Req
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -8153,13 +8354,14 @@ class ResourceAPI_Name_Set_Request$Type extends MessageType<ResourceAPI_Name_Set
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Name.Set.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_Name_Set_Request>): ResourceAPI_Name_Set_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.name = "";
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_Name_Set_Request>(this, message, value);
@@ -8173,7 +8375,7 @@ class ResourceAPI_Name_Set_Request$Type extends MessageType<ResourceAPI_Name_Set
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 3:
+                case /* bytes resource_signature */ 3:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string name */ 2:
@@ -8197,8 +8399,8 @@ class ResourceAPI_Name_Set_Request$Type extends MessageType<ResourceAPI_Name_Set
         /* string name = 2; */
         if (message.name !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.name);
-        /* optional bytes resource_signature = 3; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 3; */
+        if (message.resourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -8338,12 +8540,13 @@ class ResourceAPI_Name_Get_Response$Type extends MessageType<ResourceAPI_Name_Ge
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Name.Get.Response", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_Name_Get_Response>): ResourceAPI_Name_Get_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_Name_Get_Response>(this, message, value);
         return message;
@@ -8356,7 +8559,7 @@ class ResourceAPI_Name_Get_Response$Type extends MessageType<ResourceAPI_Name_Ge
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -8374,8 +8577,8 @@ class ResourceAPI_Name_Get_Response$Type extends MessageType<ResourceAPI_Name_Ge
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -8685,13 +8888,14 @@ class ResourceAPI_Tree_Request$Type extends MessageType<ResourceAPI_Tree_Request
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.Tree.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "max_depth", kind: "scalar", opt: true, T: 13 /*ScalarType.UINT32*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_Tree_Request>): ResourceAPI_Tree_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_Tree_Request>(this, message, value);
         return message;
@@ -8704,7 +8908,7 @@ class ResourceAPI_Tree_Request$Type extends MessageType<ResourceAPI_Tree_Request
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 3:
+                case /* bytes resource_signature */ 3:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* optional uint32 max_depth */ 2:
@@ -8728,8 +8932,8 @@ class ResourceAPI_Tree_Request$Type extends MessageType<ResourceAPI_Tree_Request
         /* optional uint32 max_depth = 2; */
         if (message.maxDepth !== undefined)
             writer.tag(2, WireType.Varint).uint32(message.maxDepth);
-        /* optional bytes resource_signature = 3; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 3; */
+        if (message.resourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -8830,12 +9034,13 @@ class ResourceAPI_TreeSize_Request$Type extends MessageType<ResourceAPI_TreeSize
     constructor() {
         super("MiLaboratories.PL.API.ResourceAPI.TreeSize.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceAPI_TreeSize_Request>): ResourceAPI_TreeSize_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<ResourceAPI_TreeSize_Request>(this, message, value);
         return message;
@@ -8848,7 +9053,7 @@ class ResourceAPI_TreeSize_Request$Type extends MessageType<ResourceAPI_TreeSize
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -8866,8 +9071,8 @@ class ResourceAPI_TreeSize_Request$Type extends MessageType<ResourceAPI_TreeSize
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -9414,12 +9619,13 @@ class FieldAPI_SetError_Request$Type extends MessageType<FieldAPI_SetError_Reque
         super("MiLaboratories.PL.API.FieldAPI.SetError.Request", [
             { no: 1, name: "field", kind: "message", T: () => FieldRef },
             { no: 2, name: "error_resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "error_resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 3, name: "error_resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<FieldAPI_SetError_Request>): FieldAPI_SetError_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.errorResourceId = 0n;
+        message.errorResourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<FieldAPI_SetError_Request>(this, message, value);
         return message;
@@ -9435,7 +9641,7 @@ class FieldAPI_SetError_Request$Type extends MessageType<FieldAPI_SetError_Reque
                 case /* uint64 error_resource_id */ 2:
                     message.errorResourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes error_resource_signature */ 3:
+                case /* bytes error_resource_signature */ 3:
                     message.errorResourceSignature = reader.bytes();
                     break;
                 default:
@@ -9456,8 +9662,8 @@ class FieldAPI_SetError_Request$Type extends MessageType<FieldAPI_SetError_Reque
         /* uint64 error_resource_id = 2; */
         if (message.errorResourceId !== 0n)
             writer.tag(2, WireType.Varint).uint64(message.errorResourceId);
-        /* optional bytes error_resource_signature = 3; */
-        if (message.errorResourceSignature !== undefined)
+        /* bytes error_resource_signature = 3; */
+        if (message.errorResourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.errorResourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -9924,7 +10130,7 @@ class FieldAPI_List_Request$Type extends MessageType<FieldAPI_List_Request> {
     constructor() {
         super("MiLaboratories.PL.API.FieldAPI.List.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 4, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 4, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "start_from", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 3, name: "limit", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
         ]);
@@ -9932,6 +10138,7 @@ class FieldAPI_List_Request$Type extends MessageType<FieldAPI_List_Request> {
     create(value?: PartialMessage<FieldAPI_List_Request>): FieldAPI_List_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.startFrom = "";
         message.limit = 0;
         if (value !== undefined)
@@ -9946,7 +10153,7 @@ class FieldAPI_List_Request$Type extends MessageType<FieldAPI_List_Request> {
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 4:
+                case /* bytes resource_signature */ 4:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string start_from */ 2:
@@ -9976,8 +10183,8 @@ class FieldAPI_List_Request$Type extends MessageType<FieldAPI_List_Request> {
         /* uint32 limit = 3; */
         if (message.limit !== 0)
             writer.tag(3, WireType.Varint).uint32(message.limit);
-        /* optional bytes resource_signature = 4; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 4; */
+        if (message.resourceSignature.length)
             writer.tag(4, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -13170,7 +13377,7 @@ class ResourceKVAPI_List_Request$Type extends MessageType<ResourceKVAPI_List_Req
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.List.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 4, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 4, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "start_from", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 3, name: "limit", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
         ]);
@@ -13178,6 +13385,7 @@ class ResourceKVAPI_List_Request$Type extends MessageType<ResourceKVAPI_List_Req
     create(value?: PartialMessage<ResourceKVAPI_List_Request>): ResourceKVAPI_List_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.startFrom = "";
         message.limit = 0;
         if (value !== undefined)
@@ -13192,7 +13400,7 @@ class ResourceKVAPI_List_Request$Type extends MessageType<ResourceKVAPI_List_Req
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 4:
+                case /* bytes resource_signature */ 4:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string start_from */ 2:
@@ -13222,8 +13430,8 @@ class ResourceKVAPI_List_Request$Type extends MessageType<ResourceKVAPI_List_Req
         /* uint32 limit = 3; */
         if (message.limit !== 0)
             writer.tag(3, WireType.Varint).uint32(message.limit);
-        /* optional bytes resource_signature = 4; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 4; */
+        if (message.resourceSignature.length)
             writer.tag(4, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -13387,7 +13595,7 @@ class ResourceKVAPI_Set_Request$Type extends MessageType<ResourceKVAPI_Set_Reque
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.Set.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 4, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 4, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 3, name: "value", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
@@ -13395,6 +13603,7 @@ class ResourceKVAPI_Set_Request$Type extends MessageType<ResourceKVAPI_Set_Reque
     create(value?: PartialMessage<ResourceKVAPI_Set_Request>): ResourceKVAPI_Set_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.key = "";
         message.value = new Uint8Array(0);
         if (value !== undefined)
@@ -13409,7 +13618,7 @@ class ResourceKVAPI_Set_Request$Type extends MessageType<ResourceKVAPI_Set_Reque
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 4:
+                case /* bytes resource_signature */ 4:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string key */ 2:
@@ -13439,8 +13648,8 @@ class ResourceKVAPI_Set_Request$Type extends MessageType<ResourceKVAPI_Set_Reque
         /* bytes value = 3; */
         if (message.value.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.value);
-        /* optional bytes resource_signature = 4; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 4; */
+        if (message.resourceSignature.length)
             writer.tag(4, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -13533,13 +13742,14 @@ class ResourceKVAPI_Get_Request$Type extends MessageType<ResourceKVAPI_Get_Reque
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.Get.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceKVAPI_Get_Request>): ResourceKVAPI_Get_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.key = "";
         if (value !== undefined)
             reflectionMergePartial<ResourceKVAPI_Get_Request>(this, message, value);
@@ -13553,7 +13763,7 @@ class ResourceKVAPI_Get_Request$Type extends MessageType<ResourceKVAPI_Get_Reque
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 3:
+                case /* bytes resource_signature */ 3:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string key */ 2:
@@ -13577,8 +13787,8 @@ class ResourceKVAPI_Get_Request$Type extends MessageType<ResourceKVAPI_Get_Reque
         /* string key = 2; */
         if (message.key !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.key);
-        /* optional bytes resource_signature = 3; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 3; */
+        if (message.resourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -13680,13 +13890,14 @@ class ResourceKVAPI_GetIfExists_Request$Type extends MessageType<ResourceKVAPI_G
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.GetIfExists.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceKVAPI_GetIfExists_Request>): ResourceKVAPI_GetIfExists_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.key = "";
         if (value !== undefined)
             reflectionMergePartial<ResourceKVAPI_GetIfExists_Request>(this, message, value);
@@ -13700,7 +13911,7 @@ class ResourceKVAPI_GetIfExists_Request$Type extends MessageType<ResourceKVAPI_G
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 3:
+                case /* bytes resource_signature */ 3:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string key */ 2:
@@ -13724,8 +13935,8 @@ class ResourceKVAPI_GetIfExists_Request$Type extends MessageType<ResourceKVAPI_G
         /* string key = 2; */
         if (message.key !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.key);
-        /* optional bytes resource_signature = 3; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 3; */
+        if (message.resourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -13835,13 +14046,14 @@ class ResourceKVAPI_Delete_Request$Type extends MessageType<ResourceKVAPI_Delete
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.Delete.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceKVAPI_Delete_Request>): ResourceKVAPI_Delete_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.key = "";
         if (value !== undefined)
             reflectionMergePartial<ResourceKVAPI_Delete_Request>(this, message, value);
@@ -13855,7 +14067,7 @@ class ResourceKVAPI_Delete_Request$Type extends MessageType<ResourceKVAPI_Delete
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 3:
+                case /* bytes resource_signature */ 3:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string key */ 2:
@@ -13879,8 +14091,8 @@ class ResourceKVAPI_Delete_Request$Type extends MessageType<ResourceKVAPI_Delete
         /* string key = 2; */
         if (message.key !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.key);
-        /* optional bytes resource_signature = 3; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 3; */
+        if (message.resourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -13973,7 +14185,7 @@ class ResourceKVAPI_SetFlag_Request$Type extends MessageType<ResourceKVAPI_SetFl
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.SetFlag.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 4, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 4, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 3, name: "value", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
         ]);
@@ -13981,6 +14193,7 @@ class ResourceKVAPI_SetFlag_Request$Type extends MessageType<ResourceKVAPI_SetFl
     create(value?: PartialMessage<ResourceKVAPI_SetFlag_Request>): ResourceKVAPI_SetFlag_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.key = "";
         message.value = false;
         if (value !== undefined)
@@ -13995,7 +14208,7 @@ class ResourceKVAPI_SetFlag_Request$Type extends MessageType<ResourceKVAPI_SetFl
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 4:
+                case /* bytes resource_signature */ 4:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string key */ 2:
@@ -14025,8 +14238,8 @@ class ResourceKVAPI_SetFlag_Request$Type extends MessageType<ResourceKVAPI_SetFl
         /* bool value = 3; */
         if (message.value !== false)
             writer.tag(3, WireType.Varint).bool(message.value);
-        /* optional bytes resource_signature = 4; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 4; */
+        if (message.resourceSignature.length)
             writer.tag(4, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -14119,13 +14332,14 @@ class ResourceKVAPI_GetFlag_Request$Type extends MessageType<ResourceKVAPI_GetFl
     constructor() {
         super("MiLaboratories.PL.API.ResourceKVAPI.GetFlag.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "key", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value?: PartialMessage<ResourceKVAPI_GetFlag_Request>): ResourceKVAPI_GetFlag_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.key = "";
         if (value !== undefined)
             reflectionMergePartial<ResourceKVAPI_GetFlag_Request>(this, message, value);
@@ -14139,7 +14353,7 @@ class ResourceKVAPI_GetFlag_Request$Type extends MessageType<ResourceKVAPI_GetFl
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 3:
+                case /* bytes resource_signature */ 3:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string key */ 2:
@@ -14163,8 +14377,8 @@ class ResourceKVAPI_GetFlag_Request$Type extends MessageType<ResourceKVAPI_GetFl
         /* string key = 2; */
         if (message.key !== "")
             writer.tag(2, WireType.LengthDelimited).string(message.key);
-        /* optional bytes resource_signature = 3; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 3; */
+        if (message.resourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -15681,7 +15895,7 @@ class LocksAPI_Lease_Create_Request$Type extends MessageType<LocksAPI_Lease_Crea
     constructor() {
         super("MiLaboratories.PL.API.LocksAPI.Lease.Create.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 5, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 5, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 3, name: "timeout", kind: "message", T: () => Duration },
             { no: 4, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
@@ -15689,6 +15903,7 @@ class LocksAPI_Lease_Create_Request$Type extends MessageType<LocksAPI_Lease_Crea
     create(value?: PartialMessage<LocksAPI_Lease_Create_Request>): LocksAPI_Lease_Create_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.name = "";
         if (value !== undefined)
             reflectionMergePartial<LocksAPI_Lease_Create_Request>(this, message, value);
@@ -15702,7 +15917,7 @@ class LocksAPI_Lease_Create_Request$Type extends MessageType<LocksAPI_Lease_Crea
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 5:
+                case /* bytes resource_signature */ 5:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* google.protobuf.Duration timeout */ 3:
@@ -15732,8 +15947,8 @@ class LocksAPI_Lease_Create_Request$Type extends MessageType<LocksAPI_Lease_Crea
         /* string name = 4; */
         if (message.name !== "")
             writer.tag(4, WireType.LengthDelimited).string(message.name);
-        /* optional bytes resource_signature = 5; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 5; */
+        if (message.resourceSignature.length)
             writer.tag(5, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -15835,7 +16050,7 @@ class LocksAPI_Lease_Update_Request$Type extends MessageType<LocksAPI_Lease_Upda
     constructor() {
         super("MiLaboratories.PL.API.LocksAPI.Lease.Update.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 5, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 5, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "lease_id", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 3, name: "timeout", kind: "message", T: () => Duration },
             { no: 4, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
@@ -15844,6 +16059,7 @@ class LocksAPI_Lease_Update_Request$Type extends MessageType<LocksAPI_Lease_Upda
     create(value?: PartialMessage<LocksAPI_Lease_Update_Request>): LocksAPI_Lease_Update_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.leaseId = new Uint8Array(0);
         message.name = "";
         if (value !== undefined)
@@ -15858,7 +16074,7 @@ class LocksAPI_Lease_Update_Request$Type extends MessageType<LocksAPI_Lease_Upda
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 5:
+                case /* bytes resource_signature */ 5:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* bytes lease_id */ 2:
@@ -15894,8 +16110,8 @@ class LocksAPI_Lease_Update_Request$Type extends MessageType<LocksAPI_Lease_Upda
         /* string name = 4; */
         if (message.name !== "")
             writer.tag(4, WireType.LengthDelimited).string(message.name);
-        /* optional bytes resource_signature = 5; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 5; */
+        if (message.resourceSignature.length)
             writer.tag(5, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -15988,13 +16204,14 @@ class LocksAPI_Lease_Release_Request$Type extends MessageType<LocksAPI_Lease_Rel
     constructor() {
         super("MiLaboratories.PL.API.LocksAPI.Lease.Release.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 2, name: "lease_id", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<LocksAPI_Lease_Release_Request>): LocksAPI_Lease_Release_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.leaseId = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<LocksAPI_Lease_Release_Request>(this, message, value);
@@ -16008,7 +16225,7 @@ class LocksAPI_Lease_Release_Request$Type extends MessageType<LocksAPI_Lease_Rel
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 3:
+                case /* bytes resource_signature */ 3:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* bytes lease_id */ 2:
@@ -16032,8 +16249,8 @@ class LocksAPI_Lease_Release_Request$Type extends MessageType<LocksAPI_Lease_Rel
         /* bytes lease_id = 2; */
         if (message.leaseId.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.leaseId);
-        /* optional bytes resource_signature = 3; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 3; */
+        if (message.resourceSignature.length)
             writer.tag(3, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -16366,7 +16583,7 @@ class AuthAPI_GetJWTToken_Request$Type extends MessageType<AuthAPI_GetJWTToken_R
     constructor() {
         super("MiLaboratories.PL.API.AuthAPI.GetJWTToken.Request", [
             { no: 1, name: "expiration", kind: "message", T: () => Duration },
-            { no: 2, name: "requested_role", kind: "enum", opt: true, T: () => ["MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role", AuthAPI_GetJWTToken_Role] }
+            { no: 2, name: "requested_role", kind: "enum", opt: true, T: () => ["MiLaboratories.PL.API.AuthAPI.Role", AuthAPI_Role, "ROLE_"] }
         ]);
     }
     create(value?: PartialMessage<AuthAPI_GetJWTToken_Request>): AuthAPI_GetJWTToken_Request {
@@ -16383,7 +16600,7 @@ class AuthAPI_GetJWTToken_Request$Type extends MessageType<AuthAPI_GetJWTToken_R
                 case /* google.protobuf.Duration expiration */ 1:
                     message.expiration = Duration.internalBinaryRead(reader, reader.uint32(), options, message.expiration);
                     break;
-                case /* optional MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role requested_role */ 2:
+                case /* optional MiLaboratories.PL.API.AuthAPI.Role requested_role */ 2:
                     message.requestedRole = reader.int32();
                     break;
                 default:
@@ -16401,7 +16618,7 @@ class AuthAPI_GetJWTToken_Request$Type extends MessageType<AuthAPI_GetJWTToken_R
         /* google.protobuf.Duration expiration = 1; */
         if (message.expiration)
             Duration.internalBinaryWrite(message.expiration, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        /* optional MiLaboratories.PL.API.AuthAPI.GetJWTToken.Role requested_role = 2; */
+        /* optional MiLaboratories.PL.API.AuthAPI.Role requested_role = 2; */
         if (message.requestedRole !== undefined)
             writer.tag(2, WireType.Varint).int32(message.requestedRole);
         let u = options.writeUnknownFields;
@@ -16419,13 +16636,15 @@ class AuthAPI_GetJWTToken_Response$Type extends MessageType<AuthAPI_GetJWTToken_
     constructor() {
         super("MiLaboratories.PL.API.AuthAPI.GetJWTToken.Response", [
             { no: 1, name: "token", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "session_id", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "session_id", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "role", kind: "enum", T: () => ["MiLaboratories.PL.API.AuthAPI.Role", AuthAPI_Role, "ROLE_"] }
         ]);
     }
     create(value?: PartialMessage<AuthAPI_GetJWTToken_Response>): AuthAPI_GetJWTToken_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.token = "";
         message.sessionId = new Uint8Array(0);
+        message.role = 0;
         if (value !== undefined)
             reflectionMergePartial<AuthAPI_GetJWTToken_Response>(this, message, value);
         return message;
@@ -16441,6 +16660,9 @@ class AuthAPI_GetJWTToken_Response$Type extends MessageType<AuthAPI_GetJWTToken_
                 case /* bytes session_id */ 2:
                     message.sessionId = reader.bytes();
                     break;
+                case /* MiLaboratories.PL.API.AuthAPI.Role role */ 3:
+                    message.role = reader.int32();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -16459,6 +16681,9 @@ class AuthAPI_GetJWTToken_Response$Type extends MessageType<AuthAPI_GetJWTToken_
         /* bytes session_id = 2; */
         if (message.sessionId.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.sessionId);
+        /* MiLaboratories.PL.API.AuthAPI.Role role = 3; */
+        if (message.role !== 0)
+            writer.tag(3, WireType.Varint).int32(message.role);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -16470,6 +16695,137 @@ class AuthAPI_GetJWTToken_Response$Type extends MessageType<AuthAPI_GetJWTToken_
  */
 export const AuthAPI_GetJWTToken_Response = new AuthAPI_GetJWTToken_Response$Type();
 // @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_GetSessionInfo$Type extends MessageType<AuthAPI_GetSessionInfo> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.GetSessionInfo", []);
+    }
+    create(value?: PartialMessage<AuthAPI_GetSessionInfo>): AuthAPI_GetSessionInfo {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_GetSessionInfo>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_GetSessionInfo): AuthAPI_GetSessionInfo {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_GetSessionInfo, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.GetSessionInfo
+ */
+export const AuthAPI_GetSessionInfo = new AuthAPI_GetSessionInfo$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_GetSessionInfo_Request$Type extends MessageType<AuthAPI_GetSessionInfo_Request> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.GetSessionInfo.Request", []);
+    }
+    create(value?: PartialMessage<AuthAPI_GetSessionInfo_Request>): AuthAPI_GetSessionInfo_Request {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_GetSessionInfo_Request>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_GetSessionInfo_Request): AuthAPI_GetSessionInfo_Request {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_GetSessionInfo_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.GetSessionInfo.Request
+ */
+export const AuthAPI_GetSessionInfo_Request = new AuthAPI_GetSessionInfo_Request$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_GetSessionInfo_Response$Type extends MessageType<AuthAPI_GetSessionInfo_Response> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.GetSessionInfo.Response", [
+            { no: 1, name: "session_id", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
+            { no: 2, name: "role", kind: "enum", T: () => ["MiLaboratories.PL.API.AuthAPI.Role", AuthAPI_Role, "ROLE_"] }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_GetSessionInfo_Response>): AuthAPI_GetSessionInfo_Response {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.sessionId = new Uint8Array(0);
+        message.role = 0;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_GetSessionInfo_Response>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_GetSessionInfo_Response): AuthAPI_GetSessionInfo_Response {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* bytes session_id */ 1:
+                    message.sessionId = reader.bytes();
+                    break;
+                case /* MiLaboratories.PL.API.AuthAPI.Role role */ 2:
+                    message.role = reader.int32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_GetSessionInfo_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* bytes session_id = 1; */
+        if (message.sessionId.length)
+            writer.tag(1, WireType.LengthDelimited).bytes(message.sessionId);
+        /* MiLaboratories.PL.API.AuthAPI.Role role = 2; */
+        if (message.role !== 0)
+            writer.tag(2, WireType.Varint).int32(message.role);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.GetSessionInfo.Response
+ */
+export const AuthAPI_GetSessionInfo_Response = new AuthAPI_GetSessionInfo_Response$Type();
+// @generated message type with reflection information, may provide speed optimized methods
 class AuthAPI_GrantAccess$Type extends MessageType<AuthAPI_GrantAccess> {
     constructor() {
         super("MiLaboratories.PL.API.AuthAPI.GrantAccess", []);
@@ -16512,15 +16868,18 @@ class AuthAPI_GrantAccess_Request$Type extends MessageType<AuthAPI_GrantAccess_R
     constructor() {
         super("MiLaboratories.PL.API.AuthAPI.GrantAccess.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 3, name: "target_user", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "permissions", kind: "message", T: () => AuthAPI_Grant_Permissions }
+            { no: 4, name: "permissions", kind: "message", T: () => AuthAPI_Grant_Permissions },
+            { no: 5, name: "grant_type", kind: "enum", T: () => ["MiLaboratories.PL.API.AuthAPI.GrantAccess.GrantType", AuthAPI_GrantAccess_GrantType] }
         ]);
     }
     create(value?: PartialMessage<AuthAPI_GrantAccess_Request>): AuthAPI_GrantAccess_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.targetUser = "";
+        message.grantType = 0;
         if (value !== undefined)
             reflectionMergePartial<AuthAPI_GrantAccess_Request>(this, message, value);
         return message;
@@ -16533,7 +16892,7 @@ class AuthAPI_GrantAccess_Request$Type extends MessageType<AuthAPI_GrantAccess_R
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string target_user */ 3:
@@ -16542,6 +16901,9 @@ class AuthAPI_GrantAccess_Request$Type extends MessageType<AuthAPI_GrantAccess_R
                 case /* MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions */ 4:
                     message.permissions = AuthAPI_Grant_Permissions.internalBinaryRead(reader, reader.uint32(), options, message.permissions);
                     break;
+                case /* MiLaboratories.PL.API.AuthAPI.GrantAccess.GrantType grant_type */ 5:
+                    message.grantType = reader.int32();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -16557,8 +16919,8 @@ class AuthAPI_GrantAccess_Request$Type extends MessageType<AuthAPI_GrantAccess_R
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         /* string target_user = 3; */
         if (message.targetUser !== "")
@@ -16566,6 +16928,9 @@ class AuthAPI_GrantAccess_Request$Type extends MessageType<AuthAPI_GrantAccess_R
         /* MiLaboratories.PL.API.AuthAPI.Grant.Permissions permissions = 4; */
         if (message.permissions)
             AuthAPI_Grant_Permissions.internalBinaryWrite(message.permissions, writer.tag(4, WireType.LengthDelimited).fork(), options).join();
+        /* MiLaboratories.PL.API.AuthAPI.GrantAccess.GrantType grant_type = 5; */
+        if (message.grantType !== 0)
+            writer.tag(5, WireType.Varint).int32(message.grantType);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -16615,17 +16980,17 @@ class AuthAPI_GrantAccess_Response$Type extends MessageType<AuthAPI_GrantAccess_
  */
 export const AuthAPI_GrantAccess_Response = new AuthAPI_GrantAccess_Response$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class AuthAPI_RevokeGrant$Type extends MessageType<AuthAPI_RevokeGrant> {
+class AuthAPI_RevokeAccess$Type extends MessageType<AuthAPI_RevokeAccess> {
     constructor() {
-        super("MiLaboratories.PL.API.AuthAPI.RevokeGrant", []);
+        super("MiLaboratories.PL.API.AuthAPI.RevokeAccess", []);
     }
-    create(value?: PartialMessage<AuthAPI_RevokeGrant>): AuthAPI_RevokeGrant {
+    create(value?: PartialMessage<AuthAPI_RevokeAccess>): AuthAPI_RevokeAccess {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<AuthAPI_RevokeGrant>(this, message, value);
+            reflectionMergePartial<AuthAPI_RevokeAccess>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_RevokeGrant): AuthAPI_RevokeGrant {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_RevokeAccess): AuthAPI_RevokeAccess {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -16641,7 +17006,7 @@ class AuthAPI_RevokeGrant$Type extends MessageType<AuthAPI_RevokeGrant> {
         }
         return message;
     }
-    internalBinaryWrite(message: AuthAPI_RevokeGrant, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_RevokeAccess, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -16649,27 +17014,28 @@ class AuthAPI_RevokeGrant$Type extends MessageType<AuthAPI_RevokeGrant> {
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.RevokeAccess
  */
-export const AuthAPI_RevokeGrant = new AuthAPI_RevokeGrant$Type();
+export const AuthAPI_RevokeAccess = new AuthAPI_RevokeAccess$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class AuthAPI_RevokeGrant_Request$Type extends MessageType<AuthAPI_RevokeGrant_Request> {
+class AuthAPI_RevokeAccess_Request$Type extends MessageType<AuthAPI_RevokeAccess_Request> {
     constructor() {
-        super("MiLaboratories.PL.API.AuthAPI.RevokeGrant.Request", [
+        super("MiLaboratories.PL.API.AuthAPI.RevokeAccess.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 3, name: "target_user", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
-    create(value?: PartialMessage<AuthAPI_RevokeGrant_Request>): AuthAPI_RevokeGrant_Request {
+    create(value?: PartialMessage<AuthAPI_RevokeAccess_Request>): AuthAPI_RevokeAccess_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         message.targetUser = "";
         if (value !== undefined)
-            reflectionMergePartial<AuthAPI_RevokeGrant_Request>(this, message, value);
+            reflectionMergePartial<AuthAPI_RevokeAccess_Request>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_RevokeGrant_Request): AuthAPI_RevokeGrant_Request {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_RevokeAccess_Request): AuthAPI_RevokeAccess_Request {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -16677,7 +17043,7 @@ class AuthAPI_RevokeGrant_Request$Type extends MessageType<AuthAPI_RevokeGrant_R
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* string target_user */ 3:
@@ -16694,12 +17060,12 @@ class AuthAPI_RevokeGrant_Request$Type extends MessageType<AuthAPI_RevokeGrant_R
         }
         return message;
     }
-    internalBinaryWrite(message: AuthAPI_RevokeGrant_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_RevokeAccess_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         /* string target_user = 3; */
         if (message.targetUser !== "")
@@ -16711,21 +17077,21 @@ class AuthAPI_RevokeGrant_Request$Type extends MessageType<AuthAPI_RevokeGrant_R
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant.Request
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.RevokeAccess.Request
  */
-export const AuthAPI_RevokeGrant_Request = new AuthAPI_RevokeGrant_Request$Type();
+export const AuthAPI_RevokeAccess_Request = new AuthAPI_RevokeAccess_Request$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class AuthAPI_RevokeGrant_Response$Type extends MessageType<AuthAPI_RevokeGrant_Response> {
+class AuthAPI_RevokeAccess_Response$Type extends MessageType<AuthAPI_RevokeAccess_Response> {
     constructor() {
-        super("MiLaboratories.PL.API.AuthAPI.RevokeGrant.Response", []);
+        super("MiLaboratories.PL.API.AuthAPI.RevokeAccess.Response", []);
     }
-    create(value?: PartialMessage<AuthAPI_RevokeGrant_Response>): AuthAPI_RevokeGrant_Response {
+    create(value?: PartialMessage<AuthAPI_RevokeAccess_Response>): AuthAPI_RevokeAccess_Response {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<AuthAPI_RevokeGrant_Response>(this, message, value);
+            reflectionMergePartial<AuthAPI_RevokeAccess_Response>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_RevokeGrant_Response): AuthAPI_RevokeGrant_Response {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_RevokeAccess_Response): AuthAPI_RevokeAccess_Response {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -16741,7 +17107,7 @@ class AuthAPI_RevokeGrant_Response$Type extends MessageType<AuthAPI_RevokeGrant_
         }
         return message;
     }
-    internalBinaryWrite(message: AuthAPI_RevokeGrant_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_RevokeAccess_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -16749,9 +17115,9 @@ class AuthAPI_RevokeGrant_Response$Type extends MessageType<AuthAPI_RevokeGrant_
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.RevokeGrant.Response
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.RevokeAccess.Response
  */
-export const AuthAPI_RevokeGrant_Response = new AuthAPI_RevokeGrant_Response$Type();
+export const AuthAPI_RevokeAccess_Response = new AuthAPI_RevokeAccess_Response$Type();
 // @generated message type with reflection information, may provide speed optimized methods
 class AuthAPI_ListGrants$Type extends MessageType<AuthAPI_ListGrants> {
     constructor() {
@@ -16795,12 +17161,13 @@ class AuthAPI_ListGrants_Request$Type extends MessageType<AuthAPI_ListGrants_Req
     constructor() {
         super("MiLaboratories.PL.API.AuthAPI.ListGrants.Request", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
         ]);
     }
     create(value?: PartialMessage<AuthAPI_ListGrants_Request>): AuthAPI_ListGrants_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<AuthAPI_ListGrants_Request>(this, message, value);
         return message;
@@ -16813,7 +17180,7 @@ class AuthAPI_ListGrants_Request$Type extends MessageType<AuthAPI_ListGrants_Req
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 default:
@@ -16831,8 +17198,8 @@ class AuthAPI_ListGrants_Request$Type extends MessageType<AuthAPI_ListGrants_Req
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         let u = options.writeUnknownFields;
         if (u !== false)
@@ -17016,17 +17383,17 @@ class AuthAPI_Grant_Permissions$Type extends MessageType<AuthAPI_Grant_Permissio
  */
 export const AuthAPI_Grant_Permissions = new AuthAPI_Grant_Permissions$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class AuthAPI_ListUserResources$Type extends MessageType<AuthAPI_ListUserResources> {
+class AuthAPI_MintSignature$Type extends MessageType<AuthAPI_MintSignature> {
     constructor() {
-        super("MiLaboratories.PL.API.AuthAPI.ListUserResources", []);
+        super("MiLaboratories.PL.API.AuthAPI.MintSignature", []);
     }
-    create(value?: PartialMessage<AuthAPI_ListUserResources>): AuthAPI_ListUserResources {
+    create(value?: PartialMessage<AuthAPI_MintSignature>): AuthAPI_MintSignature {
         const message = globalThis.Object.create((this.messagePrototype!));
         if (value !== undefined)
-            reflectionMergePartial<AuthAPI_ListUserResources>(this, message, value);
+            reflectionMergePartial<AuthAPI_MintSignature>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources): AuthAPI_ListUserResources {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_MintSignature): AuthAPI_MintSignature {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
@@ -17042,7 +17409,7 @@ class AuthAPI_ListUserResources$Type extends MessageType<AuthAPI_ListUserResourc
         }
         return message;
     }
-    internalBinaryWrite(message: AuthAPI_ListUserResources, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+    internalBinaryWrite(message: AuthAPI_MintSignature, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -17050,37 +17417,386 @@ class AuthAPI_ListUserResources$Type extends MessageType<AuthAPI_ListUserResourc
     }
 }
 /**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.MintSignature
  */
-export const AuthAPI_ListUserResources = new AuthAPI_ListUserResources$Type();
+export const AuthAPI_MintSignature = new AuthAPI_MintSignature$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class AuthAPI_ListUserResources_Request$Type extends MessageType<AuthAPI_ListUserResources_Request> {
+class AuthAPI_MintSignature_Request$Type extends MessageType<AuthAPI_MintSignature_Request> {
     constructor() {
-        super("MiLaboratories.PL.API.AuthAPI.ListUserResources.Request", [
-            { no: 1, name: "login", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "start_from", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 3, name: "limit", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
+        super("MiLaboratories.PL.API.AuthAPI.MintSignature.Request", [
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "target_sid", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "color", kind: "message", T: () => Color }
         ]);
     }
-    create(value?: PartialMessage<AuthAPI_ListUserResources_Request>): AuthAPI_ListUserResources_Request {
+    create(value?: PartialMessage<AuthAPI_MintSignature_Request>): AuthAPI_MintSignature_Request {
         const message = globalThis.Object.create((this.messagePrototype!));
-        message.login = "";
-        message.startFrom = 0n;
-        message.limit = 0;
+        message.resourceId = 0n;
+        message.targetSid = new Uint8Array(0);
         if (value !== undefined)
-            reflectionMergePartial<AuthAPI_ListUserResources_Request>(this, message, value);
+            reflectionMergePartial<AuthAPI_MintSignature_Request>(this, message, value);
         return message;
     }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources_Request): AuthAPI_ListUserResources_Request {
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_MintSignature_Request): AuthAPI_MintSignature_Request {
         let message = target ?? this.create(), end = reader.pos + length;
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
-                case /* string login */ 1:
-                    message.login = reader.string();
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* uint64 start_from */ 2:
-                    message.startFrom = reader.uint64().toBigInt();
+                case /* bytes target_sid */ 2:
+                    message.targetSid = reader.bytes();
+                    break;
+                case /* MiLaboratories.PL.Base.Color color */ 3:
+                    message.color = Color.internalBinaryRead(reader, reader.uint32(), options, message.color);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_MintSignature_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* bytes target_sid = 2; */
+        if (message.targetSid.length)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.targetSid);
+        /* MiLaboratories.PL.Base.Color color = 3; */
+        if (message.color)
+            Color.internalBinaryWrite(message.color, writer.tag(3, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.MintSignature.Request
+ */
+export const AuthAPI_MintSignature_Request = new AuthAPI_MintSignature_Request$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_MintSignature_Response$Type extends MessageType<AuthAPI_MintSignature_Response> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.MintSignature.Response", [
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_MintSignature_Response>): AuthAPI_MintSignature_Response {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_MintSignature_Response>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_MintSignature_Response): AuthAPI_MintSignature_Response {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_MintSignature_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.MintSignature.Response
+ */
+export const AuthAPI_MintSignature_Response = new AuthAPI_MintSignature_Response$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_UserRoot$Type extends MessageType<AuthAPI_UserRoot> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.UserRoot", [
+            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_UserRoot>): AuthAPI_UserRoot {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_UserRoot>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_UserRoot): AuthAPI_UserRoot {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* uint64 resource_id */ 1:
+                    message.resourceId = reader.uint64().toBigInt();
+                    break;
+                case /* bytes resource_signature */ 2:
+                    message.resourceSignature = reader.bytes();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_UserRoot, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint64 resource_id = 1; */
+        if (message.resourceId !== 0n)
+            writer.tag(1, WireType.Varint).uint64(message.resourceId);
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.UserRoot
+ */
+export const AuthAPI_UserRoot = new AuthAPI_UserRoot$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_GetUserRoot$Type extends MessageType<AuthAPI_GetUserRoot> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.GetUserRoot", []);
+    }
+    create(value?: PartialMessage<AuthAPI_GetUserRoot>): AuthAPI_GetUserRoot {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_GetUserRoot>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_GetUserRoot): AuthAPI_GetUserRoot {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_GetUserRoot, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.GetUserRoot
+ */
+export const AuthAPI_GetUserRoot = new AuthAPI_GetUserRoot$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_GetUserRoot_Request$Type extends MessageType<AuthAPI_GetUserRoot_Request> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.GetUserRoot.Request", [
+            { no: 1, name: "login", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "do_not_create", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_GetUserRoot_Request>): AuthAPI_GetUserRoot_Request {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.login = "";
+        message.doNotCreate = false;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_GetUserRoot_Request>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_GetUserRoot_Request): AuthAPI_GetUserRoot_Request {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string login */ 1:
+                    message.login = reader.string();
+                    break;
+                case /* bool do_not_create */ 2:
+                    message.doNotCreate = reader.bool();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_GetUserRoot_Request, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string login = 1; */
+        if (message.login !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.login);
+        /* bool do_not_create = 2; */
+        if (message.doNotCreate !== false)
+            writer.tag(2, WireType.Varint).bool(message.doNotCreate);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.GetUserRoot.Request
+ */
+export const AuthAPI_GetUserRoot_Request = new AuthAPI_GetUserRoot_Request$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_GetUserRoot_Response$Type extends MessageType<AuthAPI_GetUserRoot_Response> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.GetUserRoot.Response", [
+            { no: 1, name: "user_root", kind: "message", T: () => AuthAPI_UserRoot }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_GetUserRoot_Response>): AuthAPI_GetUserRoot_Response {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_GetUserRoot_Response>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_GetUserRoot_Response): AuthAPI_GetUserRoot_Response {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* MiLaboratories.PL.API.AuthAPI.UserRoot user_root */ 1:
+                    message.userRoot = AuthAPI_UserRoot.internalBinaryRead(reader, reader.uint32(), options, message.userRoot);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_GetUserRoot_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* MiLaboratories.PL.API.AuthAPI.UserRoot user_root = 1; */
+        if (message.userRoot)
+            AuthAPI_UserRoot.internalBinaryWrite(message.userRoot, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.GetUserRoot.Response
+ */
+export const AuthAPI_GetUserRoot_Response = new AuthAPI_GetUserRoot_Response$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_ListUserResources$Type extends MessageType<AuthAPI_ListUserResources> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.ListUserResources", []);
+    }
+    create(value?: PartialMessage<AuthAPI_ListUserResources>): AuthAPI_ListUserResources {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_ListUserResources>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources): AuthAPI_ListUserResources {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AuthAPI_ListUserResources, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources
+ */
+export const AuthAPI_ListUserResources = new AuthAPI_ListUserResources$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AuthAPI_ListUserResources_Request$Type extends MessageType<AuthAPI_ListUserResources_Request> {
+    constructor() {
+        super("MiLaboratories.PL.API.AuthAPI.ListUserResources.Request", [
+            { no: 1, name: "login", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "start_from", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
+            { no: 3, name: "limit", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AuthAPI_ListUserResources_Request>): AuthAPI_ListUserResources_Request {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.login = "";
+        message.startFrom = 0n;
+        message.limit = 0;
+        if (value !== undefined)
+            reflectionMergePartial<AuthAPI_ListUserResources_Request>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources_Request): AuthAPI_ListUserResources_Request {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string login */ 1:
+                    message.login = reader.string();
+                    break;
+                case /* uint64 start_from */ 2:
+                    message.startFrom = reader.uint64().toBigInt();
                     break;
                 case /* uint32 limit */ 3:
                     message.limit = reader.uint32();
@@ -17120,7 +17836,7 @@ export const AuthAPI_ListUserResources_Request = new AuthAPI_ListUserResources_R
 class AuthAPI_ListUserResources_Response$Type extends MessageType<AuthAPI_ListUserResources_Response> {
     constructor() {
         super("MiLaboratories.PL.API.AuthAPI.ListUserResources.Response", [
-            { no: 1, name: "user_root", kind: "message", oneof: "entry", T: () => AuthAPI_ListUserResources_UserRoot },
+            { no: 1, name: "user_root", kind: "message", oneof: "entry", T: () => AuthAPI_UserRoot },
             { no: 2, name: "shared_resource", kind: "message", oneof: "entry", T: () => AuthAPI_ListUserResources_SharedResource },
             { no: 3, name: "next_resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
         ]);
@@ -17138,10 +17854,10 @@ class AuthAPI_ListUserResources_Response$Type extends MessageType<AuthAPI_ListUs
         while (reader.pos < end) {
             let [fieldNo, wireType] = reader.tag();
             switch (fieldNo) {
-                case /* MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot user_root */ 1:
+                case /* MiLaboratories.PL.API.AuthAPI.UserRoot user_root */ 1:
                     message.entry = {
                         oneofKind: "userRoot",
-                        userRoot: AuthAPI_ListUserResources_UserRoot.internalBinaryRead(reader, reader.uint32(), options, (message.entry as any).userRoot)
+                        userRoot: AuthAPI_UserRoot.internalBinaryRead(reader, reader.uint32(), options, (message.entry as any).userRoot)
                     };
                     break;
                 case /* MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource shared_resource */ 2:
@@ -17165,9 +17881,9 @@ class AuthAPI_ListUserResources_Response$Type extends MessageType<AuthAPI_ListUs
         return message;
     }
     internalBinaryWrite(message: AuthAPI_ListUserResources_Response, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot user_root = 1; */
+        /* MiLaboratories.PL.API.AuthAPI.UserRoot user_root = 1; */
         if (message.entry.oneofKind === "userRoot")
-            AuthAPI_ListUserResources_UserRoot.internalBinaryWrite(message.entry.userRoot, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+            AuthAPI_UserRoot.internalBinaryWrite(message.entry.userRoot, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
         /* MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource shared_resource = 2; */
         if (message.entry.oneofKind === "sharedResource")
             AuthAPI_ListUserResources_SharedResource.internalBinaryWrite(message.entry.sharedResource, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
@@ -17185,65 +17901,11 @@ class AuthAPI_ListUserResources_Response$Type extends MessageType<AuthAPI_ListUs
  */
 export const AuthAPI_ListUserResources_Response = new AuthAPI_ListUserResources_Response$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class AuthAPI_ListUserResources_UserRoot$Type extends MessageType<AuthAPI_ListUserResources_UserRoot> {
-    constructor() {
-        super("MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot", [
-            { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
-        ]);
-    }
-    create(value?: PartialMessage<AuthAPI_ListUserResources_UserRoot>): AuthAPI_ListUserResources_UserRoot {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.resourceId = 0n;
-        if (value !== undefined)
-            reflectionMergePartial<AuthAPI_ListUserResources_UserRoot>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AuthAPI_ListUserResources_UserRoot): AuthAPI_ListUserResources_UserRoot {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* uint64 resource_id */ 1:
-                    message.resourceId = reader.uint64().toBigInt();
-                    break;
-                case /* optional bytes resource_signature */ 2:
-                    message.resourceSignature = reader.bytes();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: AuthAPI_ListUserResources_UserRoot, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* uint64 resource_id = 1; */
-        if (message.resourceId !== 0n)
-            writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
-            writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message MiLaboratories.PL.API.AuthAPI.ListUserResources.UserRoot
- */
-export const AuthAPI_ListUserResources_UserRoot = new AuthAPI_ListUserResources_UserRoot$Type();
-// @generated message type with reflection information, may provide speed optimized methods
 class AuthAPI_ListUserResources_SharedResource$Type extends MessageType<AuthAPI_ListUserResources_SharedResource> {
     constructor() {
         super("MiLaboratories.PL.API.AuthAPI.ListUserResources.SharedResource", [
             { no: 1, name: "resource_id", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ },
-            { no: 2, name: "resource_signature", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 2, name: "resource_signature", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
             { no: 3, name: "resource_type", kind: "message", T: () => ResourceType },
             { no: 4, name: "permissions", kind: "message", T: () => AuthAPI_Grant_Permissions }
         ]);
@@ -17251,6 +17913,7 @@ class AuthAPI_ListUserResources_SharedResource$Type extends MessageType<AuthAPI_
     create(value?: PartialMessage<AuthAPI_ListUserResources_SharedResource>): AuthAPI_ListUserResources_SharedResource {
         const message = globalThis.Object.create((this.messagePrototype!));
         message.resourceId = 0n;
+        message.resourceSignature = new Uint8Array(0);
         if (value !== undefined)
             reflectionMergePartial<AuthAPI_ListUserResources_SharedResource>(this, message, value);
         return message;
@@ -17263,7 +17926,7 @@ class AuthAPI_ListUserResources_SharedResource$Type extends MessageType<AuthAPI_
                 case /* uint64 resource_id */ 1:
                     message.resourceId = reader.uint64().toBigInt();
                     break;
-                case /* optional bytes resource_signature */ 2:
+                case /* bytes resource_signature */ 2:
                     message.resourceSignature = reader.bytes();
                     break;
                 case /* MiLaboratories.PL.Base.ResourceType resource_type */ 3:
@@ -17287,8 +17950,8 @@ class AuthAPI_ListUserResources_SharedResource$Type extends MessageType<AuthAPI_
         /* uint64 resource_id = 1; */
         if (message.resourceId !== 0n)
             writer.tag(1, WireType.Varint).uint64(message.resourceId);
-        /* optional bytes resource_signature = 2; */
-        if (message.resourceSignature !== undefined)
+        /* bytes resource_signature = 2; */
+        if (message.resourceSignature.length)
             writer.tag(2, WireType.LengthDelimited).bytes(message.resourceSignature);
         /* MiLaboratories.PL.Base.ResourceType resource_type = 3; */
         if (message.resourceType)
@@ -17919,9 +18582,12 @@ export const Platform = new ServiceType("MiLaboratories.PL.API.Platform", [
     { name: "ReleaseLease", options: { "google.api.http": { post: "/v1/locks/lease/release", body: "*" } }, I: LocksAPI_Lease_Release_Request, O: LocksAPI_Lease_Release_Response },
     { name: "AuthMethods", options: { "google.api.http": { get: "/v1/auth/methods" } }, I: AuthAPI_ListMethods_Request, O: AuthAPI_ListMethods_Response },
     { name: "GetJWTToken", options: { "google.api.http": { post: "/v1/auth/jwt-token", body: "*" } }, I: AuthAPI_GetJWTToken_Request, O: AuthAPI_GetJWTToken_Response },
+    { name: "GetSessionInfo", options: { "google.api.http": { post: "/v1/auth/session-info", body: "*" } }, I: AuthAPI_GetSessionInfo_Request, O: AuthAPI_GetSessionInfo_Response },
     { name: "GrantAccess", options: { "google.api.http": { post: "/v1/auth/grant-access", body: "*" } }, I: AuthAPI_GrantAccess_Request, O: AuthAPI_GrantAccess_Response },
-    { name: "RevokeGrant", options: { "google.api.http": { post: "/v1/auth/revoke-grant", body: "*" } }, I: AuthAPI_RevokeGrant_Request, O: AuthAPI_RevokeGrant_Response },
+    { name: "RevokeAccess", options: { "google.api.http": { post: "/v1/auth/revoke-access", body: "*" } }, I: AuthAPI_RevokeAccess_Request, O: AuthAPI_RevokeAccess_Response },
     { name: "ListGrants", serverStreaming: true, options: {}, I: AuthAPI_ListGrants_Request, O: AuthAPI_ListGrants_Response },
+    { name: "MintSignature", options: { "google.api.http": { post: "/v1/auth/mint-signature", body: "*" } }, I: AuthAPI_MintSignature_Request, O: AuthAPI_MintSignature_Response },
+    { name: "GetUserRoot", options: { "google.api.http": { post: "/v1/auth/user-root", body: "*" } }, I: AuthAPI_GetUserRoot_Request, O: AuthAPI_GetUserRoot_Response },
     { name: "ListUserResources", serverStreaming: true, options: {}, I: AuthAPI_ListUserResources_Request, O: AuthAPI_ListUserResources_Response },
     { name: "ListResourceTypes", options: { "google.api.http": { get: "/v1/resource-types" } }, I: MiscAPI_ListResourceTypes_Request, O: MiscAPI_ListResourceTypes_Response },
     { name: "Ping", options: { "google.api.http": { get: "/v1/ping" } }, I: MaintenanceAPI_Ping_Request, O: MaintenanceAPI_Ping_Response },