@opentdf/sdk 0.3.1 → 0.3.2-beta.1

package/src/platform/policy/kasregistry/key_access_server_registry_pb.ts

@@ -0,0 +1,1482 @@
+// @generated by protoc-gen-es v2.2.5 with parameter "target=ts,import_extension=.js"
+// @generated from file policy/kasregistry/key_access_server_registry.proto (package policy.kasregistry, syntax proto3)
+/* eslint-disable */
+
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv1";
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_buf_validate_validate } from "../../buf/validate/validate_pb.js";
+import type { Metadata, MetadataMutable, MetadataUpdateEnum } from "../../common/common_pb.js";
+import { file_common_common } from "../../common/common_pb.js";
+import { file_google_api_annotations } from "../../google/api/annotations_pb.js";
+import type { Algorithm, KasKey, KasPublicKey, Key, KeyAccessServer, KeyMode, KeyStatus, PublicKey, SourceType } from "../objects_pb.js";
+import { file_policy_objects } from "../objects_pb.js";
+import type { PageRequest, PageResponse } from "../selectors_pb.js";
+import { file_policy_selectors } from "../selectors_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+
+/**
+ * Describes the file policy/kasregistry/key_access_server_registry.proto.
+ */
+export const file_policy_kasregistry_key_access_server_registry: GenFile = /*@__PURE__*/
+  fileDesc("CjNwb2xpY3kva2FzcmVnaXN0cnkva2V5X2FjY2Vzc19zZXJ2ZXJfcmVnaXN0cnkucHJvdG8SEnBvbGljeS5rYXNyZWdpc3RyeSLOAwoZR2V0S2V5QWNjZXNzU2VydmVyUmVxdWVzdBIZCgJpZBgBIAEoCUINGAG6SAjYAQJyA7ABARIaCgZrYXNfaWQYAiABKAlCCLpIBXIDsAEBSAASFwoEbmFtZRgDIAEoCUIHukgEcgIQAUgAEhkKA3VyaRgEIAEoCUIKukgHcgUQAYgBAUgAOrcCukizAhqoAQoQZXhjbHVzaXZlX2ZpZWxkcxJKRWl0aGVyIHVzZSBkZXByZWNhdGVkICdpZCcgZmllbGQgb3Igb25lIG9mICdrYXNfaWQnIG9yICd1cmknLCBidXQgbm90IGJvdGgaSCEoaGFzKHRoaXMuaWQpICYmIChoYXModGhpcy5rYXNfaWQpIHx8IGhhcyh0aGlzLnVyaSkgfHwgaGFzKHRoaXMubmFtZSkpKRqFAQoPcmVxdWlyZWRfZmllbGRzEi1FaXRoZXIgaWQgb3Igb25lIG9mIGthc19pZCBvciB1cmkgbXVzdCBiZSBzZXQaQ2hhcyh0aGlzLmlkKSB8fCBoYXModGhpcy5rYXNfaWQpIHx8IGhhcyh0aGlzLnVyaSkgfHwgaGFzKHRoaXMubmFtZSlCDAoKaWRlbnRpZmllciJQChpHZXRLZXlBY2Nlc3NTZXJ2ZXJSZXNwb25zZRIyChFrZXlfYWNjZXNzX3NlcnZlchgBIAEoCzIXLnBvbGljeS5LZXlBY2Nlc3NTZXJ2ZXIiRgobTGlzdEtleUFjY2Vzc1NlcnZlcnNSZXF1ZXN0EicKCnBhZ2luYXRpb24YCiABKAsyEy5wb2xpY3kuUGFnZVJlcXVlc3QifQocTGlzdEtleUFjY2Vzc1NlcnZlcnNSZXNwb25zZRIzChJrZXlfYWNjZXNzX3NlcnZlcnMYASADKAsyFy5wb2xpY3kuS2V5QWNjZXNzU2VydmVyEigKCnBhZ2luYXRpb24YCiABKAsyFC5wb2xpY3kuUGFnZVJlc3BvbnNlIukFChxDcmVhdGVLZXlBY2Nlc3NTZXJ2ZXJSZXF1ZXN0EoICCgN1cmkYASABKAlC9AG6SPABugHsAQoKdXJpX2Zvcm1hdBLPAVVSSSBtdXN0IGJlIGEgdmFsaWQgVVJMIChlLmcuLCAnaHR0cHM6Ly9kZW1vLmNvbS8nKSBmb2xsb3dlZCBieSBhZGRpdGlvbmFsIHNlZ21lbnRzLiBFYWNoIHNlZ21lbnQgbXVzdCBzdGFydCBhbmQgZW5kIHdpdGggYW4gYWxwaGFudW1lcmljIGNoYXJhY3RlciwgY2FuIGNvbnRhaW4gaHlwaGVucywgYWxwaGFudW1lcmljIGNoYXJhY3RlcnMsIGFuZCBzbGFzaGVzLhoMdGhpcy5pc1VyaSgpEiUKCnB1YmxpY19rZXkYAiABKAsyES5wb2xpY3kuUHVibGljS2V5EjQKC3NvdXJjZV90eXBlGAMgASgOMhIucG9saWN5LlNvdXJjZVR5cGVCC7pICMgBAIIBAhABErsCCgRuYW1lGBQgASgJQqwCukioAroBnAIKD2thc19uYW1lX2Zvcm1hdBKzAVJlZ2lzdGVyZWQgS0FTIG5hbWUgbXVzdCBiZSBhbiBhbHBoYW51bWVyaWMgc3RyaW5nLCBhbGxvd2luZyBoeXBoZW5zLCBhbmQgdW5kZXJzY29yZXMgYnV0IG5vdCBhcyB0aGUgZmlyc3Qgb3IgbGFzdCBjaGFyYWN0ZXIuIFRoZSBzdG9yZWQgS0FTIG5hbWUgd2lsbCBiZSBub3JtYWxpemVkIHRvIGxvd2VyIGNhc2UuGlNzaXplKHRoaXMpID4gMCA/IHRoaXMubWF0Y2hlcygnXlthLXpBLVowLTldKD86W2EtekEtWjAtOV8tXSpbYS16QS1aMC05XSk/JCcpIDogdHJ1ZcgBAHIDGP0BEikKCG1ldGFkYXRhGGQgASgLMhcuY29tbW9uLk1ldGFkYXRhTXV0YWJsZSJTCh1DcmVhdGVLZXlBY2Nlc3NTZXJ2ZXJSZXNwb25zZRIyChFrZXlfYWNjZXNzX3NlcnZlchgBIAEoCzIXLnBvbGljeS5LZXlBY2Nlc3NTZXJ2ZXIi3QYKHFVwZGF0ZUtleUFjY2Vzc1NlcnZlclJlcXVlc3QSFAoCaWQYASABKAlCCLpIBXIDsAEBEqcCCgN1cmkYAiABKAlCmQK6SJUCugGRAgoTb3B0aW9uYWxfdXJpX2Zvcm1hdBLYAU9wdGlvbmFsIFVSSSBtdXN0IGJlIGEgdmFsaWQgVVJMIChlLmcuLCAnaHR0cHM6Ly9kZW1vLmNvbS8nKSBmb2xsb3dlZCBieSBhZGRpdGlvbmFsIHNlZ21lbnRzLiBFYWNoIHNlZ21lbnQgbXVzdCBzdGFydCBhbmQgZW5kIHdpdGggYW4gYWxwaGFudW1lcmljIGNoYXJhY3RlciwgY2FuIGNvbnRhaW4gaHlwaGVucywgYWxwaGFudW1lcmljIGNoYXJhY3RlcnMsIGFuZCBzbGFzaGVzLhofc2l6ZSh0aGlzKSA9PSAwIHx8IHRoaXMuaXNVcmkoKRIlCgpwdWJsaWNfa2V5GAMgASgLMhEucG9saWN5LlB1YmxpY0tleRI0Cgtzb3VyY2VfdHlwZRgEIAEoDjISLnBvbGljeS5Tb3VyY2VUeXBlQgu6SAjIAQCCAQIQARK2AgoEbmFtZRgUIAEoCUKnArpIowK6AZcCCg9rYXNfbmFtZV9mb3JtYXQSswFSZWdpc3RlcmVkIEtBUyBuYW1lIG11c3QgYmUgYW4gYWxwaGFudW1lcmljIHN0cmluZywgYWxsb3dpbmcgaHlwaGVucywgYW5kIHVuZGVyc2NvcmVzIGJ1dCBub3QgYXMgdGhlIGZpcnN0IG9yIGxhc3QgY2hhcmFjdGVyLiBUaGUgc3RvcmVkIEtBUyBuYW1lIHdpbGwgYmUgbm9ybWFsaXplZCB0byBsb3dlciBjYXNlLhpOc2l6ZSh0aGlzKSA9PSAwIHx8IHRoaXMubWF0Y2hlcygnXlthLXpBLVowLTldKD86W2EtekEtWjAtOV8tXSpbYS16QS1aMC05XSk/JCcpyAEAcgMY/QESKQoIbWV0YWRhdGEYZCABKAsyFy5jb21tb24uTWV0YWRhdGFNdXRhYmxlEjwKGG1ldGFkYXRhX3VwZGF0ZV9iZWhhdmlvchhlIAEoDjIaLmNvbW1vbi5NZXRhZGF0YVVwZGF0ZUVudW0iUwodVXBkYXRlS2V5QWNjZXNzU2VydmVyUmVzcG9uc2USMgoRa2V5X2FjY2Vzc19zZXJ2ZXIYASABKAsyFy5wb2xpY3kuS2V5QWNjZXNzU2VydmVyIjQKHERlbGV0ZUtleUFjY2Vzc1NlcnZlclJlcXVlc3QSFAoCaWQYASABKAlCCLpIBXIDsAEBIlMKHURlbGV0ZUtleUFjY2Vzc1NlcnZlclJlc3BvbnNlEjIKEWtleV9hY2Nlc3Nfc2VydmVyGAEgASgLMhcucG9saWN5LktleUFjY2Vzc1NlcnZlciIuChNHcmFudGVkUG9saWN5T2JqZWN0EgoKAmlkGAEgASgJEgsKA2ZxbhgCIAEoCSKQAgoVS2V5QWNjZXNzU2VydmVyR3JhbnRzEjIKEWtleV9hY2Nlc3Nfc2VydmVyGAEgASgLMhcucG9saWN5LktleUFjY2Vzc1NlcnZlchJBChBuYW1lc3BhY2VfZ3JhbnRzGAIgAygLMicucG9saWN5Lmthc3JlZ2lzdHJ5LkdyYW50ZWRQb2xpY3lPYmplY3QSQQoQYXR0cmlidXRlX2dyYW50cxgDIAMoCzInLnBvbGljeS5rYXNyZWdpc3RyeS5HcmFudGVkUG9saWN5T2JqZWN0Ej0KDHZhbHVlX2dyYW50cxgEIAMoCzInLnBvbGljeS5rYXNyZWdpc3RyeS5HcmFudGVkUG9saWN5T2JqZWN0IogBChZDcmVhdGVQdWJsaWNLZXlSZXF1ZXN0EhgKBmthc19pZBgBIAEoCUIIukgFcgOwAQESKQoDa2V5GAIgASgLMhQucG9saWN5Lkthc1B1YmxpY0tleUIGukgDyAEBEikKCG1ldGFkYXRhGGQgASgLMhcuY29tbW9uLk1ldGFkYXRhTXV0YWJsZSIzChdDcmVhdGVQdWJsaWNLZXlSZXNwb25zZRIYCgNrZXkYASABKAsyCy5wb2xpY3kuS2V5IjsKE0dldFB1YmxpY0tleVJlcXVlc3QSFgoCaWQYASABKAlCCLpIBXIDsAEBSABCDAoKaWRlbnRpZmllciIwChRHZXRQdWJsaWNLZXlSZXNwb25zZRIYCgNrZXkYASABKAsyCy5wb2xpY3kuS2V5IqYBChVMaXN0UHVibGljS2V5c1JlcXVlc3QSGgoGa2FzX2lkGAEgASgJQgi6SAVyA7ABAUgAEhsKCGthc19uYW1lGAIgASgJQge6SARyAhABSAASHQoHa2FzX3VyaRgDIAEoCUIKukgHcgUQAYgBAUgAEicKCnBhZ2luYXRpb24YCiABKAsyEy5wb2xpY3kuUGFnZVJlcXVlc3RCDAoKa2FzX2ZpbHRlciJdChZMaXN0UHVibGljS2V5c1Jlc3BvbnNlEhkKBGtleXMYASADKAsyCy5wb2xpY3kuS2V5EigKCnBhZ2luYXRpb24YCiABKAsyFC5wb2xpY3kuUGFnZVJlc3BvbnNlItABChtMaXN0UHVibGljS2V5TWFwcGluZ1JlcXVlc3QSGgoGa2FzX2lkGAEgASgJQgi6SAVyA7ABAUgAEhsKCGthc19uYW1lGAIgASgJQge6SARyAhABSAASHQoHa2FzX3VyaRgDIAEoCUIKukgHcgUQAYgBAUgAEiIKDXB1YmxpY19rZXlfaWQYBCABKAlCC7pICNgBAnIDsAEBEicKCnBhZ2luYXRpb24YCiABKAsyEy5wb2xpY3kuUGFnZVJlcXVlc3RCDAoKa2FzX2ZpbHRlciKEBQocTGlzdFB1YmxpY0tleU1hcHBpbmdSZXNwb25zZRJeChNwdWJsaWNfa2V5X21hcHBpbmdzGAEgAygLMkEucG9saWN5Lmthc3JlZ2lzdHJ5Lkxpc3RQdWJsaWNLZXlNYXBwaW5nUmVzcG9uc2UuUHVibGljS2V5TWFwcGluZxIoCgpwYWdpbmF0aW9uGAogASgLMhQucG9saWN5LlBhZ2VSZXNwb25zZRqWAQoQUHVibGljS2V5TWFwcGluZxIOCgZrYXNfaWQYAiABKAkSEAoIa2FzX25hbWUYAyABKAkSDwoHa2FzX3VyaRgEIAEoCRJPCgtwdWJsaWNfa2V5cxgFIAMoCzI6LnBvbGljeS5rYXNyZWdpc3RyeS5MaXN0UHVibGljS2V5TWFwcGluZ1Jlc3BvbnNlLlB1YmxpY0tleRqYAgoJUHVibGljS2V5EhgKA2tleRgBIAEoCzILLnBvbGljeS5LZXkSTAoGdmFsdWVzGAYgAygLMjwucG9saWN5Lmthc3JlZ2lzdHJ5Lkxpc3RQdWJsaWNLZXlNYXBwaW5nUmVzcG9uc2UuQXNzb2NpYXRpb24SUQoLZGVmaW5pdGlvbnMYByADKAsyPC5wb2xpY3kua2FzcmVnaXN0cnkuTGlzdFB1YmxpY0tleU1hcHBpbmdSZXNwb25zZS5Bc3NvY2lhdGlvbhJQCgpuYW1lc3BhY2VzGAggAygLMjwucG9saWN5Lmthc3JlZ2lzdHJ5Lkxpc3RQdWJsaWNLZXlNYXBwaW5nUmVzcG9uc2UuQXNzb2NpYXRpb24aJgoLQXNzb2NpYXRpb24SCgoCaWQYASABKAkSCwoDZnFuGAIgASgJIpcBChZVcGRhdGVQdWJsaWNLZXlSZXF1ZXN0EhQKAmlkGAEgASgJQgi6SAVyA7ABARIpCghtZXRhZGF0YRhkIAEoCzIXLmNvbW1vbi5NZXRhZGF0YU11dGFibGUSPAoYbWV0YWRhdGFfdXBkYXRlX2JlaGF2aW9yGGUgASgOMhouY29tbW9uLk1ldGFkYXRhVXBkYXRlRW51bSIzChdVcGRhdGVQdWJsaWNLZXlSZXNwb25zZRIYCgNrZXkYASABKAsyCy5wb2xpY3kuS2V5IjIKGkRlYWN0aXZhdGVQdWJsaWNLZXlSZXF1ZXN0EhQKAmlkGAEgASgJQgi6SAVyA7ABASI3ChtEZWFjdGl2YXRlUHVibGljS2V5UmVzcG9uc2USGAoDa2V5GAEgASgLMgsucG9saWN5LktleSIwChhBY3RpdmF0ZVB1YmxpY0tleVJlcXVlc3QSFAoCaWQYASABKAlCCLpIBXIDsAEBIjUKGUFjdGl2YXRlUHVibGljS2V5UmVzcG9uc2USGAoDa2V5GAEgASgLMgsucG9saWN5LktleSL9BgogTGlzdEtleUFjY2Vzc1NlcnZlckdyYW50c1JlcXVlc3QSxAEKBmthc19pZBgBIAEoCUKzAbpIrwG6AasBChRvcHRpb25hbF91dWlkX2Zvcm1hdBIjT3B0aW9uYWwgZmllbGQgbXVzdCBiZSBhIHZhbGlkIFVVSUQabnNpemUodGhpcykgPT0gMCB8fCB0aGlzLm1hdGNoZXMoJ1swLTlhLWZBLUZdezh9LVswLTlhLWZBLUZdezR9LVswLTlhLWZBLUZdezR9LVswLTlhLWZBLUZdezR9LVswLTlhLWZBLUZdezEyfScpEqsCCgdrYXNfdXJpGAIgASgJQpkCukiVAroBkQIKE29wdGlvbmFsX3VyaV9mb3JtYXQS2AFPcHRpb25hbCBVUkkgbXVzdCBiZSBhIHZhbGlkIFVSTCAoZS5nLiwgJ2h0dHBzOi8vZGVtby5jb20vJykgZm9sbG93ZWQgYnkgYWRkaXRpb25hbCBzZWdtZW50cy4gRWFjaCBzZWdtZW50IG11c3Qgc3RhcnQgYW5kIGVuZCB3aXRoIGFuIGFscGhhbnVtZXJpYyBjaGFyYWN0ZXIsIGNhbiBjb250YWluIGh5cGhlbnMsIGFscGhhbnVtZXJpYyBjaGFyYWN0ZXJzLCBhbmQgc2xhc2hlcy4aH3NpemUodGhpcykgPT0gMCB8fCB0aGlzLmlzVXJpKCkSugIKCGthc19uYW1lGAMgASgJQqcCukijAroBlwIKD2thc19uYW1lX2Zvcm1hdBKzAVJlZ2lzdGVyZWQgS0FTIG5hbWUgbXVzdCBiZSBhbiBhbHBoYW51bWVyaWMgc3RyaW5nLCBhbGxvd2luZyBoeXBoZW5zLCBhbmQgdW5kZXJzY29yZXMgYnV0IG5vdCBhcyB0aGUgZmlyc3Qgb3IgbGFzdCBjaGFyYWN0ZXIuIFRoZSBzdG9yZWQgS0FTIG5hbWUgd2lsbCBiZSBub3JtYWxpemVkIHRvIGxvd2VyIGNhc2UuGk5zaXplKHRoaXMpID09IDAgfHwgdGhpcy5tYXRjaGVzKCdeW2EtekEtWjAtOV0oPzpbYS16QS1aMC05Xy1dKlthLXpBLVowLTldKT8kJynIAQByAxj9ARInCgpwYWdpbmF0aW9uGAogASgLMhMucG9saWN5LlBhZ2VSZXF1ZXN0IowBCiFMaXN0S2V5QWNjZXNzU2VydmVyR3JhbnRzUmVzcG9uc2USPQoGZ3JhbnRzGAEgAygLMikucG9saWN5Lmthc3JlZ2lzdHJ5LktleUFjY2Vzc1NlcnZlckdyYW50c0ICGAESKAoKcGFnaW5hdGlvbhgKIAEoCzIULnBvbGljeS5QYWdlUmVzcG9uc2UiqgIKEENyZWF0ZUtleVJlcXVlc3QSGAoGa2FzX2lkGAEgASgJQgi6SAVyA7ABARIXCgZrZXlfaWQYAiABKAlCB7pIBHICEAESMgoNa2V5X2FsZ29yaXRobRgDIAEoDjIRLnBvbGljeS5BbGdvcml0aG1CCLpIBYIBAhABEisKCGtleV9tb2RlGAQgASgOMg8ucG9saWN5LktleU1vZGVCCLpIBYIBAhABEiIKDnB1YmxpY19rZXlfY3R4GAUgASgMQgq6SAfIAQF6AhABEhcKD3ByaXZhdGVfa2V5X2N0eBgGIAEoDBIaChJwcm92aWRlcl9jb25maWdfaWQYByABKAkSKQoIbWV0YWRhdGEYZCABKAsyFy5jb21tb24uTWV0YWRhdGFNdXRhYmxlIjQKEUNyZWF0ZUtleVJlc3BvbnNlEh8KB2thc19rZXkYASABKAsyDi5wb2xpY3kuS2FzS2V5InEKDUdldEtleVJlcXVlc3QSFgoCaWQYAiABKAlCCLpIBXIDsAEBSAASMwoDa2V5GAMgASgLMiQucG9saWN5Lmthc3JlZ2lzdHJ5Lkthc0tleUlkZW50aWZpZXJIAEITCgppZGVudGlmaWVyEgW6SAIIASIxCg5HZXRLZXlSZXNwb25zZRIfCgdrYXNfa2V5GAEgASgLMg4ucG9saWN5Lkthc0tleSK/AQoPTGlzdEtleXNSZXF1ZXN0EjIKDWtleV9hbGdvcml0aG0YASABKA4yES5wb2xpY3kuQWxnb3JpdGhtQgi6SAWCAQIQARIaCgZrYXNfaWQYAiABKAlCCLpIBXIDsAEBSAASEgoIa2FzX25hbWUYAyABKAlIABIRCgdrYXNfdXJpGAQgASgJSAASJwoKcGFnaW5hdGlvbhgKIAEoCzITLnBvbGljeS5QYWdlUmVxdWVzdEIMCgprYXNfZmlsdGVyIl4KEExpc3RLZXlzUmVzcG9uc2USIAoIa2FzX2tleXMYASADKAsyDi5wb2xpY3kuS2FzS2V5EigKCnBhZ2luYXRpb24YCiABKAsyFC5wb2xpY3kuUGFnZVJlc3BvbnNlIsIBChBVcGRhdGVLZXlSZXF1ZXN0EhQKAmlkGAEgASgJQgi6SAVyA7ABARIvCgprZXlfc3RhdHVzGAIgASgOMhEucG9saWN5LktleVN0YXR1c0IIukgFggECEAESKQoIbWV0YWRhdGEYZCABKAsyFy5jb21tb24uTWV0YWRhdGFNdXRhYmxlEjwKGG1ldGFkYXRhX3VwZGF0ZV9iZWhhdmlvchhlIAEoDjIaLmNvbW1vbi5NZXRhZGF0YVVwZGF0ZUVudW0iNAoRVXBkYXRlS2V5UmVzcG9uc2USHwoHa2FzX2tleRgBIAEoCzIOLnBvbGljeS5LYXNLZXkijQEKEEthc0tleUlkZW50aWZpZXISGgoGa2FzX2lkGAIgASgJQgi6SAVyA7ABAUgAEhcKBG5hbWUYAyABKAlCB7pIBHICEAFIABIZCgN1cmkYBCABKAlCCrpIB3IFEAGIAQFIABIUCgNraWQYBSABKAlCB7pIBHICEAFCEwoKaWRlbnRpZmllchIFukgCCAEinQMKEFJvdGF0ZUtleVJlcXVlc3QSFgoCaWQYASABKAlCCLpIBXIDsAEBSAASMwoDa2V5GAIgASgLMiQucG9saWN5Lmthc3JlZ2lzdHJ5Lkthc0tleUlkZW50aWZpZXJIABI8CgduZXdfa2V5GAMgASgLMisucG9saWN5Lmthc3JlZ2lzdHJ5LlJvdGF0ZUtleVJlcXVlc3QuTmV3S2V5Gu8BCgZOZXdLZXkSFwoGa2V5X2lkGAEgASgJQge6SARyAhABEi4KCWFsZ29yaXRobRgCIAEoDjIRLnBvbGljeS5BbGdvcml0aG1CCLpIBYIBAhABEisKCGtleV9tb2RlGAMgASgOMg8ucG9saWN5LktleU1vZGVCCLpIBYIBAhABEhcKD3ByaXZhdGVfa2V5X2N0eBgEIAEoDBIWCg5wdWJsaWNfa2V5X2N0eBgFIAEoDBIaChJwcm92aWRlcl9jb25maWdfaWQYBiABKAkSIgoIbWV0YWRhdGEYZCABKAsyEC5jb21tb24uTWV0YWRhdGFCDAoKYWN0aXZlX2tleSI0ChFSb3RhdGVLZXlSZXNwb25zZRIfCgdrYXNfa2V5GAEgASgLMg4ucG9saWN5Lkthc0tleTKtCwoeS2V5QWNjZXNzU2VydmVyUmVnaXN0cnlTZXJ2aWNlEpkBChRMaXN0S2V5QWNjZXNzU2VydmVycxIvLnBvbGljeS5rYXNyZWdpc3RyeS5MaXN0S2V5QWNjZXNzU2VydmVyc1JlcXVlc3QaMC5wb2xpY3kua2FzcmVnaXN0cnkuTGlzdEtleUFjY2Vzc1NlcnZlcnNSZXNwb25zZSIekAIBgtPkkwIVEhMva2V5LWFjY2Vzcy1zZXJ2ZXJzEpgBChJHZXRLZXlBY2Nlc3NTZXJ2ZXISLS5wb2xpY3kua2FzcmVnaXN0cnkuR2V0S2V5QWNjZXNzU2VydmVyUmVxdWVzdBouLnBvbGljeS5rYXNyZWdpc3RyeS5HZXRLZXlBY2Nlc3NTZXJ2ZXJSZXNwb25zZSIjkAIBgtPkkwIaEhgva2V5LWFjY2Vzcy1zZXJ2ZXJzL3tpZH0SnAEKFUNyZWF0ZUtleUFjY2Vzc1NlcnZlchIwLnBvbGljeS5rYXNyZWdpc3RyeS5DcmVhdGVLZXlBY2Nlc3NTZXJ2ZXJSZXF1ZXN0GjEucG9saWN5Lmthc3JlZ2lzdHJ5LkNyZWF0ZUtleUFjY2Vzc1NlcnZlclJlc3BvbnNlIh6C0+STAhg6ASoiEy9rZXktYWNjZXNzLXNlcnZlcnMSoQEKFVVwZGF0ZUtleUFjY2Vzc1NlcnZlchIwLnBvbGljeS5rYXNyZWdpc3RyeS5VcGRhdGVLZXlBY2Nlc3NTZXJ2ZXJSZXF1ZXN0GjEucG9saWN5Lmthc3JlZ2lzdHJ5LlVwZGF0ZUtleUFjY2Vzc1NlcnZlclJlc3BvbnNlIiOC0+STAh06ASoyGC9rZXktYWNjZXNzLXNlcnZlcnMve2lkfRKeAQoVRGVsZXRlS2V5QWNjZXNzU2VydmVyEjAucG9saWN5Lmthc3JlZ2lzdHJ5LkRlbGV0ZUtleUFjY2Vzc1NlcnZlclJlcXVlc3QaMS5wb2xpY3kua2FzcmVnaXN0cnkuRGVsZXRlS2V5QWNjZXNzU2VydmVyUmVzcG9uc2UiIILT5JMCGioYL2tleS1hY2Nlc3Mtc2VydmVycy97aWR9Eq8BChlMaXN0S2V5QWNjZXNzU2VydmVyR3JhbnRzEjQucG9saWN5Lmthc3JlZ2lzdHJ5Lkxpc3RLZXlBY2Nlc3NTZXJ2ZXJHcmFudHNSZXF1ZXN0GjUucG9saWN5Lmthc3JlZ2lzdHJ5Lkxpc3RLZXlBY2Nlc3NTZXJ2ZXJHcmFudHNSZXNwb25zZSIlkAIBgtPkkwIcEhova2V5LWFjY2Vzcy1zZXJ2ZXJzL2dyYW50cxJaCglDcmVhdGVLZXkSJC5wb2xpY3kua2FzcmVnaXN0cnkuQ3JlYXRlS2V5UmVxdWVzdBolLnBvbGljeS5rYXNyZWdpc3RyeS5DcmVhdGVLZXlSZXNwb25zZSIAElEKBkdldEtleRIhLnBvbGljeS5rYXNyZWdpc3RyeS5HZXRLZXlSZXF1ZXN0GiIucG9saWN5Lmthc3JlZ2lzdHJ5LkdldEtleVJlc3BvbnNlIgASVwoITGlzdEtleXMSIy5wb2xpY3kua2FzcmVnaXN0cnkuTGlzdEtleXNSZXF1ZXN0GiQucG9saWN5Lmthc3JlZ2lzdHJ5Lkxpc3RLZXlzUmVzcG9uc2UiABJaCglVcGRhdGVLZXkSJC5wb2xpY3kua2FzcmVnaXN0cnkuVXBkYXRlS2V5UmVxdWVzdBolLnBvbGljeS5rYXNyZWdpc3RyeS5VcGRhdGVLZXlSZXNwb25zZSIAEloKCVJvdGF0ZUtleRIkLnBvbGljeS5rYXNyZWdpc3RyeS5Sb3RhdGVLZXlSZXF1ZXN0GiUucG9saWN5Lmthc3JlZ2lzdHJ5LlJvdGF0ZUtleVJlc3BvbnNlIgBiBnByb3RvMw", [file_buf_validate_validate, file_common_common, file_google_api_annotations, file_policy_objects, file_policy_selectors]);
+
+/**
+ * @generated from message policy.kasregistry.GetKeyAccessServerRequest
+ */
+export type GetKeyAccessServerRequest = Message<"policy.kasregistry.GetKeyAccessServerRequest"> & {
+  /**
+   * Deprecated
+   *
+   * @generated from field: string id = 1 [deprecated = true];
+   * @deprecated
+   */
+  id: string;
+
+  /**
+   * @generated from oneof policy.kasregistry.GetKeyAccessServerRequest.identifier
+   */
+  identifier: {
+    /**
+     * option (buf.validate.oneof).required = true; // TODO: enable this when we remove the deprecated field
+     *
+     * @generated from field: string kas_id = 2;
+     */
+    value: string;
+    case: "kasId";
+  } | {
+    /**
+     * @generated from field: string name = 3;
+     */
+    value: string;
+    case: "name";
+  } | {
+    /**
+     * @generated from field: string uri = 4;
+     */
+    value: string;
+    case: "uri";
+  } | { case: undefined; value?: undefined };
+};
+
+/**
+ * Describes the message policy.kasregistry.GetKeyAccessServerRequest.
+ * Use `create(GetKeyAccessServerRequestSchema)` to create a new message.
+ */
+export const GetKeyAccessServerRequestSchema: GenMessage<GetKeyAccessServerRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 0);
+
+/**
+ * @generated from message policy.kasregistry.GetKeyAccessServerResponse
+ */
+export type GetKeyAccessServerResponse = Message<"policy.kasregistry.GetKeyAccessServerResponse"> & {
+  /**
+   * @generated from field: policy.KeyAccessServer key_access_server = 1;
+   */
+  keyAccessServer?: KeyAccessServer;
+};
+
+/**
+ * Describes the message policy.kasregistry.GetKeyAccessServerResponse.
+ * Use `create(GetKeyAccessServerResponseSchema)` to create a new message.
+ */
+export const GetKeyAccessServerResponseSchema: GenMessage<GetKeyAccessServerResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 1);
+
+/**
+ * @generated from message policy.kasregistry.ListKeyAccessServersRequest
+ */
+export type ListKeyAccessServersRequest = Message<"policy.kasregistry.ListKeyAccessServersRequest"> & {
+  /**
+   * Optional
+   *
+   * @generated from field: policy.PageRequest pagination = 10;
+   */
+  pagination?: PageRequest;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListKeyAccessServersRequest.
+ * Use `create(ListKeyAccessServersRequestSchema)` to create a new message.
+ */
+export const ListKeyAccessServersRequestSchema: GenMessage<ListKeyAccessServersRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 2);
+
+/**
+ * @generated from message policy.kasregistry.ListKeyAccessServersResponse
+ */
+export type ListKeyAccessServersResponse = Message<"policy.kasregistry.ListKeyAccessServersResponse"> & {
+  /**
+   * @generated from field: repeated policy.KeyAccessServer key_access_servers = 1;
+   */
+  keyAccessServers: KeyAccessServer[];
+
+  /**
+   * @generated from field: policy.PageResponse pagination = 10;
+   */
+  pagination?: PageResponse;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListKeyAccessServersResponse.
+ * Use `create(ListKeyAccessServersResponseSchema)` to create a new message.
+ */
+export const ListKeyAccessServersResponseSchema: GenMessage<ListKeyAccessServersResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 3);
+
+/**
+ * @generated from message policy.kasregistry.CreateKeyAccessServerRequest
+ */
+export type CreateKeyAccessServerRequest = Message<"policy.kasregistry.CreateKeyAccessServerRequest"> & {
+  /**
+   * Required
+   *
+   * @generated from field: string uri = 1;
+   */
+  uri: string;
+
+  /**
+   * Deprecated
+   *
+   * @generated from field: policy.PublicKey public_key = 2;
+   */
+  publicKey?: PublicKey;
+
+  /**
+   * Optional
+   *
+   * @generated from field: policy.SourceType source_type = 3;
+   */
+  sourceType: SourceType;
+
+  /**
+   * Optional
+   *
+   * @generated from field: string name = 20;
+   */
+  name: string;
+
+  /**
+   * Common metadata
+   *
+   * @generated from field: common.MetadataMutable metadata = 100;
+   */
+  metadata?: MetadataMutable;
+};
+
+/**
+ * Describes the message policy.kasregistry.CreateKeyAccessServerRequest.
+ * Use `create(CreateKeyAccessServerRequestSchema)` to create a new message.
+ */
+export const CreateKeyAccessServerRequestSchema: GenMessage<CreateKeyAccessServerRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 4);
+
+/**
+ * @generated from message policy.kasregistry.CreateKeyAccessServerResponse
+ */
+export type CreateKeyAccessServerResponse = Message<"policy.kasregistry.CreateKeyAccessServerResponse"> & {
+  /**
+   * @generated from field: policy.KeyAccessServer key_access_server = 1;
+   */
+  keyAccessServer?: KeyAccessServer;
+};
+
+/**
+ * Describes the message policy.kasregistry.CreateKeyAccessServerResponse.
+ * Use `create(CreateKeyAccessServerResponseSchema)` to create a new message.
+ */
+export const CreateKeyAccessServerResponseSchema: GenMessage<CreateKeyAccessServerResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 5);
+
+/**
+ * @generated from message policy.kasregistry.UpdateKeyAccessServerRequest
+ */
+export type UpdateKeyAccessServerRequest = Message<"policy.kasregistry.UpdateKeyAccessServerRequest"> & {
+  /**
+   * Required
+   *
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * Optional
+   *
+   * @generated from field: string uri = 2;
+   */
+  uri: string;
+
+  /**
+   * Deprecated
+   * Optional
+   *
+   * @generated from field: policy.PublicKey public_key = 3;
+   */
+  publicKey?: PublicKey;
+
+  /**
+   * Optional
+   * Using UNSPECIFIED will result in a successful update,
+   * but will not actually update the underlying source.
+   * You should not update KAS's from INTERNAL/EXTERNAL
+   * to unspecified.
+   *
+   * @generated from field: policy.SourceType source_type = 4;
+   */
+  sourceType: SourceType;
+
+  /**
+   * Optional
+   *
+   * @generated from field: string name = 20;
+   */
+  name: string;
+
+  /**
+   * Optional
+   * Common metadata
+   *
+   * @generated from field: common.MetadataMutable metadata = 100;
+   */
+  metadata?: MetadataMutable;
+
+  /**
+   * @generated from field: common.MetadataUpdateEnum metadata_update_behavior = 101;
+   */
+  metadataUpdateBehavior: MetadataUpdateEnum;
+};
+
+/**
+ * Describes the message policy.kasregistry.UpdateKeyAccessServerRequest.
+ * Use `create(UpdateKeyAccessServerRequestSchema)` to create a new message.
+ */
+export const UpdateKeyAccessServerRequestSchema: GenMessage<UpdateKeyAccessServerRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 6);
+
+/**
+ * @generated from message policy.kasregistry.UpdateKeyAccessServerResponse
+ */
+export type UpdateKeyAccessServerResponse = Message<"policy.kasregistry.UpdateKeyAccessServerResponse"> & {
+  /**
+   * @generated from field: policy.KeyAccessServer key_access_server = 1;
+   */
+  keyAccessServer?: KeyAccessServer;
+};
+
+/**
+ * Describes the message policy.kasregistry.UpdateKeyAccessServerResponse.
+ * Use `create(UpdateKeyAccessServerResponseSchema)` to create a new message.
+ */
+export const UpdateKeyAccessServerResponseSchema: GenMessage<UpdateKeyAccessServerResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 7);
+
+/**
+ * @generated from message policy.kasregistry.DeleteKeyAccessServerRequest
+ */
+export type DeleteKeyAccessServerRequest = Message<"policy.kasregistry.DeleteKeyAccessServerRequest"> & {
+  /**
+   * Required
+   *
+   * @generated from field: string id = 1;
+   */
+  id: string;
+};
+
+/**
+ * Describes the message policy.kasregistry.DeleteKeyAccessServerRequest.
+ * Use `create(DeleteKeyAccessServerRequestSchema)` to create a new message.
+ */
+export const DeleteKeyAccessServerRequestSchema: GenMessage<DeleteKeyAccessServerRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 8);
+
+/**
+ * @generated from message policy.kasregistry.DeleteKeyAccessServerResponse
+ */
+export type DeleteKeyAccessServerResponse = Message<"policy.kasregistry.DeleteKeyAccessServerResponse"> & {
+  /**
+   * @generated from field: policy.KeyAccessServer key_access_server = 1;
+   */
+  keyAccessServer?: KeyAccessServer;
+};
+
+/**
+ * Describes the message policy.kasregistry.DeleteKeyAccessServerResponse.
+ * Use `create(DeleteKeyAccessServerResponseSchema)` to create a new message.
+ */
+export const DeleteKeyAccessServerResponseSchema: GenMessage<DeleteKeyAccessServerResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 9);
+
+/**
+ * Can be namespace, attribute definition, or value
+ *
+ * @generated from message policy.kasregistry.GrantedPolicyObject
+ */
+export type GrantedPolicyObject = Message<"policy.kasregistry.GrantedPolicyObject"> & {
+  /**
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * @generated from field: string fqn = 2;
+   */
+  fqn: string;
+};
+
+/**
+ * Describes the message policy.kasregistry.GrantedPolicyObject.
+ * Use `create(GrantedPolicyObjectSchema)` to create a new message.
+ */
+export const GrantedPolicyObjectSchema: GenMessage<GrantedPolicyObject> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 10);
+
+/**
+ * Deprecated
+ *
+ * @generated from message policy.kasregistry.KeyAccessServerGrants
+ */
+export type KeyAccessServerGrants = Message<"policy.kasregistry.KeyAccessServerGrants"> & {
+  /**
+   * @generated from field: policy.KeyAccessServer key_access_server = 1;
+   */
+  keyAccessServer?: KeyAccessServer;
+
+  /**
+   * @generated from field: repeated policy.kasregistry.GrantedPolicyObject namespace_grants = 2;
+   */
+  namespaceGrants: GrantedPolicyObject[];
+
+  /**
+   * @generated from field: repeated policy.kasregistry.GrantedPolicyObject attribute_grants = 3;
+   */
+  attributeGrants: GrantedPolicyObject[];
+
+  /**
+   * @generated from field: repeated policy.kasregistry.GrantedPolicyObject value_grants = 4;
+   */
+  valueGrants: GrantedPolicyObject[];
+};
+
+/**
+ * Describes the message policy.kasregistry.KeyAccessServerGrants.
+ * Use `create(KeyAccessServerGrantsSchema)` to create a new message.
+ */
+export const KeyAccessServerGrantsSchema: GenMessage<KeyAccessServerGrants> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 11);
+
+/**
+ * @generated from message policy.kasregistry.CreatePublicKeyRequest
+ */
+export type CreatePublicKeyRequest = Message<"policy.kasregistry.CreatePublicKeyRequest"> & {
+  /**
+   * Required
+   *
+   * @generated from field: string kas_id = 1;
+   */
+  kasId: string;
+
+  /**
+   * Required
+   *
+   * @generated from field: policy.KasPublicKey key = 2;
+   */
+  key?: KasPublicKey;
+
+  /**
+   * Common metadata
+   *
+   * @generated from field: common.MetadataMutable metadata = 100;
+   */
+  metadata?: MetadataMutable;
+};
+
+/**
+ * Describes the message policy.kasregistry.CreatePublicKeyRequest.
+ * Use `create(CreatePublicKeyRequestSchema)` to create a new message.
+ */
+export const CreatePublicKeyRequestSchema: GenMessage<CreatePublicKeyRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 12);
+
+/**
+ * @generated from message policy.kasregistry.CreatePublicKeyResponse
+ */
+export type CreatePublicKeyResponse = Message<"policy.kasregistry.CreatePublicKeyResponse"> & {
+  /**
+   * @generated from field: policy.Key key = 1;
+   */
+  key?: Key;
+};
+
+/**
+ * Describes the message policy.kasregistry.CreatePublicKeyResponse.
+ * Use `create(CreatePublicKeyResponseSchema)` to create a new message.
+ */
+export const CreatePublicKeyResponseSchema: GenMessage<CreatePublicKeyResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 13);
+
+/**
+ * @generated from message policy.kasregistry.GetPublicKeyRequest
+ */
+export type GetPublicKeyRequest = Message<"policy.kasregistry.GetPublicKeyRequest"> & {
+  /**
+   * @generated from oneof policy.kasregistry.GetPublicKeyRequest.identifier
+   */
+  identifier: {
+    /**
+     * @generated from field: string id = 1;
+     */
+    value: string;
+    case: "id";
+  } | { case: undefined; value?: undefined };
+};
+
+/**
+ * Describes the message policy.kasregistry.GetPublicKeyRequest.
+ * Use `create(GetPublicKeyRequestSchema)` to create a new message.
+ */
+export const GetPublicKeyRequestSchema: GenMessage<GetPublicKeyRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 14);
+
+/**
+ * @generated from message policy.kasregistry.GetPublicKeyResponse
+ */
+export type GetPublicKeyResponse = Message<"policy.kasregistry.GetPublicKeyResponse"> & {
+  /**
+   * @generated from field: policy.Key key = 1;
+   */
+  key?: Key;
+};
+
+/**
+ * Describes the message policy.kasregistry.GetPublicKeyResponse.
+ * Use `create(GetPublicKeyResponseSchema)` to create a new message.
+ */
+export const GetPublicKeyResponseSchema: GenMessage<GetPublicKeyResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 15);
+
+/**
+ * @generated from message policy.kasregistry.ListPublicKeysRequest
+ */
+export type ListPublicKeysRequest = Message<"policy.kasregistry.ListPublicKeysRequest"> & {
+  /**
+   * @generated from oneof policy.kasregistry.ListPublicKeysRequest.kas_filter
+   */
+  kasFilter: {
+    /**
+     * Optional
+     *
+     * @generated from field: string kas_id = 1;
+     */
+    value: string;
+    case: "kasId";
+  } | {
+    /**
+     * Optional
+     *
+     * @generated from field: string kas_name = 2;
+     */
+    value: string;
+    case: "kasName";
+  } | {
+    /**
+     * Optional
+     *
+     * @generated from field: string kas_uri = 3;
+     */
+    value: string;
+    case: "kasUri";
+  } | { case: undefined; value?: undefined };
+
+  /**
+   * Optional
+   *
+   * @generated from field: policy.PageRequest pagination = 10;
+   */
+  pagination?: PageRequest;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListPublicKeysRequest.
+ * Use `create(ListPublicKeysRequestSchema)` to create a new message.
+ */
+export const ListPublicKeysRequestSchema: GenMessage<ListPublicKeysRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 16);
+
+/**
+ * @generated from message policy.kasregistry.ListPublicKeysResponse
+ */
+export type ListPublicKeysResponse = Message<"policy.kasregistry.ListPublicKeysResponse"> & {
+  /**
+   * @generated from field: repeated policy.Key keys = 1;
+   */
+  keys: Key[];
+
+  /**
+   * @generated from field: policy.PageResponse pagination = 10;
+   */
+  pagination?: PageResponse;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListPublicKeysResponse.
+ * Use `create(ListPublicKeysResponseSchema)` to create a new message.
+ */
+export const ListPublicKeysResponseSchema: GenMessage<ListPublicKeysResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 17);
+
+/**
+ * @generated from message policy.kasregistry.ListPublicKeyMappingRequest
+ */
+export type ListPublicKeyMappingRequest = Message<"policy.kasregistry.ListPublicKeyMappingRequest"> & {
+  /**
+   * @generated from oneof policy.kasregistry.ListPublicKeyMappingRequest.kas_filter
+   */
+  kasFilter: {
+    /**
+     * Optional
+     *
+     * @generated from field: string kas_id = 1;
+     */
+    value: string;
+    case: "kasId";
+  } | {
+    /**
+     * Optional
+     *
+     * @generated from field: string kas_name = 2;
+     */
+    value: string;
+    case: "kasName";
+  } | {
+    /**
+     * Optional
+     *
+     * @generated from field: string kas_uri = 3;
+     */
+    value: string;
+    case: "kasUri";
+  } | { case: undefined; value?: undefined };
+
+  /**
+   * Optional Public Key ID
+   *
+   * @generated from field: string public_key_id = 4;
+   */
+  publicKeyId: string;
+
+  /**
+   * Optional
+   *
+   * @generated from field: policy.PageRequest pagination = 10;
+   */
+  pagination?: PageRequest;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListPublicKeyMappingRequest.
+ * Use `create(ListPublicKeyMappingRequestSchema)` to create a new message.
+ */
+export const ListPublicKeyMappingRequestSchema: GenMessage<ListPublicKeyMappingRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 18);
+
+/**
+ * @generated from message policy.kasregistry.ListPublicKeyMappingResponse
+ */
+export type ListPublicKeyMappingResponse = Message<"policy.kasregistry.ListPublicKeyMappingResponse"> & {
+  /**
+   * @generated from field: repeated policy.kasregistry.ListPublicKeyMappingResponse.PublicKeyMapping public_key_mappings = 1;
+   */
+  publicKeyMappings: ListPublicKeyMappingResponse_PublicKeyMapping[];
+
+  /**
+   * @generated from field: policy.PageResponse pagination = 10;
+   */
+  pagination?: PageResponse;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListPublicKeyMappingResponse.
+ * Use `create(ListPublicKeyMappingResponseSchema)` to create a new message.
+ */
+export const ListPublicKeyMappingResponseSchema: GenMessage<ListPublicKeyMappingResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 19);
+
+/**
+ * @generated from message policy.kasregistry.ListPublicKeyMappingResponse.PublicKeyMapping
+ */
+export type ListPublicKeyMappingResponse_PublicKeyMapping = Message<"policy.kasregistry.ListPublicKeyMappingResponse.PublicKeyMapping"> & {
+  /**
+   * @generated from field: string kas_id = 2;
+   */
+  kasId: string;
+
+  /**
+   * @generated from field: string kas_name = 3;
+   */
+  kasName: string;
+
+  /**
+   * @generated from field: string kas_uri = 4;
+   */
+  kasUri: string;
+
+  /**
+   * @generated from field: repeated policy.kasregistry.ListPublicKeyMappingResponse.PublicKey public_keys = 5;
+   */
+  publicKeys: ListPublicKeyMappingResponse_PublicKey[];
+};
+
+/**
+ * Describes the message policy.kasregistry.ListPublicKeyMappingResponse.PublicKeyMapping.
+ * Use `create(ListPublicKeyMappingResponse_PublicKeyMappingSchema)` to create a new message.
+ */
+export const ListPublicKeyMappingResponse_PublicKeyMappingSchema: GenMessage<ListPublicKeyMappingResponse_PublicKeyMapping> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 19, 0);
+
+/**
+ * @generated from message policy.kasregistry.ListPublicKeyMappingResponse.PublicKey
+ */
+export type ListPublicKeyMappingResponse_PublicKey = Message<"policy.kasregistry.ListPublicKeyMappingResponse.PublicKey"> & {
+  /**
+   * @generated from field: policy.Key key = 1;
+   */
+  key?: Key;
+
+  /**
+   * @generated from field: repeated policy.kasregistry.ListPublicKeyMappingResponse.Association values = 6;
+   */
+  values: ListPublicKeyMappingResponse_Association[];
+
+  /**
+   * @generated from field: repeated policy.kasregistry.ListPublicKeyMappingResponse.Association definitions = 7;
+   */
+  definitions: ListPublicKeyMappingResponse_Association[];
+
+  /**
+   * @generated from field: repeated policy.kasregistry.ListPublicKeyMappingResponse.Association namespaces = 8;
+   */
+  namespaces: ListPublicKeyMappingResponse_Association[];
+};
+
+/**
+ * Describes the message policy.kasregistry.ListPublicKeyMappingResponse.PublicKey.
+ * Use `create(ListPublicKeyMappingResponse_PublicKeySchema)` to create a new message.
+ */
+export const ListPublicKeyMappingResponse_PublicKeySchema: GenMessage<ListPublicKeyMappingResponse_PublicKey> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 19, 1);
+
+/**
+ * @generated from message policy.kasregistry.ListPublicKeyMappingResponse.Association
+ */
+export type ListPublicKeyMappingResponse_Association = Message<"policy.kasregistry.ListPublicKeyMappingResponse.Association"> & {
+  /**
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * @generated from field: string fqn = 2;
+   */
+  fqn: string;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListPublicKeyMappingResponse.Association.
+ * Use `create(ListPublicKeyMappingResponse_AssociationSchema)` to create a new message.
+ */
+export const ListPublicKeyMappingResponse_AssociationSchema: GenMessage<ListPublicKeyMappingResponse_Association> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 19, 2);
+
+/**
+ * @generated from message policy.kasregistry.UpdatePublicKeyRequest
+ */
+export type UpdatePublicKeyRequest = Message<"policy.kasregistry.UpdatePublicKeyRequest"> & {
+  /**
+   * Required
+   *
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * Optional
+   * Common metadata
+   *
+   * @generated from field: common.MetadataMutable metadata = 100;
+   */
+  metadata?: MetadataMutable;
+
+  /**
+   * @generated from field: common.MetadataUpdateEnum metadata_update_behavior = 101;
+   */
+  metadataUpdateBehavior: MetadataUpdateEnum;
+};
+
+/**
+ * Describes the message policy.kasregistry.UpdatePublicKeyRequest.
+ * Use `create(UpdatePublicKeyRequestSchema)` to create a new message.
+ */
+export const UpdatePublicKeyRequestSchema: GenMessage<UpdatePublicKeyRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 20);
+
+/**
+ * @generated from message policy.kasregistry.UpdatePublicKeyResponse
+ */
+export type UpdatePublicKeyResponse = Message<"policy.kasregistry.UpdatePublicKeyResponse"> & {
+  /**
+   * @generated from field: policy.Key key = 1;
+   */
+  key?: Key;
+};
+
+/**
+ * Describes the message policy.kasregistry.UpdatePublicKeyResponse.
+ * Use `create(UpdatePublicKeyResponseSchema)` to create a new message.
+ */
+export const UpdatePublicKeyResponseSchema: GenMessage<UpdatePublicKeyResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 21);
+
+/**
+ * @generated from message policy.kasregistry.DeactivatePublicKeyRequest
+ */
+export type DeactivatePublicKeyRequest = Message<"policy.kasregistry.DeactivatePublicKeyRequest"> & {
+  /**
+   * @generated from field: string id = 1;
+   */
+  id: string;
+};
+
+/**
+ * Describes the message policy.kasregistry.DeactivatePublicKeyRequest.
+ * Use `create(DeactivatePublicKeyRequestSchema)` to create a new message.
+ */
+export const DeactivatePublicKeyRequestSchema: GenMessage<DeactivatePublicKeyRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 22);
+
+/**
+ * @generated from message policy.kasregistry.DeactivatePublicKeyResponse
+ */
+export type DeactivatePublicKeyResponse = Message<"policy.kasregistry.DeactivatePublicKeyResponse"> & {
+  /**
+   * @generated from field: policy.Key key = 1;
+   */
+  key?: Key;
+};
+
+/**
+ * Describes the message policy.kasregistry.DeactivatePublicKeyResponse.
+ * Use `create(DeactivatePublicKeyResponseSchema)` to create a new message.
+ */
+export const DeactivatePublicKeyResponseSchema: GenMessage<DeactivatePublicKeyResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 23);
+
+/**
+ * @generated from message policy.kasregistry.ActivatePublicKeyRequest
+ */
+export type ActivatePublicKeyRequest = Message<"policy.kasregistry.ActivatePublicKeyRequest"> & {
+  /**
+   * @generated from field: string id = 1;
+   */
+  id: string;
+};
+
+/**
+ * Describes the message policy.kasregistry.ActivatePublicKeyRequest.
+ * Use `create(ActivatePublicKeyRequestSchema)` to create a new message.
+ */
+export const ActivatePublicKeyRequestSchema: GenMessage<ActivatePublicKeyRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 24);
+
+/**
+ * @generated from message policy.kasregistry.ActivatePublicKeyResponse
+ */
+export type ActivatePublicKeyResponse = Message<"policy.kasregistry.ActivatePublicKeyResponse"> & {
+  /**
+   * @generated from field: policy.Key key = 1;
+   */
+  key?: Key;
+};
+
+/**
+ * Describes the message policy.kasregistry.ActivatePublicKeyResponse.
+ * Use `create(ActivatePublicKeyResponseSchema)` to create a new message.
+ */
+export const ActivatePublicKeyResponseSchema: GenMessage<ActivatePublicKeyResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 25);
+
+/**
+ * LIST of KAS Grants returns flat response of grants to all policy objects. It
+ * does not employ selectors for grants to specific policy objects or build the
+ * attribute tree relation. If grants to a known namespace, attribute, or value
+ * are needed, use the respective GET request to the specific policy object.
+ *
+ * @generated from message policy.kasregistry.ListKeyAccessServerGrantsRequest
+ */
+export type ListKeyAccessServerGrantsRequest = Message<"policy.kasregistry.ListKeyAccessServerGrantsRequest"> & {
+  /**
+   * Optional
+   * Filter LIST by ID of a registered Key Access Server.
+   * If neither is provided, grants from all registered KASs to policy attribute
+   * objects are returned.
+   *
+   * @generated from field: string kas_id = 1;
+   */
+  kasId: string;
+
+  /**
+   * Optional
+   * Filter LIST by URI of a registered Key Access Server.
+   * If none is provided, grants from all registered KASs to policy attribute
+   * objects are returned.
+   *
+   * @generated from field: string kas_uri = 2;
+   */
+  kasUri: string;
+
+  /**
+   * Optional
+   * Filter LIST by name of a registered Key Access Server.
+   * If none are provided, grants from all registered KASs to policy attribute
+   * objects are returned.
+   *
+   * @generated from field: string kas_name = 3;
+   */
+  kasName: string;
+
+  /**
+   * Optional
+   *
+   * @generated from field: policy.PageRequest pagination = 10;
+   */
+  pagination?: PageRequest;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListKeyAccessServerGrantsRequest.
+ * Use `create(ListKeyAccessServerGrantsRequestSchema)` to create a new message.
+ */
+export const ListKeyAccessServerGrantsRequestSchema: GenMessage<ListKeyAccessServerGrantsRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 26);
+
+/**
+ * Deprecated
+ *
+ * @generated from message policy.kasregistry.ListKeyAccessServerGrantsResponse
+ */
+export type ListKeyAccessServerGrantsResponse = Message<"policy.kasregistry.ListKeyAccessServerGrantsResponse"> & {
+  /**
+   * @generated from field: repeated policy.kasregistry.KeyAccessServerGrants grants = 1 [deprecated = true];
+   * @deprecated
+   */
+  grants: KeyAccessServerGrants[];
+
+  /**
+   * @generated from field: policy.PageResponse pagination = 10;
+   */
+  pagination?: PageResponse;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListKeyAccessServerGrantsResponse.
+ * Use `create(ListKeyAccessServerGrantsResponseSchema)` to create a new message.
+ */
+export const ListKeyAccessServerGrantsResponseSchema: GenMessage<ListKeyAccessServerGrantsResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 27);
+
+/**
+ * Create a new asymmetric key for the specified Key Access Server (KAS)
+ *
+ * @generated from message policy.kasregistry.CreateKeyRequest
+ */
+export type CreateKeyRequest = Message<"policy.kasregistry.CreateKeyRequest"> & {
+  /**
+   * Required
+   *
+   * The unique identifier of the Key Access Server
+   *
+   * @generated from field: string kas_id = 1;
+   */
+  kasId: string;
+
+  /**
+   * Required
+   *
+   * A user-defined identifier for the key
+   *
+   * @generated from field: string key_id = 2;
+   */
+  keyId: string;
+
+  /**
+   * Required
+   *
+   * The algorithm to be used for the key
+   *
+   * @generated from field: policy.Algorithm key_algorithm = 3;
+   */
+  keyAlgorithm: Algorithm;
+
+  /**
+   * Required
+   *
+   * The mode of the key (e.g., local or external)
+   *
+   * @generated from field: policy.KeyMode key_mode = 4;
+   */
+  keyMode: KeyMode;
+
+  /**
+   * Required
+   *
+   * Context or additional data specific to the public key, based on the key provider implementation
+   *
+   * @generated from field: bytes public_key_ctx = 5;
+   */
+  publicKeyCtx: Uint8Array;
+
+  /**
+   * Optional
+   *
+   * Context or additional data specific to the private key, based on the key provider implementation
+   *
+   * @generated from field: bytes private_key_ctx = 6;
+   */
+  privateKeyCtx: Uint8Array;
+
+  /**
+   * Optional
+   *
+   * Configuration ID for the key provider, if applicable
+   *
+   * @generated from field: string provider_config_id = 7;
+   */
+  providerConfigId: string;
+
+  /**
+   * Common metadata
+   *
+   * Mutable metadata for the key
+   *
+   * @generated from field: common.MetadataMutable metadata = 100;
+   */
+  metadata?: MetadataMutable;
+};
+
+/**
+ * Describes the message policy.kasregistry.CreateKeyRequest.
+ * Use `create(CreateKeyRequestSchema)` to create a new message.
+ */
+export const CreateKeyRequestSchema: GenMessage<CreateKeyRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 28);
+
+/**
+ * Response to a CreateKeyRequest, containing the created asymmetric key
+ *
+ * @generated from message policy.kasregistry.CreateKeyResponse
+ */
+export type CreateKeyResponse = Message<"policy.kasregistry.CreateKeyResponse"> & {
+  /**
+   * The created asymmetric key for a KAS.
+   *
+   * @generated from field: policy.KasKey kas_key = 1;
+   */
+  kasKey?: KasKey;
+};
+
+/**
+ * Describes the message policy.kasregistry.CreateKeyResponse.
+ * Use `create(CreateKeyResponseSchema)` to create a new message.
+ */
+export const CreateKeyResponseSchema: GenMessage<CreateKeyResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 29);
+
+/**
+ * Retrieve an existing asymmetric key from the Key Management System
+ *
+ * @generated from message policy.kasregistry.GetKeyRequest
+ */
+export type GetKeyRequest = Message<"policy.kasregistry.GetKeyRequest"> & {
+  /**
+   * @generated from oneof policy.kasregistry.GetKeyRequest.identifier
+   */
+  identifier: {
+    /**
+     * The unique identifier of the key to retrieve
+     *
+     * @generated from field: string id = 2;
+     */
+    value: string;
+    case: "id";
+  } | {
+    /**
+     * @generated from field: policy.kasregistry.KasKeyIdentifier key = 3;
+     */
+    value: KasKeyIdentifier;
+    case: "key";
+  } | { case: undefined; value?: undefined };
+};
+
+/**
+ * Describes the message policy.kasregistry.GetKeyRequest.
+ * Use `create(GetKeyRequestSchema)` to create a new message.
+ */
+export const GetKeyRequestSchema: GenMessage<GetKeyRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 30);
+
+/**
+ * Response to a GetKeyRequest, containing the requested asymmetric key
+ *
+ * @generated from message policy.kasregistry.GetKeyResponse
+ */
+export type GetKeyResponse = Message<"policy.kasregistry.GetKeyResponse"> & {
+  /**
+   * The requested asymmetric key for a KAS.
+   *
+   * @generated from field: policy.KasKey kas_key = 1;
+   */
+  kasKey?: KasKey;
+};
+
+/**
+ * Describes the message policy.kasregistry.GetKeyResponse.
+ * Use `create(GetKeyResponseSchema)` to create a new message.
+ */
+export const GetKeyResponseSchema: GenMessage<GetKeyResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 31);
+
+/**
+ * List all asymmetric keys managed by a specific Key Access Server or with a given algorithm
+ *
+ * @generated from message policy.kasregistry.ListKeysRequest
+ */
+export type ListKeysRequest = Message<"policy.kasregistry.ListKeysRequest"> & {
+  /**
+   * Filter keys by algorithm
+   *
+   * @generated from field: policy.Algorithm key_algorithm = 1;
+   */
+  keyAlgorithm: Algorithm;
+
+  /**
+   * @generated from oneof policy.kasregistry.ListKeysRequest.kas_filter
+   */
+  kasFilter: {
+    /**
+     * Filter keys by the KAS ID
+     *
+     * @generated from field: string kas_id = 2;
+     */
+    value: string;
+    case: "kasId";
+  } | {
+    /**
+     * Filter keys by the KAS name
+     *
+     * @generated from field: string kas_name = 3;
+     */
+    value: string;
+    case: "kasName";
+  } | {
+    /**
+     * Filter keys by the KAS URI
+     *
+     * @generated from field: string kas_uri = 4;
+     */
+    value: string;
+    case: "kasUri";
+  } | { case: undefined; value?: undefined };
+
+  /**
+   * Optional
+   *
+   * Pagination request for the list of keys
+   *
+   * @generated from field: policy.PageRequest pagination = 10;
+   */
+  pagination?: PageRequest;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListKeysRequest.
+ * Use `create(ListKeysRequestSchema)` to create a new message.
+ */
+export const ListKeysRequestSchema: GenMessage<ListKeysRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 32);
+
+/**
+ * Response to a ListKeysRequest, containing the list of asymmetric keys and pagination information
+ *
+ * @generated from message policy.kasregistry.ListKeysResponse
+ */
+export type ListKeysResponse = Message<"policy.kasregistry.ListKeysResponse"> & {
+  /**
+   * The list of kas keys
+   *
+   * @generated from field: repeated policy.KasKey kas_keys = 1;
+   */
+  kasKeys: KasKey[];
+
+  /**
+   * Pagination response for the list of keys
+   *
+   * @generated from field: policy.PageResponse pagination = 10;
+   */
+  pagination?: PageResponse;
+};
+
+/**
+ * Describes the message policy.kasregistry.ListKeysResponse.
+ * Use `create(ListKeysResponseSchema)` to create a new message.
+ */
+export const ListKeysResponseSchema: GenMessage<ListKeysResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 33);
+
+/**
+ * Update an existing asymmetric key in the Key Management System
+ *
+ * @generated from message policy.kasregistry.UpdateKeyRequest
+ */
+export type UpdateKeyRequest = Message<"policy.kasregistry.UpdateKeyRequest"> & {
+  /**
+   * Required
+   *
+   * The unique identifier of the key to update
+   *
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * Optional
+   *
+   * The new status of the key (e.g., active, inactive)
+   *
+   * @generated from field: policy.KeyStatus key_status = 2;
+   */
+  keyStatus: KeyStatus;
+
+  /**
+   * Optional
+   * Common metadata
+   *
+   * Mutable metadata for the key
+   *
+   * @generated from field: common.MetadataMutable metadata = 100;
+   */
+  metadata?: MetadataMutable;
+
+  /**
+   * The behavior for updating the metadata
+   *
+   * @generated from field: common.MetadataUpdateEnum metadata_update_behavior = 101;
+   */
+  metadataUpdateBehavior: MetadataUpdateEnum;
+};
+
+/**
+ * Describes the message policy.kasregistry.UpdateKeyRequest.
+ * Use `create(UpdateKeyRequestSchema)` to create a new message.
+ */
+export const UpdateKeyRequestSchema: GenMessage<UpdateKeyRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 34);
+
+/**
+ * Response to an UpdateKeyRequest, containing the updated asymmetric key
+ *
+ * @generated from message policy.kasregistry.UpdateKeyResponse
+ */
+export type UpdateKeyResponse = Message<"policy.kasregistry.UpdateKeyResponse"> & {
+  /**
+   * The updated kas key
+   *
+   * @generated from field: policy.KasKey kas_key = 1;
+   */
+  kasKey?: KasKey;
+};
+
+/**
+ * Describes the message policy.kasregistry.UpdateKeyResponse.
+ * Use `create(UpdateKeyResponseSchema)` to create a new message.
+ */
+export const UpdateKeyResponseSchema: GenMessage<UpdateKeyResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 35);
+
+/**
+ * Nested message for specifying the active key using KAS ID and Key ID
+ *
+ * @generated from message policy.kasregistry.KasKeyIdentifier
+ */
+export type KasKeyIdentifier = Message<"policy.kasregistry.KasKeyIdentifier"> & {
+  /**
+   * Required UUID of the Key Access Server
+   *
+   * @generated from oneof policy.kasregistry.KasKeyIdentifier.identifier
+   */
+  identifier: {
+    /**
+     * @generated from field: string kas_id = 2;
+     */
+    value: string;
+    case: "kasId";
+  } | {
+    /**
+     * @generated from field: string name = 3;
+     */
+    value: string;
+    case: "name";
+  } | {
+    /**
+     * @generated from field: string uri = 4;
+     */
+    value: string;
+    case: "uri";
+  } | { case: undefined; value?: undefined };
+
+  /**
+   * Required Key ID of the key in question
+   *
+   * @generated from field: string kid = 5;
+   */
+  kid: string;
+};
+
+/**
+ * Describes the message policy.kasregistry.KasKeyIdentifier.
+ * Use `create(KasKeyIdentifierSchema)` to create a new message.
+ */
+export const KasKeyIdentifierSchema: GenMessage<KasKeyIdentifier> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 36);
+
+/**
+ * @generated from message policy.kasregistry.RotateKeyRequest
+ */
+export type RotateKeyRequest = Message<"policy.kasregistry.RotateKeyRequest"> & {
+  /**
+   * Required (Current Active Key ID)
+   *
+   * @generated from oneof policy.kasregistry.RotateKeyRequest.active_key
+   */
+  activeKey: {
+    /**
+     * Current Active Key UUID
+     *
+     * @generated from field: string id = 1;
+     */
+    value: string;
+    case: "id";
+  } | {
+    /**
+     * Alternative way to specify the active key using KAS ID and Key ID
+     *
+     * @generated from field: policy.kasregistry.KasKeyIdentifier key = 2;
+     */
+    value: KasKeyIdentifier;
+    case: "key";
+  } | { case: undefined; value?: undefined };
+
+  /**
+   * Information about the new key to be rotated in
+   *
+   * @generated from field: policy.kasregistry.RotateKeyRequest.NewKey new_key = 3;
+   */
+  newKey?: RotateKeyRequest_NewKey;
+};
+
+/**
+ * Describes the message policy.kasregistry.RotateKeyRequest.
+ * Use `create(RotateKeyRequestSchema)` to create a new message.
+ */
+export const RotateKeyRequestSchema: GenMessage<RotateKeyRequest> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 37);
+
+/**
+ * Nested message for specifying the new key details
+ *
+ * @generated from message policy.kasregistry.RotateKeyRequest.NewKey
+ */
+export type RotateKeyRequest_NewKey = Message<"policy.kasregistry.RotateKeyRequest.NewKey"> & {
+  /**
+   * Required
+   *
+   * @generated from field: string key_id = 1;
+   */
+  keyId: string;
+
+  /**
+   * Required
+   *
+   * @generated from field: policy.Algorithm algorithm = 2;
+   */
+  algorithm: Algorithm;
+
+  /**
+   * Required
+   *
+   * @generated from field: policy.KeyMode key_mode = 3;
+   */
+  keyMode: KeyMode;
+
+  /**
+   * Required
+   *
+   * Specific structure based on key provider implementation
+   *
+   * @generated from field: bytes private_key_ctx = 4;
+   */
+  privateKeyCtx: Uint8Array;
+
+  /**
+   * Optional
+   *
+   * @generated from field: bytes public_key_ctx = 5;
+   */
+  publicKeyCtx: Uint8Array;
+
+  /**
+   * @generated from field: string provider_config_id = 6;
+   */
+  providerConfigId: string;
+
+  /**
+   * Common metadata fields
+   *
+   * @generated from field: common.Metadata metadata = 100;
+   */
+  metadata?: Metadata;
+};
+
+/**
+ * Describes the message policy.kasregistry.RotateKeyRequest.NewKey.
+ * Use `create(RotateKeyRequest_NewKeySchema)` to create a new message.
+ */
+export const RotateKeyRequest_NewKeySchema: GenMessage<RotateKeyRequest_NewKey> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 37, 0);
+
+/**
+ * Response message for the RotateKey request
+ *
+ * @generated from message policy.kasregistry.RotateKeyResponse
+ */
+export type RotateKeyResponse = Message<"policy.kasregistry.RotateKeyResponse"> & {
+  /**
+   * The newly rotated Kas Key
+   *
+   * @generated from field: policy.KasKey kas_key = 1;
+   */
+  kasKey?: KasKey;
+};
+
+/**
+ * Describes the message policy.kasregistry.RotateKeyResponse.
+ * Use `create(RotateKeyResponseSchema)` to create a new message.
+ */
+export const RotateKeyResponseSchema: GenMessage<RotateKeyResponse> = /*@__PURE__*/
+  messageDesc(file_policy_kasregistry_key_access_server_registry, 38);
+
+/**
+ * @generated from service policy.kasregistry.KeyAccessServerRegistryService
+ */
+export const KeyAccessServerRegistryService: GenService<{
+  /**
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.ListKeyAccessServers
+   */
+  listKeyAccessServers: {
+    methodKind: "unary";
+    input: typeof ListKeyAccessServersRequestSchema;
+    output: typeof ListKeyAccessServersResponseSchema;
+  },
+  /**
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.GetKeyAccessServer
+   */
+  getKeyAccessServer: {
+    methodKind: "unary";
+    input: typeof GetKeyAccessServerRequestSchema;
+    output: typeof GetKeyAccessServerResponseSchema;
+  },
+  /**
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.CreateKeyAccessServer
+   */
+  createKeyAccessServer: {
+    methodKind: "unary";
+    input: typeof CreateKeyAccessServerRequestSchema;
+    output: typeof CreateKeyAccessServerResponseSchema;
+  },
+  /**
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.UpdateKeyAccessServer
+   */
+  updateKeyAccessServer: {
+    methodKind: "unary";
+    input: typeof UpdateKeyAccessServerRequestSchema;
+    output: typeof UpdateKeyAccessServerResponseSchema;
+  },
+  /**
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.DeleteKeyAccessServer
+   */
+  deleteKeyAccessServer: {
+    methodKind: "unary";
+    input: typeof DeleteKeyAccessServerRequestSchema;
+    output: typeof DeleteKeyAccessServerResponseSchema;
+  },
+  /**
+   * Deprecated
+   *
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.ListKeyAccessServerGrants
+   */
+  listKeyAccessServerGrants: {
+    methodKind: "unary";
+    input: typeof ListKeyAccessServerGrantsRequestSchema;
+    output: typeof ListKeyAccessServerGrantsResponseSchema;
+  },
+  /**
+   * KAS Key Management
+   * Request to create a new key in the Key Access Service.
+   *
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.CreateKey
+   */
+  createKey: {
+    methodKind: "unary";
+    input: typeof CreateKeyRequestSchema;
+    output: typeof CreateKeyResponseSchema;
+  },
+  /**
+   * Request to retrieve a key from the Key Access Service.
+   *
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.GetKey
+   */
+  getKey: {
+    methodKind: "unary";
+    input: typeof GetKeyRequestSchema;
+    output: typeof GetKeyResponseSchema;
+  },
+  /**
+   * Request to list keys in the Key Access Service.
+   *
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.ListKeys
+   */
+  listKeys: {
+    methodKind: "unary";
+    input: typeof ListKeysRequestSchema;
+    output: typeof ListKeysResponseSchema;
+  },
+  /**
+   * Request to update a key in the Key Access Service.
+   *
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.UpdateKey
+   */
+  updateKey: {
+    methodKind: "unary";
+    input: typeof UpdateKeyRequestSchema;
+    output: typeof UpdateKeyResponseSchema;
+  },
+  /**
+   * Request to rotate a key in the Key Access Service.
+   *
+   * @generated from rpc policy.kasregistry.KeyAccessServerRegistryService.RotateKey
+   */
+  rotateKey: {
+    methodKind: "unary";
+    input: typeof RotateKeyRequestSchema;
+    output: typeof RotateKeyResponseSchema;
+  },
+}> = /*@__PURE__*/
+  serviceDesc(file_policy_kasregistry_key_access_server_registry, 0);
+