@structured-id/ui-core 0.1.5

package/src/generated/sid/v1/admin/admin_roles.ts

@@ -0,0 +1,1606 @@
+// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
+// @generated from protobuf file "sid/v1/admin/admin_roles.proto" (package "sid.v1.admin", syntax proto3)
+// tslint:disable
+import { Empty } from "../../../google/protobuf/empty";
+import { ServiceType } from "@protobuf-ts/runtime-rpc";
+import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
+import type { IBinaryWriter } from "@protobuf-ts/runtime";
+import { WireType } from "@protobuf-ts/runtime";
+import type { BinaryReadOptions } from "@protobuf-ts/runtime";
+import type { IBinaryReader } from "@protobuf-ts/runtime";
+import { UnknownFieldHandler } from "@protobuf-ts/runtime";
+import type { PartialMessage } from "@protobuf-ts/runtime";
+import { reflectionMergePartial } from "@protobuf-ts/runtime";
+import { MessageType } from "@protobuf-ts/runtime";
+import { Timestamp } from "../../../google/protobuf/timestamp";
+// ── Messages ──
+
+/**
+ * @generated from protobuf message sid.v1.admin.AdminRole
+ */
+export interface AdminRole {
+    /**
+     * @generated from protobuf field: string role_id = 1
+     */
+    roleId: string;
+    /**
+     * @generated from protobuf field: string name = 2
+     */
+    name: string;
+    /**
+     * @generated from protobuf field: string description = 3
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: sid.v1.admin.AdminRoleScope scope = 4
+     */
+    scope: AdminRoleScope;
+    /**
+     * @generated from protobuf field: bool built_in = 5
+     */
+    builtIn: boolean;
+    /**
+     * Permissions granted by this role.
+     *
+     * @generated from protobuf field: repeated string permissions = 6
+     */
+    permissions: string[];
+    /**
+     * Number of principals currently assigned this role.
+     *
+     * @generated from protobuf field: uint32 assigned_count = 7
+     */
+    assignedCount: number;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.AdminAssignment
+ */
+export interface AdminAssignment {
+    /**
+     * @generated from protobuf field: string assignment_id = 1
+     */
+    assignmentId: string;
+    /**
+     * Principal info.
+     *
+     * @generated from protobuf field: string principal_id = 2
+     */
+    principalId: string;
+    /**
+     * @generated from protobuf field: string principal_name = 3
+     */
+    principalName: string;
+    /**
+     * @generated from protobuf field: sid.v1.admin.AdminPrincipalType principal_type = 4
+     */
+    principalType: AdminPrincipalType;
+    /**
+     * Role info.
+     *
+     * @generated from protobuf field: string role_id = 5
+     */
+    roleId: string;
+    /**
+     * @generated from protobuf field: string role_name = 6
+     */
+    roleName: string;
+    /**
+     * @generated from protobuf field: sid.v1.admin.AdminRoleScope role_scope = 7
+     */
+    roleScope: AdminRoleScope;
+    /**
+     * Scope target (e.g., site ID or org ID).
+     *
+     * @generated from protobuf field: string scope_target_id = 8
+     */
+    scopeTargetId: string;
+    /**
+     * @generated from protobuf field: string scope_target_name = 9
+     */
+    scopeTargetName: string;
+    /**
+     * Assignment metadata.
+     *
+     * @generated from protobuf field: sid.v1.admin.AssignmentType assignment_type = 10
+     */
+    assignmentType: AssignmentType;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 11
+     */
+    expiresAt?: Timestamp;
+    /**
+     * @generated from protobuf field: string assigned_by = 12
+     */
+    assignedBy: string;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp assigned_at = 13
+     */
+    assignedAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.EffectivePermission
+ */
+export interface EffectivePermission {
+    /**
+     * @generated from protobuf field: string permission = 1
+     */
+    permission: string;
+    /**
+     * How this permission was acquired.
+     *
+     * @generated from protobuf field: string source = 2
+     */
+    source: string;
+    /**
+     * Role that grants it.
+     *
+     * @generated from protobuf field: string role_name = 3
+     */
+    roleName: string;
+    /**
+     * Scope where it applies.
+     *
+     * @generated from protobuf field: string scope_name = 4
+     */
+    scopeName: string;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.AdminSessionPolicy
+ */
+export interface AdminSessionPolicy {
+    /**
+     * Maximum admin session duration in minutes.
+     *
+     * @generated from protobuf field: uint32 session_max_minutes = 1
+     */
+    sessionMaxMinutes: number;
+    /**
+     * Idle timeout in minutes.
+     *
+     * @generated from protobuf field: uint32 idle_timeout_minutes = 2
+     */
+    idleTimeoutMinutes: number;
+    /**
+     * Step-up elevation TTL in minutes.
+     *
+     * @generated from protobuf field: uint32 elevation_ttl_minutes = 3
+     */
+    elevationTtlMinutes: number;
+    /**
+     * Required MFA method for admin elevation.
+     *
+     * @generated from protobuf field: sid.v1.admin.RequiredMfaMethod required_mfa_method = 4
+     */
+    requiredMfaMethod: RequiredMfaMethod;
+    /**
+     * Bind admin session to IP address.
+     *
+     * @generated from protobuf field: bool ip_binding = 5
+     */
+    ipBinding: boolean;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.ActiveAdminSession
+ */
+export interface ActiveAdminSession {
+    /**
+     * @generated from protobuf field: string session_id = 1
+     */
+    sessionId: string;
+    /**
+     * @generated from protobuf field: string admin_name = 2
+     */
+    adminName: string;
+    /**
+     * @generated from protobuf field: string admin_id = 3
+     */
+    adminId: string;
+    /**
+     * @generated from protobuf field: string role_name = 4
+     */
+    roleName: string;
+    /**
+     * @generated from protobuf field: sid.v1.admin.AssuranceLevel assurance = 5
+     */
+    assurance: AssuranceLevel;
+    /**
+     * @generated from protobuf field: string ip_address = 6
+     */
+    ipAddress: string;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp started_at = 7
+     */
+    startedAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp last_activity = 8
+     */
+    lastActivity?: Timestamp;
+    /**
+     * When elevation expires (null if not elevated).
+     *
+     * @generated from protobuf field: google.protobuf.Timestamp elevated_until = 9
+     */
+    elevatedUntil?: Timestamp;
+}
+// ── Requests / Responses ──
+
+/**
+ * @generated from protobuf message sid.v1.admin.ListAdminRolesRequest
+ */
+export interface ListAdminRolesRequest {
+    /**
+     * @generated from protobuf field: sid.v1.admin.AdminRoleScope scope = 1
+     */
+    scope: AdminRoleScope;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.ListAdminRolesResponse
+ */
+export interface ListAdminRolesResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.admin.AdminRole roles = 1
+     */
+    roles: AdminRole[];
+}
+/**
+ * @generated from protobuf message sid.v1.admin.GetAdminRoleRequest
+ */
+export interface GetAdminRoleRequest {
+    /**
+     * @generated from protobuf field: string role_id = 1
+     */
+    roleId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.ListAssignmentsRequest
+ */
+export interface ListAssignmentsRequest {
+    /**
+     * @generated from protobuf field: string role_id = 1
+     */
+    roleId: string;
+    /**
+     * @generated from protobuf field: sid.v1.admin.AdminPrincipalType principal_type = 2
+     */
+    principalType: AdminPrincipalType;
+    /**
+     * @generated from protobuf field: string search = 3
+     */
+    search: string;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.ListAssignmentsResponse
+ */
+export interface ListAssignmentsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.admin.AdminAssignment assignments = 1
+     */
+    assignments: AdminAssignment[];
+}
+/**
+ * @generated from protobuf message sid.v1.admin.AssignRoleRequest
+ */
+export interface AssignRoleRequest {
+    /**
+     * @generated from protobuf field: string principal_id = 1
+     */
+    principalId: string;
+    /**
+     * @generated from protobuf field: sid.v1.admin.AdminPrincipalType principal_type = 2
+     */
+    principalType: AdminPrincipalType;
+    /**
+     * @generated from protobuf field: string role_id = 3
+     */
+    roleId: string;
+    /**
+     * Scope target: site ID, org ID, or empty for instance-wide.
+     *
+     * @generated from protobuf field: string scope_target_id = 4
+     */
+    scopeTargetId: string;
+    /**
+     * @generated from protobuf field: sid.v1.admin.AssignmentType assignment_type = 5
+     */
+    assignmentType: AssignmentType;
+    /**
+     * Required if time-limited.
+     *
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 6
+     */
+    expiresAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.RevokeAssignmentRequest
+ */
+export interface RevokeAssignmentRequest {
+    /**
+     * @generated from protobuf field: string assignment_id = 1
+     */
+    assignmentId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.GetEffectivePermissionsRequest
+ */
+export interface GetEffectivePermissionsRequest {
+    /**
+     * @generated from protobuf field: string principal_id = 1
+     */
+    principalId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.EffectivePermissionsResponse
+ */
+export interface EffectivePermissionsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.admin.EffectivePermission permissions = 1
+     */
+    permissions: EffectivePermission[];
+}
+/**
+ * @generated from protobuf message sid.v1.admin.ListActiveAdminSessionsResponse
+ */
+export interface ListActiveAdminSessionsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.admin.ActiveAdminSession sessions = 1
+     */
+    sessions: ActiveAdminSession[];
+}
+/**
+ * @generated from protobuf message sid.v1.admin.RevokeAdminSessionRequest
+ */
+export interface RevokeAdminSessionRequest {
+    /**
+     * @generated from protobuf field: string session_id = 1
+     */
+    sessionId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.admin.RevokeAllAdminSessionsResponse
+ */
+export interface RevokeAllAdminSessionsResponse {
+    /**
+     * @generated from protobuf field: uint32 revoked_count = 1
+     */
+    revokedCount: number;
+}
+// ── Enums ──
+
+/**
+ * @generated from protobuf enum sid.v1.admin.AdminRoleScope
+ */
+export enum AdminRoleScope {
+    /**
+     * @generated from protobuf enum value: ADMIN_ROLE_SCOPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: ADMIN_ROLE_SCOPE_INSTANCE = 1;
+     */
+    INSTANCE = 1,
+    /**
+     * @generated from protobuf enum value: ADMIN_ROLE_SCOPE_SITE = 2;
+     */
+    SITE = 2,
+    /**
+     * @generated from protobuf enum value: ADMIN_ROLE_SCOPE_ORGANIZATION = 3;
+     */
+    ORGANIZATION = 3,
+    /**
+     * @generated from protobuf enum value: ADMIN_ROLE_SCOPE_PROFILE = 4;
+     */
+    PROFILE = 4
+}
+/**
+ * @generated from protobuf enum sid.v1.admin.AssignmentType
+ */
+export enum AssignmentType {
+    /**
+     * @generated from protobuf enum value: ASSIGNMENT_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: ASSIGNMENT_TYPE_PERMANENT = 1;
+     */
+    PERMANENT = 1,
+    /**
+     * @generated from protobuf enum value: ASSIGNMENT_TYPE_TIME_LIMITED = 2;
+     */
+    TIME_LIMITED = 2
+}
+/**
+ * @generated from protobuf enum sid.v1.admin.AdminPrincipalType
+ */
+export enum AdminPrincipalType {
+    /**
+     * @generated from protobuf enum value: ADMIN_PRINCIPAL_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: ADMIN_PRINCIPAL_TYPE_USER = 1;
+     */
+    USER = 1,
+    /**
+     * @generated from protobuf enum value: ADMIN_PRINCIPAL_TYPE_GROUP = 2;
+     */
+    GROUP = 2,
+    /**
+     * @generated from protobuf enum value: ADMIN_PRINCIPAL_TYPE_MACHINE_USER = 3;
+     */
+    MACHINE_USER = 3
+}
+/**
+ * @generated from protobuf enum sid.v1.admin.AssuranceLevel
+ */
+export enum AssuranceLevel {
+    /**
+     * @generated from protobuf enum value: ASSURANCE_LEVEL_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: ASSURANCE_LEVEL_BASIC = 1;
+     */
+    BASIC = 1,
+    /**
+     * @generated from protobuf enum value: ASSURANCE_LEVEL_STANDARD = 2;
+     */
+    STANDARD = 2,
+    /**
+     * @generated from protobuf enum value: ASSURANCE_LEVEL_ELEVATED = 3;
+     */
+    ELEVATED = 3,
+    /**
+     * @generated from protobuf enum value: ASSURANCE_LEVEL_CRITICAL = 4;
+     */
+    CRITICAL = 4
+}
+/**
+ * @generated from protobuf enum sid.v1.admin.RequiredMfaMethod
+ */
+export enum RequiredMfaMethod {
+    /**
+     * @generated from protobuf enum value: REQUIRED_MFA_METHOD_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: REQUIRED_MFA_METHOD_ANY_MFA = 1;
+     */
+    ANY_MFA = 1,
+    /**
+     * @generated from protobuf enum value: REQUIRED_MFA_METHOD_WEBAUTHN = 2;
+     */
+    WEBAUTHN = 2,
+    /**
+     * @generated from protobuf enum value: REQUIRED_MFA_METHOD_HARDWARE_KEY_ONLY = 3;
+     */
+    HARDWARE_KEY_ONLY = 3
+}
+// @generated message type with reflection information, may provide speed optimized methods
+class AdminRole$Type extends MessageType<AdminRole> {
+    constructor() {
+        super("sid.v1.admin.AdminRole", [
+            { no: 1, name: "role_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "scope", kind: "enum", T: () => ["sid.v1.admin.AdminRoleScope", AdminRoleScope, "ADMIN_ROLE_SCOPE_"] },
+            { no: 5, name: "built_in", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 6, name: "permissions", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "assigned_count", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AdminRole>): AdminRole {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.roleId = "";
+        message.name = "";
+        message.description = "";
+        message.scope = 0;
+        message.builtIn = false;
+        message.permissions = [];
+        message.assignedCount = 0;
+        if (value !== undefined)
+            reflectionMergePartial<AdminRole>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AdminRole): AdminRole {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string role_id */ 1:
+                    message.roleId = reader.string();
+                    break;
+                case /* string name */ 2:
+                    message.name = reader.string();
+                    break;
+                case /* string description */ 3:
+                    message.description = reader.string();
+                    break;
+                case /* sid.v1.admin.AdminRoleScope scope */ 4:
+                    message.scope = reader.int32();
+                    break;
+                case /* bool built_in */ 5:
+                    message.builtIn = reader.bool();
+                    break;
+                case /* repeated string permissions */ 6:
+                    message.permissions.push(reader.string());
+                    break;
+                case /* uint32 assigned_count */ 7:
+                    message.assignedCount = reader.uint32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AdminRole, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string role_id = 1; */
+        if (message.roleId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.roleId);
+        /* string name = 2; */
+        if (message.name !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.name);
+        /* string description = 3; */
+        if (message.description !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.description);
+        /* sid.v1.admin.AdminRoleScope scope = 4; */
+        if (message.scope !== 0)
+            writer.tag(4, WireType.Varint).int32(message.scope);
+        /* bool built_in = 5; */
+        if (message.builtIn !== false)
+            writer.tag(5, WireType.Varint).bool(message.builtIn);
+        /* repeated string permissions = 6; */
+        for (let i = 0; i < message.permissions.length; i++)
+            writer.tag(6, WireType.LengthDelimited).string(message.permissions[i]);
+        /* uint32 assigned_count = 7; */
+        if (message.assignedCount !== 0)
+            writer.tag(7, WireType.Varint).uint32(message.assignedCount);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.AdminRole
+ */
+export const AdminRole = new AdminRole$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AdminAssignment$Type extends MessageType<AdminAssignment> {
+    constructor() {
+        super("sid.v1.admin.AdminAssignment", [
+            { no: 1, name: "assignment_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "principal_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "principal_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "principal_type", kind: "enum", T: () => ["sid.v1.admin.AdminPrincipalType", AdminPrincipalType, "ADMIN_PRINCIPAL_TYPE_"] },
+            { no: 5, name: "role_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "role_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "role_scope", kind: "enum", T: () => ["sid.v1.admin.AdminRoleScope", AdminRoleScope, "ADMIN_ROLE_SCOPE_"] },
+            { no: 8, name: "scope_target_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 9, name: "scope_target_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 10, name: "assignment_type", kind: "enum", T: () => ["sid.v1.admin.AssignmentType", AssignmentType, "ASSIGNMENT_TYPE_"] },
+            { no: 11, name: "expires_at", kind: "message", T: () => Timestamp },
+            { no: 12, name: "assigned_by", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 13, name: "assigned_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<AdminAssignment>): AdminAssignment {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.assignmentId = "";
+        message.principalId = "";
+        message.principalName = "";
+        message.principalType = 0;
+        message.roleId = "";
+        message.roleName = "";
+        message.roleScope = 0;
+        message.scopeTargetId = "";
+        message.scopeTargetName = "";
+        message.assignmentType = 0;
+        message.assignedBy = "";
+        if (value !== undefined)
+            reflectionMergePartial<AdminAssignment>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AdminAssignment): AdminAssignment {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string assignment_id */ 1:
+                    message.assignmentId = reader.string();
+                    break;
+                case /* string principal_id */ 2:
+                    message.principalId = reader.string();
+                    break;
+                case /* string principal_name */ 3:
+                    message.principalName = reader.string();
+                    break;
+                case /* sid.v1.admin.AdminPrincipalType principal_type */ 4:
+                    message.principalType = reader.int32();
+                    break;
+                case /* string role_id */ 5:
+                    message.roleId = reader.string();
+                    break;
+                case /* string role_name */ 6:
+                    message.roleName = reader.string();
+                    break;
+                case /* sid.v1.admin.AdminRoleScope role_scope */ 7:
+                    message.roleScope = reader.int32();
+                    break;
+                case /* string scope_target_id */ 8:
+                    message.scopeTargetId = reader.string();
+                    break;
+                case /* string scope_target_name */ 9:
+                    message.scopeTargetName = reader.string();
+                    break;
+                case /* sid.v1.admin.AssignmentType assignment_type */ 10:
+                    message.assignmentType = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 11:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                case /* string assigned_by */ 12:
+                    message.assignedBy = reader.string();
+                    break;
+                case /* google.protobuf.Timestamp assigned_at */ 13:
+                    message.assignedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.assignedAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AdminAssignment, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string assignment_id = 1; */
+        if (message.assignmentId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.assignmentId);
+        /* string principal_id = 2; */
+        if (message.principalId !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.principalId);
+        /* string principal_name = 3; */
+        if (message.principalName !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.principalName);
+        /* sid.v1.admin.AdminPrincipalType principal_type = 4; */
+        if (message.principalType !== 0)
+            writer.tag(4, WireType.Varint).int32(message.principalType);
+        /* string role_id = 5; */
+        if (message.roleId !== "")
+            writer.tag(5, WireType.LengthDelimited).string(message.roleId);
+        /* string role_name = 6; */
+        if (message.roleName !== "")
+            writer.tag(6, WireType.LengthDelimited).string(message.roleName);
+        /* sid.v1.admin.AdminRoleScope role_scope = 7; */
+        if (message.roleScope !== 0)
+            writer.tag(7, WireType.Varint).int32(message.roleScope);
+        /* string scope_target_id = 8; */
+        if (message.scopeTargetId !== "")
+            writer.tag(8, WireType.LengthDelimited).string(message.scopeTargetId);
+        /* string scope_target_name = 9; */
+        if (message.scopeTargetName !== "")
+            writer.tag(9, WireType.LengthDelimited).string(message.scopeTargetName);
+        /* sid.v1.admin.AssignmentType assignment_type = 10; */
+        if (message.assignmentType !== 0)
+            writer.tag(10, WireType.Varint).int32(message.assignmentType);
+        /* google.protobuf.Timestamp expires_at = 11; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(11, WireType.LengthDelimited).fork(), options).join();
+        /* string assigned_by = 12; */
+        if (message.assignedBy !== "")
+            writer.tag(12, WireType.LengthDelimited).string(message.assignedBy);
+        /* google.protobuf.Timestamp assigned_at = 13; */
+        if (message.assignedAt)
+            Timestamp.internalBinaryWrite(message.assignedAt, writer.tag(13, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.AdminAssignment
+ */
+export const AdminAssignment = new AdminAssignment$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class EffectivePermission$Type extends MessageType<EffectivePermission> {
+    constructor() {
+        super("sid.v1.admin.EffectivePermission", [
+            { no: 1, name: "permission", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "source", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "role_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "scope_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<EffectivePermission>): EffectivePermission {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.permission = "";
+        message.source = "";
+        message.roleName = "";
+        message.scopeName = "";
+        if (value !== undefined)
+            reflectionMergePartial<EffectivePermission>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: EffectivePermission): EffectivePermission {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string permission */ 1:
+                    message.permission = reader.string();
+                    break;
+                case /* string source */ 2:
+                    message.source = reader.string();
+                    break;
+                case /* string role_name */ 3:
+                    message.roleName = reader.string();
+                    break;
+                case /* string scope_name */ 4:
+                    message.scopeName = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: EffectivePermission, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string permission = 1; */
+        if (message.permission !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.permission);
+        /* string source = 2; */
+        if (message.source !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.source);
+        /* string role_name = 3; */
+        if (message.roleName !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.roleName);
+        /* string scope_name = 4; */
+        if (message.scopeName !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.scopeName);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.EffectivePermission
+ */
+export const EffectivePermission = new EffectivePermission$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AdminSessionPolicy$Type extends MessageType<AdminSessionPolicy> {
+    constructor() {
+        super("sid.v1.admin.AdminSessionPolicy", [
+            { no: 1, name: "session_max_minutes", kind: "scalar", T: 13 /*ScalarType.UINT32*/ },
+            { no: 2, name: "idle_timeout_minutes", kind: "scalar", T: 13 /*ScalarType.UINT32*/ },
+            { no: 3, name: "elevation_ttl_minutes", kind: "scalar", T: 13 /*ScalarType.UINT32*/ },
+            { no: 4, name: "required_mfa_method", kind: "enum", T: () => ["sid.v1.admin.RequiredMfaMethod", RequiredMfaMethod, "REQUIRED_MFA_METHOD_"] },
+            { no: 5, name: "ip_binding", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AdminSessionPolicy>): AdminSessionPolicy {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.sessionMaxMinutes = 0;
+        message.idleTimeoutMinutes = 0;
+        message.elevationTtlMinutes = 0;
+        message.requiredMfaMethod = 0;
+        message.ipBinding = false;
+        if (value !== undefined)
+            reflectionMergePartial<AdminSessionPolicy>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AdminSessionPolicy): AdminSessionPolicy {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* uint32 session_max_minutes */ 1:
+                    message.sessionMaxMinutes = reader.uint32();
+                    break;
+                case /* uint32 idle_timeout_minutes */ 2:
+                    message.idleTimeoutMinutes = reader.uint32();
+                    break;
+                case /* uint32 elevation_ttl_minutes */ 3:
+                    message.elevationTtlMinutes = reader.uint32();
+                    break;
+                case /* sid.v1.admin.RequiredMfaMethod required_mfa_method */ 4:
+                    message.requiredMfaMethod = reader.int32();
+                    break;
+                case /* bool ip_binding */ 5:
+                    message.ipBinding = reader.bool();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AdminSessionPolicy, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint32 session_max_minutes = 1; */
+        if (message.sessionMaxMinutes !== 0)
+            writer.tag(1, WireType.Varint).uint32(message.sessionMaxMinutes);
+        /* uint32 idle_timeout_minutes = 2; */
+        if (message.idleTimeoutMinutes !== 0)
+            writer.tag(2, WireType.Varint).uint32(message.idleTimeoutMinutes);
+        /* uint32 elevation_ttl_minutes = 3; */
+        if (message.elevationTtlMinutes !== 0)
+            writer.tag(3, WireType.Varint).uint32(message.elevationTtlMinutes);
+        /* sid.v1.admin.RequiredMfaMethod required_mfa_method = 4; */
+        if (message.requiredMfaMethod !== 0)
+            writer.tag(4, WireType.Varint).int32(message.requiredMfaMethod);
+        /* bool ip_binding = 5; */
+        if (message.ipBinding !== false)
+            writer.tag(5, WireType.Varint).bool(message.ipBinding);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.AdminSessionPolicy
+ */
+export const AdminSessionPolicy = new AdminSessionPolicy$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ActiveAdminSession$Type extends MessageType<ActiveAdminSession> {
+    constructor() {
+        super("sid.v1.admin.ActiveAdminSession", [
+            { no: 1, name: "session_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "admin_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "admin_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "role_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "assurance", kind: "enum", T: () => ["sid.v1.admin.AssuranceLevel", AssuranceLevel, "ASSURANCE_LEVEL_"] },
+            { no: 6, name: "ip_address", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "started_at", kind: "message", T: () => Timestamp },
+            { no: 8, name: "last_activity", kind: "message", T: () => Timestamp },
+            { no: 9, name: "elevated_until", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<ActiveAdminSession>): ActiveAdminSession {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.sessionId = "";
+        message.adminName = "";
+        message.adminId = "";
+        message.roleName = "";
+        message.assurance = 0;
+        message.ipAddress = "";
+        if (value !== undefined)
+            reflectionMergePartial<ActiveAdminSession>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ActiveAdminSession): ActiveAdminSession {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string session_id */ 1:
+                    message.sessionId = reader.string();
+                    break;
+                case /* string admin_name */ 2:
+                    message.adminName = reader.string();
+                    break;
+                case /* string admin_id */ 3:
+                    message.adminId = reader.string();
+                    break;
+                case /* string role_name */ 4:
+                    message.roleName = reader.string();
+                    break;
+                case /* sid.v1.admin.AssuranceLevel assurance */ 5:
+                    message.assurance = reader.int32();
+                    break;
+                case /* string ip_address */ 6:
+                    message.ipAddress = reader.string();
+                    break;
+                case /* google.protobuf.Timestamp started_at */ 7:
+                    message.startedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.startedAt);
+                    break;
+                case /* google.protobuf.Timestamp last_activity */ 8:
+                    message.lastActivity = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.lastActivity);
+                    break;
+                case /* google.protobuf.Timestamp elevated_until */ 9:
+                    message.elevatedUntil = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.elevatedUntil);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ActiveAdminSession, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string session_id = 1; */
+        if (message.sessionId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.sessionId);
+        /* string admin_name = 2; */
+        if (message.adminName !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.adminName);
+        /* string admin_id = 3; */
+        if (message.adminId !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.adminId);
+        /* string role_name = 4; */
+        if (message.roleName !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.roleName);
+        /* sid.v1.admin.AssuranceLevel assurance = 5; */
+        if (message.assurance !== 0)
+            writer.tag(5, WireType.Varint).int32(message.assurance);
+        /* string ip_address = 6; */
+        if (message.ipAddress !== "")
+            writer.tag(6, WireType.LengthDelimited).string(message.ipAddress);
+        /* google.protobuf.Timestamp started_at = 7; */
+        if (message.startedAt)
+            Timestamp.internalBinaryWrite(message.startedAt, writer.tag(7, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp last_activity = 8; */
+        if (message.lastActivity)
+            Timestamp.internalBinaryWrite(message.lastActivity, writer.tag(8, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp elevated_until = 9; */
+        if (message.elevatedUntil)
+            Timestamp.internalBinaryWrite(message.elevatedUntil, writer.tag(9, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.ActiveAdminSession
+ */
+export const ActiveAdminSession = new ActiveAdminSession$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListAdminRolesRequest$Type extends MessageType<ListAdminRolesRequest> {
+    constructor() {
+        super("sid.v1.admin.ListAdminRolesRequest", [
+            { no: 1, name: "scope", kind: "enum", T: () => ["sid.v1.admin.AdminRoleScope", AdminRoleScope, "ADMIN_ROLE_SCOPE_"] }
+        ]);
+    }
+    create(value?: PartialMessage<ListAdminRolesRequest>): ListAdminRolesRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.scope = 0;
+        if (value !== undefined)
+            reflectionMergePartial<ListAdminRolesRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListAdminRolesRequest): ListAdminRolesRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* sid.v1.admin.AdminRoleScope scope */ 1:
+                    message.scope = reader.int32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListAdminRolesRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* sid.v1.admin.AdminRoleScope scope = 1; */
+        if (message.scope !== 0)
+            writer.tag(1, WireType.Varint).int32(message.scope);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.ListAdminRolesRequest
+ */
+export const ListAdminRolesRequest = new ListAdminRolesRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListAdminRolesResponse$Type extends MessageType<ListAdminRolesResponse> {
+    constructor() {
+        super("sid.v1.admin.ListAdminRolesResponse", [
+            { no: 1, name: "roles", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => AdminRole }
+        ]);
+    }
+    create(value?: PartialMessage<ListAdminRolesResponse>): ListAdminRolesResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.roles = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListAdminRolesResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListAdminRolesResponse): ListAdminRolesResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.admin.AdminRole roles */ 1:
+                    message.roles.push(AdminRole.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListAdminRolesResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.admin.AdminRole roles = 1; */
+        for (let i = 0; i < message.roles.length; i++)
+            AdminRole.internalBinaryWrite(message.roles[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.ListAdminRolesResponse
+ */
+export const ListAdminRolesResponse = new ListAdminRolesResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GetAdminRoleRequest$Type extends MessageType<GetAdminRoleRequest> {
+    constructor() {
+        super("sid.v1.admin.GetAdminRoleRequest", [
+            { no: 1, name: "role_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetAdminRoleRequest>): GetAdminRoleRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.roleId = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetAdminRoleRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetAdminRoleRequest): GetAdminRoleRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string role_id */ 1:
+                    message.roleId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetAdminRoleRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string role_id = 1; */
+        if (message.roleId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.roleId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.GetAdminRoleRequest
+ */
+export const GetAdminRoleRequest = new GetAdminRoleRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListAssignmentsRequest$Type extends MessageType<ListAssignmentsRequest> {
+    constructor() {
+        super("sid.v1.admin.ListAssignmentsRequest", [
+            { no: 1, name: "role_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "principal_type", kind: "enum", T: () => ["sid.v1.admin.AdminPrincipalType", AdminPrincipalType, "ADMIN_PRINCIPAL_TYPE_"] },
+            { no: 3, name: "search", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ListAssignmentsRequest>): ListAssignmentsRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.roleId = "";
+        message.principalType = 0;
+        message.search = "";
+        if (value !== undefined)
+            reflectionMergePartial<ListAssignmentsRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListAssignmentsRequest): ListAssignmentsRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string role_id */ 1:
+                    message.roleId = reader.string();
+                    break;
+                case /* sid.v1.admin.AdminPrincipalType principal_type */ 2:
+                    message.principalType = reader.int32();
+                    break;
+                case /* string search */ 3:
+                    message.search = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListAssignmentsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string role_id = 1; */
+        if (message.roleId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.roleId);
+        /* sid.v1.admin.AdminPrincipalType principal_type = 2; */
+        if (message.principalType !== 0)
+            writer.tag(2, WireType.Varint).int32(message.principalType);
+        /* string search = 3; */
+        if (message.search !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.search);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.ListAssignmentsRequest
+ */
+export const ListAssignmentsRequest = new ListAssignmentsRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListAssignmentsResponse$Type extends MessageType<ListAssignmentsResponse> {
+    constructor() {
+        super("sid.v1.admin.ListAssignmentsResponse", [
+            { no: 1, name: "assignments", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => AdminAssignment }
+        ]);
+    }
+    create(value?: PartialMessage<ListAssignmentsResponse>): ListAssignmentsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.assignments = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListAssignmentsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListAssignmentsResponse): ListAssignmentsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.admin.AdminAssignment assignments */ 1:
+                    message.assignments.push(AdminAssignment.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListAssignmentsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.admin.AdminAssignment assignments = 1; */
+        for (let i = 0; i < message.assignments.length; i++)
+            AdminAssignment.internalBinaryWrite(message.assignments[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.ListAssignmentsResponse
+ */
+export const ListAssignmentsResponse = new ListAssignmentsResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AssignRoleRequest$Type extends MessageType<AssignRoleRequest> {
+    constructor() {
+        super("sid.v1.admin.AssignRoleRequest", [
+            { no: 1, name: "principal_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "principal_type", kind: "enum", T: () => ["sid.v1.admin.AdminPrincipalType", AdminPrincipalType, "ADMIN_PRINCIPAL_TYPE_"] },
+            { no: 3, name: "role_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "scope_target_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "assignment_type", kind: "enum", T: () => ["sid.v1.admin.AssignmentType", AssignmentType, "ASSIGNMENT_TYPE_"] },
+            { no: 6, name: "expires_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<AssignRoleRequest>): AssignRoleRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.principalId = "";
+        message.principalType = 0;
+        message.roleId = "";
+        message.scopeTargetId = "";
+        message.assignmentType = 0;
+        if (value !== undefined)
+            reflectionMergePartial<AssignRoleRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AssignRoleRequest): AssignRoleRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string principal_id */ 1:
+                    message.principalId = reader.string();
+                    break;
+                case /* sid.v1.admin.AdminPrincipalType principal_type */ 2:
+                    message.principalType = reader.int32();
+                    break;
+                case /* string role_id */ 3:
+                    message.roleId = reader.string();
+                    break;
+                case /* string scope_target_id */ 4:
+                    message.scopeTargetId = reader.string();
+                    break;
+                case /* sid.v1.admin.AssignmentType assignment_type */ 5:
+                    message.assignmentType = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 6:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AssignRoleRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string principal_id = 1; */
+        if (message.principalId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.principalId);
+        /* sid.v1.admin.AdminPrincipalType principal_type = 2; */
+        if (message.principalType !== 0)
+            writer.tag(2, WireType.Varint).int32(message.principalType);
+        /* string role_id = 3; */
+        if (message.roleId !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.roleId);
+        /* string scope_target_id = 4; */
+        if (message.scopeTargetId !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.scopeTargetId);
+        /* sid.v1.admin.AssignmentType assignment_type = 5; */
+        if (message.assignmentType !== 0)
+            writer.tag(5, WireType.Varint).int32(message.assignmentType);
+        /* google.protobuf.Timestamp expires_at = 6; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.AssignRoleRequest
+ */
+export const AssignRoleRequest = new AssignRoleRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RevokeAssignmentRequest$Type extends MessageType<RevokeAssignmentRequest> {
+    constructor() {
+        super("sid.v1.admin.RevokeAssignmentRequest", [
+            { no: 1, name: "assignment_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RevokeAssignmentRequest>): RevokeAssignmentRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.assignmentId = "";
+        if (value !== undefined)
+            reflectionMergePartial<RevokeAssignmentRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeAssignmentRequest): RevokeAssignmentRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string assignment_id */ 1:
+                    message.assignmentId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RevokeAssignmentRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string assignment_id = 1; */
+        if (message.assignmentId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.assignmentId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.RevokeAssignmentRequest
+ */
+export const RevokeAssignmentRequest = new RevokeAssignmentRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GetEffectivePermissionsRequest$Type extends MessageType<GetEffectivePermissionsRequest> {
+    constructor() {
+        super("sid.v1.admin.GetEffectivePermissionsRequest", [
+            { no: 1, name: "principal_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetEffectivePermissionsRequest>): GetEffectivePermissionsRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.principalId = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetEffectivePermissionsRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetEffectivePermissionsRequest): GetEffectivePermissionsRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string principal_id */ 1:
+                    message.principalId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetEffectivePermissionsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string principal_id = 1; */
+        if (message.principalId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.principalId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.GetEffectivePermissionsRequest
+ */
+export const GetEffectivePermissionsRequest = new GetEffectivePermissionsRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class EffectivePermissionsResponse$Type extends MessageType<EffectivePermissionsResponse> {
+    constructor() {
+        super("sid.v1.admin.EffectivePermissionsResponse", [
+            { no: 1, name: "permissions", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => EffectivePermission }
+        ]);
+    }
+    create(value?: PartialMessage<EffectivePermissionsResponse>): EffectivePermissionsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.permissions = [];
+        if (value !== undefined)
+            reflectionMergePartial<EffectivePermissionsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: EffectivePermissionsResponse): EffectivePermissionsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.admin.EffectivePermission permissions */ 1:
+                    message.permissions.push(EffectivePermission.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: EffectivePermissionsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.admin.EffectivePermission permissions = 1; */
+        for (let i = 0; i < message.permissions.length; i++)
+            EffectivePermission.internalBinaryWrite(message.permissions[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.EffectivePermissionsResponse
+ */
+export const EffectivePermissionsResponse = new EffectivePermissionsResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListActiveAdminSessionsResponse$Type extends MessageType<ListActiveAdminSessionsResponse> {
+    constructor() {
+        super("sid.v1.admin.ListActiveAdminSessionsResponse", [
+            { no: 1, name: "sessions", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => ActiveAdminSession }
+        ]);
+    }
+    create(value?: PartialMessage<ListActiveAdminSessionsResponse>): ListActiveAdminSessionsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.sessions = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListActiveAdminSessionsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListActiveAdminSessionsResponse): ListActiveAdminSessionsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.admin.ActiveAdminSession sessions */ 1:
+                    message.sessions.push(ActiveAdminSession.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListActiveAdminSessionsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.admin.ActiveAdminSession sessions = 1; */
+        for (let i = 0; i < message.sessions.length; i++)
+            ActiveAdminSession.internalBinaryWrite(message.sessions[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.ListActiveAdminSessionsResponse
+ */
+export const ListActiveAdminSessionsResponse = new ListActiveAdminSessionsResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RevokeAdminSessionRequest$Type extends MessageType<RevokeAdminSessionRequest> {
+    constructor() {
+        super("sid.v1.admin.RevokeAdminSessionRequest", [
+            { no: 1, name: "session_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RevokeAdminSessionRequest>): RevokeAdminSessionRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.sessionId = "";
+        if (value !== undefined)
+            reflectionMergePartial<RevokeAdminSessionRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeAdminSessionRequest): RevokeAdminSessionRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string session_id */ 1:
+                    message.sessionId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RevokeAdminSessionRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string session_id = 1; */
+        if (message.sessionId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.sessionId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.RevokeAdminSessionRequest
+ */
+export const RevokeAdminSessionRequest = new RevokeAdminSessionRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RevokeAllAdminSessionsResponse$Type extends MessageType<RevokeAllAdminSessionsResponse> {
+    constructor() {
+        super("sid.v1.admin.RevokeAllAdminSessionsResponse", [
+            { no: 1, name: "revoked_count", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RevokeAllAdminSessionsResponse>): RevokeAllAdminSessionsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.revokedCount = 0;
+        if (value !== undefined)
+            reflectionMergePartial<RevokeAllAdminSessionsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeAllAdminSessionsResponse): RevokeAllAdminSessionsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* uint32 revoked_count */ 1:
+                    message.revokedCount = reader.uint32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RevokeAllAdminSessionsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* uint32 revoked_count = 1; */
+        if (message.revokedCount !== 0)
+            writer.tag(1, WireType.Varint).uint32(message.revokedCount);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.admin.RevokeAllAdminSessionsResponse
+ */
+export const RevokeAllAdminSessionsResponse = new RevokeAllAdminSessionsResponse$Type();
+/**
+ * @generated ServiceType for protobuf service sid.v1.admin.AdminRoleService
+ */
+export const AdminRoleService = new ServiceType("sid.v1.admin.AdminRoleService", [
+    { name: "ListAdminRoles", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/admin-roles" } }, I: ListAdminRolesRequest, O: ListAdminRolesResponse },
+    { name: "GetAdminRole", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/admin-roles/{role_id}" } }, I: GetAdminRoleRequest, O: AdminRole },
+    { name: "ListAssignments", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/admin-roles/assignments" } }, I: ListAssignmentsRequest, O: ListAssignmentsResponse },
+    { name: "AssignRole", options: { "google.api.http": { post: "/v1/admin/admin-roles/assignments", body: "*" } }, I: AssignRoleRequest, O: AdminAssignment },
+    { name: "RevokeAssignment", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/admin/admin-roles/assignments/{assignment_id}" } }, I: RevokeAssignmentRequest, O: Empty },
+    { name: "GetEffectivePermissions", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/admin-roles/effective-permissions" } }, I: GetEffectivePermissionsRequest, O: EffectivePermissionsResponse },
+    { name: "GetAdminSessionPolicy", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/admin-roles/session-policy" } }, I: Empty, O: AdminSessionPolicy },
+    { name: "UpdateAdminSessionPolicy", options: { "google.api.http": { put: "/v1/admin/admin-roles/session-policy", body: "*" } }, I: AdminSessionPolicy, O: AdminSessionPolicy },
+    { name: "ListActiveAdminSessions", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/admin/admin-roles/active-sessions" } }, I: Empty, O: ListActiveAdminSessionsResponse },
+    { name: "RevokeAdminSession", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/admin/admin-roles/active-sessions/{session_id}/revoke", body: "*" } }, I: RevokeAdminSessionRequest, O: Empty },
+    { name: "RevokeAllAdminSessions", options: { "google.api.http": { post: "/v1/admin/admin-roles/active-sessions/revoke-all", body: "*" } }, I: Empty, O: RevokeAllAdminSessionsResponse }
+]);