@structured-id/ui-core 0.1.5

package/src/generated/sid/v1/attestation/attestation.ts

@@ -0,0 +1,813 @@
+// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
+// @generated from protobuf file "sid/v1/attestation/attestation.proto" (package "sid.v1.attestation", syntax proto3)
+// tslint:disable
+import { Empty } from "../../../google/protobuf/empty";
+import { ServiceType } from "@protobuf-ts/runtime-rpc";
+import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
+import type { IBinaryWriter } from "@protobuf-ts/runtime";
+import { WireType } from "@protobuf-ts/runtime";
+import type { BinaryReadOptions } from "@protobuf-ts/runtime";
+import type { IBinaryReader } from "@protobuf-ts/runtime";
+import { UnknownFieldHandler } from "@protobuf-ts/runtime";
+import type { PartialMessage } from "@protobuf-ts/runtime";
+import { reflectionMergePartial } from "@protobuf-ts/runtime";
+import { MessageType } from "@protobuf-ts/runtime";
+import { Timestamp } from "../../../google/protobuf/timestamp";
+/**
+ * Device attestation record — cryptographic identity of a device.
+ *
+ * @generated from protobuf message sid.v1.attestation.DeviceAttestation
+ */
+export interface DeviceAttestation {
+    /**
+     * @generated from protobuf field: string id = 1
+     */
+    id: string; // Attestation record ID (UUIDv7)
+    /**
+     * @generated from protobuf field: string device_id = 2
+     */
+    deviceId: string; // References Device in sid-identity
+    /**
+     * @generated from protobuf field: string profile_id = 3
+     */
+    profileId: string; // Owner profile
+    /**
+     * @generated from protobuf field: sid.v1.attestation.AttestationFormat format = 4
+     */
+    format: AttestationFormat; // Attestation format
+    /**
+     * @generated from protobuf field: sid.v1.attestation.KeyStorageType key_storage = 5
+     */
+    keyStorage: KeyStorageType; // Hardware key type
+    /**
+     * @generated from protobuf field: sid.v1.attestation.AttestationStatus status = 6
+     */
+    status: AttestationStatus; // Verification status
+    /**
+     * @generated from protobuf field: bytes device_public_key = 7
+     */
+    devicePublicKey: Uint8Array; // Device public key (DER-encoded)
+    /**
+     * @generated from protobuf field: optional bytes attestation_object = 8
+     */
+    attestationObject?: Uint8Array; // Raw attestation blob (platform-specific)
+    /**
+     * @generated from protobuf field: optional bytes attestation_certificate = 9
+     */
+    attestationCertificate?: Uint8Array; // Leaf certificate from attestation chain
+    /**
+     * @generated from protobuf field: optional string aaguid = 10
+     */
+    aaguid?: string; // Authenticator Attestation GUID (WebAuthn)
+    /**
+     * @generated from protobuf field: optional string credential_id = 11
+     */
+    credentialId?: string; // Bound credential ID (WebAuthn/OPAQUE)
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 12
+     */
+    createdAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp updated_at = 13
+     */
+    updatedAt?: Timestamp;
+    /**
+     * @generated from protobuf field: optional google.protobuf.Timestamp revoked_at = 14
+     */
+    revokedAt?: Timestamp;
+}
+// ── Request/Response Messages ──
+
+/**
+ * @generated from protobuf message sid.v1.attestation.RegisterDeviceKeyRequest
+ */
+export interface RegisterDeviceKeyRequest {
+    /**
+     * @generated from protobuf field: string device_id = 1
+     */
+    deviceId: string; // Device to register key for
+    /**
+     * @generated from protobuf field: sid.v1.attestation.AttestationFormat format = 2
+     */
+    format: AttestationFormat; // Attestation format
+    /**
+     * @generated from protobuf field: sid.v1.attestation.KeyStorageType key_storage = 3
+     */
+    keyStorage: KeyStorageType; // Hardware key type
+    /**
+     * @generated from protobuf field: bytes device_public_key = 4
+     */
+    devicePublicKey: Uint8Array; // Device public key (DER-encoded)
+    /**
+     * @generated from protobuf field: optional bytes attestation_object = 5
+     */
+    attestationObject?: Uint8Array; // Raw attestation blob
+    /**
+     * @generated from protobuf field: optional bytes attestation_certificate = 6
+     */
+    attestationCertificate?: Uint8Array; // Leaf certificate
+    /**
+     * @generated from protobuf field: optional string aaguid = 7
+     */
+    aaguid?: string; // Authenticator AAGUID
+    /**
+     * @generated from protobuf field: optional string credential_id = 8
+     */
+    credentialId?: string; // Bound credential ID
+}
+/**
+ * @generated from protobuf message sid.v1.attestation.GetDeviceAttestationRequest
+ */
+export interface GetDeviceAttestationRequest {
+    /**
+     * @generated from protobuf field: string device_id = 1
+     */
+    deviceId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.attestation.RotateDeviceKeyRequest
+ */
+export interface RotateDeviceKeyRequest {
+    /**
+     * @generated from protobuf field: string device_id = 1
+     */
+    deviceId: string;
+    /**
+     * @generated from protobuf field: bytes new_device_public_key = 2
+     */
+    newDevicePublicKey: Uint8Array; // New public key
+    /**
+     * @generated from protobuf field: optional bytes new_attestation_object = 3
+     */
+    newAttestationObject?: Uint8Array; // New attestation blob
+    /**
+     * @generated from protobuf field: optional bytes new_attestation_certificate = 4
+     */
+    newAttestationCertificate?: Uint8Array; // New leaf certificate
+}
+/**
+ * @generated from protobuf message sid.v1.attestation.RevokeDeviceKeyRequest
+ */
+export interface RevokeDeviceKeyRequest {
+    /**
+     * @generated from protobuf field: string device_id = 1
+     */
+    deviceId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.attestation.ListDeviceAttestationsRequest
+ */
+export interface ListDeviceAttestationsRequest {
+    /**
+     * @generated from protobuf field: string profile_id = 1
+     */
+    profileId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.attestation.ListDeviceAttestationsResponse
+ */
+export interface ListDeviceAttestationsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.attestation.DeviceAttestation attestations = 1
+     */
+    attestations: DeviceAttestation[];
+}
+/**
+ * Attestation format reported by the device.
+ *
+ * @generated from protobuf enum sid.v1.attestation.AttestationFormat
+ */
+export enum AttestationFormat {
+    /**
+     * @generated from protobuf enum value: ATTESTATION_FORMAT_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * No attestation provided
+     *
+     * @generated from protobuf enum value: ATTESTATION_FORMAT_NONE = 1;
+     */
+    NONE = 1,
+    /**
+     * FIDO2 packed attestation
+     *
+     * @generated from protobuf enum value: ATTESTATION_FORMAT_PACKED = 2;
+     */
+    PACKED = 2,
+    /**
+     * TPM 2.0 attestation
+     *
+     * @generated from protobuf enum value: ATTESTATION_FORMAT_TPM = 3;
+     */
+    TPM = 3,
+    /**
+     * Android Keystore attestation
+     *
+     * @generated from protobuf enum value: ATTESTATION_FORMAT_ANDROID_KEY = 4;
+     */
+    ANDROID_KEY = 4,
+    /**
+     * Apple App Attest / Secure Enclave
+     *
+     * @generated from protobuf enum value: ATTESTATION_FORMAT_APPLE = 5;
+     */
+    APPLE = 5,
+    /**
+     * FIDO U2F attestation
+     *
+     * @generated from protobuf enum value: ATTESTATION_FORMAT_FIDO_U2F = 6;
+     */
+    FIDO_U2F = 6
+}
+/**
+ * Type of hardware key storage on the device.
+ *
+ * @generated from protobuf enum sid.v1.attestation.KeyStorageType
+ */
+export enum KeyStorageType {
+    /**
+     * @generated from protobuf enum value: KEY_STORAGE_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Software-only key (no hardware backing)
+     *
+     * @generated from protobuf enum value: KEY_STORAGE_TYPE_SOFTWARE = 1;
+     */
+    SOFTWARE = 1,
+    /**
+     * Trusted Platform Module
+     *
+     * @generated from protobuf enum value: KEY_STORAGE_TYPE_TPM = 2;
+     */
+    TPM = 2,
+    /**
+     * Apple Secure Enclave
+     *
+     * @generated from protobuf enum value: KEY_STORAGE_TYPE_SECURE_ENCLAVE = 3;
+     */
+    SECURE_ENCLAVE = 3,
+    /**
+     * Android StrongBox
+     *
+     * @generated from protobuf enum value: KEY_STORAGE_TYPE_STRONGBOX = 4;
+     */
+    STRONGBOX = 4,
+    /**
+     * ARM TrustZone or similar TEE
+     *
+     * @generated from protobuf enum value: KEY_STORAGE_TYPE_TEE = 5;
+     */
+    TEE = 5
+}
+/**
+ * Attestation verification status.
+ *
+ * @generated from protobuf enum sid.v1.attestation.AttestationStatus
+ */
+export enum AttestationStatus {
+    /**
+     * @generated from protobuf enum value: ATTESTATION_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Received, not yet verified
+     *
+     * @generated from protobuf enum value: ATTESTATION_STATUS_PENDING = 1;
+     */
+    PENDING = 1,
+    /**
+     * Attestation chain verified (EE)
+     *
+     * @generated from protobuf enum value: ATTESTATION_STATUS_VERIFIED = 2;
+     */
+    VERIFIED = 2,
+    /**
+     * Stored but not verified (CE default)
+     *
+     * @generated from protobuf enum value: ATTESTATION_STATUS_UNVERIFIED = 3;
+     */
+    UNVERIFIED = 3,
+    /**
+     * Verification failed (EE)
+     *
+     * @generated from protobuf enum value: ATTESTATION_STATUS_REJECTED = 4;
+     */
+    REJECTED = 4,
+    /**
+     * Key has been revoked
+     *
+     * @generated from protobuf enum value: ATTESTATION_STATUS_REVOKED = 5;
+     */
+    REVOKED = 5
+}
+// @generated message type with reflection information, may provide speed optimized methods
+class DeviceAttestation$Type extends MessageType<DeviceAttestation> {
+    constructor() {
+        super("sid.v1.attestation.DeviceAttestation", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "device_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "profile_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "format", kind: "enum", T: () => ["sid.v1.attestation.AttestationFormat", AttestationFormat, "ATTESTATION_FORMAT_"] },
+            { no: 5, name: "key_storage", kind: "enum", T: () => ["sid.v1.attestation.KeyStorageType", KeyStorageType, "KEY_STORAGE_TYPE_"] },
+            { no: 6, name: "status", kind: "enum", T: () => ["sid.v1.attestation.AttestationStatus", AttestationStatus, "ATTESTATION_STATUS_"] },
+            { no: 7, name: "device_public_key", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
+            { no: 8, name: "attestation_object", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 9, name: "attestation_certificate", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 10, name: "aaguid", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 11, name: "credential_id", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 12, name: "created_at", kind: "message", T: () => Timestamp },
+            { no: 13, name: "updated_at", kind: "message", T: () => Timestamp },
+            { no: 14, name: "revoked_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<DeviceAttestation>): DeviceAttestation {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.deviceId = "";
+        message.profileId = "";
+        message.format = 0;
+        message.keyStorage = 0;
+        message.status = 0;
+        message.devicePublicKey = new Uint8Array(0);
+        if (value !== undefined)
+            reflectionMergePartial<DeviceAttestation>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeviceAttestation): DeviceAttestation {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* string device_id */ 2:
+                    message.deviceId = reader.string();
+                    break;
+                case /* string profile_id */ 3:
+                    message.profileId = reader.string();
+                    break;
+                case /* sid.v1.attestation.AttestationFormat format */ 4:
+                    message.format = reader.int32();
+                    break;
+                case /* sid.v1.attestation.KeyStorageType key_storage */ 5:
+                    message.keyStorage = reader.int32();
+                    break;
+                case /* sid.v1.attestation.AttestationStatus status */ 6:
+                    message.status = reader.int32();
+                    break;
+                case /* bytes device_public_key */ 7:
+                    message.devicePublicKey = reader.bytes();
+                    break;
+                case /* optional bytes attestation_object */ 8:
+                    message.attestationObject = reader.bytes();
+                    break;
+                case /* optional bytes attestation_certificate */ 9:
+                    message.attestationCertificate = reader.bytes();
+                    break;
+                case /* optional string aaguid */ 10:
+                    message.aaguid = reader.string();
+                    break;
+                case /* optional string credential_id */ 11:
+                    message.credentialId = reader.string();
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 12:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                case /* google.protobuf.Timestamp updated_at */ 13:
+                    message.updatedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.updatedAt);
+                    break;
+                case /* optional google.protobuf.Timestamp revoked_at */ 14:
+                    message.revokedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.revokedAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DeviceAttestation, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* string device_id = 2; */
+        if (message.deviceId !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.deviceId);
+        /* string profile_id = 3; */
+        if (message.profileId !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.profileId);
+        /* sid.v1.attestation.AttestationFormat format = 4; */
+        if (message.format !== 0)
+            writer.tag(4, WireType.Varint).int32(message.format);
+        /* sid.v1.attestation.KeyStorageType key_storage = 5; */
+        if (message.keyStorage !== 0)
+            writer.tag(5, WireType.Varint).int32(message.keyStorage);
+        /* sid.v1.attestation.AttestationStatus status = 6; */
+        if (message.status !== 0)
+            writer.tag(6, WireType.Varint).int32(message.status);
+        /* bytes device_public_key = 7; */
+        if (message.devicePublicKey.length)
+            writer.tag(7, WireType.LengthDelimited).bytes(message.devicePublicKey);
+        /* optional bytes attestation_object = 8; */
+        if (message.attestationObject !== undefined)
+            writer.tag(8, WireType.LengthDelimited).bytes(message.attestationObject);
+        /* optional bytes attestation_certificate = 9; */
+        if (message.attestationCertificate !== undefined)
+            writer.tag(9, WireType.LengthDelimited).bytes(message.attestationCertificate);
+        /* optional string aaguid = 10; */
+        if (message.aaguid !== undefined)
+            writer.tag(10, WireType.LengthDelimited).string(message.aaguid);
+        /* optional string credential_id = 11; */
+        if (message.credentialId !== undefined)
+            writer.tag(11, WireType.LengthDelimited).string(message.credentialId);
+        /* google.protobuf.Timestamp created_at = 12; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(12, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp updated_at = 13; */
+        if (message.updatedAt)
+            Timestamp.internalBinaryWrite(message.updatedAt, writer.tag(13, WireType.LengthDelimited).fork(), options).join();
+        /* optional google.protobuf.Timestamp revoked_at = 14; */
+        if (message.revokedAt)
+            Timestamp.internalBinaryWrite(message.revokedAt, writer.tag(14, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.attestation.DeviceAttestation
+ */
+export const DeviceAttestation = new DeviceAttestation$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RegisterDeviceKeyRequest$Type extends MessageType<RegisterDeviceKeyRequest> {
+    constructor() {
+        super("sid.v1.attestation.RegisterDeviceKeyRequest", [
+            { no: 1, name: "device_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "format", kind: "enum", T: () => ["sid.v1.attestation.AttestationFormat", AttestationFormat, "ATTESTATION_FORMAT_"] },
+            { no: 3, name: "key_storage", kind: "enum", T: () => ["sid.v1.attestation.KeyStorageType", KeyStorageType, "KEY_STORAGE_TYPE_"] },
+            { no: 4, name: "device_public_key", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
+            { no: 5, name: "attestation_object", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 6, name: "attestation_certificate", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 7, name: "aaguid", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ },
+            { no: 8, name: "credential_id", kind: "scalar", opt: true, T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RegisterDeviceKeyRequest>): RegisterDeviceKeyRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.deviceId = "";
+        message.format = 0;
+        message.keyStorage = 0;
+        message.devicePublicKey = new Uint8Array(0);
+        if (value !== undefined)
+            reflectionMergePartial<RegisterDeviceKeyRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RegisterDeviceKeyRequest): RegisterDeviceKeyRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string device_id */ 1:
+                    message.deviceId = reader.string();
+                    break;
+                case /* sid.v1.attestation.AttestationFormat format */ 2:
+                    message.format = reader.int32();
+                    break;
+                case /* sid.v1.attestation.KeyStorageType key_storage */ 3:
+                    message.keyStorage = reader.int32();
+                    break;
+                case /* bytes device_public_key */ 4:
+                    message.devicePublicKey = reader.bytes();
+                    break;
+                case /* optional bytes attestation_object */ 5:
+                    message.attestationObject = reader.bytes();
+                    break;
+                case /* optional bytes attestation_certificate */ 6:
+                    message.attestationCertificate = reader.bytes();
+                    break;
+                case /* optional string aaguid */ 7:
+                    message.aaguid = reader.string();
+                    break;
+                case /* optional string credential_id */ 8:
+                    message.credentialId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RegisterDeviceKeyRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string device_id = 1; */
+        if (message.deviceId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.deviceId);
+        /* sid.v1.attestation.AttestationFormat format = 2; */
+        if (message.format !== 0)
+            writer.tag(2, WireType.Varint).int32(message.format);
+        /* sid.v1.attestation.KeyStorageType key_storage = 3; */
+        if (message.keyStorage !== 0)
+            writer.tag(3, WireType.Varint).int32(message.keyStorage);
+        /* bytes device_public_key = 4; */
+        if (message.devicePublicKey.length)
+            writer.tag(4, WireType.LengthDelimited).bytes(message.devicePublicKey);
+        /* optional bytes attestation_object = 5; */
+        if (message.attestationObject !== undefined)
+            writer.tag(5, WireType.LengthDelimited).bytes(message.attestationObject);
+        /* optional bytes attestation_certificate = 6; */
+        if (message.attestationCertificate !== undefined)
+            writer.tag(6, WireType.LengthDelimited).bytes(message.attestationCertificate);
+        /* optional string aaguid = 7; */
+        if (message.aaguid !== undefined)
+            writer.tag(7, WireType.LengthDelimited).string(message.aaguid);
+        /* optional string credential_id = 8; */
+        if (message.credentialId !== undefined)
+            writer.tag(8, WireType.LengthDelimited).string(message.credentialId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.attestation.RegisterDeviceKeyRequest
+ */
+export const RegisterDeviceKeyRequest = new RegisterDeviceKeyRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GetDeviceAttestationRequest$Type extends MessageType<GetDeviceAttestationRequest> {
+    constructor() {
+        super("sid.v1.attestation.GetDeviceAttestationRequest", [
+            { no: 1, name: "device_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetDeviceAttestationRequest>): GetDeviceAttestationRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.deviceId = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetDeviceAttestationRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetDeviceAttestationRequest): GetDeviceAttestationRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string device_id */ 1:
+                    message.deviceId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetDeviceAttestationRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string device_id = 1; */
+        if (message.deviceId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.deviceId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.attestation.GetDeviceAttestationRequest
+ */
+export const GetDeviceAttestationRequest = new GetDeviceAttestationRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RotateDeviceKeyRequest$Type extends MessageType<RotateDeviceKeyRequest> {
+    constructor() {
+        super("sid.v1.attestation.RotateDeviceKeyRequest", [
+            { no: 1, name: "device_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "new_device_public_key", kind: "scalar", T: 12 /*ScalarType.BYTES*/ },
+            { no: 3, name: "new_attestation_object", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ },
+            { no: 4, name: "new_attestation_certificate", kind: "scalar", opt: true, T: 12 /*ScalarType.BYTES*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RotateDeviceKeyRequest>): RotateDeviceKeyRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.deviceId = "";
+        message.newDevicePublicKey = new Uint8Array(0);
+        if (value !== undefined)
+            reflectionMergePartial<RotateDeviceKeyRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RotateDeviceKeyRequest): RotateDeviceKeyRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string device_id */ 1:
+                    message.deviceId = reader.string();
+                    break;
+                case /* bytes new_device_public_key */ 2:
+                    message.newDevicePublicKey = reader.bytes();
+                    break;
+                case /* optional bytes new_attestation_object */ 3:
+                    message.newAttestationObject = reader.bytes();
+                    break;
+                case /* optional bytes new_attestation_certificate */ 4:
+                    message.newAttestationCertificate = reader.bytes();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RotateDeviceKeyRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string device_id = 1; */
+        if (message.deviceId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.deviceId);
+        /* bytes new_device_public_key = 2; */
+        if (message.newDevicePublicKey.length)
+            writer.tag(2, WireType.LengthDelimited).bytes(message.newDevicePublicKey);
+        /* optional bytes new_attestation_object = 3; */
+        if (message.newAttestationObject !== undefined)
+            writer.tag(3, WireType.LengthDelimited).bytes(message.newAttestationObject);
+        /* optional bytes new_attestation_certificate = 4; */
+        if (message.newAttestationCertificate !== undefined)
+            writer.tag(4, WireType.LengthDelimited).bytes(message.newAttestationCertificate);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.attestation.RotateDeviceKeyRequest
+ */
+export const RotateDeviceKeyRequest = new RotateDeviceKeyRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RevokeDeviceKeyRequest$Type extends MessageType<RevokeDeviceKeyRequest> {
+    constructor() {
+        super("sid.v1.attestation.RevokeDeviceKeyRequest", [
+            { no: 1, name: "device_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RevokeDeviceKeyRequest>): RevokeDeviceKeyRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.deviceId = "";
+        if (value !== undefined)
+            reflectionMergePartial<RevokeDeviceKeyRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeDeviceKeyRequest): RevokeDeviceKeyRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string device_id */ 1:
+                    message.deviceId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RevokeDeviceKeyRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string device_id = 1; */
+        if (message.deviceId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.deviceId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.attestation.RevokeDeviceKeyRequest
+ */
+export const RevokeDeviceKeyRequest = new RevokeDeviceKeyRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListDeviceAttestationsRequest$Type extends MessageType<ListDeviceAttestationsRequest> {
+    constructor() {
+        super("sid.v1.attestation.ListDeviceAttestationsRequest", [
+            { no: 1, name: "profile_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ListDeviceAttestationsRequest>): ListDeviceAttestationsRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.profileId = "";
+        if (value !== undefined)
+            reflectionMergePartial<ListDeviceAttestationsRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListDeviceAttestationsRequest): ListDeviceAttestationsRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string profile_id */ 1:
+                    message.profileId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListDeviceAttestationsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string profile_id = 1; */
+        if (message.profileId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.profileId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.attestation.ListDeviceAttestationsRequest
+ */
+export const ListDeviceAttestationsRequest = new ListDeviceAttestationsRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListDeviceAttestationsResponse$Type extends MessageType<ListDeviceAttestationsResponse> {
+    constructor() {
+        super("sid.v1.attestation.ListDeviceAttestationsResponse", [
+            { no: 1, name: "attestations", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => DeviceAttestation }
+        ]);
+    }
+    create(value?: PartialMessage<ListDeviceAttestationsResponse>): ListDeviceAttestationsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.attestations = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListDeviceAttestationsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListDeviceAttestationsResponse): ListDeviceAttestationsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.attestation.DeviceAttestation attestations */ 1:
+                    message.attestations.push(DeviceAttestation.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListDeviceAttestationsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.attestation.DeviceAttestation attestations = 1; */
+        for (let i = 0; i < message.attestations.length; i++)
+            DeviceAttestation.internalBinaryWrite(message.attestations[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.attestation.ListDeviceAttestationsResponse
+ */
+export const ListDeviceAttestationsResponse = new ListDeviceAttestationsResponse$Type();
+/**
+ * @generated ServiceType for protobuf service sid.v1.attestation.AttestationService
+ */
+export const AttestationService = new ServiceType("sid.v1.attestation.AttestationService", [
+    { name: "RegisterDeviceKey", options: { "google.api.http": { post: "/v1/attestation/devices/{device_id}/keys", body: "*" } }, I: RegisterDeviceKeyRequest, O: DeviceAttestation },
+    { name: "GetDeviceAttestation", options: { "google.api.http": { get: "/v1/attestation/devices/{device_id}" } }, I: GetDeviceAttestationRequest, O: DeviceAttestation },
+    { name: "RotateDeviceKey", options: { "google.api.http": { post: "/v1/attestation/devices/{device_id}/rotate", body: "*" } }, I: RotateDeviceKeyRequest, O: DeviceAttestation },
+    { name: "RevokeDeviceKey", options: { "google.api.http": { post: "/v1/attestation/devices/{device_id}/revoke", body: "*" } }, I: RevokeDeviceKeyRequest, O: Empty },
+    { name: "ListDeviceAttestations", options: { "google.api.http": { get: "/v1/attestation/profiles/{profile_id}/devices" } }, I: ListDeviceAttestationsRequest, O: ListDeviceAttestationsResponse }
+]);