@structured-id/ui-core 0.1.5

package/src/generated/sid/v1/authz/governance.ts

@@ -0,0 +1,818 @@
+// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
+// @generated from protobuf file "sid/v1/authz/governance.proto" (package "sid.v1.authz", syntax proto3)
+// tslint:disable
+import { ServiceType } from "@protobuf-ts/runtime-rpc";
+import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
+import type { IBinaryWriter } from "@protobuf-ts/runtime";
+import { WireType } from "@protobuf-ts/runtime";
+import type { BinaryReadOptions } from "@protobuf-ts/runtime";
+import type { IBinaryReader } from "@protobuf-ts/runtime";
+import { UnknownFieldHandler } from "@protobuf-ts/runtime";
+import type { PartialMessage } from "@protobuf-ts/runtime";
+import { reflectionMergePartial } from "@protobuf-ts/runtime";
+import { MessageType } from "@protobuf-ts/runtime";
+import { PaginationResponse } from "../common/pagination";
+import { PaginationRequest } from "../common/pagination";
+import { Timestamp } from "../../../google/protobuf/timestamp";
+import { Duration } from "../../../google/protobuf/duration";
+// ══════════════════════════════════════════════════════════════════════════
+// Access Requests
+// ══════════════════════════════════════════════════════════════════════════
+
+/**
+ * @generated from protobuf message sid.v1.authz.AccessRequestMessage
+ */
+export interface AccessRequestMessage {
+    /**
+     * @generated from protobuf field: string requester_profile_id = 1
+     */
+    requesterProfileId: string;
+    /**
+     * @generated from protobuf field: string requested_role = 2
+     */
+    requestedRole: string;
+    /**
+     * @generated from protobuf field: string justification = 3
+     */
+    justification: string;
+    /**
+     * @generated from protobuf field: optional google.protobuf.Duration requested_duration = 4
+     */
+    requestedDuration?: Duration; // null = permanent
+}
+/**
+ * @generated from protobuf message sid.v1.authz.AccessRequestResponse
+ */
+export interface AccessRequestResponse {
+    /**
+     * @generated from protobuf field: string request_id = 1
+     */
+    requestId: string;
+    /**
+     * @generated from protobuf field: sid.v1.authz.AccessRequestStatus status = 2
+     */
+    status: AccessRequestStatus;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 3
+     */
+    createdAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.authz.ListPendingRequestsRequest
+ */
+export interface ListPendingRequestsRequest {
+    /**
+     * @generated from protobuf field: sid.v1.common.PaginationRequest pagination = 1
+     */
+    pagination?: PaginationRequest;
+}
+/**
+ * @generated from protobuf message sid.v1.authz.ListPendingRequestsResponse
+ */
+export interface ListPendingRequestsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.authz.AccessRequestDetail requests = 1
+     */
+    requests: AccessRequestDetail[];
+    /**
+     * @generated from protobuf field: sid.v1.common.PaginationResponse pagination = 2
+     */
+    pagination?: PaginationResponse;
+}
+/**
+ * @generated from protobuf message sid.v1.authz.AccessRequestDetail
+ */
+export interface AccessRequestDetail {
+    /**
+     * @generated from protobuf field: string request_id = 1
+     */
+    requestId: string;
+    /**
+     * @generated from protobuf field: string requester_profile_id = 2
+     */
+    requesterProfileId: string;
+    /**
+     * @generated from protobuf field: string requester_display_name = 3
+     */
+    requesterDisplayName: string;
+    /**
+     * @generated from protobuf field: string requested_role = 4
+     */
+    requestedRole: string;
+    /**
+     * @generated from protobuf field: string justification = 5
+     */
+    justification: string;
+    /**
+     * @generated from protobuf field: optional google.protobuf.Duration requested_duration = 6
+     */
+    requestedDuration?: Duration;
+    /**
+     * @generated from protobuf field: sid.v1.authz.AccessRequestStatus status = 7
+     */
+    status: AccessRequestStatus;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 8
+     */
+    createdAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 9
+     */
+    expiresAt?: Timestamp; // Request auto-denied after this
+}
+/**
+ * @generated from protobuf message sid.v1.authz.DecideRequestRequest
+ */
+export interface DecideRequestRequest {
+    /**
+     * @generated from protobuf field: string request_id = 1
+     */
+    requestId: string;
+    /**
+     * @generated from protobuf field: bool approved = 2
+     */
+    approved: boolean;
+    /**
+     * @generated from protobuf field: string reason = 3
+     */
+    reason: string; // Required for deny, optional for approve
+}
+/**
+ * @generated from protobuf message sid.v1.authz.DecideRequestResponse
+ */
+export interface DecideRequestResponse {
+    /**
+     * @generated from protobuf field: string request_id = 1
+     */
+    requestId: string;
+    /**
+     * @generated from protobuf field: sid.v1.authz.AccessRequestStatus status = 2
+     */
+    status: AccessRequestStatus;
+}
+// ══════════════════════════════════════════════════════════════════════════
+// Temporary Roles
+// ══════════════════════════════════════════════════════════════════════════
+
+/**
+ * @generated from protobuf message sid.v1.authz.GrantTemporaryRoleRequest
+ */
+export interface GrantTemporaryRoleRequest {
+    /**
+     * @generated from protobuf field: string profile_id = 1
+     */
+    profileId: string;
+    /**
+     * @generated from protobuf field: string role = 2
+     */
+    role: string;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 3
+     */
+    expiresAt?: Timestamp;
+    /**
+     * @generated from protobuf field: string justification = 4
+     */
+    justification: string;
+}
+/**
+ * @generated from protobuf message sid.v1.authz.GrantTemporaryRoleResponse
+ */
+export interface GrantTemporaryRoleResponse {
+    /**
+     * @generated from protobuf field: string assignment_id = 1
+     */
+    assignmentId: string;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 2
+     */
+    expiresAt?: Timestamp;
+}
+// ══════════════════════════════════════════════════════════════════════════
+// Enums
+// ══════════════════════════════════════════════════════════════════════════
+
+/**
+ * @generated from protobuf enum sid.v1.authz.AccessRequestStatus
+ */
+export enum AccessRequestStatus {
+    /**
+     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_PENDING = 1;
+     */
+    PENDING = 1,
+    /**
+     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_APPROVED = 2;
+     */
+    APPROVED = 2,
+    /**
+     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_DENIED = 3;
+     */
+    DENIED = 3,
+    /**
+     * Request timed out without decision
+     *
+     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_EXPIRED = 4;
+     */
+    EXPIRED = 4,
+    /**
+     * Requester cancelled
+     *
+     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_CANCELLED = 5;
+     */
+    CANCELLED = 5
+}
+// @generated message type with reflection information, may provide speed optimized methods
+class AccessRequestMessage$Type extends MessageType<AccessRequestMessage> {
+    constructor() {
+        super("sid.v1.authz.AccessRequestMessage", [
+            { no: 1, name: "requester_profile_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "requested_role", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "justification", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "requested_duration", kind: "message", T: () => Duration }
+        ]);
+    }
+    create(value?: PartialMessage<AccessRequestMessage>): AccessRequestMessage {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.requesterProfileId = "";
+        message.requestedRole = "";
+        message.justification = "";
+        if (value !== undefined)
+            reflectionMergePartial<AccessRequestMessage>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AccessRequestMessage): AccessRequestMessage {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string requester_profile_id */ 1:
+                    message.requesterProfileId = reader.string();
+                    break;
+                case /* string requested_role */ 2:
+                    message.requestedRole = reader.string();
+                    break;
+                case /* string justification */ 3:
+                    message.justification = reader.string();
+                    break;
+                case /* optional google.protobuf.Duration requested_duration */ 4:
+                    message.requestedDuration = Duration.internalBinaryRead(reader, reader.uint32(), options, message.requestedDuration);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AccessRequestMessage, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string requester_profile_id = 1; */
+        if (message.requesterProfileId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.requesterProfileId);
+        /* string requested_role = 2; */
+        if (message.requestedRole !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.requestedRole);
+        /* string justification = 3; */
+        if (message.justification !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.justification);
+        /* optional google.protobuf.Duration requested_duration = 4; */
+        if (message.requestedDuration)
+            Duration.internalBinaryWrite(message.requestedDuration, writer.tag(4, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authz.AccessRequestMessage
+ */
+export const AccessRequestMessage = new AccessRequestMessage$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AccessRequestResponse$Type extends MessageType<AccessRequestResponse> {
+    constructor() {
+        super("sid.v1.authz.AccessRequestResponse", [
+            { no: 1, name: "request_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "status", kind: "enum", T: () => ["sid.v1.authz.AccessRequestStatus", AccessRequestStatus, "ACCESS_REQUEST_STATUS_"] },
+            { no: 3, name: "created_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<AccessRequestResponse>): AccessRequestResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.requestId = "";
+        message.status = 0;
+        if (value !== undefined)
+            reflectionMergePartial<AccessRequestResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AccessRequestResponse): AccessRequestResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string request_id */ 1:
+                    message.requestId = reader.string();
+                    break;
+                case /* sid.v1.authz.AccessRequestStatus status */ 2:
+                    message.status = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 3:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AccessRequestResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string request_id = 1; */
+        if (message.requestId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.requestId);
+        /* sid.v1.authz.AccessRequestStatus status = 2; */
+        if (message.status !== 0)
+            writer.tag(2, WireType.Varint).int32(message.status);
+        /* google.protobuf.Timestamp created_at = 3; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(3, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authz.AccessRequestResponse
+ */
+export const AccessRequestResponse = new AccessRequestResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListPendingRequestsRequest$Type extends MessageType<ListPendingRequestsRequest> {
+    constructor() {
+        super("sid.v1.authz.ListPendingRequestsRequest", [
+            { no: 1, name: "pagination", kind: "message", T: () => PaginationRequest }
+        ]);
+    }
+    create(value?: PartialMessage<ListPendingRequestsRequest>): ListPendingRequestsRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<ListPendingRequestsRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListPendingRequestsRequest): ListPendingRequestsRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* sid.v1.common.PaginationRequest pagination */ 1:
+                    message.pagination = PaginationRequest.internalBinaryRead(reader, reader.uint32(), options, message.pagination);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListPendingRequestsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* sid.v1.common.PaginationRequest pagination = 1; */
+        if (message.pagination)
+            PaginationRequest.internalBinaryWrite(message.pagination, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authz.ListPendingRequestsRequest
+ */
+export const ListPendingRequestsRequest = new ListPendingRequestsRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListPendingRequestsResponse$Type extends MessageType<ListPendingRequestsResponse> {
+    constructor() {
+        super("sid.v1.authz.ListPendingRequestsResponse", [
+            { no: 1, name: "requests", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => AccessRequestDetail },
+            { no: 2, name: "pagination", kind: "message", T: () => PaginationResponse }
+        ]);
+    }
+    create(value?: PartialMessage<ListPendingRequestsResponse>): ListPendingRequestsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.requests = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListPendingRequestsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListPendingRequestsResponse): ListPendingRequestsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.authz.AccessRequestDetail requests */ 1:
+                    message.requests.push(AccessRequestDetail.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                case /* sid.v1.common.PaginationResponse pagination */ 2:
+                    message.pagination = PaginationResponse.internalBinaryRead(reader, reader.uint32(), options, message.pagination);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListPendingRequestsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.authz.AccessRequestDetail requests = 1; */
+        for (let i = 0; i < message.requests.length; i++)
+            AccessRequestDetail.internalBinaryWrite(message.requests[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        /* sid.v1.common.PaginationResponse pagination = 2; */
+        if (message.pagination)
+            PaginationResponse.internalBinaryWrite(message.pagination, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authz.ListPendingRequestsResponse
+ */
+export const ListPendingRequestsResponse = new ListPendingRequestsResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AccessRequestDetail$Type extends MessageType<AccessRequestDetail> {
+    constructor() {
+        super("sid.v1.authz.AccessRequestDetail", [
+            { no: 1, name: "request_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "requester_profile_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "requester_display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "requested_role", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "justification", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "requested_duration", kind: "message", T: () => Duration },
+            { no: 7, name: "status", kind: "enum", T: () => ["sid.v1.authz.AccessRequestStatus", AccessRequestStatus, "ACCESS_REQUEST_STATUS_"] },
+            { no: 8, name: "created_at", kind: "message", T: () => Timestamp },
+            { no: 9, name: "expires_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<AccessRequestDetail>): AccessRequestDetail {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.requestId = "";
+        message.requesterProfileId = "";
+        message.requesterDisplayName = "";
+        message.requestedRole = "";
+        message.justification = "";
+        message.status = 0;
+        if (value !== undefined)
+            reflectionMergePartial<AccessRequestDetail>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AccessRequestDetail): AccessRequestDetail {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string request_id */ 1:
+                    message.requestId = reader.string();
+                    break;
+                case /* string requester_profile_id */ 2:
+                    message.requesterProfileId = reader.string();
+                    break;
+                case /* string requester_display_name */ 3:
+                    message.requesterDisplayName = reader.string();
+                    break;
+                case /* string requested_role */ 4:
+                    message.requestedRole = reader.string();
+                    break;
+                case /* string justification */ 5:
+                    message.justification = reader.string();
+                    break;
+                case /* optional google.protobuf.Duration requested_duration */ 6:
+                    message.requestedDuration = Duration.internalBinaryRead(reader, reader.uint32(), options, message.requestedDuration);
+                    break;
+                case /* sid.v1.authz.AccessRequestStatus status */ 7:
+                    message.status = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 8:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 9:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AccessRequestDetail, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string request_id = 1; */
+        if (message.requestId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.requestId);
+        /* string requester_profile_id = 2; */
+        if (message.requesterProfileId !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.requesterProfileId);
+        /* string requester_display_name = 3; */
+        if (message.requesterDisplayName !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.requesterDisplayName);
+        /* string requested_role = 4; */
+        if (message.requestedRole !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.requestedRole);
+        /* string justification = 5; */
+        if (message.justification !== "")
+            writer.tag(5, WireType.LengthDelimited).string(message.justification);
+        /* optional google.protobuf.Duration requested_duration = 6; */
+        if (message.requestedDuration)
+            Duration.internalBinaryWrite(message.requestedDuration, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
+        /* sid.v1.authz.AccessRequestStatus status = 7; */
+        if (message.status !== 0)
+            writer.tag(7, WireType.Varint).int32(message.status);
+        /* google.protobuf.Timestamp created_at = 8; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(8, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp expires_at = 9; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(9, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authz.AccessRequestDetail
+ */
+export const AccessRequestDetail = new AccessRequestDetail$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DecideRequestRequest$Type extends MessageType<DecideRequestRequest> {
+    constructor() {
+        super("sid.v1.authz.DecideRequestRequest", [
+            { no: 1, name: "request_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "approved", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 3, name: "reason", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<DecideRequestRequest>): DecideRequestRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.requestId = "";
+        message.approved = false;
+        message.reason = "";
+        if (value !== undefined)
+            reflectionMergePartial<DecideRequestRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DecideRequestRequest): DecideRequestRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string request_id */ 1:
+                    message.requestId = reader.string();
+                    break;
+                case /* bool approved */ 2:
+                    message.approved = reader.bool();
+                    break;
+                case /* string reason */ 3:
+                    message.reason = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DecideRequestRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string request_id = 1; */
+        if (message.requestId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.requestId);
+        /* bool approved = 2; */
+        if (message.approved !== false)
+            writer.tag(2, WireType.Varint).bool(message.approved);
+        /* string reason = 3; */
+        if (message.reason !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.reason);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authz.DecideRequestRequest
+ */
+export const DecideRequestRequest = new DecideRequestRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DecideRequestResponse$Type extends MessageType<DecideRequestResponse> {
+    constructor() {
+        super("sid.v1.authz.DecideRequestResponse", [
+            { no: 1, name: "request_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "status", kind: "enum", T: () => ["sid.v1.authz.AccessRequestStatus", AccessRequestStatus, "ACCESS_REQUEST_STATUS_"] }
+        ]);
+    }
+    create(value?: PartialMessage<DecideRequestResponse>): DecideRequestResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.requestId = "";
+        message.status = 0;
+        if (value !== undefined)
+            reflectionMergePartial<DecideRequestResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DecideRequestResponse): DecideRequestResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string request_id */ 1:
+                    message.requestId = reader.string();
+                    break;
+                case /* sid.v1.authz.AccessRequestStatus status */ 2:
+                    message.status = reader.int32();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DecideRequestResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string request_id = 1; */
+        if (message.requestId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.requestId);
+        /* sid.v1.authz.AccessRequestStatus status = 2; */
+        if (message.status !== 0)
+            writer.tag(2, WireType.Varint).int32(message.status);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authz.DecideRequestResponse
+ */
+export const DecideRequestResponse = new DecideRequestResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GrantTemporaryRoleRequest$Type extends MessageType<GrantTemporaryRoleRequest> {
+    constructor() {
+        super("sid.v1.authz.GrantTemporaryRoleRequest", [
+            { no: 1, name: "profile_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "role", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "expires_at", kind: "message", T: () => Timestamp },
+            { no: 4, name: "justification", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GrantTemporaryRoleRequest>): GrantTemporaryRoleRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.profileId = "";
+        message.role = "";
+        message.justification = "";
+        if (value !== undefined)
+            reflectionMergePartial<GrantTemporaryRoleRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GrantTemporaryRoleRequest): GrantTemporaryRoleRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string profile_id */ 1:
+                    message.profileId = reader.string();
+                    break;
+                case /* string role */ 2:
+                    message.role = reader.string();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 3:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                case /* string justification */ 4:
+                    message.justification = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GrantTemporaryRoleRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string profile_id = 1; */
+        if (message.profileId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.profileId);
+        /* string role = 2; */
+        if (message.role !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.role);
+        /* google.protobuf.Timestamp expires_at = 3; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(3, WireType.LengthDelimited).fork(), options).join();
+        /* string justification = 4; */
+        if (message.justification !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.justification);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authz.GrantTemporaryRoleRequest
+ */
+export const GrantTemporaryRoleRequest = new GrantTemporaryRoleRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GrantTemporaryRoleResponse$Type extends MessageType<GrantTemporaryRoleResponse> {
+    constructor() {
+        super("sid.v1.authz.GrantTemporaryRoleResponse", [
+            { no: 1, name: "assignment_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "expires_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<GrantTemporaryRoleResponse>): GrantTemporaryRoleResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.assignmentId = "";
+        if (value !== undefined)
+            reflectionMergePartial<GrantTemporaryRoleResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GrantTemporaryRoleResponse): GrantTemporaryRoleResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string assignment_id */ 1:
+                    message.assignmentId = reader.string();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 2:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GrantTemporaryRoleResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string assignment_id = 1; */
+        if (message.assignmentId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.assignmentId);
+        /* google.protobuf.Timestamp expires_at = 2; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.authz.GrantTemporaryRoleResponse
+ */
+export const GrantTemporaryRoleResponse = new GrantTemporaryRoleResponse$Type();
+/**
+ * @generated ServiceType for protobuf service sid.v1.authz.GovernanceService
+ */
+export const GovernanceService = new ServiceType("sid.v1.authz.GovernanceService", [
+    { name: "RequestAccess", options: { "google.api.http": { post: "/v1/governance/access-requests", body: "*" } }, I: AccessRequestMessage, O: AccessRequestResponse },
+    { name: "ListPendingRequests", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/governance/access-requests" } }, I: ListPendingRequestsRequest, O: ListPendingRequestsResponse },
+    { name: "DecideRequest", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/governance/access-requests/{request_id}/decide", body: "*" } }, I: DecideRequestRequest, O: DecideRequestResponse },
+    { name: "GrantTemporaryRole", options: { "google.api.http": { post: "/v1/governance/temporary-roles", body: "*" } }, I: GrantTemporaryRoleRequest, O: GrantTemporaryRoleResponse }
+]);