@structured-id/ui-core 0.1.5

package/src/generated/sid/v1/machine/machine_user.ts

@@ -0,0 +1,2400 @@
+// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
+// @generated from protobuf file "sid/v1/machine/machine_user.proto" (package "sid.v1.machine", syntax proto3)
+// tslint:disable
+import { ServiceType } from "@protobuf-ts/runtime-rpc";
+import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
+import type { IBinaryWriter } from "@protobuf-ts/runtime";
+import { WireType } from "@protobuf-ts/runtime";
+import type { BinaryReadOptions } from "@protobuf-ts/runtime";
+import type { IBinaryReader } from "@protobuf-ts/runtime";
+import { UnknownFieldHandler } from "@protobuf-ts/runtime";
+import type { PartialMessage } from "@protobuf-ts/runtime";
+import { reflectionMergePartial } from "@protobuf-ts/runtime";
+import { MessageType } from "@protobuf-ts/runtime";
+import { Timestamp } from "../../../google/protobuf/timestamp";
+/**
+ * Messages
+ *
+ * @generated from protobuf message sid.v1.machine.MachineUserInfo
+ */
+export interface MachineUserInfo {
+    /**
+     * @generated from protobuf field: string id = 1
+     */
+    id: string;
+    /**
+     * @generated from protobuf field: string project_id = 2
+     */
+    projectId: string;
+    /**
+     * @generated from protobuf field: string client_id = 3
+     */
+    clientId: string;
+    /**
+     * @generated from protobuf field: string display_name = 4
+     */
+    displayName: string;
+    /**
+     * @generated from protobuf field: string description = 5
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineUserType machine_type = 6
+     */
+    machineType: MachineUserType;
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineUserStatus status = 7
+     */
+    status: MachineUserStatus;
+    /**
+     * @generated from protobuf field: string owner_type = 8
+     */
+    ownerType: string;
+    /**
+     * @generated from protobuf field: string owner_id = 9
+     */
+    ownerId: string;
+    /**
+     * @generated from protobuf field: repeated string scopes = 10
+     */
+    scopes: string[];
+    /**
+     * @generated from protobuf field: repeated string roles = 11
+     */
+    roles: string[];
+    /**
+     * @generated from protobuf field: repeated string ip_allowlist = 12
+     */
+    ipAllowlist: string[];
+    /**
+     * @generated from protobuf field: int32 rate_limit_rpm = 13
+     */
+    rateLimitRpm: number;
+    /**
+     * @generated from protobuf field: int32 max_token_lifetime = 14
+     */
+    maxTokenLifetime: number;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 15
+     */
+    expiresAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp last_used_at = 16
+     */
+    lastUsedAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 17
+     */
+    createdAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp updated_at = 18
+     */
+    updatedAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.MachineCredentialInfo
+ */
+export interface MachineCredentialInfo {
+    /**
+     * @generated from protobuf field: string kid = 1
+     */
+    kid: string;
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineCredentialType credential_type = 2
+     */
+    credentialType: MachineCredentialType;
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineCredentialStatus status = 3
+     */
+    status: MachineCredentialStatus;
+    /**
+     * @generated from protobuf field: string algorithm = 4
+     */
+    algorithm: string;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 5
+     */
+    expiresAt?: Timestamp;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 6
+     */
+    createdAt?: Timestamp; // NOTE: credential_data is NEVER returned for client_secret type
+}
+/**
+ * @generated from protobuf message sid.v1.machine.ImpersonationGrantInfo
+ */
+export interface ImpersonationGrantInfo {
+    /**
+     * @generated from protobuf field: string id = 1
+     */
+    id: string;
+    /**
+     * @generated from protobuf field: string machine_user_id = 2
+     */
+    machineUserId: string;
+    /**
+     * @generated from protobuf field: sid.v1.machine.ImpersonationTargetType target_type = 3
+     */
+    targetType: ImpersonationTargetType;
+    /**
+     * @generated from protobuf field: string target = 4
+     */
+    target: string;
+    /**
+     * @generated from protobuf field: repeated string allowed_scopes = 5
+     */
+    allowedScopes: string[];
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp created_at = 6
+     */
+    createdAt?: Timestamp;
+}
+// -- CRUD messages --
+
+/**
+ * @generated from protobuf message sid.v1.machine.CreateMachineUserRequest
+ */
+export interface CreateMachineUserRequest {
+    /**
+     * @generated from protobuf field: string project_id = 1
+     */
+    projectId: string;
+    /**
+     * @generated from protobuf field: string display_name = 2
+     */
+    displayName: string;
+    /**
+     * @generated from protobuf field: string description = 3
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineUserType machine_type = 4
+     */
+    machineType: MachineUserType;
+    /**
+     * @generated from protobuf field: repeated string scopes = 5
+     */
+    scopes: string[];
+    /**
+     * @generated from protobuf field: repeated string roles = 6
+     */
+    roles: string[];
+    /**
+     * @generated from protobuf field: repeated string ip_allowlist = 7
+     */
+    ipAllowlist: string[];
+    /**
+     * @generated from protobuf field: int32 rate_limit_rpm = 8
+     */
+    rateLimitRpm: number;
+    /**
+     * @generated from protobuf field: int32 max_token_lifetime = 9
+     */
+    maxTokenLifetime: number;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 10
+     */
+    expiresAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.CreateMachineUserResponse
+ */
+export interface CreateMachineUserResponse {
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineUserInfo machine_user = 1
+     */
+    machineUser?: MachineUserInfo;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.GetMachineUserRequest
+ */
+export interface GetMachineUserRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.MachineUserResponse
+ */
+export interface MachineUserResponse {
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineUserInfo machine_user = 1
+     */
+    machineUser?: MachineUserInfo;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.UpdateMachineUserRequest
+ */
+export interface UpdateMachineUserRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+    /**
+     * @generated from protobuf field: string display_name = 2
+     */
+    displayName: string;
+    /**
+     * @generated from protobuf field: string description = 3
+     */
+    description: string;
+    /**
+     * @generated from protobuf field: repeated string scopes = 4
+     */
+    scopes: string[];
+    /**
+     * @generated from protobuf field: repeated string roles = 5
+     */
+    roles: string[];
+    /**
+     * @generated from protobuf field: repeated string ip_allowlist = 6
+     */
+    ipAllowlist: string[];
+    /**
+     * @generated from protobuf field: int32 rate_limit_rpm = 7
+     */
+    rateLimitRpm: number;
+    /**
+     * @generated from protobuf field: int32 max_token_lifetime = 8
+     */
+    maxTokenLifetime: number;
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 9
+     */
+    expiresAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.DeleteMachineUserRequest
+ */
+export interface DeleteMachineUserRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.DeleteMachineUserResponse
+ */
+export interface DeleteMachineUserResponse {
+}
+/**
+ * @generated from protobuf message sid.v1.machine.ListMachineUsersRequest
+ */
+export interface ListMachineUsersRequest {
+    /**
+     * @generated from protobuf field: string project_id = 1
+     */
+    projectId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.ListMachineUsersResponse
+ */
+export interface ListMachineUsersResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.machine.MachineUserInfo machine_users = 1
+     */
+    machineUsers: MachineUserInfo[];
+}
+/**
+ * @generated from protobuf message sid.v1.machine.SuspendMachineUserRequest
+ */
+export interface SuspendMachineUserRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.ReactivateMachineUserRequest
+ */
+export interface ReactivateMachineUserRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+}
+// -- Credential messages --
+
+/**
+ * @generated from protobuf message sid.v1.machine.AddMachineCredentialRequest
+ */
+export interface AddMachineCredentialRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineCredentialType credential_type = 2
+     */
+    credentialType: MachineCredentialType;
+    /**
+     * @generated from protobuf field: string algorithm = 3
+     */
+    algorithm: string; // For private_key_jwt: "RS256", "ES256"
+    /**
+     * @generated from protobuf field: string public_key_pem = 4
+     */
+    publicKeyPem: string; // For private_key_jwt: PEM-encoded public key
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 5
+     */
+    expiresAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.AddMachineCredentialResponse
+ */
+export interface AddMachineCredentialResponse {
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineCredentialInfo credential = 1
+     */
+    credential?: MachineCredentialInfo;
+    /**
+     * @generated from protobuf field: string client_secret = 2
+     */
+    clientSecret: string; // Plaintext — shown ONCE for client_secret type. Empty for others.
+}
+/**
+ * @generated from protobuf message sid.v1.machine.RevokeMachineCredentialRequest
+ */
+export interface RevokeMachineCredentialRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+    /**
+     * @generated from protobuf field: string kid = 2
+     */
+    kid: string;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.RevokeMachineCredentialResponse
+ */
+export interface RevokeMachineCredentialResponse {
+}
+/**
+ * @generated from protobuf message sid.v1.machine.ListMachineCredentialsRequest
+ */
+export interface ListMachineCredentialsRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.ListMachineCredentialsResponse
+ */
+export interface ListMachineCredentialsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.machine.MachineCredentialInfo credentials = 1
+     */
+    credentials: MachineCredentialInfo[];
+}
+/**
+ * @generated from protobuf message sid.v1.machine.RotateMachineCredentialRequest
+ */
+export interface RotateMachineCredentialRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+    /**
+     * @generated from protobuf field: string kid = 2
+     */
+    kid: string; // Old credential kid to rotate
+    /**
+     * @generated from protobuf field: string algorithm = 3
+     */
+    algorithm: string; // For new private_key_jwt
+    /**
+     * @generated from protobuf field: string public_key_pem = 4
+     */
+    publicKeyPem: string; // For new private_key_jwt
+    /**
+     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 5
+     */
+    expiresAt?: Timestamp;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.RotateMachineCredentialResponse
+ */
+export interface RotateMachineCredentialResponse {
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineCredentialInfo old_credential = 1
+     */
+    oldCredential?: MachineCredentialInfo; // Set to grace_period
+    /**
+     * @generated from protobuf field: sid.v1.machine.MachineCredentialInfo new_credential = 2
+     */
+    newCredential?: MachineCredentialInfo;
+    /**
+     * @generated from protobuf field: string client_secret = 3
+     */
+    clientSecret: string; // If client_secret type
+}
+// -- Impersonation messages --
+
+/**
+ * @generated from protobuf message sid.v1.machine.GrantImpersonationRequest
+ */
+export interface GrantImpersonationRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+    /**
+     * @generated from protobuf field: sid.v1.machine.ImpersonationTargetType target_type = 2
+     */
+    targetType: ImpersonationTargetType;
+    /**
+     * @generated from protobuf field: string target = 3
+     */
+    target: string;
+    /**
+     * @generated from protobuf field: repeated string allowed_scopes = 4
+     */
+    allowedScopes: string[];
+}
+/**
+ * @generated from protobuf message sid.v1.machine.GrantImpersonationResponse
+ */
+export interface GrantImpersonationResponse {
+    /**
+     * @generated from protobuf field: sid.v1.machine.ImpersonationGrantInfo grant = 1
+     */
+    grant?: ImpersonationGrantInfo;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.RevokeImpersonationRequest
+ */
+export interface RevokeImpersonationRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+    /**
+     * @generated from protobuf field: string target_type = 2
+     */
+    targetType: string;
+    /**
+     * @generated from protobuf field: string target = 3
+     */
+    target: string;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.RevokeImpersonationResponse
+ */
+export interface RevokeImpersonationResponse {
+}
+/**
+ * @generated from protobuf message sid.v1.machine.ListImpersonationGrantsRequest
+ */
+export interface ListImpersonationGrantsRequest {
+    /**
+     * @generated from protobuf field: string machine_user_id = 1
+     */
+    machineUserId: string;
+}
+/**
+ * @generated from protobuf message sid.v1.machine.ListImpersonationGrantsResponse
+ */
+export interface ListImpersonationGrantsResponse {
+    /**
+     * @generated from protobuf field: repeated sid.v1.machine.ImpersonationGrantInfo grants = 1
+     */
+    grants: ImpersonationGrantInfo[];
+}
+/**
+ * Enums
+ *
+ * @generated from protobuf enum sid.v1.machine.MachineUserType
+ */
+export enum MachineUserType {
+    /**
+     * @generated from protobuf enum value: MACHINE_USER_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: MACHINE_USER_TYPE_SERVICE = 1;
+     */
+    SERVICE = 1,
+    /**
+     * @generated from protobuf enum value: MACHINE_USER_TYPE_BOT = 2;
+     */
+    BOT = 2,
+    /**
+     * @generated from protobuf enum value: MACHINE_USER_TYPE_AGENT = 3;
+     */
+    AGENT = 3
+}
+/**
+ * @generated from protobuf enum sid.v1.machine.MachineUserStatus
+ */
+export enum MachineUserStatus {
+    /**
+     * @generated from protobuf enum value: MACHINE_USER_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: MACHINE_USER_STATUS_ACTIVE = 1;
+     */
+    ACTIVE = 1,
+    /**
+     * @generated from protobuf enum value: MACHINE_USER_STATUS_SUSPENDED = 2;
+     */
+    SUSPENDED = 2,
+    /**
+     * @generated from protobuf enum value: MACHINE_USER_STATUS_EXPIRED = 3;
+     */
+    EXPIRED = 3,
+    /**
+     * @generated from protobuf enum value: MACHINE_USER_STATUS_DELETED = 4;
+     */
+    DELETED = 4
+}
+/**
+ * @generated from protobuf enum sid.v1.machine.MachineCredentialType
+ */
+export enum MachineCredentialType {
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_CLIENT_SECRET = 1;
+     */
+    CLIENT_SECRET = 1,
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_PRIVATE_KEY_JWT = 2;
+     */
+    PRIVATE_KEY_JWT = 2,
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_MTLS = 3;
+     */
+    MTLS = 3,
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_WORKLOAD_IDENTITY = 4;
+     */
+    WORKLOAD_IDENTITY = 4
+}
+/**
+ * @generated from protobuf enum sid.v1.machine.MachineCredentialStatus
+ */
+export enum MachineCredentialStatus {
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_ACTIVE = 1;
+     */
+    ACTIVE = 1,
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_GRACE_PERIOD = 2;
+     */
+    GRACE_PERIOD = 2,
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_EXPIRED = 3;
+     */
+    EXPIRED = 3,
+    /**
+     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_REVOKED = 4;
+     */
+    REVOKED = 4
+}
+/**
+ * @generated from protobuf enum sid.v1.machine.ImpersonationTargetType
+ */
+export enum ImpersonationTargetType {
+    /**
+     * @generated from protobuf enum value: IMPERSONATION_TARGET_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from protobuf enum value: IMPERSONATION_TARGET_TYPE_ROLE = 1;
+     */
+    ROLE = 1,
+    /**
+     * @generated from protobuf enum value: IMPERSONATION_TARGET_TYPE_USER = 2;
+     */
+    USER = 2
+}
+// @generated message type with reflection information, may provide speed optimized methods
+class MachineUserInfo$Type extends MessageType<MachineUserInfo> {
+    constructor() {
+        super("sid.v1.machine.MachineUserInfo", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "project_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "client_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "machine_type", kind: "enum", T: () => ["sid.v1.machine.MachineUserType", MachineUserType, "MACHINE_USER_TYPE_"] },
+            { no: 7, name: "status", kind: "enum", T: () => ["sid.v1.machine.MachineUserStatus", MachineUserStatus, "MACHINE_USER_STATUS_"] },
+            { no: 8, name: "owner_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 9, name: "owner_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 10, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 11, name: "roles", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 12, name: "ip_allowlist", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 13, name: "rate_limit_rpm", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 14, name: "max_token_lifetime", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 15, name: "expires_at", kind: "message", T: () => Timestamp },
+            { no: 16, name: "last_used_at", kind: "message", T: () => Timestamp },
+            { no: 17, name: "created_at", kind: "message", T: () => Timestamp },
+            { no: 18, name: "updated_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<MachineUserInfo>): MachineUserInfo {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.projectId = "";
+        message.clientId = "";
+        message.displayName = "";
+        message.description = "";
+        message.machineType = 0;
+        message.status = 0;
+        message.ownerType = "";
+        message.ownerId = "";
+        message.scopes = [];
+        message.roles = [];
+        message.ipAllowlist = [];
+        message.rateLimitRpm = 0;
+        message.maxTokenLifetime = 0;
+        if (value !== undefined)
+            reflectionMergePartial<MachineUserInfo>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MachineUserInfo): MachineUserInfo {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* string project_id */ 2:
+                    message.projectId = reader.string();
+                    break;
+                case /* string client_id */ 3:
+                    message.clientId = reader.string();
+                    break;
+                case /* string display_name */ 4:
+                    message.displayName = reader.string();
+                    break;
+                case /* string description */ 5:
+                    message.description = reader.string();
+                    break;
+                case /* sid.v1.machine.MachineUserType machine_type */ 6:
+                    message.machineType = reader.int32();
+                    break;
+                case /* sid.v1.machine.MachineUserStatus status */ 7:
+                    message.status = reader.int32();
+                    break;
+                case /* string owner_type */ 8:
+                    message.ownerType = reader.string();
+                    break;
+                case /* string owner_id */ 9:
+                    message.ownerId = reader.string();
+                    break;
+                case /* repeated string scopes */ 10:
+                    message.scopes.push(reader.string());
+                    break;
+                case /* repeated string roles */ 11:
+                    message.roles.push(reader.string());
+                    break;
+                case /* repeated string ip_allowlist */ 12:
+                    message.ipAllowlist.push(reader.string());
+                    break;
+                case /* int32 rate_limit_rpm */ 13:
+                    message.rateLimitRpm = reader.int32();
+                    break;
+                case /* int32 max_token_lifetime */ 14:
+                    message.maxTokenLifetime = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 15:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                case /* google.protobuf.Timestamp last_used_at */ 16:
+                    message.lastUsedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.lastUsedAt);
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 17:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                case /* google.protobuf.Timestamp updated_at */ 18:
+                    message.updatedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.updatedAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MachineUserInfo, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* string project_id = 2; */
+        if (message.projectId !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.projectId);
+        /* string client_id = 3; */
+        if (message.clientId !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.clientId);
+        /* string display_name = 4; */
+        if (message.displayName !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.displayName);
+        /* string description = 5; */
+        if (message.description !== "")
+            writer.tag(5, WireType.LengthDelimited).string(message.description);
+        /* sid.v1.machine.MachineUserType machine_type = 6; */
+        if (message.machineType !== 0)
+            writer.tag(6, WireType.Varint).int32(message.machineType);
+        /* sid.v1.machine.MachineUserStatus status = 7; */
+        if (message.status !== 0)
+            writer.tag(7, WireType.Varint).int32(message.status);
+        /* string owner_type = 8; */
+        if (message.ownerType !== "")
+            writer.tag(8, WireType.LengthDelimited).string(message.ownerType);
+        /* string owner_id = 9; */
+        if (message.ownerId !== "")
+            writer.tag(9, WireType.LengthDelimited).string(message.ownerId);
+        /* repeated string scopes = 10; */
+        for (let i = 0; i < message.scopes.length; i++)
+            writer.tag(10, WireType.LengthDelimited).string(message.scopes[i]);
+        /* repeated string roles = 11; */
+        for (let i = 0; i < message.roles.length; i++)
+            writer.tag(11, WireType.LengthDelimited).string(message.roles[i]);
+        /* repeated string ip_allowlist = 12; */
+        for (let i = 0; i < message.ipAllowlist.length; i++)
+            writer.tag(12, WireType.LengthDelimited).string(message.ipAllowlist[i]);
+        /* int32 rate_limit_rpm = 13; */
+        if (message.rateLimitRpm !== 0)
+            writer.tag(13, WireType.Varint).int32(message.rateLimitRpm);
+        /* int32 max_token_lifetime = 14; */
+        if (message.maxTokenLifetime !== 0)
+            writer.tag(14, WireType.Varint).int32(message.maxTokenLifetime);
+        /* google.protobuf.Timestamp expires_at = 15; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(15, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp last_used_at = 16; */
+        if (message.lastUsedAt)
+            Timestamp.internalBinaryWrite(message.lastUsedAt, writer.tag(16, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp created_at = 17; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(17, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp updated_at = 18; */
+        if (message.updatedAt)
+            Timestamp.internalBinaryWrite(message.updatedAt, writer.tag(18, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.MachineUserInfo
+ */
+export const MachineUserInfo = new MachineUserInfo$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class MachineCredentialInfo$Type extends MessageType<MachineCredentialInfo> {
+    constructor() {
+        super("sid.v1.machine.MachineCredentialInfo", [
+            { no: 1, name: "kid", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "credential_type", kind: "enum", T: () => ["sid.v1.machine.MachineCredentialType", MachineCredentialType, "MACHINE_CREDENTIAL_TYPE_"] },
+            { no: 3, name: "status", kind: "enum", T: () => ["sid.v1.machine.MachineCredentialStatus", MachineCredentialStatus, "MACHINE_CREDENTIAL_STATUS_"] },
+            { no: 4, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "expires_at", kind: "message", T: () => Timestamp },
+            { no: 6, name: "created_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<MachineCredentialInfo>): MachineCredentialInfo {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.kid = "";
+        message.credentialType = 0;
+        message.status = 0;
+        message.algorithm = "";
+        if (value !== undefined)
+            reflectionMergePartial<MachineCredentialInfo>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MachineCredentialInfo): MachineCredentialInfo {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string kid */ 1:
+                    message.kid = reader.string();
+                    break;
+                case /* sid.v1.machine.MachineCredentialType credential_type */ 2:
+                    message.credentialType = reader.int32();
+                    break;
+                case /* sid.v1.machine.MachineCredentialStatus status */ 3:
+                    message.status = reader.int32();
+                    break;
+                case /* string algorithm */ 4:
+                    message.algorithm = reader.string();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 5:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 6:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MachineCredentialInfo, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string kid = 1; */
+        if (message.kid !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.kid);
+        /* sid.v1.machine.MachineCredentialType credential_type = 2; */
+        if (message.credentialType !== 0)
+            writer.tag(2, WireType.Varint).int32(message.credentialType);
+        /* sid.v1.machine.MachineCredentialStatus status = 3; */
+        if (message.status !== 0)
+            writer.tag(3, WireType.Varint).int32(message.status);
+        /* string algorithm = 4; */
+        if (message.algorithm !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.algorithm);
+        /* google.protobuf.Timestamp expires_at = 5; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(5, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp created_at = 6; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.MachineCredentialInfo
+ */
+export const MachineCredentialInfo = new MachineCredentialInfo$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ImpersonationGrantInfo$Type extends MessageType<ImpersonationGrantInfo> {
+    constructor() {
+        super("sid.v1.machine.ImpersonationGrantInfo", [
+            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "target_type", kind: "enum", T: () => ["sid.v1.machine.ImpersonationTargetType", ImpersonationTargetType, "IMPERSONATION_TARGET_TYPE_"] },
+            { no: 4, name: "target", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "allowed_scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "created_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<ImpersonationGrantInfo>): ImpersonationGrantInfo {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.id = "";
+        message.machineUserId = "";
+        message.targetType = 0;
+        message.target = "";
+        message.allowedScopes = [];
+        if (value !== undefined)
+            reflectionMergePartial<ImpersonationGrantInfo>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ImpersonationGrantInfo): ImpersonationGrantInfo {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string id */ 1:
+                    message.id = reader.string();
+                    break;
+                case /* string machine_user_id */ 2:
+                    message.machineUserId = reader.string();
+                    break;
+                case /* sid.v1.machine.ImpersonationTargetType target_type */ 3:
+                    message.targetType = reader.int32();
+                    break;
+                case /* string target */ 4:
+                    message.target = reader.string();
+                    break;
+                case /* repeated string allowed_scopes */ 5:
+                    message.allowedScopes.push(reader.string());
+                    break;
+                case /* google.protobuf.Timestamp created_at */ 6:
+                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ImpersonationGrantInfo, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string id = 1; */
+        if (message.id !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.id);
+        /* string machine_user_id = 2; */
+        if (message.machineUserId !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.machineUserId);
+        /* sid.v1.machine.ImpersonationTargetType target_type = 3; */
+        if (message.targetType !== 0)
+            writer.tag(3, WireType.Varint).int32(message.targetType);
+        /* string target = 4; */
+        if (message.target !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.target);
+        /* repeated string allowed_scopes = 5; */
+        for (let i = 0; i < message.allowedScopes.length; i++)
+            writer.tag(5, WireType.LengthDelimited).string(message.allowedScopes[i]);
+        /* google.protobuf.Timestamp created_at = 6; */
+        if (message.createdAt)
+            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.ImpersonationGrantInfo
+ */
+export const ImpersonationGrantInfo = new ImpersonationGrantInfo$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class CreateMachineUserRequest$Type extends MessageType<CreateMachineUserRequest> {
+    constructor() {
+        super("sid.v1.machine.CreateMachineUserRequest", [
+            { no: 1, name: "project_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "machine_type", kind: "enum", T: () => ["sid.v1.machine.MachineUserType", MachineUserType, "MACHINE_USER_TYPE_"] },
+            { no: 5, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "roles", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "ip_allowlist", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 8, name: "rate_limit_rpm", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 9, name: "max_token_lifetime", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 10, name: "expires_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<CreateMachineUserRequest>): CreateMachineUserRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.projectId = "";
+        message.displayName = "";
+        message.description = "";
+        message.machineType = 0;
+        message.scopes = [];
+        message.roles = [];
+        message.ipAllowlist = [];
+        message.rateLimitRpm = 0;
+        message.maxTokenLifetime = 0;
+        if (value !== undefined)
+            reflectionMergePartial<CreateMachineUserRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CreateMachineUserRequest): CreateMachineUserRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string project_id */ 1:
+                    message.projectId = reader.string();
+                    break;
+                case /* string display_name */ 2:
+                    message.displayName = reader.string();
+                    break;
+                case /* string description */ 3:
+                    message.description = reader.string();
+                    break;
+                case /* sid.v1.machine.MachineUserType machine_type */ 4:
+                    message.machineType = reader.int32();
+                    break;
+                case /* repeated string scopes */ 5:
+                    message.scopes.push(reader.string());
+                    break;
+                case /* repeated string roles */ 6:
+                    message.roles.push(reader.string());
+                    break;
+                case /* repeated string ip_allowlist */ 7:
+                    message.ipAllowlist.push(reader.string());
+                    break;
+                case /* int32 rate_limit_rpm */ 8:
+                    message.rateLimitRpm = reader.int32();
+                    break;
+                case /* int32 max_token_lifetime */ 9:
+                    message.maxTokenLifetime = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 10:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: CreateMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string project_id = 1; */
+        if (message.projectId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.projectId);
+        /* string display_name = 2; */
+        if (message.displayName !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.displayName);
+        /* string description = 3; */
+        if (message.description !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.description);
+        /* sid.v1.machine.MachineUserType machine_type = 4; */
+        if (message.machineType !== 0)
+            writer.tag(4, WireType.Varint).int32(message.machineType);
+        /* repeated string scopes = 5; */
+        for (let i = 0; i < message.scopes.length; i++)
+            writer.tag(5, WireType.LengthDelimited).string(message.scopes[i]);
+        /* repeated string roles = 6; */
+        for (let i = 0; i < message.roles.length; i++)
+            writer.tag(6, WireType.LengthDelimited).string(message.roles[i]);
+        /* repeated string ip_allowlist = 7; */
+        for (let i = 0; i < message.ipAllowlist.length; i++)
+            writer.tag(7, WireType.LengthDelimited).string(message.ipAllowlist[i]);
+        /* int32 rate_limit_rpm = 8; */
+        if (message.rateLimitRpm !== 0)
+            writer.tag(8, WireType.Varint).int32(message.rateLimitRpm);
+        /* int32 max_token_lifetime = 9; */
+        if (message.maxTokenLifetime !== 0)
+            writer.tag(9, WireType.Varint).int32(message.maxTokenLifetime);
+        /* google.protobuf.Timestamp expires_at = 10; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(10, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.CreateMachineUserRequest
+ */
+export const CreateMachineUserRequest = new CreateMachineUserRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class CreateMachineUserResponse$Type extends MessageType<CreateMachineUserResponse> {
+    constructor() {
+        super("sid.v1.machine.CreateMachineUserResponse", [
+            { no: 1, name: "machine_user", kind: "message", T: () => MachineUserInfo }
+        ]);
+    }
+    create(value?: PartialMessage<CreateMachineUserResponse>): CreateMachineUserResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<CreateMachineUserResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CreateMachineUserResponse): CreateMachineUserResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* sid.v1.machine.MachineUserInfo machine_user */ 1:
+                    message.machineUser = MachineUserInfo.internalBinaryRead(reader, reader.uint32(), options, message.machineUser);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: CreateMachineUserResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* sid.v1.machine.MachineUserInfo machine_user = 1; */
+        if (message.machineUser)
+            MachineUserInfo.internalBinaryWrite(message.machineUser, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.CreateMachineUserResponse
+ */
+export const CreateMachineUserResponse = new CreateMachineUserResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GetMachineUserRequest$Type extends MessageType<GetMachineUserRequest> {
+    constructor() {
+        super("sid.v1.machine.GetMachineUserRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GetMachineUserRequest>): GetMachineUserRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        if (value !== undefined)
+            reflectionMergePartial<GetMachineUserRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetMachineUserRequest): GetMachineUserRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GetMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.GetMachineUserRequest
+ */
+export const GetMachineUserRequest = new GetMachineUserRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class MachineUserResponse$Type extends MessageType<MachineUserResponse> {
+    constructor() {
+        super("sid.v1.machine.MachineUserResponse", [
+            { no: 1, name: "machine_user", kind: "message", T: () => MachineUserInfo }
+        ]);
+    }
+    create(value?: PartialMessage<MachineUserResponse>): MachineUserResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<MachineUserResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MachineUserResponse): MachineUserResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* sid.v1.machine.MachineUserInfo machine_user */ 1:
+                    message.machineUser = MachineUserInfo.internalBinaryRead(reader, reader.uint32(), options, message.machineUser);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: MachineUserResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* sid.v1.machine.MachineUserInfo machine_user = 1; */
+        if (message.machineUser)
+            MachineUserInfo.internalBinaryWrite(message.machineUser, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.MachineUserResponse
+ */
+export const MachineUserResponse = new MachineUserResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class UpdateMachineUserRequest$Type extends MessageType<UpdateMachineUserRequest> {
+    constructor() {
+        super("sid.v1.machine.UpdateMachineUserRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "roles", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "ip_allowlist", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
+            { no: 7, name: "rate_limit_rpm", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 8, name: "max_token_lifetime", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
+            { no: 9, name: "expires_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<UpdateMachineUserRequest>): UpdateMachineUserRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        message.displayName = "";
+        message.description = "";
+        message.scopes = [];
+        message.roles = [];
+        message.ipAllowlist = [];
+        message.rateLimitRpm = 0;
+        message.maxTokenLifetime = 0;
+        if (value !== undefined)
+            reflectionMergePartial<UpdateMachineUserRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpdateMachineUserRequest): UpdateMachineUserRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                case /* string display_name */ 2:
+                    message.displayName = reader.string();
+                    break;
+                case /* string description */ 3:
+                    message.description = reader.string();
+                    break;
+                case /* repeated string scopes */ 4:
+                    message.scopes.push(reader.string());
+                    break;
+                case /* repeated string roles */ 5:
+                    message.roles.push(reader.string());
+                    break;
+                case /* repeated string ip_allowlist */ 6:
+                    message.ipAllowlist.push(reader.string());
+                    break;
+                case /* int32 rate_limit_rpm */ 7:
+                    message.rateLimitRpm = reader.int32();
+                    break;
+                case /* int32 max_token_lifetime */ 8:
+                    message.maxTokenLifetime = reader.int32();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 9:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: UpdateMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        /* string display_name = 2; */
+        if (message.displayName !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.displayName);
+        /* string description = 3; */
+        if (message.description !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.description);
+        /* repeated string scopes = 4; */
+        for (let i = 0; i < message.scopes.length; i++)
+            writer.tag(4, WireType.LengthDelimited).string(message.scopes[i]);
+        /* repeated string roles = 5; */
+        for (let i = 0; i < message.roles.length; i++)
+            writer.tag(5, WireType.LengthDelimited).string(message.roles[i]);
+        /* repeated string ip_allowlist = 6; */
+        for (let i = 0; i < message.ipAllowlist.length; i++)
+            writer.tag(6, WireType.LengthDelimited).string(message.ipAllowlist[i]);
+        /* int32 rate_limit_rpm = 7; */
+        if (message.rateLimitRpm !== 0)
+            writer.tag(7, WireType.Varint).int32(message.rateLimitRpm);
+        /* int32 max_token_lifetime = 8; */
+        if (message.maxTokenLifetime !== 0)
+            writer.tag(8, WireType.Varint).int32(message.maxTokenLifetime);
+        /* google.protobuf.Timestamp expires_at = 9; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(9, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.UpdateMachineUserRequest
+ */
+export const UpdateMachineUserRequest = new UpdateMachineUserRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DeleteMachineUserRequest$Type extends MessageType<DeleteMachineUserRequest> {
+    constructor() {
+        super("sid.v1.machine.DeleteMachineUserRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<DeleteMachineUserRequest>): DeleteMachineUserRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        if (value !== undefined)
+            reflectionMergePartial<DeleteMachineUserRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeleteMachineUserRequest): DeleteMachineUserRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DeleteMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.DeleteMachineUserRequest
+ */
+export const DeleteMachineUserRequest = new DeleteMachineUserRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class DeleteMachineUserResponse$Type extends MessageType<DeleteMachineUserResponse> {
+    constructor() {
+        super("sid.v1.machine.DeleteMachineUserResponse", []);
+    }
+    create(value?: PartialMessage<DeleteMachineUserResponse>): DeleteMachineUserResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<DeleteMachineUserResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeleteMachineUserResponse): DeleteMachineUserResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: DeleteMachineUserResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.DeleteMachineUserResponse
+ */
+export const DeleteMachineUserResponse = new DeleteMachineUserResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListMachineUsersRequest$Type extends MessageType<ListMachineUsersRequest> {
+    constructor() {
+        super("sid.v1.machine.ListMachineUsersRequest", [
+            { no: 1, name: "project_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ListMachineUsersRequest>): ListMachineUsersRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.projectId = "";
+        if (value !== undefined)
+            reflectionMergePartial<ListMachineUsersRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListMachineUsersRequest): ListMachineUsersRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string project_id */ 1:
+                    message.projectId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListMachineUsersRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string project_id = 1; */
+        if (message.projectId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.projectId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.ListMachineUsersRequest
+ */
+export const ListMachineUsersRequest = new ListMachineUsersRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListMachineUsersResponse$Type extends MessageType<ListMachineUsersResponse> {
+    constructor() {
+        super("sid.v1.machine.ListMachineUsersResponse", [
+            { no: 1, name: "machine_users", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => MachineUserInfo }
+        ]);
+    }
+    create(value?: PartialMessage<ListMachineUsersResponse>): ListMachineUsersResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUsers = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListMachineUsersResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListMachineUsersResponse): ListMachineUsersResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.machine.MachineUserInfo machine_users */ 1:
+                    message.machineUsers.push(MachineUserInfo.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListMachineUsersResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.machine.MachineUserInfo machine_users = 1; */
+        for (let i = 0; i < message.machineUsers.length; i++)
+            MachineUserInfo.internalBinaryWrite(message.machineUsers[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.ListMachineUsersResponse
+ */
+export const ListMachineUsersResponse = new ListMachineUsersResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class SuspendMachineUserRequest$Type extends MessageType<SuspendMachineUserRequest> {
+    constructor() {
+        super("sid.v1.machine.SuspendMachineUserRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<SuspendMachineUserRequest>): SuspendMachineUserRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        if (value !== undefined)
+            reflectionMergePartial<SuspendMachineUserRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: SuspendMachineUserRequest): SuspendMachineUserRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: SuspendMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.SuspendMachineUserRequest
+ */
+export const SuspendMachineUserRequest = new SuspendMachineUserRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ReactivateMachineUserRequest$Type extends MessageType<ReactivateMachineUserRequest> {
+    constructor() {
+        super("sid.v1.machine.ReactivateMachineUserRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ReactivateMachineUserRequest>): ReactivateMachineUserRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        if (value !== undefined)
+            reflectionMergePartial<ReactivateMachineUserRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ReactivateMachineUserRequest): ReactivateMachineUserRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ReactivateMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.ReactivateMachineUserRequest
+ */
+export const ReactivateMachineUserRequest = new ReactivateMachineUserRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AddMachineCredentialRequest$Type extends MessageType<AddMachineCredentialRequest> {
+    constructor() {
+        super("sid.v1.machine.AddMachineCredentialRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "credential_type", kind: "enum", T: () => ["sid.v1.machine.MachineCredentialType", MachineCredentialType, "MACHINE_CREDENTIAL_TYPE_"] },
+            { no: 3, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "public_key_pem", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "expires_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<AddMachineCredentialRequest>): AddMachineCredentialRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        message.credentialType = 0;
+        message.algorithm = "";
+        message.publicKeyPem = "";
+        if (value !== undefined)
+            reflectionMergePartial<AddMachineCredentialRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AddMachineCredentialRequest): AddMachineCredentialRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                case /* sid.v1.machine.MachineCredentialType credential_type */ 2:
+                    message.credentialType = reader.int32();
+                    break;
+                case /* string algorithm */ 3:
+                    message.algorithm = reader.string();
+                    break;
+                case /* string public_key_pem */ 4:
+                    message.publicKeyPem = reader.string();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 5:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AddMachineCredentialRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        /* sid.v1.machine.MachineCredentialType credential_type = 2; */
+        if (message.credentialType !== 0)
+            writer.tag(2, WireType.Varint).int32(message.credentialType);
+        /* string algorithm = 3; */
+        if (message.algorithm !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.algorithm);
+        /* string public_key_pem = 4; */
+        if (message.publicKeyPem !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.publicKeyPem);
+        /* google.protobuf.Timestamp expires_at = 5; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(5, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.AddMachineCredentialRequest
+ */
+export const AddMachineCredentialRequest = new AddMachineCredentialRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class AddMachineCredentialResponse$Type extends MessageType<AddMachineCredentialResponse> {
+    constructor() {
+        super("sid.v1.machine.AddMachineCredentialResponse", [
+            { no: 1, name: "credential", kind: "message", T: () => MachineCredentialInfo },
+            { no: 2, name: "client_secret", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<AddMachineCredentialResponse>): AddMachineCredentialResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.clientSecret = "";
+        if (value !== undefined)
+            reflectionMergePartial<AddMachineCredentialResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AddMachineCredentialResponse): AddMachineCredentialResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* sid.v1.machine.MachineCredentialInfo credential */ 1:
+                    message.credential = MachineCredentialInfo.internalBinaryRead(reader, reader.uint32(), options, message.credential);
+                    break;
+                case /* string client_secret */ 2:
+                    message.clientSecret = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: AddMachineCredentialResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* sid.v1.machine.MachineCredentialInfo credential = 1; */
+        if (message.credential)
+            MachineCredentialInfo.internalBinaryWrite(message.credential, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        /* string client_secret = 2; */
+        if (message.clientSecret !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.clientSecret);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.AddMachineCredentialResponse
+ */
+export const AddMachineCredentialResponse = new AddMachineCredentialResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RevokeMachineCredentialRequest$Type extends MessageType<RevokeMachineCredentialRequest> {
+    constructor() {
+        super("sid.v1.machine.RevokeMachineCredentialRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "kid", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RevokeMachineCredentialRequest>): RevokeMachineCredentialRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        message.kid = "";
+        if (value !== undefined)
+            reflectionMergePartial<RevokeMachineCredentialRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeMachineCredentialRequest): RevokeMachineCredentialRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                case /* string kid */ 2:
+                    message.kid = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RevokeMachineCredentialRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        /* string kid = 2; */
+        if (message.kid !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.kid);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.RevokeMachineCredentialRequest
+ */
+export const RevokeMachineCredentialRequest = new RevokeMachineCredentialRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RevokeMachineCredentialResponse$Type extends MessageType<RevokeMachineCredentialResponse> {
+    constructor() {
+        super("sid.v1.machine.RevokeMachineCredentialResponse", []);
+    }
+    create(value?: PartialMessage<RevokeMachineCredentialResponse>): RevokeMachineCredentialResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<RevokeMachineCredentialResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeMachineCredentialResponse): RevokeMachineCredentialResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RevokeMachineCredentialResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.RevokeMachineCredentialResponse
+ */
+export const RevokeMachineCredentialResponse = new RevokeMachineCredentialResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListMachineCredentialsRequest$Type extends MessageType<ListMachineCredentialsRequest> {
+    constructor() {
+        super("sid.v1.machine.ListMachineCredentialsRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ListMachineCredentialsRequest>): ListMachineCredentialsRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        if (value !== undefined)
+            reflectionMergePartial<ListMachineCredentialsRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListMachineCredentialsRequest): ListMachineCredentialsRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListMachineCredentialsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.ListMachineCredentialsRequest
+ */
+export const ListMachineCredentialsRequest = new ListMachineCredentialsRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListMachineCredentialsResponse$Type extends MessageType<ListMachineCredentialsResponse> {
+    constructor() {
+        super("sid.v1.machine.ListMachineCredentialsResponse", [
+            { no: 1, name: "credentials", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => MachineCredentialInfo }
+        ]);
+    }
+    create(value?: PartialMessage<ListMachineCredentialsResponse>): ListMachineCredentialsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.credentials = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListMachineCredentialsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListMachineCredentialsResponse): ListMachineCredentialsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.machine.MachineCredentialInfo credentials */ 1:
+                    message.credentials.push(MachineCredentialInfo.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListMachineCredentialsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.machine.MachineCredentialInfo credentials = 1; */
+        for (let i = 0; i < message.credentials.length; i++)
+            MachineCredentialInfo.internalBinaryWrite(message.credentials[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.ListMachineCredentialsResponse
+ */
+export const ListMachineCredentialsResponse = new ListMachineCredentialsResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RotateMachineCredentialRequest$Type extends MessageType<RotateMachineCredentialRequest> {
+    constructor() {
+        super("sid.v1.machine.RotateMachineCredentialRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "kid", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "public_key_pem", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 5, name: "expires_at", kind: "message", T: () => Timestamp }
+        ]);
+    }
+    create(value?: PartialMessage<RotateMachineCredentialRequest>): RotateMachineCredentialRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        message.kid = "";
+        message.algorithm = "";
+        message.publicKeyPem = "";
+        if (value !== undefined)
+            reflectionMergePartial<RotateMachineCredentialRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RotateMachineCredentialRequest): RotateMachineCredentialRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                case /* string kid */ 2:
+                    message.kid = reader.string();
+                    break;
+                case /* string algorithm */ 3:
+                    message.algorithm = reader.string();
+                    break;
+                case /* string public_key_pem */ 4:
+                    message.publicKeyPem = reader.string();
+                    break;
+                case /* google.protobuf.Timestamp expires_at */ 5:
+                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RotateMachineCredentialRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        /* string kid = 2; */
+        if (message.kid !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.kid);
+        /* string algorithm = 3; */
+        if (message.algorithm !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.algorithm);
+        /* string public_key_pem = 4; */
+        if (message.publicKeyPem !== "")
+            writer.tag(4, WireType.LengthDelimited).string(message.publicKeyPem);
+        /* google.protobuf.Timestamp expires_at = 5; */
+        if (message.expiresAt)
+            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(5, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.RotateMachineCredentialRequest
+ */
+export const RotateMachineCredentialRequest = new RotateMachineCredentialRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RotateMachineCredentialResponse$Type extends MessageType<RotateMachineCredentialResponse> {
+    constructor() {
+        super("sid.v1.machine.RotateMachineCredentialResponse", [
+            { no: 1, name: "old_credential", kind: "message", T: () => MachineCredentialInfo },
+            { no: 2, name: "new_credential", kind: "message", T: () => MachineCredentialInfo },
+            { no: 3, name: "client_secret", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RotateMachineCredentialResponse>): RotateMachineCredentialResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.clientSecret = "";
+        if (value !== undefined)
+            reflectionMergePartial<RotateMachineCredentialResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RotateMachineCredentialResponse): RotateMachineCredentialResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* sid.v1.machine.MachineCredentialInfo old_credential */ 1:
+                    message.oldCredential = MachineCredentialInfo.internalBinaryRead(reader, reader.uint32(), options, message.oldCredential);
+                    break;
+                case /* sid.v1.machine.MachineCredentialInfo new_credential */ 2:
+                    message.newCredential = MachineCredentialInfo.internalBinaryRead(reader, reader.uint32(), options, message.newCredential);
+                    break;
+                case /* string client_secret */ 3:
+                    message.clientSecret = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RotateMachineCredentialResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* sid.v1.machine.MachineCredentialInfo old_credential = 1; */
+        if (message.oldCredential)
+            MachineCredentialInfo.internalBinaryWrite(message.oldCredential, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        /* sid.v1.machine.MachineCredentialInfo new_credential = 2; */
+        if (message.newCredential)
+            MachineCredentialInfo.internalBinaryWrite(message.newCredential, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
+        /* string client_secret = 3; */
+        if (message.clientSecret !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.clientSecret);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.RotateMachineCredentialResponse
+ */
+export const RotateMachineCredentialResponse = new RotateMachineCredentialResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GrantImpersonationRequest$Type extends MessageType<GrantImpersonationRequest> {
+    constructor() {
+        super("sid.v1.machine.GrantImpersonationRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "target_type", kind: "enum", T: () => ["sid.v1.machine.ImpersonationTargetType", ImpersonationTargetType, "IMPERSONATION_TARGET_TYPE_"] },
+            { no: 3, name: "target", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 4, name: "allowed_scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<GrantImpersonationRequest>): GrantImpersonationRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        message.targetType = 0;
+        message.target = "";
+        message.allowedScopes = [];
+        if (value !== undefined)
+            reflectionMergePartial<GrantImpersonationRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GrantImpersonationRequest): GrantImpersonationRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                case /* sid.v1.machine.ImpersonationTargetType target_type */ 2:
+                    message.targetType = reader.int32();
+                    break;
+                case /* string target */ 3:
+                    message.target = reader.string();
+                    break;
+                case /* repeated string allowed_scopes */ 4:
+                    message.allowedScopes.push(reader.string());
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GrantImpersonationRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        /* sid.v1.machine.ImpersonationTargetType target_type = 2; */
+        if (message.targetType !== 0)
+            writer.tag(2, WireType.Varint).int32(message.targetType);
+        /* string target = 3; */
+        if (message.target !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.target);
+        /* repeated string allowed_scopes = 4; */
+        for (let i = 0; i < message.allowedScopes.length; i++)
+            writer.tag(4, WireType.LengthDelimited).string(message.allowedScopes[i]);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.GrantImpersonationRequest
+ */
+export const GrantImpersonationRequest = new GrantImpersonationRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class GrantImpersonationResponse$Type extends MessageType<GrantImpersonationResponse> {
+    constructor() {
+        super("sid.v1.machine.GrantImpersonationResponse", [
+            { no: 1, name: "grant", kind: "message", T: () => ImpersonationGrantInfo }
+        ]);
+    }
+    create(value?: PartialMessage<GrantImpersonationResponse>): GrantImpersonationResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<GrantImpersonationResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GrantImpersonationResponse): GrantImpersonationResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* sid.v1.machine.ImpersonationGrantInfo grant */ 1:
+                    message.grant = ImpersonationGrantInfo.internalBinaryRead(reader, reader.uint32(), options, message.grant);
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: GrantImpersonationResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* sid.v1.machine.ImpersonationGrantInfo grant = 1; */
+        if (message.grant)
+            ImpersonationGrantInfo.internalBinaryWrite(message.grant, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.GrantImpersonationResponse
+ */
+export const GrantImpersonationResponse = new GrantImpersonationResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RevokeImpersonationRequest$Type extends MessageType<RevokeImpersonationRequest> {
+    constructor() {
+        super("sid.v1.machine.RevokeImpersonationRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 2, name: "target_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 3, name: "target", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<RevokeImpersonationRequest>): RevokeImpersonationRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        message.targetType = "";
+        message.target = "";
+        if (value !== undefined)
+            reflectionMergePartial<RevokeImpersonationRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeImpersonationRequest): RevokeImpersonationRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                case /* string target_type */ 2:
+                    message.targetType = reader.string();
+                    break;
+                case /* string target */ 3:
+                    message.target = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RevokeImpersonationRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        /* string target_type = 2; */
+        if (message.targetType !== "")
+            writer.tag(2, WireType.LengthDelimited).string(message.targetType);
+        /* string target = 3; */
+        if (message.target !== "")
+            writer.tag(3, WireType.LengthDelimited).string(message.target);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.RevokeImpersonationRequest
+ */
+export const RevokeImpersonationRequest = new RevokeImpersonationRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class RevokeImpersonationResponse$Type extends MessageType<RevokeImpersonationResponse> {
+    constructor() {
+        super("sid.v1.machine.RevokeImpersonationResponse", []);
+    }
+    create(value?: PartialMessage<RevokeImpersonationResponse>): RevokeImpersonationResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        if (value !== undefined)
+            reflectionMergePartial<RevokeImpersonationResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeImpersonationResponse): RevokeImpersonationResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: RevokeImpersonationResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.RevokeImpersonationResponse
+ */
+export const RevokeImpersonationResponse = new RevokeImpersonationResponse$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListImpersonationGrantsRequest$Type extends MessageType<ListImpersonationGrantsRequest> {
+    constructor() {
+        super("sid.v1.machine.ListImpersonationGrantsRequest", [
+            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+        ]);
+    }
+    create(value?: PartialMessage<ListImpersonationGrantsRequest>): ListImpersonationGrantsRequest {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.machineUserId = "";
+        if (value !== undefined)
+            reflectionMergePartial<ListImpersonationGrantsRequest>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListImpersonationGrantsRequest): ListImpersonationGrantsRequest {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* string machine_user_id */ 1:
+                    message.machineUserId = reader.string();
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListImpersonationGrantsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* string machine_user_id = 1; */
+        if (message.machineUserId !== "")
+            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.ListImpersonationGrantsRequest
+ */
+export const ListImpersonationGrantsRequest = new ListImpersonationGrantsRequest$Type();
+// @generated message type with reflection information, may provide speed optimized methods
+class ListImpersonationGrantsResponse$Type extends MessageType<ListImpersonationGrantsResponse> {
+    constructor() {
+        super("sid.v1.machine.ListImpersonationGrantsResponse", [
+            { no: 1, name: "grants", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => ImpersonationGrantInfo }
+        ]);
+    }
+    create(value?: PartialMessage<ListImpersonationGrantsResponse>): ListImpersonationGrantsResponse {
+        const message = globalThis.Object.create((this.messagePrototype!));
+        message.grants = [];
+        if (value !== undefined)
+            reflectionMergePartial<ListImpersonationGrantsResponse>(this, message, value);
+        return message;
+    }
+    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListImpersonationGrantsResponse): ListImpersonationGrantsResponse {
+        let message = target ?? this.create(), end = reader.pos + length;
+        while (reader.pos < end) {
+            let [fieldNo, wireType] = reader.tag();
+            switch (fieldNo) {
+                case /* repeated sid.v1.machine.ImpersonationGrantInfo grants */ 1:
+                    message.grants.push(ImpersonationGrantInfo.internalBinaryRead(reader, reader.uint32(), options));
+                    break;
+                default:
+                    let u = options.readUnknownField;
+                    if (u === "throw")
+                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
+                    let d = reader.skip(wireType);
+                    if (u !== false)
+                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
+            }
+        }
+        return message;
+    }
+    internalBinaryWrite(message: ListImpersonationGrantsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
+        /* repeated sid.v1.machine.ImpersonationGrantInfo grants = 1; */
+        for (let i = 0; i < message.grants.length; i++)
+            ImpersonationGrantInfo.internalBinaryWrite(message.grants[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
+        let u = options.writeUnknownFields;
+        if (u !== false)
+            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
+        return writer;
+    }
+}
+/**
+ * @generated MessageType for protobuf message sid.v1.machine.ListImpersonationGrantsResponse
+ */
+export const ListImpersonationGrantsResponse = new ListImpersonationGrantsResponse$Type();
+/**
+ * @generated ServiceType for protobuf service sid.v1.machine.MachineUserService
+ */
+export const MachineUserService = new ServiceType("sid.v1.machine.MachineUserService", [
+    { name: "CreateMachineUser", options: { "google.api.http": { post: "/v1/machine-users", body: "*" } }, I: CreateMachineUserRequest, O: CreateMachineUserResponse },
+    { name: "GetMachineUser", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/machine-users/{machine_user_id}" } }, I: GetMachineUserRequest, O: MachineUserResponse },
+    { name: "UpdateMachineUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { patch: "/v1/machine-users/{machine_user_id}", body: "*" } }, I: UpdateMachineUserRequest, O: MachineUserResponse },
+    { name: "DeleteMachineUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/machine-users/{machine_user_id}" } }, I: DeleteMachineUserRequest, O: DeleteMachineUserResponse },
+    { name: "ListMachineUsers", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/projects/{project_id}/machine-users" } }, I: ListMachineUsersRequest, O: ListMachineUsersResponse },
+    { name: "SuspendMachineUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/suspend", body: "*" } }, I: SuspendMachineUserRequest, O: MachineUserResponse },
+    { name: "ReactivateMachineUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/reactivate", body: "*" } }, I: ReactivateMachineUserRequest, O: MachineUserResponse },
+    { name: "AddMachineCredential", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/credentials", body: "*" } }, I: AddMachineCredentialRequest, O: AddMachineCredentialResponse },
+    { name: "RevokeMachineCredential", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/machine-users/{machine_user_id}/credentials/{kid}" } }, I: RevokeMachineCredentialRequest, O: RevokeMachineCredentialResponse },
+    { name: "ListMachineCredentials", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/machine-users/{machine_user_id}/credentials" } }, I: ListMachineCredentialsRequest, O: ListMachineCredentialsResponse },
+    { name: "RotateMachineCredential", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/credentials/{kid}/rotate", body: "*" } }, I: RotateMachineCredentialRequest, O: RotateMachineCredentialResponse },
+    { name: "GrantImpersonation", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/impersonation", body: "*" } }, I: GrantImpersonationRequest, O: GrantImpersonationResponse },
+    { name: "RevokeImpersonation", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/machine-users/{machine_user_id}/impersonation/{target_type}/{target}" } }, I: RevokeImpersonationRequest, O: RevokeImpersonationResponse },
+    { name: "ListImpersonationGrants", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/machine-users/{machine_user_id}/impersonation" } }, I: ListImpersonationGrantsRequest, O: ListImpersonationGrantsResponse }
+]);