@structured-id/ui-core 1.3.0 → 3.0.0

package/src/generated/sid/v1/machine/machine_user.ts

@@ -1,2364 +0,0 @@
-// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
-// @generated from protobuf file "sid/v1/machine/machine_user.proto" (package "sid.v1.machine", syntax proto3)
-// tslint:disable
-import { ServiceType } from "@protobuf-ts/runtime-rpc";
-import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
-import type { IBinaryWriter } from "@protobuf-ts/runtime";
-import { WireType } from "@protobuf-ts/runtime";
-import type { BinaryReadOptions } from "@protobuf-ts/runtime";
-import type { IBinaryReader } from "@protobuf-ts/runtime";
-import { UnknownFieldHandler } from "@protobuf-ts/runtime";
-import type { PartialMessage } from "@protobuf-ts/runtime";
-import { reflectionMergePartial } from "@protobuf-ts/runtime";
-import { MessageType } from "@protobuf-ts/runtime";
-import { Timestamp } from "../../../google/protobuf/timestamp";
-/**
- * Messages
- *
- * @generated from protobuf message sid.v1.machine.MachineUserInfo
- */
-export interface MachineUserInfo {
-    /**
-     * @generated from protobuf field: string id = 1
-     */
-    id: string;
-    /**
-     * @generated from protobuf field: string project_id = 2
-     */
-    projectId: string;
-    /**
-     * @generated from protobuf field: string client_id = 3
-     */
-    clientId: string;
-    /**
-     * @generated from protobuf field: string display_name = 4
-     */
-    displayName: string;
-    /**
-     * @generated from protobuf field: string description = 5
-     */
-    description: string;
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineUserType machine_type = 6
-     */
-    machineType: MachineUserType;
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineUserStatus status = 7
-     */
-    status: MachineUserStatus;
-    /**
-     * @generated from protobuf field: string owner_type = 8
-     */
-    ownerType: string;
-    /**
-     * @generated from protobuf field: string owner_id = 9
-     */
-    ownerId: string;
-    /**
-     * @generated from protobuf field: repeated string scopes = 10
-     */
-    scopes: string[];
-    /**
-     * @generated from protobuf field: repeated string ip_allowlist = 12
-     */
-    ipAllowlist: string[];
-    /**
-     * @generated from protobuf field: int32 rate_limit_rpm = 13
-     */
-    rateLimitRpm: number;
-    /**
-     * @generated from protobuf field: int32 max_token_lifetime = 14
-     */
-    maxTokenLifetime: number;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 15
-     */
-    expiresAt?: Timestamp;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp last_used_at = 16
-     */
-    lastUsedAt?: Timestamp;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp created_at = 17
-     */
-    createdAt?: Timestamp;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp updated_at = 18
-     */
-    updatedAt?: Timestamp;
-}
-/**
- * @generated from protobuf message sid.v1.machine.MachineCredentialInfo
- */
-export interface MachineCredentialInfo {
-    /**
-     * @generated from protobuf field: string kid = 1
-     */
-    kid: string;
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineCredentialType credential_type = 2
-     */
-    credentialType: MachineCredentialType;
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineCredentialStatus status = 3
-     */
-    status: MachineCredentialStatus;
-    /**
-     * @generated from protobuf field: string algorithm = 4
-     */
-    algorithm: string;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 5
-     */
-    expiresAt?: Timestamp;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp created_at = 6
-     */
-    createdAt?: Timestamp; // NOTE: credential_data is NEVER returned for client_secret type
-}
-/**
- * @generated from protobuf message sid.v1.machine.ImpersonationGrantInfo
- */
-export interface ImpersonationGrantInfo {
-    /**
-     * @generated from protobuf field: string id = 1
-     */
-    id: string;
-    /**
-     * @generated from protobuf field: string machine_user_id = 2
-     */
-    machineUserId: string;
-    /**
-     * @generated from protobuf field: sid.v1.machine.ImpersonationTargetType target_type = 3
-     */
-    targetType: ImpersonationTargetType;
-    /**
-     * @generated from protobuf field: string target = 4
-     */
-    target: string;
-    /**
-     * @generated from protobuf field: repeated string allowed_scopes = 5
-     */
-    allowedScopes: string[];
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp created_at = 6
-     */
-    createdAt?: Timestamp;
-}
-// -- CRUD messages --
-
-/**
- * @generated from protobuf message sid.v1.machine.CreateMachineUserRequest
- */
-export interface CreateMachineUserRequest {
-    /**
-     * @generated from protobuf field: string project_id = 1
-     */
-    projectId: string;
-    /**
-     * @generated from protobuf field: string display_name = 2
-     */
-    displayName: string;
-    /**
-     * @generated from protobuf field: string description = 3
-     */
-    description: string;
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineUserType machine_type = 4
-     */
-    machineType: MachineUserType;
-    /**
-     * @generated from protobuf field: repeated string scopes = 5
-     */
-    scopes: string[];
-    /**
-     * @generated from protobuf field: repeated string ip_allowlist = 7
-     */
-    ipAllowlist: string[];
-    /**
-     * @generated from protobuf field: int32 rate_limit_rpm = 8
-     */
-    rateLimitRpm: number;
-    /**
-     * @generated from protobuf field: int32 max_token_lifetime = 9
-     */
-    maxTokenLifetime: number;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 10
-     */
-    expiresAt?: Timestamp;
-}
-/**
- * @generated from protobuf message sid.v1.machine.CreateMachineUserResponse
- */
-export interface CreateMachineUserResponse {
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineUserInfo machine_user = 1
-     */
-    machineUser?: MachineUserInfo;
-}
-/**
- * @generated from protobuf message sid.v1.machine.GetMachineUserRequest
- */
-export interface GetMachineUserRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-}
-/**
- * @generated from protobuf message sid.v1.machine.MachineUserResponse
- */
-export interface MachineUserResponse {
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineUserInfo machine_user = 1
-     */
-    machineUser?: MachineUserInfo;
-}
-/**
- * @generated from protobuf message sid.v1.machine.UpdateMachineUserRequest
- */
-export interface UpdateMachineUserRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-    /**
-     * @generated from protobuf field: string display_name = 2
-     */
-    displayName: string;
-    /**
-     * @generated from protobuf field: string description = 3
-     */
-    description: string;
-    /**
-     * @generated from protobuf field: repeated string scopes = 4
-     */
-    scopes: string[];
-    /**
-     * @generated from protobuf field: repeated string ip_allowlist = 6
-     */
-    ipAllowlist: string[];
-    /**
-     * @generated from protobuf field: int32 rate_limit_rpm = 7
-     */
-    rateLimitRpm: number;
-    /**
-     * @generated from protobuf field: int32 max_token_lifetime = 8
-     */
-    maxTokenLifetime: number;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 9
-     */
-    expiresAt?: Timestamp;
-}
-/**
- * @generated from protobuf message sid.v1.machine.DeleteMachineUserRequest
- */
-export interface DeleteMachineUserRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-}
-/**
- * @generated from protobuf message sid.v1.machine.DeleteMachineUserResponse
- */
-export interface DeleteMachineUserResponse {
-}
-/**
- * @generated from protobuf message sid.v1.machine.ListMachineUsersRequest
- */
-export interface ListMachineUsersRequest {
-    /**
-     * @generated from protobuf field: string project_id = 1
-     */
-    projectId: string;
-}
-/**
- * @generated from protobuf message sid.v1.machine.ListMachineUsersResponse
- */
-export interface ListMachineUsersResponse {
-    /**
-     * @generated from protobuf field: repeated sid.v1.machine.MachineUserInfo machine_users = 1
-     */
-    machineUsers: MachineUserInfo[];
-}
-/**
- * @generated from protobuf message sid.v1.machine.SuspendMachineUserRequest
- */
-export interface SuspendMachineUserRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-}
-/**
- * @generated from protobuf message sid.v1.machine.ReactivateMachineUserRequest
- */
-export interface ReactivateMachineUserRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-}
-// -- Credential messages --
-
-/**
- * @generated from protobuf message sid.v1.machine.AddMachineCredentialRequest
- */
-export interface AddMachineCredentialRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineCredentialType credential_type = 2
-     */
-    credentialType: MachineCredentialType;
-    /**
-     * @generated from protobuf field: string algorithm = 3
-     */
-    algorithm: string; // For private_key_jwt: "RS256", "ES256"
-    /**
-     * @generated from protobuf field: string public_key_pem = 4
-     */
-    publicKeyPem: string; // For private_key_jwt: PEM-encoded public key
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 5
-     */
-    expiresAt?: Timestamp;
-}
-/**
- * @generated from protobuf message sid.v1.machine.AddMachineCredentialResponse
- */
-export interface AddMachineCredentialResponse {
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineCredentialInfo credential = 1
-     */
-    credential?: MachineCredentialInfo;
-    /**
-     * @generated from protobuf field: string client_secret = 2
-     */
-    clientSecret: string; // Plaintext — shown ONCE for client_secret type. Empty for others.
-}
-/**
- * @generated from protobuf message sid.v1.machine.RevokeMachineCredentialRequest
- */
-export interface RevokeMachineCredentialRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-    /**
-     * @generated from protobuf field: string kid = 2
-     */
-    kid: string;
-}
-/**
- * @generated from protobuf message sid.v1.machine.RevokeMachineCredentialResponse
- */
-export interface RevokeMachineCredentialResponse {
-}
-/**
- * @generated from protobuf message sid.v1.machine.ListMachineCredentialsRequest
- */
-export interface ListMachineCredentialsRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-}
-/**
- * @generated from protobuf message sid.v1.machine.ListMachineCredentialsResponse
- */
-export interface ListMachineCredentialsResponse {
-    /**
-     * @generated from protobuf field: repeated sid.v1.machine.MachineCredentialInfo credentials = 1
-     */
-    credentials: MachineCredentialInfo[];
-}
-/**
- * @generated from protobuf message sid.v1.machine.RotateMachineCredentialRequest
- */
-export interface RotateMachineCredentialRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-    /**
-     * @generated from protobuf field: string kid = 2
-     */
-    kid: string; // Old credential kid to rotate
-    /**
-     * @generated from protobuf field: string algorithm = 3
-     */
-    algorithm: string; // For new private_key_jwt
-    /**
-     * @generated from protobuf field: string public_key_pem = 4
-     */
-    publicKeyPem: string; // For new private_key_jwt
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 5
-     */
-    expiresAt?: Timestamp;
-}
-/**
- * @generated from protobuf message sid.v1.machine.RotateMachineCredentialResponse
- */
-export interface RotateMachineCredentialResponse {
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineCredentialInfo old_credential = 1
-     */
-    oldCredential?: MachineCredentialInfo; // Set to grace_period
-    /**
-     * @generated from protobuf field: sid.v1.machine.MachineCredentialInfo new_credential = 2
-     */
-    newCredential?: MachineCredentialInfo;
-    /**
-     * @generated from protobuf field: string client_secret = 3
-     */
-    clientSecret: string; // If client_secret type
-}
-// -- Impersonation messages --
-
-/**
- * @generated from protobuf message sid.v1.machine.GrantImpersonationRequest
- */
-export interface GrantImpersonationRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-    /**
-     * @generated from protobuf field: sid.v1.machine.ImpersonationTargetType target_type = 2
-     */
-    targetType: ImpersonationTargetType;
-    /**
-     * @generated from protobuf field: string target = 3
-     */
-    target: string;
-    /**
-     * @generated from protobuf field: repeated string allowed_scopes = 4
-     */
-    allowedScopes: string[];
-}
-/**
- * @generated from protobuf message sid.v1.machine.GrantImpersonationResponse
- */
-export interface GrantImpersonationResponse {
-    /**
-     * @generated from protobuf field: sid.v1.machine.ImpersonationGrantInfo grant = 1
-     */
-    grant?: ImpersonationGrantInfo;
-}
-/**
- * @generated from protobuf message sid.v1.machine.RevokeImpersonationRequest
- */
-export interface RevokeImpersonationRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-    /**
-     * @generated from protobuf field: string target_type = 2
-     */
-    targetType: string;
-    /**
-     * @generated from protobuf field: string target = 3
-     */
-    target: string;
-}
-/**
- * @generated from protobuf message sid.v1.machine.RevokeImpersonationResponse
- */
-export interface RevokeImpersonationResponse {
-}
-/**
- * @generated from protobuf message sid.v1.machine.ListImpersonationGrantsRequest
- */
-export interface ListImpersonationGrantsRequest {
-    /**
-     * @generated from protobuf field: string machine_user_id = 1
-     */
-    machineUserId: string;
-}
-/**
- * @generated from protobuf message sid.v1.machine.ListImpersonationGrantsResponse
- */
-export interface ListImpersonationGrantsResponse {
-    /**
-     * @generated from protobuf field: repeated sid.v1.machine.ImpersonationGrantInfo grants = 1
-     */
-    grants: ImpersonationGrantInfo[];
-}
-/**
- * Enums
- *
- * @generated from protobuf enum sid.v1.machine.MachineUserType
- */
-export enum MachineUserType {
-    /**
-     * @generated from protobuf enum value: MACHINE_USER_TYPE_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * @generated from protobuf enum value: MACHINE_USER_TYPE_SERVICE = 1;
-     */
-    SERVICE = 1,
-    /**
-     * @generated from protobuf enum value: MACHINE_USER_TYPE_BOT = 2;
-     */
-    BOT = 2,
-    /**
-     * @generated from protobuf enum value: MACHINE_USER_TYPE_AGENT = 3;
-     */
-    AGENT = 3
-}
-/**
- * @generated from protobuf enum sid.v1.machine.MachineUserStatus
- */
-export enum MachineUserStatus {
-    /**
-     * @generated from protobuf enum value: MACHINE_USER_STATUS_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * @generated from protobuf enum value: MACHINE_USER_STATUS_ACTIVE = 1;
-     */
-    ACTIVE = 1,
-    /**
-     * @generated from protobuf enum value: MACHINE_USER_STATUS_SUSPENDED = 2;
-     */
-    SUSPENDED = 2,
-    /**
-     * @generated from protobuf enum value: MACHINE_USER_STATUS_EXPIRED = 3;
-     */
-    EXPIRED = 3,
-    /**
-     * @generated from protobuf enum value: MACHINE_USER_STATUS_DELETED = 4;
-     */
-    DELETED = 4
-}
-/**
- * @generated from protobuf enum sid.v1.machine.MachineCredentialType
- */
-export enum MachineCredentialType {
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_CLIENT_SECRET = 1;
-     */
-    CLIENT_SECRET = 1,
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_PRIVATE_KEY_JWT = 2;
-     */
-    PRIVATE_KEY_JWT = 2,
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_MTLS = 3;
-     */
-    MTLS = 3,
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_TYPE_WORKLOAD_IDENTITY = 4;
-     */
-    WORKLOAD_IDENTITY = 4
-}
-/**
- * @generated from protobuf enum sid.v1.machine.MachineCredentialStatus
- */
-export enum MachineCredentialStatus {
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_ACTIVE = 1;
-     */
-    ACTIVE = 1,
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_GRACE_PERIOD = 2;
-     */
-    GRACE_PERIOD = 2,
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_EXPIRED = 3;
-     */
-    EXPIRED = 3,
-    /**
-     * @generated from protobuf enum value: MACHINE_CREDENTIAL_STATUS_REVOKED = 4;
-     */
-    REVOKED = 4
-}
-/**
- * @generated from protobuf enum sid.v1.machine.ImpersonationTargetType
- */
-export enum ImpersonationTargetType {
-    /**
-     * @generated from protobuf enum value: IMPERSONATION_TARGET_TYPE_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * @generated from protobuf enum value: IMPERSONATION_TARGET_TYPE_ROLE = 1;
-     */
-    ROLE = 1,
-    /**
-     * @generated from protobuf enum value: IMPERSONATION_TARGET_TYPE_USER = 2;
-     */
-    USER = 2
-}
-// @generated message type with reflection information, may provide speed optimized methods
-class MachineUserInfo$Type extends MessageType<MachineUserInfo> {
-    constructor() {
-        super("sid.v1.machine.MachineUserInfo", [
-            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "project_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "client_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 5, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 6, name: "machine_type", kind: "enum", T: () => ["sid.v1.machine.MachineUserType", MachineUserType, "MACHINE_USER_TYPE_"] },
-            { no: 7, name: "status", kind: "enum", T: () => ["sid.v1.machine.MachineUserStatus", MachineUserStatus, "MACHINE_USER_STATUS_"] },
-            { no: 8, name: "owner_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 9, name: "owner_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 10, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
-            { no: 12, name: "ip_allowlist", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
-            { no: 13, name: "rate_limit_rpm", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
-            { no: 14, name: "max_token_lifetime", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
-            { no: 15, name: "expires_at", kind: "message", T: () => Timestamp },
-            { no: 16, name: "last_used_at", kind: "message", T: () => Timestamp },
-            { no: 17, name: "created_at", kind: "message", T: () => Timestamp },
-            { no: 18, name: "updated_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<MachineUserInfo>): MachineUserInfo {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.id = "";
-        message.projectId = "";
-        message.clientId = "";
-        message.displayName = "";
-        message.description = "";
-        message.machineType = 0;
-        message.status = 0;
-        message.ownerType = "";
-        message.ownerId = "";
-        message.scopes = [];
-        message.ipAllowlist = [];
-        message.rateLimitRpm = 0;
-        message.maxTokenLifetime = 0;
-        if (value !== undefined)
-            reflectionMergePartial<MachineUserInfo>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MachineUserInfo): MachineUserInfo {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string id */ 1:
-                    message.id = reader.string();
-                    break;
-                case /* string project_id */ 2:
-                    message.projectId = reader.string();
-                    break;
-                case /* string client_id */ 3:
-                    message.clientId = reader.string();
-                    break;
-                case /* string display_name */ 4:
-                    message.displayName = reader.string();
-                    break;
-                case /* string description */ 5:
-                    message.description = reader.string();
-                    break;
-                case /* sid.v1.machine.MachineUserType machine_type */ 6:
-                    message.machineType = reader.int32();
-                    break;
-                case /* sid.v1.machine.MachineUserStatus status */ 7:
-                    message.status = reader.int32();
-                    break;
-                case /* string owner_type */ 8:
-                    message.ownerType = reader.string();
-                    break;
-                case /* string owner_id */ 9:
-                    message.ownerId = reader.string();
-                    break;
-                case /* repeated string scopes */ 10:
-                    message.scopes.push(reader.string());
-                    break;
-                case /* repeated string ip_allowlist */ 12:
-                    message.ipAllowlist.push(reader.string());
-                    break;
-                case /* int32 rate_limit_rpm */ 13:
-                    message.rateLimitRpm = reader.int32();
-                    break;
-                case /* int32 max_token_lifetime */ 14:
-                    message.maxTokenLifetime = reader.int32();
-                    break;
-                case /* google.protobuf.Timestamp expires_at */ 15:
-                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
-                    break;
-                case /* google.protobuf.Timestamp last_used_at */ 16:
-                    message.lastUsedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.lastUsedAt);
-                    break;
-                case /* google.protobuf.Timestamp created_at */ 17:
-                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
-                    break;
-                case /* google.protobuf.Timestamp updated_at */ 18:
-                    message.updatedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.updatedAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: MachineUserInfo, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string id = 1; */
-        if (message.id !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.id);
-        /* string project_id = 2; */
-        if (message.projectId !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.projectId);
-        /* string client_id = 3; */
-        if (message.clientId !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.clientId);
-        /* string display_name = 4; */
-        if (message.displayName !== "")
-            writer.tag(4, WireType.LengthDelimited).string(message.displayName);
-        /* string description = 5; */
-        if (message.description !== "")
-            writer.tag(5, WireType.LengthDelimited).string(message.description);
-        /* sid.v1.machine.MachineUserType machine_type = 6; */
-        if (message.machineType !== 0)
-            writer.tag(6, WireType.Varint).int32(message.machineType);
-        /* sid.v1.machine.MachineUserStatus status = 7; */
-        if (message.status !== 0)
-            writer.tag(7, WireType.Varint).int32(message.status);
-        /* string owner_type = 8; */
-        if (message.ownerType !== "")
-            writer.tag(8, WireType.LengthDelimited).string(message.ownerType);
-        /* string owner_id = 9; */
-        if (message.ownerId !== "")
-            writer.tag(9, WireType.LengthDelimited).string(message.ownerId);
-        /* repeated string scopes = 10; */
-        for (let i = 0; i < message.scopes.length; i++)
-            writer.tag(10, WireType.LengthDelimited).string(message.scopes[i]);
-        /* repeated string ip_allowlist = 12; */
-        for (let i = 0; i < message.ipAllowlist.length; i++)
-            writer.tag(12, WireType.LengthDelimited).string(message.ipAllowlist[i]);
-        /* int32 rate_limit_rpm = 13; */
-        if (message.rateLimitRpm !== 0)
-            writer.tag(13, WireType.Varint).int32(message.rateLimitRpm);
-        /* int32 max_token_lifetime = 14; */
-        if (message.maxTokenLifetime !== 0)
-            writer.tag(14, WireType.Varint).int32(message.maxTokenLifetime);
-        /* google.protobuf.Timestamp expires_at = 15; */
-        if (message.expiresAt)
-            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(15, WireType.LengthDelimited).fork(), options).join();
-        /* google.protobuf.Timestamp last_used_at = 16; */
-        if (message.lastUsedAt)
-            Timestamp.internalBinaryWrite(message.lastUsedAt, writer.tag(16, WireType.LengthDelimited).fork(), options).join();
-        /* google.protobuf.Timestamp created_at = 17; */
-        if (message.createdAt)
-            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(17, WireType.LengthDelimited).fork(), options).join();
-        /* google.protobuf.Timestamp updated_at = 18; */
-        if (message.updatedAt)
-            Timestamp.internalBinaryWrite(message.updatedAt, writer.tag(18, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.MachineUserInfo
- */
-export const MachineUserInfo = new MachineUserInfo$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class MachineCredentialInfo$Type extends MessageType<MachineCredentialInfo> {
-    constructor() {
-        super("sid.v1.machine.MachineCredentialInfo", [
-            { no: 1, name: "kid", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "credential_type", kind: "enum", T: () => ["sid.v1.machine.MachineCredentialType", MachineCredentialType, "MACHINE_CREDENTIAL_TYPE_"] },
-            { no: 3, name: "status", kind: "enum", T: () => ["sid.v1.machine.MachineCredentialStatus", MachineCredentialStatus, "MACHINE_CREDENTIAL_STATUS_"] },
-            { no: 4, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 5, name: "expires_at", kind: "message", T: () => Timestamp },
-            { no: 6, name: "created_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<MachineCredentialInfo>): MachineCredentialInfo {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.kid = "";
-        message.credentialType = 0;
-        message.status = 0;
-        message.algorithm = "";
-        if (value !== undefined)
-            reflectionMergePartial<MachineCredentialInfo>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MachineCredentialInfo): MachineCredentialInfo {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string kid */ 1:
-                    message.kid = reader.string();
-                    break;
-                case /* sid.v1.machine.MachineCredentialType credential_type */ 2:
-                    message.credentialType = reader.int32();
-                    break;
-                case /* sid.v1.machine.MachineCredentialStatus status */ 3:
-                    message.status = reader.int32();
-                    break;
-                case /* string algorithm */ 4:
-                    message.algorithm = reader.string();
-                    break;
-                case /* google.protobuf.Timestamp expires_at */ 5:
-                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
-                    break;
-                case /* google.protobuf.Timestamp created_at */ 6:
-                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: MachineCredentialInfo, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string kid = 1; */
-        if (message.kid !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.kid);
-        /* sid.v1.machine.MachineCredentialType credential_type = 2; */
-        if (message.credentialType !== 0)
-            writer.tag(2, WireType.Varint).int32(message.credentialType);
-        /* sid.v1.machine.MachineCredentialStatus status = 3; */
-        if (message.status !== 0)
-            writer.tag(3, WireType.Varint).int32(message.status);
-        /* string algorithm = 4; */
-        if (message.algorithm !== "")
-            writer.tag(4, WireType.LengthDelimited).string(message.algorithm);
-        /* google.protobuf.Timestamp expires_at = 5; */
-        if (message.expiresAt)
-            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(5, WireType.LengthDelimited).fork(), options).join();
-        /* google.protobuf.Timestamp created_at = 6; */
-        if (message.createdAt)
-            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.MachineCredentialInfo
- */
-export const MachineCredentialInfo = new MachineCredentialInfo$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ImpersonationGrantInfo$Type extends MessageType<ImpersonationGrantInfo> {
-    constructor() {
-        super("sid.v1.machine.ImpersonationGrantInfo", [
-            { no: 1, name: "id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "target_type", kind: "enum", T: () => ["sid.v1.machine.ImpersonationTargetType", ImpersonationTargetType, "IMPERSONATION_TARGET_TYPE_"] },
-            { no: 4, name: "target", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 5, name: "allowed_scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
-            { no: 6, name: "created_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<ImpersonationGrantInfo>): ImpersonationGrantInfo {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.id = "";
-        message.machineUserId = "";
-        message.targetType = 0;
-        message.target = "";
-        message.allowedScopes = [];
-        if (value !== undefined)
-            reflectionMergePartial<ImpersonationGrantInfo>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ImpersonationGrantInfo): ImpersonationGrantInfo {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string id */ 1:
-                    message.id = reader.string();
-                    break;
-                case /* string machine_user_id */ 2:
-                    message.machineUserId = reader.string();
-                    break;
-                case /* sid.v1.machine.ImpersonationTargetType target_type */ 3:
-                    message.targetType = reader.int32();
-                    break;
-                case /* string target */ 4:
-                    message.target = reader.string();
-                    break;
-                case /* repeated string allowed_scopes */ 5:
-                    message.allowedScopes.push(reader.string());
-                    break;
-                case /* google.protobuf.Timestamp created_at */ 6:
-                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ImpersonationGrantInfo, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string id = 1; */
-        if (message.id !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.id);
-        /* string machine_user_id = 2; */
-        if (message.machineUserId !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.machineUserId);
-        /* sid.v1.machine.ImpersonationTargetType target_type = 3; */
-        if (message.targetType !== 0)
-            writer.tag(3, WireType.Varint).int32(message.targetType);
-        /* string target = 4; */
-        if (message.target !== "")
-            writer.tag(4, WireType.LengthDelimited).string(message.target);
-        /* repeated string allowed_scopes = 5; */
-        for (let i = 0; i < message.allowedScopes.length; i++)
-            writer.tag(5, WireType.LengthDelimited).string(message.allowedScopes[i]);
-        /* google.protobuf.Timestamp created_at = 6; */
-        if (message.createdAt)
-            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.ImpersonationGrantInfo
- */
-export const ImpersonationGrantInfo = new ImpersonationGrantInfo$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class CreateMachineUserRequest$Type extends MessageType<CreateMachineUserRequest> {
-    constructor() {
-        super("sid.v1.machine.CreateMachineUserRequest", [
-            { no: 1, name: "project_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "machine_type", kind: "enum", T: () => ["sid.v1.machine.MachineUserType", MachineUserType, "MACHINE_USER_TYPE_"] },
-            { no: 5, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
-            { no: 7, name: "ip_allowlist", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
-            { no: 8, name: "rate_limit_rpm", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
-            { no: 9, name: "max_token_lifetime", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
-            { no: 10, name: "expires_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<CreateMachineUserRequest>): CreateMachineUserRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.projectId = "";
-        message.displayName = "";
-        message.description = "";
-        message.machineType = 0;
-        message.scopes = [];
-        message.ipAllowlist = [];
-        message.rateLimitRpm = 0;
-        message.maxTokenLifetime = 0;
-        if (value !== undefined)
-            reflectionMergePartial<CreateMachineUserRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CreateMachineUserRequest): CreateMachineUserRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string project_id */ 1:
-                    message.projectId = reader.string();
-                    break;
-                case /* string display_name */ 2:
-                    message.displayName = reader.string();
-                    break;
-                case /* string description */ 3:
-                    message.description = reader.string();
-                    break;
-                case /* sid.v1.machine.MachineUserType machine_type */ 4:
-                    message.machineType = reader.int32();
-                    break;
-                case /* repeated string scopes */ 5:
-                    message.scopes.push(reader.string());
-                    break;
-                case /* repeated string ip_allowlist */ 7:
-                    message.ipAllowlist.push(reader.string());
-                    break;
-                case /* int32 rate_limit_rpm */ 8:
-                    message.rateLimitRpm = reader.int32();
-                    break;
-                case /* int32 max_token_lifetime */ 9:
-                    message.maxTokenLifetime = reader.int32();
-                    break;
-                case /* google.protobuf.Timestamp expires_at */ 10:
-                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: CreateMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string project_id = 1; */
-        if (message.projectId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.projectId);
-        /* string display_name = 2; */
-        if (message.displayName !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.displayName);
-        /* string description = 3; */
-        if (message.description !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.description);
-        /* sid.v1.machine.MachineUserType machine_type = 4; */
-        if (message.machineType !== 0)
-            writer.tag(4, WireType.Varint).int32(message.machineType);
-        /* repeated string scopes = 5; */
-        for (let i = 0; i < message.scopes.length; i++)
-            writer.tag(5, WireType.LengthDelimited).string(message.scopes[i]);
-        /* repeated string ip_allowlist = 7; */
-        for (let i = 0; i < message.ipAllowlist.length; i++)
-            writer.tag(7, WireType.LengthDelimited).string(message.ipAllowlist[i]);
-        /* int32 rate_limit_rpm = 8; */
-        if (message.rateLimitRpm !== 0)
-            writer.tag(8, WireType.Varint).int32(message.rateLimitRpm);
-        /* int32 max_token_lifetime = 9; */
-        if (message.maxTokenLifetime !== 0)
-            writer.tag(9, WireType.Varint).int32(message.maxTokenLifetime);
-        /* google.protobuf.Timestamp expires_at = 10; */
-        if (message.expiresAt)
-            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(10, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.CreateMachineUserRequest
- */
-export const CreateMachineUserRequest = new CreateMachineUserRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class CreateMachineUserResponse$Type extends MessageType<CreateMachineUserResponse> {
-    constructor() {
-        super("sid.v1.machine.CreateMachineUserResponse", [
-            { no: 1, name: "machine_user", kind: "message", T: () => MachineUserInfo }
-        ]);
-    }
-    create(value?: PartialMessage<CreateMachineUserResponse>): CreateMachineUserResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        if (value !== undefined)
-            reflectionMergePartial<CreateMachineUserResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: CreateMachineUserResponse): CreateMachineUserResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* sid.v1.machine.MachineUserInfo machine_user */ 1:
-                    message.machineUser = MachineUserInfo.internalBinaryRead(reader, reader.uint32(), options, message.machineUser);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: CreateMachineUserResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* sid.v1.machine.MachineUserInfo machine_user = 1; */
-        if (message.machineUser)
-            MachineUserInfo.internalBinaryWrite(message.machineUser, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.CreateMachineUserResponse
- */
-export const CreateMachineUserResponse = new CreateMachineUserResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class GetMachineUserRequest$Type extends MessageType<GetMachineUserRequest> {
-    constructor() {
-        super("sid.v1.machine.GetMachineUserRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<GetMachineUserRequest>): GetMachineUserRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        if (value !== undefined)
-            reflectionMergePartial<GetMachineUserRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GetMachineUserRequest): GetMachineUserRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: GetMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.GetMachineUserRequest
- */
-export const GetMachineUserRequest = new GetMachineUserRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class MachineUserResponse$Type extends MessageType<MachineUserResponse> {
-    constructor() {
-        super("sid.v1.machine.MachineUserResponse", [
-            { no: 1, name: "machine_user", kind: "message", T: () => MachineUserInfo }
-        ]);
-    }
-    create(value?: PartialMessage<MachineUserResponse>): MachineUserResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        if (value !== undefined)
-            reflectionMergePartial<MachineUserResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: MachineUserResponse): MachineUserResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* sid.v1.machine.MachineUserInfo machine_user */ 1:
-                    message.machineUser = MachineUserInfo.internalBinaryRead(reader, reader.uint32(), options, message.machineUser);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: MachineUserResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* sid.v1.machine.MachineUserInfo machine_user = 1; */
-        if (message.machineUser)
-            MachineUserInfo.internalBinaryWrite(message.machineUser, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.MachineUserResponse
- */
-export const MachineUserResponse = new MachineUserResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class UpdateMachineUserRequest$Type extends MessageType<UpdateMachineUserRequest> {
-    constructor() {
-        super("sid.v1.machine.UpdateMachineUserRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "description", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
-            { no: 6, name: "ip_allowlist", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ },
-            { no: 7, name: "rate_limit_rpm", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
-            { no: 8, name: "max_token_lifetime", kind: "scalar", T: 5 /*ScalarType.INT32*/ },
-            { no: 9, name: "expires_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<UpdateMachineUserRequest>): UpdateMachineUserRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        message.displayName = "";
-        message.description = "";
-        message.scopes = [];
-        message.ipAllowlist = [];
-        message.rateLimitRpm = 0;
-        message.maxTokenLifetime = 0;
-        if (value !== undefined)
-            reflectionMergePartial<UpdateMachineUserRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: UpdateMachineUserRequest): UpdateMachineUserRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                case /* string display_name */ 2:
-                    message.displayName = reader.string();
-                    break;
-                case /* string description */ 3:
-                    message.description = reader.string();
-                    break;
-                case /* repeated string scopes */ 4:
-                    message.scopes.push(reader.string());
-                    break;
-                case /* repeated string ip_allowlist */ 6:
-                    message.ipAllowlist.push(reader.string());
-                    break;
-                case /* int32 rate_limit_rpm */ 7:
-                    message.rateLimitRpm = reader.int32();
-                    break;
-                case /* int32 max_token_lifetime */ 8:
-                    message.maxTokenLifetime = reader.int32();
-                    break;
-                case /* google.protobuf.Timestamp expires_at */ 9:
-                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: UpdateMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        /* string display_name = 2; */
-        if (message.displayName !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.displayName);
-        /* string description = 3; */
-        if (message.description !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.description);
-        /* repeated string scopes = 4; */
-        for (let i = 0; i < message.scopes.length; i++)
-            writer.tag(4, WireType.LengthDelimited).string(message.scopes[i]);
-        /* repeated string ip_allowlist = 6; */
-        for (let i = 0; i < message.ipAllowlist.length; i++)
-            writer.tag(6, WireType.LengthDelimited).string(message.ipAllowlist[i]);
-        /* int32 rate_limit_rpm = 7; */
-        if (message.rateLimitRpm !== 0)
-            writer.tag(7, WireType.Varint).int32(message.rateLimitRpm);
-        /* int32 max_token_lifetime = 8; */
-        if (message.maxTokenLifetime !== 0)
-            writer.tag(8, WireType.Varint).int32(message.maxTokenLifetime);
-        /* google.protobuf.Timestamp expires_at = 9; */
-        if (message.expiresAt)
-            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(9, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.UpdateMachineUserRequest
- */
-export const UpdateMachineUserRequest = new UpdateMachineUserRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class DeleteMachineUserRequest$Type extends MessageType<DeleteMachineUserRequest> {
-    constructor() {
-        super("sid.v1.machine.DeleteMachineUserRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<DeleteMachineUserRequest>): DeleteMachineUserRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        if (value !== undefined)
-            reflectionMergePartial<DeleteMachineUserRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeleteMachineUserRequest): DeleteMachineUserRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: DeleteMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.DeleteMachineUserRequest
- */
-export const DeleteMachineUserRequest = new DeleteMachineUserRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class DeleteMachineUserResponse$Type extends MessageType<DeleteMachineUserResponse> {
-    constructor() {
-        super("sid.v1.machine.DeleteMachineUserResponse", []);
-    }
-    create(value?: PartialMessage<DeleteMachineUserResponse>): DeleteMachineUserResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        if (value !== undefined)
-            reflectionMergePartial<DeleteMachineUserResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DeleteMachineUserResponse): DeleteMachineUserResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: DeleteMachineUserResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.DeleteMachineUserResponse
- */
-export const DeleteMachineUserResponse = new DeleteMachineUserResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ListMachineUsersRequest$Type extends MessageType<ListMachineUsersRequest> {
-    constructor() {
-        super("sid.v1.machine.ListMachineUsersRequest", [
-            { no: 1, name: "project_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<ListMachineUsersRequest>): ListMachineUsersRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.projectId = "";
-        if (value !== undefined)
-            reflectionMergePartial<ListMachineUsersRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListMachineUsersRequest): ListMachineUsersRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string project_id */ 1:
-                    message.projectId = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ListMachineUsersRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string project_id = 1; */
-        if (message.projectId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.projectId);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.ListMachineUsersRequest
- */
-export const ListMachineUsersRequest = new ListMachineUsersRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ListMachineUsersResponse$Type extends MessageType<ListMachineUsersResponse> {
-    constructor() {
-        super("sid.v1.machine.ListMachineUsersResponse", [
-            { no: 1, name: "machine_users", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => MachineUserInfo }
-        ]);
-    }
-    create(value?: PartialMessage<ListMachineUsersResponse>): ListMachineUsersResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUsers = [];
-        if (value !== undefined)
-            reflectionMergePartial<ListMachineUsersResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListMachineUsersResponse): ListMachineUsersResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* repeated sid.v1.machine.MachineUserInfo machine_users */ 1:
-                    message.machineUsers.push(MachineUserInfo.internalBinaryRead(reader, reader.uint32(), options));
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ListMachineUsersResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* repeated sid.v1.machine.MachineUserInfo machine_users = 1; */
-        for (let i = 0; i < message.machineUsers.length; i++)
-            MachineUserInfo.internalBinaryWrite(message.machineUsers[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.ListMachineUsersResponse
- */
-export const ListMachineUsersResponse = new ListMachineUsersResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class SuspendMachineUserRequest$Type extends MessageType<SuspendMachineUserRequest> {
-    constructor() {
-        super("sid.v1.machine.SuspendMachineUserRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<SuspendMachineUserRequest>): SuspendMachineUserRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        if (value !== undefined)
-            reflectionMergePartial<SuspendMachineUserRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: SuspendMachineUserRequest): SuspendMachineUserRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: SuspendMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.SuspendMachineUserRequest
- */
-export const SuspendMachineUserRequest = new SuspendMachineUserRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ReactivateMachineUserRequest$Type extends MessageType<ReactivateMachineUserRequest> {
-    constructor() {
-        super("sid.v1.machine.ReactivateMachineUserRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<ReactivateMachineUserRequest>): ReactivateMachineUserRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        if (value !== undefined)
-            reflectionMergePartial<ReactivateMachineUserRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ReactivateMachineUserRequest): ReactivateMachineUserRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ReactivateMachineUserRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.ReactivateMachineUserRequest
- */
-export const ReactivateMachineUserRequest = new ReactivateMachineUserRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class AddMachineCredentialRequest$Type extends MessageType<AddMachineCredentialRequest> {
-    constructor() {
-        super("sid.v1.machine.AddMachineCredentialRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "credential_type", kind: "enum", T: () => ["sid.v1.machine.MachineCredentialType", MachineCredentialType, "MACHINE_CREDENTIAL_TYPE_"] },
-            { no: 3, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "public_key_pem", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 5, name: "expires_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<AddMachineCredentialRequest>): AddMachineCredentialRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        message.credentialType = 0;
-        message.algorithm = "";
-        message.publicKeyPem = "";
-        if (value !== undefined)
-            reflectionMergePartial<AddMachineCredentialRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AddMachineCredentialRequest): AddMachineCredentialRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                case /* sid.v1.machine.MachineCredentialType credential_type */ 2:
-                    message.credentialType = reader.int32();
-                    break;
-                case /* string algorithm */ 3:
-                    message.algorithm = reader.string();
-                    break;
-                case /* string public_key_pem */ 4:
-                    message.publicKeyPem = reader.string();
-                    break;
-                case /* google.protobuf.Timestamp expires_at */ 5:
-                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: AddMachineCredentialRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        /* sid.v1.machine.MachineCredentialType credential_type = 2; */
-        if (message.credentialType !== 0)
-            writer.tag(2, WireType.Varint).int32(message.credentialType);
-        /* string algorithm = 3; */
-        if (message.algorithm !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.algorithm);
-        /* string public_key_pem = 4; */
-        if (message.publicKeyPem !== "")
-            writer.tag(4, WireType.LengthDelimited).string(message.publicKeyPem);
-        /* google.protobuf.Timestamp expires_at = 5; */
-        if (message.expiresAt)
-            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(5, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.AddMachineCredentialRequest
- */
-export const AddMachineCredentialRequest = new AddMachineCredentialRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class AddMachineCredentialResponse$Type extends MessageType<AddMachineCredentialResponse> {
-    constructor() {
-        super("sid.v1.machine.AddMachineCredentialResponse", [
-            { no: 1, name: "credential", kind: "message", T: () => MachineCredentialInfo },
-            { no: 2, name: "client_secret", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<AddMachineCredentialResponse>): AddMachineCredentialResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.clientSecret = "";
-        if (value !== undefined)
-            reflectionMergePartial<AddMachineCredentialResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AddMachineCredentialResponse): AddMachineCredentialResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* sid.v1.machine.MachineCredentialInfo credential */ 1:
-                    message.credential = MachineCredentialInfo.internalBinaryRead(reader, reader.uint32(), options, message.credential);
-                    break;
-                case /* string client_secret */ 2:
-                    message.clientSecret = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: AddMachineCredentialResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* sid.v1.machine.MachineCredentialInfo credential = 1; */
-        if (message.credential)
-            MachineCredentialInfo.internalBinaryWrite(message.credential, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        /* string client_secret = 2; */
-        if (message.clientSecret !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.clientSecret);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.AddMachineCredentialResponse
- */
-export const AddMachineCredentialResponse = new AddMachineCredentialResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class RevokeMachineCredentialRequest$Type extends MessageType<RevokeMachineCredentialRequest> {
-    constructor() {
-        super("sid.v1.machine.RevokeMachineCredentialRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "kid", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<RevokeMachineCredentialRequest>): RevokeMachineCredentialRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        message.kid = "";
-        if (value !== undefined)
-            reflectionMergePartial<RevokeMachineCredentialRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeMachineCredentialRequest): RevokeMachineCredentialRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                case /* string kid */ 2:
-                    message.kid = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: RevokeMachineCredentialRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        /* string kid = 2; */
-        if (message.kid !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.kid);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.RevokeMachineCredentialRequest
- */
-export const RevokeMachineCredentialRequest = new RevokeMachineCredentialRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class RevokeMachineCredentialResponse$Type extends MessageType<RevokeMachineCredentialResponse> {
-    constructor() {
-        super("sid.v1.machine.RevokeMachineCredentialResponse", []);
-    }
-    create(value?: PartialMessage<RevokeMachineCredentialResponse>): RevokeMachineCredentialResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        if (value !== undefined)
-            reflectionMergePartial<RevokeMachineCredentialResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeMachineCredentialResponse): RevokeMachineCredentialResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: RevokeMachineCredentialResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.RevokeMachineCredentialResponse
- */
-export const RevokeMachineCredentialResponse = new RevokeMachineCredentialResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ListMachineCredentialsRequest$Type extends MessageType<ListMachineCredentialsRequest> {
-    constructor() {
-        super("sid.v1.machine.ListMachineCredentialsRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<ListMachineCredentialsRequest>): ListMachineCredentialsRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        if (value !== undefined)
-            reflectionMergePartial<ListMachineCredentialsRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListMachineCredentialsRequest): ListMachineCredentialsRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ListMachineCredentialsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.ListMachineCredentialsRequest
- */
-export const ListMachineCredentialsRequest = new ListMachineCredentialsRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ListMachineCredentialsResponse$Type extends MessageType<ListMachineCredentialsResponse> {
-    constructor() {
-        super("sid.v1.machine.ListMachineCredentialsResponse", [
-            { no: 1, name: "credentials", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => MachineCredentialInfo }
-        ]);
-    }
-    create(value?: PartialMessage<ListMachineCredentialsResponse>): ListMachineCredentialsResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.credentials = [];
-        if (value !== undefined)
-            reflectionMergePartial<ListMachineCredentialsResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListMachineCredentialsResponse): ListMachineCredentialsResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* repeated sid.v1.machine.MachineCredentialInfo credentials */ 1:
-                    message.credentials.push(MachineCredentialInfo.internalBinaryRead(reader, reader.uint32(), options));
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ListMachineCredentialsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* repeated sid.v1.machine.MachineCredentialInfo credentials = 1; */
-        for (let i = 0; i < message.credentials.length; i++)
-            MachineCredentialInfo.internalBinaryWrite(message.credentials[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.ListMachineCredentialsResponse
- */
-export const ListMachineCredentialsResponse = new ListMachineCredentialsResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class RotateMachineCredentialRequest$Type extends MessageType<RotateMachineCredentialRequest> {
-    constructor() {
-        super("sid.v1.machine.RotateMachineCredentialRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "kid", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "algorithm", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "public_key_pem", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 5, name: "expires_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<RotateMachineCredentialRequest>): RotateMachineCredentialRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        message.kid = "";
-        message.algorithm = "";
-        message.publicKeyPem = "";
-        if (value !== undefined)
-            reflectionMergePartial<RotateMachineCredentialRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RotateMachineCredentialRequest): RotateMachineCredentialRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                case /* string kid */ 2:
-                    message.kid = reader.string();
-                    break;
-                case /* string algorithm */ 3:
-                    message.algorithm = reader.string();
-                    break;
-                case /* string public_key_pem */ 4:
-                    message.publicKeyPem = reader.string();
-                    break;
-                case /* google.protobuf.Timestamp expires_at */ 5:
-                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: RotateMachineCredentialRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        /* string kid = 2; */
-        if (message.kid !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.kid);
-        /* string algorithm = 3; */
-        if (message.algorithm !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.algorithm);
-        /* string public_key_pem = 4; */
-        if (message.publicKeyPem !== "")
-            writer.tag(4, WireType.LengthDelimited).string(message.publicKeyPem);
-        /* google.protobuf.Timestamp expires_at = 5; */
-        if (message.expiresAt)
-            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(5, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.RotateMachineCredentialRequest
- */
-export const RotateMachineCredentialRequest = new RotateMachineCredentialRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class RotateMachineCredentialResponse$Type extends MessageType<RotateMachineCredentialResponse> {
-    constructor() {
-        super("sid.v1.machine.RotateMachineCredentialResponse", [
-            { no: 1, name: "old_credential", kind: "message", T: () => MachineCredentialInfo },
-            { no: 2, name: "new_credential", kind: "message", T: () => MachineCredentialInfo },
-            { no: 3, name: "client_secret", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<RotateMachineCredentialResponse>): RotateMachineCredentialResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.clientSecret = "";
-        if (value !== undefined)
-            reflectionMergePartial<RotateMachineCredentialResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RotateMachineCredentialResponse): RotateMachineCredentialResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* sid.v1.machine.MachineCredentialInfo old_credential */ 1:
-                    message.oldCredential = MachineCredentialInfo.internalBinaryRead(reader, reader.uint32(), options, message.oldCredential);
-                    break;
-                case /* sid.v1.machine.MachineCredentialInfo new_credential */ 2:
-                    message.newCredential = MachineCredentialInfo.internalBinaryRead(reader, reader.uint32(), options, message.newCredential);
-                    break;
-                case /* string client_secret */ 3:
-                    message.clientSecret = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: RotateMachineCredentialResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* sid.v1.machine.MachineCredentialInfo old_credential = 1; */
-        if (message.oldCredential)
-            MachineCredentialInfo.internalBinaryWrite(message.oldCredential, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        /* sid.v1.machine.MachineCredentialInfo new_credential = 2; */
-        if (message.newCredential)
-            MachineCredentialInfo.internalBinaryWrite(message.newCredential, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
-        /* string client_secret = 3; */
-        if (message.clientSecret !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.clientSecret);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.RotateMachineCredentialResponse
- */
-export const RotateMachineCredentialResponse = new RotateMachineCredentialResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class GrantImpersonationRequest$Type extends MessageType<GrantImpersonationRequest> {
-    constructor() {
-        super("sid.v1.machine.GrantImpersonationRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "target_type", kind: "enum", T: () => ["sid.v1.machine.ImpersonationTargetType", ImpersonationTargetType, "IMPERSONATION_TARGET_TYPE_"] },
-            { no: 3, name: "target", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "allowed_scopes", kind: "scalar", repeat: 2 /*RepeatType.UNPACKED*/, T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<GrantImpersonationRequest>): GrantImpersonationRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        message.targetType = 0;
-        message.target = "";
-        message.allowedScopes = [];
-        if (value !== undefined)
-            reflectionMergePartial<GrantImpersonationRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GrantImpersonationRequest): GrantImpersonationRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                case /* sid.v1.machine.ImpersonationTargetType target_type */ 2:
-                    message.targetType = reader.int32();
-                    break;
-                case /* string target */ 3:
-                    message.target = reader.string();
-                    break;
-                case /* repeated string allowed_scopes */ 4:
-                    message.allowedScopes.push(reader.string());
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: GrantImpersonationRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        /* sid.v1.machine.ImpersonationTargetType target_type = 2; */
-        if (message.targetType !== 0)
-            writer.tag(2, WireType.Varint).int32(message.targetType);
-        /* string target = 3; */
-        if (message.target !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.target);
-        /* repeated string allowed_scopes = 4; */
-        for (let i = 0; i < message.allowedScopes.length; i++)
-            writer.tag(4, WireType.LengthDelimited).string(message.allowedScopes[i]);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.GrantImpersonationRequest
- */
-export const GrantImpersonationRequest = new GrantImpersonationRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class GrantImpersonationResponse$Type extends MessageType<GrantImpersonationResponse> {
-    constructor() {
-        super("sid.v1.machine.GrantImpersonationResponse", [
-            { no: 1, name: "grant", kind: "message", T: () => ImpersonationGrantInfo }
-        ]);
-    }
-    create(value?: PartialMessage<GrantImpersonationResponse>): GrantImpersonationResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        if (value !== undefined)
-            reflectionMergePartial<GrantImpersonationResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GrantImpersonationResponse): GrantImpersonationResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* sid.v1.machine.ImpersonationGrantInfo grant */ 1:
-                    message.grant = ImpersonationGrantInfo.internalBinaryRead(reader, reader.uint32(), options, message.grant);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: GrantImpersonationResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* sid.v1.machine.ImpersonationGrantInfo grant = 1; */
-        if (message.grant)
-            ImpersonationGrantInfo.internalBinaryWrite(message.grant, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.GrantImpersonationResponse
- */
-export const GrantImpersonationResponse = new GrantImpersonationResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class RevokeImpersonationRequest$Type extends MessageType<RevokeImpersonationRequest> {
-    constructor() {
-        super("sid.v1.machine.RevokeImpersonationRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "target_type", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "target", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<RevokeImpersonationRequest>): RevokeImpersonationRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        message.targetType = "";
-        message.target = "";
-        if (value !== undefined)
-            reflectionMergePartial<RevokeImpersonationRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeImpersonationRequest): RevokeImpersonationRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                case /* string target_type */ 2:
-                    message.targetType = reader.string();
-                    break;
-                case /* string target */ 3:
-                    message.target = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: RevokeImpersonationRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        /* string target_type = 2; */
-        if (message.targetType !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.targetType);
-        /* string target = 3; */
-        if (message.target !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.target);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.RevokeImpersonationRequest
- */
-export const RevokeImpersonationRequest = new RevokeImpersonationRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class RevokeImpersonationResponse$Type extends MessageType<RevokeImpersonationResponse> {
-    constructor() {
-        super("sid.v1.machine.RevokeImpersonationResponse", []);
-    }
-    create(value?: PartialMessage<RevokeImpersonationResponse>): RevokeImpersonationResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        if (value !== undefined)
-            reflectionMergePartial<RevokeImpersonationResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: RevokeImpersonationResponse): RevokeImpersonationResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: RevokeImpersonationResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.RevokeImpersonationResponse
- */
-export const RevokeImpersonationResponse = new RevokeImpersonationResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ListImpersonationGrantsRequest$Type extends MessageType<ListImpersonationGrantsRequest> {
-    constructor() {
-        super("sid.v1.machine.ListImpersonationGrantsRequest", [
-            { no: 1, name: "machine_user_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<ListImpersonationGrantsRequest>): ListImpersonationGrantsRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.machineUserId = "";
-        if (value !== undefined)
-            reflectionMergePartial<ListImpersonationGrantsRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListImpersonationGrantsRequest): ListImpersonationGrantsRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string machine_user_id */ 1:
-                    message.machineUserId = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ListImpersonationGrantsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string machine_user_id = 1; */
-        if (message.machineUserId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.machineUserId);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.ListImpersonationGrantsRequest
- */
-export const ListImpersonationGrantsRequest = new ListImpersonationGrantsRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ListImpersonationGrantsResponse$Type extends MessageType<ListImpersonationGrantsResponse> {
-    constructor() {
-        super("sid.v1.machine.ListImpersonationGrantsResponse", [
-            { no: 1, name: "grants", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => ImpersonationGrantInfo }
-        ]);
-    }
-    create(value?: PartialMessage<ListImpersonationGrantsResponse>): ListImpersonationGrantsResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.grants = [];
-        if (value !== undefined)
-            reflectionMergePartial<ListImpersonationGrantsResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListImpersonationGrantsResponse): ListImpersonationGrantsResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* repeated sid.v1.machine.ImpersonationGrantInfo grants */ 1:
-                    message.grants.push(ImpersonationGrantInfo.internalBinaryRead(reader, reader.uint32(), options));
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ListImpersonationGrantsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* repeated sid.v1.machine.ImpersonationGrantInfo grants = 1; */
-        for (let i = 0; i < message.grants.length; i++)
-            ImpersonationGrantInfo.internalBinaryWrite(message.grants[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.machine.ListImpersonationGrantsResponse
- */
-export const ListImpersonationGrantsResponse = new ListImpersonationGrantsResponse$Type();
-/**
- * @generated ServiceType for protobuf service sid.v1.machine.MachineUserService
- */
-export const MachineUserService = new ServiceType("sid.v1.machine.MachineUserService", [
-    { name: "CreateMachineUser", options: { "google.api.http": { post: "/v1/machine-users", body: "*" } }, I: CreateMachineUserRequest, O: CreateMachineUserResponse },
-    { name: "GetMachineUser", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/machine-users/{machine_user_id}" } }, I: GetMachineUserRequest, O: MachineUserResponse },
-    { name: "UpdateMachineUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { patch: "/v1/machine-users/{machine_user_id}", body: "*" } }, I: UpdateMachineUserRequest, O: MachineUserResponse },
-    { name: "DeleteMachineUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/machine-users/{machine_user_id}" } }, I: DeleteMachineUserRequest, O: DeleteMachineUserResponse },
-    { name: "ListMachineUsers", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/projects/{project_id}/machine-users" } }, I: ListMachineUsersRequest, O: ListMachineUsersResponse },
-    { name: "SuspendMachineUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/suspend", body: "*" } }, I: SuspendMachineUserRequest, O: MachineUserResponse },
-    { name: "ReactivateMachineUser", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/reactivate", body: "*" } }, I: ReactivateMachineUserRequest, O: MachineUserResponse },
-    { name: "AddMachineCredential", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/credentials", body: "*" } }, I: AddMachineCredentialRequest, O: AddMachineCredentialResponse },
-    { name: "RevokeMachineCredential", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/machine-users/{machine_user_id}/credentials/{kid}" } }, I: RevokeMachineCredentialRequest, O: RevokeMachineCredentialResponse },
-    { name: "ListMachineCredentials", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/machine-users/{machine_user_id}/credentials" } }, I: ListMachineCredentialsRequest, O: ListMachineCredentialsResponse },
-    { name: "RotateMachineCredential", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/credentials/{kid}/rotate", body: "*" } }, I: RotateMachineCredentialRequest, O: RotateMachineCredentialResponse },
-    { name: "GrantImpersonation", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/machine-users/{machine_user_id}/impersonation", body: "*" } }, I: GrantImpersonationRequest, O: GrantImpersonationResponse },
-    { name: "RevokeImpersonation", idempotency: "IDEMPOTENT", options: { "google.api.http": { delete: "/v1/machine-users/{machine_user_id}/impersonation/{target_type}/{target}" } }, I: RevokeImpersonationRequest, O: RevokeImpersonationResponse },
-    { name: "ListImpersonationGrants", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/machine-users/{machine_user_id}/impersonation" } }, I: ListImpersonationGrantsRequest, O: ListImpersonationGrantsResponse }
-]);