@structured-id/ui-core 2.0.0 → 3.0.0

package/src/generated/sid/v1/authz/governance.ts

@@ -1,875 +0,0 @@
-// @generated by protobuf-ts 2.11.1 with parameter client_generic,generate_dependencies
-// @generated from protobuf file "sid/v1/authz/governance.proto" (package "sid.v1.authz", syntax proto3)
-// tslint:disable
-import { ServiceType } from "@protobuf-ts/runtime-rpc";
-import type { BinaryWriteOptions } from "@protobuf-ts/runtime";
-import type { IBinaryWriter } from "@protobuf-ts/runtime";
-import { WireType } from "@protobuf-ts/runtime";
-import type { BinaryReadOptions } from "@protobuf-ts/runtime";
-import type { IBinaryReader } from "@protobuf-ts/runtime";
-import { UnknownFieldHandler } from "@protobuf-ts/runtime";
-import type { PartialMessage } from "@protobuf-ts/runtime";
-import { reflectionMergePartial } from "@protobuf-ts/runtime";
-import { MessageType } from "@protobuf-ts/runtime";
-import { PaginationResponse } from "../common/pagination";
-import { PaginationRequest } from "../common/pagination";
-import { Timestamp } from "../../../google/protobuf/timestamp";
-import { Duration } from "../../../google/protobuf/duration";
-// ══════════════════════════════════════════════════════════════════════════
-// Access Requests
-// ══════════════════════════════════════════════════════════════════════════
-
-/**
- * @generated from protobuf message sid.v1.authz.AccessRequestMessage
- */
-export interface AccessRequestMessage {
-    /**
-     * Profile asking for the role (UUID). The caller itself, or anyone when an
-     * administrator files the request on its behalf.
-     *
-     * @generated from protobuf field: string requester_profile_id = 1
-     */
-    requesterProfileId: string;
-    /**
-     * Key of the requested role within `project_id`. A role the project does
-     * not define is NOT_FOUND; nothing is stored.
-     *
-     * @generated from protobuf field: string requested_role = 2
-     */
-    requestedRole: string;
-    /**
-     * Why the requester needs the role, shown to the approver.
-     *
-     * @generated from protobuf field: string justification = 3
-     */
-    justification: string;
-    /**
-     * How long the role is wanted; absent = permanent. On approval the
-     * assignment expires after it.
-     *
-     * @generated from protobuf field: optional google.protobuf.Duration requested_duration = 4
-     */
-    requestedDuration?: Duration;
-    /**
-     * Project (UUID) whose role is requested: roles are defined per project.
-     * An unknown project is NOT_FOUND.
-     *
-     * @generated from protobuf field: string project_id = 5
-     */
-    projectId: string;
-}
-/**
- * @generated from protobuf message sid.v1.authz.AccessRequestResponse
- */
-export interface AccessRequestResponse {
-    /**
-     * @generated from protobuf field: string request_id = 1
-     */
-    requestId: string;
-    /**
-     * @generated from protobuf field: sid.v1.authz.AccessRequestStatus status = 2
-     */
-    status: AccessRequestStatus;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp created_at = 3
-     */
-    createdAt?: Timestamp;
-}
-/**
- * @generated from protobuf message sid.v1.authz.ListPendingRequestsRequest
- */
-export interface ListPendingRequestsRequest {
-    /**
-     * @generated from protobuf field: sid.v1.common.PaginationRequest pagination = 1
-     */
-    pagination?: PaginationRequest;
-}
-/**
- * @generated from protobuf message sid.v1.authz.ListPendingRequestsResponse
- */
-export interface ListPendingRequestsResponse {
-    /**
-     * @generated from protobuf field: repeated sid.v1.authz.AccessRequestDetail requests = 1
-     */
-    requests: AccessRequestDetail[];
-    /**
-     * @generated from protobuf field: sid.v1.common.PaginationResponse pagination = 2
-     */
-    pagination?: PaginationResponse;
-}
-/**
- * @generated from protobuf message sid.v1.authz.AccessRequestDetail
- */
-export interface AccessRequestDetail {
-    /**
-     * @generated from protobuf field: string request_id = 1
-     */
-    requestId: string;
-    /**
-     * @generated from protobuf field: string requester_profile_id = 2
-     */
-    requesterProfileId: string;
-    /**
-     * @generated from protobuf field: string requester_display_name = 3
-     */
-    requesterDisplayName: string;
-    /**
-     * @generated from protobuf field: string requested_role = 4
-     */
-    requestedRole: string;
-    /**
-     * @generated from protobuf field: string justification = 5
-     */
-    justification: string;
-    /**
-     * @generated from protobuf field: optional google.protobuf.Duration requested_duration = 6
-     */
-    requestedDuration?: Duration;
-    /**
-     * @generated from protobuf field: sid.v1.authz.AccessRequestStatus status = 7
-     */
-    status: AccessRequestStatus;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp created_at = 8
-     */
-    createdAt?: Timestamp;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 9
-     */
-    expiresAt?: Timestamp; // Request auto-denied after this
-}
-/**
- * @generated from protobuf message sid.v1.authz.DecideRequestRequest
- */
-export interface DecideRequestRequest {
-    /**
-     * Access request (UUID) being decided.
-     *
-     * @generated from protobuf field: string request_id = 1
-     */
-    requestId: string;
-    /**
-     * Approve (grant the role) or deny. An approval and the role assignment it
-     * makes are recorded together: when the role can no longer be assigned
-     * (it was deleted) the call fails FAILED_PRECONDITION and the request
-     * stays pending.
-     *
-     * @generated from protobuf field: bool approved = 2
-     */
-    approved: boolean;
-    /**
-     * Reviewer's comment, recorded on the request.
-     *
-     * @generated from protobuf field: string reason = 3
-     */
-    reason: string;
-}
-/**
- * @generated from protobuf message sid.v1.authz.DecideRequestResponse
- */
-export interface DecideRequestResponse {
-    /**
-     * @generated from protobuf field: string request_id = 1
-     */
-    requestId: string;
-    /**
-     * @generated from protobuf field: sid.v1.authz.AccessRequestStatus status = 2
-     */
-    status: AccessRequestStatus;
-}
-// ══════════════════════════════════════════════════════════════════════════
-// Temporary Roles
-// ══════════════════════════════════════════════════════════════════════════
-
-/**
- * @generated from protobuf message sid.v1.authz.GrantTemporaryRoleRequest
- */
-export interface GrantTemporaryRoleRequest {
-    /**
-     * Profile receiving the role (UUID); an unknown profile is NOT_FOUND.
-     *
-     * @generated from protobuf field: string profile_id = 1
-     */
-    profileId: string;
-    /**
-     * Key of the role within `project_id`; an unknown role is NOT_FOUND.
-     *
-     * @generated from protobuf field: string role = 2
-     */
-    role: string;
-    /**
-     * When the assignment is revoked automatically; must be in the future.
-     *
-     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 3
-     */
-    expiresAt?: Timestamp;
-    /**
-     * Why the role is granted, recorded in the audit trail.
-     *
-     * @generated from protobuf field: string justification = 4
-     */
-    justification: string;
-    /**
-     * Project (UUID) whose role is granted: roles are defined per project.
-     *
-     * @generated from protobuf field: string project_id = 5
-     */
-    projectId: string;
-}
-/**
- * @generated from protobuf message sid.v1.authz.GrantTemporaryRoleResponse
- */
-export interface GrantTemporaryRoleResponse {
-    /**
-     * @generated from protobuf field: string assignment_id = 1
-     */
-    assignmentId: string;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp expires_at = 2
-     */
-    expiresAt?: Timestamp;
-}
-// ══════════════════════════════════════════════════════════════════════════
-// Enums
-// ══════════════════════════════════════════════════════════════════════════
-
-/**
- * @generated from protobuf enum sid.v1.authz.AccessRequestStatus
- */
-export enum AccessRequestStatus {
-    /**
-     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_PENDING = 1;
-     */
-    PENDING = 1,
-    /**
-     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_APPROVED = 2;
-     */
-    APPROVED = 2,
-    /**
-     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_DENIED = 3;
-     */
-    DENIED = 3,
-    /**
-     * Request timed out without decision
-     *
-     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_EXPIRED = 4;
-     */
-    EXPIRED = 4,
-    /**
-     * Requester cancelled
-     *
-     * @generated from protobuf enum value: ACCESS_REQUEST_STATUS_CANCELLED = 5;
-     */
-    CANCELLED = 5
-}
-// @generated message type with reflection information, may provide speed optimized methods
-class AccessRequestMessage$Type extends MessageType<AccessRequestMessage> {
-    constructor() {
-        super("sid.v1.authz.AccessRequestMessage", [
-            { no: 1, name: "requester_profile_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "requested_role", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "justification", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "requested_duration", kind: "message", T: () => Duration },
-            { no: 5, name: "project_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<AccessRequestMessage>): AccessRequestMessage {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.requesterProfileId = "";
-        message.requestedRole = "";
-        message.justification = "";
-        message.projectId = "";
-        if (value !== undefined)
-            reflectionMergePartial<AccessRequestMessage>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AccessRequestMessage): AccessRequestMessage {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string requester_profile_id */ 1:
-                    message.requesterProfileId = reader.string();
-                    break;
-                case /* string requested_role */ 2:
-                    message.requestedRole = reader.string();
-                    break;
-                case /* string justification */ 3:
-                    message.justification = reader.string();
-                    break;
-                case /* optional google.protobuf.Duration requested_duration */ 4:
-                    message.requestedDuration = Duration.internalBinaryRead(reader, reader.uint32(), options, message.requestedDuration);
-                    break;
-                case /* string project_id */ 5:
-                    message.projectId = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: AccessRequestMessage, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string requester_profile_id = 1; */
-        if (message.requesterProfileId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.requesterProfileId);
-        /* string requested_role = 2; */
-        if (message.requestedRole !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.requestedRole);
-        /* string justification = 3; */
-        if (message.justification !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.justification);
-        /* optional google.protobuf.Duration requested_duration = 4; */
-        if (message.requestedDuration)
-            Duration.internalBinaryWrite(message.requestedDuration, writer.tag(4, WireType.LengthDelimited).fork(), options).join();
-        /* string project_id = 5; */
-        if (message.projectId !== "")
-            writer.tag(5, WireType.LengthDelimited).string(message.projectId);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.AccessRequestMessage
- */
-export const AccessRequestMessage = new AccessRequestMessage$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class AccessRequestResponse$Type extends MessageType<AccessRequestResponse> {
-    constructor() {
-        super("sid.v1.authz.AccessRequestResponse", [
-            { no: 1, name: "request_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "status", kind: "enum", T: () => ["sid.v1.authz.AccessRequestStatus", AccessRequestStatus, "ACCESS_REQUEST_STATUS_"] },
-            { no: 3, name: "created_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<AccessRequestResponse>): AccessRequestResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.requestId = "";
-        message.status = 0;
-        if (value !== undefined)
-            reflectionMergePartial<AccessRequestResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AccessRequestResponse): AccessRequestResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string request_id */ 1:
-                    message.requestId = reader.string();
-                    break;
-                case /* sid.v1.authz.AccessRequestStatus status */ 2:
-                    message.status = reader.int32();
-                    break;
-                case /* google.protobuf.Timestamp created_at */ 3:
-                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: AccessRequestResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string request_id = 1; */
-        if (message.requestId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.requestId);
-        /* sid.v1.authz.AccessRequestStatus status = 2; */
-        if (message.status !== 0)
-            writer.tag(2, WireType.Varint).int32(message.status);
-        /* google.protobuf.Timestamp created_at = 3; */
-        if (message.createdAt)
-            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(3, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.AccessRequestResponse
- */
-export const AccessRequestResponse = new AccessRequestResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ListPendingRequestsRequest$Type extends MessageType<ListPendingRequestsRequest> {
-    constructor() {
-        super("sid.v1.authz.ListPendingRequestsRequest", [
-            { no: 1, name: "pagination", kind: "message", T: () => PaginationRequest }
-        ]);
-    }
-    create(value?: PartialMessage<ListPendingRequestsRequest>): ListPendingRequestsRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        if (value !== undefined)
-            reflectionMergePartial<ListPendingRequestsRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListPendingRequestsRequest): ListPendingRequestsRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* sid.v1.common.PaginationRequest pagination */ 1:
-                    message.pagination = PaginationRequest.internalBinaryRead(reader, reader.uint32(), options, message.pagination);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ListPendingRequestsRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* sid.v1.common.PaginationRequest pagination = 1; */
-        if (message.pagination)
-            PaginationRequest.internalBinaryWrite(message.pagination, writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.ListPendingRequestsRequest
- */
-export const ListPendingRequestsRequest = new ListPendingRequestsRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ListPendingRequestsResponse$Type extends MessageType<ListPendingRequestsResponse> {
-    constructor() {
-        super("sid.v1.authz.ListPendingRequestsResponse", [
-            { no: 1, name: "requests", kind: "message", repeat: 2 /*RepeatType.UNPACKED*/, T: () => AccessRequestDetail },
-            { no: 2, name: "pagination", kind: "message", T: () => PaginationResponse }
-        ]);
-    }
-    create(value?: PartialMessage<ListPendingRequestsResponse>): ListPendingRequestsResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.requests = [];
-        if (value !== undefined)
-            reflectionMergePartial<ListPendingRequestsResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ListPendingRequestsResponse): ListPendingRequestsResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* repeated sid.v1.authz.AccessRequestDetail requests */ 1:
-                    message.requests.push(AccessRequestDetail.internalBinaryRead(reader, reader.uint32(), options));
-                    break;
-                case /* sid.v1.common.PaginationResponse pagination */ 2:
-                    message.pagination = PaginationResponse.internalBinaryRead(reader, reader.uint32(), options, message.pagination);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: ListPendingRequestsResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* repeated sid.v1.authz.AccessRequestDetail requests = 1; */
-        for (let i = 0; i < message.requests.length; i++)
-            AccessRequestDetail.internalBinaryWrite(message.requests[i], writer.tag(1, WireType.LengthDelimited).fork(), options).join();
-        /* sid.v1.common.PaginationResponse pagination = 2; */
-        if (message.pagination)
-            PaginationResponse.internalBinaryWrite(message.pagination, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.ListPendingRequestsResponse
- */
-export const ListPendingRequestsResponse = new ListPendingRequestsResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class AccessRequestDetail$Type extends MessageType<AccessRequestDetail> {
-    constructor() {
-        super("sid.v1.authz.AccessRequestDetail", [
-            { no: 1, name: "request_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "requester_profile_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "requester_display_name", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 4, name: "requested_role", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 5, name: "justification", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 6, name: "requested_duration", kind: "message", T: () => Duration },
-            { no: 7, name: "status", kind: "enum", T: () => ["sid.v1.authz.AccessRequestStatus", AccessRequestStatus, "ACCESS_REQUEST_STATUS_"] },
-            { no: 8, name: "created_at", kind: "message", T: () => Timestamp },
-            { no: 9, name: "expires_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<AccessRequestDetail>): AccessRequestDetail {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.requestId = "";
-        message.requesterProfileId = "";
-        message.requesterDisplayName = "";
-        message.requestedRole = "";
-        message.justification = "";
-        message.status = 0;
-        if (value !== undefined)
-            reflectionMergePartial<AccessRequestDetail>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: AccessRequestDetail): AccessRequestDetail {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string request_id */ 1:
-                    message.requestId = reader.string();
-                    break;
-                case /* string requester_profile_id */ 2:
-                    message.requesterProfileId = reader.string();
-                    break;
-                case /* string requester_display_name */ 3:
-                    message.requesterDisplayName = reader.string();
-                    break;
-                case /* string requested_role */ 4:
-                    message.requestedRole = reader.string();
-                    break;
-                case /* string justification */ 5:
-                    message.justification = reader.string();
-                    break;
-                case /* optional google.protobuf.Duration requested_duration */ 6:
-                    message.requestedDuration = Duration.internalBinaryRead(reader, reader.uint32(), options, message.requestedDuration);
-                    break;
-                case /* sid.v1.authz.AccessRequestStatus status */ 7:
-                    message.status = reader.int32();
-                    break;
-                case /* google.protobuf.Timestamp created_at */ 8:
-                    message.createdAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.createdAt);
-                    break;
-                case /* google.protobuf.Timestamp expires_at */ 9:
-                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: AccessRequestDetail, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string request_id = 1; */
-        if (message.requestId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.requestId);
-        /* string requester_profile_id = 2; */
-        if (message.requesterProfileId !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.requesterProfileId);
-        /* string requester_display_name = 3; */
-        if (message.requesterDisplayName !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.requesterDisplayName);
-        /* string requested_role = 4; */
-        if (message.requestedRole !== "")
-            writer.tag(4, WireType.LengthDelimited).string(message.requestedRole);
-        /* string justification = 5; */
-        if (message.justification !== "")
-            writer.tag(5, WireType.LengthDelimited).string(message.justification);
-        /* optional google.protobuf.Duration requested_duration = 6; */
-        if (message.requestedDuration)
-            Duration.internalBinaryWrite(message.requestedDuration, writer.tag(6, WireType.LengthDelimited).fork(), options).join();
-        /* sid.v1.authz.AccessRequestStatus status = 7; */
-        if (message.status !== 0)
-            writer.tag(7, WireType.Varint).int32(message.status);
-        /* google.protobuf.Timestamp created_at = 8; */
-        if (message.createdAt)
-            Timestamp.internalBinaryWrite(message.createdAt, writer.tag(8, WireType.LengthDelimited).fork(), options).join();
-        /* google.protobuf.Timestamp expires_at = 9; */
-        if (message.expiresAt)
-            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(9, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.AccessRequestDetail
- */
-export const AccessRequestDetail = new AccessRequestDetail$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class DecideRequestRequest$Type extends MessageType<DecideRequestRequest> {
-    constructor() {
-        super("sid.v1.authz.DecideRequestRequest", [
-            { no: 1, name: "request_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "approved", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
-            { no: 3, name: "reason", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<DecideRequestRequest>): DecideRequestRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.requestId = "";
-        message.approved = false;
-        message.reason = "";
-        if (value !== undefined)
-            reflectionMergePartial<DecideRequestRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DecideRequestRequest): DecideRequestRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string request_id */ 1:
-                    message.requestId = reader.string();
-                    break;
-                case /* bool approved */ 2:
-                    message.approved = reader.bool();
-                    break;
-                case /* string reason */ 3:
-                    message.reason = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: DecideRequestRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string request_id = 1; */
-        if (message.requestId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.requestId);
-        /* bool approved = 2; */
-        if (message.approved !== false)
-            writer.tag(2, WireType.Varint).bool(message.approved);
-        /* string reason = 3; */
-        if (message.reason !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.reason);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.DecideRequestRequest
- */
-export const DecideRequestRequest = new DecideRequestRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class DecideRequestResponse$Type extends MessageType<DecideRequestResponse> {
-    constructor() {
-        super("sid.v1.authz.DecideRequestResponse", [
-            { no: 1, name: "request_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "status", kind: "enum", T: () => ["sid.v1.authz.AccessRequestStatus", AccessRequestStatus, "ACCESS_REQUEST_STATUS_"] }
-        ]);
-    }
-    create(value?: PartialMessage<DecideRequestResponse>): DecideRequestResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.requestId = "";
-        message.status = 0;
-        if (value !== undefined)
-            reflectionMergePartial<DecideRequestResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: DecideRequestResponse): DecideRequestResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string request_id */ 1:
-                    message.requestId = reader.string();
-                    break;
-                case /* sid.v1.authz.AccessRequestStatus status */ 2:
-                    message.status = reader.int32();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: DecideRequestResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string request_id = 1; */
-        if (message.requestId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.requestId);
-        /* sid.v1.authz.AccessRequestStatus status = 2; */
-        if (message.status !== 0)
-            writer.tag(2, WireType.Varint).int32(message.status);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.DecideRequestResponse
- */
-export const DecideRequestResponse = new DecideRequestResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class GrantTemporaryRoleRequest$Type extends MessageType<GrantTemporaryRoleRequest> {
-    constructor() {
-        super("sid.v1.authz.GrantTemporaryRoleRequest", [
-            { no: 1, name: "profile_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "role", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "expires_at", kind: "message", T: () => Timestamp },
-            { no: 4, name: "justification", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 5, name: "project_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value?: PartialMessage<GrantTemporaryRoleRequest>): GrantTemporaryRoleRequest {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.profileId = "";
-        message.role = "";
-        message.justification = "";
-        message.projectId = "";
-        if (value !== undefined)
-            reflectionMergePartial<GrantTemporaryRoleRequest>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GrantTemporaryRoleRequest): GrantTemporaryRoleRequest {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string profile_id */ 1:
-                    message.profileId = reader.string();
-                    break;
-                case /* string role */ 2:
-                    message.role = reader.string();
-                    break;
-                case /* google.protobuf.Timestamp expires_at */ 3:
-                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
-                    break;
-                case /* string justification */ 4:
-                    message.justification = reader.string();
-                    break;
-                case /* string project_id */ 5:
-                    message.projectId = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: GrantTemporaryRoleRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string profile_id = 1; */
-        if (message.profileId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.profileId);
-        /* string role = 2; */
-        if (message.role !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.role);
-        /* google.protobuf.Timestamp expires_at = 3; */
-        if (message.expiresAt)
-            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(3, WireType.LengthDelimited).fork(), options).join();
-        /* string justification = 4; */
-        if (message.justification !== "")
-            writer.tag(4, WireType.LengthDelimited).string(message.justification);
-        /* string project_id = 5; */
-        if (message.projectId !== "")
-            writer.tag(5, WireType.LengthDelimited).string(message.projectId);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.GrantTemporaryRoleRequest
- */
-export const GrantTemporaryRoleRequest = new GrantTemporaryRoleRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class GrantTemporaryRoleResponse$Type extends MessageType<GrantTemporaryRoleResponse> {
-    constructor() {
-        super("sid.v1.authz.GrantTemporaryRoleResponse", [
-            { no: 1, name: "assignment_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "expires_at", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value?: PartialMessage<GrantTemporaryRoleResponse>): GrantTemporaryRoleResponse {
-        const message = globalThis.Object.create((this.messagePrototype!));
-        message.assignmentId = "";
-        if (value !== undefined)
-            reflectionMergePartial<GrantTemporaryRoleResponse>(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: GrantTemporaryRoleResponse): GrantTemporaryRoleResponse {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string assignment_id */ 1:
-                    message.assignmentId = reader.string();
-                    break;
-                case /* google.protobuf.Timestamp expires_at */ 2:
-                    message.expiresAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.expiresAt);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message: GrantTemporaryRoleResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter {
-        /* string assignment_id = 1; */
-        if (message.assignmentId !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.assignmentId);
-        /* google.protobuf.Timestamp expires_at = 2; */
-        if (message.expiresAt)
-            Timestamp.internalBinaryWrite(message.expiresAt, writer.tag(2, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message sid.v1.authz.GrantTemporaryRoleResponse
- */
-export const GrantTemporaryRoleResponse = new GrantTemporaryRoleResponse$Type();
-/**
- * @generated ServiceType for protobuf service sid.v1.authz.GovernanceService
- */
-export const GovernanceService = new ServiceType("sid.v1.authz.GovernanceService", [
-    { name: "RequestAccess", options: { "google.api.http": { post: "/v1/governance/access-requests", body: "*" } }, I: AccessRequestMessage, O: AccessRequestResponse },
-    { name: "ListPendingRequests", idempotency: "NO_SIDE_EFFECTS", options: { "google.api.http": { get: "/v1/governance/access-requests" } }, I: ListPendingRequestsRequest, O: ListPendingRequestsResponse },
-    { name: "DecideRequest", idempotency: "IDEMPOTENT", options: { "google.api.http": { post: "/v1/governance/access-requests/{request_id}/decide", body: "*" } }, I: DecideRequestRequest, O: DecideRequestResponse },
-    { name: "GrantTemporaryRole", options: { "google.api.http": { post: "/v1/governance/temporary-roles", body: "*" } }, I: GrantTemporaryRoleRequest, O: GrantTemporaryRoleResponse }
-]);