From aa9afa0971d0813f1ff8392155e5a7a980dad59e Mon Sep 17 00:00:00 2001 From: Tyler Nix Date: Fri, 25 Jul 2025 15:42:59 -0500 Subject: [PATCH 1/2] feat: add authorization_model_metadata field to support Kubernetes-style labels - Add authorization_model_metadata map field to AuthorizationModel message - Add authorization_model_metadata map field to WriteAuthorizationModelRequest message - Support up to 20 key-value pairs with Kubernetes-compatible DNS-1123 validation - Key validation: lowercase alphanumeric with dashes/dots, max 63 chars - Value validation: max 256 chars - Enables model categorization, environment tagging, and operational labels This enables users to add metadata like: { "environment": "production", "team": "platform", "version": "v1.2.3" } --- openfga/v1/authzmodel.proto | 17 + openfga/v1/authzmodel.proto.backup | 265 ++++ openfga/v1/authzmodel.proto.tmp | 265 ++++ openfga/v1/authzmodel.proto.tmp2 | 282 ++++ openfga/v1/openfga_service.proto | 19 +- openfga/v1/openfga_service.proto.backup | 1897 ++++++++++++++++++++++ openfga/v1/openfga_service.proto.tmp | 1897 ++++++++++++++++++++++ openfga/v1/openfga_service.proto.tmp3 | 1914 +++++++++++++++++++++++ openfga/v1/openfga_service.proto.tmp4 | 1914 +++++++++++++++++++++++ openfga/v1/openfga_service.proto.tmp5 | 1914 +++++++++++++++++++++++ 10 files changed, 10383 insertions(+), 1 deletion(-) create mode 100644 openfga/v1/authzmodel.proto.backup create mode 100644 openfga/v1/authzmodel.proto.tmp create mode 100644 openfga/v1/authzmodel.proto.tmp2 create mode 100644 openfga/v1/openfga_service.proto.backup create mode 100644 openfga/v1/openfga_service.proto.tmp create mode 100644 openfga/v1/openfga_service.proto.tmp3 create mode 100644 openfga/v1/openfga_service.proto.tmp4 create mode 100644 openfga/v1/openfga_service.proto.tmp5 diff --git a/openfga/v1/authzmodel.proto b/openfga/v1/authzmodel.proto index 67fcf450..5cb1e685 100644 --- a/openfga/v1/authzmodel.proto +++ b/openfga/v1/authzmodel.proto @@ -38,6 +38,23 @@ message AuthorizationModel { pattern: "^[^:#@\\s]{1,50}$" ignore_empty: false } + + // Labels and metadata for the authorization model (similar to Kubernetes labels) + map authorization_model_metadata = 5 [ + json_name = "authorization_model_metadata", + (validate.rules).map.max_pairs = 20, + (validate.rules).map.keys.string = { + pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" + max_bytes: 63 + ignore_empty: true + }, + (validate.rules).map.values.string = { + max_bytes: 256 + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" + } ]; } diff --git a/openfga/v1/authzmodel.proto.backup b/openfga/v1/authzmodel.proto.backup new file mode 100644 index 00000000..67fcf450 --- /dev/null +++ b/openfga/v1/authzmodel.proto.backup @@ -0,0 +1,265 @@ +syntax = "proto3"; + +package openfga.v1; + +import "google/api/field_behavior.proto"; +import "protoc-gen-openapiv2/options/annotations.proto"; +import "validate/validate.proto"; + +message AuthorizationModel { + string id = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: false + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string schema_version = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[1-9].[1-9]$" + ignore_empty: false + }, + json_name = "schema_version" + ]; + + repeated TypeDefinition type_definitions = 3 [ + json_name = "type_definitions", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[{\"type\": \"user\"}, {\"type\":\"document\",\"relations\":{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}},\"metadata\":{\"relations\":{\"reader\":{\"directly_related_user_types\":[{\"type\":\"user\"}]},\"writer\":{\"directly_related_user_types\":[{\"type\":\"user\"}]}}}}]"} + ]; + + map conditions = 4 [ + json_name = "conditions", + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: false + } + ]; +} + +message TypeDefinition { + string type = 1 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,254}$" + ignore_empty: false + }, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""} + ]; + + map relations = 2 [ + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}}"} + ]; + + // A map whose keys are the name of the relation and whose value is the Metadata for that relation. + // It also holds information around the module name and source file if this model was constructed + // from a modular model. + Metadata metadata = 3; +} + +message Relation { + string name = 1 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: false + }]; + + Userset rewrite = 2 [ + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + RelationTypeInfo type_info = 3; +} + +message RelationTypeInfo { + repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; +} + +message Metadata { + map relations = 1; + + string module = 2 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; + + SourceInfo source_info = 3 [json_name = "source_info"]; +} + +message SourceInfo { + string file = 1 [(validate.rules).string = { + pattern: "^[a-zA-Z0-9_\\-\\/]{1,100}\\.fga$" + ignore_empty: true + }]; +} + +message RelationMetadata { + repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; + + string module = 2 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; + + SourceInfo source_info = 3 [json_name = "source_info"]; +} + +// RelationReference represents a relation of a particular object type (e.g. 'document#viewer'). +message RelationReference { + string type = 1 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,254}$" + ignore_empty: false + }, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"group\""} + ]; + + oneof relation_or_wildcard { + string relation = 2 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"member\""} + ]; + + Wildcard wildcard = 3; + } + + // The name of a condition that is enforced over the allowed relation. + string condition = 4 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; +} + +message Wildcard {} + +message Usersets { + repeated Userset child = 1 [(google.api.field_behavior) = REQUIRED]; +} + +message Difference { + Userset base = 1 [ + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + Userset subtract = 2 [ + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; +} + +message Userset { + oneof userset { + DirectUserset this = 1; + ObjectRelation computed_userset = 2; + TupleToUserset tuple_to_userset = 3; + Usersets union = 4; + Usersets intersection = 5; + Difference difference = 6; + } +} + +// A DirectUserset is a sentinel message for referencing +// the direct members specified by an object/relation mapping. +message DirectUserset {} + +message ObjectRelation { + string object = 1 [(validate.rules).string = {max_bytes: 256}]; + string relation = 2 [(validate.rules).string = {max_bytes: 50}]; +} + +message ComputedUserset { + string relation = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + max_bytes: 50 + ignore_empty: false + } + ]; +} + +message TupleToUserset { + // The target object/relation + ObjectRelation tupleset = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).message.required = true + ]; + ObjectRelation computed_userset = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).message.required = true + ]; +} + +message Condition { + // A unique name for the condition + string name = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: false + } + ]; + + // A Google CEL expression, expressed as a string. + string expression = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + max_bytes: 512 + ignore_empty: false + } + ]; + + // A map of parameter names to the parameter's defined type reference. + map parameters = 3 [ + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} + ]; + + ConditionMetadata metadata = 4; +} + +message ConditionMetadata { + string module = 1 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; + + SourceInfo source_info = 2 [json_name = "source_info"]; +} + +message ConditionParamTypeRef { + enum TypeName { + TYPE_NAME_UNSPECIFIED = 0; + TYPE_NAME_ANY = 1; + TYPE_NAME_BOOL = 2; + TYPE_NAME_STRING = 3; + TYPE_NAME_INT = 4; + TYPE_NAME_UINT = 5; + TYPE_NAME_DOUBLE = 6; + TYPE_NAME_DURATION = 7; + TYPE_NAME_TIMESTAMP = 8; + TYPE_NAME_MAP = 9; + TYPE_NAME_LIST = 10; + TYPE_NAME_IPADDRESS = 11; + } + + TypeName type_name = 1 [ + json_name = "type_name", + (google.api.field_behavior) = REQUIRED, + (validate.rules).enum.defined_only = true + ]; + + repeated ConditionParamTypeRef generic_types = 2 [ + json_name = "generic_types", + (validate.rules).repeated.max_items = 5 + ]; +} diff --git a/openfga/v1/authzmodel.proto.tmp b/openfga/v1/authzmodel.proto.tmp new file mode 100644 index 00000000..67fcf450 --- /dev/null +++ b/openfga/v1/authzmodel.proto.tmp @@ -0,0 +1,265 @@ +syntax = "proto3"; + +package openfga.v1; + +import "google/api/field_behavior.proto"; +import "protoc-gen-openapiv2/options/annotations.proto"; +import "validate/validate.proto"; + +message AuthorizationModel { + string id = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: false + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string schema_version = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[1-9].[1-9]$" + ignore_empty: false + }, + json_name = "schema_version" + ]; + + repeated TypeDefinition type_definitions = 3 [ + json_name = "type_definitions", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[{\"type\": \"user\"}, {\"type\":\"document\",\"relations\":{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}},\"metadata\":{\"relations\":{\"reader\":{\"directly_related_user_types\":[{\"type\":\"user\"}]},\"writer\":{\"directly_related_user_types\":[{\"type\":\"user\"}]}}}}]"} + ]; + + map conditions = 4 [ + json_name = "conditions", + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: false + } + ]; +} + +message TypeDefinition { + string type = 1 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,254}$" + ignore_empty: false + }, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""} + ]; + + map relations = 2 [ + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}}"} + ]; + + // A map whose keys are the name of the relation and whose value is the Metadata for that relation. + // It also holds information around the module name and source file if this model was constructed + // from a modular model. + Metadata metadata = 3; +} + +message Relation { + string name = 1 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: false + }]; + + Userset rewrite = 2 [ + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + RelationTypeInfo type_info = 3; +} + +message RelationTypeInfo { + repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; +} + +message Metadata { + map relations = 1; + + string module = 2 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; + + SourceInfo source_info = 3 [json_name = "source_info"]; +} + +message SourceInfo { + string file = 1 [(validate.rules).string = { + pattern: "^[a-zA-Z0-9_\\-\\/]{1,100}\\.fga$" + ignore_empty: true + }]; +} + +message RelationMetadata { + repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; + + string module = 2 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; + + SourceInfo source_info = 3 [json_name = "source_info"]; +} + +// RelationReference represents a relation of a particular object type (e.g. 'document#viewer'). +message RelationReference { + string type = 1 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,254}$" + ignore_empty: false + }, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"group\""} + ]; + + oneof relation_or_wildcard { + string relation = 2 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"member\""} + ]; + + Wildcard wildcard = 3; + } + + // The name of a condition that is enforced over the allowed relation. + string condition = 4 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; +} + +message Wildcard {} + +message Usersets { + repeated Userset child = 1 [(google.api.field_behavior) = REQUIRED]; +} + +message Difference { + Userset base = 1 [ + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + Userset subtract = 2 [ + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; +} + +message Userset { + oneof userset { + DirectUserset this = 1; + ObjectRelation computed_userset = 2; + TupleToUserset tuple_to_userset = 3; + Usersets union = 4; + Usersets intersection = 5; + Difference difference = 6; + } +} + +// A DirectUserset is a sentinel message for referencing +// the direct members specified by an object/relation mapping. +message DirectUserset {} + +message ObjectRelation { + string object = 1 [(validate.rules).string = {max_bytes: 256}]; + string relation = 2 [(validate.rules).string = {max_bytes: 50}]; +} + +message ComputedUserset { + string relation = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + max_bytes: 50 + ignore_empty: false + } + ]; +} + +message TupleToUserset { + // The target object/relation + ObjectRelation tupleset = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).message.required = true + ]; + ObjectRelation computed_userset = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).message.required = true + ]; +} + +message Condition { + // A unique name for the condition + string name = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: false + } + ]; + + // A Google CEL expression, expressed as a string. + string expression = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + max_bytes: 512 + ignore_empty: false + } + ]; + + // A map of parameter names to the parameter's defined type reference. + map parameters = 3 [ + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} + ]; + + ConditionMetadata metadata = 4; +} + +message ConditionMetadata { + string module = 1 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; + + SourceInfo source_info = 2 [json_name = "source_info"]; +} + +message ConditionParamTypeRef { + enum TypeName { + TYPE_NAME_UNSPECIFIED = 0; + TYPE_NAME_ANY = 1; + TYPE_NAME_BOOL = 2; + TYPE_NAME_STRING = 3; + TYPE_NAME_INT = 4; + TYPE_NAME_UINT = 5; + TYPE_NAME_DOUBLE = 6; + TYPE_NAME_DURATION = 7; + TYPE_NAME_TIMESTAMP = 8; + TYPE_NAME_MAP = 9; + TYPE_NAME_LIST = 10; + TYPE_NAME_IPADDRESS = 11; + } + + TypeName type_name = 1 [ + json_name = "type_name", + (google.api.field_behavior) = REQUIRED, + (validate.rules).enum.defined_only = true + ]; + + repeated ConditionParamTypeRef generic_types = 2 [ + json_name = "generic_types", + (validate.rules).repeated.max_items = 5 + ]; +} diff --git a/openfga/v1/authzmodel.proto.tmp2 b/openfga/v1/authzmodel.proto.tmp2 new file mode 100644 index 00000000..135a1083 --- /dev/null +++ b/openfga/v1/authzmodel.proto.tmp2 @@ -0,0 +1,282 @@ +syntax = "proto3"; + +package openfga.v1; + +import "google/api/field_behavior.proto"; +import "protoc-gen-openapiv2/options/annotations.proto"; +import "validate/validate.proto"; + +message AuthorizationModel { + string id = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: false + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string schema_version = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[1-9].[1-9]$" + ignore_empty: false + }, + json_name = "schema_version" + ]; + + repeated TypeDefinition type_definitions = 3 [ + json_name = "type_definitions", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[{\"type\": \"user\"}, {\"type\":\"document\",\"relations\":{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}},\"metadata\":{\"relations\":{\"reader\":{\"directly_related_user_types\":[{\"type\":\"user\"}]},\"writer\":{\"directly_related_user_types\":[{\"type\":\"user\"}]}}}}]"} + ]; + + map conditions = 4 [ + json_name = "conditions", + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: false + } + + // Labels and metadata for the authorization model (similar to Kubernetes labels) + map authorization_model_metadata = 5 [ + json_name = "authorization_model_metadata", + (validate.rules).map.max_pairs = 20, + (validate.rules).map.keys.string = { + pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" + max_bytes: 63 + ignore_empty: true + }, + (validate.rules).map.values.string = { + max_bytes: 256 + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" + } + ]; ]; +} + +message TypeDefinition { + string type = 1 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,254}$" + ignore_empty: false + }, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""} + ]; + + map relations = 2 [ + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}}"} + ]; + + // A map whose keys are the name of the relation and whose value is the Metadata for that relation. + // It also holds information around the module name and source file if this model was constructed + // from a modular model. + Metadata metadata = 3; +} + +message Relation { + string name = 1 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: false + }]; + + Userset rewrite = 2 [ + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + RelationTypeInfo type_info = 3; +} + +message RelationTypeInfo { + repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; +} + +message Metadata { + map relations = 1; + + string module = 2 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; + + SourceInfo source_info = 3 [json_name = "source_info"]; +} + +message SourceInfo { + string file = 1 [(validate.rules).string = { + pattern: "^[a-zA-Z0-9_\\-\\/]{1,100}\\.fga$" + ignore_empty: true + }]; +} + +message RelationMetadata { + repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; + + string module = 2 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; + + SourceInfo source_info = 3 [json_name = "source_info"]; +} + +// RelationReference represents a relation of a particular object type (e.g. 'document#viewer'). +message RelationReference { + string type = 1 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,254}$" + ignore_empty: false + }, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"group\""} + ]; + + oneof relation_or_wildcard { + string relation = 2 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"member\""} + ]; + + Wildcard wildcard = 3; + } + + // The name of a condition that is enforced over the allowed relation. + string condition = 4 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; +} + +message Wildcard {} + +message Usersets { + repeated Userset child = 1 [(google.api.field_behavior) = REQUIRED]; +} + +message Difference { + Userset base = 1 [ + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + Userset subtract = 2 [ + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; +} + +message Userset { + oneof userset { + DirectUserset this = 1; + ObjectRelation computed_userset = 2; + TupleToUserset tuple_to_userset = 3; + Usersets union = 4; + Usersets intersection = 5; + Difference difference = 6; + } +} + +// A DirectUserset is a sentinel message for referencing +// the direct members specified by an object/relation mapping. +message DirectUserset {} + +message ObjectRelation { + string object = 1 [(validate.rules).string = {max_bytes: 256}]; + string relation = 2 [(validate.rules).string = {max_bytes: 50}]; +} + +message ComputedUserset { + string relation = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + max_bytes: 50 + ignore_empty: false + } + ]; +} + +message TupleToUserset { + // The target object/relation + ObjectRelation tupleset = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).message.required = true + ]; + ObjectRelation computed_userset = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).message.required = true + ]; +} + +message Condition { + // A unique name for the condition + string name = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: false + } + ]; + + // A Google CEL expression, expressed as a string. + string expression = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + max_bytes: 512 + ignore_empty: false + } + ]; + + // A map of parameter names to the parameter's defined type reference. + map parameters = 3 [ + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} + ]; + + ConditionMetadata metadata = 4; +} + +message ConditionMetadata { + string module = 1 [(validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }]; + + SourceInfo source_info = 2 [json_name = "source_info"]; +} + +message ConditionParamTypeRef { + enum TypeName { + TYPE_NAME_UNSPECIFIED = 0; + TYPE_NAME_ANY = 1; + TYPE_NAME_BOOL = 2; + TYPE_NAME_STRING = 3; + TYPE_NAME_INT = 4; + TYPE_NAME_UINT = 5; + TYPE_NAME_DOUBLE = 6; + TYPE_NAME_DURATION = 7; + TYPE_NAME_TIMESTAMP = 8; + TYPE_NAME_MAP = 9; + TYPE_NAME_LIST = 10; + TYPE_NAME_IPADDRESS = 11; + } + + TypeName type_name = 1 [ + json_name = "type_name", + (google.api.field_behavior) = REQUIRED, + (validate.rules).enum.defined_only = true + ]; + + repeated ConditionParamTypeRef generic_types = 2 [ + json_name = "generic_types", + (validate.rules).repeated.max_items = 5 + ]; +} diff --git a/openfga/v1/openfga_service.proto b/openfga/v1/openfga_service.proto index 005057aa..836bb7e4 100644 --- a/openfga/v1/openfga_service.proto +++ b/openfga/v1/openfga_service.proto @@ -1537,8 +1537,25 @@ message WriteAuthorizationModelRequest { (validate.rules).map.max_pairs = 25, (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} ]; -} + // Labels and metadata for the authorization model (similar to Kubernetes labels) + map authorization_model_metadata = 5 [ + json_name = "authorization_model_metadata", + (validate.rules).map.max_pairs = 20, + (validate.rules).map.keys.string = { + pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" + max_bytes: 63 + ignore_empty: true + }, + (validate.rules).map.values.string = { + max_bytes: 256 + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" + } + ]; +} message WriteAuthorizationModelResponse { string authorization_model_id = 1 [ json_name = "authorization_model_id", diff --git a/openfga/v1/openfga_service.proto.backup b/openfga/v1/openfga_service.proto.backup new file mode 100644 index 00000000..005057aa --- /dev/null +++ b/openfga/v1/openfga_service.proto.backup @@ -0,0 +1,1897 @@ +syntax = "proto3"; + +package openfga.v1; + +import "google/api/annotations.proto"; +import "google/api/field_behavior.proto"; +import "google/api/visibility.proto"; +import "google/protobuf/struct.proto"; +import "google/protobuf/timestamp.proto"; +import "google/protobuf/wrappers.proto"; +import "openfga/v1/authzmodel.proto"; +import "openfga/v1/errors_ignore.proto"; +import "openfga/v1/openfga.proto"; +import "openfga/v1/openfga_service_consistency.proto"; +import "protoc-gen-openapiv2/options/annotations.proto"; +import "validate/validate.proto"; + +service OpenFGAService { + rpc Read(ReadRequest) returns (ReadResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/read" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get tuples from the store that matches a query, without following userset rewrite rules" + tags: ["Relationship Tuples"] + operation_id: "Read" + description: + "The Read API will return the tuples for a certain store that match a " + "query filter specified in the body of the request. \n" + "The API doesn't guarantee order by any field. \n" + "It is different from the `/stores/{store_id}/expand` API in that it only " + "returns relationship tuples that are stored in the system and satisfy the query. \n" + "In the body:\n" + "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" + "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " + "`type:object_id`) or type only (e.g., `type:`).\n" + "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " + "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" + "## Examples\n" + "### Query for all objects in a type definition\n" + "To query for all objects that `user:bob` has `reader` relationship in " + "the `document` type definition, call read API with body of\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:\"\n" + " }\n" + "}\n" + "```\n" + "The API will return tuples and a continuation token, something like\n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `user:bob` has a `reader` relationship with 1 document " + "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" + "The continuation token will be empty if there are no more tuples to query.\n" + "### Query for all stored relationship tuples that have a particular relation and object\n" + "To query for all users that have `reader` relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " + "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " + "`user:anne` because it only returns tuples and does not evaluate them.\n" + "### Query for all users with all relationships for a particular document\n" + "To query for all users that have any relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" + " },\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " + "and 1 `writer` (`user:anne`).\n" + }; + } + + rpc Write(WriteRequest) returns (WriteResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/write" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Add or delete tuples from the store" + tags: ["Relationship Tuples"] + operation_id: "Write" + description: + "The Write API will transactionally update the tuples for a certain store. Tuples and " + "type definitions allow OpenFGA to determine whether a " + "relationship exists between an object and an user.\n" + "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" + "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" + "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" + "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " + "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" + "## Example\n" + "### Adding relationships\n" + "To add `user:anne` as a `writer` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"writes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Removing relationships\n" + "To remove `user:bob` as a `reader` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"deletes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Check(CheckRequest) returns (CheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Check whether a user is authorized to access an object" + tags: ["Relationship Queries"] + operation_id: "Check" + description: + "The Check API returns whether a given user has a relationship with a given object in a given store.\n" + "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " + "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will return whether the relationship exists in the field `allowed`.\n\n" + "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" + "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" + "## Examples\n" + "### Querying with contextual tuples\n" + "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" + "```json\n" + "{\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + "}\n" + "```\n" + "the Check API can be used with the following request body:\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Querying usersets\n" + "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type document\n" + " relations\n" + " define reader: [user]\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"document:2021-budget#reader\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" + "### Querying usersets with difference in the model\n" + "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type group\n" + " relations\n" + " define member: [user]\n" + "type document\n" + " relations\n" + " define blocked: [user]\n" + " define reader: [group#member] but not blocked\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"group:finance\"\n" + " },\n" + " {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"blocked\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + "}\n" + "```\n" + "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" + "### Requesting higher consistency\n" + "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"consistency\": \"HIGHER_CONSISTENCY\"\n" + "}\n" + "```\n" + }; + } + + rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/batch-check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Send a list of `check` operations in a single request" + tags: ["Relationship Queries"] + operation_id: "BatchCheck" + description: + "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " + "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " + "for each check it received.\n\n" + "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " + "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " + "of each check to the item which was checked, so it must be unique for each item in the batch. " + "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " + " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" + "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" + "For more details on how `Check` functions, see the docs for `/check`.\n\n" + "### Examples\n" + "#### A BatchCheckRequest\n" + "```json\n" + "{\n" + " \"checks\": [\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:anne\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" + " },\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:bob\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" + " }\n" + " ]\n" + "}\n" + "```\n\n" + "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" + "```json\n" + "{\n" + " \"result\": {\n" + " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" + " \"allowed\": false, \n" + " \"error\": {\"message\": \"\"} \n" + " },\n" + " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" + " \"allowed\": true, \n" + " \"error\": {\"message\": \"\"} \n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Expand(ExpandRequest) returns (ExpandResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/expand" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" + tags: ["Relationship Queries"] + operation_id: "Expand" + description: + "The Expand API will return all users and usersets " + "that have certain relationship with an object in a certain store.\n" + "This is different from the `/stores/{store_id}/read` API in that both users and " + "computed usersets are returned.\n" + "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "The response will return a tree whose leaves are the specific users and usersets. " + "Union, intersection and difference operator are located in the intermediate nodes.\n\n" + "## Example\n" + "To expand all users that have the `reader` relationship with object `document:2021-budget`, " + "use the Expand API with the following request body\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "OpenFGA's response will be a userset tree of the users and usersets that have " + "read access to the document.\n" + "```json\n" + "{\n" + " \"tree\":{\n" + " \"root\":{\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"union\":{\n" + " \"nodes\":[\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"users\":{\n" + " \"users\":[\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"computed\":{\n" + " \"userset\":\"document:2021-budget#writer\"\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" + "### Expand Request with Contextual Tuples\n" + "\n" + "Given the model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "\n" + "type user\n" + "\n" + "type folder\n" + " relations\n" + " define owner: [user]\n" + "\n" + "type document\n" + " relations\n" + " define parent: [folder]\n" + " define viewer: [user] or writer\n" + " define writer: [user] or owner from parent\n" + "```\n" + "and the initial tuples\n" + "```json\n" + "[{\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"owner\",\n" + " \"object\": \"folder:1\"\n" + "}]\n" + "```\n" + "\n" + "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" + "\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:1\",\n" + " \"relation\": \"writer\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"folder:1\",\n" + " \"relation\": \"parent\",\n" + " \"object\": \"document:1\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "this returns:\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"document:1#writer\",\n" + " \"union\": {\n" + " \"nodes\": [\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": []\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"tupleToUserset\": {\n" + " \"tupleset\": \"document:1#parent\",\n" + " \"computed\": [\n" + " {\n" + " \"userset\": \"folder:1#owner\"\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"folder:1\",\n" + " \"relation\": \"owner\"\n" + " }\n" + "}\n" + "```\n" + "which gives\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"folder:1#owner\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": [\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return all the authorization models for a particular store" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModels" + description: + "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" + "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" + "## Example\n" + "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "If there are no more authorization models available, the `continuation_token` field will be empty\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"\"\n" + "}\n" + "```\n" + "" + }; + } + + rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a particular version of an authorization model" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModel" + description: + "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" + "The response will return the authorization model for the particular version.\n\n" + "## Example\n" + "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " + "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " + "`id` path parameter. The API will return:\n" + "```json\n" + "{\n" + " \"authorization_model\":{\n" + " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "In the above example, there are 2 types (`user` and `document`). The `document` type " + "has 2 relations (`writer` and `reader`)." + }; + } + + rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/authorization-models" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a new authorization model" + tags: ["Authorization Models"] + operation_id: "WriteAuthorizationModel" + description: + "The WriteAuthorizationModel API will add a new authorization model " + "to a store.\n" + "Each item in the `type_definitions` array is a type " + "definition as specified in the field `type_definition`.\n" + "The response will return the authorization model's ID in the `id` field.\n\n" + "## Example\n" + "To add an authorization model with `user` and `document` type definitions, call POST " + "authorization-models API with the body: \n" + "```json\n" + "{\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + "}\n" + "```\n" + "OpenFGA's response will include the version id for this authorization model, " + "which will look like \n" + "```\n" + "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" + "```\n" + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} + } + } + } + }; + } + + rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { + option (google.api.http) = { + put: "/stores/{store_id}/assertions/{authorization_model_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Upsert assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "WriteAssertions" + description: + "The WriteAssertions API will upsert new assertions for an authorization model id, " + "or overwrite the existing ones. An assertion is an object that contains a " + "tuple key, the expectation of whether a call to the Check API of that tuple key " + "will return true or false, and optionally a list of contextual tuples." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} + } + } + } + }; + } + + rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Read assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "ReadAssertions" + description: + "The ReadAssertions API will return, for a given authorization model id, " + "all the assertions stored for it. " + }; + } + + rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { + option (google.api.http) = {get: "/stores/{store_id}/changes"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a list of all the tuple changes" + tags: ["Relationship Tuples"] + operation_id: "ReadChanges" + description: + "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " + "in a given store, sorted by ascending time. The response will include a continuation token " + "that is used to get the next set of changes. If there are no changes after the provided continuation token, " + "the same token will be returned in order for it to be used when new changes are recorded. " + "If the store never had any tuples added or removed, this token will be empty.\n" + "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" + "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" + "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" + }; + } + + rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { + option (google.api.http) = { + post: "/stores" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a store" + tags: ["Stores"] + operation_id: "CreateStore" + description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.CreateStoreResponse"} + } + } + } + }; + } + + rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { + option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; + + option (google.api.http) = { + patch: "/stores/{store_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Update a store" + tags: ["Stores"] + operation_id: "UpdateStore" + description: "Updates an existing store." + responses: { + key: "200" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} + } + } + } + }; + } + + rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { + option (google.api.http) = {delete: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Delete a store" + tags: ["Stores"] + operation_id: "DeleteStore" + description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} + } + } + } + }; + } + + rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { + option (google.api.http) = {get: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get a store" + tags: ["Stores"] + operation_id: "GetStore" + description: "Returns an OpenFGA store by its identifier" + }; + } + + rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { + option (google.api.http) = {get: "/stores"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all stores" + tags: ["Stores"] + operation_id: "ListStores" + description: + "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" + "The continuation token will be empty if there are no more stores.\n" + }; + } + + rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/streamed-list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Stream all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "StreamedListObjects" + description: + "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" + "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" + "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" + }; + } + + rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "ListObjects" + description: + "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will contain the related objects in an array in the \"objects\" field of the response and they will " + "be strings in the object format `:` (e.g. \"document:roadmap\").\n" + "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" + "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." + }; + } + + rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-users" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List the users matching the provided filter who have a certain relation to a particular type." + tags: ["Relationship Queries"] + operation_id: "ListUsers" + description: + "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" + "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." + "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" + "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" + "on individual subjects to ensure access to that document." + "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" + "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." + }; + } +} + +message ListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListObjectsResponse { + repeated string objects = 1 [ + json_name = "objects", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} + ]; +} + +message ListUsersRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + Object object = 3 [ + json_name = "object", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + repeated UserTypeFilter user_filters = 5 [ + json_name = "user_filters", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 1 + max_items: 1 + }, + + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The type of results returned. Only accepts exactly one value." + example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" + min_items: 1 + max_items: 1 + } + ]; + + repeated TupleKey contextual_tuples = 6 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 100, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListUsersResponse { + repeated User users = 1 [ + json_name = "users", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} + ]; +} + +message StreamedListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +// The response for a StreamedListObjects RPC. +message StreamedListObjectsResponse { + string object = 1 [ + json_name = "object", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} + ]; +} + +// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ +// which excludes I, L, O, and U +// because of https://github.com/ulid/spec#encoding + +message ReadRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "50" + minimum: 1 + maximum: 100 + } + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; +} + +message ReadRequestTupleKey { + string user = 1 [ + (validate.rules).string = { + pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" + ignore_empty: true + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ReadResponse { + repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more tuples." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteRequestWrites { + repeated TupleKey tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequestDeletes { + repeated TupleKeyWithoutCondition tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + WriteRequestWrites writes = 2; + + WriteRequestDeletes deletes = 3; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message WriteResponse {} + +message CheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + CheckRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Defaults to false. Making it true has performance implications. + bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + read_only: true + example: "false" + }]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 6; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; +} + +message CheckRequestTupleKey { + string user = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message CheckResponse { + bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; + + // For internal use only. + string resolution = 2; +} + +message BatchCheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated BatchCheckItem checks = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; +} + +message BatchCheckItem { + CheckRequestTupleKey tuple_key = 1 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; + google.protobuf.Struct context = 3; + + string correlation_id = 4 [ + json_name = "correlation_id", + (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" + description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." + }, + (google.api.field_behavior) = REQUIRED + ]; +} + +message BatchCheckResponse { + map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' + description: "map keys are the correlation_id values from the BatchCheckItems in the request" + }]; +} + +message BatchCheckSingleResult { + oneof check_result { + bool allowed = 1; + CheckError error = 2; + } +} + +message CheckError { + oneof code { + ErrorCode input_error = 1 [json_name = "input_error"]; + InternalErrorCode internal_error = 2 [json_name = "internal_error"]; + } + string message = 3; +} + +message ExpandRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ExpandRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; +} + +message ExpandRequestTupleKey { + string relation = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + string object = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ExpandResponse { + openfga.v1.UsersetTree tree = 1; +} + +message ReadAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string id = 2 [ + json_name = "id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelResponse { + AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; +} + +message WriteAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated TypeDefinition type_definitions = 2 [ + (google.api.field_behavior) = REQUIRED, + json_name = "type_definitions", + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string schema_version = 3 [ + json_name = "schema_version", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + in: [ + "1.0", + "1.1", + "1.2" + ] + ignore_empty: false + } + ]; + + map conditions = 4 [ + json_name = "conditions", + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} + ]; +} + +message WriteAuthorizationModelResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + google.protobuf.Int32Value page_size = 2 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 3 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; +} + +message ReadAuthorizationModelsResponse { + repeated AuthorizationModel authorization_models = 1 [ + json_name = "authorization_models", + (google.api.field_behavior) = REQUIRED + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more models." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 3 [ + json_name = "assertions", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 0 + max_items: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_items: 0 + max_items: 100 + } + ]; +} + +message WriteAssertionsResponse {} + +message ReadAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAssertionsResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 2; +} + +message ReadChangesRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string type = 2 [(validate.rules).string = { + pattern: "^[^:#\\s]{1,254}$" + ignore_empty: true + }]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + google.protobuf.Timestamp start_time = 5 [ + json_name = "start_time", + (validate.rules).timestamp.lt_now = true, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: + "Start date and time of changes to read.\n" + "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" + "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." + example: "2021-01-01T00:00:00.000Z" + } + ]; +} + +message ReadChangesResponse { + repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be identical if there are no new changes." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message CreateStoreRequest { + string name = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} + ]; +} + +message CreateStoreResponse { + string id = 1 [ + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message UpdateStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} + ]; +} + +message UpdateStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message DeleteStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message DeleteStoreResponse {} + +message GetStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message GetStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; +} + +message ListStoresRequest { + google.protobuf.Int32Value page_size = 1 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + } + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + string name = 3 [ + (google.api.field_behavior) = OPTIONAL, + (validate.rules).string = { + pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"my-store-name\"" + description: + "The name parameter instructs the API to only include results that match that name." + "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" + } + ]; +} + +message ListStoresResponse { + repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more stores." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message AssertionTupleKey { + string object = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string user = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; +} + +message Assertion { + AssertionTupleKey tuple_key = 1 [ + (validate.rules).message.required = true, + json_name = "tuple_key", + (google.api.field_behavior) = REQUIRED + ]; + + bool expectation = 2 [ + json_name = "expectation", + (google.api.field_behavior) = REQUIRED + ]; + + repeated TupleKey contextual_tuples = 3 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; +} + +message Assertions { + repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; +} diff --git a/openfga/v1/openfga_service.proto.tmp b/openfga/v1/openfga_service.proto.tmp new file mode 100644 index 00000000..005057aa --- /dev/null +++ b/openfga/v1/openfga_service.proto.tmp @@ -0,0 +1,1897 @@ +syntax = "proto3"; + +package openfga.v1; + +import "google/api/annotations.proto"; +import "google/api/field_behavior.proto"; +import "google/api/visibility.proto"; +import "google/protobuf/struct.proto"; +import "google/protobuf/timestamp.proto"; +import "google/protobuf/wrappers.proto"; +import "openfga/v1/authzmodel.proto"; +import "openfga/v1/errors_ignore.proto"; +import "openfga/v1/openfga.proto"; +import "openfga/v1/openfga_service_consistency.proto"; +import "protoc-gen-openapiv2/options/annotations.proto"; +import "validate/validate.proto"; + +service OpenFGAService { + rpc Read(ReadRequest) returns (ReadResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/read" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get tuples from the store that matches a query, without following userset rewrite rules" + tags: ["Relationship Tuples"] + operation_id: "Read" + description: + "The Read API will return the tuples for a certain store that match a " + "query filter specified in the body of the request. \n" + "The API doesn't guarantee order by any field. \n" + "It is different from the `/stores/{store_id}/expand` API in that it only " + "returns relationship tuples that are stored in the system and satisfy the query. \n" + "In the body:\n" + "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" + "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " + "`type:object_id`) or type only (e.g., `type:`).\n" + "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " + "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" + "## Examples\n" + "### Query for all objects in a type definition\n" + "To query for all objects that `user:bob` has `reader` relationship in " + "the `document` type definition, call read API with body of\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:\"\n" + " }\n" + "}\n" + "```\n" + "The API will return tuples and a continuation token, something like\n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `user:bob` has a `reader` relationship with 1 document " + "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" + "The continuation token will be empty if there are no more tuples to query.\n" + "### Query for all stored relationship tuples that have a particular relation and object\n" + "To query for all users that have `reader` relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " + "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " + "`user:anne` because it only returns tuples and does not evaluate them.\n" + "### Query for all users with all relationships for a particular document\n" + "To query for all users that have any relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" + " },\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " + "and 1 `writer` (`user:anne`).\n" + }; + } + + rpc Write(WriteRequest) returns (WriteResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/write" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Add or delete tuples from the store" + tags: ["Relationship Tuples"] + operation_id: "Write" + description: + "The Write API will transactionally update the tuples for a certain store. Tuples and " + "type definitions allow OpenFGA to determine whether a " + "relationship exists between an object and an user.\n" + "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" + "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" + "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" + "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " + "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" + "## Example\n" + "### Adding relationships\n" + "To add `user:anne` as a `writer` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"writes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Removing relationships\n" + "To remove `user:bob` as a `reader` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"deletes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Check(CheckRequest) returns (CheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Check whether a user is authorized to access an object" + tags: ["Relationship Queries"] + operation_id: "Check" + description: + "The Check API returns whether a given user has a relationship with a given object in a given store.\n" + "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " + "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will return whether the relationship exists in the field `allowed`.\n\n" + "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" + "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" + "## Examples\n" + "### Querying with contextual tuples\n" + "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" + "```json\n" + "{\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + "}\n" + "```\n" + "the Check API can be used with the following request body:\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Querying usersets\n" + "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type document\n" + " relations\n" + " define reader: [user]\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"document:2021-budget#reader\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" + "### Querying usersets with difference in the model\n" + "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type group\n" + " relations\n" + " define member: [user]\n" + "type document\n" + " relations\n" + " define blocked: [user]\n" + " define reader: [group#member] but not blocked\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"group:finance\"\n" + " },\n" + " {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"blocked\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + "}\n" + "```\n" + "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" + "### Requesting higher consistency\n" + "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"consistency\": \"HIGHER_CONSISTENCY\"\n" + "}\n" + "```\n" + }; + } + + rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/batch-check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Send a list of `check` operations in a single request" + tags: ["Relationship Queries"] + operation_id: "BatchCheck" + description: + "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " + "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " + "for each check it received.\n\n" + "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " + "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " + "of each check to the item which was checked, so it must be unique for each item in the batch. " + "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " + " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" + "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" + "For more details on how `Check` functions, see the docs for `/check`.\n\n" + "### Examples\n" + "#### A BatchCheckRequest\n" + "```json\n" + "{\n" + " \"checks\": [\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:anne\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" + " },\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:bob\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" + " }\n" + " ]\n" + "}\n" + "```\n\n" + "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" + "```json\n" + "{\n" + " \"result\": {\n" + " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" + " \"allowed\": false, \n" + " \"error\": {\"message\": \"\"} \n" + " },\n" + " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" + " \"allowed\": true, \n" + " \"error\": {\"message\": \"\"} \n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Expand(ExpandRequest) returns (ExpandResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/expand" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" + tags: ["Relationship Queries"] + operation_id: "Expand" + description: + "The Expand API will return all users and usersets " + "that have certain relationship with an object in a certain store.\n" + "This is different from the `/stores/{store_id}/read` API in that both users and " + "computed usersets are returned.\n" + "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "The response will return a tree whose leaves are the specific users and usersets. " + "Union, intersection and difference operator are located in the intermediate nodes.\n\n" + "## Example\n" + "To expand all users that have the `reader` relationship with object `document:2021-budget`, " + "use the Expand API with the following request body\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "OpenFGA's response will be a userset tree of the users and usersets that have " + "read access to the document.\n" + "```json\n" + "{\n" + " \"tree\":{\n" + " \"root\":{\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"union\":{\n" + " \"nodes\":[\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"users\":{\n" + " \"users\":[\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"computed\":{\n" + " \"userset\":\"document:2021-budget#writer\"\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" + "### Expand Request with Contextual Tuples\n" + "\n" + "Given the model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "\n" + "type user\n" + "\n" + "type folder\n" + " relations\n" + " define owner: [user]\n" + "\n" + "type document\n" + " relations\n" + " define parent: [folder]\n" + " define viewer: [user] or writer\n" + " define writer: [user] or owner from parent\n" + "```\n" + "and the initial tuples\n" + "```json\n" + "[{\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"owner\",\n" + " \"object\": \"folder:1\"\n" + "}]\n" + "```\n" + "\n" + "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" + "\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:1\",\n" + " \"relation\": \"writer\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"folder:1\",\n" + " \"relation\": \"parent\",\n" + " \"object\": \"document:1\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "this returns:\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"document:1#writer\",\n" + " \"union\": {\n" + " \"nodes\": [\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": []\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"tupleToUserset\": {\n" + " \"tupleset\": \"document:1#parent\",\n" + " \"computed\": [\n" + " {\n" + " \"userset\": \"folder:1#owner\"\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"folder:1\",\n" + " \"relation\": \"owner\"\n" + " }\n" + "}\n" + "```\n" + "which gives\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"folder:1#owner\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": [\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return all the authorization models for a particular store" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModels" + description: + "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" + "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" + "## Example\n" + "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "If there are no more authorization models available, the `continuation_token` field will be empty\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"\"\n" + "}\n" + "```\n" + "" + }; + } + + rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a particular version of an authorization model" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModel" + description: + "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" + "The response will return the authorization model for the particular version.\n\n" + "## Example\n" + "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " + "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " + "`id` path parameter. The API will return:\n" + "```json\n" + "{\n" + " \"authorization_model\":{\n" + " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "In the above example, there are 2 types (`user` and `document`). The `document` type " + "has 2 relations (`writer` and `reader`)." + }; + } + + rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/authorization-models" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a new authorization model" + tags: ["Authorization Models"] + operation_id: "WriteAuthorizationModel" + description: + "The WriteAuthorizationModel API will add a new authorization model " + "to a store.\n" + "Each item in the `type_definitions` array is a type " + "definition as specified in the field `type_definition`.\n" + "The response will return the authorization model's ID in the `id` field.\n\n" + "## Example\n" + "To add an authorization model with `user` and `document` type definitions, call POST " + "authorization-models API with the body: \n" + "```json\n" + "{\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + "}\n" + "```\n" + "OpenFGA's response will include the version id for this authorization model, " + "which will look like \n" + "```\n" + "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" + "```\n" + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} + } + } + } + }; + } + + rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { + option (google.api.http) = { + put: "/stores/{store_id}/assertions/{authorization_model_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Upsert assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "WriteAssertions" + description: + "The WriteAssertions API will upsert new assertions for an authorization model id, " + "or overwrite the existing ones. An assertion is an object that contains a " + "tuple key, the expectation of whether a call to the Check API of that tuple key " + "will return true or false, and optionally a list of contextual tuples." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} + } + } + } + }; + } + + rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Read assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "ReadAssertions" + description: + "The ReadAssertions API will return, for a given authorization model id, " + "all the assertions stored for it. " + }; + } + + rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { + option (google.api.http) = {get: "/stores/{store_id}/changes"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a list of all the tuple changes" + tags: ["Relationship Tuples"] + operation_id: "ReadChanges" + description: + "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " + "in a given store, sorted by ascending time. The response will include a continuation token " + "that is used to get the next set of changes. If there are no changes after the provided continuation token, " + "the same token will be returned in order for it to be used when new changes are recorded. " + "If the store never had any tuples added or removed, this token will be empty.\n" + "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" + "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" + "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" + }; + } + + rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { + option (google.api.http) = { + post: "/stores" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a store" + tags: ["Stores"] + operation_id: "CreateStore" + description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.CreateStoreResponse"} + } + } + } + }; + } + + rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { + option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; + + option (google.api.http) = { + patch: "/stores/{store_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Update a store" + tags: ["Stores"] + operation_id: "UpdateStore" + description: "Updates an existing store." + responses: { + key: "200" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} + } + } + } + }; + } + + rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { + option (google.api.http) = {delete: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Delete a store" + tags: ["Stores"] + operation_id: "DeleteStore" + description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} + } + } + } + }; + } + + rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { + option (google.api.http) = {get: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get a store" + tags: ["Stores"] + operation_id: "GetStore" + description: "Returns an OpenFGA store by its identifier" + }; + } + + rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { + option (google.api.http) = {get: "/stores"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all stores" + tags: ["Stores"] + operation_id: "ListStores" + description: + "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" + "The continuation token will be empty if there are no more stores.\n" + }; + } + + rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/streamed-list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Stream all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "StreamedListObjects" + description: + "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" + "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" + "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" + }; + } + + rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "ListObjects" + description: + "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will contain the related objects in an array in the \"objects\" field of the response and they will " + "be strings in the object format `:` (e.g. \"document:roadmap\").\n" + "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" + "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." + }; + } + + rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-users" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List the users matching the provided filter who have a certain relation to a particular type." + tags: ["Relationship Queries"] + operation_id: "ListUsers" + description: + "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" + "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." + "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" + "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" + "on individual subjects to ensure access to that document." + "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" + "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." + }; + } +} + +message ListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListObjectsResponse { + repeated string objects = 1 [ + json_name = "objects", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} + ]; +} + +message ListUsersRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + Object object = 3 [ + json_name = "object", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + repeated UserTypeFilter user_filters = 5 [ + json_name = "user_filters", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 1 + max_items: 1 + }, + + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The type of results returned. Only accepts exactly one value." + example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" + min_items: 1 + max_items: 1 + } + ]; + + repeated TupleKey contextual_tuples = 6 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 100, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListUsersResponse { + repeated User users = 1 [ + json_name = "users", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} + ]; +} + +message StreamedListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +// The response for a StreamedListObjects RPC. +message StreamedListObjectsResponse { + string object = 1 [ + json_name = "object", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} + ]; +} + +// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ +// which excludes I, L, O, and U +// because of https://github.com/ulid/spec#encoding + +message ReadRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "50" + minimum: 1 + maximum: 100 + } + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; +} + +message ReadRequestTupleKey { + string user = 1 [ + (validate.rules).string = { + pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" + ignore_empty: true + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ReadResponse { + repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more tuples." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteRequestWrites { + repeated TupleKey tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequestDeletes { + repeated TupleKeyWithoutCondition tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + WriteRequestWrites writes = 2; + + WriteRequestDeletes deletes = 3; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message WriteResponse {} + +message CheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + CheckRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Defaults to false. Making it true has performance implications. + bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + read_only: true + example: "false" + }]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 6; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; +} + +message CheckRequestTupleKey { + string user = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message CheckResponse { + bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; + + // For internal use only. + string resolution = 2; +} + +message BatchCheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated BatchCheckItem checks = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; +} + +message BatchCheckItem { + CheckRequestTupleKey tuple_key = 1 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; + google.protobuf.Struct context = 3; + + string correlation_id = 4 [ + json_name = "correlation_id", + (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" + description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." + }, + (google.api.field_behavior) = REQUIRED + ]; +} + +message BatchCheckResponse { + map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' + description: "map keys are the correlation_id values from the BatchCheckItems in the request" + }]; +} + +message BatchCheckSingleResult { + oneof check_result { + bool allowed = 1; + CheckError error = 2; + } +} + +message CheckError { + oneof code { + ErrorCode input_error = 1 [json_name = "input_error"]; + InternalErrorCode internal_error = 2 [json_name = "internal_error"]; + } + string message = 3; +} + +message ExpandRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ExpandRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; +} + +message ExpandRequestTupleKey { + string relation = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + string object = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ExpandResponse { + openfga.v1.UsersetTree tree = 1; +} + +message ReadAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string id = 2 [ + json_name = "id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelResponse { + AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; +} + +message WriteAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated TypeDefinition type_definitions = 2 [ + (google.api.field_behavior) = REQUIRED, + json_name = "type_definitions", + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string schema_version = 3 [ + json_name = "schema_version", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + in: [ + "1.0", + "1.1", + "1.2" + ] + ignore_empty: false + } + ]; + + map conditions = 4 [ + json_name = "conditions", + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} + ]; +} + +message WriteAuthorizationModelResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + google.protobuf.Int32Value page_size = 2 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 3 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; +} + +message ReadAuthorizationModelsResponse { + repeated AuthorizationModel authorization_models = 1 [ + json_name = "authorization_models", + (google.api.field_behavior) = REQUIRED + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more models." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 3 [ + json_name = "assertions", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 0 + max_items: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_items: 0 + max_items: 100 + } + ]; +} + +message WriteAssertionsResponse {} + +message ReadAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAssertionsResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 2; +} + +message ReadChangesRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string type = 2 [(validate.rules).string = { + pattern: "^[^:#\\s]{1,254}$" + ignore_empty: true + }]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + google.protobuf.Timestamp start_time = 5 [ + json_name = "start_time", + (validate.rules).timestamp.lt_now = true, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: + "Start date and time of changes to read.\n" + "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" + "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." + example: "2021-01-01T00:00:00.000Z" + } + ]; +} + +message ReadChangesResponse { + repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be identical if there are no new changes." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message CreateStoreRequest { + string name = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} + ]; +} + +message CreateStoreResponse { + string id = 1 [ + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message UpdateStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} + ]; +} + +message UpdateStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message DeleteStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message DeleteStoreResponse {} + +message GetStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message GetStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; +} + +message ListStoresRequest { + google.protobuf.Int32Value page_size = 1 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + } + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + string name = 3 [ + (google.api.field_behavior) = OPTIONAL, + (validate.rules).string = { + pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"my-store-name\"" + description: + "The name parameter instructs the API to only include results that match that name." + "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" + } + ]; +} + +message ListStoresResponse { + repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more stores." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message AssertionTupleKey { + string object = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string user = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; +} + +message Assertion { + AssertionTupleKey tuple_key = 1 [ + (validate.rules).message.required = true, + json_name = "tuple_key", + (google.api.field_behavior) = REQUIRED + ]; + + bool expectation = 2 [ + json_name = "expectation", + (google.api.field_behavior) = REQUIRED + ]; + + repeated TupleKey contextual_tuples = 3 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; +} + +message Assertions { + repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; +} diff --git a/openfga/v1/openfga_service.proto.tmp3 b/openfga/v1/openfga_service.proto.tmp3 new file mode 100644 index 00000000..9cbad7ee --- /dev/null +++ b/openfga/v1/openfga_service.proto.tmp3 @@ -0,0 +1,1914 @@ +syntax = "proto3"; + +package openfga.v1; + +import "google/api/annotations.proto"; +import "google/api/field_behavior.proto"; +import "google/api/visibility.proto"; +import "google/protobuf/struct.proto"; +import "google/protobuf/timestamp.proto"; +import "google/protobuf/wrappers.proto"; +import "openfga/v1/authzmodel.proto"; +import "openfga/v1/errors_ignore.proto"; +import "openfga/v1/openfga.proto"; +import "openfga/v1/openfga_service_consistency.proto"; +import "protoc-gen-openapiv2/options/annotations.proto"; +import "validate/validate.proto"; + +service OpenFGAService { + rpc Read(ReadRequest) returns (ReadResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/read" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get tuples from the store that matches a query, without following userset rewrite rules" + tags: ["Relationship Tuples"] + operation_id: "Read" + description: + "The Read API will return the tuples for a certain store that match a " + "query filter specified in the body of the request. \n" + "The API doesn't guarantee order by any field. \n" + "It is different from the `/stores/{store_id}/expand` API in that it only " + "returns relationship tuples that are stored in the system and satisfy the query. \n" + "In the body:\n" + "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" + "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " + "`type:object_id`) or type only (e.g., `type:`).\n" + "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " + "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" + "## Examples\n" + "### Query for all objects in a type definition\n" + "To query for all objects that `user:bob` has `reader` relationship in " + "the `document` type definition, call read API with body of\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:\"\n" + " }\n" + "}\n" + "```\n" + "The API will return tuples and a continuation token, something like\n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `user:bob` has a `reader` relationship with 1 document " + "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" + "The continuation token will be empty if there are no more tuples to query.\n" + "### Query for all stored relationship tuples that have a particular relation and object\n" + "To query for all users that have `reader` relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " + "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " + "`user:anne` because it only returns tuples and does not evaluate them.\n" + "### Query for all users with all relationships for a particular document\n" + "To query for all users that have any relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" + " },\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " + "and 1 `writer` (`user:anne`).\n" + }; + } + + rpc Write(WriteRequest) returns (WriteResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/write" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Add or delete tuples from the store" + tags: ["Relationship Tuples"] + operation_id: "Write" + description: + "The Write API will transactionally update the tuples for a certain store. Tuples and " + "type definitions allow OpenFGA to determine whether a " + "relationship exists between an object and an user.\n" + "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" + "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" + "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" + "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " + "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" + "## Example\n" + "### Adding relationships\n" + "To add `user:anne` as a `writer` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"writes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Removing relationships\n" + "To remove `user:bob` as a `reader` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"deletes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Check(CheckRequest) returns (CheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Check whether a user is authorized to access an object" + tags: ["Relationship Queries"] + operation_id: "Check" + description: + "The Check API returns whether a given user has a relationship with a given object in a given store.\n" + "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " + "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will return whether the relationship exists in the field `allowed`.\n\n" + "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" + "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" + "## Examples\n" + "### Querying with contextual tuples\n" + "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" + "```json\n" + "{\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + "}\n" + "```\n" + "the Check API can be used with the following request body:\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Querying usersets\n" + "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type document\n" + " relations\n" + " define reader: [user]\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"document:2021-budget#reader\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" + "### Querying usersets with difference in the model\n" + "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type group\n" + " relations\n" + " define member: [user]\n" + "type document\n" + " relations\n" + " define blocked: [user]\n" + " define reader: [group#member] but not blocked\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"group:finance\"\n" + " },\n" + " {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"blocked\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + "}\n" + "```\n" + "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" + "### Requesting higher consistency\n" + "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"consistency\": \"HIGHER_CONSISTENCY\"\n" + "}\n" + "```\n" + }; + } + + rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/batch-check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Send a list of `check` operations in a single request" + tags: ["Relationship Queries"] + operation_id: "BatchCheck" + description: + "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " + "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " + "for each check it received.\n\n" + "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " + "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " + "of each check to the item which was checked, so it must be unique for each item in the batch. " + "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " + " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" + "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" + "For more details on how `Check` functions, see the docs for `/check`.\n\n" + "### Examples\n" + "#### A BatchCheckRequest\n" + "```json\n" + "{\n" + " \"checks\": [\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:anne\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" + " },\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:bob\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" + " }\n" + " ]\n" + "}\n" + "```\n\n" + "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" + "```json\n" + "{\n" + " \"result\": {\n" + " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" + " \"allowed\": false, \n" + " \"error\": {\"message\": \"\"} \n" + " },\n" + " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" + " \"allowed\": true, \n" + " \"error\": {\"message\": \"\"} \n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Expand(ExpandRequest) returns (ExpandResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/expand" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" + tags: ["Relationship Queries"] + operation_id: "Expand" + description: + "The Expand API will return all users and usersets " + "that have certain relationship with an object in a certain store.\n" + "This is different from the `/stores/{store_id}/read` API in that both users and " + "computed usersets are returned.\n" + "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "The response will return a tree whose leaves are the specific users and usersets. " + "Union, intersection and difference operator are located in the intermediate nodes.\n\n" + "## Example\n" + "To expand all users that have the `reader` relationship with object `document:2021-budget`, " + "use the Expand API with the following request body\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "OpenFGA's response will be a userset tree of the users and usersets that have " + "read access to the document.\n" + "```json\n" + "{\n" + " \"tree\":{\n" + " \"root\":{\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"union\":{\n" + " \"nodes\":[\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"users\":{\n" + " \"users\":[\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"computed\":{\n" + " \"userset\":\"document:2021-budget#writer\"\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" + "### Expand Request with Contextual Tuples\n" + "\n" + "Given the model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "\n" + "type user\n" + "\n" + "type folder\n" + " relations\n" + " define owner: [user]\n" + "\n" + "type document\n" + " relations\n" + " define parent: [folder]\n" + " define viewer: [user] or writer\n" + " define writer: [user] or owner from parent\n" + "```\n" + "and the initial tuples\n" + "```json\n" + "[{\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"owner\",\n" + " \"object\": \"folder:1\"\n" + "}]\n" + "```\n" + "\n" + "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" + "\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:1\",\n" + " \"relation\": \"writer\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"folder:1\",\n" + " \"relation\": \"parent\",\n" + " \"object\": \"document:1\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "this returns:\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"document:1#writer\",\n" + " \"union\": {\n" + " \"nodes\": [\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": []\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"tupleToUserset\": {\n" + " \"tupleset\": \"document:1#parent\",\n" + " \"computed\": [\n" + " {\n" + " \"userset\": \"folder:1#owner\"\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"folder:1\",\n" + " \"relation\": \"owner\"\n" + " }\n" + "}\n" + "```\n" + "which gives\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"folder:1#owner\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": [\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return all the authorization models for a particular store" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModels" + description: + "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" + "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" + "## Example\n" + "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "If there are no more authorization models available, the `continuation_token` field will be empty\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"\"\n" + "}\n" + "```\n" + "" + }; + } + + rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a particular version of an authorization model" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModel" + description: + "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" + "The response will return the authorization model for the particular version.\n\n" + "## Example\n" + "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " + "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " + "`id` path parameter. The API will return:\n" + "```json\n" + "{\n" + " \"authorization_model\":{\n" + " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "In the above example, there are 2 types (`user` and `document`). The `document` type " + "has 2 relations (`writer` and `reader`)." + }; + } + + rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/authorization-models" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a new authorization model" + tags: ["Authorization Models"] + operation_id: "WriteAuthorizationModel" + description: + "The WriteAuthorizationModel API will add a new authorization model " + "to a store.\n" + "Each item in the `type_definitions` array is a type " + "definition as specified in the field `type_definition`.\n" + "The response will return the authorization model's ID in the `id` field.\n\n" + "## Example\n" + "To add an authorization model with `user` and `document` type definitions, call POST " + "authorization-models API with the body: \n" + "```json\n" + "{\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + "}\n" + "```\n" + "OpenFGA's response will include the version id for this authorization model, " + "which will look like \n" + "```\n" + "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" + "```\n" + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} + } + } + } + }; + } + + rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { + option (google.api.http) = { + put: "/stores/{store_id}/assertions/{authorization_model_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Upsert assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "WriteAssertions" + description: + "The WriteAssertions API will upsert new assertions for an authorization model id, " + "or overwrite the existing ones. An assertion is an object that contains a " + "tuple key, the expectation of whether a call to the Check API of that tuple key " + "will return true or false, and optionally a list of contextual tuples." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} + } + } + } + }; + } + + rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Read assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "ReadAssertions" + description: + "The ReadAssertions API will return, for a given authorization model id, " + "all the assertions stored for it. " + }; + } + + rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { + option (google.api.http) = {get: "/stores/{store_id}/changes"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a list of all the tuple changes" + tags: ["Relationship Tuples"] + operation_id: "ReadChanges" + description: + "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " + "in a given store, sorted by ascending time. The response will include a continuation token " + "that is used to get the next set of changes. If there are no changes after the provided continuation token, " + "the same token will be returned in order for it to be used when new changes are recorded. " + "If the store never had any tuples added or removed, this token will be empty.\n" + "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" + "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" + "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" + }; + } + + rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { + option (google.api.http) = { + post: "/stores" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a store" + tags: ["Stores"] + operation_id: "CreateStore" + description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.CreateStoreResponse"} + } + } + } + }; + } + + rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { + option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; + + option (google.api.http) = { + patch: "/stores/{store_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Update a store" + tags: ["Stores"] + operation_id: "UpdateStore" + description: "Updates an existing store." + responses: { + key: "200" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} + } + } + } + }; + } + + rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { + option (google.api.http) = {delete: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Delete a store" + tags: ["Stores"] + operation_id: "DeleteStore" + description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} + } + } + } + }; + } + + rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { + option (google.api.http) = {get: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get a store" + tags: ["Stores"] + operation_id: "GetStore" + description: "Returns an OpenFGA store by its identifier" + }; + } + + rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { + option (google.api.http) = {get: "/stores"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all stores" + tags: ["Stores"] + operation_id: "ListStores" + description: + "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" + "The continuation token will be empty if there are no more stores.\n" + }; + } + + rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/streamed-list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Stream all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "StreamedListObjects" + description: + "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" + "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" + "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" + }; + } + + rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "ListObjects" + description: + "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will contain the related objects in an array in the \"objects\" field of the response and they will " + "be strings in the object format `:` (e.g. \"document:roadmap\").\n" + "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" + "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." + }; + } + + rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-users" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List the users matching the provided filter who have a certain relation to a particular type." + tags: ["Relationship Queries"] + operation_id: "ListUsers" + description: + "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" + "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." + "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" + "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" + "on individual subjects to ensure access to that document." + "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" + "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." + }; + } +} + +message ListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListObjectsResponse { + repeated string objects = 1 [ + json_name = "objects", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} + ]; +} + +message ListUsersRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + Object object = 3 [ + json_name = "object", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + repeated UserTypeFilter user_filters = 5 [ + json_name = "user_filters", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 1 + max_items: 1 + }, + + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The type of results returned. Only accepts exactly one value." + example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" + min_items: 1 + max_items: 1 + } + ]; + + repeated TupleKey contextual_tuples = 6 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 100, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListUsersResponse { + repeated User users = 1 [ + json_name = "users", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} + ]; +} + +message StreamedListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +// The response for a StreamedListObjects RPC. +message StreamedListObjectsResponse { + string object = 1 [ + json_name = "object", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} + ]; +} + +// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ +// which excludes I, L, O, and U +// because of https://github.com/ulid/spec#encoding + +message ReadRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "50" + minimum: 1 + maximum: 100 + } + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; +} + +message ReadRequestTupleKey { + string user = 1 [ + (validate.rules).string = { + pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" + ignore_empty: true + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ReadResponse { + repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more tuples." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteRequestWrites { + repeated TupleKey tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequestDeletes { + repeated TupleKeyWithoutCondition tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + WriteRequestWrites writes = 2; + + WriteRequestDeletes deletes = 3; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message WriteResponse {} + +message CheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + CheckRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Defaults to false. Making it true has performance implications. + bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + read_only: true + example: "false" + }]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 6; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; +} + +message CheckRequestTupleKey { + string user = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message CheckResponse { + bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; + + // For internal use only. + string resolution = 2; +} + +message BatchCheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated BatchCheckItem checks = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; +} + +message BatchCheckItem { + CheckRequestTupleKey tuple_key = 1 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; + google.protobuf.Struct context = 3; + + string correlation_id = 4 [ + json_name = "correlation_id", + (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" + description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." + }, + (google.api.field_behavior) = REQUIRED + ]; +} + +message BatchCheckResponse { + map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' + description: "map keys are the correlation_id values from the BatchCheckItems in the request" + }]; +} + +message BatchCheckSingleResult { + oneof check_result { + bool allowed = 1; + CheckError error = 2; + } +} + +message CheckError { + oneof code { + ErrorCode input_error = 1 [json_name = "input_error"]; + InternalErrorCode internal_error = 2 [json_name = "internal_error"]; + } + string message = 3; +} + +message ExpandRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ExpandRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; +} + +message ExpandRequestTupleKey { + string relation = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + string object = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ExpandResponse { + openfga.v1.UsersetTree tree = 1; +} + +message ReadAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string id = 2 [ + json_name = "id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelResponse { + AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; +} + +message WriteAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated TypeDefinition type_definitions = 2 [ + (google.api.field_behavior) = REQUIRED, + json_name = "type_definitions", + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string schema_version = 3 [ + json_name = "schema_version", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + in: [ + "1.0", + "1.1", + "1.2" + ] + ignore_empty: false + } + ]; + + map conditions = 4 [ + json_name = "conditions", + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} + ]; + + // Labels and metadata for the authorization model (similar to Kubernetes labels) + map authorization_model_metadata = 5 [ + json_name = "authorization_model_metadata", + (validate.rules).map.max_pairs = 20, + (validate.rules).map.keys.string = { + pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" + max_bytes: 63 + ignore_empty: true + }, + (validate.rules).map.values.string = { + max_bytes: 256 + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" + } + ];} + +message WriteAuthorizationModelResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + google.protobuf.Int32Value page_size = 2 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 3 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; +} + +message ReadAuthorizationModelsResponse { + repeated AuthorizationModel authorization_models = 1 [ + json_name = "authorization_models", + (google.api.field_behavior) = REQUIRED + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more models." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 3 [ + json_name = "assertions", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 0 + max_items: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_items: 0 + max_items: 100 + } + ]; +} + +message WriteAssertionsResponse {} + +message ReadAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAssertionsResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 2; +} + +message ReadChangesRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string type = 2 [(validate.rules).string = { + pattern: "^[^:#\\s]{1,254}$" + ignore_empty: true + }]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + google.protobuf.Timestamp start_time = 5 [ + json_name = "start_time", + (validate.rules).timestamp.lt_now = true, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: + "Start date and time of changes to read.\n" + "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" + "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." + example: "2021-01-01T00:00:00.000Z" + } + ]; +} + +message ReadChangesResponse { + repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be identical if there are no new changes." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message CreateStoreRequest { + string name = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} + ]; +} + +message CreateStoreResponse { + string id = 1 [ + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message UpdateStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} + ]; +} + +message UpdateStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message DeleteStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message DeleteStoreResponse {} + +message GetStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message GetStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; +} + +message ListStoresRequest { + google.protobuf.Int32Value page_size = 1 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + } + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + string name = 3 [ + (google.api.field_behavior) = OPTIONAL, + (validate.rules).string = { + pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"my-store-name\"" + description: + "The name parameter instructs the API to only include results that match that name." + "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" + } + ]; +} + +message ListStoresResponse { + repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more stores." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message AssertionTupleKey { + string object = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string user = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; +} + +message Assertion { + AssertionTupleKey tuple_key = 1 [ + (validate.rules).message.required = true, + json_name = "tuple_key", + (google.api.field_behavior) = REQUIRED + ]; + + bool expectation = 2 [ + json_name = "expectation", + (google.api.field_behavior) = REQUIRED + ]; + + repeated TupleKey contextual_tuples = 3 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; +} + +message Assertions { + repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; +} diff --git a/openfga/v1/openfga_service.proto.tmp4 b/openfga/v1/openfga_service.proto.tmp4 new file mode 100644 index 00000000..8c738d8e --- /dev/null +++ b/openfga/v1/openfga_service.proto.tmp4 @@ -0,0 +1,1914 @@ +syntax = "proto3"; + +package openfga.v1; + +import "google/api/annotations.proto"; +import "google/api/field_behavior.proto"; +import "google/api/visibility.proto"; +import "google/protobuf/struct.proto"; +import "google/protobuf/timestamp.proto"; +import "google/protobuf/wrappers.proto"; +import "openfga/v1/authzmodel.proto"; +import "openfga/v1/errors_ignore.proto"; +import "openfga/v1/openfga.proto"; +import "openfga/v1/openfga_service_consistency.proto"; +import "protoc-gen-openapiv2/options/annotations.proto"; +import "validate/validate.proto"; + +service OpenFGAService { + rpc Read(ReadRequest) returns (ReadResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/read" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get tuples from the store that matches a query, without following userset rewrite rules" + tags: ["Relationship Tuples"] + operation_id: "Read" + description: + "The Read API will return the tuples for a certain store that match a " + "query filter specified in the body of the request. \n" + "The API doesn't guarantee order by any field. \n" + "It is different from the `/stores/{store_id}/expand` API in that it only " + "returns relationship tuples that are stored in the system and satisfy the query. \n" + "In the body:\n" + "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" + "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " + "`type:object_id`) or type only (e.g., `type:`).\n" + "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " + "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" + "## Examples\n" + "### Query for all objects in a type definition\n" + "To query for all objects that `user:bob` has `reader` relationship in " + "the `document` type definition, call read API with body of\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:\"\n" + " }\n" + "}\n" + "```\n" + "The API will return tuples and a continuation token, something like\n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `user:bob` has a `reader` relationship with 1 document " + "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" + "The continuation token will be empty if there are no more tuples to query.\n" + "### Query for all stored relationship tuples that have a particular relation and object\n" + "To query for all users that have `reader` relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " + "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " + "`user:anne` because it only returns tuples and does not evaluate them.\n" + "### Query for all users with all relationships for a particular document\n" + "To query for all users that have any relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" + " },\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " + "and 1 `writer` (`user:anne`).\n" + }; + } + + rpc Write(WriteRequest) returns (WriteResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/write" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Add or delete tuples from the store" + tags: ["Relationship Tuples"] + operation_id: "Write" + description: + "The Write API will transactionally update the tuples for a certain store. Tuples and " + "type definitions allow OpenFGA to determine whether a " + "relationship exists between an object and an user.\n" + "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" + "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" + "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" + "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " + "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" + "## Example\n" + "### Adding relationships\n" + "To add `user:anne` as a `writer` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"writes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Removing relationships\n" + "To remove `user:bob` as a `reader` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"deletes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Check(CheckRequest) returns (CheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Check whether a user is authorized to access an object" + tags: ["Relationship Queries"] + operation_id: "Check" + description: + "The Check API returns whether a given user has a relationship with a given object in a given store.\n" + "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " + "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will return whether the relationship exists in the field `allowed`.\n\n" + "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" + "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" + "## Examples\n" + "### Querying with contextual tuples\n" + "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" + "```json\n" + "{\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + "}\n" + "```\n" + "the Check API can be used with the following request body:\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Querying usersets\n" + "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type document\n" + " relations\n" + " define reader: [user]\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"document:2021-budget#reader\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" + "### Querying usersets with difference in the model\n" + "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type group\n" + " relations\n" + " define member: [user]\n" + "type document\n" + " relations\n" + " define blocked: [user]\n" + " define reader: [group#member] but not blocked\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"group:finance\"\n" + " },\n" + " {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"blocked\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + "}\n" + "```\n" + "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" + "### Requesting higher consistency\n" + "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"consistency\": \"HIGHER_CONSISTENCY\"\n" + "}\n" + "```\n" + }; + } + + rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/batch-check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Send a list of `check` operations in a single request" + tags: ["Relationship Queries"] + operation_id: "BatchCheck" + description: + "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " + "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " + "for each check it received.\n\n" + "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " + "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " + "of each check to the item which was checked, so it must be unique for each item in the batch. " + "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " + " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" + "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" + "For more details on how `Check` functions, see the docs for `/check`.\n\n" + "### Examples\n" + "#### A BatchCheckRequest\n" + "```json\n" + "{\n" + " \"checks\": [\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:anne\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" + " },\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:bob\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" + " }\n" + " ]\n" + "}\n" + "```\n\n" + "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" + "```json\n" + "{\n" + " \"result\": {\n" + " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" + " \"allowed\": false, \n" + " \"error\": {\"message\": \"\"} \n" + " },\n" + " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" + " \"allowed\": true, \n" + " \"error\": {\"message\": \"\"} \n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Expand(ExpandRequest) returns (ExpandResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/expand" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" + tags: ["Relationship Queries"] + operation_id: "Expand" + description: + "The Expand API will return all users and usersets " + "that have certain relationship with an object in a certain store.\n" + "This is different from the `/stores/{store_id}/read` API in that both users and " + "computed usersets are returned.\n" + "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "The response will return a tree whose leaves are the specific users and usersets. " + "Union, intersection and difference operator are located in the intermediate nodes.\n\n" + "## Example\n" + "To expand all users that have the `reader` relationship with object `document:2021-budget`, " + "use the Expand API with the following request body\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "OpenFGA's response will be a userset tree of the users and usersets that have " + "read access to the document.\n" + "```json\n" + "{\n" + " \"tree\":{\n" + " \"root\":{\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"union\":{\n" + " \"nodes\":[\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"users\":{\n" + " \"users\":[\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"computed\":{\n" + " \"userset\":\"document:2021-budget#writer\"\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" + "### Expand Request with Contextual Tuples\n" + "\n" + "Given the model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "\n" + "type user\n" + "\n" + "type folder\n" + " relations\n" + " define owner: [user]\n" + "\n" + "type document\n" + " relations\n" + " define parent: [folder]\n" + " define viewer: [user] or writer\n" + " define writer: [user] or owner from parent\n" + "```\n" + "and the initial tuples\n" + "```json\n" + "[{\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"owner\",\n" + " \"object\": \"folder:1\"\n" + "}]\n" + "```\n" + "\n" + "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" + "\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:1\",\n" + " \"relation\": \"writer\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"folder:1\",\n" + " \"relation\": \"parent\",\n" + " \"object\": \"document:1\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "this returns:\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"document:1#writer\",\n" + " \"union\": {\n" + " \"nodes\": [\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": []\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"tupleToUserset\": {\n" + " \"tupleset\": \"document:1#parent\",\n" + " \"computed\": [\n" + " {\n" + " \"userset\": \"folder:1#owner\"\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"folder:1\",\n" + " \"relation\": \"owner\"\n" + " }\n" + "}\n" + "```\n" + "which gives\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"folder:1#owner\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": [\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return all the authorization models for a particular store" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModels" + description: + "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" + "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" + "## Example\n" + "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "If there are no more authorization models available, the `continuation_token` field will be empty\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"\"\n" + "}\n" + "```\n" + "" + }; + } + + rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a particular version of an authorization model" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModel" + description: + "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" + "The response will return the authorization model for the particular version.\n\n" + "## Example\n" + "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " + "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " + "`id` path parameter. The API will return:\n" + "```json\n" + "{\n" + " \"authorization_model\":{\n" + " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "In the above example, there are 2 types (`user` and `document`). The `document` type " + "has 2 relations (`writer` and `reader`)." + }; + } + + rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/authorization-models" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a new authorization model" + tags: ["Authorization Models"] + operation_id: "WriteAuthorizationModel" + description: + "The WriteAuthorizationModel API will add a new authorization model " + "to a store.\n" + "Each item in the `type_definitions` array is a type " + "definition as specified in the field `type_definition`.\n" + "The response will return the authorization model's ID in the `id` field.\n\n" + "## Example\n" + "To add an authorization model with `user` and `document` type definitions, call POST " + "authorization-models API with the body: \n" + "```json\n" + "{\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + "}\n" + "```\n" + "OpenFGA's response will include the version id for this authorization model, " + "which will look like \n" + "```\n" + "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" + "```\n" + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} + } + } + } + }; + } + + rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { + option (google.api.http) = { + put: "/stores/{store_id}/assertions/{authorization_model_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Upsert assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "WriteAssertions" + description: + "The WriteAssertions API will upsert new assertions for an authorization model id, " + "or overwrite the existing ones. An assertion is an object that contains a " + "tuple key, the expectation of whether a call to the Check API of that tuple key " + "will return true or false, and optionally a list of contextual tuples." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} + } + } + } + }; + } + + rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Read assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "ReadAssertions" + description: + "The ReadAssertions API will return, for a given authorization model id, " + "all the assertions stored for it. " + }; + } + + rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { + option (google.api.http) = {get: "/stores/{store_id}/changes"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a list of all the tuple changes" + tags: ["Relationship Tuples"] + operation_id: "ReadChanges" + description: + "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " + "in a given store, sorted by ascending time. The response will include a continuation token " + "that is used to get the next set of changes. If there are no changes after the provided continuation token, " + "the same token will be returned in order for it to be used when new changes are recorded. " + "If the store never had any tuples added or removed, this token will be empty.\n" + "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" + "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" + "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" + }; + } + + rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { + option (google.api.http) = { + post: "/stores" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a store" + tags: ["Stores"] + operation_id: "CreateStore" + description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.CreateStoreResponse"} + } + } + } + }; + } + + rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { + option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; + + option (google.api.http) = { + patch: "/stores/{store_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Update a store" + tags: ["Stores"] + operation_id: "UpdateStore" + description: "Updates an existing store." + responses: { + key: "200" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} + } + } + } + }; + } + + rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { + option (google.api.http) = {delete: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Delete a store" + tags: ["Stores"] + operation_id: "DeleteStore" + description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} + } + } + } + }; + } + + rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { + option (google.api.http) = {get: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get a store" + tags: ["Stores"] + operation_id: "GetStore" + description: "Returns an OpenFGA store by its identifier" + }; + } + + rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { + option (google.api.http) = {get: "/stores"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all stores" + tags: ["Stores"] + operation_id: "ListStores" + description: + "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" + "The continuation token will be empty if there are no more stores.\n" + }; + } + + rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/streamed-list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Stream all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "StreamedListObjects" + description: + "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" + "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" + "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" + }; + } + + rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "ListObjects" + description: + "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will contain the related objects in an array in the \"objects\" field of the response and they will " + "be strings in the object format `:` (e.g. \"document:roadmap\").\n" + "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" + "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." + }; + } + + rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-users" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List the users matching the provided filter who have a certain relation to a particular type." + tags: ["Relationship Queries"] + operation_id: "ListUsers" + description: + "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" + "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." + "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" + "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" + "on individual subjects to ensure access to that document." + "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" + "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." + }; + } +} + +message ListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListObjectsResponse { + repeated string objects = 1 [ + json_name = "objects", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} + ]; +} + +message ListUsersRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + Object object = 3 [ + json_name = "object", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + repeated UserTypeFilter user_filters = 5 [ + json_name = "user_filters", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 1 + max_items: 1 + }, + + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The type of results returned. Only accepts exactly one value." + example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" + min_items: 1 + max_items: 1 + } + ]; + + repeated TupleKey contextual_tuples = 6 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 100, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListUsersResponse { + repeated User users = 1 [ + json_name = "users", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} + ]; +} + +message StreamedListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +// The response for a StreamedListObjects RPC. +message StreamedListObjectsResponse { + string object = 1 [ + json_name = "object", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} + ]; +} + +// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ +// which excludes I, L, O, and U +// because of https://github.com/ulid/spec#encoding + +message ReadRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "50" + minimum: 1 + maximum: 100 + } + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; +} + +message ReadRequestTupleKey { + string user = 1 [ + (validate.rules).string = { + pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" + ignore_empty: true + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ReadResponse { + repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more tuples." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteRequestWrites { + repeated TupleKey tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequestDeletes { + repeated TupleKeyWithoutCondition tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + WriteRequestWrites writes = 2; + + WriteRequestDeletes deletes = 3; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message WriteResponse {} + +message CheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + CheckRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Defaults to false. Making it true has performance implications. + bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + read_only: true + example: "false" + }]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 6; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; +} + +message CheckRequestTupleKey { + string user = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message CheckResponse { + bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; + + // For internal use only. + string resolution = 2; +} + +message BatchCheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated BatchCheckItem checks = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; +} + +message BatchCheckItem { + CheckRequestTupleKey tuple_key = 1 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; + google.protobuf.Struct context = 3; + + string correlation_id = 4 [ + json_name = "correlation_id", + (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" + description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." + }, + (google.api.field_behavior) = REQUIRED + ]; +} + +message BatchCheckResponse { + map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' + description: "map keys are the correlation_id values from the BatchCheckItems in the request" + }]; +} + +message BatchCheckSingleResult { + oneof check_result { + bool allowed = 1; + CheckError error = 2; + } +} + +message CheckError { + oneof code { + ErrorCode input_error = 1 [json_name = "input_error"]; + InternalErrorCode internal_error = 2 [json_name = "internal_error"]; + } + string message = 3; +} + +message ExpandRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ExpandRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; +} + +message ExpandRequestTupleKey { + string relation = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + string object = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ExpandResponse { + openfga.v1.UsersetTree tree = 1; +} + +message ReadAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string id = 2 [ + json_name = "id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelResponse { + AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; +} + +message WriteAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated TypeDefinition type_definitions = 2 [ + (google.api.field_behavior) = REQUIRED, + json_name = "type_definitions", + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string schema_version = 3 [ + json_name = "schema_version", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + in: [ + "1.0", + "1.1", + "1.2" + ] + ignore_empty: false + } + ]; + + map conditions = 4 [ + json_name = "conditions", + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} + ]; + + // Labels and metadata for the authorization model (similar to Kubernetes labels) + map authorization_model_metadata = 5 [ + json_name = "authorization_model_metadata", + (validate.rules).map.max_pairs = 20, + (validate.rules).map.keys.string = { + pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" + max_bytes: 63 + ignore_empty: true + }, + (validate.rules).map.values.string = { + max_bytes: 256 + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" + } + ]; + +message WriteAuthorizationModelResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + google.protobuf.Int32Value page_size = 2 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 3 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; +} + +message ReadAuthorizationModelsResponse { + repeated AuthorizationModel authorization_models = 1 [ + json_name = "authorization_models", + (google.api.field_behavior) = REQUIRED + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more models." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 3 [ + json_name = "assertions", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 0 + max_items: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_items: 0 + max_items: 100 + } + ]; +} + +message WriteAssertionsResponse {} + +message ReadAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAssertionsResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 2; +} + +message ReadChangesRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string type = 2 [(validate.rules).string = { + pattern: "^[^:#\\s]{1,254}$" + ignore_empty: true + }]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + google.protobuf.Timestamp start_time = 5 [ + json_name = "start_time", + (validate.rules).timestamp.lt_now = true, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: + "Start date and time of changes to read.\n" + "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" + "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." + example: "2021-01-01T00:00:00.000Z" + } + ]; +} + +message ReadChangesResponse { + repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be identical if there are no new changes." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message CreateStoreRequest { + string name = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} + ]; +} + +message CreateStoreResponse { + string id = 1 [ + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message UpdateStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} + ]; +} + +message UpdateStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message DeleteStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message DeleteStoreResponse {} + +message GetStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message GetStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; +} + +message ListStoresRequest { + google.protobuf.Int32Value page_size = 1 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + } + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + string name = 3 [ + (google.api.field_behavior) = OPTIONAL, + (validate.rules).string = { + pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"my-store-name\"" + description: + "The name parameter instructs the API to only include results that match that name." + "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" + } + ]; +} + +message ListStoresResponse { + repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more stores." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message AssertionTupleKey { + string object = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string user = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; +} + +message Assertion { + AssertionTupleKey tuple_key = 1 [ + (validate.rules).message.required = true, + json_name = "tuple_key", + (google.api.field_behavior) = REQUIRED + ]; + + bool expectation = 2 [ + json_name = "expectation", + (google.api.field_behavior) = REQUIRED + ]; + + repeated TupleKey contextual_tuples = 3 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; +} + +message Assertions { + repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; +} diff --git a/openfga/v1/openfga_service.proto.tmp5 b/openfga/v1/openfga_service.proto.tmp5 new file mode 100644 index 00000000..836bb7e4 --- /dev/null +++ b/openfga/v1/openfga_service.proto.tmp5 @@ -0,0 +1,1914 @@ +syntax = "proto3"; + +package openfga.v1; + +import "google/api/annotations.proto"; +import "google/api/field_behavior.proto"; +import "google/api/visibility.proto"; +import "google/protobuf/struct.proto"; +import "google/protobuf/timestamp.proto"; +import "google/protobuf/wrappers.proto"; +import "openfga/v1/authzmodel.proto"; +import "openfga/v1/errors_ignore.proto"; +import "openfga/v1/openfga.proto"; +import "openfga/v1/openfga_service_consistency.proto"; +import "protoc-gen-openapiv2/options/annotations.proto"; +import "validate/validate.proto"; + +service OpenFGAService { + rpc Read(ReadRequest) returns (ReadResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/read" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get tuples from the store that matches a query, without following userset rewrite rules" + tags: ["Relationship Tuples"] + operation_id: "Read" + description: + "The Read API will return the tuples for a certain store that match a " + "query filter specified in the body of the request. \n" + "The API doesn't guarantee order by any field. \n" + "It is different from the `/stores/{store_id}/expand` API in that it only " + "returns relationship tuples that are stored in the system and satisfy the query. \n" + "In the body:\n" + "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" + "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " + "`type:object_id`) or type only (e.g., `type:`).\n" + "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " + "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" + "## Examples\n" + "### Query for all objects in a type definition\n" + "To query for all objects that `user:bob` has `reader` relationship in " + "the `document` type definition, call read API with body of\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:\"\n" + " }\n" + "}\n" + "```\n" + "The API will return tuples and a continuation token, something like\n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `user:bob` has a `reader` relationship with 1 document " + "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" + "The continuation token will be empty if there are no more tuples to query.\n" + "### Query for all stored relationship tuples that have a particular relation and object\n" + "To query for all users that have `reader` relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " + "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " + "`user:anne` because it only returns tuples and does not evaluate them.\n" + "### Query for all users with all relationships for a particular document\n" + "To query for all users that have any relationship with " + "`document:2021-budget`, call read API with body of \n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "The API will return something like \n" + "```json\n" + "{\n" + " \"tuples\": [\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" + " },\n" + " {\n" + " \"key\": {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" + " }\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " + "and 1 `writer` (`user:anne`).\n" + }; + } + + rpc Write(WriteRequest) returns (WriteResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/write" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Add or delete tuples from the store" + tags: ["Relationship Tuples"] + operation_id: "Write" + description: + "The Write API will transactionally update the tuples for a certain store. Tuples and " + "type definitions allow OpenFGA to determine whether a " + "relationship exists between an object and an user.\n" + "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" + "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" + "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" + "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " + "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" + "## Example\n" + "### Adding relationships\n" + "To add `user:anne` as a `writer` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"writes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"writer\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Removing relationships\n" + "To remove `user:bob` as a `reader` for `document:2021-budget`, call " + "write API with the following \n" + "```json\n" + "{\n" + " \"deletes\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Check(CheckRequest) returns (CheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Check whether a user is authorized to access an object" + tags: ["Relationship Queries"] + operation_id: "Check" + description: + "The Check API returns whether a given user has a relationship with a given object in a given store.\n" + "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " + "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will return whether the relationship exists in the field `allowed`.\n\n" + "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" + "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" + "## Examples\n" + "### Querying with contextual tuples\n" + "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" + "```json\n" + "{\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + "}\n" + "```\n" + "the Check API can be used with the following request body:\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"time_slot:office_hours\"\n" + " }\n" + " ]\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "### Querying usersets\n" + "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type document\n" + " relations\n" + " define reader: [user]\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"document:2021-budget#reader\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + "}\n" + "```\n" + "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" + "### Querying usersets with difference in the model\n" + "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "type user\n" + "type group\n" + " relations\n" + " define member: [user]\n" + "type document\n" + " relations\n" + " define blocked: [user]\n" + " define reader: [group#member] but not blocked\n" + "```\n" + "the following query\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"member\",\n" + " \"object\": \"group:finance\"\n" + " },\n" + " {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " {\n" + " \"user\": \"user:anne\",\n" + " \"relation\": \"blocked\",\n" + " \"object\": \"document:2021-budget\"\n" + " }\n" + " ]\n" + " },\n" + "}\n" + "```\n" + "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" + "### Requesting higher consistency\n" + "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"user\": \"group:finance#member\",\n" + " \"relation\": \"reader\",\n" + " \"object\": \"document:2021-budget\"\n" + " },\n" + " \"consistency\": \"HIGHER_CONSISTENCY\"\n" + "}\n" + "```\n" + }; + } + + rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/batch-check" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Send a list of `check` operations in a single request" + tags: ["Relationship Queries"] + operation_id: "BatchCheck" + description: + "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " + "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " + "for each check it received.\n\n" + "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " + "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " + "of each check to the item which was checked, so it must be unique for each item in the batch. " + "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " + " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" + "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" + "For more details on how `Check` functions, see the docs for `/check`.\n\n" + "### Examples\n" + "#### A BatchCheckRequest\n" + "```json\n" + "{\n" + " \"checks\": [\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:anne\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" + " },\n" + " {\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\"\n" + " \"relation\": \"reader\",\n" + " \"user\": \"user:bob\",\n" + " },\n" + " \"contextual_tuples\": {...}\n" + " \"context\": {}\n" + " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" + " }\n" + " ]\n" + "}\n" + "```\n\n" + "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" + "```json\n" + "{\n" + " \"result\": {\n" + " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" + " \"allowed\": false, \n" + " \"error\": {\"message\": \"\"} \n" + " },\n" + " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" + " \"allowed\": true, \n" + " \"error\": {\"message\": \"\"} \n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc Expand(ExpandRequest) returns (ExpandResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/expand" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" + tags: ["Relationship Queries"] + operation_id: "Expand" + description: + "The Expand API will return all users and usersets " + "that have certain relationship with an object in a certain store.\n" + "This is different from the `/stores/{store_id}/read` API in that both users and " + "computed usersets are returned.\n" + "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" + "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" + "The response will return a tree whose leaves are the specific users and usersets. " + "Union, intersection and difference operator are located in the intermediate nodes.\n\n" + "## Example\n" + "To expand all users that have the `reader` relationship with object `document:2021-budget`, " + "use the Expand API with the following request body\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:2021-budget\",\n" + " \"relation\": \"reader\"\n" + " },\n" + " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" + "}\n" + "```\n" + "OpenFGA's response will be a userset tree of the users and usersets that have " + "read access to the document.\n" + "```json\n" + "{\n" + " \"tree\":{\n" + " \"root\":{\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"union\":{\n" + " \"nodes\":[\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"users\":{\n" + " \"users\":[\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"type\":\"document:2021-budget#reader\",\n" + " \"leaf\":{\n" + " \"computed\":{\n" + " \"userset\":\"document:2021-budget#writer\"\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" + "### Expand Request with Contextual Tuples\n" + "\n" + "Given the model\n" + "```python\n" + "model\n" + " schema 1.1\n" + "\n" + "type user\n" + "\n" + "type folder\n" + " relations\n" + " define owner: [user]\n" + "\n" + "type document\n" + " relations\n" + " define parent: [folder]\n" + " define viewer: [user] or writer\n" + " define writer: [user] or owner from parent\n" + "```\n" + "and the initial tuples\n" + "```json\n" + "[{\n" + " \"user\": \"user:bob\",\n" + " \"relation\": \"owner\",\n" + " \"object\": \"folder:1\"\n" + "}]\n" + "```\n" + "\n" + "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" + "\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"document:1\",\n" + " \"relation\": \"writer\"\n" + " },\n" + " \"contextual_tuples\": {\n" + " \"tuple_keys\": [\n" + " {\n" + " \"user\": \"folder:1\",\n" + " \"relation\": \"parent\",\n" + " \"object\": \"document:1\"\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "this returns:\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"document:1#writer\",\n" + " \"union\": {\n" + " \"nodes\": [\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": []\n" + " }\n" + " }\n" + " },\n" + " {\n" + " \"name\": \"document:1#writer\",\n" + " \"leaf\": {\n" + " \"tupleToUserset\": {\n" + " \"tupleset\": \"document:1#parent\",\n" + " \"computed\": [\n" + " {\n" + " \"userset\": \"folder:1#owner\"\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" + "```json\n" + "{\n" + " \"tuple_key\": {\n" + " \"object\": \"folder:1\",\n" + " \"relation\": \"owner\"\n" + " }\n" + "}\n" + "```\n" + "which gives\n" + "```json\n" + "{\n" + " \"tree\": {\n" + " \"root\": {\n" + " \"name\": \"folder:1#owner\",\n" + " \"leaf\": {\n" + " \"users\": {\n" + " \"users\": [\n" + " \"user:bob\"\n" + " ]\n" + " }\n" + " }\n" + " }\n" + " }\n" + "}\n" + "```\n" + }; + } + + rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return all the authorization models for a particular store" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModels" + description: + "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" + "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" + "## Example\n" + "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" + "}\n" + "```\n" + "If there are no more authorization models available, the `continuation_token` field will be empty\n" + "```json\n" + "{\n" + " \"authorization_models\": [\n" + " {\n" + " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " {\n" + " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" + " \"type_definitions\": [...]\n" + " },\n" + " ],\n" + " \"continuation_token\": \"\"\n" + "}\n" + "```\n" + "" + }; + } + + rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { + option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a particular version of an authorization model" + tags: ["Authorization Models"] + operation_id: "ReadAuthorizationModel" + description: + "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" + "The response will return the authorization model for the particular version.\n\n" + "## Example\n" + "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " + "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " + "`id` path parameter. The API will return:\n" + "```json\n" + "{\n" + " \"authorization_model\":{\n" + " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + " }\n" + "}\n" + "```\n" + "In the above example, there are 2 types (`user` and `document`). The `document` type " + "has 2 relations (`writer` and `reader`)." + }; + } + + rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/authorization-models" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a new authorization model" + tags: ["Authorization Models"] + operation_id: "WriteAuthorizationModel" + description: + "The WriteAuthorizationModel API will add a new authorization model " + "to a store.\n" + "Each item in the `type_definitions` array is a type " + "definition as specified in the field `type_definition`.\n" + "The response will return the authorization model's ID in the `id` field.\n\n" + "## Example\n" + "To add an authorization model with `user` and `document` type definitions, call POST " + "authorization-models API with the body: \n" + "```json\n" + "{\n" + " \"type_definitions\":[\n" + " {\n" + " \"type\":\"user\"\n" + " },\n" + " {\n" + " \"type\":\"document\",\n" + " \"relations\":{\n" + " \"reader\":{\n" + " \"union\":{\n" + " \"child\":[\n" + " {\n" + " \"this\":{}\n" + " },\n" + " {\n" + " \"computedUserset\":{\n" + " \"object\":\"\",\n" + " \"relation\":\"writer\"\n" + " }\n" + " }\n" + " ]\n" + " }\n" + " },\n" + " \"writer\":{\n" + " \"this\":{}\n" + " }\n" + " }\n" + " }\n" + " ]\n" + "}\n" + "```\n" + "OpenFGA's response will include the version id for this authorization model, " + "which will look like \n" + "```\n" + "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" + "```\n" + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} + } + } + } + }; + } + + rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { + option (google.api.http) = { + put: "/stores/{store_id}/assertions/{authorization_model_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Upsert assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "WriteAssertions" + description: + "The WriteAssertions API will upsert new assertions for an authorization model id, " + "or overwrite the existing ones. An assertion is an object that contains a " + "tuple key, the expectation of whether a call to the Check API of that tuple key " + "will return true or false, and optionally a list of contextual tuples." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} + } + } + } + }; + } + + rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { + option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Read assertions for an authorization model ID" + tags: ["Assertions"] + operation_id: "ReadAssertions" + description: + "The ReadAssertions API will return, for a given authorization model id, " + "all the assertions stored for it. " + }; + } + + rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { + option (google.api.http) = {get: "/stores/{store_id}/changes"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Return a list of all the tuple changes" + tags: ["Relationship Tuples"] + operation_id: "ReadChanges" + description: + "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " + "in a given store, sorted by ascending time. The response will include a continuation token " + "that is used to get the next set of changes. If there are no changes after the provided continuation token, " + "the same token will be returned in order for it to be used when new changes are recorded. " + "If the store never had any tuples added or removed, this token will be empty.\n" + "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" + "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" + "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" + }; + } + + rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { + option (google.api.http) = { + post: "/stores" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Create a store" + tags: ["Stores"] + operation_id: "CreateStore" + description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." + responses: { + key: "201" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.CreateStoreResponse"} + } + } + } + }; + } + + rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { + option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; + + option (google.api.http) = { + patch: "/stores/{store_id}" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Update a store" + tags: ["Stores"] + operation_id: "UpdateStore" + description: "Updates an existing store." + responses: { + key: "200" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} + } + } + } + }; + } + + rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { + option (google.api.http) = {delete: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Delete a store" + tags: ["Stores"] + operation_id: "DeleteStore" + description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." + responses: { + key: "204" + value: { + description: "A successful response." + schema: { + json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} + } + } + } + }; + } + + rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { + option (google.api.http) = {get: "/stores/{store_id}"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Get a store" + tags: ["Stores"] + operation_id: "GetStore" + description: "Returns an OpenFGA store by its identifier" + }; + } + + rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { + option (google.api.http) = {get: "/stores"}; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all stores" + tags: ["Stores"] + operation_id: "ListStores" + description: + "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" + "The continuation token will be empty if there are no more stores.\n" + }; + } + + rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/streamed-list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "Stream all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "StreamedListObjects" + description: + "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" + "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" + "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" + }; + } + + rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-objects" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List all objects of the given type that the user has a relation with" + tags: ["Relationship Queries"] + operation_id: "ListObjects" + description: + "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" + "The response will contain the related objects in an array in the \"objects\" field of the response and they will " + "be strings in the object format `:` (e.g. \"document:roadmap\").\n" + "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" + "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." + }; + } + + rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { + option (google.api.http) = { + post: "/stores/{store_id}/list-users" + body: "*" + }; + + option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { + summary: "List the users matching the provided filter who have a certain relation to a particular type." + tags: ["Relationship Queries"] + operation_id: "ListUsers" + description: + "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " + "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " + "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" + "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " + "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" + "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" + "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" + "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" + "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." + "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" + "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" + "on individual subjects to ensure access to that document." + "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " + "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" + "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." + }; + } +} + +message ListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListObjectsResponse { + repeated string objects = 1 [ + json_name = "objects", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} + ]; +} + +message ListUsersRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + Object object = 3 [ + json_name = "object", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + repeated UserTypeFilter user_filters = 5 [ + json_name = "user_filters", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 1 + max_items: 1 + }, + + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The type of results returned. Only accepts exactly one value." + example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" + min_items: 1 + max_items: 1 + } + ]; + + repeated TupleKey contextual_tuples = 6 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 100, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +message ListUsersResponse { + repeated User users = 1 [ + json_name = "users", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} + ]; +} + +message StreamedListObjectsRequest { + string store_id = 1 [ + json_name = "store_id", + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + string type = 3 [ + json_name = "type", + (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, + (google.api.field_behavior) = REQUIRED + ]; + + string relation = 4 [ + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} + ]; + + string user = 5 [ + (validate.rules).string = { + min_bytes: 1 + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_length: 1 + max_length: 512 + example: "\"user:anne\"" + }, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 7; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; +} + +// The response for a StreamedListObjects RPC. +message StreamedListObjectsResponse { + string object = 1 [ + json_name = "object", + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} + ]; +} + +// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ +// which excludes I, L, O, and U +// because of https://github.com/ulid/spec#encoding + +message ReadRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "50" + minimum: 1 + maximum: 100 + } + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; +} + +message ReadRequestTupleKey { + string user = 1 [ + (validate.rules).string = { + pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" + ignore_empty: true + max_bytes: 512 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ReadResponse { + repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more tuples." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteRequestWrites { + repeated TupleKey tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequestDeletes { + repeated TupleKeyWithoutCondition tuple_keys = 1 [ + json_name = "tuple_keys", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated.min_items = 1, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; +} + +message WriteRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + WriteRequestWrites writes = 2; + + WriteRequestDeletes deletes = 3; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message WriteResponse {} + +message CheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + CheckRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; + + string authorization_model_id = 4 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Defaults to false. Making it true has performance implications. + bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + read_only: true + example: "false" + }]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 6; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; +} + +message CheckRequestTupleKey { + string user = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string object = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message CheckResponse { + bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; + + // For internal use only. + string resolution = 2; +} + +message BatchCheckRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated BatchCheckItem checks = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; +} + +message BatchCheckItem { + CheckRequestTupleKey tuple_key = 1 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; + google.protobuf.Struct context = 3; + + string correlation_id = 4 [ + json_name = "correlation_id", + (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" + description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." + }, + (google.api.field_behavior) = REQUIRED + ]; +} + +message BatchCheckResponse { + map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' + description: "map keys are the correlation_id values from the BatchCheckItems in the request" + }]; +} + +message BatchCheckSingleResult { + oneof check_result { + bool allowed = 1; + CheckError error = 2; + } +} + +message CheckError { + oneof code { + ErrorCode input_error = 1 [json_name = "input_error"]; + InternalErrorCode internal_error = 2 [json_name = "internal_error"]; + } + string message = 3; +} + +message ExpandRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + ExpandRequestTupleKey tuple_key = 2 [ + json_name = "tuple_key", + (validate.rules).message.required = true, + (google.api.field_behavior) = REQUIRED + ]; + + string authorization_model_id = 3 [ + json_name = "authorization_model_id", + (validate.rules).string = { + pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. + ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; + + openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; +} + +message ExpandRequestTupleKey { + string relation = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^:#@\\s]{1,50}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + string object = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + pattern: "^[^\\s]{2,256}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; +} + +message ExpandResponse { + openfga.v1.UsersetTree tree = 1; +} + +message ReadAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string id = 2 [ + json_name = "id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelResponse { + AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; +} + +message WriteAuthorizationModelRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + repeated TypeDefinition type_definitions = 2 [ + (google.api.field_behavior) = REQUIRED, + json_name = "type_definitions", + (validate.rules).repeated = {min_items: 1}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} + ]; + + string schema_version = 3 [ + json_name = "schema_version", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = { + in: [ + "1.0", + "1.1", + "1.2" + ] + ignore_empty: false + } + ]; + + map conditions = 4 [ + json_name = "conditions", + (validate.rules).map.max_pairs = 25, + (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} + ]; + + // Labels and metadata for the authorization model (similar to Kubernetes labels) + map authorization_model_metadata = 5 [ + json_name = "authorization_model_metadata", + (validate.rules).map.max_pairs = 20, + (validate.rules).map.keys.string = { + pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" + max_bytes: 63 + ignore_empty: true + }, + (validate.rules).map.values.string = { + max_bytes: 256 + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" + } + ]; +} +message WriteAuthorizationModelResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAuthorizationModelsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + google.protobuf.Int32Value page_size = 2 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 3 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; +} + +message ReadAuthorizationModelsResponse { + repeated AuthorizationModel authorization_models = 1 [ + json_name = "authorization_models", + (google.api.field_behavior) = REQUIRED + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more models." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message WriteAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 3 [ + json_name = "assertions", + (google.api.field_behavior) = REQUIRED, + (validate.rules).repeated = { + min_items: 0 + max_items: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + min_items: 0 + max_items: 100 + } + ]; +} + +message WriteAssertionsResponse {} + +message ReadAssertionsRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string authorization_model_id = 2 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; +} + +message ReadAssertionsResponse { + string authorization_model_id = 1 [ + json_name = "authorization_model_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} + ]; + + repeated openfga.v1.Assertion assertions = 2; +} + +message ReadChangesRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + + string type = 2 [(validate.rules).string = { + pattern: "^[^:#\\s]{1,254}$" + ignore_empty: true + }]; + + google.protobuf.Int32Value page_size = 3 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} + ]; + + string continuation_token = 4 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + google.protobuf.Timestamp start_time = 5 [ + json_name = "start_time", + (validate.rules).timestamp.lt_now = true, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: + "Start date and time of changes to read.\n" + "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" + "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." + example: "2021-01-01T00:00:00.000Z" + } + ]; +} + +message ReadChangesResponse { + repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be identical if there are no new changes." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message CreateStoreRequest { + string name = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} + ]; +} + +message CreateStoreResponse { + string id = 1 [ + (google.api.field_behavior) = REQUIRED, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message UpdateStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; + string name = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} + ]; +} + +message UpdateStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; +} + +message DeleteStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message DeleteStoreResponse {} + +message GetStoreRequest { + string store_id = 1 [ + json_name = "store_id", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} + ]; +} + +message GetStoreResponse { + string id = 1 [ + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, + (google.api.field_behavior) = REQUIRED + ]; + string name = 2 [(google.api.field_behavior) = REQUIRED]; + google.protobuf.Timestamp created_at = 3 [ + json_name = "created_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp updated_at = 4 [ + json_name = "updated_at", + (google.api.field_behavior) = REQUIRED + ]; + google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; +} + +message ListStoresRequest { + google.protobuf.Int32Value page_size = 1 [ + json_name = "page_size", + (validate.rules).int32 = { + gte: 1 + lte: 100 + } + ]; + + string continuation_token = 2 [ + json_name = "continuation_token", + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} + ]; + + string name = 3 [ + (google.api.field_behavior) = OPTIONAL, + (validate.rules).string = { + pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" + ignore_empty: true + }, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + example: "\"my-store-name\"" + description: + "The name parameter instructs the API to only include results that match that name." + "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" + } + ]; +} + +message ListStoresResponse { + repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; + string continuation_token = 2 [ + json_name = "continuation_token", + (google.api.field_behavior) = REQUIRED, + (validate.rules).string.max_bytes = 5120, + (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + description: "The continuation token will be empty if there are no more stores." + example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" + } + ]; +} + +message AssertionTupleKey { + string object = 1 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 256 + example: "\"document:2021-budget\"" + } + ]; + + string relation = 2 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 50 + example: "\"reader\"" + } + ]; + + string user = 3 [ + (google.api.field_behavior) = REQUIRED, + (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { + max_length: 512 + example: "\"user:anne\"" + } + ]; +} + +message Assertion { + AssertionTupleKey tuple_key = 1 [ + (validate.rules).message.required = true, + json_name = "tuple_key", + (google.api.field_behavior) = REQUIRED + ]; + + bool expectation = 2 [ + json_name = "expectation", + (google.api.field_behavior) = REQUIRED + ]; + + repeated TupleKey contextual_tuples = 3 [ + json_name = "contextual_tuples", + (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now + (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} + ]; + + // Additional request context that will be used to evaluate any ABAC conditions encountered + // in the query evaluation. + google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; +} + +message Assertions { + repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; +} From a58938526061fe98f72e0a3d8ff635410b5cbf79 Mon Sep 17 00:00:00 2001 From: Tyler Nix Date: Fri, 25 Jul 2025 16:21:22 -0500 Subject: [PATCH 2/2] feat: add metadata field to authorization models - Add metadata field to AuthorizationModel message in authzmodel.proto - Add metadata field to WriteAuthorizationModelRequest in openfga_service.proto - Support for Kubernetes-compatible DNS-1123 validation for metadata keys - Maximum 20 metadata pairs per authorization model - Key length limit: 63 bytes, Value length limit: 256 bytes - Update generated protobuf code with proper JSON serialization - Update OpenAPI documentation with metadata field examples This enables labeling and categorization of authorization models for better organization, versioning, and operational management. Closes: #XXX --- docs/openapiv2/apidocs.swagger.json | 175 +- openfga/v1/authzmodel.proto | 5 +- openfga/v1/authzmodel.proto.backup | 265 - openfga/v1/authzmodel.proto.tmp | 265 - openfga/v1/authzmodel.proto.tmp2 | 282 - openfga/v1/openfga_service.proto | 4 +- openfga/v1/openfga_service.proto.backup | 1897 ------- openfga/v1/openfga_service.proto.tmp | 1897 ------- openfga/v1/openfga_service.proto.tmp3 | 1914 ------- openfga/v1/openfga_service.proto.tmp4 | 1914 ------- openfga/v1/openfga_service.proto.tmp5 | 1914 ------- proto/openfga/v1/authzmodel.pb.go | 574 +- proto/openfga/v1/authzmodel.pb.validate.go | 69 + proto/openfga/v1/openfga_service.pb.go | 4595 +++++++++-------- .../openfga/v1/openfga_service.pb.validate.go | 69 + 15 files changed, 2924 insertions(+), 12915 deletions(-) delete mode 100644 openfga/v1/authzmodel.proto.backup delete mode 100644 openfga/v1/authzmodel.proto.tmp delete mode 100644 openfga/v1/authzmodel.proto.tmp2 delete mode 100644 openfga/v1/openfga_service.proto.backup delete mode 100644 openfga/v1/openfga_service.proto.tmp delete mode 100644 openfga/v1/openfga_service.proto.tmp3 delete mode 100644 openfga/v1/openfga_service.proto.tmp4 delete mode 100644 openfga/v1/openfga_service.proto.tmp5 diff --git a/docs/openapiv2/apidocs.swagger.json b/docs/openapiv2/apidocs.swagger.json index 801158b2..7f9f1ccd 100644 --- a/docs/openapiv2/apidocs.swagger.json +++ b/docs/openapiv2/apidocs.swagger.json @@ -82,6 +82,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -115,6 +121,12 @@ "description": "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples.", "operationId": "CreateStore", "responses": { + "200": { + "description": "A successful response.", + "schema": { + "$ref": "#/definitions/CreateStoreResponse" + } + }, "201": { "description": "A successful response.", "schema": { @@ -162,6 +174,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -232,6 +250,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -251,8 +275,17 @@ "description": "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models.", "operationId": "DeleteStore", "responses": { + "200": { + "description": "A successful response.", + "schema": { + "$ref": "#/definitions/DeleteStoreResponse" + } + }, "204": { - "description": "A successful response." + "description": "A successful response.", + "schema": { + "$ref": "#/definitions/DeleteStoreResponse" + } }, "400": { "description": "Request failed due to invalid input.", @@ -295,6 +328,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -363,6 +402,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -388,8 +433,17 @@ "description": "The WriteAssertions API will upsert new assertions for an authorization model id, or overwrite the existing ones. An assertion is an object that contains a tuple key, the expectation of whether a call to the Check API of that tuple key will return true or false, and optionally a list of contextual tuples.", "operationId": "WriteAssertions", "responses": { + "200": { + "description": "A successful response.", + "schema": { + "$ref": "#/definitions/WriteAssertionsResponse" + } + }, "204": { - "description": "A successful response." + "description": "A successful response.", + "schema": { + "$ref": "#/definitions/WriteAssertionsResponse" + } }, "400": { "description": "Request failed due to invalid input.", @@ -432,6 +486,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -527,6 +587,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -559,6 +625,12 @@ "description": "The WriteAuthorizationModel API will add a new authorization model to a store.\nEach item in the `type_definitions` array is a type definition as specified in the field `type_definition`.\nThe response will return the authorization model's ID in the `id` field.\n\n## Example\nTo add an authorization model with `user` and `document` type definitions, call POST authorization-models API with the body: \n```json\n{\n \"type_definitions\":[\n {\n \"type\":\"user\"\n },\n {\n \"type\":\"document\",\n \"relations\":{\n \"reader\":{\n \"union\":{\n \"child\":[\n {\n \"this\":{}\n },\n {\n \"computedUserset\":{\n \"object\":\"\",\n \"relation\":\"writer\"\n }\n }\n ]\n }\n },\n \"writer\":{\n \"this\":{}\n }\n }\n }\n ]\n}\n```\nOpenFGA's response will include the version id for this authorization model, which will look like \n```\n{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n```\n", "operationId": "WriteAuthorizationModel", "responses": { + "200": { + "description": "A successful response.", + "schema": { + "$ref": "#/definitions/WriteAuthorizationModelResponse" + } + }, "201": { "description": "A successful response.", "schema": { @@ -606,6 +678,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -638,6 +716,18 @@ "additionalProperties": { "$ref": "#/definitions/Condition" } + }, + "metadata": { + "type": "object", + "example": { + "environment": "production", + "team": "platform", + "version": "v1.2.3" + }, + "additionalProperties": { + "type": "string" + }, + "title": "Labels and metadata for the authorization model (similar to Kubernetes labels)" } }, "required": [ @@ -705,6 +795,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -779,6 +875,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -875,6 +977,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -970,6 +1078,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -1075,6 +1189,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -1120,7 +1240,7 @@ "/stores/{store_id}/list-objects": { "post": { "summary": "List all objects of the given type that the user has a relation with", - "description": "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory (such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\nAn `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization model ID will be used. It is strongly recommended to specify authorization model id for better performance.\nYou may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\nYou may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\nBy default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\nThe response will contain the related objects in an array in the \"objects\" field of the response and they will be strings in the object format `:` (e.g. \"document:roadmap\").\nThe number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\nThe objects given will not be sorted, and therefore two identical calls can give a given different set of objects.", + "description": "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory (such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\nAn `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization model ID will be used. It is strongly recommended to specify authorization model id for better performance.\nYou may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\nYou may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\nBy default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\nThe response will contain the related objects in an array in the \"objects\" field of the response and they will be strings in the object format `\u003ctype\u003e:\u003cid\u003e` (e.g. \"document:roadmap\").\nThe number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\nThe objects given will not be sorted, and therefore two identical calls can give a given different set of objects.", "operationId": "ListObjects", "responses": { "200": { @@ -1170,6 +1290,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -1282,6 +1408,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -1412,6 +1544,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -1517,6 +1655,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -1629,6 +1773,12 @@ "schema": { "$ref": "#/definitions/InternalErrorMessageResponse" } + }, + "default": { + "description": "An unexpected error response.", + "schema": { + "$ref": "#/definitions/Status" + } } }, "parameters": [ @@ -1828,6 +1978,18 @@ "additionalProperties": { "$ref": "#/definitions/Condition" } + }, + "metadata": { + "type": "object", + "example": { + "environment": "production", + "team": "platform", + "version": "v1.2.3" + }, + "additionalProperties": { + "type": "string" + }, + "title": "Labels and metadata for the authorization model (similar to Kubernetes labels)" } }, "required": [ @@ -2017,8 +2179,7 @@ "HIGHER_CONSISTENCY" ], "default": "UNSPECIFIED", - "description": "Controls the consistency preferences when calling the query APIs.\n\n - UNSPECIFIED: Default if not set. Behavior will be the same as MINIMIZE_LATENCY.\n - MINIMIZE_LATENCY: Minimize latency at the potential expense of lower consistency.\n - HIGHER_CONSISTENCY: Prefer higher consistency, at the potential expense of increased latency.", - "example": "MINIMIZE_LATENCY" + "description": "Controls the consistency preferences when calling the query APIs.\n\n - UNSPECIFIED: Default if not set. Behavior will be the same as MINIMIZE_LATENCY.\n - MINIMIZE_LATENCY: Minimize latency at the potential expense of lower consistency.\n - HIGHER_CONSISTENCY: Prefer higher consistency, at the potential expense of increased latency." }, "ContextualTupleKeys": { "type": "object", @@ -2829,7 +2990,7 @@ "example": "employee" } }, - "description": "Type bound public access.\n\nNormally represented using the `:*` syntax\n\n`employee:*` represents every object of type `employee`, including those not currently present in the system\n\nSee https://openfga.dev/docs/concepts#what-is-type-bound-public-access", + "description": "Type bound public access.\n\nNormally represented using the `\u003ctype\u003e:*` syntax\n\n`employee:*` represents every object of type `employee`, including those not currently present in the system\n\nSee https://openfga.dev/docs/concepts#what-is-type-bound-public-access", "required": [ "type" ] @@ -2999,7 +3160,7 @@ "example": "member" } }, - "description": "Userset.\n\nA set or group of users, represented in the `:#` format\n\n`group:fga#member` represents all members of group FGA, not to be confused by `group:fga` which represents the group itself as a specific object.\n\nSee: https://openfga.dev/docs/modeling/building-blocks/usersets#what-is-a-userset", + "description": "Userset.\n\nA set or group of users, represented in the `\u003ctype\u003e:\u003cid\u003e#\u003crelation\u003e` format\n\n`group:fga#member` represents all members of group FGA, not to be confused by `group:fga` which represents the group itself as a specific object.\n\nSee: https://openfga.dev/docs/modeling/building-blocks/usersets#what-is-a-userset", "required": [ "type", "id", diff --git a/openfga/v1/authzmodel.proto b/openfga/v1/authzmodel.proto index 5cb1e685..ab7aa36c 100644 --- a/openfga/v1/authzmodel.proto +++ b/openfga/v1/authzmodel.proto @@ -38,10 +38,11 @@ message AuthorizationModel { pattern: "^[^:#@\\s]{1,50}$" ignore_empty: false } + ]; // Labels and metadata for the authorization model (similar to Kubernetes labels) - map authorization_model_metadata = 5 [ - json_name = "authorization_model_metadata", + map metadata = 5 [ + json_name = "metadata", (validate.rules).map.max_pairs = 20, (validate.rules).map.keys.string = { pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" diff --git a/openfga/v1/authzmodel.proto.backup b/openfga/v1/authzmodel.proto.backup deleted file mode 100644 index 67fcf450..00000000 --- a/openfga/v1/authzmodel.proto.backup +++ /dev/null @@ -1,265 +0,0 @@ -syntax = "proto3"; - -package openfga.v1; - -import "google/api/field_behavior.proto"; -import "protoc-gen-openapiv2/options/annotations.proto"; -import "validate/validate.proto"; - -message AuthorizationModel { - string id = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: false - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string schema_version = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[1-9].[1-9]$" - ignore_empty: false - }, - json_name = "schema_version" - ]; - - repeated TypeDefinition type_definitions = 3 [ - json_name = "type_definitions", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[{\"type\": \"user\"}, {\"type\":\"document\",\"relations\":{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}},\"metadata\":{\"relations\":{\"reader\":{\"directly_related_user_types\":[{\"type\":\"user\"}]},\"writer\":{\"directly_related_user_types\":[{\"type\":\"user\"}]}}}}]"} - ]; - - map conditions = 4 [ - json_name = "conditions", - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: false - } - ]; -} - -message TypeDefinition { - string type = 1 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,254}$" - ignore_empty: false - }, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""} - ]; - - map relations = 2 [ - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}}"} - ]; - - // A map whose keys are the name of the relation and whose value is the Metadata for that relation. - // It also holds information around the module name and source file if this model was constructed - // from a modular model. - Metadata metadata = 3; -} - -message Relation { - string name = 1 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: false - }]; - - Userset rewrite = 2 [ - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - RelationTypeInfo type_info = 3; -} - -message RelationTypeInfo { - repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; -} - -message Metadata { - map relations = 1; - - string module = 2 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; - - SourceInfo source_info = 3 [json_name = "source_info"]; -} - -message SourceInfo { - string file = 1 [(validate.rules).string = { - pattern: "^[a-zA-Z0-9_\\-\\/]{1,100}\\.fga$" - ignore_empty: true - }]; -} - -message RelationMetadata { - repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; - - string module = 2 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; - - SourceInfo source_info = 3 [json_name = "source_info"]; -} - -// RelationReference represents a relation of a particular object type (e.g. 'document#viewer'). -message RelationReference { - string type = 1 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,254}$" - ignore_empty: false - }, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"group\""} - ]; - - oneof relation_or_wildcard { - string relation = 2 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"member\""} - ]; - - Wildcard wildcard = 3; - } - - // The name of a condition that is enforced over the allowed relation. - string condition = 4 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; -} - -message Wildcard {} - -message Usersets { - repeated Userset child = 1 [(google.api.field_behavior) = REQUIRED]; -} - -message Difference { - Userset base = 1 [ - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - Userset subtract = 2 [ - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; -} - -message Userset { - oneof userset { - DirectUserset this = 1; - ObjectRelation computed_userset = 2; - TupleToUserset tuple_to_userset = 3; - Usersets union = 4; - Usersets intersection = 5; - Difference difference = 6; - } -} - -// A DirectUserset is a sentinel message for referencing -// the direct members specified by an object/relation mapping. -message DirectUserset {} - -message ObjectRelation { - string object = 1 [(validate.rules).string = {max_bytes: 256}]; - string relation = 2 [(validate.rules).string = {max_bytes: 50}]; -} - -message ComputedUserset { - string relation = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - max_bytes: 50 - ignore_empty: false - } - ]; -} - -message TupleToUserset { - // The target object/relation - ObjectRelation tupleset = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).message.required = true - ]; - ObjectRelation computed_userset = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).message.required = true - ]; -} - -message Condition { - // A unique name for the condition - string name = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: false - } - ]; - - // A Google CEL expression, expressed as a string. - string expression = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - max_bytes: 512 - ignore_empty: false - } - ]; - - // A map of parameter names to the parameter's defined type reference. - map parameters = 3 [ - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} - ]; - - ConditionMetadata metadata = 4; -} - -message ConditionMetadata { - string module = 1 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; - - SourceInfo source_info = 2 [json_name = "source_info"]; -} - -message ConditionParamTypeRef { - enum TypeName { - TYPE_NAME_UNSPECIFIED = 0; - TYPE_NAME_ANY = 1; - TYPE_NAME_BOOL = 2; - TYPE_NAME_STRING = 3; - TYPE_NAME_INT = 4; - TYPE_NAME_UINT = 5; - TYPE_NAME_DOUBLE = 6; - TYPE_NAME_DURATION = 7; - TYPE_NAME_TIMESTAMP = 8; - TYPE_NAME_MAP = 9; - TYPE_NAME_LIST = 10; - TYPE_NAME_IPADDRESS = 11; - } - - TypeName type_name = 1 [ - json_name = "type_name", - (google.api.field_behavior) = REQUIRED, - (validate.rules).enum.defined_only = true - ]; - - repeated ConditionParamTypeRef generic_types = 2 [ - json_name = "generic_types", - (validate.rules).repeated.max_items = 5 - ]; -} diff --git a/openfga/v1/authzmodel.proto.tmp b/openfga/v1/authzmodel.proto.tmp deleted file mode 100644 index 67fcf450..00000000 --- a/openfga/v1/authzmodel.proto.tmp +++ /dev/null @@ -1,265 +0,0 @@ -syntax = "proto3"; - -package openfga.v1; - -import "google/api/field_behavior.proto"; -import "protoc-gen-openapiv2/options/annotations.proto"; -import "validate/validate.proto"; - -message AuthorizationModel { - string id = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: false - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string schema_version = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[1-9].[1-9]$" - ignore_empty: false - }, - json_name = "schema_version" - ]; - - repeated TypeDefinition type_definitions = 3 [ - json_name = "type_definitions", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[{\"type\": \"user\"}, {\"type\":\"document\",\"relations\":{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}},\"metadata\":{\"relations\":{\"reader\":{\"directly_related_user_types\":[{\"type\":\"user\"}]},\"writer\":{\"directly_related_user_types\":[{\"type\":\"user\"}]}}}}]"} - ]; - - map conditions = 4 [ - json_name = "conditions", - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: false - } - ]; -} - -message TypeDefinition { - string type = 1 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,254}$" - ignore_empty: false - }, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""} - ]; - - map relations = 2 [ - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}}"} - ]; - - // A map whose keys are the name of the relation and whose value is the Metadata for that relation. - // It also holds information around the module name and source file if this model was constructed - // from a modular model. - Metadata metadata = 3; -} - -message Relation { - string name = 1 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: false - }]; - - Userset rewrite = 2 [ - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - RelationTypeInfo type_info = 3; -} - -message RelationTypeInfo { - repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; -} - -message Metadata { - map relations = 1; - - string module = 2 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; - - SourceInfo source_info = 3 [json_name = "source_info"]; -} - -message SourceInfo { - string file = 1 [(validate.rules).string = { - pattern: "^[a-zA-Z0-9_\\-\\/]{1,100}\\.fga$" - ignore_empty: true - }]; -} - -message RelationMetadata { - repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; - - string module = 2 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; - - SourceInfo source_info = 3 [json_name = "source_info"]; -} - -// RelationReference represents a relation of a particular object type (e.g. 'document#viewer'). -message RelationReference { - string type = 1 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,254}$" - ignore_empty: false - }, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"group\""} - ]; - - oneof relation_or_wildcard { - string relation = 2 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"member\""} - ]; - - Wildcard wildcard = 3; - } - - // The name of a condition that is enforced over the allowed relation. - string condition = 4 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; -} - -message Wildcard {} - -message Usersets { - repeated Userset child = 1 [(google.api.field_behavior) = REQUIRED]; -} - -message Difference { - Userset base = 1 [ - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - Userset subtract = 2 [ - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; -} - -message Userset { - oneof userset { - DirectUserset this = 1; - ObjectRelation computed_userset = 2; - TupleToUserset tuple_to_userset = 3; - Usersets union = 4; - Usersets intersection = 5; - Difference difference = 6; - } -} - -// A DirectUserset is a sentinel message for referencing -// the direct members specified by an object/relation mapping. -message DirectUserset {} - -message ObjectRelation { - string object = 1 [(validate.rules).string = {max_bytes: 256}]; - string relation = 2 [(validate.rules).string = {max_bytes: 50}]; -} - -message ComputedUserset { - string relation = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - max_bytes: 50 - ignore_empty: false - } - ]; -} - -message TupleToUserset { - // The target object/relation - ObjectRelation tupleset = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).message.required = true - ]; - ObjectRelation computed_userset = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).message.required = true - ]; -} - -message Condition { - // A unique name for the condition - string name = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: false - } - ]; - - // A Google CEL expression, expressed as a string. - string expression = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - max_bytes: 512 - ignore_empty: false - } - ]; - - // A map of parameter names to the parameter's defined type reference. - map parameters = 3 [ - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} - ]; - - ConditionMetadata metadata = 4; -} - -message ConditionMetadata { - string module = 1 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; - - SourceInfo source_info = 2 [json_name = "source_info"]; -} - -message ConditionParamTypeRef { - enum TypeName { - TYPE_NAME_UNSPECIFIED = 0; - TYPE_NAME_ANY = 1; - TYPE_NAME_BOOL = 2; - TYPE_NAME_STRING = 3; - TYPE_NAME_INT = 4; - TYPE_NAME_UINT = 5; - TYPE_NAME_DOUBLE = 6; - TYPE_NAME_DURATION = 7; - TYPE_NAME_TIMESTAMP = 8; - TYPE_NAME_MAP = 9; - TYPE_NAME_LIST = 10; - TYPE_NAME_IPADDRESS = 11; - } - - TypeName type_name = 1 [ - json_name = "type_name", - (google.api.field_behavior) = REQUIRED, - (validate.rules).enum.defined_only = true - ]; - - repeated ConditionParamTypeRef generic_types = 2 [ - json_name = "generic_types", - (validate.rules).repeated.max_items = 5 - ]; -} diff --git a/openfga/v1/authzmodel.proto.tmp2 b/openfga/v1/authzmodel.proto.tmp2 deleted file mode 100644 index 135a1083..00000000 --- a/openfga/v1/authzmodel.proto.tmp2 +++ /dev/null @@ -1,282 +0,0 @@ -syntax = "proto3"; - -package openfga.v1; - -import "google/api/field_behavior.proto"; -import "protoc-gen-openapiv2/options/annotations.proto"; -import "validate/validate.proto"; - -message AuthorizationModel { - string id = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: false - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string schema_version = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[1-9].[1-9]$" - ignore_empty: false - }, - json_name = "schema_version" - ]; - - repeated TypeDefinition type_definitions = 3 [ - json_name = "type_definitions", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[{\"type\": \"user\"}, {\"type\":\"document\",\"relations\":{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}},\"metadata\":{\"relations\":{\"reader\":{\"directly_related_user_types\":[{\"type\":\"user\"}]},\"writer\":{\"directly_related_user_types\":[{\"type\":\"user\"}]}}}}]"} - ]; - - map conditions = 4 [ - json_name = "conditions", - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: false - } - - // Labels and metadata for the authorization model (similar to Kubernetes labels) - map authorization_model_metadata = 5 [ - json_name = "authorization_model_metadata", - (validate.rules).map.max_pairs = 20, - (validate.rules).map.keys.string = { - pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" - max_bytes: 63 - ignore_empty: true - }, - (validate.rules).map.values.string = { - max_bytes: 256 - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" - } - ]; ]; -} - -message TypeDefinition { - string type = 1 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,254}$" - ignore_empty: false - }, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""} - ]; - - map relations = 2 [ - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "{\"reader\":{\"union\":{\"child\":[{\"this\":{}},{\"computedUserset\":{\"object\":\"\",\"relation\":\"writer\"}}]}},\"writer\":{\"this\":{}}}"} - ]; - - // A map whose keys are the name of the relation and whose value is the Metadata for that relation. - // It also holds information around the module name and source file if this model was constructed - // from a modular model. - Metadata metadata = 3; -} - -message Relation { - string name = 1 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: false - }]; - - Userset rewrite = 2 [ - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - RelationTypeInfo type_info = 3; -} - -message RelationTypeInfo { - repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; -} - -message Metadata { - map relations = 1; - - string module = 2 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; - - SourceInfo source_info = 3 [json_name = "source_info"]; -} - -message SourceInfo { - string file = 1 [(validate.rules).string = { - pattern: "^[a-zA-Z0-9_\\-\\/]{1,100}\\.fga$" - ignore_empty: true - }]; -} - -message RelationMetadata { - repeated RelationReference directly_related_user_types = 1 [json_name = "directly_related_user_types"]; - - string module = 2 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; - - SourceInfo source_info = 3 [json_name = "source_info"]; -} - -// RelationReference represents a relation of a particular object type (e.g. 'document#viewer'). -message RelationReference { - string type = 1 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,254}$" - ignore_empty: false - }, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"group\""} - ]; - - oneof relation_or_wildcard { - string relation = 2 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"member\""} - ]; - - Wildcard wildcard = 3; - } - - // The name of a condition that is enforced over the allowed relation. - string condition = 4 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; -} - -message Wildcard {} - -message Usersets { - repeated Userset child = 1 [(google.api.field_behavior) = REQUIRED]; -} - -message Difference { - Userset base = 1 [ - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - Userset subtract = 2 [ - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; -} - -message Userset { - oneof userset { - DirectUserset this = 1; - ObjectRelation computed_userset = 2; - TupleToUserset tuple_to_userset = 3; - Usersets union = 4; - Usersets intersection = 5; - Difference difference = 6; - } -} - -// A DirectUserset is a sentinel message for referencing -// the direct members specified by an object/relation mapping. -message DirectUserset {} - -message ObjectRelation { - string object = 1 [(validate.rules).string = {max_bytes: 256}]; - string relation = 2 [(validate.rules).string = {max_bytes: 50}]; -} - -message ComputedUserset { - string relation = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - max_bytes: 50 - ignore_empty: false - } - ]; -} - -message TupleToUserset { - // The target object/relation - ObjectRelation tupleset = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).message.required = true - ]; - ObjectRelation computed_userset = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).message.required = true - ]; -} - -message Condition { - // A unique name for the condition - string name = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: false - } - ]; - - // A Google CEL expression, expressed as a string. - string expression = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - max_bytes: 512 - ignore_empty: false - } - ]; - - // A map of parameter names to the parameter's defined type reference. - map parameters = 3 [ - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} - ]; - - ConditionMetadata metadata = 4; -} - -message ConditionMetadata { - string module = 1 [(validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }]; - - SourceInfo source_info = 2 [json_name = "source_info"]; -} - -message ConditionParamTypeRef { - enum TypeName { - TYPE_NAME_UNSPECIFIED = 0; - TYPE_NAME_ANY = 1; - TYPE_NAME_BOOL = 2; - TYPE_NAME_STRING = 3; - TYPE_NAME_INT = 4; - TYPE_NAME_UINT = 5; - TYPE_NAME_DOUBLE = 6; - TYPE_NAME_DURATION = 7; - TYPE_NAME_TIMESTAMP = 8; - TYPE_NAME_MAP = 9; - TYPE_NAME_LIST = 10; - TYPE_NAME_IPADDRESS = 11; - } - - TypeName type_name = 1 [ - json_name = "type_name", - (google.api.field_behavior) = REQUIRED, - (validate.rules).enum.defined_only = true - ]; - - repeated ConditionParamTypeRef generic_types = 2 [ - json_name = "generic_types", - (validate.rules).repeated.max_items = 5 - ]; -} diff --git a/openfga/v1/openfga_service.proto b/openfga/v1/openfga_service.proto index 836bb7e4..4bffdde0 100644 --- a/openfga/v1/openfga_service.proto +++ b/openfga/v1/openfga_service.proto @@ -1539,8 +1539,8 @@ message WriteAuthorizationModelRequest { ]; // Labels and metadata for the authorization model (similar to Kubernetes labels) - map authorization_model_metadata = 5 [ - json_name = "authorization_model_metadata", + map metadata = 5 [ + json_name = "metadata", (validate.rules).map.max_pairs = 20, (validate.rules).map.keys.string = { pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" diff --git a/openfga/v1/openfga_service.proto.backup b/openfga/v1/openfga_service.proto.backup deleted file mode 100644 index 005057aa..00000000 --- a/openfga/v1/openfga_service.proto.backup +++ /dev/null @@ -1,1897 +0,0 @@ -syntax = "proto3"; - -package openfga.v1; - -import "google/api/annotations.proto"; -import "google/api/field_behavior.proto"; -import "google/api/visibility.proto"; -import "google/protobuf/struct.proto"; -import "google/protobuf/timestamp.proto"; -import "google/protobuf/wrappers.proto"; -import "openfga/v1/authzmodel.proto"; -import "openfga/v1/errors_ignore.proto"; -import "openfga/v1/openfga.proto"; -import "openfga/v1/openfga_service_consistency.proto"; -import "protoc-gen-openapiv2/options/annotations.proto"; -import "validate/validate.proto"; - -service OpenFGAService { - rpc Read(ReadRequest) returns (ReadResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/read" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get tuples from the store that matches a query, without following userset rewrite rules" - tags: ["Relationship Tuples"] - operation_id: "Read" - description: - "The Read API will return the tuples for a certain store that match a " - "query filter specified in the body of the request. \n" - "The API doesn't guarantee order by any field. \n" - "It is different from the `/stores/{store_id}/expand` API in that it only " - "returns relationship tuples that are stored in the system and satisfy the query. \n" - "In the body:\n" - "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" - "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " - "`type:object_id`) or type only (e.g., `type:`).\n" - "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " - "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" - "## Examples\n" - "### Query for all objects in a type definition\n" - "To query for all objects that `user:bob` has `reader` relationship in " - "the `document` type definition, call read API with body of\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:\"\n" - " }\n" - "}\n" - "```\n" - "The API will return tuples and a continuation token, something like\n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `user:bob` has a `reader` relationship with 1 document " - "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" - "The continuation token will be empty if there are no more tuples to query.\n" - "### Query for all stored relationship tuples that have a particular relation and object\n" - "To query for all users that have `reader` relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " - "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " - "`user:anne` because it only returns tuples and does not evaluate them.\n" - "### Query for all users with all relationships for a particular document\n" - "To query for all users that have any relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" - " },\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " - "and 1 `writer` (`user:anne`).\n" - }; - } - - rpc Write(WriteRequest) returns (WriteResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/write" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Add or delete tuples from the store" - tags: ["Relationship Tuples"] - operation_id: "Write" - description: - "The Write API will transactionally update the tuples for a certain store. Tuples and " - "type definitions allow OpenFGA to determine whether a " - "relationship exists between an object and an user.\n" - "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" - "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" - "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" - "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " - "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" - "## Example\n" - "### Adding relationships\n" - "To add `user:anne` as a `writer` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"writes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Removing relationships\n" - "To remove `user:bob` as a `reader` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"deletes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Check(CheckRequest) returns (CheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Check whether a user is authorized to access an object" - tags: ["Relationship Queries"] - operation_id: "Check" - description: - "The Check API returns whether a given user has a relationship with a given object in a given store.\n" - "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " - "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will return whether the relationship exists in the field `allowed`.\n\n" - "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" - "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" - "## Examples\n" - "### Querying with contextual tuples\n" - "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" - "```json\n" - "{\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - "}\n" - "```\n" - "the Check API can be used with the following request body:\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Querying usersets\n" - "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type document\n" - " relations\n" - " define reader: [user]\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"document:2021-budget#reader\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" - "### Querying usersets with difference in the model\n" - "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type group\n" - " relations\n" - " define member: [user]\n" - "type document\n" - " relations\n" - " define blocked: [user]\n" - " define reader: [group#member] but not blocked\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"group:finance\"\n" - " },\n" - " {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"blocked\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - "}\n" - "```\n" - "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" - "### Requesting higher consistency\n" - "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"consistency\": \"HIGHER_CONSISTENCY\"\n" - "}\n" - "```\n" - }; - } - - rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/batch-check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Send a list of `check` operations in a single request" - tags: ["Relationship Queries"] - operation_id: "BatchCheck" - description: - "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " - "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " - "for each check it received.\n\n" - "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " - "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " - "of each check to the item which was checked, so it must be unique for each item in the batch. " - "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " - " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" - "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" - "For more details on how `Check` functions, see the docs for `/check`.\n\n" - "### Examples\n" - "#### A BatchCheckRequest\n" - "```json\n" - "{\n" - " \"checks\": [\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:anne\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" - " },\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:bob\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" - " }\n" - " ]\n" - "}\n" - "```\n\n" - "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" - "```json\n" - "{\n" - " \"result\": {\n" - " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" - " \"allowed\": false, \n" - " \"error\": {\"message\": \"\"} \n" - " },\n" - " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" - " \"allowed\": true, \n" - " \"error\": {\"message\": \"\"} \n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Expand(ExpandRequest) returns (ExpandResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/expand" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" - tags: ["Relationship Queries"] - operation_id: "Expand" - description: - "The Expand API will return all users and usersets " - "that have certain relationship with an object in a certain store.\n" - "This is different from the `/stores/{store_id}/read` API in that both users and " - "computed usersets are returned.\n" - "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "The response will return a tree whose leaves are the specific users and usersets. " - "Union, intersection and difference operator are located in the intermediate nodes.\n\n" - "## Example\n" - "To expand all users that have the `reader` relationship with object `document:2021-budget`, " - "use the Expand API with the following request body\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "OpenFGA's response will be a userset tree of the users and usersets that have " - "read access to the document.\n" - "```json\n" - "{\n" - " \"tree\":{\n" - " \"root\":{\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"union\":{\n" - " \"nodes\":[\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"users\":{\n" - " \"users\":[\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"computed\":{\n" - " \"userset\":\"document:2021-budget#writer\"\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" - "### Expand Request with Contextual Tuples\n" - "\n" - "Given the model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "\n" - "type user\n" - "\n" - "type folder\n" - " relations\n" - " define owner: [user]\n" - "\n" - "type document\n" - " relations\n" - " define parent: [folder]\n" - " define viewer: [user] or writer\n" - " define writer: [user] or owner from parent\n" - "```\n" - "and the initial tuples\n" - "```json\n" - "[{\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"owner\",\n" - " \"object\": \"folder:1\"\n" - "}]\n" - "```\n" - "\n" - "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" - "\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:1\",\n" - " \"relation\": \"writer\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"folder:1\",\n" - " \"relation\": \"parent\",\n" - " \"object\": \"document:1\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "this returns:\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"document:1#writer\",\n" - " \"union\": {\n" - " \"nodes\": [\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": []\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"tupleToUserset\": {\n" - " \"tupleset\": \"document:1#parent\",\n" - " \"computed\": [\n" - " {\n" - " \"userset\": \"folder:1#owner\"\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"folder:1\",\n" - " \"relation\": \"owner\"\n" - " }\n" - "}\n" - "```\n" - "which gives\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"folder:1#owner\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": [\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return all the authorization models for a particular store" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModels" - description: - "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" - "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" - "## Example\n" - "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "If there are no more authorization models available, the `continuation_token` field will be empty\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"\"\n" - "}\n" - "```\n" - "" - }; - } - - rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a particular version of an authorization model" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModel" - description: - "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" - "The response will return the authorization model for the particular version.\n\n" - "## Example\n" - "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " - "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " - "`id` path parameter. The API will return:\n" - "```json\n" - "{\n" - " \"authorization_model\":{\n" - " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "In the above example, there are 2 types (`user` and `document`). The `document` type " - "has 2 relations (`writer` and `reader`)." - }; - } - - rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/authorization-models" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a new authorization model" - tags: ["Authorization Models"] - operation_id: "WriteAuthorizationModel" - description: - "The WriteAuthorizationModel API will add a new authorization model " - "to a store.\n" - "Each item in the `type_definitions` array is a type " - "definition as specified in the field `type_definition`.\n" - "The response will return the authorization model's ID in the `id` field.\n\n" - "## Example\n" - "To add an authorization model with `user` and `document` type definitions, call POST " - "authorization-models API with the body: \n" - "```json\n" - "{\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - "}\n" - "```\n" - "OpenFGA's response will include the version id for this authorization model, " - "which will look like \n" - "```\n" - "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" - "```\n" - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} - } - } - } - }; - } - - rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { - option (google.api.http) = { - put: "/stores/{store_id}/assertions/{authorization_model_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Upsert assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "WriteAssertions" - description: - "The WriteAssertions API will upsert new assertions for an authorization model id, " - "or overwrite the existing ones. An assertion is an object that contains a " - "tuple key, the expectation of whether a call to the Check API of that tuple key " - "will return true or false, and optionally a list of contextual tuples." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} - } - } - } - }; - } - - rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Read assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "ReadAssertions" - description: - "The ReadAssertions API will return, for a given authorization model id, " - "all the assertions stored for it. " - }; - } - - rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { - option (google.api.http) = {get: "/stores/{store_id}/changes"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a list of all the tuple changes" - tags: ["Relationship Tuples"] - operation_id: "ReadChanges" - description: - "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " - "in a given store, sorted by ascending time. The response will include a continuation token " - "that is used to get the next set of changes. If there are no changes after the provided continuation token, " - "the same token will be returned in order for it to be used when new changes are recorded. " - "If the store never had any tuples added or removed, this token will be empty.\n" - "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" - "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" - "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" - }; - } - - rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { - option (google.api.http) = { - post: "/stores" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a store" - tags: ["Stores"] - operation_id: "CreateStore" - description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.CreateStoreResponse"} - } - } - } - }; - } - - rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { - option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; - - option (google.api.http) = { - patch: "/stores/{store_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Update a store" - tags: ["Stores"] - operation_id: "UpdateStore" - description: "Updates an existing store." - responses: { - key: "200" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} - } - } - } - }; - } - - rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { - option (google.api.http) = {delete: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Delete a store" - tags: ["Stores"] - operation_id: "DeleteStore" - description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} - } - } - } - }; - } - - rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { - option (google.api.http) = {get: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get a store" - tags: ["Stores"] - operation_id: "GetStore" - description: "Returns an OpenFGA store by its identifier" - }; - } - - rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { - option (google.api.http) = {get: "/stores"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all stores" - tags: ["Stores"] - operation_id: "ListStores" - description: - "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" - "The continuation token will be empty if there are no more stores.\n" - }; - } - - rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/streamed-list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Stream all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "StreamedListObjects" - description: - "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" - "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" - "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" - }; - } - - rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "ListObjects" - description: - "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will contain the related objects in an array in the \"objects\" field of the response and they will " - "be strings in the object format `:` (e.g. \"document:roadmap\").\n" - "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" - "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." - }; - } - - rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-users" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List the users matching the provided filter who have a certain relation to a particular type." - tags: ["Relationship Queries"] - operation_id: "ListUsers" - description: - "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" - "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." - "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" - "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" - "on individual subjects to ensure access to that document." - "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" - "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." - }; - } -} - -message ListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListObjectsResponse { - repeated string objects = 1 [ - json_name = "objects", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} - ]; -} - -message ListUsersRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - Object object = 3 [ - json_name = "object", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - repeated UserTypeFilter user_filters = 5 [ - json_name = "user_filters", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 1 - max_items: 1 - }, - - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The type of results returned. Only accepts exactly one value." - example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" - min_items: 1 - max_items: 1 - } - ]; - - repeated TupleKey contextual_tuples = 6 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 100, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListUsersResponse { - repeated User users = 1 [ - json_name = "users", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} - ]; -} - -message StreamedListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -// The response for a StreamedListObjects RPC. -message StreamedListObjectsResponse { - string object = 1 [ - json_name = "object", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} - ]; -} - -// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ -// which excludes I, L, O, and U -// because of https://github.com/ulid/spec#encoding - -message ReadRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "50" - minimum: 1 - maximum: 100 - } - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; -} - -message ReadRequestTupleKey { - string user = 1 [ - (validate.rules).string = { - pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" - ignore_empty: true - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ReadResponse { - repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more tuples." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteRequestWrites { - repeated TupleKey tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequestDeletes { - repeated TupleKeyWithoutCondition tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - WriteRequestWrites writes = 2; - - WriteRequestDeletes deletes = 3; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message WriteResponse {} - -message CheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - CheckRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Defaults to false. Making it true has performance implications. - bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - read_only: true - example: "false" - }]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 6; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; -} - -message CheckRequestTupleKey { - string user = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message CheckResponse { - bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; - - // For internal use only. - string resolution = 2; -} - -message BatchCheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated BatchCheckItem checks = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; -} - -message BatchCheckItem { - CheckRequestTupleKey tuple_key = 1 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; - google.protobuf.Struct context = 3; - - string correlation_id = 4 [ - json_name = "correlation_id", - (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" - description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." - }, - (google.api.field_behavior) = REQUIRED - ]; -} - -message BatchCheckResponse { - map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' - description: "map keys are the correlation_id values from the BatchCheckItems in the request" - }]; -} - -message BatchCheckSingleResult { - oneof check_result { - bool allowed = 1; - CheckError error = 2; - } -} - -message CheckError { - oneof code { - ErrorCode input_error = 1 [json_name = "input_error"]; - InternalErrorCode internal_error = 2 [json_name = "internal_error"]; - } - string message = 3; -} - -message ExpandRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ExpandRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; -} - -message ExpandRequestTupleKey { - string relation = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - string object = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ExpandResponse { - openfga.v1.UsersetTree tree = 1; -} - -message ReadAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string id = 2 [ - json_name = "id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelResponse { - AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; -} - -message WriteAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated TypeDefinition type_definitions = 2 [ - (google.api.field_behavior) = REQUIRED, - json_name = "type_definitions", - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string schema_version = 3 [ - json_name = "schema_version", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - in: [ - "1.0", - "1.1", - "1.2" - ] - ignore_empty: false - } - ]; - - map conditions = 4 [ - json_name = "conditions", - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} - ]; -} - -message WriteAuthorizationModelResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - google.protobuf.Int32Value page_size = 2 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 3 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; -} - -message ReadAuthorizationModelsResponse { - repeated AuthorizationModel authorization_models = 1 [ - json_name = "authorization_models", - (google.api.field_behavior) = REQUIRED - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more models." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 3 [ - json_name = "assertions", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 0 - max_items: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_items: 0 - max_items: 100 - } - ]; -} - -message WriteAssertionsResponse {} - -message ReadAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAssertionsResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 2; -} - -message ReadChangesRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string type = 2 [(validate.rules).string = { - pattern: "^[^:#\\s]{1,254}$" - ignore_empty: true - }]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - google.protobuf.Timestamp start_time = 5 [ - json_name = "start_time", - (validate.rules).timestamp.lt_now = true, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: - "Start date and time of changes to read.\n" - "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" - "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." - example: "2021-01-01T00:00:00.000Z" - } - ]; -} - -message ReadChangesResponse { - repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be identical if there are no new changes." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message CreateStoreRequest { - string name = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} - ]; -} - -message CreateStoreResponse { - string id = 1 [ - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message UpdateStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} - ]; -} - -message UpdateStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message DeleteStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message DeleteStoreResponse {} - -message GetStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message GetStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; -} - -message ListStoresRequest { - google.protobuf.Int32Value page_size = 1 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - } - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - string name = 3 [ - (google.api.field_behavior) = OPTIONAL, - (validate.rules).string = { - pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"my-store-name\"" - description: - "The name parameter instructs the API to only include results that match that name." - "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" - } - ]; -} - -message ListStoresResponse { - repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more stores." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message AssertionTupleKey { - string object = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string user = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; -} - -message Assertion { - AssertionTupleKey tuple_key = 1 [ - (validate.rules).message.required = true, - json_name = "tuple_key", - (google.api.field_behavior) = REQUIRED - ]; - - bool expectation = 2 [ - json_name = "expectation", - (google.api.field_behavior) = REQUIRED - ]; - - repeated TupleKey contextual_tuples = 3 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; -} - -message Assertions { - repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; -} diff --git a/openfga/v1/openfga_service.proto.tmp b/openfga/v1/openfga_service.proto.tmp deleted file mode 100644 index 005057aa..00000000 --- a/openfga/v1/openfga_service.proto.tmp +++ /dev/null @@ -1,1897 +0,0 @@ -syntax = "proto3"; - -package openfga.v1; - -import "google/api/annotations.proto"; -import "google/api/field_behavior.proto"; -import "google/api/visibility.proto"; -import "google/protobuf/struct.proto"; -import "google/protobuf/timestamp.proto"; -import "google/protobuf/wrappers.proto"; -import "openfga/v1/authzmodel.proto"; -import "openfga/v1/errors_ignore.proto"; -import "openfga/v1/openfga.proto"; -import "openfga/v1/openfga_service_consistency.proto"; -import "protoc-gen-openapiv2/options/annotations.proto"; -import "validate/validate.proto"; - -service OpenFGAService { - rpc Read(ReadRequest) returns (ReadResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/read" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get tuples from the store that matches a query, without following userset rewrite rules" - tags: ["Relationship Tuples"] - operation_id: "Read" - description: - "The Read API will return the tuples for a certain store that match a " - "query filter specified in the body of the request. \n" - "The API doesn't guarantee order by any field. \n" - "It is different from the `/stores/{store_id}/expand` API in that it only " - "returns relationship tuples that are stored in the system and satisfy the query. \n" - "In the body:\n" - "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" - "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " - "`type:object_id`) or type only (e.g., `type:`).\n" - "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " - "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" - "## Examples\n" - "### Query for all objects in a type definition\n" - "To query for all objects that `user:bob` has `reader` relationship in " - "the `document` type definition, call read API with body of\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:\"\n" - " }\n" - "}\n" - "```\n" - "The API will return tuples and a continuation token, something like\n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `user:bob` has a `reader` relationship with 1 document " - "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" - "The continuation token will be empty if there are no more tuples to query.\n" - "### Query for all stored relationship tuples that have a particular relation and object\n" - "To query for all users that have `reader` relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " - "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " - "`user:anne` because it only returns tuples and does not evaluate them.\n" - "### Query for all users with all relationships for a particular document\n" - "To query for all users that have any relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" - " },\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " - "and 1 `writer` (`user:anne`).\n" - }; - } - - rpc Write(WriteRequest) returns (WriteResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/write" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Add or delete tuples from the store" - tags: ["Relationship Tuples"] - operation_id: "Write" - description: - "The Write API will transactionally update the tuples for a certain store. Tuples and " - "type definitions allow OpenFGA to determine whether a " - "relationship exists between an object and an user.\n" - "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" - "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" - "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" - "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " - "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" - "## Example\n" - "### Adding relationships\n" - "To add `user:anne` as a `writer` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"writes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Removing relationships\n" - "To remove `user:bob` as a `reader` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"deletes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Check(CheckRequest) returns (CheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Check whether a user is authorized to access an object" - tags: ["Relationship Queries"] - operation_id: "Check" - description: - "The Check API returns whether a given user has a relationship with a given object in a given store.\n" - "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " - "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will return whether the relationship exists in the field `allowed`.\n\n" - "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" - "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" - "## Examples\n" - "### Querying with contextual tuples\n" - "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" - "```json\n" - "{\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - "}\n" - "```\n" - "the Check API can be used with the following request body:\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Querying usersets\n" - "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type document\n" - " relations\n" - " define reader: [user]\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"document:2021-budget#reader\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" - "### Querying usersets with difference in the model\n" - "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type group\n" - " relations\n" - " define member: [user]\n" - "type document\n" - " relations\n" - " define blocked: [user]\n" - " define reader: [group#member] but not blocked\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"group:finance\"\n" - " },\n" - " {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"blocked\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - "}\n" - "```\n" - "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" - "### Requesting higher consistency\n" - "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"consistency\": \"HIGHER_CONSISTENCY\"\n" - "}\n" - "```\n" - }; - } - - rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/batch-check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Send a list of `check` operations in a single request" - tags: ["Relationship Queries"] - operation_id: "BatchCheck" - description: - "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " - "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " - "for each check it received.\n\n" - "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " - "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " - "of each check to the item which was checked, so it must be unique for each item in the batch. " - "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " - " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" - "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" - "For more details on how `Check` functions, see the docs for `/check`.\n\n" - "### Examples\n" - "#### A BatchCheckRequest\n" - "```json\n" - "{\n" - " \"checks\": [\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:anne\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" - " },\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:bob\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" - " }\n" - " ]\n" - "}\n" - "```\n\n" - "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" - "```json\n" - "{\n" - " \"result\": {\n" - " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" - " \"allowed\": false, \n" - " \"error\": {\"message\": \"\"} \n" - " },\n" - " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" - " \"allowed\": true, \n" - " \"error\": {\"message\": \"\"} \n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Expand(ExpandRequest) returns (ExpandResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/expand" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" - tags: ["Relationship Queries"] - operation_id: "Expand" - description: - "The Expand API will return all users and usersets " - "that have certain relationship with an object in a certain store.\n" - "This is different from the `/stores/{store_id}/read` API in that both users and " - "computed usersets are returned.\n" - "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "The response will return a tree whose leaves are the specific users and usersets. " - "Union, intersection and difference operator are located in the intermediate nodes.\n\n" - "## Example\n" - "To expand all users that have the `reader` relationship with object `document:2021-budget`, " - "use the Expand API with the following request body\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "OpenFGA's response will be a userset tree of the users and usersets that have " - "read access to the document.\n" - "```json\n" - "{\n" - " \"tree\":{\n" - " \"root\":{\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"union\":{\n" - " \"nodes\":[\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"users\":{\n" - " \"users\":[\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"computed\":{\n" - " \"userset\":\"document:2021-budget#writer\"\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" - "### Expand Request with Contextual Tuples\n" - "\n" - "Given the model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "\n" - "type user\n" - "\n" - "type folder\n" - " relations\n" - " define owner: [user]\n" - "\n" - "type document\n" - " relations\n" - " define parent: [folder]\n" - " define viewer: [user] or writer\n" - " define writer: [user] or owner from parent\n" - "```\n" - "and the initial tuples\n" - "```json\n" - "[{\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"owner\",\n" - " \"object\": \"folder:1\"\n" - "}]\n" - "```\n" - "\n" - "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" - "\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:1\",\n" - " \"relation\": \"writer\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"folder:1\",\n" - " \"relation\": \"parent\",\n" - " \"object\": \"document:1\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "this returns:\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"document:1#writer\",\n" - " \"union\": {\n" - " \"nodes\": [\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": []\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"tupleToUserset\": {\n" - " \"tupleset\": \"document:1#parent\",\n" - " \"computed\": [\n" - " {\n" - " \"userset\": \"folder:1#owner\"\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"folder:1\",\n" - " \"relation\": \"owner\"\n" - " }\n" - "}\n" - "```\n" - "which gives\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"folder:1#owner\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": [\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return all the authorization models for a particular store" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModels" - description: - "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" - "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" - "## Example\n" - "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "If there are no more authorization models available, the `continuation_token` field will be empty\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"\"\n" - "}\n" - "```\n" - "" - }; - } - - rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a particular version of an authorization model" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModel" - description: - "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" - "The response will return the authorization model for the particular version.\n\n" - "## Example\n" - "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " - "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " - "`id` path parameter. The API will return:\n" - "```json\n" - "{\n" - " \"authorization_model\":{\n" - " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "In the above example, there are 2 types (`user` and `document`). The `document` type " - "has 2 relations (`writer` and `reader`)." - }; - } - - rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/authorization-models" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a new authorization model" - tags: ["Authorization Models"] - operation_id: "WriteAuthorizationModel" - description: - "The WriteAuthorizationModel API will add a new authorization model " - "to a store.\n" - "Each item in the `type_definitions` array is a type " - "definition as specified in the field `type_definition`.\n" - "The response will return the authorization model's ID in the `id` field.\n\n" - "## Example\n" - "To add an authorization model with `user` and `document` type definitions, call POST " - "authorization-models API with the body: \n" - "```json\n" - "{\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - "}\n" - "```\n" - "OpenFGA's response will include the version id for this authorization model, " - "which will look like \n" - "```\n" - "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" - "```\n" - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} - } - } - } - }; - } - - rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { - option (google.api.http) = { - put: "/stores/{store_id}/assertions/{authorization_model_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Upsert assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "WriteAssertions" - description: - "The WriteAssertions API will upsert new assertions for an authorization model id, " - "or overwrite the existing ones. An assertion is an object that contains a " - "tuple key, the expectation of whether a call to the Check API of that tuple key " - "will return true or false, and optionally a list of contextual tuples." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} - } - } - } - }; - } - - rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Read assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "ReadAssertions" - description: - "The ReadAssertions API will return, for a given authorization model id, " - "all the assertions stored for it. " - }; - } - - rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { - option (google.api.http) = {get: "/stores/{store_id}/changes"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a list of all the tuple changes" - tags: ["Relationship Tuples"] - operation_id: "ReadChanges" - description: - "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " - "in a given store, sorted by ascending time. The response will include a continuation token " - "that is used to get the next set of changes. If there are no changes after the provided continuation token, " - "the same token will be returned in order for it to be used when new changes are recorded. " - "If the store never had any tuples added or removed, this token will be empty.\n" - "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" - "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" - "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" - }; - } - - rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { - option (google.api.http) = { - post: "/stores" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a store" - tags: ["Stores"] - operation_id: "CreateStore" - description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.CreateStoreResponse"} - } - } - } - }; - } - - rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { - option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; - - option (google.api.http) = { - patch: "/stores/{store_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Update a store" - tags: ["Stores"] - operation_id: "UpdateStore" - description: "Updates an existing store." - responses: { - key: "200" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} - } - } - } - }; - } - - rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { - option (google.api.http) = {delete: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Delete a store" - tags: ["Stores"] - operation_id: "DeleteStore" - description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} - } - } - } - }; - } - - rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { - option (google.api.http) = {get: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get a store" - tags: ["Stores"] - operation_id: "GetStore" - description: "Returns an OpenFGA store by its identifier" - }; - } - - rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { - option (google.api.http) = {get: "/stores"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all stores" - tags: ["Stores"] - operation_id: "ListStores" - description: - "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" - "The continuation token will be empty if there are no more stores.\n" - }; - } - - rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/streamed-list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Stream all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "StreamedListObjects" - description: - "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" - "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" - "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" - }; - } - - rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "ListObjects" - description: - "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will contain the related objects in an array in the \"objects\" field of the response and they will " - "be strings in the object format `:` (e.g. \"document:roadmap\").\n" - "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" - "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." - }; - } - - rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-users" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List the users matching the provided filter who have a certain relation to a particular type." - tags: ["Relationship Queries"] - operation_id: "ListUsers" - description: - "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" - "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." - "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" - "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" - "on individual subjects to ensure access to that document." - "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" - "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." - }; - } -} - -message ListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListObjectsResponse { - repeated string objects = 1 [ - json_name = "objects", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} - ]; -} - -message ListUsersRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - Object object = 3 [ - json_name = "object", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - repeated UserTypeFilter user_filters = 5 [ - json_name = "user_filters", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 1 - max_items: 1 - }, - - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The type of results returned. Only accepts exactly one value." - example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" - min_items: 1 - max_items: 1 - } - ]; - - repeated TupleKey contextual_tuples = 6 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 100, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListUsersResponse { - repeated User users = 1 [ - json_name = "users", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} - ]; -} - -message StreamedListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -// The response for a StreamedListObjects RPC. -message StreamedListObjectsResponse { - string object = 1 [ - json_name = "object", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} - ]; -} - -// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ -// which excludes I, L, O, and U -// because of https://github.com/ulid/spec#encoding - -message ReadRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "50" - minimum: 1 - maximum: 100 - } - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; -} - -message ReadRequestTupleKey { - string user = 1 [ - (validate.rules).string = { - pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" - ignore_empty: true - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ReadResponse { - repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more tuples." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteRequestWrites { - repeated TupleKey tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequestDeletes { - repeated TupleKeyWithoutCondition tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - WriteRequestWrites writes = 2; - - WriteRequestDeletes deletes = 3; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message WriteResponse {} - -message CheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - CheckRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Defaults to false. Making it true has performance implications. - bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - read_only: true - example: "false" - }]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 6; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; -} - -message CheckRequestTupleKey { - string user = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message CheckResponse { - bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; - - // For internal use only. - string resolution = 2; -} - -message BatchCheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated BatchCheckItem checks = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; -} - -message BatchCheckItem { - CheckRequestTupleKey tuple_key = 1 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; - google.protobuf.Struct context = 3; - - string correlation_id = 4 [ - json_name = "correlation_id", - (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" - description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." - }, - (google.api.field_behavior) = REQUIRED - ]; -} - -message BatchCheckResponse { - map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' - description: "map keys are the correlation_id values from the BatchCheckItems in the request" - }]; -} - -message BatchCheckSingleResult { - oneof check_result { - bool allowed = 1; - CheckError error = 2; - } -} - -message CheckError { - oneof code { - ErrorCode input_error = 1 [json_name = "input_error"]; - InternalErrorCode internal_error = 2 [json_name = "internal_error"]; - } - string message = 3; -} - -message ExpandRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ExpandRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; -} - -message ExpandRequestTupleKey { - string relation = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - string object = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ExpandResponse { - openfga.v1.UsersetTree tree = 1; -} - -message ReadAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string id = 2 [ - json_name = "id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelResponse { - AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; -} - -message WriteAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated TypeDefinition type_definitions = 2 [ - (google.api.field_behavior) = REQUIRED, - json_name = "type_definitions", - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string schema_version = 3 [ - json_name = "schema_version", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - in: [ - "1.0", - "1.1", - "1.2" - ] - ignore_empty: false - } - ]; - - map conditions = 4 [ - json_name = "conditions", - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} - ]; -} - -message WriteAuthorizationModelResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - google.protobuf.Int32Value page_size = 2 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 3 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; -} - -message ReadAuthorizationModelsResponse { - repeated AuthorizationModel authorization_models = 1 [ - json_name = "authorization_models", - (google.api.field_behavior) = REQUIRED - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more models." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 3 [ - json_name = "assertions", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 0 - max_items: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_items: 0 - max_items: 100 - } - ]; -} - -message WriteAssertionsResponse {} - -message ReadAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAssertionsResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 2; -} - -message ReadChangesRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string type = 2 [(validate.rules).string = { - pattern: "^[^:#\\s]{1,254}$" - ignore_empty: true - }]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - google.protobuf.Timestamp start_time = 5 [ - json_name = "start_time", - (validate.rules).timestamp.lt_now = true, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: - "Start date and time of changes to read.\n" - "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" - "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." - example: "2021-01-01T00:00:00.000Z" - } - ]; -} - -message ReadChangesResponse { - repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be identical if there are no new changes." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message CreateStoreRequest { - string name = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} - ]; -} - -message CreateStoreResponse { - string id = 1 [ - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message UpdateStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} - ]; -} - -message UpdateStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message DeleteStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message DeleteStoreResponse {} - -message GetStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message GetStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; -} - -message ListStoresRequest { - google.protobuf.Int32Value page_size = 1 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - } - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - string name = 3 [ - (google.api.field_behavior) = OPTIONAL, - (validate.rules).string = { - pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"my-store-name\"" - description: - "The name parameter instructs the API to only include results that match that name." - "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" - } - ]; -} - -message ListStoresResponse { - repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more stores." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message AssertionTupleKey { - string object = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string user = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; -} - -message Assertion { - AssertionTupleKey tuple_key = 1 [ - (validate.rules).message.required = true, - json_name = "tuple_key", - (google.api.field_behavior) = REQUIRED - ]; - - bool expectation = 2 [ - json_name = "expectation", - (google.api.field_behavior) = REQUIRED - ]; - - repeated TupleKey contextual_tuples = 3 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; -} - -message Assertions { - repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; -} diff --git a/openfga/v1/openfga_service.proto.tmp3 b/openfga/v1/openfga_service.proto.tmp3 deleted file mode 100644 index 9cbad7ee..00000000 --- a/openfga/v1/openfga_service.proto.tmp3 +++ /dev/null @@ -1,1914 +0,0 @@ -syntax = "proto3"; - -package openfga.v1; - -import "google/api/annotations.proto"; -import "google/api/field_behavior.proto"; -import "google/api/visibility.proto"; -import "google/protobuf/struct.proto"; -import "google/protobuf/timestamp.proto"; -import "google/protobuf/wrappers.proto"; -import "openfga/v1/authzmodel.proto"; -import "openfga/v1/errors_ignore.proto"; -import "openfga/v1/openfga.proto"; -import "openfga/v1/openfga_service_consistency.proto"; -import "protoc-gen-openapiv2/options/annotations.proto"; -import "validate/validate.proto"; - -service OpenFGAService { - rpc Read(ReadRequest) returns (ReadResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/read" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get tuples from the store that matches a query, without following userset rewrite rules" - tags: ["Relationship Tuples"] - operation_id: "Read" - description: - "The Read API will return the tuples for a certain store that match a " - "query filter specified in the body of the request. \n" - "The API doesn't guarantee order by any field. \n" - "It is different from the `/stores/{store_id}/expand` API in that it only " - "returns relationship tuples that are stored in the system and satisfy the query. \n" - "In the body:\n" - "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" - "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " - "`type:object_id`) or type only (e.g., `type:`).\n" - "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " - "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" - "## Examples\n" - "### Query for all objects in a type definition\n" - "To query for all objects that `user:bob` has `reader` relationship in " - "the `document` type definition, call read API with body of\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:\"\n" - " }\n" - "}\n" - "```\n" - "The API will return tuples and a continuation token, something like\n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `user:bob` has a `reader` relationship with 1 document " - "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" - "The continuation token will be empty if there are no more tuples to query.\n" - "### Query for all stored relationship tuples that have a particular relation and object\n" - "To query for all users that have `reader` relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " - "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " - "`user:anne` because it only returns tuples and does not evaluate them.\n" - "### Query for all users with all relationships for a particular document\n" - "To query for all users that have any relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" - " },\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " - "and 1 `writer` (`user:anne`).\n" - }; - } - - rpc Write(WriteRequest) returns (WriteResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/write" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Add or delete tuples from the store" - tags: ["Relationship Tuples"] - operation_id: "Write" - description: - "The Write API will transactionally update the tuples for a certain store. Tuples and " - "type definitions allow OpenFGA to determine whether a " - "relationship exists between an object and an user.\n" - "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" - "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" - "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" - "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " - "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" - "## Example\n" - "### Adding relationships\n" - "To add `user:anne` as a `writer` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"writes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Removing relationships\n" - "To remove `user:bob` as a `reader` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"deletes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Check(CheckRequest) returns (CheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Check whether a user is authorized to access an object" - tags: ["Relationship Queries"] - operation_id: "Check" - description: - "The Check API returns whether a given user has a relationship with a given object in a given store.\n" - "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " - "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will return whether the relationship exists in the field `allowed`.\n\n" - "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" - "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" - "## Examples\n" - "### Querying with contextual tuples\n" - "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" - "```json\n" - "{\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - "}\n" - "```\n" - "the Check API can be used with the following request body:\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Querying usersets\n" - "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type document\n" - " relations\n" - " define reader: [user]\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"document:2021-budget#reader\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" - "### Querying usersets with difference in the model\n" - "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type group\n" - " relations\n" - " define member: [user]\n" - "type document\n" - " relations\n" - " define blocked: [user]\n" - " define reader: [group#member] but not blocked\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"group:finance\"\n" - " },\n" - " {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"blocked\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - "}\n" - "```\n" - "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" - "### Requesting higher consistency\n" - "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"consistency\": \"HIGHER_CONSISTENCY\"\n" - "}\n" - "```\n" - }; - } - - rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/batch-check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Send a list of `check` operations in a single request" - tags: ["Relationship Queries"] - operation_id: "BatchCheck" - description: - "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " - "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " - "for each check it received.\n\n" - "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " - "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " - "of each check to the item which was checked, so it must be unique for each item in the batch. " - "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " - " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" - "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" - "For more details on how `Check` functions, see the docs for `/check`.\n\n" - "### Examples\n" - "#### A BatchCheckRequest\n" - "```json\n" - "{\n" - " \"checks\": [\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:anne\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" - " },\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:bob\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" - " }\n" - " ]\n" - "}\n" - "```\n\n" - "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" - "```json\n" - "{\n" - " \"result\": {\n" - " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" - " \"allowed\": false, \n" - " \"error\": {\"message\": \"\"} \n" - " },\n" - " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" - " \"allowed\": true, \n" - " \"error\": {\"message\": \"\"} \n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Expand(ExpandRequest) returns (ExpandResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/expand" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" - tags: ["Relationship Queries"] - operation_id: "Expand" - description: - "The Expand API will return all users and usersets " - "that have certain relationship with an object in a certain store.\n" - "This is different from the `/stores/{store_id}/read` API in that both users and " - "computed usersets are returned.\n" - "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "The response will return a tree whose leaves are the specific users and usersets. " - "Union, intersection and difference operator are located in the intermediate nodes.\n\n" - "## Example\n" - "To expand all users that have the `reader` relationship with object `document:2021-budget`, " - "use the Expand API with the following request body\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "OpenFGA's response will be a userset tree of the users and usersets that have " - "read access to the document.\n" - "```json\n" - "{\n" - " \"tree\":{\n" - " \"root\":{\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"union\":{\n" - " \"nodes\":[\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"users\":{\n" - " \"users\":[\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"computed\":{\n" - " \"userset\":\"document:2021-budget#writer\"\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" - "### Expand Request with Contextual Tuples\n" - "\n" - "Given the model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "\n" - "type user\n" - "\n" - "type folder\n" - " relations\n" - " define owner: [user]\n" - "\n" - "type document\n" - " relations\n" - " define parent: [folder]\n" - " define viewer: [user] or writer\n" - " define writer: [user] or owner from parent\n" - "```\n" - "and the initial tuples\n" - "```json\n" - "[{\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"owner\",\n" - " \"object\": \"folder:1\"\n" - "}]\n" - "```\n" - "\n" - "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" - "\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:1\",\n" - " \"relation\": \"writer\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"folder:1\",\n" - " \"relation\": \"parent\",\n" - " \"object\": \"document:1\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "this returns:\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"document:1#writer\",\n" - " \"union\": {\n" - " \"nodes\": [\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": []\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"tupleToUserset\": {\n" - " \"tupleset\": \"document:1#parent\",\n" - " \"computed\": [\n" - " {\n" - " \"userset\": \"folder:1#owner\"\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"folder:1\",\n" - " \"relation\": \"owner\"\n" - " }\n" - "}\n" - "```\n" - "which gives\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"folder:1#owner\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": [\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return all the authorization models for a particular store" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModels" - description: - "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" - "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" - "## Example\n" - "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "If there are no more authorization models available, the `continuation_token` field will be empty\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"\"\n" - "}\n" - "```\n" - "" - }; - } - - rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a particular version of an authorization model" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModel" - description: - "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" - "The response will return the authorization model for the particular version.\n\n" - "## Example\n" - "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " - "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " - "`id` path parameter. The API will return:\n" - "```json\n" - "{\n" - " \"authorization_model\":{\n" - " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "In the above example, there are 2 types (`user` and `document`). The `document` type " - "has 2 relations (`writer` and `reader`)." - }; - } - - rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/authorization-models" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a new authorization model" - tags: ["Authorization Models"] - operation_id: "WriteAuthorizationModel" - description: - "The WriteAuthorizationModel API will add a new authorization model " - "to a store.\n" - "Each item in the `type_definitions` array is a type " - "definition as specified in the field `type_definition`.\n" - "The response will return the authorization model's ID in the `id` field.\n\n" - "## Example\n" - "To add an authorization model with `user` and `document` type definitions, call POST " - "authorization-models API with the body: \n" - "```json\n" - "{\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - "}\n" - "```\n" - "OpenFGA's response will include the version id for this authorization model, " - "which will look like \n" - "```\n" - "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" - "```\n" - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} - } - } - } - }; - } - - rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { - option (google.api.http) = { - put: "/stores/{store_id}/assertions/{authorization_model_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Upsert assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "WriteAssertions" - description: - "The WriteAssertions API will upsert new assertions for an authorization model id, " - "or overwrite the existing ones. An assertion is an object that contains a " - "tuple key, the expectation of whether a call to the Check API of that tuple key " - "will return true or false, and optionally a list of contextual tuples." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} - } - } - } - }; - } - - rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Read assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "ReadAssertions" - description: - "The ReadAssertions API will return, for a given authorization model id, " - "all the assertions stored for it. " - }; - } - - rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { - option (google.api.http) = {get: "/stores/{store_id}/changes"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a list of all the tuple changes" - tags: ["Relationship Tuples"] - operation_id: "ReadChanges" - description: - "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " - "in a given store, sorted by ascending time. The response will include a continuation token " - "that is used to get the next set of changes. If there are no changes after the provided continuation token, " - "the same token will be returned in order for it to be used when new changes are recorded. " - "If the store never had any tuples added or removed, this token will be empty.\n" - "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" - "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" - "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" - }; - } - - rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { - option (google.api.http) = { - post: "/stores" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a store" - tags: ["Stores"] - operation_id: "CreateStore" - description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.CreateStoreResponse"} - } - } - } - }; - } - - rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { - option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; - - option (google.api.http) = { - patch: "/stores/{store_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Update a store" - tags: ["Stores"] - operation_id: "UpdateStore" - description: "Updates an existing store." - responses: { - key: "200" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} - } - } - } - }; - } - - rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { - option (google.api.http) = {delete: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Delete a store" - tags: ["Stores"] - operation_id: "DeleteStore" - description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} - } - } - } - }; - } - - rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { - option (google.api.http) = {get: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get a store" - tags: ["Stores"] - operation_id: "GetStore" - description: "Returns an OpenFGA store by its identifier" - }; - } - - rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { - option (google.api.http) = {get: "/stores"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all stores" - tags: ["Stores"] - operation_id: "ListStores" - description: - "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" - "The continuation token will be empty if there are no more stores.\n" - }; - } - - rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/streamed-list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Stream all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "StreamedListObjects" - description: - "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" - "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" - "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" - }; - } - - rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "ListObjects" - description: - "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will contain the related objects in an array in the \"objects\" field of the response and they will " - "be strings in the object format `:` (e.g. \"document:roadmap\").\n" - "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" - "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." - }; - } - - rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-users" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List the users matching the provided filter who have a certain relation to a particular type." - tags: ["Relationship Queries"] - operation_id: "ListUsers" - description: - "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" - "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." - "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" - "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" - "on individual subjects to ensure access to that document." - "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" - "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." - }; - } -} - -message ListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListObjectsResponse { - repeated string objects = 1 [ - json_name = "objects", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} - ]; -} - -message ListUsersRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - Object object = 3 [ - json_name = "object", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - repeated UserTypeFilter user_filters = 5 [ - json_name = "user_filters", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 1 - max_items: 1 - }, - - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The type of results returned. Only accepts exactly one value." - example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" - min_items: 1 - max_items: 1 - } - ]; - - repeated TupleKey contextual_tuples = 6 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 100, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListUsersResponse { - repeated User users = 1 [ - json_name = "users", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} - ]; -} - -message StreamedListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -// The response for a StreamedListObjects RPC. -message StreamedListObjectsResponse { - string object = 1 [ - json_name = "object", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} - ]; -} - -// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ -// which excludes I, L, O, and U -// because of https://github.com/ulid/spec#encoding - -message ReadRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "50" - minimum: 1 - maximum: 100 - } - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; -} - -message ReadRequestTupleKey { - string user = 1 [ - (validate.rules).string = { - pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" - ignore_empty: true - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ReadResponse { - repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more tuples." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteRequestWrites { - repeated TupleKey tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequestDeletes { - repeated TupleKeyWithoutCondition tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - WriteRequestWrites writes = 2; - - WriteRequestDeletes deletes = 3; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message WriteResponse {} - -message CheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - CheckRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Defaults to false. Making it true has performance implications. - bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - read_only: true - example: "false" - }]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 6; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; -} - -message CheckRequestTupleKey { - string user = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message CheckResponse { - bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; - - // For internal use only. - string resolution = 2; -} - -message BatchCheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated BatchCheckItem checks = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; -} - -message BatchCheckItem { - CheckRequestTupleKey tuple_key = 1 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; - google.protobuf.Struct context = 3; - - string correlation_id = 4 [ - json_name = "correlation_id", - (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" - description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." - }, - (google.api.field_behavior) = REQUIRED - ]; -} - -message BatchCheckResponse { - map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' - description: "map keys are the correlation_id values from the BatchCheckItems in the request" - }]; -} - -message BatchCheckSingleResult { - oneof check_result { - bool allowed = 1; - CheckError error = 2; - } -} - -message CheckError { - oneof code { - ErrorCode input_error = 1 [json_name = "input_error"]; - InternalErrorCode internal_error = 2 [json_name = "internal_error"]; - } - string message = 3; -} - -message ExpandRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ExpandRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; -} - -message ExpandRequestTupleKey { - string relation = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - string object = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ExpandResponse { - openfga.v1.UsersetTree tree = 1; -} - -message ReadAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string id = 2 [ - json_name = "id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelResponse { - AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; -} - -message WriteAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated TypeDefinition type_definitions = 2 [ - (google.api.field_behavior) = REQUIRED, - json_name = "type_definitions", - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string schema_version = 3 [ - json_name = "schema_version", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - in: [ - "1.0", - "1.1", - "1.2" - ] - ignore_empty: false - } - ]; - - map conditions = 4 [ - json_name = "conditions", - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} - ]; - - // Labels and metadata for the authorization model (similar to Kubernetes labels) - map authorization_model_metadata = 5 [ - json_name = "authorization_model_metadata", - (validate.rules).map.max_pairs = 20, - (validate.rules).map.keys.string = { - pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" - max_bytes: 63 - ignore_empty: true - }, - (validate.rules).map.values.string = { - max_bytes: 256 - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" - } - ];} - -message WriteAuthorizationModelResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - google.protobuf.Int32Value page_size = 2 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 3 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; -} - -message ReadAuthorizationModelsResponse { - repeated AuthorizationModel authorization_models = 1 [ - json_name = "authorization_models", - (google.api.field_behavior) = REQUIRED - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more models." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 3 [ - json_name = "assertions", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 0 - max_items: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_items: 0 - max_items: 100 - } - ]; -} - -message WriteAssertionsResponse {} - -message ReadAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAssertionsResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 2; -} - -message ReadChangesRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string type = 2 [(validate.rules).string = { - pattern: "^[^:#\\s]{1,254}$" - ignore_empty: true - }]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - google.protobuf.Timestamp start_time = 5 [ - json_name = "start_time", - (validate.rules).timestamp.lt_now = true, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: - "Start date and time of changes to read.\n" - "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" - "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." - example: "2021-01-01T00:00:00.000Z" - } - ]; -} - -message ReadChangesResponse { - repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be identical if there are no new changes." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message CreateStoreRequest { - string name = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} - ]; -} - -message CreateStoreResponse { - string id = 1 [ - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message UpdateStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} - ]; -} - -message UpdateStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message DeleteStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message DeleteStoreResponse {} - -message GetStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message GetStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; -} - -message ListStoresRequest { - google.protobuf.Int32Value page_size = 1 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - } - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - string name = 3 [ - (google.api.field_behavior) = OPTIONAL, - (validate.rules).string = { - pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"my-store-name\"" - description: - "The name parameter instructs the API to only include results that match that name." - "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" - } - ]; -} - -message ListStoresResponse { - repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more stores." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message AssertionTupleKey { - string object = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string user = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; -} - -message Assertion { - AssertionTupleKey tuple_key = 1 [ - (validate.rules).message.required = true, - json_name = "tuple_key", - (google.api.field_behavior) = REQUIRED - ]; - - bool expectation = 2 [ - json_name = "expectation", - (google.api.field_behavior) = REQUIRED - ]; - - repeated TupleKey contextual_tuples = 3 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; -} - -message Assertions { - repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; -} diff --git a/openfga/v1/openfga_service.proto.tmp4 b/openfga/v1/openfga_service.proto.tmp4 deleted file mode 100644 index 8c738d8e..00000000 --- a/openfga/v1/openfga_service.proto.tmp4 +++ /dev/null @@ -1,1914 +0,0 @@ -syntax = "proto3"; - -package openfga.v1; - -import "google/api/annotations.proto"; -import "google/api/field_behavior.proto"; -import "google/api/visibility.proto"; -import "google/protobuf/struct.proto"; -import "google/protobuf/timestamp.proto"; -import "google/protobuf/wrappers.proto"; -import "openfga/v1/authzmodel.proto"; -import "openfga/v1/errors_ignore.proto"; -import "openfga/v1/openfga.proto"; -import "openfga/v1/openfga_service_consistency.proto"; -import "protoc-gen-openapiv2/options/annotations.proto"; -import "validate/validate.proto"; - -service OpenFGAService { - rpc Read(ReadRequest) returns (ReadResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/read" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get tuples from the store that matches a query, without following userset rewrite rules" - tags: ["Relationship Tuples"] - operation_id: "Read" - description: - "The Read API will return the tuples for a certain store that match a " - "query filter specified in the body of the request. \n" - "The API doesn't guarantee order by any field. \n" - "It is different from the `/stores/{store_id}/expand` API in that it only " - "returns relationship tuples that are stored in the system and satisfy the query. \n" - "In the body:\n" - "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" - "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " - "`type:object_id`) or type only (e.g., `type:`).\n" - "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " - "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" - "## Examples\n" - "### Query for all objects in a type definition\n" - "To query for all objects that `user:bob` has `reader` relationship in " - "the `document` type definition, call read API with body of\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:\"\n" - " }\n" - "}\n" - "```\n" - "The API will return tuples and a continuation token, something like\n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `user:bob` has a `reader` relationship with 1 document " - "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" - "The continuation token will be empty if there are no more tuples to query.\n" - "### Query for all stored relationship tuples that have a particular relation and object\n" - "To query for all users that have `reader` relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " - "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " - "`user:anne` because it only returns tuples and does not evaluate them.\n" - "### Query for all users with all relationships for a particular document\n" - "To query for all users that have any relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" - " },\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " - "and 1 `writer` (`user:anne`).\n" - }; - } - - rpc Write(WriteRequest) returns (WriteResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/write" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Add or delete tuples from the store" - tags: ["Relationship Tuples"] - operation_id: "Write" - description: - "The Write API will transactionally update the tuples for a certain store. Tuples and " - "type definitions allow OpenFGA to determine whether a " - "relationship exists between an object and an user.\n" - "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" - "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" - "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" - "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " - "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" - "## Example\n" - "### Adding relationships\n" - "To add `user:anne` as a `writer` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"writes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Removing relationships\n" - "To remove `user:bob` as a `reader` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"deletes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Check(CheckRequest) returns (CheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Check whether a user is authorized to access an object" - tags: ["Relationship Queries"] - operation_id: "Check" - description: - "The Check API returns whether a given user has a relationship with a given object in a given store.\n" - "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " - "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will return whether the relationship exists in the field `allowed`.\n\n" - "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" - "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" - "## Examples\n" - "### Querying with contextual tuples\n" - "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" - "```json\n" - "{\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - "}\n" - "```\n" - "the Check API can be used with the following request body:\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Querying usersets\n" - "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type document\n" - " relations\n" - " define reader: [user]\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"document:2021-budget#reader\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" - "### Querying usersets with difference in the model\n" - "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type group\n" - " relations\n" - " define member: [user]\n" - "type document\n" - " relations\n" - " define blocked: [user]\n" - " define reader: [group#member] but not blocked\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"group:finance\"\n" - " },\n" - " {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"blocked\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - "}\n" - "```\n" - "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" - "### Requesting higher consistency\n" - "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"consistency\": \"HIGHER_CONSISTENCY\"\n" - "}\n" - "```\n" - }; - } - - rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/batch-check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Send a list of `check` operations in a single request" - tags: ["Relationship Queries"] - operation_id: "BatchCheck" - description: - "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " - "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " - "for each check it received.\n\n" - "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " - "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " - "of each check to the item which was checked, so it must be unique for each item in the batch. " - "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " - " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" - "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" - "For more details on how `Check` functions, see the docs for `/check`.\n\n" - "### Examples\n" - "#### A BatchCheckRequest\n" - "```json\n" - "{\n" - " \"checks\": [\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:anne\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" - " },\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:bob\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" - " }\n" - " ]\n" - "}\n" - "```\n\n" - "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" - "```json\n" - "{\n" - " \"result\": {\n" - " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" - " \"allowed\": false, \n" - " \"error\": {\"message\": \"\"} \n" - " },\n" - " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" - " \"allowed\": true, \n" - " \"error\": {\"message\": \"\"} \n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Expand(ExpandRequest) returns (ExpandResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/expand" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" - tags: ["Relationship Queries"] - operation_id: "Expand" - description: - "The Expand API will return all users and usersets " - "that have certain relationship with an object in a certain store.\n" - "This is different from the `/stores/{store_id}/read` API in that both users and " - "computed usersets are returned.\n" - "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "The response will return a tree whose leaves are the specific users and usersets. " - "Union, intersection and difference operator are located in the intermediate nodes.\n\n" - "## Example\n" - "To expand all users that have the `reader` relationship with object `document:2021-budget`, " - "use the Expand API with the following request body\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "OpenFGA's response will be a userset tree of the users and usersets that have " - "read access to the document.\n" - "```json\n" - "{\n" - " \"tree\":{\n" - " \"root\":{\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"union\":{\n" - " \"nodes\":[\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"users\":{\n" - " \"users\":[\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"computed\":{\n" - " \"userset\":\"document:2021-budget#writer\"\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" - "### Expand Request with Contextual Tuples\n" - "\n" - "Given the model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "\n" - "type user\n" - "\n" - "type folder\n" - " relations\n" - " define owner: [user]\n" - "\n" - "type document\n" - " relations\n" - " define parent: [folder]\n" - " define viewer: [user] or writer\n" - " define writer: [user] or owner from parent\n" - "```\n" - "and the initial tuples\n" - "```json\n" - "[{\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"owner\",\n" - " \"object\": \"folder:1\"\n" - "}]\n" - "```\n" - "\n" - "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" - "\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:1\",\n" - " \"relation\": \"writer\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"folder:1\",\n" - " \"relation\": \"parent\",\n" - " \"object\": \"document:1\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "this returns:\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"document:1#writer\",\n" - " \"union\": {\n" - " \"nodes\": [\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": []\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"tupleToUserset\": {\n" - " \"tupleset\": \"document:1#parent\",\n" - " \"computed\": [\n" - " {\n" - " \"userset\": \"folder:1#owner\"\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"folder:1\",\n" - " \"relation\": \"owner\"\n" - " }\n" - "}\n" - "```\n" - "which gives\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"folder:1#owner\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": [\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return all the authorization models for a particular store" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModels" - description: - "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" - "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" - "## Example\n" - "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "If there are no more authorization models available, the `continuation_token` field will be empty\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"\"\n" - "}\n" - "```\n" - "" - }; - } - - rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a particular version of an authorization model" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModel" - description: - "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" - "The response will return the authorization model for the particular version.\n\n" - "## Example\n" - "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " - "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " - "`id` path parameter. The API will return:\n" - "```json\n" - "{\n" - " \"authorization_model\":{\n" - " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "In the above example, there are 2 types (`user` and `document`). The `document` type " - "has 2 relations (`writer` and `reader`)." - }; - } - - rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/authorization-models" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a new authorization model" - tags: ["Authorization Models"] - operation_id: "WriteAuthorizationModel" - description: - "The WriteAuthorizationModel API will add a new authorization model " - "to a store.\n" - "Each item in the `type_definitions` array is a type " - "definition as specified in the field `type_definition`.\n" - "The response will return the authorization model's ID in the `id` field.\n\n" - "## Example\n" - "To add an authorization model with `user` and `document` type definitions, call POST " - "authorization-models API with the body: \n" - "```json\n" - "{\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - "}\n" - "```\n" - "OpenFGA's response will include the version id for this authorization model, " - "which will look like \n" - "```\n" - "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" - "```\n" - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} - } - } - } - }; - } - - rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { - option (google.api.http) = { - put: "/stores/{store_id}/assertions/{authorization_model_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Upsert assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "WriteAssertions" - description: - "The WriteAssertions API will upsert new assertions for an authorization model id, " - "or overwrite the existing ones. An assertion is an object that contains a " - "tuple key, the expectation of whether a call to the Check API of that tuple key " - "will return true or false, and optionally a list of contextual tuples." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} - } - } - } - }; - } - - rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Read assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "ReadAssertions" - description: - "The ReadAssertions API will return, for a given authorization model id, " - "all the assertions stored for it. " - }; - } - - rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { - option (google.api.http) = {get: "/stores/{store_id}/changes"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a list of all the tuple changes" - tags: ["Relationship Tuples"] - operation_id: "ReadChanges" - description: - "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " - "in a given store, sorted by ascending time. The response will include a continuation token " - "that is used to get the next set of changes. If there are no changes after the provided continuation token, " - "the same token will be returned in order for it to be used when new changes are recorded. " - "If the store never had any tuples added or removed, this token will be empty.\n" - "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" - "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" - "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" - }; - } - - rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { - option (google.api.http) = { - post: "/stores" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a store" - tags: ["Stores"] - operation_id: "CreateStore" - description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.CreateStoreResponse"} - } - } - } - }; - } - - rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { - option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; - - option (google.api.http) = { - patch: "/stores/{store_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Update a store" - tags: ["Stores"] - operation_id: "UpdateStore" - description: "Updates an existing store." - responses: { - key: "200" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} - } - } - } - }; - } - - rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { - option (google.api.http) = {delete: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Delete a store" - tags: ["Stores"] - operation_id: "DeleteStore" - description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} - } - } - } - }; - } - - rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { - option (google.api.http) = {get: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get a store" - tags: ["Stores"] - operation_id: "GetStore" - description: "Returns an OpenFGA store by its identifier" - }; - } - - rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { - option (google.api.http) = {get: "/stores"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all stores" - tags: ["Stores"] - operation_id: "ListStores" - description: - "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" - "The continuation token will be empty if there are no more stores.\n" - }; - } - - rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/streamed-list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Stream all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "StreamedListObjects" - description: - "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" - "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" - "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" - }; - } - - rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "ListObjects" - description: - "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will contain the related objects in an array in the \"objects\" field of the response and they will " - "be strings in the object format `:` (e.g. \"document:roadmap\").\n" - "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" - "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." - }; - } - - rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-users" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List the users matching the provided filter who have a certain relation to a particular type." - tags: ["Relationship Queries"] - operation_id: "ListUsers" - description: - "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" - "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." - "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" - "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" - "on individual subjects to ensure access to that document." - "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" - "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." - }; - } -} - -message ListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListObjectsResponse { - repeated string objects = 1 [ - json_name = "objects", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} - ]; -} - -message ListUsersRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - Object object = 3 [ - json_name = "object", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - repeated UserTypeFilter user_filters = 5 [ - json_name = "user_filters", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 1 - max_items: 1 - }, - - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The type of results returned. Only accepts exactly one value." - example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" - min_items: 1 - max_items: 1 - } - ]; - - repeated TupleKey contextual_tuples = 6 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 100, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListUsersResponse { - repeated User users = 1 [ - json_name = "users", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} - ]; -} - -message StreamedListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -// The response for a StreamedListObjects RPC. -message StreamedListObjectsResponse { - string object = 1 [ - json_name = "object", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} - ]; -} - -// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ -// which excludes I, L, O, and U -// because of https://github.com/ulid/spec#encoding - -message ReadRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "50" - minimum: 1 - maximum: 100 - } - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; -} - -message ReadRequestTupleKey { - string user = 1 [ - (validate.rules).string = { - pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" - ignore_empty: true - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ReadResponse { - repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more tuples." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteRequestWrites { - repeated TupleKey tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequestDeletes { - repeated TupleKeyWithoutCondition tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - WriteRequestWrites writes = 2; - - WriteRequestDeletes deletes = 3; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message WriteResponse {} - -message CheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - CheckRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Defaults to false. Making it true has performance implications. - bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - read_only: true - example: "false" - }]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 6; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; -} - -message CheckRequestTupleKey { - string user = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message CheckResponse { - bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; - - // For internal use only. - string resolution = 2; -} - -message BatchCheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated BatchCheckItem checks = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; -} - -message BatchCheckItem { - CheckRequestTupleKey tuple_key = 1 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; - google.protobuf.Struct context = 3; - - string correlation_id = 4 [ - json_name = "correlation_id", - (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" - description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." - }, - (google.api.field_behavior) = REQUIRED - ]; -} - -message BatchCheckResponse { - map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' - description: "map keys are the correlation_id values from the BatchCheckItems in the request" - }]; -} - -message BatchCheckSingleResult { - oneof check_result { - bool allowed = 1; - CheckError error = 2; - } -} - -message CheckError { - oneof code { - ErrorCode input_error = 1 [json_name = "input_error"]; - InternalErrorCode internal_error = 2 [json_name = "internal_error"]; - } - string message = 3; -} - -message ExpandRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ExpandRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; -} - -message ExpandRequestTupleKey { - string relation = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - string object = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ExpandResponse { - openfga.v1.UsersetTree tree = 1; -} - -message ReadAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string id = 2 [ - json_name = "id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelResponse { - AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; -} - -message WriteAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated TypeDefinition type_definitions = 2 [ - (google.api.field_behavior) = REQUIRED, - json_name = "type_definitions", - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string schema_version = 3 [ - json_name = "schema_version", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - in: [ - "1.0", - "1.1", - "1.2" - ] - ignore_empty: false - } - ]; - - map conditions = 4 [ - json_name = "conditions", - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} - ]; - - // Labels and metadata for the authorization model (similar to Kubernetes labels) - map authorization_model_metadata = 5 [ - json_name = "authorization_model_metadata", - (validate.rules).map.max_pairs = 20, - (validate.rules).map.keys.string = { - pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" - max_bytes: 63 - ignore_empty: true - }, - (validate.rules).map.values.string = { - max_bytes: 256 - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" - } - ]; - -message WriteAuthorizationModelResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - google.protobuf.Int32Value page_size = 2 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 3 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; -} - -message ReadAuthorizationModelsResponse { - repeated AuthorizationModel authorization_models = 1 [ - json_name = "authorization_models", - (google.api.field_behavior) = REQUIRED - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more models." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 3 [ - json_name = "assertions", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 0 - max_items: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_items: 0 - max_items: 100 - } - ]; -} - -message WriteAssertionsResponse {} - -message ReadAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAssertionsResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 2; -} - -message ReadChangesRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string type = 2 [(validate.rules).string = { - pattern: "^[^:#\\s]{1,254}$" - ignore_empty: true - }]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - google.protobuf.Timestamp start_time = 5 [ - json_name = "start_time", - (validate.rules).timestamp.lt_now = true, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: - "Start date and time of changes to read.\n" - "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" - "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." - example: "2021-01-01T00:00:00.000Z" - } - ]; -} - -message ReadChangesResponse { - repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be identical if there are no new changes." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message CreateStoreRequest { - string name = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} - ]; -} - -message CreateStoreResponse { - string id = 1 [ - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message UpdateStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} - ]; -} - -message UpdateStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message DeleteStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message DeleteStoreResponse {} - -message GetStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message GetStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; -} - -message ListStoresRequest { - google.protobuf.Int32Value page_size = 1 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - } - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - string name = 3 [ - (google.api.field_behavior) = OPTIONAL, - (validate.rules).string = { - pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"my-store-name\"" - description: - "The name parameter instructs the API to only include results that match that name." - "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" - } - ]; -} - -message ListStoresResponse { - repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more stores." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message AssertionTupleKey { - string object = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string user = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; -} - -message Assertion { - AssertionTupleKey tuple_key = 1 [ - (validate.rules).message.required = true, - json_name = "tuple_key", - (google.api.field_behavior) = REQUIRED - ]; - - bool expectation = 2 [ - json_name = "expectation", - (google.api.field_behavior) = REQUIRED - ]; - - repeated TupleKey contextual_tuples = 3 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; -} - -message Assertions { - repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; -} diff --git a/openfga/v1/openfga_service.proto.tmp5 b/openfga/v1/openfga_service.proto.tmp5 deleted file mode 100644 index 836bb7e4..00000000 --- a/openfga/v1/openfga_service.proto.tmp5 +++ /dev/null @@ -1,1914 +0,0 @@ -syntax = "proto3"; - -package openfga.v1; - -import "google/api/annotations.proto"; -import "google/api/field_behavior.proto"; -import "google/api/visibility.proto"; -import "google/protobuf/struct.proto"; -import "google/protobuf/timestamp.proto"; -import "google/protobuf/wrappers.proto"; -import "openfga/v1/authzmodel.proto"; -import "openfga/v1/errors_ignore.proto"; -import "openfga/v1/openfga.proto"; -import "openfga/v1/openfga_service_consistency.proto"; -import "protoc-gen-openapiv2/options/annotations.proto"; -import "validate/validate.proto"; - -service OpenFGAService { - rpc Read(ReadRequest) returns (ReadResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/read" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get tuples from the store that matches a query, without following userset rewrite rules" - tags: ["Relationship Tuples"] - operation_id: "Read" - description: - "The Read API will return the tuples for a certain store that match a " - "query filter specified in the body of the request. \n" - "The API doesn't guarantee order by any field. \n" - "It is different from the `/stores/{store_id}/expand` API in that it only " - "returns relationship tuples that are stored in the system and satisfy the query. \n" - "In the body:\n" - "1. `tuple_key` is optional. If not specified, it will return all tuples in the store.\n" - "2. `tuple_key.object` is mandatory if `tuple_key` is specified. It can be a full object (e.g., " - "`type:object_id`) or type only (e.g., `type:`).\n" - "3. `tuple_key.user` is mandatory if tuple_key is specified in the case the `tuple_key.object` is a type only. " - "If tuple_key.user is specified, it needs to be a full object (e.g., `type:user_id`).\n" - "## Examples\n" - "### Query for all objects in a type definition\n" - "To query for all objects that `user:bob` has `reader` relationship in " - "the `document` type definition, call read API with body of\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:\"\n" - " }\n" - "}\n" - "```\n" - "The API will return tuples and a continuation token, something like\n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `user:bob` has a `reader` relationship with 1 document " - "`document:2021-budget`. Note that this API, unlike the List Objects API, does not evaluate the tuples in the store.\n" - "The continuation token will be empty if there are no more tuples to query.\n" - "### Query for all stored relationship tuples that have a particular relation and object\n" - "To query for all users that have `reader` relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`). " - "Note that, even if the model said that all `writers` are also `readers`, the API will not return writers such as " - "`user:anne` because it only returns tuples and does not evaluate them.\n" - "### Query for all users with all relationships for a particular document\n" - "To query for all users that have any relationship with " - "`document:2021-budget`, call read API with body of \n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "The API will return something like \n" - "```json\n" - "{\n" - " \"tuples\": [\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-05T13:42:12.356Z\"\n" - " },\n" - " {\n" - " \"key\": {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"timestamp\": \"2021-10-06T15:32:11.128Z\"\n" - " }\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "This means that `document:2021-budget` has 1 `reader` (`user:bob`) " - "and 1 `writer` (`user:anne`).\n" - }; - } - - rpc Write(WriteRequest) returns (WriteResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/write" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Add or delete tuples from the store" - tags: ["Relationship Tuples"] - operation_id: "Write" - description: - "The Write API will transactionally update the tuples for a certain store. Tuples and " - "type definitions allow OpenFGA to determine whether a " - "relationship exists between an object and an user.\n" - "In the body, `writes` adds new tuples and `deletes` removes existing tuples. When deleting a tuple, any `condition` specified with it is ignored.\n" - "The API is not idempotent: if, later on, you try to add the same tuple key (even if the `condition` is different), or if you try to delete a non-existing tuple, it will throw an error.\n" - "The API will not allow you to write tuples such as `document:2021-budget#viewer@document:2021-budget#viewer`, because they are implicit.\n" - "An `authorization_model_id` may be specified in the body. If it is, it will be used to assert that each written tuple (not deleted) " - "is valid for the model specified. If it is not specified, the latest authorization model ID will be used.\n" - "## Example\n" - "### Adding relationships\n" - "To add `user:anne` as a `writer` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"writes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"writer\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Removing relationships\n" - "To remove `user:bob` as a `reader` for `document:2021-budget`, call " - "write API with the following \n" - "```json\n" - "{\n" - " \"deletes\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Check(CheckRequest) returns (CheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Check whether a user is authorized to access an object" - tags: ["Relationship Queries"] - operation_id: "Check" - description: - "The Check API returns whether a given user has a relationship with a given object in a given store.\n" - "The `user` field of the request can be a specific target, such as `user:anne`, or a userset (set of users) such as `group:marketing#member` or a type-bound public access `user:*`.\n" - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "You may also provide an `authorization_model_id` in the body. This will be used to assert that the input `tuple_key` is valid for the model specified. " - "If not specified, the assertion will be made against the latest authorization model ID. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will return whether the relationship exists in the field `allowed`.\n\n" - "Some exceptions apply, but in general, if a Check API responds with `{allowed: true}`, then you can expect the equivalent ListObjects query to return the object, and viceversa. \n" - "For example, if `Check(user:anne, reader, document:2021-budget)` responds with `{allowed: true}`, then `ListObjects(user:anne, reader, document)` may include `document:2021-budget` in the response.\n" - "## Examples\n" - "### Querying with contextual tuples\n" - "In order to check if user `user:anne` of type `user` has a `reader` relationship with object `document:2021-budget` given the following contextual tuple\n" - "```json\n" - "{\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - "}\n" - "```\n" - "the Check API can be used with the following request body:\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"time_slot:office_hours\"\n" - " }\n" - " ]\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "### Querying usersets\n" - "Some Checks will always return `true`, even without any tuples. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type document\n" - " relations\n" - " define reader: [user]\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"document:2021-budget#reader\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - "}\n" - "```\n" - "will always return `{ \"allowed\": true }`. This is because usersets are self-defining: the userset `document:2021-budget#reader` will always have the `reader` relation with `document:2021-budget`.\n" - "### Querying usersets with difference in the model\n" - "A Check for a userset can yield results that must be treated carefully if the model involves difference. For example, for the following authorization model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "type user\n" - "type group\n" - " relations\n" - " define member: [user]\n" - "type document\n" - " relations\n" - " define blocked: [user]\n" - " define reader: [group#member] but not blocked\n" - "```\n" - "the following query\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"member\",\n" - " \"object\": \"group:finance\"\n" - " },\n" - " {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " {\n" - " \"user\": \"user:anne\",\n" - " \"relation\": \"blocked\",\n" - " \"object\": \"document:2021-budget\"\n" - " }\n" - " ]\n" - " },\n" - "}\n" - "```\n" - "will return `{ \"allowed\": true }`, even though a specific user of the userset `group:finance#member` does not have the `reader` relationship with the given object.\n" - "### Requesting higher consistency\n" - "By default, the Check API caches results for a short time to optimize performance. You may request higher consistency to inform the server that higher consistency should be preferred at the expense of increased latency. Care should be taken when requesting higher consistency due to the increased latency.\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"user\": \"group:finance#member\",\n" - " \"relation\": \"reader\",\n" - " \"object\": \"document:2021-budget\"\n" - " },\n" - " \"consistency\": \"HIGHER_CONSISTENCY\"\n" - "}\n" - "```\n" - }; - } - - rpc BatchCheck(BatchCheckRequest) returns (BatchCheckResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/batch-check" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Send a list of `check` operations in a single request" - tags: ["Relationship Queries"] - operation_id: "BatchCheck" - description: - "The `BatchCheck` API functions nearly identically to `Check`, but instead of checking a single " - "user-object relationship BatchCheck accepts a list of relationships to check and returns a map containing `BatchCheckItem` response " - "for each check it received.\n\n" - "An associated `correlation_id` is required for each check in the batch. This ID is used to correlate a check to the appropriate response. It is a string consisting of only " - "alphanumeric characters or hyphens with a maximum length of 36 characters. This `correlation_id` is used to map the result " - "of each check to the item which was checked, so it must be unique for each item in the batch. " - "We recommend using a UUID or ULID as the `correlation_id`, but you can use whatever unique identifier you need as long " - " as it matches this regex pattern: `^[\\w\\d-]{1,36}$`\n\n" - "NOTE: The maximum number of checks that can be passed in the `BatchCheck` API is configurable via the [OPENFGA_MAX_CHECKS_PER_BATCH_CHECK](https://openfga.dev/docs/getting-started/setup-openfga/configuration#OPENFGA_MAX_CHECKS_PER_BATCH_CHECK) environment variable. If `BatchCheck` is called using the SDK, the SDK can split the batch check requests for you.\n\n" - "For more details on how `Check` functions, see the docs for `/check`.\n\n" - "### Examples\n" - "#### A BatchCheckRequest\n" - "```json\n" - "{\n" - " \"checks\": [\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:anne\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PM3QM7VBPGB8KMPK8SBD5\"\n" - " },\n" - " {\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\"\n" - " \"relation\": \"reader\",\n" - " \"user\": \"user:bob\",\n" - " },\n" - " \"contextual_tuples\": {...}\n" - " \"context\": {}\n" - " \"correlation_id\": \"01JA8PMM6A90NV5ET0F28CYSZQ\"\n" - " }\n" - " ]\n" - "}\n" - "```\n\n" - "Below is a possible response to the above request. Note that the result map's keys are the `correlation_id` values from the checked items in the request:\n" - "```json\n" - "{\n" - " \"result\": {\n" - " \"01JA8PMM6A90NV5ET0F28CYSZQ\": {\n" - " \"allowed\": false, \n" - " \"error\": {\"message\": \"\"} \n" - " },\n" - " \"01JA8PM3QM7VBPGB8KMPK8SBD5\": {\n" - " \"allowed\": true, \n" - " \"error\": {\"message\": \"\"} \n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc Expand(ExpandRequest) returns (ExpandResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/expand" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Expand all relationships in userset tree format, and following userset rewrite rules. Useful to reason about and debug a certain relationship" - tags: ["Relationship Queries"] - operation_id: "Expand" - description: - "The Expand API will return all users and usersets " - "that have certain relationship with an object in a certain store.\n" - "This is different from the `/stores/{store_id}/read` API in that both users and " - "computed usersets are returned.\n" - "Body parameters `tuple_key.object` and `tuple_key.relation` are all required.\n" - "A `contextual_tuples` object may also be included in the body of the request. This object contains one field `tuple_keys`, which is an array of tuple keys. Each of these tuples may have an associated `condition`.\n" - "The response will return a tree whose leaves are the specific users and usersets. " - "Union, intersection and difference operator are located in the intermediate nodes.\n\n" - "## Example\n" - "To expand all users that have the `reader` relationship with object `document:2021-budget`, " - "use the Expand API with the following request body\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:2021-budget\",\n" - " \"relation\": \"reader\"\n" - " },\n" - " \"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"\n" - "}\n" - "```\n" - "OpenFGA's response will be a userset tree of the users and usersets that have " - "read access to the document.\n" - "```json\n" - "{\n" - " \"tree\":{\n" - " \"root\":{\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"union\":{\n" - " \"nodes\":[\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"users\":{\n" - " \"users\":[\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"type\":\"document:2021-budget#reader\",\n" - " \"leaf\":{\n" - " \"computed\":{\n" - " \"userset\":\"document:2021-budget#writer\"\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "The caller can then call expand API for the `writer` relationship for the `document:2021-budget`.\n" - "### Expand Request with Contextual Tuples\n" - "\n" - "Given the model\n" - "```python\n" - "model\n" - " schema 1.1\n" - "\n" - "type user\n" - "\n" - "type folder\n" - " relations\n" - " define owner: [user]\n" - "\n" - "type document\n" - " relations\n" - " define parent: [folder]\n" - " define viewer: [user] or writer\n" - " define writer: [user] or owner from parent\n" - "```\n" - "and the initial tuples\n" - "```json\n" - "[{\n" - " \"user\": \"user:bob\",\n" - " \"relation\": \"owner\",\n" - " \"object\": \"folder:1\"\n" - "}]\n" - "```\n" - "\n" - "To expand all `writers` of `document:1` when `document:1` is put in `folder:1`, the first call could be\n" - "\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"document:1\",\n" - " \"relation\": \"writer\"\n" - " },\n" - " \"contextual_tuples\": {\n" - " \"tuple_keys\": [\n" - " {\n" - " \"user\": \"folder:1\",\n" - " \"relation\": \"parent\",\n" - " \"object\": \"document:1\"\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "this returns:\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"document:1#writer\",\n" - " \"union\": {\n" - " \"nodes\": [\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": []\n" - " }\n" - " }\n" - " },\n" - " {\n" - " \"name\": \"document:1#writer\",\n" - " \"leaf\": {\n" - " \"tupleToUserset\": {\n" - " \"tupleset\": \"document:1#parent\",\n" - " \"computed\": [\n" - " {\n" - " \"userset\": \"folder:1#owner\"\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - "This tells us that the `owner` of `folder:1` may also be a writer. So our next call could be to find the `owners` of `folder:1`\n" - "```json\n" - "{\n" - " \"tuple_key\": {\n" - " \"object\": \"folder:1\",\n" - " \"relation\": \"owner\"\n" - " }\n" - "}\n" - "```\n" - "which gives\n" - "```json\n" - "{\n" - " \"tree\": {\n" - " \"root\": {\n" - " \"name\": \"folder:1#owner\",\n" - " \"leaf\": {\n" - " \"users\": {\n" - " \"users\": [\n" - " \"user:bob\"\n" - " ]\n" - " }\n" - " }\n" - " }\n" - " }\n" - "}\n" - "```\n" - }; - } - - rpc ReadAuthorizationModels(ReadAuthorizationModelsRequest) returns (ReadAuthorizationModelsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return all the authorization models for a particular store" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModels" - description: - "The ReadAuthorizationModels API will return all the authorization models for a certain store.\n" - "OpenFGA's response will contain an array of all authorization models, sorted in descending order of creation.\n\n" - "## Example\n" - "Assume that a store's authorization model has been configured twice. To get all the authorization models that have been created in this store, call GET authorization-models. The API will return a response that looks like:\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"\n" - "}\n" - "```\n" - "If there are no more authorization models available, the `continuation_token` field will be empty\n" - "```json\n" - "{\n" - " \"authorization_models\": [\n" - " {\n" - " \"id\": \"01G50QVV17PECNVAHX1GG4Y5NC\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " {\n" - " \"id\": \"01G4ZW8F4A07AKQ8RHSVG9RW04\",\n" - " \"type_definitions\": [...]\n" - " },\n" - " ],\n" - " \"continuation_token\": \"\"\n" - "}\n" - "```\n" - "" - }; - } - - rpc ReadAuthorizationModel(ReadAuthorizationModelRequest) returns (ReadAuthorizationModelResponse) { - option (google.api.http) = {get: "/stores/{store_id}/authorization-models/{id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a particular version of an authorization model" - tags: ["Authorization Models"] - operation_id: "ReadAuthorizationModel" - description: - "The ReadAuthorizationModel API returns an authorization model by its identifier.\n" - "The response will return the authorization model for the particular version.\n\n" - "## Example\n" - "To retrieve the authorization model with ID `01G5JAVJ41T49E9TT3SKVS7X1J` for the store, " - "call the GET authorization-models by ID API with `01G5JAVJ41T49E9TT3SKVS7X1J` as the " - "`id` path parameter. The API will return:\n" - "```json\n" - "{\n" - " \"authorization_model\":{\n" - " \"id\":\"01G5JAVJ41T49E9TT3SKVS7X1J\",\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - " }\n" - "}\n" - "```\n" - "In the above example, there are 2 types (`user` and `document`). The `document` type " - "has 2 relations (`writer` and `reader`)." - }; - } - - rpc WriteAuthorizationModel(WriteAuthorizationModelRequest) returns (WriteAuthorizationModelResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/authorization-models" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a new authorization model" - tags: ["Authorization Models"] - operation_id: "WriteAuthorizationModel" - description: - "The WriteAuthorizationModel API will add a new authorization model " - "to a store.\n" - "Each item in the `type_definitions` array is a type " - "definition as specified in the field `type_definition`.\n" - "The response will return the authorization model's ID in the `id` field.\n\n" - "## Example\n" - "To add an authorization model with `user` and `document` type definitions, call POST " - "authorization-models API with the body: \n" - "```json\n" - "{\n" - " \"type_definitions\":[\n" - " {\n" - " \"type\":\"user\"\n" - " },\n" - " {\n" - " \"type\":\"document\",\n" - " \"relations\":{\n" - " \"reader\":{\n" - " \"union\":{\n" - " \"child\":[\n" - " {\n" - " \"this\":{}\n" - " },\n" - " {\n" - " \"computedUserset\":{\n" - " \"object\":\"\",\n" - " \"relation\":\"writer\"\n" - " }\n" - " }\n" - " ]\n" - " }\n" - " },\n" - " \"writer\":{\n" - " \"this\":{}\n" - " }\n" - " }\n" - " }\n" - " ]\n" - "}\n" - "```\n" - "OpenFGA's response will include the version id for this authorization model, " - "which will look like \n" - "```\n" - "{\"authorization_model_id\": \"01G50QVV17PECNVAHX1GG4Y5NC\"}\n" - "```\n" - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAuthorizationModelResponse"} - } - } - } - }; - } - - rpc WriteAssertions(WriteAssertionsRequest) returns (WriteAssertionsResponse) { - option (google.api.http) = { - put: "/stores/{store_id}/assertions/{authorization_model_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Upsert assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "WriteAssertions" - description: - "The WriteAssertions API will upsert new assertions for an authorization model id, " - "or overwrite the existing ones. An assertion is an object that contains a " - "tuple key, the expectation of whether a call to the Check API of that tuple key " - "will return true or false, and optionally a list of contextual tuples." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.WriteAssertionsResponse"} - } - } - } - }; - } - - rpc ReadAssertions(ReadAssertionsRequest) returns (ReadAssertionsResponse) { - option (google.api.http) = {get: "/stores/{store_id}/assertions/{authorization_model_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Read assertions for an authorization model ID" - tags: ["Assertions"] - operation_id: "ReadAssertions" - description: - "The ReadAssertions API will return, for a given authorization model id, " - "all the assertions stored for it. " - }; - } - - rpc ReadChanges(ReadChangesRequest) returns (ReadChangesResponse) { - option (google.api.http) = {get: "/stores/{store_id}/changes"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Return a list of all the tuple changes" - tags: ["Relationship Tuples"] - operation_id: "ReadChanges" - description: - "The ReadChanges API will return a paginated list of tuple changes (additions and deletions) that occurred " - "in a given store, sorted by ascending time. The response will include a continuation token " - "that is used to get the next set of changes. If there are no changes after the provided continuation token, " - "the same token will be returned in order for it to be used when new changes are recorded. " - "If the store never had any tuples added or removed, this token will be empty.\n" - "You can use the `type` parameter to only get the list of tuple changes that affect objects of that type.\n" - "When reading a write tuple change, if it was conditioned, the condition will be returned.\n" - "When reading a delete tuple change, the condition will NOT be returned regardless of whether it was originally conditioned or not.\n" - }; - } - - rpc CreateStore(CreateStoreRequest) returns (CreateStoreResponse) { - option (google.api.http) = { - post: "/stores" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Create a store" - tags: ["Stores"] - operation_id: "CreateStore" - description: "Create a unique OpenFGA store which will be used to store authorization models and relationship tuples." - responses: { - key: "201" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.CreateStoreResponse"} - } - } - } - }; - } - - rpc UpdateStore(UpdateStoreRequest) returns (UpdateStoreResponse) { - option (google.api.method_visibility).restriction = "UNIMPLEMENTED"; - - option (google.api.http) = { - patch: "/stores/{store_id}" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Update a store" - tags: ["Stores"] - operation_id: "UpdateStore" - description: "Updates an existing store." - responses: { - key: "200" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.UpdateStoreResponse"} - } - } - } - }; - } - - rpc DeleteStore(DeleteStoreRequest) returns (DeleteStoreResponse) { - option (google.api.http) = {delete: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Delete a store" - tags: ["Stores"] - operation_id: "DeleteStore" - description: "Delete an OpenFGA store. This does not delete the data associated with the store, like tuples or authorization models." - responses: { - key: "204" - value: { - description: "A successful response." - schema: { - json_schema: {ref: ".openfga.v1.DeleteStoreResponse"} - } - } - } - }; - } - - rpc GetStore(GetStoreRequest) returns (GetStoreResponse) { - option (google.api.http) = {get: "/stores/{store_id}"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Get a store" - tags: ["Stores"] - operation_id: "GetStore" - description: "Returns an OpenFGA store by its identifier" - }; - } - - rpc ListStores(ListStoresRequest) returns (ListStoresResponse) { - option (google.api.http) = {get: "/stores"}; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all stores" - tags: ["Stores"] - operation_id: "ListStores" - description: - "Returns a paginated list of OpenFGA stores and a continuation token to get additional stores.\n" - "The continuation token will be empty if there are no more stores.\n" - }; - } - - rpc StreamedListObjects(StreamedListObjectsRequest) returns (stream StreamedListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/streamed-list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "Stream all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "StreamedListObjects" - description: - "The Streamed ListObjects API is very similar to the the ListObjects API, with two differences: \n" - "1. Instead of collecting all objects before returning a response, it streams them to the client as they are collected. \n" - "2. The number of results returned is only limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE. \n" - }; - } - - rpc ListObjects(ListObjectsRequest) returns (ListObjectsResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-objects" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List all objects of the given type that the user has a relation with" - tags: ["Relationship Queries"] - operation_id: "ListObjects" - description: - "The ListObjects API returns a list of all the objects of the given type that the user has a relation with.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "By default, the Check API caches results for a short time to optimize performance. You may specify a value of `HIGHER_CONSISTENCY` for the optional `consistency` parameter in the body to inform the server that higher conisistency is preferred at the expense of increased latency. Consideration should be given to the increased latency if requesting higher consistency.\n" - "The response will contain the related objects in an array in the \"objects\" field of the response and they will " - "be strings in the object format `:` (e.g. \"document:roadmap\").\n" - "The number of objects in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_OBJECTS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_OBJECTS_MAX_RESULTS, whichever is hit first.\n" - "The objects given will not be sorted, and therefore two identical calls can give a given different set of objects." - }; - } - - rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) { - option (google.api.http) = { - post: "/stores/{store_id}/list-users" - body: "*" - }; - - option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = { - summary: "List the users matching the provided filter who have a certain relation to a particular type." - tags: ["Relationship Queries"] - operation_id: "ListUsers" - description: - "The ListUsers API returns a list of all the users of a specific type that have a relation to a given object.\n " - "To arrive at a result, the API uses: an authorization model, explicit tuples written through the Write API, contextual tuples present in the request, and implicit tuples that exist by virtue of applying set theory " - "(such as `document:2021-budget#viewer@document:2021-budget#viewer`; the set of users who are viewers of `document:2021-budget` are the set of users who are the viewers of `document:2021-budget`).\n" - "An `authorization_model_id` may be specified in the body. If it is not specified, the latest authorization " - "model ID will be used. It is strongly recommended to specify authorization model id for better performance.\n" - "You may also specify `contextual_tuples` that will be treated as regular tuples. Each of these tuples may have an associated `condition`.\n" - "You may also provide a `context` object that will be used to evaluate the conditioned tuples in the system. It is strongly recommended to provide a value for all the input parameters of all the conditions, to ensure that all tuples be evaluated correctly.\n" - "The response will contain the related users in an array in the \"users\" field of the response. These results may include specific objects, usersets \n" - "or type-bound public access. Each of these types of results is encoded in its own type and not represented as a string." - "In cases where a type-bound public access result is returned (e.g. `user:*`), it cannot be inferred that all subjects\n" - "of that type have a relation to the object; it is possible that negations exist and checks should still be queried\n" - "on individual subjects to ensure access to that document." - "The number of users in the response array will be limited by the execution timeout specified in the flag OPENFGA_LIST_USERS_DEADLINE " - "and by the upper bound specified in the flag OPENFGA_LIST_USERS_MAX_RESULTS, whichever is hit first.\n" - "The returned users will not be sorted, and therefore two identical calls may yield different sets of users." - }; - } -} - -message ListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListObjectsResponse { - repeated string objects = 1 [ - json_name = "objects", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "[\"document:roadmap\",\"document:planning\"]"} - ]; -} - -message ListUsersRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - Object object = 3 [ - json_name = "object", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:example\""}, - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - repeated UserTypeFilter user_filters = 5 [ - json_name = "user_filters", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 1 - max_items: 1 - }, - - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The type of results returned. Only accepts exactly one value." - example: "[{\"type\": \"user\"}, {\"type\": \"group\", \"relation\": \"member\"}]" - min_items: 1 - max_items: 1 - } - ]; - - repeated TupleKey contextual_tuples = 6 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 100, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 100} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -message ListUsersResponse { - repeated User users = 1 [ - json_name = "users", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: ""} - ]; -} - -message StreamedListObjectsRequest { - string store_id = 1 [ - json_name = "store_id", - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - string type = 3 [ - json_name = "type", - (validate.rules).string = {pattern: "^[^:#@\\s]{1,254}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document\""}, - (google.api.field_behavior) = REQUIRED - ]; - - string relation = 4 [ - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"reader\""} - ]; - - string user = 5 [ - (validate.rules).string = { - min_bytes: 1 - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_length: 1 - max_length: 512 - example: "\"user:anne\"" - }, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 6 [json_name = "contextual_tuples"]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 7; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 8 [(validate.rules).enum.defined_only = true]; -} - -// The response for a StreamedListObjects RPC. -message StreamedListObjectsResponse { - string object = 1 [ - json_name = "object", - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"document:roadmap\""} - ]; -} - -// Note: store_id is a ULID using pattern ^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$ -// which excludes I, L, O, and U -// because of https://github.com/ulid/spec#encoding - -message ReadRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ReadRequestTupleKey tuple_key = 2 [json_name = "tuple_key"]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "50" - minimum: 1 - maximum: 100 - } - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 5 [(validate.rules).enum.defined_only = true]; -} - -message ReadRequestTupleKey { - string user = 1 [ - (validate.rules).string = { - pattern: "^[^\\s]{1,511}:[^\\s]{1,511}$" - ignore_empty: true - max_bytes: 512 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ReadResponse { - repeated openfga.v1.Tuple tuples = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more tuples." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteRequestWrites { - repeated TupleKey tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequestDeletes { - repeated TupleKeyWithoutCondition tuple_keys = 1 [ - json_name = "tuple_keys", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated.min_items = 1, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; -} - -message WriteRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - WriteRequestWrites writes = 2; - - WriteRequestDeletes deletes = 3; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message WriteResponse {} - -message CheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - CheckRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 3 [json_name = "contextual_tuples"]; - - string authorization_model_id = 4 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Defaults to false. Making it true has performance implications. - bool trace = 5 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - read_only: true - example: "false" - }]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 6; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 7 [(validate.rules).enum.defined_only = true]; -} - -message CheckRequestTupleKey { - string user = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string object = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message CheckResponse { - bool allowed = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "true"}]; - - // For internal use only. - string resolution = 2; -} - -message BatchCheckRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated BatchCheckItem checks = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; -} - -message BatchCheckItem { - CheckRequestTupleKey tuple_key = 1 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - openfga.v1.ContextualTupleKeys contextual_tuples = 2 [json_name = "contextual_tuples"]; - google.protobuf.Struct context = 3; - - string correlation_id = 4 [ - json_name = "correlation_id", - (validate.rules).string = {pattern: "^[\\w\\d-]{1,36}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc\"" - description: "correlation_id must be a string containing only letters, numbers, or hyphens, with length ≤ 36 characters." - }, - (google.api.field_behavior) = REQUIRED - ]; -} - -message BatchCheckResponse { - map result = 1 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: '{"1cd93d8c-8e45-43c6-9a15-cbb3c7f394bc": {"allowed": true, "error": {"message": ""}}}' - description: "map keys are the correlation_id values from the BatchCheckItems in the request" - }]; -} - -message BatchCheckSingleResult { - oneof check_result { - bool allowed = 1; - CheckError error = 2; - } -} - -message CheckError { - oneof code { - ErrorCode input_error = 1 [json_name = "input_error"]; - InternalErrorCode internal_error = 2 [json_name = "internal_error"]; - } - string message = 3; -} - -message ExpandRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - ExpandRequestTupleKey tuple_key = 2 [ - json_name = "tuple_key", - (validate.rules).message.required = true, - (google.api.field_behavior) = REQUIRED - ]; - - string authorization_model_id = 3 [ - json_name = "authorization_model_id", - (validate.rules).string = { - pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - // Controls the consistency preference for this request. Default value is UNSPECIFIED, which will have the same behavior as MINIMIZE_LATENCY. - ConsistencyPreference consistency = 4 [(validate.rules).enum.defined_only = true]; - - openfga.v1.ContextualTupleKeys contextual_tuples = 5 [json_name = "contextual_tuples"]; -} - -message ExpandRequestTupleKey { - string relation = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^:#@\\s]{1,50}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - string object = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - pattern: "^[^\\s]{2,256}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; -} - -message ExpandResponse { - openfga.v1.UsersetTree tree = 1; -} - -message ReadAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string id = 2 [ - json_name = "id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelResponse { - AuthorizationModel authorization_model = 1 [json_name = "authorization_model"]; -} - -message WriteAuthorizationModelRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - repeated TypeDefinition type_definitions = 2 [ - (google.api.field_behavior) = REQUIRED, - json_name = "type_definitions", - (validate.rules).repeated = {min_items: 1}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {min_items: 1} - ]; - - string schema_version = 3 [ - json_name = "schema_version", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = { - in: [ - "1.0", - "1.1", - "1.2" - ] - ignore_empty: false - } - ]; - - map conditions = 4 [ - json_name = "conditions", - (validate.rules).map.max_pairs = 25, - (validate.rules).map.keys.string = {pattern: "^[^:#@\\s]{1,50}$"} - ]; - - // Labels and metadata for the authorization model (similar to Kubernetes labels) - map authorization_model_metadata = 5 [ - json_name = "authorization_model_metadata", - (validate.rules).map.max_pairs = 20, - (validate.rules).map.keys.string = { - pattern: "^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$" - max_bytes: 63 - ignore_empty: true - }, - (validate.rules).map.values.string = { - max_bytes: 256 - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "{\"environment\": \"production\", \"team\": \"platform\", \"version\": \"v1.2.3\"}" - } - ]; -} -message WriteAuthorizationModelResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAuthorizationModelsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - google.protobuf.Int32Value page_size = 2 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 3 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; -} - -message ReadAuthorizationModelsResponse { - repeated AuthorizationModel authorization_models = 1 [ - json_name = "authorization_models", - (google.api.field_behavior) = REQUIRED - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more models." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message WriteAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 3 [ - json_name = "assertions", - (google.api.field_behavior) = REQUIRED, - (validate.rules).repeated = { - min_items: 0 - max_items: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - min_items: 0 - max_items: 100 - } - ]; -} - -message WriteAssertionsResponse {} - -message ReadAssertionsRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string authorization_model_id = 2 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; -} - -message ReadAssertionsResponse { - string authorization_model_id = 1 [ - json_name = "authorization_model_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01G5JAVJ41T49E9TT3SKVS7X1J\""} - ]; - - repeated openfga.v1.Assertion assertions = 2; -} - -message ReadChangesRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - - string type = 2 [(validate.rules).string = { - pattern: "^[^:#\\s]{1,254}$" - ignore_empty: true - }]; - - google.protobuf.Int32Value page_size = 3 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "50"} - ]; - - string continuation_token = 4 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - google.protobuf.Timestamp start_time = 5 [ - json_name = "start_time", - (validate.rules).timestamp.lt_now = true, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: - "Start date and time of changes to read.\n" - "Format: ISO 8601 timestamp (e.g., 2022-01-01T00:00:00Z)\n" - "If a continuation_token is provided along side start_time, the continuation_token will take precedence over start_time." - example: "2021-01-01T00:00:00.000Z" - } - ]; -} - -message ReadChangesResponse { - repeated openfga.v1.TupleChange changes = 1 [(google.api.field_behavior) = REQUIRED]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be identical if there are no new changes." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message CreateStoreRequest { - string name = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-store-name\""} - ]; -} - -message CreateStoreResponse { - string id = 1 [ - (google.api.field_behavior) = REQUIRED, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message UpdateStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; - string name = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"my-new-store-name\""} - ]; -} - -message UpdateStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; -} - -message DeleteStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message DeleteStoreResponse {} - -message GetStoreRequest { - string store_id = 1 [ - json_name = "store_id", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[ABCDEFGHJKMNPQRSTVWXYZ0-9]{26}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""} - ]; -} - -message GetStoreResponse { - string id = 1 [ - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}, - (google.api.field_behavior) = REQUIRED - ]; - string name = 2 [(google.api.field_behavior) = REQUIRED]; - google.protobuf.Timestamp created_at = 3 [ - json_name = "created_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp updated_at = 4 [ - json_name = "updated_at", - (google.api.field_behavior) = REQUIRED - ]; - google.protobuf.Timestamp deleted_at = 5 [json_name = "deleted_at"]; -} - -message ListStoresRequest { - google.protobuf.Int32Value page_size = 1 [ - json_name = "page_size", - (validate.rules).int32 = { - gte: 1 - lte: 100 - } - ]; - - string continuation_token = 2 [ - json_name = "continuation_token", - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\""} - ]; - - string name = 3 [ - (google.api.field_behavior) = OPTIONAL, - (validate.rules).string = { - pattern: "^[a-zA-Z0-9\\s\\.\\-\\/^_&@]{3,64}$" - ignore_empty: true - }, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - example: "\"my-store-name\"" - description: - "The name parameter instructs the API to only include results that match that name." - "Multiple results may be returned. Only exact matches will be returned; substring matches and regexes will not be evaluated" - } - ]; -} - -message ListStoresResponse { - repeated openfga.v1.Store stores = 1 [(google.api.field_behavior) = REQUIRED]; - string continuation_token = 2 [ - json_name = "continuation_token", - (google.api.field_behavior) = REQUIRED, - (validate.rules).string.max_bytes = 5120, - (validate.rules).string.pattern = "^$|^[A-Za-z0-9-_]+={0,2}$", - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - description: "The continuation token will be empty if there are no more stores." - example: "\"eyJwayI6IkxBVEVTVF9OU0NPTkZJR19hdXRoMHN0b3JlIiwic2siOiIxem1qbXF3MWZLZExTcUoyN01MdTdqTjh0cWgifQ==\"" - } - ]; -} - -message AssertionTupleKey { - string object = 1 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,256}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 256 - example: "\"document:2021-budget\"" - } - ]; - - string relation = 2 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^:#@\\s]{1,50}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 50 - example: "\"reader\"" - } - ]; - - string user = 3 [ - (google.api.field_behavior) = REQUIRED, - (validate.rules).string = {pattern: "^[^\\s]{2,512}$"}, - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = { - max_length: 512 - example: "\"user:anne\"" - } - ]; -} - -message Assertion { - AssertionTupleKey tuple_key = 1 [ - (validate.rules).message.required = true, - json_name = "tuple_key", - (google.api.field_behavior) = REQUIRED - ]; - - bool expectation = 2 [ - json_name = "expectation", - (google.api.field_behavior) = REQUIRED - ]; - - repeated TupleKey contextual_tuples = 3 [ - json_name = "contextual_tuples", - (validate.rules).repeated.max_items = 20, // This is not a typo, we intentionally restrict contextual tuples in assertions to 20 for now - (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {max_items: 20} - ]; - - // Additional request context that will be used to evaluate any ABAC conditions encountered - // in the query evaluation. - google.protobuf.Struct context = 4 [(grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: '{"view_count": 100}'}]; -} - -message Assertions { - repeated Assertion assertions = 1 [(google.api.field_behavior) = REQUIRED]; -} diff --git a/proto/openfga/v1/authzmodel.pb.go b/proto/openfga/v1/authzmodel.pb.go index 388a7b6b..923d5f97 100644 --- a/proto/openfga/v1/authzmodel.pb.go +++ b/proto/openfga/v1/authzmodel.pb.go @@ -108,6 +108,8 @@ type AuthorizationModel struct { SchemaVersion string `protobuf:"bytes,2,opt,name=schema_version,proto3" json:"schema_version,omitempty"` TypeDefinitions []*TypeDefinition `protobuf:"bytes,3,rep,name=type_definitions,proto3" json:"type_definitions,omitempty"` Conditions map[string]*Condition `protobuf:"bytes,4,rep,name=conditions,proto3" json:"conditions,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"` + // Labels and metadata for the authorization model (similar to Kubernetes labels) + Metadata map[string]string `protobuf:"bytes,5,rep,name=metadata,proto3" json:"metadata,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"` } func (x *AuthorizationModel) Reset() { @@ -170,6 +172,13 @@ func (x *AuthorizationModel) GetConditions() map[string]*Condition { return nil } +func (x *AuthorizationModel) GetMetadata() map[string]string { + if x != nil { + return x.Metadata + } + return nil +} + type TypeDefinition struct { state protoimpl.MessageState sizeCache protoimpl.SizeCache @@ -1289,7 +1298,7 @@ var file_openfga_v1_authzmodel_proto_rawDesc = []byte{ 0x2f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x17, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2f, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2e, 0x70, 0x72, - 0x6f, 0x74, 0x6f, 0x22, 0x94, 0x06, 0x0a, 0x12, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, + 0x6f, 0x74, 0x6f, 0x22, 0xa9, 0x08, 0x0a, 0x12, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x12, 0x5f, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4f, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, @@ -1333,243 +1342,260 @@ var file_openfga_v1_authzmodel_proto_rawDesc = []byte{ 0x45, 0x6e, 0x74, 0x72, 0x79, 0x42, 0x21, 0xfa, 0x42, 0x1e, 0x9a, 0x01, 0x1b, 0x10, 0x19, 0x22, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x00, 0x52, 0x0a, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, - 0x69, 0x6f, 0x6e, 0x73, 0x1a, 0x54, 0x0a, 0x0f, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, - 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x2b, 0x0a, 0x05, 0x76, 0x61, 0x6c, - 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, - 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x52, - 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0xbd, 0x03, 0x0a, 0x0e, 0x54, - 0x79, 0x70, 0x65, 0x44, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x41, 0x0a, - 0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x2d, 0x92, 0x41, 0x0c, - 0x4a, 0x0a, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x22, 0xe0, 0x41, 0x02, 0xfa, - 0x42, 0x18, 0x72, 0x16, 0x32, 0x11, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, - 0x31, 0x2c, 0x32, 0x35, 0x34, 0x7d, 0x24, 0xd0, 0x01, 0x00, 0x52, 0x04, 0x74, 0x79, 0x70, 0x65, - 0x12, 0xe2, 0x01, 0x0a, 0x09, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x02, - 0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, - 0x31, 0x2e, 0x54, 0x79, 0x70, 0x65, 0x44, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, - 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x42, - 0x98, 0x01, 0x92, 0x41, 0x79, 0x4a, 0x77, 0x7b, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, - 0x3a, 0x7b, 0x22, 0x75, 0x6e, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x7b, 0x22, 0x63, 0x68, 0x69, 0x6c, - 0x64, 0x22, 0x3a, 0x5b, 0x7b, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x7d, 0x2c, - 0x7b, 0x22, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, - 0x74, 0x22, 0x3a, 0x7b, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x22, 0x22, 0x2c, - 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x22, 0x77, 0x72, 0x69, 0x74, - 0x65, 0x72, 0x22, 0x7d, 0x7d, 0x5d, 0x7d, 0x7d, 0x2c, 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, - 0x22, 0x3a, 0x7b, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x7d, 0x7d, 0xfa, 0x42, - 0x19, 0x9a, 0x01, 0x16, 0x22, 0x14, 0x72, 0x12, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, - 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0x52, 0x09, 0x72, 0x65, 0x6c, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x30, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, - 0x61, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, - 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, - 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x1a, 0x51, 0x0a, 0x0e, 0x52, 0x65, 0x6c, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, - 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x29, 0x0a, 0x05, 0x76, - 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x6f, 0x70, 0x65, - 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x52, - 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0xb1, 0x01, 0x0a, 0x08, 0x52, - 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x2e, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, - 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1a, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, - 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, - 0x00, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x3a, 0x0a, 0x07, 0x72, 0x65, 0x77, 0x72, 0x69, - 0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, - 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x42, 0x0b, 0xe0, - 0x41, 0x02, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x07, 0x72, 0x65, 0x77, 0x72, - 0x69, 0x74, 0x65, 0x12, 0x39, 0x0a, 0x09, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, - 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, - 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x54, 0x79, 0x70, 0x65, - 0x49, 0x6e, 0x66, 0x6f, 0x52, 0x08, 0x74, 0x79, 0x70, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x22, 0x73, - 0x0a, 0x10, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x54, 0x79, 0x70, 0x65, 0x49, 0x6e, - 0x66, 0x6f, 0x12, 0x5f, 0x0a, 0x1b, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x6c, 0x79, 0x5f, 0x72, - 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x74, 0x79, 0x70, 0x65, - 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, - 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x66, - 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x52, 0x1b, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x6c, 0x79, - 0x5f, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x74, 0x79, - 0x70, 0x65, 0x73, 0x22, 0x97, 0x02, 0x0a, 0x08, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, - 0x12, 0x41, 0x0a, 0x09, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x01, 0x20, - 0x03, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, - 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x09, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x73, 0x12, 0x32, 0x0a, 0x06, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x18, 0x02, 0x20, - 0x01, 0x28, 0x09, 0x42, 0x1a, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, - 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x01, 0x52, - 0x06, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x12, 0x38, 0x0a, 0x0b, 0x73, 0x6f, 0x75, 0x72, 0x63, - 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x16, 0x2e, 0x6f, - 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, - 0x49, 0x6e, 0x66, 0x6f, 0x52, 0x0b, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x6e, 0x66, - 0x6f, 0x1a, 0x5a, 0x0a, 0x0e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x45, 0x6e, + 0x69, 0x6f, 0x6e, 0x73, 0x12, 0xd5, 0x01, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, + 0x61, 0x18, 0x05, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2c, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, + 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, + 0x45, 0x6e, 0x74, 0x72, 0x79, 0x42, 0x8a, 0x01, 0x92, 0x41, 0x48, 0x4a, 0x46, 0x7b, 0x22, 0x65, + 0x6e, 0x76, 0x69, 0x72, 0x6f, 0x6e, 0x6d, 0x65, 0x6e, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x70, 0x72, + 0x6f, 0x64, 0x75, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x2c, 0x20, 0x22, 0x74, 0x65, 0x61, 0x6d, + 0x22, 0x3a, 0x20, 0x22, 0x70, 0x6c, 0x61, 0x74, 0x66, 0x6f, 0x72, 0x6d, 0x22, 0x2c, 0x20, 0x22, + 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x76, 0x31, 0x2e, 0x32, 0x2e, + 0x33, 0x22, 0x7d, 0xfa, 0x42, 0x3c, 0x9a, 0x01, 0x39, 0x10, 0x14, 0x22, 0x2b, 0x72, 0x29, 0x28, + 0x3f, 0x32, 0x22, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x5d, 0x28, 0x5b, 0x61, 0x2d, + 0x7a, 0x30, 0x2d, 0x39, 0x5c, 0x2d, 0x5c, 0x2e, 0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x30, 0x2d, + 0x39, 0x5d, 0x29, 0x3f, 0x24, 0xd0, 0x01, 0x01, 0x2a, 0x08, 0x72, 0x06, 0x28, 0x80, 0x02, 0xd0, + 0x01, 0x01, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x1a, 0x54, 0x0a, 0x0f, + 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, + 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, + 0x79, 0x12, 0x2b, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, + 0x32, 0x15, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, + 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, + 0x38, 0x01, 0x1a, 0x3b, 0x0a, 0x0d, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, - 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x32, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, - 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, - 0x31, 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, - 0x74, 0x61, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0x4a, 0x0a, - 0x0a, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x12, 0x3c, 0x0a, 0x04, 0x66, - 0x69, 0x6c, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x28, 0xfa, 0x42, 0x25, 0x72, 0x23, - 0x32, 0x1e, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5f, 0x5c, 0x2d, - 0x5c, 0x2f, 0x5d, 0x7b, 0x31, 0x2c, 0x31, 0x30, 0x30, 0x7d, 0x5c, 0x2e, 0x66, 0x67, 0x61, 0x24, - 0xd0, 0x01, 0x01, 0x52, 0x04, 0x66, 0x69, 0x6c, 0x65, 0x22, 0xe1, 0x01, 0x0a, 0x10, 0x52, 0x65, - 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x5f, - 0x0a, 0x1b, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x6c, 0x79, 0x5f, 0x72, 0x65, 0x6c, 0x61, 0x74, - 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x73, 0x18, 0x01, 0x20, - 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, - 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x66, 0x65, 0x72, 0x65, 0x6e, - 0x63, 0x65, 0x52, 0x1b, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x6c, 0x79, 0x5f, 0x72, 0x65, 0x6c, - 0x61, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x73, 0x12, - 0x32, 0x0a, 0x06, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, - 0x1a, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, - 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x01, 0x52, 0x06, 0x6d, 0x6f, 0x64, - 0x75, 0x6c, 0x65, 0x12, 0x38, 0x0a, 0x0b, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x6e, - 0x66, 0x6f, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x16, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, - 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49, 0x6e, 0x66, 0x6f, - 0x52, 0x0b, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x22, 0xa0, 0x02, - 0x0a, 0x11, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x66, 0x65, 0x72, 0x65, - 0x6e, 0x63, 0x65, 0x12, 0x3e, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, - 0x09, 0x42, 0x2a, 0x92, 0x41, 0x09, 0x4a, 0x07, 0x22, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x22, 0xe0, - 0x41, 0x02, 0xfa, 0x42, 0x18, 0x72, 0x16, 0x32, 0x11, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, - 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x32, 0x35, 0x34, 0x7d, 0x24, 0xd0, 0x01, 0x00, 0x52, 0x04, 0x74, - 0x79, 0x70, 0x65, 0x12, 0x45, 0x0a, 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, - 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x27, 0x92, 0x41, 0x0a, 0x4a, 0x08, 0x22, 0x6d, 0x65, 0x6d, - 0x62, 0x65, 0x72, 0x22, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, - 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x01, 0x48, 0x00, - 0x52, 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x32, 0x0a, 0x08, 0x77, 0x69, - 0x6c, 0x64, 0x63, 0x61, 0x72, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x6f, - 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x69, 0x6c, 0x64, 0x63, 0x61, - 0x72, 0x64, 0x48, 0x00, 0x52, 0x08, 0x77, 0x69, 0x6c, 0x64, 0x63, 0x61, 0x72, 0x64, 0x12, 0x38, - 0x0a, 0x09, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x04, 0x20, 0x01, 0x28, - 0x09, 0x42, 0x1a, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, - 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x01, 0x52, 0x09, 0x63, - 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x16, 0x0a, 0x14, 0x72, 0x65, 0x6c, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6f, 0x72, 0x5f, 0x77, 0x69, 0x6c, 0x64, 0x63, 0x61, 0x72, 0x64, - 0x22, 0x0a, 0x0a, 0x08, 0x57, 0x69, 0x6c, 0x64, 0x63, 0x61, 0x72, 0x64, 0x22, 0x3a, 0x0a, 0x08, - 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x12, 0x2e, 0x0a, 0x05, 0x63, 0x68, 0x69, 0x6c, - 0x64, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, - 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x42, 0x03, 0xe0, 0x41, - 0x02, 0x52, 0x05, 0x63, 0x68, 0x69, 0x6c, 0x64, 0x22, 0x80, 0x01, 0x0a, 0x0a, 0x44, 0x69, 0x66, - 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x12, 0x34, 0x0a, 0x04, 0x62, 0x61, 0x73, 0x65, 0x18, - 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, - 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x04, 0x62, 0x61, 0x73, 0x65, 0x12, 0x3c, 0x0a, - 0x08, 0x73, 0x75, 0x62, 0x74, 0x72, 0x61, 0x63, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, + 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, + 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, + 0xbd, 0x03, 0x0a, 0x0e, 0x54, 0x79, 0x70, 0x65, 0x44, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, + 0x6f, 0x6e, 0x12, 0x41, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, + 0x42, 0x2d, 0x92, 0x41, 0x0c, 0x4a, 0x0a, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, + 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x18, 0x72, 0x16, 0x32, 0x11, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, + 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x32, 0x35, 0x34, 0x7d, 0x24, 0xd0, 0x01, 0x00, 0x52, + 0x04, 0x74, 0x79, 0x70, 0x65, 0x12, 0xe2, 0x01, 0x0a, 0x09, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x6f, 0x70, 0x65, 0x6e, + 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x54, 0x79, 0x70, 0x65, 0x44, 0x65, 0x66, 0x69, 0x6e, + 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x45, + 0x6e, 0x74, 0x72, 0x79, 0x42, 0x98, 0x01, 0x92, 0x41, 0x79, 0x4a, 0x77, 0x7b, 0x22, 0x72, 0x65, + 0x61, 0x64, 0x65, 0x72, 0x22, 0x3a, 0x7b, 0x22, 0x75, 0x6e, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x7b, + 0x22, 0x63, 0x68, 0x69, 0x6c, 0x64, 0x22, 0x3a, 0x5b, 0x7b, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, + 0x3a, 0x7b, 0x7d, 0x7d, 0x2c, 0x7b, 0x22, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x55, + 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x3a, 0x7b, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, + 0x22, 0x3a, 0x22, 0x22, 0x2c, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, + 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x7d, 0x7d, 0x5d, 0x7d, 0x7d, 0x2c, 0x22, 0x77, + 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x3a, 0x7b, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, 0x3a, 0x7b, + 0x7d, 0x7d, 0x7d, 0xfa, 0x42, 0x19, 0x9a, 0x01, 0x16, 0x22, 0x14, 0x72, 0x12, 0x32, 0x10, 0x5e, + 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0x52, + 0x09, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x30, 0x0a, 0x08, 0x6d, 0x65, + 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x6f, + 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, + 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x1a, 0x51, 0x0a, 0x0e, + 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, + 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, + 0x12, 0x29, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, - 0x72, 0x73, 0x65, 0x74, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, - 0x01, 0x52, 0x08, 0x73, 0x75, 0x62, 0x74, 0x72, 0x61, 0x63, 0x74, 0x22, 0xfa, 0x02, 0x0a, 0x07, - 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x12, 0x2f, 0x0a, 0x04, 0x74, 0x68, 0x69, 0x73, 0x18, - 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x76, 0x31, 0x2e, 0x44, 0x69, 0x72, 0x65, 0x63, 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, - 0x48, 0x00, 0x52, 0x04, 0x74, 0x68, 0x69, 0x73, 0x12, 0x47, 0x0a, 0x10, 0x63, 0x6f, 0x6d, 0x70, - 0x75, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x18, 0x02, 0x20, 0x01, - 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, - 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x48, 0x00, - 0x52, 0x0f, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, - 0x74, 0x12, 0x46, 0x0a, 0x10, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x74, 0x6f, 0x5f, 0x75, 0x73, - 0x65, 0x72, 0x73, 0x65, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x6f, 0x70, - 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x54, 0x6f, - 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x48, 0x00, 0x52, 0x0e, 0x74, 0x75, 0x70, 0x6c, 0x65, - 0x54, 0x6f, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x12, 0x2c, 0x0a, 0x05, 0x75, 0x6e, 0x69, - 0x6f, 0x6e, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, - 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x48, 0x00, - 0x52, 0x05, 0x75, 0x6e, 0x69, 0x6f, 0x6e, 0x12, 0x3a, 0x0a, 0x0c, 0x69, 0x6e, 0x74, 0x65, 0x72, - 0x73, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, + 0x72, 0x73, 0x65, 0x74, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, + 0xb1, 0x01, 0x0a, 0x08, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x2e, 0x0a, 0x04, + 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1a, 0xfa, 0x42, 0x17, 0x72, + 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, + 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x00, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x3a, 0x0a, 0x07, + 0x72, 0x65, 0x77, 0x72, 0x69, 0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, - 0x65, 0x74, 0x73, 0x48, 0x00, 0x52, 0x0c, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x73, 0x65, 0x63, 0x74, - 0x69, 0x6f, 0x6e, 0x12, 0x38, 0x0a, 0x0a, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, - 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x16, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, - 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x44, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x48, - 0x00, 0x52, 0x0a, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x42, 0x09, 0x0a, - 0x07, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x0f, 0x0a, 0x0d, 0x44, 0x69, 0x72, 0x65, - 0x63, 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x57, 0x0a, 0x0e, 0x4f, 0x62, 0x6a, - 0x65, 0x63, 0x74, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x20, 0x0a, 0x06, 0x6f, - 0x62, 0x6a, 0x65, 0x63, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xfa, 0x42, 0x05, - 0x72, 0x03, 0x28, 0x80, 0x02, 0x52, 0x06, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x12, 0x23, 0x0a, - 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, - 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x28, 0x32, 0x52, 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x22, 0x3c, 0x0a, 0x0f, 0x43, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x55, 0x73, - 0x65, 0x72, 0x73, 0x65, 0x74, 0x12, 0x29, 0x0a, 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0d, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x07, 0x72, - 0x05, 0x28, 0x32, 0xd0, 0x01, 0x00, 0x52, 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x22, 0xa9, 0x01, 0x0a, 0x0e, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x54, 0x6f, 0x55, 0x73, 0x65, 0x72, - 0x73, 0x65, 0x74, 0x12, 0x43, 0x0a, 0x08, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x65, 0x74, 0x18, - 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x76, 0x31, 0x2e, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x08, - 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x65, 0x74, 0x12, 0x52, 0x0a, 0x10, 0x63, 0x6f, 0x6d, 0x70, - 0x75, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x18, 0x02, 0x20, 0x01, - 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, - 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x0b, - 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x0f, 0x63, 0x6f, 0x6d, - 0x70, 0x75, 0x74, 0x65, 0x64, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0xf2, 0x02, 0x0a, - 0x09, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x31, 0x0a, 0x04, 0x6e, 0x61, - 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1d, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x17, - 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, - 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x00, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x2e, 0x0a, - 0x0a, 0x65, 0x78, 0x70, 0x72, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, - 0x09, 0x42, 0x0e, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x08, 0x72, 0x06, 0x28, 0x80, 0x04, 0xd0, 0x01, - 0x00, 0x52, 0x0a, 0x65, 0x78, 0x70, 0x72, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x12, 0x65, 0x0a, - 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, - 0x0b, 0x32, 0x25, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, - 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, - 0x65, 0x72, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x42, 0x1e, 0xfa, 0x42, 0x1b, 0x9a, 0x01, 0x18, - 0x10, 0x19, 0x22, 0x14, 0x72, 0x12, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, - 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0x52, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, - 0x74, 0x65, 0x72, 0x73, 0x12, 0x39, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, - 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, - 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x65, 0x74, - 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x1a, - 0x60, 0x0a, 0x0f, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x45, 0x6e, 0x74, - 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, - 0x03, 0x6b, 0x65, 0x79, 0x12, 0x37, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, - 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, - 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x54, - 0x79, 0x70, 0x65, 0x52, 0x65, 0x66, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, - 0x01, 0x22, 0x81, 0x01, 0x0a, 0x11, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x4d, - 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x32, 0x0a, 0x06, 0x6d, 0x6f, 0x64, 0x75, 0x6c, - 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1a, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, + 0x65, 0x74, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, + 0x07, 0x72, 0x65, 0x77, 0x72, 0x69, 0x74, 0x65, 0x12, 0x39, 0x0a, 0x09, 0x74, 0x79, 0x70, 0x65, + 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x6f, 0x70, + 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x54, 0x79, 0x70, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x52, 0x08, 0x74, 0x79, 0x70, 0x65, 0x49, + 0x6e, 0x66, 0x6f, 0x22, 0x73, 0x0a, 0x10, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x54, + 0x79, 0x70, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x12, 0x5f, 0x0a, 0x1b, 0x64, 0x69, 0x72, 0x65, 0x63, + 0x74, 0x6c, 0x79, 0x5f, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, + 0x5f, 0x74, 0x79, 0x70, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x6f, + 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x52, 0x65, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x52, 0x1b, 0x64, 0x69, 0x72, + 0x65, 0x63, 0x74, 0x6c, 0x79, 0x5f, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, + 0x65, 0x72, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x73, 0x22, 0x97, 0x02, 0x0a, 0x08, 0x4d, 0x65, 0x74, + 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x41, 0x0a, 0x09, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, + 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x2e, 0x52, + 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x09, 0x72, + 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x32, 0x0a, 0x06, 0x6d, 0x6f, 0x64, 0x75, + 0x6c, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1a, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, + 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, + 0x24, 0xd0, 0x01, 0x01, 0x52, 0x06, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x12, 0x38, 0x0a, 0x0b, + 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x18, 0x03, 0x20, 0x01, 0x28, + 0x0b, 0x32, 0x16, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x53, + 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x52, 0x0b, 0x73, 0x6f, 0x75, 0x72, 0x63, + 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x1a, 0x5a, 0x0a, 0x0e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, + 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x32, 0x0a, 0x05, 0x76, 0x61, + 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x6f, 0x70, 0x65, 0x6e, + 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, + 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, + 0x38, 0x01, 0x22, 0x4a, 0x0a, 0x0a, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49, 0x6e, 0x66, 0x6f, + 0x12, 0x3c, 0x0a, 0x04, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x28, + 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x1e, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, + 0x2d, 0x39, 0x5f, 0x5c, 0x2d, 0x5c, 0x2f, 0x5d, 0x7b, 0x31, 0x2c, 0x31, 0x30, 0x30, 0x7d, 0x5c, + 0x2e, 0x66, 0x67, 0x61, 0x24, 0xd0, 0x01, 0x01, 0x52, 0x04, 0x66, 0x69, 0x6c, 0x65, 0x22, 0xe1, + 0x01, 0x0a, 0x10, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x65, 0x74, 0x61, 0x64, + 0x61, 0x74, 0x61, 0x12, 0x5f, 0x0a, 0x1b, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x6c, 0x79, 0x5f, + 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x74, 0x79, 0x70, + 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, + 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x65, + 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x52, 0x1b, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x6c, + 0x79, 0x5f, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x74, + 0x79, 0x70, 0x65, 0x73, 0x12, 0x32, 0x0a, 0x06, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x18, 0x02, + 0x20, 0x01, 0x28, 0x09, 0x42, 0x1a, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, + 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x01, + 0x52, 0x06, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x12, 0x38, 0x0a, 0x0b, 0x73, 0x6f, 0x75, 0x72, + 0x63, 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x16, 0x2e, + 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x53, 0x6f, 0x75, 0x72, 0x63, + 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x52, 0x0b, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x6e, + 0x66, 0x6f, 0x22, 0xa0, 0x02, 0x0a, 0x11, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, + 0x65, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x12, 0x3e, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, + 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x2a, 0x92, 0x41, 0x09, 0x4a, 0x07, 0x22, 0x67, 0x72, + 0x6f, 0x75, 0x70, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x18, 0x72, 0x16, 0x32, 0x11, 0x5e, 0x5b, + 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x32, 0x35, 0x34, 0x7d, 0x24, 0xd0, + 0x01, 0x00, 0x52, 0x04, 0x74, 0x79, 0x70, 0x65, 0x12, 0x45, 0x0a, 0x08, 0x72, 0x65, 0x6c, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x27, 0x92, 0x41, 0x0a, 0x4a, + 0x08, 0x22, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x22, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, - 0xd0, 0x01, 0x01, 0x52, 0x06, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x12, 0x38, 0x0a, 0x0b, 0x73, - 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, - 0x32, 0x16, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x53, 0x6f, - 0x75, 0x72, 0x63, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x52, 0x0b, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, - 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x22, 0xd4, 0x03, 0x0a, 0x15, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, - 0x69, 0x6f, 0x6e, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x54, 0x79, 0x70, 0x65, 0x52, 0x65, 0x66, 0x12, - 0x55, 0x0a, 0x09, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, - 0x28, 0x0e, 0x32, 0x2a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, + 0xd0, 0x01, 0x01, 0x48, 0x00, 0x52, 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, + 0x32, 0x0a, 0x08, 0x77, 0x69, 0x6c, 0x64, 0x63, 0x61, 0x72, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28, + 0x0b, 0x32, 0x14, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, + 0x69, 0x6c, 0x64, 0x63, 0x61, 0x72, 0x64, 0x48, 0x00, 0x52, 0x08, 0x77, 0x69, 0x6c, 0x64, 0x63, + 0x61, 0x72, 0x64, 0x12, 0x38, 0x0a, 0x09, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, + 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1a, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, + 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, + 0x01, 0x01, 0x52, 0x09, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x16, 0x0a, + 0x14, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6f, 0x72, 0x5f, 0x77, 0x69, 0x6c, + 0x64, 0x63, 0x61, 0x72, 0x64, 0x22, 0x0a, 0x0a, 0x08, 0x57, 0x69, 0x6c, 0x64, 0x63, 0x61, 0x72, + 0x64, 0x22, 0x3a, 0x0a, 0x08, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x12, 0x2e, 0x0a, + 0x05, 0x63, 0x68, 0x69, 0x6c, 0x64, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x6f, + 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, + 0x74, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x05, 0x63, 0x68, 0x69, 0x6c, 0x64, 0x22, 0x80, 0x01, + 0x0a, 0x0a, 0x44, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x12, 0x34, 0x0a, 0x04, + 0x62, 0x61, 0x73, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x42, + 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x04, 0x62, 0x61, + 0x73, 0x65, 0x12, 0x3c, 0x0a, 0x08, 0x73, 0x75, 0x62, 0x74, 0x72, 0x61, 0x63, 0x74, 0x18, 0x02, + 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, + 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, + 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x08, 0x73, 0x75, 0x62, 0x74, 0x72, 0x61, 0x63, 0x74, + 0x22, 0xfa, 0x02, 0x0a, 0x07, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x12, 0x2f, 0x0a, 0x04, + 0x74, 0x68, 0x69, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x44, 0x69, 0x72, 0x65, 0x63, 0x74, 0x55, 0x73, + 0x65, 0x72, 0x73, 0x65, 0x74, 0x48, 0x00, 0x52, 0x04, 0x74, 0x68, 0x69, 0x73, 0x12, 0x47, 0x0a, + 0x10, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, + 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, + 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x52, 0x65, 0x6c, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x48, 0x00, 0x52, 0x0f, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x55, + 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x12, 0x46, 0x0a, 0x10, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, + 0x74, 0x6f, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, + 0x32, 0x1a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x54, 0x75, + 0x70, 0x6c, 0x65, 0x54, 0x6f, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x48, 0x00, 0x52, 0x0e, + 0x74, 0x75, 0x70, 0x6c, 0x65, 0x54, 0x6f, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x12, 0x2c, + 0x0a, 0x05, 0x75, 0x6e, 0x69, 0x6f, 0x6e, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, + 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x73, 0x65, 0x72, 0x73, + 0x65, 0x74, 0x73, 0x48, 0x00, 0x52, 0x05, 0x75, 0x6e, 0x69, 0x6f, 0x6e, 0x12, 0x3a, 0x0a, 0x0c, + 0x69, 0x6e, 0x74, 0x65, 0x72, 0x73, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x05, 0x20, 0x01, + 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, + 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x48, 0x00, 0x52, 0x0c, 0x69, 0x6e, 0x74, 0x65, + 0x72, 0x73, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x38, 0x0a, 0x0a, 0x64, 0x69, 0x66, 0x66, + 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x16, 0x2e, 0x6f, + 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x44, 0x69, 0x66, 0x66, 0x65, 0x72, + 0x65, 0x6e, 0x63, 0x65, 0x48, 0x00, 0x52, 0x0a, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, + 0x63, 0x65, 0x42, 0x09, 0x0a, 0x07, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x0f, 0x0a, + 0x0d, 0x44, 0x69, 0x72, 0x65, 0x63, 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x57, + 0x0a, 0x0e, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x12, 0x20, 0x0a, 0x06, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, + 0x42, 0x08, 0xfa, 0x42, 0x05, 0x72, 0x03, 0x28, 0x80, 0x02, 0x52, 0x06, 0x6f, 0x62, 0x6a, 0x65, + 0x63, 0x74, 0x12, 0x23, 0x0a, 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, + 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x28, 0x32, 0x52, 0x08, 0x72, + 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3c, 0x0a, 0x0f, 0x43, 0x6f, 0x6d, 0x70, 0x75, + 0x74, 0x65, 0x64, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x12, 0x29, 0x0a, 0x08, 0x72, 0x65, + 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0d, 0xe0, 0x41, + 0x02, 0xfa, 0x42, 0x07, 0x72, 0x05, 0x28, 0x32, 0xd0, 0x01, 0x00, 0x52, 0x08, 0x72, 0x65, 0x6c, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0xa9, 0x01, 0x0a, 0x0e, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x54, + 0x6f, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x12, 0x43, 0x0a, 0x08, 0x74, 0x75, 0x70, 0x6c, + 0x65, 0x73, 0x65, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x52, 0x65, + 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, 0x8a, 0x01, + 0x02, 0x10, 0x01, 0x52, 0x08, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x65, 0x74, 0x12, 0x52, 0x0a, + 0x10, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, + 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, + 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x52, 0x65, 0x6c, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, + 0x52, 0x0f, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, + 0x74, 0x22, 0xf2, 0x02, 0x0a, 0x09, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12, + 0x31, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1d, 0xe0, + 0x41, 0x02, 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, + 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x00, 0x52, 0x04, 0x6e, 0x61, + 0x6d, 0x65, 0x12, 0x2e, 0x0a, 0x0a, 0x65, 0x78, 0x70, 0x72, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, + 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0e, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x08, 0x72, 0x06, + 0x28, 0x80, 0x04, 0xd0, 0x01, 0x00, 0x52, 0x0a, 0x65, 0x78, 0x70, 0x72, 0x65, 0x73, 0x73, 0x69, + 0x6f, 0x6e, 0x12, 0x65, 0x0a, 0x0a, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, + 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, + 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x50, 0x61, + 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x42, 0x1e, 0xfa, + 0x42, 0x1b, 0x9a, 0x01, 0x18, 0x10, 0x19, 0x22, 0x14, 0x72, 0x12, 0x32, 0x10, 0x5e, 0x5b, 0x5e, + 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0x52, 0x0a, 0x70, + 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x12, 0x39, 0x0a, 0x08, 0x6d, 0x65, 0x74, + 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x6f, 0x70, + 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, + 0x6f, 0x6e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, + 0x64, 0x61, 0x74, 0x61, 0x1a, 0x60, 0x0a, 0x0f, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, + 0x72, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, + 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x37, 0x0a, 0x05, 0x76, 0x61, 0x6c, + 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, + 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x50, + 0x61, 0x72, 0x61, 0x6d, 0x54, 0x79, 0x70, 0x65, 0x52, 0x65, 0x66, 0x52, 0x05, 0x76, 0x61, 0x6c, + 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0x81, 0x01, 0x0a, 0x11, 0x43, 0x6f, 0x6e, 0x64, 0x69, + 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x32, 0x0a, 0x06, + 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1a, 0xfa, 0x42, + 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, + 0x2c, 0x35, 0x30, 0x7d, 0x24, 0xd0, 0x01, 0x01, 0x52, 0x06, 0x6d, 0x6f, 0x64, 0x75, 0x6c, 0x65, + 0x12, 0x38, 0x0a, 0x0b, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x18, + 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x16, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, + 0x76, 0x31, 0x2e, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x52, 0x0b, 0x73, + 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x22, 0xd4, 0x03, 0x0a, 0x15, 0x43, + 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x54, 0x79, 0x70, + 0x65, 0x52, 0x65, 0x66, 0x12, 0x55, 0x0a, 0x09, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x6e, 0x61, 0x6d, + 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, + 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x61, + 0x72, 0x61, 0x6d, 0x54, 0x79, 0x70, 0x65, 0x52, 0x65, 0x66, 0x2e, 0x54, 0x79, 0x70, 0x65, 0x4e, + 0x61, 0x6d, 0x65, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, 0x82, 0x01, 0x02, 0x10, 0x01, + 0x52, 0x09, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x51, 0x0a, 0x0d, 0x67, + 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, + 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x54, 0x79, - 0x70, 0x65, 0x52, 0x65, 0x66, 0x2e, 0x54, 0x79, 0x70, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x42, 0x0b, - 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, 0x82, 0x01, 0x02, 0x10, 0x01, 0x52, 0x09, 0x74, 0x79, 0x70, - 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x51, 0x0a, 0x0d, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x69, - 0x63, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x21, 0x2e, - 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, - 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x54, 0x79, 0x70, 0x65, 0x52, 0x65, 0x66, - 0x42, 0x08, 0xfa, 0x42, 0x05, 0x92, 0x01, 0x02, 0x10, 0x05, 0x52, 0x0d, 0x67, 0x65, 0x6e, 0x65, - 0x72, 0x69, 0x63, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x73, 0x22, 0x90, 0x02, 0x0a, 0x08, 0x54, 0x79, - 0x70, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x19, 0x0a, 0x15, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, - 0x41, 0x4d, 0x45, 0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49, 0x46, 0x49, 0x45, 0x44, 0x10, - 0x00, 0x12, 0x11, 0x0a, 0x0d, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x41, - 0x4e, 0x59, 0x10, 0x01, 0x12, 0x12, 0x0a, 0x0e, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, - 0x45, 0x5f, 0x42, 0x4f, 0x4f, 0x4c, 0x10, 0x02, 0x12, 0x14, 0x0a, 0x10, 0x54, 0x59, 0x50, 0x45, - 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x53, 0x54, 0x52, 0x49, 0x4e, 0x47, 0x10, 0x03, 0x12, 0x11, - 0x0a, 0x0d, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x49, 0x4e, 0x54, 0x10, - 0x04, 0x12, 0x12, 0x0a, 0x0e, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x55, - 0x49, 0x4e, 0x54, 0x10, 0x05, 0x12, 0x14, 0x0a, 0x10, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, - 0x4d, 0x45, 0x5f, 0x44, 0x4f, 0x55, 0x42, 0x4c, 0x45, 0x10, 0x06, 0x12, 0x16, 0x0a, 0x12, 0x54, - 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x44, 0x55, 0x52, 0x41, 0x54, 0x49, 0x4f, - 0x4e, 0x10, 0x07, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, - 0x5f, 0x54, 0x49, 0x4d, 0x45, 0x53, 0x54, 0x41, 0x4d, 0x50, 0x10, 0x08, 0x12, 0x11, 0x0a, 0x0d, - 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x4d, 0x41, 0x50, 0x10, 0x09, 0x12, - 0x12, 0x0a, 0x0e, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x4c, 0x49, 0x53, - 0x54, 0x10, 0x0a, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, - 0x5f, 0x49, 0x50, 0x41, 0x44, 0x44, 0x52, 0x45, 0x53, 0x53, 0x10, 0x0b, 0x42, 0x9d, 0x01, 0x0a, - 0x0e, 0x63, 0x6f, 0x6d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x42, - 0x0f, 0x41, 0x75, 0x74, 0x68, 0x7a, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x50, 0x72, 0x6f, 0x74, 0x6f, - 0x50, 0x01, 0x5a, 0x31, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x6f, - 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, - 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x76, 0x31, 0x3b, 0x6f, 0x70, 0x65, 0x6e, - 0x66, 0x67, 0x61, 0x76, 0x31, 0xa2, 0x02, 0x03, 0x4f, 0x58, 0x58, 0xaa, 0x02, 0x0a, 0x4f, 0x70, - 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x56, 0x31, 0xca, 0x02, 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x66, - 0x67, 0x61, 0x5c, 0x56, 0x31, 0xe2, 0x02, 0x16, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x5c, - 0x56, 0x31, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0xea, 0x02, - 0x0b, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x3a, 0x3a, 0x56, 0x31, 0x62, 0x06, 0x70, 0x72, - 0x6f, 0x74, 0x6f, 0x33, + 0x70, 0x65, 0x52, 0x65, 0x66, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x92, 0x01, 0x02, 0x10, 0x05, 0x52, + 0x0d, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x73, 0x22, 0x90, + 0x02, 0x0a, 0x08, 0x54, 0x79, 0x70, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x19, 0x0a, 0x15, 0x54, + 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49, + 0x46, 0x49, 0x45, 0x44, 0x10, 0x00, 0x12, 0x11, 0x0a, 0x0d, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, + 0x41, 0x4d, 0x45, 0x5f, 0x41, 0x4e, 0x59, 0x10, 0x01, 0x12, 0x12, 0x0a, 0x0e, 0x54, 0x59, 0x50, + 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x42, 0x4f, 0x4f, 0x4c, 0x10, 0x02, 0x12, 0x14, 0x0a, + 0x10, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x53, 0x54, 0x52, 0x49, 0x4e, + 0x47, 0x10, 0x03, 0x12, 0x11, 0x0a, 0x0d, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, + 0x5f, 0x49, 0x4e, 0x54, 0x10, 0x04, 0x12, 0x12, 0x0a, 0x0e, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, + 0x41, 0x4d, 0x45, 0x5f, 0x55, 0x49, 0x4e, 0x54, 0x10, 0x05, 0x12, 0x14, 0x0a, 0x10, 0x54, 0x59, + 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x44, 0x4f, 0x55, 0x42, 0x4c, 0x45, 0x10, 0x06, + 0x12, 0x16, 0x0a, 0x12, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x44, 0x55, + 0x52, 0x41, 0x54, 0x49, 0x4f, 0x4e, 0x10, 0x07, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x59, 0x50, 0x45, + 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x54, 0x49, 0x4d, 0x45, 0x53, 0x54, 0x41, 0x4d, 0x50, 0x10, + 0x08, 0x12, 0x11, 0x0a, 0x0d, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x4d, + 0x41, 0x50, 0x10, 0x09, 0x12, 0x12, 0x0a, 0x0e, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4e, 0x41, 0x4d, + 0x45, 0x5f, 0x4c, 0x49, 0x53, 0x54, 0x10, 0x0a, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x59, 0x50, 0x45, + 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x49, 0x50, 0x41, 0x44, 0x44, 0x52, 0x45, 0x53, 0x53, 0x10, + 0x0b, 0x42, 0x9d, 0x01, 0x0a, 0x0e, 0x63, 0x6f, 0x6d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, + 0x61, 0x2e, 0x76, 0x31, 0x42, 0x0f, 0x41, 0x75, 0x74, 0x68, 0x7a, 0x6d, 0x6f, 0x64, 0x65, 0x6c, + 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x31, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, + 0x63, 0x6f, 0x6d, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x61, 0x70, 0x69, 0x2f, + 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x76, 0x31, + 0x3b, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x76, 0x31, 0xa2, 0x02, 0x03, 0x4f, 0x58, 0x58, + 0xaa, 0x02, 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x56, 0x31, 0xca, 0x02, 0x0a, + 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x5c, 0x56, 0x31, 0xe2, 0x02, 0x16, 0x4f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x5c, 0x56, 0x31, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, 0x64, + 0x61, 0x74, 0x61, 0xea, 0x02, 0x0b, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x3a, 0x3a, 0x56, + 0x31, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33, } var ( @@ -1585,7 +1611,7 @@ func file_openfga_v1_authzmodel_proto_rawDescGZIP() []byte { } var file_openfga_v1_authzmodel_proto_enumTypes = make([]protoimpl.EnumInfo, 1) -var file_openfga_v1_authzmodel_proto_msgTypes = make([]protoimpl.MessageInfo, 23) +var file_openfga_v1_authzmodel_proto_msgTypes = make([]protoimpl.MessageInfo, 24) var file_openfga_v1_authzmodel_proto_goTypes = []interface{}{ (ConditionParamTypeRef_TypeName)(0), // 0: openfga.v1.ConditionParamTypeRef.TypeName (*AuthorizationModel)(nil), // 1: openfga.v1.AuthorizationModel @@ -1608,48 +1634,50 @@ var file_openfga_v1_authzmodel_proto_goTypes = []interface{}{ (*ConditionMetadata)(nil), // 18: openfga.v1.ConditionMetadata (*ConditionParamTypeRef)(nil), // 19: openfga.v1.ConditionParamTypeRef nil, // 20: openfga.v1.AuthorizationModel.ConditionsEntry - nil, // 21: openfga.v1.TypeDefinition.RelationsEntry - nil, // 22: openfga.v1.Metadata.RelationsEntry - nil, // 23: openfga.v1.Condition.ParametersEntry + nil, // 21: openfga.v1.AuthorizationModel.MetadataEntry + nil, // 22: openfga.v1.TypeDefinition.RelationsEntry + nil, // 23: openfga.v1.Metadata.RelationsEntry + nil, // 24: openfga.v1.Condition.ParametersEntry } var file_openfga_v1_authzmodel_proto_depIdxs = []int32{ 2, // 0: openfga.v1.AuthorizationModel.type_definitions:type_name -> openfga.v1.TypeDefinition 20, // 1: openfga.v1.AuthorizationModel.conditions:type_name -> openfga.v1.AuthorizationModel.ConditionsEntry - 21, // 2: openfga.v1.TypeDefinition.relations:type_name -> openfga.v1.TypeDefinition.RelationsEntry - 5, // 3: openfga.v1.TypeDefinition.metadata:type_name -> openfga.v1.Metadata - 12, // 4: openfga.v1.Relation.rewrite:type_name -> openfga.v1.Userset - 4, // 5: openfga.v1.Relation.type_info:type_name -> openfga.v1.RelationTypeInfo - 8, // 6: openfga.v1.RelationTypeInfo.directly_related_user_types:type_name -> openfga.v1.RelationReference - 22, // 7: openfga.v1.Metadata.relations:type_name -> openfga.v1.Metadata.RelationsEntry - 6, // 8: openfga.v1.Metadata.source_info:type_name -> openfga.v1.SourceInfo - 8, // 9: openfga.v1.RelationMetadata.directly_related_user_types:type_name -> openfga.v1.RelationReference - 6, // 10: openfga.v1.RelationMetadata.source_info:type_name -> openfga.v1.SourceInfo - 9, // 11: openfga.v1.RelationReference.wildcard:type_name -> openfga.v1.Wildcard - 12, // 12: openfga.v1.Usersets.child:type_name -> openfga.v1.Userset - 12, // 13: openfga.v1.Difference.base:type_name -> openfga.v1.Userset - 12, // 14: openfga.v1.Difference.subtract:type_name -> openfga.v1.Userset - 13, // 15: openfga.v1.Userset.this:type_name -> openfga.v1.DirectUserset - 14, // 16: openfga.v1.Userset.computed_userset:type_name -> openfga.v1.ObjectRelation - 16, // 17: openfga.v1.Userset.tuple_to_userset:type_name -> openfga.v1.TupleToUserset - 10, // 18: openfga.v1.Userset.union:type_name -> openfga.v1.Usersets - 10, // 19: openfga.v1.Userset.intersection:type_name -> openfga.v1.Usersets - 11, // 20: openfga.v1.Userset.difference:type_name -> openfga.v1.Difference - 14, // 21: openfga.v1.TupleToUserset.tupleset:type_name -> openfga.v1.ObjectRelation - 14, // 22: openfga.v1.TupleToUserset.computed_userset:type_name -> openfga.v1.ObjectRelation - 23, // 23: openfga.v1.Condition.parameters:type_name -> openfga.v1.Condition.ParametersEntry - 18, // 24: openfga.v1.Condition.metadata:type_name -> openfga.v1.ConditionMetadata - 6, // 25: openfga.v1.ConditionMetadata.source_info:type_name -> openfga.v1.SourceInfo - 0, // 26: openfga.v1.ConditionParamTypeRef.type_name:type_name -> openfga.v1.ConditionParamTypeRef.TypeName - 19, // 27: openfga.v1.ConditionParamTypeRef.generic_types:type_name -> openfga.v1.ConditionParamTypeRef - 17, // 28: openfga.v1.AuthorizationModel.ConditionsEntry.value:type_name -> openfga.v1.Condition - 12, // 29: openfga.v1.TypeDefinition.RelationsEntry.value:type_name -> openfga.v1.Userset - 7, // 30: openfga.v1.Metadata.RelationsEntry.value:type_name -> openfga.v1.RelationMetadata - 19, // 31: openfga.v1.Condition.ParametersEntry.value:type_name -> openfga.v1.ConditionParamTypeRef - 32, // [32:32] is the sub-list for method output_type - 32, // [32:32] is the sub-list for method input_type - 32, // [32:32] is the sub-list for extension type_name - 32, // [32:32] is the sub-list for extension extendee - 0, // [0:32] is the sub-list for field type_name + 21, // 2: openfga.v1.AuthorizationModel.metadata:type_name -> openfga.v1.AuthorizationModel.MetadataEntry + 22, // 3: openfga.v1.TypeDefinition.relations:type_name -> openfga.v1.TypeDefinition.RelationsEntry + 5, // 4: openfga.v1.TypeDefinition.metadata:type_name -> openfga.v1.Metadata + 12, // 5: openfga.v1.Relation.rewrite:type_name -> openfga.v1.Userset + 4, // 6: openfga.v1.Relation.type_info:type_name -> openfga.v1.RelationTypeInfo + 8, // 7: openfga.v1.RelationTypeInfo.directly_related_user_types:type_name -> openfga.v1.RelationReference + 23, // 8: openfga.v1.Metadata.relations:type_name -> openfga.v1.Metadata.RelationsEntry + 6, // 9: openfga.v1.Metadata.source_info:type_name -> openfga.v1.SourceInfo + 8, // 10: openfga.v1.RelationMetadata.directly_related_user_types:type_name -> openfga.v1.RelationReference + 6, // 11: openfga.v1.RelationMetadata.source_info:type_name -> openfga.v1.SourceInfo + 9, // 12: openfga.v1.RelationReference.wildcard:type_name -> openfga.v1.Wildcard + 12, // 13: openfga.v1.Usersets.child:type_name -> openfga.v1.Userset + 12, // 14: openfga.v1.Difference.base:type_name -> openfga.v1.Userset + 12, // 15: openfga.v1.Difference.subtract:type_name -> openfga.v1.Userset + 13, // 16: openfga.v1.Userset.this:type_name -> openfga.v1.DirectUserset + 14, // 17: openfga.v1.Userset.computed_userset:type_name -> openfga.v1.ObjectRelation + 16, // 18: openfga.v1.Userset.tuple_to_userset:type_name -> openfga.v1.TupleToUserset + 10, // 19: openfga.v1.Userset.union:type_name -> openfga.v1.Usersets + 10, // 20: openfga.v1.Userset.intersection:type_name -> openfga.v1.Usersets + 11, // 21: openfga.v1.Userset.difference:type_name -> openfga.v1.Difference + 14, // 22: openfga.v1.TupleToUserset.tupleset:type_name -> openfga.v1.ObjectRelation + 14, // 23: openfga.v1.TupleToUserset.computed_userset:type_name -> openfga.v1.ObjectRelation + 24, // 24: openfga.v1.Condition.parameters:type_name -> openfga.v1.Condition.ParametersEntry + 18, // 25: openfga.v1.Condition.metadata:type_name -> openfga.v1.ConditionMetadata + 6, // 26: openfga.v1.ConditionMetadata.source_info:type_name -> openfga.v1.SourceInfo + 0, // 27: openfga.v1.ConditionParamTypeRef.type_name:type_name -> openfga.v1.ConditionParamTypeRef.TypeName + 19, // 28: openfga.v1.ConditionParamTypeRef.generic_types:type_name -> openfga.v1.ConditionParamTypeRef + 17, // 29: openfga.v1.AuthorizationModel.ConditionsEntry.value:type_name -> openfga.v1.Condition + 12, // 30: openfga.v1.TypeDefinition.RelationsEntry.value:type_name -> openfga.v1.Userset + 7, // 31: openfga.v1.Metadata.RelationsEntry.value:type_name -> openfga.v1.RelationMetadata + 19, // 32: openfga.v1.Condition.ParametersEntry.value:type_name -> openfga.v1.ConditionParamTypeRef + 33, // [33:33] is the sub-list for method output_type + 33, // [33:33] is the sub-list for method input_type + 33, // [33:33] is the sub-list for extension type_name + 33, // [33:33] is the sub-list for extension extendee + 0, // [0:33] is the sub-list for field type_name } func init() { file_openfga_v1_authzmodel_proto_init() } @@ -1905,7 +1933,7 @@ func file_openfga_v1_authzmodel_proto_init() { GoPackagePath: reflect.TypeOf(x{}).PkgPath(), RawDescriptor: file_openfga_v1_authzmodel_proto_rawDesc, NumEnums: 1, - NumMessages: 23, + NumMessages: 24, NumExtensions: 0, NumServices: 0, }, diff --git a/proto/openfga/v1/authzmodel.pb.validate.go b/proto/openfga/v1/authzmodel.pb.validate.go index 32afcf5a..2fab4ace 100644 --- a/proto/openfga/v1/authzmodel.pb.validate.go +++ b/proto/openfga/v1/authzmodel.pb.validate.go @@ -179,6 +179,73 @@ func (m *AuthorizationModel) validate(all bool) error { } } + if len(m.GetMetadata()) > 20 { + err := AuthorizationModelValidationError{ + field: "Metadata", + reason: "value must contain no more than 20 pair(s)", + } + if !all { + return err + } + errors = append(errors, err) + } + + { + sorted_keys := make([]string, len(m.GetMetadata())) + i := 0 + for key := range m.GetMetadata() { + sorted_keys[i] = key + i++ + } + sort.Slice(sorted_keys, func(i, j int) bool { return sorted_keys[i] < sorted_keys[j] }) + for _, key := range sorted_keys { + val := m.GetMetadata()[key] + _ = val + + if key != "" { + + if len(key) > 63 { + err := AuthorizationModelValidationError{ + field: fmt.Sprintf("Metadata[%v]", key), + reason: "value length must be at most 63 bytes", + } + if !all { + return err + } + errors = append(errors, err) + } + + if !_AuthorizationModel_Metadata_Pattern.MatchString(key) { + err := AuthorizationModelValidationError{ + field: fmt.Sprintf("Metadata[%v]", key), + reason: "value does not match regex pattern \"^[a-z0-9]([a-z0-9\\\\-\\\\.]*[a-z0-9])?$\"", + } + if !all { + return err + } + errors = append(errors, err) + } + + } + + if val != "" { + + if len(val) > 256 { + err := AuthorizationModelValidationError{ + field: fmt.Sprintf("Metadata[%v]", key), + reason: "value length must be at most 256 bytes", + } + if !all { + return err + } + errors = append(errors, err) + } + + } + + } + } + if len(errors) > 0 { return AuthorizationModelMultiError(errors) } @@ -265,6 +332,8 @@ var _AuthorizationModel_SchemaVersion_Pattern = regexp.MustCompile("^[1-9].[1-9] var _AuthorizationModel_Conditions_Pattern = regexp.MustCompile("^[^:#@\\s]{1,50}$") +var _AuthorizationModel_Metadata_Pattern = regexp.MustCompile("^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$") + // Validate checks the field values on TypeDefinition with the rules defined in // the proto definition for this message. If any rules are violated, the first // error encountered is returned, or nil if there are no violations. diff --git a/proto/openfga/v1/openfga_service.pb.go b/proto/openfga/v1/openfga_service.pb.go index 5d10ea90..2660ddbe 100644 --- a/proto/openfga/v1/openfga_service.pb.go +++ b/proto/openfga/v1/openfga_service.pb.go @@ -1758,6 +1758,8 @@ type WriteAuthorizationModelRequest struct { TypeDefinitions []*TypeDefinition `protobuf:"bytes,2,rep,name=type_definitions,proto3" json:"type_definitions,omitempty"` SchemaVersion string `protobuf:"bytes,3,opt,name=schema_version,proto3" json:"schema_version,omitempty"` Conditions map[string]*Condition `protobuf:"bytes,4,rep,name=conditions,proto3" json:"conditions,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"` + // Labels and metadata for the authorization model (similar to Kubernetes labels) + Metadata map[string]string `protobuf:"bytes,5,rep,name=metadata,proto3" json:"metadata,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"` } func (x *WriteAuthorizationModelRequest) Reset() { @@ -1820,6 +1822,13 @@ func (x *WriteAuthorizationModelRequest) GetConditions() map[string]*Condition { return nil } +func (x *WriteAuthorizationModelRequest) GetMetadata() map[string]string { + if x != nil { + return x.Metadata + } + return nil +} + type WriteAuthorizationModelResponse struct { state protoimpl.MessageState sizeCache protoimpl.SizeCache @@ -3595,7 +3604,7 @@ var file_openfga_v1_openfga_service_proto_rawDesc = []byte{ 0x28, 0x0b, 0x32, 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x13, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x22, 0xfb, 0x03, 0x0a, 0x1e, 0x57, 0x72, 0x69, 0x74, + 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x22, 0x9c, 0x06, 0x0a, 0x1e, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, @@ -3621,39 +3630,81 @@ var file_openfga_v1_openfga_service_proto_rawDesc = []byte{ 0x65, 0x73, 0x74, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x42, 0x1e, 0xfa, 0x42, 0x1b, 0x9a, 0x01, 0x18, 0x10, 0x19, 0x22, 0x14, 0x72, 0x12, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, - 0x30, 0x7d, 0x24, 0x52, 0x0a, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x1a, - 0x54, 0x0a, 0x0f, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x45, 0x6e, 0x74, - 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, - 0x03, 0x6b, 0x65, 0x79, 0x12, 0x2b, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, - 0x01, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, - 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, - 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0xa8, 0x01, 0x0a, 0x1f, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, - 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, - 0x6c, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x84, 0x01, 0x0a, 0x16, 0x61, 0x75, - 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, - 0x6c, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, - 0x1c, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, - 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, 0x31, 0x4a, 0x22, 0xe0, 0x41, 0x02, - 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, - 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, - 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, - 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, - 0x22, 0x95, 0x03, 0x0a, 0x1e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, - 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x52, 0x65, 0x71, 0x75, - 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, - 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, - 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, - 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, - 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, - 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, - 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x12, 0x4b, 0x0a, - 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, - 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, - 0x75, 0x66, 0x2e, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x10, 0x92, - 0x41, 0x04, 0x4a, 0x02, 0x35, 0x30, 0xfa, 0x42, 0x06, 0x1a, 0x04, 0x18, 0x64, 0x28, 0x01, 0x52, - 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x12, 0xbb, 0x01, 0x0a, 0x12, 0x63, - 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, - 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x42, 0x8a, 0x01, 0x92, 0x41, 0x64, 0x4a, 0x62, 0x22, + 0x30, 0x7d, 0x24, 0x52, 0x0a, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, + 0xe1, 0x01, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x05, 0x20, 0x03, + 0x28, 0x0b, 0x32, 0x38, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, + 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x2e, 0x4d, + 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x42, 0x8a, 0x01, 0x92, + 0x41, 0x48, 0x4a, 0x46, 0x7b, 0x22, 0x65, 0x6e, 0x76, 0x69, 0x72, 0x6f, 0x6e, 0x6d, 0x65, 0x6e, + 0x74, 0x22, 0x3a, 0x20, 0x22, 0x70, 0x72, 0x6f, 0x64, 0x75, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x22, + 0x2c, 0x20, 0x22, 0x74, 0x65, 0x61, 0x6d, 0x22, 0x3a, 0x20, 0x22, 0x70, 0x6c, 0x61, 0x74, 0x66, + 0x6f, 0x72, 0x6d, 0x22, 0x2c, 0x20, 0x22, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x22, 0x3a, + 0x20, 0x22, 0x76, 0x31, 0x2e, 0x32, 0x2e, 0x33, 0x22, 0x7d, 0xfa, 0x42, 0x3c, 0x9a, 0x01, 0x39, + 0x10, 0x14, 0x22, 0x2b, 0x72, 0x29, 0x28, 0x3f, 0x32, 0x22, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x30, + 0x2d, 0x39, 0x5d, 0x28, 0x5b, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x5c, 0x2d, 0x5c, 0x2e, 0x5d, + 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x5d, 0x29, 0x3f, 0x24, 0xd0, 0x01, 0x01, 0x2a, + 0x08, 0x72, 0x06, 0x28, 0x80, 0x02, 0xd0, 0x01, 0x01, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, + 0x61, 0x74, 0x61, 0x1a, 0x54, 0x0a, 0x0f, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, + 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, + 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x2b, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, + 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, + 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x05, + 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x1a, 0x3b, 0x0a, 0x0d, 0x4d, 0x65, 0x74, + 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, + 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, + 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, + 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0xa8, 0x01, 0x0a, 0x1f, 0x57, 0x72, 0x69, 0x74, 0x65, + 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, + 0x65, 0x6c, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x84, 0x01, 0x0a, 0x16, 0x61, + 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, + 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, + 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, 0x34, 0x31, 0x54, 0x34, 0x39, + 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, 0x31, 0x4a, 0x22, 0xe0, 0x41, + 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, + 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, + 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, + 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, + 0x64, 0x22, 0x95, 0x03, 0x0a, 0x1e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, + 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x52, 0x65, 0x71, + 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, + 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, + 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, + 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, + 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, + 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, + 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x12, 0x4b, + 0x0a, 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, + 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, + 0x62, 0x75, 0x66, 0x2e, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x10, + 0x92, 0x41, 0x04, 0x4a, 0x02, 0x35, 0x30, 0xfa, 0x42, 0x06, 0x1a, 0x04, 0x18, 0x64, 0x28, 0x01, + 0x52, 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x12, 0xbb, 0x01, 0x0a, 0x12, + 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, + 0x65, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x42, 0x8a, 0x01, 0x92, 0x41, 0x64, 0x4a, 0x62, + 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, + 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, + 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, + 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, + 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, + 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, + 0x3d, 0x22, 0xfa, 0x42, 0x20, 0x72, 0x1e, 0x28, 0x80, 0x28, 0x32, 0x19, 0x5e, 0x24, 0x7c, 0x5e, + 0x5b, 0x41, 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, 0x3d, 0x7b, + 0x30, 0x2c, 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0xfc, 0x02, 0x0a, 0x1f, 0x52, 0x65, + 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, + 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x57, 0x0a, + 0x14, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, + 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1e, 0x2e, 0x6f, 0x70, + 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, + 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x42, 0x03, 0xe0, 0x41, 0x02, + 0x52, 0x14, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, + 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0xff, 0x01, 0x0a, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, + 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, + 0x01, 0x28, 0x09, 0x42, 0xce, 0x01, 0x92, 0x41, 0xa7, 0x01, 0x32, 0x41, 0x54, 0x68, 0x65, 0x20, + 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, + 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, + 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, + 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x2e, 0x4a, 0x62, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, @@ -3663,85 +3714,31 @@ var file_openfga_v1_openfga_service_proto_rawDesc = []byte{ 0x22, 0xfa, 0x42, 0x20, 0x72, 0x1e, 0x28, 0x80, 0x28, 0x32, 0x19, 0x5e, 0x24, 0x7c, 0x5e, 0x5b, 0x41, 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, 0x3d, 0x7b, 0x30, 0x2c, 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0xfc, 0x02, 0x0a, 0x1f, 0x52, 0x65, 0x61, - 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, - 0x64, 0x65, 0x6c, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x57, 0x0a, 0x14, - 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, - 0x64, 0x65, 0x6c, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1e, 0x2e, 0x6f, 0x70, 0x65, - 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, - 0x14, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, - 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0xff, 0x01, 0x0a, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, - 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, 0x01, - 0x28, 0x09, 0x42, 0xce, 0x01, 0x92, 0x41, 0xa7, 0x01, 0x32, 0x41, 0x54, 0x68, 0x65, 0x20, 0x63, - 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, - 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x20, - 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, - 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x2e, 0x4a, 0x62, 0x22, 0x65, - 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, - 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, - 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, - 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, - 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, - 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, - 0xfa, 0x42, 0x20, 0x72, 0x1e, 0x28, 0x80, 0x28, 0x32, 0x19, 0x5e, 0x24, 0x7c, 0x5e, 0x5b, 0x41, - 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, 0x3d, 0x7b, 0x30, 0x2c, - 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0xd5, 0x02, 0x0a, 0x16, 0x57, 0x72, 0x69, 0x74, - 0x65, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, - 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, - 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, - 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, 0x4d, - 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, - 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, - 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, - 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x12, 0x84, 0x01, 0x0a, - 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, - 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, - 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, 0x34, 0x31, 0x54, - 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, 0x31, 0x4a, 0x22, - 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, - 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, - 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x16, 0x61, 0x75, 0x74, - 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, - 0x5f, 0x69, 0x64, 0x12, 0x4a, 0x0a, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, - 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, - 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x13, - 0x92, 0x41, 0x03, 0xa0, 0x01, 0x64, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x07, 0x92, 0x01, 0x04, 0x08, - 0x00, 0x10, 0x64, 0x52, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, - 0x19, 0x0a, 0x17, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x88, 0x02, 0x0a, 0x15, 0x52, - 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x71, - 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, - 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, - 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, - 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, - 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, - 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, - 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x12, 0x84, - 0x01, 0x0a, 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, - 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, 0x34, - 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, 0x31, - 0x4a, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, - 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, - 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x16, 0x61, - 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, - 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x22, 0xd6, 0x01, 0x0a, 0x16, 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, - 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, - 0x12, 0x84, 0x01, 0x0a, 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, - 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, - 0x4a, 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, - 0x58, 0x31, 0x4a, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, - 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, - 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, - 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, - 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x12, 0x35, 0x0a, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, - 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x6f, 0x70, - 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, - 0x6f, 0x6e, 0x52, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0xf9, - 0x05, 0x0a, 0x12, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x52, 0x65, + 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0xd5, 0x02, 0x0a, 0x16, 0x57, 0x72, 0x69, + 0x74, 0x65, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x71, 0x75, + 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, + 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, + 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, + 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, + 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, + 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, + 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x12, 0x84, 0x01, + 0x0a, 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, + 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, + 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, 0x34, 0x31, + 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, 0x31, 0x4a, + 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, + 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, + 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x16, 0x61, 0x75, + 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, + 0x6c, 0x5f, 0x69, 0x64, 0x12, 0x4a, 0x0a, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, + 0x6e, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, + 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x42, + 0x13, 0x92, 0x41, 0x03, 0xa0, 0x01, 0x64, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x07, 0x92, 0x01, 0x04, + 0x08, 0x00, 0x10, 0x64, 0x52, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, + 0x22, 0x19, 0x0a, 0x17, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x88, 0x02, 0x0a, 0x15, + 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, @@ -3749,103 +3746,105 @@ var file_openfga_v1_openfga_service_proto_rawDesc = []byte{ 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x12, - 0x2e, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1a, 0xfa, - 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x5c, 0x73, 0x5d, 0x7b, 0x31, - 0x2c, 0x32, 0x35, 0x34, 0x7d, 0x24, 0xd0, 0x01, 0x01, 0x52, 0x04, 0x74, 0x79, 0x70, 0x65, 0x12, - 0x4b, 0x0a, 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x03, 0x20, 0x01, - 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, - 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, - 0x10, 0x92, 0x41, 0x04, 0x4a, 0x02, 0x35, 0x30, 0xfa, 0x42, 0x06, 0x1a, 0x04, 0x18, 0x64, 0x28, - 0x01, 0x52, 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x12, 0xbb, 0x01, 0x0a, - 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, - 0x6b, 0x65, 0x6e, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x42, 0x8a, 0x01, 0x92, 0x41, 0x64, 0x4a, - 0x62, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, - 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, - 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, - 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, - 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, - 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, - 0x3d, 0x3d, 0x22, 0xfa, 0x42, 0x20, 0x72, 0x1e, 0x28, 0x80, 0x28, 0x32, 0x19, 0x5e, 0x24, 0x7c, - 0x5e, 0x5b, 0x41, 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, 0x3d, - 0x7b, 0x30, 0x2c, 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0xbd, 0x02, 0x0a, 0x0a, 0x73, - 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, - 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, - 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x42, 0x80, 0x02, 0x92, 0x41, - 0xf4, 0x01, 0x32, 0xd7, 0x01, 0x53, 0x74, 0x61, 0x72, 0x74, 0x20, 0x64, 0x61, 0x74, 0x65, 0x20, - 0x61, 0x6e, 0x64, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x63, 0x68, 0x61, 0x6e, - 0x67, 0x65, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x72, 0x65, 0x61, 0x64, 0x2e, 0x0a, 0x46, 0x6f, 0x72, - 0x6d, 0x61, 0x74, 0x3a, 0x20, 0x49, 0x53, 0x4f, 0x20, 0x38, 0x36, 0x30, 0x31, 0x20, 0x74, 0x69, - 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x20, 0x28, 0x65, 0x2e, 0x67, 0x2e, 0x2c, 0x20, 0x32, - 0x30, 0x32, 0x32, 0x2d, 0x30, 0x31, 0x2d, 0x30, 0x31, 0x54, 0x30, 0x30, 0x3a, 0x30, 0x30, 0x3a, - 0x30, 0x30, 0x5a, 0x29, 0x0a, 0x49, 0x66, 0x20, 0x61, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, - 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x69, 0x73, 0x20, - 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x64, 0x20, 0x61, 0x6c, 0x6f, 0x6e, 0x67, 0x20, 0x73, - 0x69, 0x64, 0x65, 0x20, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x2c, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x74, 0x61, 0x6b, 0x65, - 0x20, 0x70, 0x72, 0x65, 0x63, 0x65, 0x64, 0x65, 0x6e, 0x63, 0x65, 0x20, 0x6f, 0x76, 0x65, 0x72, - 0x20, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x2e, 0x4a, 0x18, 0x32, 0x30, - 0x32, 0x31, 0x2d, 0x30, 0x31, 0x2d, 0x30, 0x31, 0x54, 0x30, 0x30, 0x3a, 0x30, 0x30, 0x3a, 0x30, - 0x30, 0x2e, 0x30, 0x30, 0x30, 0x5a, 0xfa, 0x42, 0x05, 0xb2, 0x01, 0x02, 0x38, 0x01, 0x52, 0x0a, - 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x22, 0xd3, 0x02, 0x0a, 0x13, 0x52, - 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, - 0x73, 0x65, 0x12, 0x36, 0x0a, 0x07, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x18, 0x01, 0x20, - 0x03, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, - 0x2e, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x42, 0x03, 0xe0, 0x41, - 0x02, 0x52, 0x07, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x12, 0x83, 0x02, 0x0a, 0x12, 0x63, + 0x84, 0x01, 0x0a, 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, + 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, + 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, + 0x31, 0x4a, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, + 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, + 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x16, + 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, + 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x22, 0xd6, 0x01, 0x0a, 0x16, 0x52, 0x65, 0x61, 0x64, 0x41, + 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, + 0x65, 0x12, 0x84, 0x01, 0x0a, 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, + 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, + 0x56, 0x4a, 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, + 0x37, 0x58, 0x31, 0x4a, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, + 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, + 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, + 0x52, 0x16, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, + 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x12, 0x35, 0x0a, 0x0a, 0x61, 0x73, 0x73, 0x65, + 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x6f, + 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, + 0x69, 0x6f, 0x6e, 0x52, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, + 0xf9, 0x05, 0x0a, 0x12, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x52, + 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, + 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, + 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, + 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, + 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, + 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, + 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, + 0x12, 0x2e, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x1a, + 0xfa, 0x42, 0x17, 0x72, 0x15, 0x32, 0x10, 0x5e, 0x5b, 0x5e, 0x3a, 0x23, 0x5c, 0x73, 0x5d, 0x7b, + 0x31, 0x2c, 0x32, 0x35, 0x34, 0x7d, 0x24, 0xd0, 0x01, 0x01, 0x52, 0x04, 0x74, 0x79, 0x70, 0x65, + 0x12, 0x4b, 0x0a, 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x03, 0x20, + 0x01, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, + 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, + 0x42, 0x10, 0x92, 0x41, 0x04, 0x4a, 0x02, 0x35, 0x30, 0xfa, 0x42, 0x06, 0x1a, 0x04, 0x18, 0x64, + 0x28, 0x01, 0x52, 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x12, 0xbb, 0x01, + 0x0a, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, + 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x42, 0x8a, 0x01, 0x92, 0x41, 0x64, + 0x4a, 0x62, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, + 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, + 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, + 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, + 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, + 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, + 0x51, 0x3d, 0x3d, 0x22, 0xfa, 0x42, 0x20, 0x72, 0x1e, 0x28, 0x80, 0x28, 0x32, 0x19, 0x5e, 0x24, + 0x7c, 0x5e, 0x5b, 0x41, 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, + 0x3d, 0x7b, 0x30, 0x2c, 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0xbd, 0x02, 0x0a, 0x0a, + 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, + 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, + 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x42, 0x80, 0x02, 0x92, + 0x41, 0xf4, 0x01, 0x32, 0xd7, 0x01, 0x53, 0x74, 0x61, 0x72, 0x74, 0x20, 0x64, 0x61, 0x74, 0x65, + 0x20, 0x61, 0x6e, 0x64, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x63, 0x68, 0x61, + 0x6e, 0x67, 0x65, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x72, 0x65, 0x61, 0x64, 0x2e, 0x0a, 0x46, 0x6f, + 0x72, 0x6d, 0x61, 0x74, 0x3a, 0x20, 0x49, 0x53, 0x4f, 0x20, 0x38, 0x36, 0x30, 0x31, 0x20, 0x74, + 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x20, 0x28, 0x65, 0x2e, 0x67, 0x2e, 0x2c, 0x20, + 0x32, 0x30, 0x32, 0x32, 0x2d, 0x30, 0x31, 0x2d, 0x30, 0x31, 0x54, 0x30, 0x30, 0x3a, 0x30, 0x30, + 0x3a, 0x30, 0x30, 0x5a, 0x29, 0x0a, 0x49, 0x66, 0x20, 0x61, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, + 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x69, 0x73, + 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x64, 0x20, 0x61, 0x6c, 0x6f, 0x6e, 0x67, 0x20, + 0x73, 0x69, 0x64, 0x65, 0x20, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x2c, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x74, 0x61, 0x6b, + 0x65, 0x20, 0x70, 0x72, 0x65, 0x63, 0x65, 0x64, 0x65, 0x6e, 0x63, 0x65, 0x20, 0x6f, 0x76, 0x65, + 0x72, 0x20, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x2e, 0x4a, 0x18, 0x32, + 0x30, 0x32, 0x31, 0x2d, 0x30, 0x31, 0x2d, 0x30, 0x31, 0x54, 0x30, 0x30, 0x3a, 0x30, 0x30, 0x3a, + 0x30, 0x30, 0x2e, 0x30, 0x30, 0x30, 0x5a, 0xfa, 0x42, 0x05, 0xb2, 0x01, 0x02, 0x38, 0x01, 0x52, + 0x0a, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x22, 0xd3, 0x02, 0x0a, 0x13, + 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, + 0x6e, 0x73, 0x65, 0x12, 0x36, 0x0a, 0x07, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x18, 0x01, + 0x20, 0x03, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, + 0x31, 0x2e, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x42, 0x03, 0xe0, + 0x41, 0x02, 0x52, 0x07, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x12, 0x83, 0x02, 0x0a, 0x12, + 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, + 0x65, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0xd2, 0x01, 0x92, 0x41, 0xab, 0x01, 0x32, + 0x45, 0x54, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, + 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x6c, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, + 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x63, 0x68, + 0x61, 0x6e, 0x67, 0x65, 0x73, 0x2e, 0x4a, 0x62, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, + 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, + 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, + 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, + 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, + 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, + 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, 0xfa, 0x42, 0x20, 0x72, 0x1e, 0x28, + 0x80, 0x28, 0x32, 0x19, 0x5e, 0x24, 0x7c, 0x5e, 0x5b, 0x41, 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, + 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, 0x3d, 0x7b, 0x30, 0x2c, 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, - 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0xd2, 0x01, 0x92, 0x41, 0xab, 0x01, 0x32, 0x45, - 0x54, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x69, - 0x64, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x6c, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, - 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x63, 0x68, 0x61, - 0x6e, 0x67, 0x65, 0x73, 0x2e, 0x4a, 0x62, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, - 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, - 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, - 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, - 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, - 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, - 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, 0xfa, 0x42, 0x20, 0x72, 0x1e, 0x28, 0x80, - 0x28, 0x32, 0x19, 0x5e, 0x24, 0x7c, 0x5e, 0x5b, 0x41, 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, - 0x39, 0x2d, 0x5f, 0x5d, 0x2b, 0x3d, 0x7b, 0x30, 0x2c, 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, - 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, - 0x22, 0x67, 0x0a, 0x12, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, - 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x51, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, - 0x20, 0x01, 0x28, 0x09, 0x42, 0x3d, 0x92, 0x41, 0x11, 0x4a, 0x0f, 0x22, 0x6d, 0x79, 0x2d, 0x73, - 0x74, 0x6f, 0x72, 0x65, 0x2d, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x23, - 0x72, 0x21, 0x32, 0x1f, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5c, - 0x73, 0x5c, 0x2e, 0x5c, 0x2d, 0x5c, 0x2f, 0x5e, 0x5f, 0x26, 0x40, 0x5d, 0x7b, 0x33, 0x2c, 0x36, - 0x34, 0x7d, 0x24, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xe6, 0x01, 0x0a, 0x13, 0x43, 0x72, - 0x65, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, - 0x65, 0x12, 0x34, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x24, 0x92, - 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, - 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, - 0xe0, 0x41, 0x02, 0x52, 0x02, 0x69, 0x64, 0x12, 0x17, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, - 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, - 0x12, 0x3f, 0x0a, 0x0a, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, 0x03, - 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, - 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, - 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x0a, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, - 0x74, 0x12, 0x3f, 0x0a, 0x0a, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, - 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, - 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, - 0x70, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x0a, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x64, 0x5f, - 0x61, 0x74, 0x22, 0xd5, 0x01, 0x0a, 0x12, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, - 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, - 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, - 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, - 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, - 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, - 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, - 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, - 0x5f, 0x69, 0x64, 0x12, 0x55, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, - 0x09, 0x42, 0x41, 0x92, 0x41, 0x15, 0x4a, 0x13, 0x22, 0x6d, 0x79, 0x2d, 0x6e, 0x65, 0x77, 0x2d, + 0x6e, 0x22, 0x67, 0x0a, 0x12, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, + 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x51, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, + 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x3d, 0x92, 0x41, 0x11, 0x4a, 0x0f, 0x22, 0x6d, 0x79, 0x2d, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2d, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x23, 0x72, 0x21, 0x32, 0x1f, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5c, 0x73, 0x5c, 0x2e, 0x5c, 0x2d, 0x5c, 0x2f, 0x5e, 0x5f, 0x26, 0x40, 0x5d, 0x7b, 0x33, 0x2c, - 0x36, 0x34, 0x7d, 0x24, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xe6, 0x01, 0x0a, 0x13, 0x55, - 0x70, 0x64, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, + 0x36, 0x34, 0x7d, 0x24, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xe6, 0x01, 0x0a, 0x13, 0x43, + 0x72, 0x65, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x34, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x24, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, @@ -3859,746 +3858,840 @@ var file_openfga_v1_openfga_service_proto_rawDesc = []byte{ 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x0a, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x64, - 0x5f, 0x61, 0x74, 0x22, 0x7e, 0x0a, 0x12, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, 0x74, 0x6f, - 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, 0x6f, - 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, 0x1e, - 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, - 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, - 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, - 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, 0x5a, - 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, - 0x5f, 0x69, 0x64, 0x22, 0x15, 0x0a, 0x13, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, 0x74, 0x6f, - 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x7b, 0x0a, 0x0f, 0x47, 0x65, - 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, - 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, - 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, + 0x5f, 0x61, 0x74, 0x22, 0xd5, 0x01, 0x0a, 0x12, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x53, 0x74, + 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, + 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, + 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, + 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, + 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, + 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, + 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, + 0x65, 0x5f, 0x69, 0x64, 0x12, 0x55, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, + 0x28, 0x09, 0x42, 0x41, 0x92, 0x41, 0x15, 0x4a, 0x13, 0x22, 0x6d, 0x79, 0x2d, 0x6e, 0x65, 0x77, + 0x2d, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2d, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xe0, 0x41, 0x02, 0xfa, + 0x42, 0x23, 0x72, 0x21, 0x32, 0x1f, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, + 0x39, 0x5c, 0x73, 0x5c, 0x2e, 0x5c, 0x2d, 0x5c, 0x2f, 0x5e, 0x5f, 0x26, 0x40, 0x5d, 0x7b, 0x33, + 0x2c, 0x36, 0x34, 0x7d, 0x24, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xe6, 0x01, 0x0a, 0x13, + 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, + 0x6e, 0x73, 0x65, 0x12, 0x34, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, + 0x24, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, - 0x58, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, - 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, - 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, - 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x22, 0x9f, 0x02, 0x0a, 0x10, 0x47, 0x65, 0x74, 0x53, - 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x34, 0x0a, 0x02, - 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x24, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, - 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, - 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, 0x02, 0x52, 0x02, - 0x69, 0x64, 0x12, 0x17, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, - 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x3f, 0x0a, 0x0a, 0x63, - 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, - 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, - 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x42, 0x03, 0xe0, 0x41, 0x02, - 0x52, 0x0a, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x12, 0x3f, 0x0a, 0x0a, - 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, + 0x58, 0x22, 0xe0, 0x41, 0x02, 0x52, 0x02, 0x69, 0x64, 0x12, 0x17, 0x0a, 0x04, 0x6e, 0x61, 0x6d, + 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x04, 0x6e, 0x61, + 0x6d, 0x65, 0x12, 0x3f, 0x0a, 0x0a, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, + 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, + 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, + 0x6d, 0x70, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x0a, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, + 0x5f, 0x61, 0x74, 0x12, 0x3f, 0x0a, 0x0a, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, + 0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, + 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, + 0x61, 0x6d, 0x70, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x0a, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, + 0x64, 0x5f, 0x61, 0x74, 0x22, 0x7e, 0x0a, 0x12, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, 0x74, + 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, 0x0a, 0x08, 0x73, 0x74, + 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x4c, 0x92, 0x41, + 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, + 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, + 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, 0x42, 0x43, 0x44, 0x45, + 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, 0x56, 0x57, 0x58, 0x59, + 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, 0x73, 0x74, 0x6f, 0x72, + 0x65, 0x5f, 0x69, 0x64, 0x22, 0x15, 0x0a, 0x13, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, 0x74, + 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x7b, 0x0a, 0x0f, 0x47, + 0x65, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x68, + 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, + 0x42, 0x4c, 0x92, 0x41, 0x1e, 0x4a, 0x1c, 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, + 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, 0x51, 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, + 0x35, 0x58, 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x25, 0x72, 0x23, 0x32, 0x21, 0x5e, 0x5b, 0x41, + 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x4a, 0x4b, 0x4d, 0x4e, 0x50, 0x51, 0x52, 0x53, 0x54, + 0x56, 0x57, 0x58, 0x59, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x7b, 0x32, 0x36, 0x7d, 0x24, 0x52, 0x08, + 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x22, 0x9f, 0x02, 0x0a, 0x10, 0x47, 0x65, 0x74, + 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x34, 0x0a, + 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x24, 0x92, 0x41, 0x1e, 0x4a, 0x1c, + 0x22, 0x30, 0x31, 0x59, 0x43, 0x50, 0x34, 0x36, 0x4a, 0x4b, 0x59, 0x4d, 0x38, 0x46, 0x4a, 0x43, + 0x51, 0x33, 0x37, 0x4e, 0x4d, 0x42, 0x59, 0x48, 0x45, 0x35, 0x58, 0x22, 0xe0, 0x41, 0x02, 0x52, + 0x02, 0x69, 0x64, 0x12, 0x17, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, + 0x09, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x3f, 0x0a, 0x0a, + 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x42, 0x03, 0xe0, 0x41, - 0x02, 0x52, 0x0a, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x12, 0x3a, 0x0a, - 0x0a, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, 0x05, 0x20, 0x01, 0x28, + 0x02, 0x52, 0x0a, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x12, 0x3f, 0x0a, + 0x0a, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, - 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x0a, 0x64, - 0x65, 0x6c, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x22, 0xc2, 0x04, 0x0a, 0x11, 0x4c, 0x69, - 0x73, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, - 0x44, 0x0a, 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x01, 0x20, 0x01, - 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, - 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, - 0x09, 0xfa, 0x42, 0x06, 0x1a, 0x04, 0x18, 0x64, 0x28, 0x01, 0x52, 0x09, 0x70, 0x61, 0x67, 0x65, - 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x12, 0xbe, 0x01, 0x0a, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, - 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, 0x01, - 0x28, 0x09, 0x42, 0x8d, 0x01, 0x92, 0x41, 0x64, 0x4a, 0x62, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, - 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, - 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, - 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, - 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, - 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, - 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, 0xfa, 0x42, 0x23, 0x72, - 0x21, 0x28, 0x80, 0x28, 0x32, 0x1c, 0x5e, 0x24, 0x7c, 0x5e, 0x24, 0x7c, 0x5e, 0x5b, 0x41, 0x2d, - 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, 0x3d, 0x7b, 0x30, 0x2c, 0x32, - 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0xa5, 0x02, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, - 0x03, 0x20, 0x01, 0x28, 0x09, 0x42, 0x90, 0x02, 0x92, 0x41, 0xe0, 0x01, 0x32, 0xcc, 0x01, 0x54, - 0x68, 0x65, 0x20, 0x6e, 0x61, 0x6d, 0x65, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, - 0x72, 0x20, 0x69, 0x6e, 0x73, 0x74, 0x72, 0x75, 0x63, 0x74, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x41, 0x50, 0x49, 0x20, 0x74, 0x6f, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x69, 0x6e, 0x63, 0x6c, - 0x75, 0x64, 0x65, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, - 0x20, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x6e, 0x61, 0x6d, 0x65, - 0x2e, 0x4d, 0x75, 0x6c, 0x74, 0x69, 0x70, 0x6c, 0x65, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, - 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x62, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, - 0x64, 0x2e, 0x20, 0x4f, 0x6e, 0x6c, 0x79, 0x20, 0x65, 0x78, 0x61, 0x63, 0x74, 0x20, 0x6d, 0x61, - 0x74, 0x63, 0x68, 0x65, 0x73, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x72, 0x65, - 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, 0x3b, 0x20, 0x73, 0x75, 0x62, 0x73, 0x74, 0x72, 0x69, 0x6e, - 0x67, 0x20, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x72, 0x65, - 0x67, 0x65, 0x78, 0x65, 0x73, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x62, - 0x65, 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x64, 0x4a, 0x0f, 0x22, 0x6d, 0x79, - 0x2d, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2d, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xe0, 0x41, 0x01, 0xfa, - 0x42, 0x26, 0x72, 0x24, 0x32, 0x1f, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, - 0x39, 0x5c, 0x73, 0x5c, 0x2e, 0x5c, 0x2d, 0x5c, 0x2f, 0x5e, 0x5f, 0x26, 0x40, 0x5d, 0x7b, 0x33, - 0x2c, 0x36, 0x34, 0x7d, 0x24, 0xd0, 0x01, 0x01, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xc9, - 0x02, 0x0a, 0x12, 0x4c, 0x69, 0x73, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x52, 0x65, 0x73, - 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x2e, 0x0a, 0x06, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x18, - 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x11, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x76, 0x31, 0x2e, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x06, 0x73, - 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x82, 0x02, 0x0a, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, - 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, 0x01, - 0x28, 0x09, 0x42, 0xd1, 0x01, 0x92, 0x41, 0xa7, 0x01, 0x32, 0x41, 0x54, 0x68, 0x65, 0x20, 0x63, - 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, - 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x20, - 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, - 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2e, 0x4a, 0x62, 0x22, 0x65, - 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, - 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, - 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, - 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, - 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, - 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, - 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x20, 0x72, 0x1e, 0x28, 0x80, 0x28, 0x32, 0x19, 0x5e, 0x24, 0x7c, - 0x5e, 0x5b, 0x41, 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, 0x3d, - 0x7b, 0x30, 0x2c, 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0xeb, 0x01, 0x0a, 0x11, 0x41, - 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x4b, 0x65, 0x79, - 0x12, 0x4e, 0x0a, 0x06, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, - 0x42, 0x36, 0x92, 0x41, 0x1b, 0x4a, 0x16, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, - 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x78, 0x80, 0x02, - 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x12, 0x72, 0x10, 0x32, 0x0e, 0x5e, 0x5b, 0x5e, 0x5c, 0x73, 0x5d, - 0x7b, 0x32, 0x2c, 0x32, 0x35, 0x36, 0x7d, 0x24, 0x52, 0x06, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, - 0x12, 0x45, 0x0a, 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, - 0x28, 0x09, 0x42, 0x29, 0x92, 0x41, 0x0c, 0x4a, 0x08, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, - 0x22, 0x78, 0x32, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x14, 0x72, 0x12, 0x32, 0x10, 0x5e, 0x5b, 0x5e, - 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0x52, 0x08, 0x72, - 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x3f, 0x0a, 0x04, 0x75, 0x73, 0x65, 0x72, 0x18, - 0x03, 0x20, 0x01, 0x28, 0x09, 0x42, 0x2b, 0x92, 0x41, 0x10, 0x4a, 0x0b, 0x22, 0x75, 0x73, 0x65, - 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x78, 0x80, 0x04, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x12, - 0x72, 0x10, 0x32, 0x0e, 0x5e, 0x5b, 0x5e, 0x5c, 0x73, 0x5d, 0x7b, 0x32, 0x2c, 0x35, 0x31, 0x32, - 0x7d, 0x24, 0x52, 0x04, 0x75, 0x73, 0x65, 0x72, 0x22, 0x9d, 0x02, 0x0a, 0x09, 0x41, 0x73, 0x73, - 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x48, 0x0a, 0x09, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, - 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, - 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, - 0x54, 0x75, 0x70, 0x6c, 0x65, 0x4b, 0x65, 0x79, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x05, - 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x09, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, - 0x12, 0x25, 0x0a, 0x0b, 0x65, 0x78, 0x70, 0x65, 0x63, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, - 0x02, 0x20, 0x01, 0x28, 0x08, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x0b, 0x65, 0x78, 0x70, 0x65, - 0x63, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x52, 0x0a, 0x11, 0x63, 0x6f, 0x6e, 0x74, 0x65, - 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, - 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, - 0x54, 0x75, 0x70, 0x6c, 0x65, 0x4b, 0x65, 0x79, 0x42, 0x0e, 0x92, 0x41, 0x03, 0xa0, 0x01, 0x14, - 0xfa, 0x42, 0x05, 0x92, 0x01, 0x02, 0x10, 0x14, 0x52, 0x11, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, - 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x12, 0x4b, 0x0a, 0x07, 0x63, - 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x67, - 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x53, - 0x74, 0x72, 0x75, 0x63, 0x74, 0x42, 0x18, 0x92, 0x41, 0x15, 0x4a, 0x13, 0x7b, 0x22, 0x76, 0x69, - 0x65, 0x77, 0x5f, 0x63, 0x6f, 0x75, 0x6e, 0x74, 0x22, 0x3a, 0x20, 0x31, 0x30, 0x30, 0x7d, 0x52, - 0x07, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x22, 0x48, 0x0a, 0x0a, 0x41, 0x73, 0x73, 0x65, - 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x3a, 0x0a, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, - 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x6f, 0x70, 0x65, - 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, - 0x6e, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x32, 0xe7, 0xeb, 0x01, 0x0a, 0x0e, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x53, - 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x12, 0xd0, 0x1d, 0x0a, 0x04, 0x52, 0x65, 0x61, 0x64, 0x12, - 0x17, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, - 0x64, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x18, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, - 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, - 0x73, 0x65, 0x22, 0x94, 0x1d, 0x92, 0x41, 0xee, 0x1c, 0x0a, 0x13, 0x52, 0x65, 0x6c, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x12, 0x57, - 0x47, 0x65, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x66, 0x72, 0x6f, 0x6d, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x6d, - 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x20, 0x61, 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x2c, 0x20, - 0x77, 0x69, 0x74, 0x68, 0x6f, 0x75, 0x74, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, - 0x67, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x72, 0x65, 0x77, 0x72, 0x69, 0x74, - 0x65, 0x20, 0x72, 0x75, 0x6c, 0x65, 0x73, 0x1a, 0xf7, 0x1b, 0x54, 0x68, 0x65, 0x20, 0x52, 0x65, - 0x61, 0x64, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, - 0x72, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x66, 0x6f, - 0x72, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x73, 0x74, 0x6f, 0x72, - 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x20, 0x61, 0x20, 0x71, - 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x69, 0x6c, 0x74, 0x65, 0x72, 0x20, 0x73, 0x70, 0x65, 0x63, - 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, - 0x79, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, - 0x2e, 0x20, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x64, 0x6f, 0x65, 0x73, 0x6e, - 0x27, 0x74, 0x20, 0x67, 0x75, 0x61, 0x72, 0x61, 0x6e, 0x74, 0x65, 0x65, 0x20, 0x6f, 0x72, 0x64, - 0x65, 0x72, 0x20, 0x62, 0x79, 0x20, 0x61, 0x6e, 0x79, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x2e, - 0x20, 0x0a, 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, - 0x74, 0x20, 0x66, 0x72, 0x6f, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x2f, 0x73, 0x74, 0x6f, - 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x65, - 0x78, 0x70, 0x61, 0x6e, 0x64, 0x60, 0x20, 0x41, 0x50, 0x49, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, - 0x61, 0x74, 0x20, 0x69, 0x74, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, - 0x6e, 0x73, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, - 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, 0x72, 0x65, 0x20, - 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x79, - 0x73, 0x74, 0x65, 0x6d, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x73, 0x61, 0x74, 0x69, 0x73, 0x66, 0x79, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x2e, 0x20, 0x0a, 0x49, 0x6e, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x3a, 0x0a, 0x31, 0x2e, 0x20, 0x60, 0x74, 0x75, - 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x60, 0x20, 0x69, 0x73, 0x20, 0x6f, 0x70, 0x74, 0x69, - 0x6f, 0x6e, 0x61, 0x6c, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x73, 0x70, 0x65, - 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x69, 0x74, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, - 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, - 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x0a, - 0x32, 0x2e, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x6f, 0x62, - 0x6a, 0x65, 0x63, 0x74, 0x60, 0x20, 0x69, 0x73, 0x20, 0x6d, 0x61, 0x6e, 0x64, 0x61, 0x74, 0x6f, - 0x72, 0x79, 0x20, 0x69, 0x66, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, - 0x60, 0x20, 0x69, 0x73, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2e, 0x20, - 0x49, 0x74, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x62, 0x65, 0x20, 0x61, 0x20, 0x66, 0x75, 0x6c, 0x6c, - 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x28, 0x65, 0x2e, 0x67, 0x2e, 0x2c, 0x20, 0x60, - 0x74, 0x79, 0x70, 0x65, 0x3a, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x5f, 0x69, 0x64, 0x60, 0x29, - 0x20, 0x6f, 0x72, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x28, 0x65, - 0x2e, 0x67, 0x2e, 0x2c, 0x20, 0x60, 0x74, 0x79, 0x70, 0x65, 0x3a, 0x60, 0x29, 0x2e, 0x0a, 0x33, - 0x2e, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x75, 0x73, 0x65, - 0x72, 0x60, 0x20, 0x69, 0x73, 0x20, 0x6d, 0x61, 0x6e, 0x64, 0x61, 0x74, 0x6f, 0x72, 0x79, 0x20, - 0x69, 0x66, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x20, 0x69, 0x73, 0x20, - 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x63, 0x61, 0x73, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, - 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x60, 0x20, 0x69, 0x73, 0x20, - 0x61, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x2e, 0x20, 0x49, 0x66, 0x20, - 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x75, 0x73, 0x65, 0x72, 0x20, 0x69, - 0x73, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x69, 0x74, 0x20, - 0x6e, 0x65, 0x65, 0x64, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65, 0x20, 0x61, 0x20, 0x66, 0x75, - 0x6c, 0x6c, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x28, 0x65, 0x2e, 0x67, 0x2e, 0x2c, - 0x20, 0x60, 0x74, 0x79, 0x70, 0x65, 0x3a, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x69, 0x64, 0x60, 0x29, - 0x2e, 0x0a, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x73, 0x0a, 0x23, 0x23, - 0x23, 0x20, 0x51, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, - 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x61, 0x20, 0x74, 0x79, 0x70, - 0x65, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x0a, 0x54, 0x6f, 0x20, - 0x71, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x6f, 0x62, - 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, - 0x3a, 0x62, 0x6f, 0x62, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, - 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, - 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, - 0x60, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, - 0x6e, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x61, 0x64, 0x20, 0x41, 0x50, 0x49, - 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x6f, 0x66, 0x0a, 0x60, 0x60, - 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, - 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, - 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, - 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, - 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, - 0x0a, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, - 0x74, 0x75, 0x72, 0x6e, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, - 0x61, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, - 0x6f, 0x6b, 0x65, 0x6e, 0x2c, 0x20, 0x73, 0x6f, 0x6d, 0x65, 0x74, 0x68, 0x69, 0x6e, 0x67, 0x20, - 0x6c, 0x69, 0x6b, 0x65, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, - 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, - 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, - 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, - 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, - 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x22, 0x3a, - 0x20, 0x22, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x31, 0x30, 0x2d, 0x30, 0x36, 0x54, 0x31, 0x35, 0x3a, - 0x33, 0x32, 0x3a, 0x31, 0x31, 0x2e, 0x31, 0x32, 0x38, 0x5a, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x7d, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, - 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x3a, 0x20, 0x22, + 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x42, 0x03, 0xe0, + 0x41, 0x02, 0x52, 0x0a, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x12, 0x3a, + 0x0a, 0x0a, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x18, 0x05, 0x20, 0x01, + 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, + 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x54, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x52, 0x0a, + 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x61, 0x74, 0x22, 0xc2, 0x04, 0x0a, 0x11, 0x4c, + 0x69, 0x73, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, + 0x12, 0x44, 0x0a, 0x09, 0x70, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x01, 0x20, + 0x01, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, + 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, + 0x42, 0x09, 0xfa, 0x42, 0x06, 0x1a, 0x04, 0x18, 0x64, 0x28, 0x01, 0x52, 0x09, 0x70, 0x61, 0x67, + 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x12, 0xbe, 0x01, 0x0a, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, + 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, + 0x01, 0x28, 0x09, 0x42, 0x8d, 0x01, 0x92, 0x41, 0x64, 0x4a, 0x62, 0x22, 0x65, 0x79, 0x4a, 0x77, + 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, + 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, + 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, + 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, + 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, + 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, 0xfa, 0x42, 0x23, + 0x72, 0x21, 0x28, 0x80, 0x28, 0x32, 0x1c, 0x5e, 0x24, 0x7c, 0x5e, 0x24, 0x7c, 0x5e, 0x5b, 0x41, + 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, 0x3d, 0x7b, 0x30, 0x2c, + 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0xa5, 0x02, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, + 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x42, 0x90, 0x02, 0x92, 0x41, 0xe0, 0x01, 0x32, 0xcc, 0x01, + 0x54, 0x68, 0x65, 0x20, 0x6e, 0x61, 0x6d, 0x65, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, + 0x65, 0x72, 0x20, 0x69, 0x6e, 0x73, 0x74, 0x72, 0x75, 0x63, 0x74, 0x73, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x41, 0x50, 0x49, 0x20, 0x74, 0x6f, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x69, 0x6e, 0x63, + 0x6c, 0x75, 0x64, 0x65, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x74, 0x68, 0x61, + 0x74, 0x20, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x6e, 0x61, 0x6d, + 0x65, 0x2e, 0x4d, 0x75, 0x6c, 0x74, 0x69, 0x70, 0x6c, 0x65, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, + 0x74, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x62, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, + 0x65, 0x64, 0x2e, 0x20, 0x4f, 0x6e, 0x6c, 0x79, 0x20, 0x65, 0x78, 0x61, 0x63, 0x74, 0x20, 0x6d, + 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x72, + 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, 0x3b, 0x20, 0x73, 0x75, 0x62, 0x73, 0x74, 0x72, 0x69, + 0x6e, 0x67, 0x20, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x72, + 0x65, 0x67, 0x65, 0x78, 0x65, 0x73, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x6e, 0x6f, 0x74, 0x20, + 0x62, 0x65, 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x64, 0x4a, 0x0f, 0x22, 0x6d, + 0x79, 0x2d, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2d, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0xe0, 0x41, 0x01, + 0xfa, 0x42, 0x26, 0x72, 0x24, 0x32, 0x1f, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, + 0x2d, 0x39, 0x5c, 0x73, 0x5c, 0x2e, 0x5c, 0x2d, 0x5c, 0x2f, 0x5e, 0x5f, 0x26, 0x40, 0x5d, 0x7b, + 0x33, 0x2c, 0x36, 0x34, 0x7d, 0x24, 0xd0, 0x01, 0x01, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x22, + 0xc9, 0x02, 0x0a, 0x12, 0x4c, 0x69, 0x73, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x52, 0x65, + 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x2e, 0x0a, 0x06, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, + 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x11, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, + 0x2e, 0x76, 0x31, 0x2e, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x06, + 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x82, 0x02, 0x0a, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, + 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x02, 0x20, + 0x01, 0x28, 0x09, 0x42, 0xd1, 0x01, 0x92, 0x41, 0xa7, 0x01, 0x32, 0x41, 0x54, 0x68, 0x65, 0x20, + 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, + 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, + 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, + 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2e, 0x4a, 0x62, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, - 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x54, 0x68, 0x69, 0x73, 0x20, 0x6d, 0x65, 0x61, - 0x6e, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, - 0x62, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, - 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, - 0x69, 0x74, 0x68, 0x20, 0x31, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x20, 0x60, + 0x22, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x20, 0x72, 0x1e, 0x28, 0x80, 0x28, 0x32, 0x19, 0x5e, 0x24, + 0x7c, 0x5e, 0x5b, 0x41, 0x2d, 0x5a, 0x61, 0x2d, 0x7a, 0x30, 0x2d, 0x39, 0x2d, 0x5f, 0x5d, 0x2b, + 0x3d, 0x7b, 0x30, 0x2c, 0x32, 0x7d, 0x24, 0x52, 0x12, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0xeb, 0x01, 0x0a, 0x11, + 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x4b, 0x65, + 0x79, 0x12, 0x4e, 0x0a, 0x06, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, + 0x09, 0x42, 0x36, 0x92, 0x41, 0x1b, 0x4a, 0x16, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, + 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x78, 0x80, + 0x02, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x12, 0x72, 0x10, 0x32, 0x0e, 0x5e, 0x5b, 0x5e, 0x5c, 0x73, + 0x5d, 0x7b, 0x32, 0x2c, 0x32, 0x35, 0x36, 0x7d, 0x24, 0x52, 0x06, 0x6f, 0x62, 0x6a, 0x65, 0x63, + 0x74, 0x12, 0x45, 0x0a, 0x08, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, + 0x01, 0x28, 0x09, 0x42, 0x29, 0x92, 0x41, 0x0c, 0x4a, 0x08, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, + 0x72, 0x22, 0x78, 0x32, 0xe0, 0x41, 0x02, 0xfa, 0x42, 0x14, 0x72, 0x12, 0x32, 0x10, 0x5e, 0x5b, + 0x5e, 0x3a, 0x23, 0x40, 0x5c, 0x73, 0x5d, 0x7b, 0x31, 0x2c, 0x35, 0x30, 0x7d, 0x24, 0x52, 0x08, + 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x3f, 0x0a, 0x04, 0x75, 0x73, 0x65, 0x72, + 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x42, 0x2b, 0x92, 0x41, 0x10, 0x4a, 0x0b, 0x22, 0x75, 0x73, + 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x78, 0x80, 0x04, 0xe0, 0x41, 0x02, 0xfa, 0x42, + 0x12, 0x72, 0x10, 0x32, 0x0e, 0x5e, 0x5b, 0x5e, 0x5c, 0x73, 0x5d, 0x7b, 0x32, 0x2c, 0x35, 0x31, + 0x32, 0x7d, 0x24, 0x52, 0x04, 0x75, 0x73, 0x65, 0x72, 0x22, 0x9d, 0x02, 0x0a, 0x09, 0x41, 0x73, + 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x48, 0x0a, 0x09, 0x74, 0x75, 0x70, 0x6c, 0x65, + 0x5f, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, + 0x6e, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x4b, 0x65, 0x79, 0x42, 0x0b, 0xe0, 0x41, 0x02, 0xfa, 0x42, + 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x09, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, + 0x79, 0x12, 0x25, 0x0a, 0x0b, 0x65, 0x78, 0x70, 0x65, 0x63, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x0b, 0x65, 0x78, 0x70, + 0x65, 0x63, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x52, 0x0a, 0x11, 0x63, 0x6f, 0x6e, 0x74, + 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x18, 0x03, 0x20, + 0x03, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, + 0x2e, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x4b, 0x65, 0x79, 0x42, 0x0e, 0x92, 0x41, 0x03, 0xa0, 0x01, + 0x14, 0xfa, 0x42, 0x05, 0x92, 0x01, 0x02, 0x10, 0x14, 0x52, 0x11, 0x63, 0x6f, 0x6e, 0x74, 0x65, + 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x12, 0x4b, 0x0a, 0x07, + 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x17, 0x2e, + 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, + 0x53, 0x74, 0x72, 0x75, 0x63, 0x74, 0x42, 0x18, 0x92, 0x41, 0x15, 0x4a, 0x13, 0x7b, 0x22, 0x76, + 0x69, 0x65, 0x77, 0x5f, 0x63, 0x6f, 0x75, 0x6e, 0x74, 0x22, 0x3a, 0x20, 0x31, 0x30, 0x30, 0x7d, + 0x52, 0x07, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x22, 0x48, 0x0a, 0x0a, 0x41, 0x73, 0x73, + 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x3a, 0x0a, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, + 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x15, 0x2e, 0x6f, 0x70, + 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, + 0x6f, 0x6e, 0x42, 0x03, 0xe0, 0x41, 0x02, 0x52, 0x0a, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x32, 0xe7, 0xeb, 0x01, 0x0a, 0x0e, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, + 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x12, 0xd0, 0x1d, 0x0a, 0x04, 0x52, 0x65, 0x61, 0x64, + 0x12, 0x17, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, + 0x61, 0x64, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x18, 0x2e, 0x6f, 0x70, 0x65, 0x6e, + 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x52, 0x65, 0x73, 0x70, 0x6f, + 0x6e, 0x73, 0x65, 0x22, 0x94, 0x1d, 0x92, 0x41, 0xee, 0x1c, 0x0a, 0x13, 0x52, 0x65, 0x6c, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x12, + 0x57, 0x47, 0x65, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x66, 0x72, 0x6f, 0x6d, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, + 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x20, 0x61, 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x2c, + 0x20, 0x77, 0x69, 0x74, 0x68, 0x6f, 0x75, 0x74, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, + 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x72, 0x65, 0x77, 0x72, 0x69, + 0x74, 0x65, 0x20, 0x72, 0x75, 0x6c, 0x65, 0x73, 0x1a, 0xf7, 0x1b, 0x54, 0x68, 0x65, 0x20, 0x52, + 0x65, 0x61, 0x64, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, + 0x75, 0x72, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x66, + 0x6f, 0x72, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x73, 0x74, 0x6f, + 0x72, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x20, 0x61, 0x20, + 0x71, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x69, 0x6c, 0x74, 0x65, 0x72, 0x20, 0x73, 0x70, 0x65, + 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, + 0x64, 0x79, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, + 0x74, 0x2e, 0x20, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x64, 0x6f, 0x65, 0x73, + 0x6e, 0x27, 0x74, 0x20, 0x67, 0x75, 0x61, 0x72, 0x61, 0x6e, 0x74, 0x65, 0x65, 0x20, 0x6f, 0x72, + 0x64, 0x65, 0x72, 0x20, 0x62, 0x79, 0x20, 0x61, 0x6e, 0x79, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, + 0x2e, 0x20, 0x0a, 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, + 0x6e, 0x74, 0x20, 0x66, 0x72, 0x6f, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x2f, 0x73, 0x74, + 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, + 0x65, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x60, 0x20, 0x41, 0x50, 0x49, 0x20, 0x69, 0x6e, 0x20, 0x74, + 0x68, 0x61, 0x74, 0x20, 0x69, 0x74, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x72, 0x65, 0x74, 0x75, + 0x72, 0x6e, 0x73, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, + 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, 0x72, 0x65, + 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, + 0x79, 0x73, 0x74, 0x65, 0x6d, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x73, 0x61, 0x74, 0x69, 0x73, 0x66, + 0x79, 0x20, 0x74, 0x68, 0x65, 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x2e, 0x20, 0x0a, 0x49, 0x6e, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x3a, 0x0a, 0x31, 0x2e, 0x20, 0x60, 0x74, + 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x60, 0x20, 0x69, 0x73, 0x20, 0x6f, 0x70, 0x74, + 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x73, 0x70, + 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x69, 0x74, 0x20, 0x77, 0x69, 0x6c, 0x6c, + 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, + 0x65, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, + 0x0a, 0x32, 0x2e, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x6f, + 0x62, 0x6a, 0x65, 0x63, 0x74, 0x60, 0x20, 0x69, 0x73, 0x20, 0x6d, 0x61, 0x6e, 0x64, 0x61, 0x74, + 0x6f, 0x72, 0x79, 0x20, 0x69, 0x66, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, + 0x79, 0x60, 0x20, 0x69, 0x73, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2e, + 0x20, 0x49, 0x74, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x62, 0x65, 0x20, 0x61, 0x20, 0x66, 0x75, 0x6c, + 0x6c, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x28, 0x65, 0x2e, 0x67, 0x2e, 0x2c, 0x20, + 0x60, 0x74, 0x79, 0x70, 0x65, 0x3a, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x5f, 0x69, 0x64, 0x60, + 0x29, 0x20, 0x6f, 0x72, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x28, + 0x65, 0x2e, 0x67, 0x2e, 0x2c, 0x20, 0x60, 0x74, 0x79, 0x70, 0x65, 0x3a, 0x60, 0x29, 0x2e, 0x0a, + 0x33, 0x2e, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x75, 0x73, + 0x65, 0x72, 0x60, 0x20, 0x69, 0x73, 0x20, 0x6d, 0x61, 0x6e, 0x64, 0x61, 0x74, 0x6f, 0x72, 0x79, + 0x20, 0x69, 0x66, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x20, 0x69, 0x73, + 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x63, 0x61, 0x73, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, + 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x60, 0x20, 0x69, 0x73, + 0x20, 0x61, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x2e, 0x20, 0x49, 0x66, + 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x75, 0x73, 0x65, 0x72, 0x20, + 0x69, 0x73, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x69, 0x74, + 0x20, 0x6e, 0x65, 0x65, 0x64, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65, 0x20, 0x61, 0x20, 0x66, + 0x75, 0x6c, 0x6c, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x28, 0x65, 0x2e, 0x67, 0x2e, + 0x2c, 0x20, 0x60, 0x74, 0x79, 0x70, 0x65, 0x3a, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x69, 0x64, 0x60, + 0x29, 0x2e, 0x0a, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x73, 0x0a, 0x23, + 0x23, 0x23, 0x20, 0x51, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, + 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x61, 0x20, 0x74, 0x79, + 0x70, 0x65, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x0a, 0x54, 0x6f, + 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x6f, + 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x60, 0x75, 0x73, 0x65, + 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, + 0x65, 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, + 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, + 0x74, 0x60, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, + 0x6f, 0x6e, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x61, 0x64, 0x20, 0x41, 0x50, + 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x6f, 0x66, 0x0a, 0x60, + 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, + 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, + 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, + 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, + 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, + 0x60, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, + 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x61, 0x6e, 0x64, + 0x20, 0x61, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, + 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x2c, 0x20, 0x73, 0x6f, 0x6d, 0x65, 0x74, 0x68, 0x69, 0x6e, 0x67, + 0x20, 0x6c, 0x69, 0x6b, 0x65, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, + 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6b, 0x65, 0x79, 0x22, 0x3a, + 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, + 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, - 0x64, 0x67, 0x65, 0x74, 0x60, 0x2e, 0x20, 0x4e, 0x6f, 0x74, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, - 0x20, 0x74, 0x68, 0x69, 0x73, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x75, 0x6e, 0x6c, 0x69, 0x6b, - 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x4c, 0x69, 0x73, 0x74, 0x20, 0x4f, 0x62, 0x6a, 0x65, 0x63, - 0x74, 0x73, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x64, 0x6f, 0x65, 0x73, 0x20, 0x6e, 0x6f, 0x74, - 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x74, 0x75, - 0x70, 0x6c, 0x65, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, - 0x65, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, - 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, - 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x74, 0x75, 0x70, - 0x6c, 0x65, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x2e, 0x0a, 0x23, 0x23, - 0x23, 0x20, 0x51, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, - 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, - 0x68, 0x69, 0x70, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, 0x6c, 0x61, - 0x72, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x6f, - 0x62, 0x6a, 0x65, 0x63, 0x74, 0x0a, 0x54, 0x6f, 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, - 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x74, 0x68, 0x61, - 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, + 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x22, + 0x3a, 0x20, 0x22, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x31, 0x30, 0x2d, 0x30, 0x36, 0x54, 0x31, 0x35, + 0x3a, 0x33, 0x32, 0x3a, 0x31, 0x31, 0x2e, 0x31, 0x32, 0x38, 0x5a, 0x22, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x69, + 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x3a, 0x20, + 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, + 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, + 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, + 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, + 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, + 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, + 0x3d, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x54, 0x68, 0x69, 0x73, 0x20, 0x6d, 0x65, + 0x61, 0x6e, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, + 0x6f, 0x62, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, + 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, + 0x77, 0x69, 0x74, 0x68, 0x20, 0x31, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x20, + 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, + 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x2e, 0x20, 0x4e, 0x6f, 0x74, 0x65, 0x20, 0x74, 0x68, 0x61, + 0x74, 0x20, 0x74, 0x68, 0x69, 0x73, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x75, 0x6e, 0x6c, 0x69, + 0x6b, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x4c, 0x69, 0x73, 0x74, 0x20, 0x4f, 0x62, 0x6a, 0x65, + 0x63, 0x74, 0x73, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x64, 0x6f, 0x65, 0x73, 0x20, 0x6e, 0x6f, + 0x74, 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x74, + 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, + 0x72, 0x65, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, + 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, + 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x74, 0x75, + 0x70, 0x6c, 0x65, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x2e, 0x0a, 0x23, + 0x23, 0x23, 0x20, 0x51, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, + 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x73, 0x68, 0x69, 0x70, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, + 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, 0x6c, + 0x61, 0x72, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x61, 0x6e, 0x64, 0x20, + 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x0a, 0x54, 0x6f, 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x20, + 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x74, 0x68, + 0x61, 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, + 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, 0x69, + 0x74, 0x68, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, + 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, + 0x72, 0x65, 0x61, 0x64, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x62, 0x6f, + 0x64, 0x79, 0x20, 0x6f, 0x66, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, + 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, + 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, + 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, + 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, + 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, + 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x54, 0x68, + 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, + 0x6e, 0x20, 0x73, 0x6f, 0x6d, 0x65, 0x74, 0x68, 0x69, 0x6e, 0x67, 0x20, 0x6c, 0x69, 0x6b, 0x65, + 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, + 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, + 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, + 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, + 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, + 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x22, 0x74, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x22, 0x3a, 0x20, 0x22, 0x32, + 0x30, 0x32, 0x31, 0x2d, 0x31, 0x30, 0x2d, 0x30, 0x36, 0x54, 0x31, 0x35, 0x3a, 0x33, 0x32, 0x3a, + 0x31, 0x31, 0x2e, 0x31, 0x32, 0x38, 0x5a, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, + 0x20, 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x65, 0x79, 0x4a, + 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, + 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, + 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, + 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, + 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, + 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, 0x0a, 0x7d, + 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x54, 0x68, 0x69, 0x73, 0x20, 0x6d, 0x65, 0x61, 0x6e, 0x73, 0x20, + 0x74, 0x68, 0x61, 0x74, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, + 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, + 0x31, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x28, 0x60, 0x75, 0x73, 0x65, + 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x60, 0x29, 0x2e, 0x20, 0x20, 0x4e, 0x6f, 0x74, 0x65, 0x20, 0x74, + 0x68, 0x61, 0x74, 0x2c, 0x20, 0x65, 0x76, 0x65, 0x6e, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x73, 0x61, 0x69, 0x64, 0x20, 0x74, 0x68, 0x61, 0x74, + 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x73, 0x60, 0x20, 0x61, + 0x72, 0x65, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, + 0x60, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, + 0x6e, 0x6f, 0x74, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, + 0x72, 0x73, 0x20, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, + 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x60, 0x20, 0x62, 0x65, 0x63, 0x61, 0x75, 0x73, 0x65, 0x20, 0x69, + 0x74, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x74, + 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x64, 0x6f, 0x65, 0x73, 0x20, 0x6e, + 0x6f, 0x74, 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x6d, + 0x2e, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x51, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, + 0x61, 0x6c, 0x6c, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x61, + 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x73, + 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, 0x6c, 0x61, + 0x72, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x0a, 0x54, 0x6f, 0x20, 0x71, 0x75, + 0x65, 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x75, 0x73, 0x65, 0x72, + 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, 0x79, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x61, 0x64, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x6f, 0x66, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, - 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, - 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, - 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, - 0x22, 0x0a, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x54, 0x68, 0x65, - 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, - 0x20, 0x73, 0x6f, 0x6d, 0x65, 0x74, 0x68, 0x69, 0x6e, 0x67, 0x20, 0x6c, 0x69, 0x6b, 0x65, 0x20, - 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, - 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, - 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, - 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, - 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x22, 0x74, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x22, 0x3a, 0x20, 0x22, 0x32, 0x30, - 0x32, 0x31, 0x2d, 0x31, 0x30, 0x2d, 0x30, 0x36, 0x54, 0x31, 0x35, 0x3a, 0x33, 0x32, 0x3a, 0x31, - 0x31, 0x2e, 0x31, 0x32, 0x38, 0x5a, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, - 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x65, 0x79, 0x4a, 0x77, - 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, - 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, - 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, - 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, - 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, - 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, 0x0a, 0x7d, 0x0a, - 0x60, 0x60, 0x60, 0x0a, 0x54, 0x68, 0x69, 0x73, 0x20, 0x6d, 0x65, 0x61, 0x6e, 0x73, 0x20, 0x74, - 0x68, 0x61, 0x74, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, - 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, 0x31, - 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x28, 0x60, 0x75, 0x73, 0x65, 0x72, - 0x3a, 0x62, 0x6f, 0x62, 0x60, 0x29, 0x2e, 0x20, 0x20, 0x4e, 0x6f, 0x74, 0x65, 0x20, 0x74, 0x68, - 0x61, 0x74, 0x2c, 0x20, 0x65, 0x76, 0x65, 0x6e, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x73, 0x61, 0x69, 0x64, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x61, 0x6c, 0x6c, 0x20, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x73, 0x60, 0x20, 0x61, 0x72, - 0x65, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x60, - 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x6e, - 0x6f, 0x74, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, - 0x73, 0x20, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, - 0x61, 0x6e, 0x6e, 0x65, 0x60, 0x20, 0x62, 0x65, 0x63, 0x61, 0x75, 0x73, 0x65, 0x20, 0x69, 0x74, - 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x74, 0x75, - 0x70, 0x6c, 0x65, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x64, 0x6f, 0x65, 0x73, 0x20, 0x6e, 0x6f, - 0x74, 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x6d, 0x2e, - 0x0a, 0x23, 0x23, 0x23, 0x20, 0x51, 0x75, 0x65, 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, - 0x6c, 0x6c, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x61, 0x6c, - 0x6c, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x73, 0x20, - 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, 0x6c, 0x61, 0x72, - 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x0a, 0x54, 0x6f, 0x20, 0x71, 0x75, 0x65, - 0x72, 0x79, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, - 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, 0x79, 0x20, 0x72, - 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, 0x69, 0x74, 0x68, - 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, - 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x72, 0x65, - 0x61, 0x64, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x62, 0x6f, 0x64, 0x79, - 0x20, 0x6f, 0x66, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, - 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, - 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, - 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, - 0x60, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, - 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x73, 0x6f, 0x6d, 0x65, 0x74, 0x68, 0x69, 0x6e, 0x67, 0x20, - 0x6c, 0x69, 0x6b, 0x65, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, - 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6b, 0x65, 0x79, 0x22, 0x3a, - 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, - 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, - 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, - 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, - 0x22, 0x3a, 0x20, 0x22, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x31, 0x30, 0x2d, 0x30, 0x35, 0x54, 0x31, - 0x33, 0x3a, 0x34, 0x32, 0x3a, 0x31, 0x32, 0x2e, 0x33, 0x35, 0x36, 0x5a, 0x22, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, - 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, - 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, - 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, - 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, - 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x69, 0x6d, - 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x22, 0x3a, 0x20, 0x22, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x31, - 0x30, 0x2d, 0x30, 0x36, 0x54, 0x31, 0x35, 0x3a, 0x33, 0x32, 0x3a, 0x31, 0x31, 0x2e, 0x31, 0x32, - 0x38, 0x5a, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x20, - 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, - 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, - 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, - 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, - 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, - 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, - 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, - 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, - 0x54, 0x68, 0x69, 0x73, 0x20, 0x6d, 0x65, 0x61, 0x6e, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, - 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, 0x31, 0x20, 0x60, 0x72, 0x65, - 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x28, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, - 0x60, 0x29, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x31, 0x20, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, - 0x60, 0x20, 0x28, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x60, 0x29, 0x2e, - 0x0a, 0x2a, 0x04, 0x52, 0x65, 0x61, 0x64, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x1c, 0x3a, 0x01, 0x2a, - 0x22, 0x17, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, - 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x72, 0x65, 0x61, 0x64, 0x12, 0xc5, 0x0d, 0x0a, 0x05, 0x57, 0x72, - 0x69, 0x74, 0x65, 0x12, 0x18, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, - 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x19, 0x2e, - 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, - 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x86, 0x0d, 0x92, 0x41, 0xdf, 0x0c, 0x0a, - 0x13, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x54, 0x75, - 0x70, 0x6c, 0x65, 0x73, 0x12, 0x23, 0x41, 0x64, 0x64, 0x20, 0x6f, 0x72, 0x20, 0x64, 0x65, 0x6c, - 0x65, 0x74, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x66, 0x72, 0x6f, 0x6d, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, 0x9b, 0x0c, 0x54, 0x68, 0x65, 0x20, - 0x57, 0x72, 0x69, 0x74, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x74, - 0x72, 0x61, 0x6e, 0x73, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x6c, 0x79, 0x20, 0x75, - 0x70, 0x64, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, - 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x73, - 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x20, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x61, 0x6e, 0x64, - 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, - 0x73, 0x20, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x20, - 0x74, 0x6f, 0x20, 0x64, 0x65, 0x74, 0x65, 0x72, 0x6d, 0x69, 0x6e, 0x65, 0x20, 0x77, 0x68, 0x65, - 0x74, 0x68, 0x65, 0x72, 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, - 0x68, 0x69, 0x70, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x73, 0x20, 0x62, 0x65, 0x74, 0x77, 0x65, - 0x65, 0x6e, 0x20, 0x61, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x61, 0x6e, 0x64, - 0x20, 0x61, 0x6e, 0x20, 0x75, 0x73, 0x65, 0x72, 0x2e, 0x0a, 0x49, 0x6e, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x62, 0x6f, 0x64, 0x79, 0x2c, 0x20, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, 0x73, 0x60, 0x20, - 0x61, 0x64, 0x64, 0x73, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, - 0x61, 0x6e, 0x64, 0x20, 0x60, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x73, 0x60, 0x20, 0x72, 0x65, - 0x6d, 0x6f, 0x76, 0x65, 0x73, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x74, - 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x20, 0x57, 0x68, 0x65, 0x6e, 0x20, 0x64, 0x65, 0x6c, 0x65, - 0x74, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x61, 0x6e, - 0x79, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x20, 0x73, 0x70, - 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x69, 0x74, 0x20, - 0x69, 0x73, 0x20, 0x69, 0x67, 0x6e, 0x6f, 0x72, 0x65, 0x64, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, - 0x41, 0x50, 0x49, 0x20, 0x69, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x69, 0x64, 0x65, 0x6d, 0x70, - 0x6f, 0x74, 0x65, 0x6e, 0x74, 0x3a, 0x20, 0x69, 0x66, 0x2c, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x72, - 0x20, 0x6f, 0x6e, 0x2c, 0x20, 0x79, 0x6f, 0x75, 0x20, 0x74, 0x72, 0x79, 0x20, 0x74, 0x6f, 0x20, - 0x61, 0x64, 0x64, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x61, 0x6d, 0x65, 0x20, 0x74, 0x75, 0x70, - 0x6c, 0x65, 0x20, 0x6b, 0x65, 0x79, 0x20, 0x28, 0x65, 0x76, 0x65, 0x6e, 0x20, 0x69, 0x66, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x20, - 0x69, 0x73, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x74, 0x29, 0x2c, 0x20, 0x6f, - 0x72, 0x20, 0x69, 0x66, 0x20, 0x79, 0x6f, 0x75, 0x20, 0x74, 0x72, 0x79, 0x20, 0x74, 0x6f, 0x20, - 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x20, 0x61, 0x20, 0x6e, 0x6f, 0x6e, 0x2d, 0x65, 0x78, 0x69, - 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x69, 0x74, 0x20, - 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x72, 0x6f, 0x77, 0x20, 0x61, 0x6e, 0x20, 0x65, 0x72, - 0x72, 0x6f, 0x72, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, - 0x6c, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x20, 0x79, 0x6f, 0x75, 0x20, - 0x74, 0x6f, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, - 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, - 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, 0x69, - 0x65, 0x77, 0x65, 0x72, 0x40, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, - 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, - 0x60, 0x2c, 0x20, 0x62, 0x65, 0x63, 0x61, 0x75, 0x73, 0x65, 0x20, 0x74, 0x68, 0x65, 0x79, 0x20, - 0x61, 0x72, 0x65, 0x20, 0x69, 0x6d, 0x70, 0x6c, 0x69, 0x63, 0x69, 0x74, 0x2e, 0x0a, 0x41, 0x6e, - 0x20, 0x60, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, - 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x60, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x62, 0x65, - 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x69, 0x74, 0x20, 0x69, 0x73, - 0x2c, 0x20, 0x69, 0x74, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, - 0x64, 0x20, 0x74, 0x6f, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x20, 0x74, 0x68, 0x61, 0x74, - 0x20, 0x65, 0x61, 0x63, 0x68, 0x20, 0x77, 0x72, 0x69, 0x74, 0x74, 0x65, 0x6e, 0x20, 0x74, 0x75, - 0x70, 0x6c, 0x65, 0x20, 0x28, 0x6e, 0x6f, 0x74, 0x20, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x64, - 0x29, 0x20, 0x69, 0x73, 0x20, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, - 0x65, 0x64, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x69, 0x74, 0x20, 0x69, 0x73, 0x20, 0x6e, 0x6f, 0x74, - 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x6c, 0x61, 0x74, 0x65, 0x73, 0x74, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x49, 0x44, 0x20, 0x77, 0x69, - 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x2e, 0x0a, 0x23, 0x23, 0x20, 0x45, - 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x41, 0x64, 0x64, 0x69, 0x6e, - 0x67, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x73, 0x0a, - 0x54, 0x6f, 0x20, 0x61, 0x64, 0x64, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, - 0x65, 0x60, 0x20, 0x61, 0x73, 0x20, 0x61, 0x20, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x60, - 0x20, 0x66, 0x6f, 0x72, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, - 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x2c, 0x20, 0x63, 0x61, 0x6c, - 0x6c, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x0a, - 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x77, 0x72, 0x69, - 0x74, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, - 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, + 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, + 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, + 0x60, 0x60, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, + 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x73, 0x6f, 0x6d, 0x65, 0x74, 0x68, 0x69, 0x6e, 0x67, + 0x20, 0x6c, 0x69, 0x6b, 0x65, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, + 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6b, 0x65, 0x79, 0x22, + 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, - 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, - 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, - 0x6c, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, 0x56, 0x56, - 0x31, 0x37, 0x50, 0x45, 0x43, 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, 0x59, 0x35, - 0x4e, 0x43, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x52, 0x65, - 0x6d, 0x6f, 0x76, 0x69, 0x6e, 0x67, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, - 0x68, 0x69, 0x70, 0x73, 0x0a, 0x54, 0x6f, 0x20, 0x72, 0x65, 0x6d, 0x6f, 0x76, 0x65, 0x20, 0x60, - 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x60, 0x20, 0x61, 0x73, 0x20, 0x61, 0x20, 0x60, - 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x60, 0x64, 0x6f, 0x63, - 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, - 0x74, 0x60, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, 0x41, - 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, - 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, - 0x0a, 0x20, 0x20, 0x22, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x22, - 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, - 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, - 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, - 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, - 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x7d, - 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x05, 0x57, 0x72, 0x69, 0x74, 0x65, 0x82, 0xd3, - 0xe4, 0x93, 0x02, 0x1d, 0x3a, 0x01, 0x2a, 0x22, 0x18, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, - 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x77, 0x72, 0x69, 0x74, - 0x65, 0x12, 0xda, 0x2a, 0x0a, 0x05, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x12, 0x18, 0x2e, 0x6f, 0x70, - 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x52, 0x65, - 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x19, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x76, 0x31, 0x2e, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, - 0x22, 0x9b, 0x2a, 0x92, 0x41, 0xf4, 0x29, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x36, 0x43, - 0x68, 0x65, 0x63, 0x6b, 0x20, 0x77, 0x68, 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x61, 0x20, 0x75, - 0x73, 0x65, 0x72, 0x20, 0x69, 0x73, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x65, - 0x64, 0x20, 0x74, 0x6f, 0x20, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x20, 0x61, 0x6e, 0x20, 0x6f, - 0x62, 0x6a, 0x65, 0x63, 0x74, 0x1a, 0x9c, 0x29, 0x54, 0x68, 0x65, 0x20, 0x43, 0x68, 0x65, 0x63, - 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x77, 0x68, - 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x61, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x75, 0x73, - 0x65, 0x72, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x61, 0x20, 0x67, 0x69, 0x76, - 0x65, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x69, 0x6e, 0x20, 0x61, 0x20, 0x67, - 0x69, 0x76, 0x65, 0x6e, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, - 0x60, 0x75, 0x73, 0x65, 0x72, 0x60, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x6f, 0x66, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x20, 0x63, 0x61, 0x6e, 0x20, - 0x62, 0x65, 0x20, 0x61, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x63, 0x20, 0x74, 0x61, - 0x72, 0x67, 0x65, 0x74, 0x2c, 0x20, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, 0x75, - 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x60, 0x2c, 0x20, 0x6f, 0x72, 0x20, 0x61, 0x20, - 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x28, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, - 0x75, 0x73, 0x65, 0x72, 0x73, 0x29, 0x20, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, - 0x67, 0x72, 0x6f, 0x75, 0x70, 0x3a, 0x6d, 0x61, 0x72, 0x6b, 0x65, 0x74, 0x69, 0x6e, 0x67, 0x23, - 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x60, 0x20, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x74, 0x79, 0x70, - 0x65, 0x2d, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x20, 0x70, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x20, 0x61, - 0x63, 0x63, 0x65, 0x73, 0x73, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x2a, 0x60, 0x2e, 0x0a, - 0x54, 0x6f, 0x20, 0x61, 0x72, 0x72, 0x69, 0x76, 0x65, 0x20, 0x61, 0x74, 0x20, 0x61, 0x20, 0x72, - 0x65, 0x73, 0x75, 0x6c, 0x74, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x75, - 0x73, 0x65, 0x73, 0x3a, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x2c, 0x20, 0x65, 0x78, 0x70, - 0x6c, 0x69, 0x63, 0x69, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x77, 0x72, 0x69, - 0x74, 0x74, 0x65, 0x6e, 0x20, 0x74, 0x68, 0x72, 0x6f, 0x75, 0x67, 0x68, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x57, 0x72, 0x69, 0x74, 0x65, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x63, 0x6f, 0x6e, 0x74, - 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x70, 0x72, - 0x65, 0x73, 0x65, 0x6e, 0x74, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, - 0x75, 0x65, 0x73, 0x74, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x69, 0x6d, 0x70, 0x6c, 0x69, 0x63, - 0x69, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x65, - 0x78, 0x69, 0x73, 0x74, 0x20, 0x62, 0x79, 0x20, 0x76, 0x69, 0x72, 0x74, 0x75, 0x65, 0x20, 0x6f, - 0x66, 0x20, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x73, 0x65, 0x74, 0x20, 0x74, - 0x68, 0x65, 0x6f, 0x72, 0x79, 0x20, 0x28, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, - 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, - 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x40, 0x64, 0x6f, 0x63, 0x75, - 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, - 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x60, 0x3b, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, - 0x74, 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, - 0x72, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, - 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, - 0x67, 0x65, 0x74, 0x60, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x74, - 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, 0x72, - 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, + 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x69, 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, + 0x70, 0x22, 0x3a, 0x20, 0x22, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x31, 0x30, 0x2d, 0x30, 0x35, 0x54, + 0x31, 0x33, 0x3a, 0x34, 0x32, 0x3a, 0x31, 0x32, 0x2e, 0x33, 0x35, 0x36, 0x5a, 0x22, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, + 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, + 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, + 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, + 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, + 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x69, + 0x6d, 0x65, 0x73, 0x74, 0x61, 0x6d, 0x70, 0x22, 0x3a, 0x20, 0x22, 0x32, 0x30, 0x32, 0x31, 0x2d, + 0x31, 0x30, 0x2d, 0x30, 0x36, 0x54, 0x31, 0x35, 0x3a, 0x33, 0x32, 0x3a, 0x31, 0x31, 0x2e, 0x31, + 0x32, 0x38, 0x5a, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, + 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, + 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, + 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, + 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, + 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, + 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, + 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, + 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, 0x3d, 0x3d, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, + 0x0a, 0x54, 0x68, 0x69, 0x73, 0x20, 0x6d, 0x65, 0x61, 0x6e, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, - 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x29, 0x2e, 0x0a, 0x41, 0x20, 0x60, 0x63, 0x6f, 0x6e, - 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x60, 0x20, - 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, - 0x62, 0x65, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, - 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, 0x20, 0x6f, 0x62, 0x6a, - 0x65, 0x63, 0x74, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x73, 0x20, 0x6f, 0x6e, 0x65, - 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, - 0x79, 0x73, 0x60, 0x2c, 0x20, 0x77, 0x68, 0x69, 0x63, 0x68, 0x20, 0x69, 0x73, 0x20, 0x61, 0x6e, - 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, - 0x6b, 0x65, 0x79, 0x73, 0x2e, 0x20, 0x45, 0x61, 0x63, 0x68, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, - 0x65, 0x73, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x68, - 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x73, 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, 0x65, - 0x64, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x2e, 0x0a, 0x59, - 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x70, 0x72, 0x6f, 0x76, - 0x69, 0x64, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x60, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x60, 0x20, - 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x2e, 0x20, 0x54, 0x68, 0x69, - 0x73, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x74, - 0x6f, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x69, 0x6e, 0x70, 0x75, 0x74, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, - 0x65, 0x79, 0x60, 0x20, 0x69, 0x73, 0x20, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x20, 0x66, 0x6f, 0x72, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, - 0x66, 0x69, 0x65, 0x64, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x73, 0x70, 0x65, - 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x73, 0x73, 0x65, - 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6d, 0x61, - 0x64, 0x65, 0x20, 0x61, 0x67, 0x61, 0x69, 0x6e, 0x73, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6c, - 0x61, 0x74, 0x65, 0x73, 0x74, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x49, 0x44, 0x2e, 0x20, 0x49, 0x74, - 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, 0x67, 0x6c, 0x79, 0x20, 0x72, 0x65, 0x63, - 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x73, 0x70, 0x65, 0x63, - 0x69, 0x66, 0x79, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x69, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x62, - 0x65, 0x74, 0x74, 0x65, 0x72, 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x6e, 0x63, - 0x65, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, - 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, 0x65, - 0x78, 0x74, 0x60, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, - 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, - 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, - 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x2e, 0x20, 0x49, - 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, 0x67, 0x6c, 0x79, 0x20, 0x72, 0x65, - 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x70, 0x72, 0x6f, - 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x66, 0x6f, 0x72, - 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, 0x6e, 0x70, 0x75, 0x74, 0x20, 0x70, - 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2c, - 0x20, 0x74, 0x6f, 0x20, 0x65, 0x6e, 0x73, 0x75, 0x72, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x62, 0x65, 0x20, 0x65, 0x76, - 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x64, 0x20, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x63, 0x74, 0x6c, - 0x79, 0x2e, 0x0a, 0x42, 0x79, 0x20, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x2c, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x63, 0x61, 0x63, - 0x68, 0x65, 0x73, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, - 0x61, 0x20, 0x73, 0x68, 0x6f, 0x72, 0x74, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20, 0x74, 0x6f, 0x20, - 0x6f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, 0x6d, - 0x61, 0x6e, 0x63, 0x65, 0x2e, 0x20, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x73, 0x70, - 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x6f, 0x66, - 0x20, 0x60, 0x48, 0x49, 0x47, 0x48, 0x45, 0x52, 0x5f, 0x43, 0x4f, 0x4e, 0x53, 0x49, 0x53, 0x54, - 0x45, 0x4e, 0x43, 0x59, 0x60, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, 0x70, - 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, - 0x6e, 0x63, 0x79, 0x60, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x20, 0x69, - 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x74, 0x6f, 0x20, 0x69, 0x6e, - 0x66, 0x6f, 0x72, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x20, - 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x69, - 0x73, 0x69, 0x73, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x20, 0x69, 0x73, 0x20, 0x70, 0x72, 0x65, 0x66, - 0x65, 0x72, 0x72, 0x65, 0x64, 0x20, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, 0x70, - 0x65, 0x6e, 0x73, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, 0x65, - 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x2e, 0x20, 0x43, 0x6f, 0x6e, 0x73, 0x69, - 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, 0x20, - 0x62, 0x65, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, - 0x79, 0x20, 0x69, 0x66, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, - 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, 0x6e, - 0x63, 0x79, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, - 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x77, 0x68, 0x65, - 0x74, 0x68, 0x65, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x73, 0x20, 0x69, 0x6e, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x60, 0x61, 0x6c, 0x6c, 0x6f, 0x77, - 0x65, 0x64, 0x60, 0x2e, 0x0a, 0x0a, 0x53, 0x6f, 0x6d, 0x65, 0x20, 0x65, 0x78, 0x63, 0x65, 0x70, - 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x2c, 0x20, 0x62, 0x75, 0x74, - 0x20, 0x69, 0x6e, 0x20, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x6c, 0x2c, 0x20, 0x69, 0x66, 0x20, - 0x61, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x72, 0x65, 0x73, 0x70, - 0x6f, 0x6e, 0x64, 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, 0x7b, 0x61, 0x6c, 0x6c, 0x6f, - 0x77, 0x65, 0x64, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x7d, 0x60, 0x2c, 0x20, 0x74, 0x68, 0x65, - 0x6e, 0x20, 0x79, 0x6f, 0x75, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x65, 0x78, 0x70, 0x65, 0x63, 0x74, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x71, 0x75, 0x69, 0x76, 0x61, 0x6c, 0x65, 0x6e, 0x74, 0x20, - 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x71, 0x75, 0x65, 0x72, - 0x79, 0x20, 0x74, 0x6f, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x76, 0x69, 0x63, 0x65, - 0x76, 0x65, 0x72, 0x73, 0x61, 0x2e, 0x20, 0x0a, 0x46, 0x6f, 0x72, 0x20, 0x65, 0x78, 0x61, 0x6d, - 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x69, 0x66, 0x20, 0x60, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x28, 0x75, - 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x2c, 0x20, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, - 0x2c, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, - 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x29, 0x60, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x64, - 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, 0x7b, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x65, 0x64, - 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x7d, 0x60, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x6e, 0x20, 0x60, - 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x28, 0x75, 0x73, 0x65, 0x72, - 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x2c, 0x20, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x2c, 0x20, 0x64, - 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x29, 0x60, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x69, 0x6e, - 0x63, 0x6c, 0x75, 0x64, 0x65, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, - 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x20, 0x69, 0x6e, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x0a, 0x23, 0x23, - 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x73, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x51, 0x75, - 0x65, 0x72, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x63, 0x6f, 0x6e, 0x74, - 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x0a, 0x49, 0x6e, - 0x20, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x20, 0x74, 0x6f, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, - 0x69, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, - 0x6e, 0x65, 0x60, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x60, 0x75, 0x73, 0x65, - 0x72, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, - 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, - 0x69, 0x74, 0x68, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, - 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, - 0x60, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, - 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, - 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, - 0x0a, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, - 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x22, 0x2c, 0x0a, - 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x74, 0x69, 0x6d, - 0x65, 0x5f, 0x73, 0x6c, 0x6f, 0x74, 0x3a, 0x6f, 0x66, 0x66, 0x69, 0x63, 0x65, 0x5f, 0x68, 0x6f, - 0x75, 0x72, 0x73, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x74, 0x68, 0x65, 0x20, 0x43, - 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x62, 0x65, 0x20, - 0x75, 0x73, 0x65, 0x64, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, - 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x20, - 0x62, 0x6f, 0x64, 0x79, 0x3a, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, - 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, - 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, - 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, - 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, + 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, 0x31, 0x20, 0x60, 0x72, + 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x28, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, + 0x62, 0x60, 0x29, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x31, 0x20, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, + 0x72, 0x60, 0x20, 0x28, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x60, 0x29, + 0x2e, 0x0a, 0x2a, 0x04, 0x52, 0x65, 0x61, 0x64, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x1c, 0x3a, 0x01, + 0x2a, 0x22, 0x17, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, + 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x72, 0x65, 0x61, 0x64, 0x12, 0xc5, 0x0d, 0x0a, 0x05, 0x57, + 0x72, 0x69, 0x74, 0x65, 0x12, 0x18, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, + 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x19, + 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, + 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x86, 0x0d, 0x92, 0x41, 0xdf, 0x0c, + 0x0a, 0x13, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x54, + 0x75, 0x70, 0x6c, 0x65, 0x73, 0x12, 0x23, 0x41, 0x64, 0x64, 0x20, 0x6f, 0x72, 0x20, 0x64, 0x65, + 0x6c, 0x65, 0x74, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x66, 0x72, 0x6f, 0x6d, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, 0x9b, 0x0c, 0x54, 0x68, 0x65, + 0x20, 0x57, 0x72, 0x69, 0x74, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, + 0x74, 0x72, 0x61, 0x6e, 0x73, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x6c, 0x79, 0x20, + 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, + 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, 0x20, + 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x20, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x61, 0x6e, + 0x64, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, + 0x6e, 0x73, 0x20, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, + 0x20, 0x74, 0x6f, 0x20, 0x64, 0x65, 0x74, 0x65, 0x72, 0x6d, 0x69, 0x6e, 0x65, 0x20, 0x77, 0x68, + 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x73, 0x68, 0x69, 0x70, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x73, 0x20, 0x62, 0x65, 0x74, 0x77, + 0x65, 0x65, 0x6e, 0x20, 0x61, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x61, 0x6e, + 0x64, 0x20, 0x61, 0x6e, 0x20, 0x75, 0x73, 0x65, 0x72, 0x2e, 0x0a, 0x49, 0x6e, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x2c, 0x20, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, 0x73, 0x60, + 0x20, 0x61, 0x64, 0x64, 0x73, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, + 0x20, 0x61, 0x6e, 0x64, 0x20, 0x60, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x73, 0x60, 0x20, 0x72, + 0x65, 0x6d, 0x6f, 0x76, 0x65, 0x73, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, + 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x20, 0x57, 0x68, 0x65, 0x6e, 0x20, 0x64, 0x65, 0x6c, + 0x65, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x61, + 0x6e, 0x79, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x20, 0x73, + 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x69, 0x74, + 0x20, 0x69, 0x73, 0x20, 0x69, 0x67, 0x6e, 0x6f, 0x72, 0x65, 0x64, 0x2e, 0x0a, 0x54, 0x68, 0x65, + 0x20, 0x41, 0x50, 0x49, 0x20, 0x69, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x69, 0x64, 0x65, 0x6d, + 0x70, 0x6f, 0x74, 0x65, 0x6e, 0x74, 0x3a, 0x20, 0x69, 0x66, 0x2c, 0x20, 0x6c, 0x61, 0x74, 0x65, + 0x72, 0x20, 0x6f, 0x6e, 0x2c, 0x20, 0x79, 0x6f, 0x75, 0x20, 0x74, 0x72, 0x79, 0x20, 0x74, 0x6f, + 0x20, 0x61, 0x64, 0x64, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x61, 0x6d, 0x65, 0x20, 0x74, 0x75, + 0x70, 0x6c, 0x65, 0x20, 0x6b, 0x65, 0x79, 0x20, 0x28, 0x65, 0x76, 0x65, 0x6e, 0x20, 0x69, 0x66, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x60, + 0x20, 0x69, 0x73, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x74, 0x29, 0x2c, 0x20, + 0x6f, 0x72, 0x20, 0x69, 0x66, 0x20, 0x79, 0x6f, 0x75, 0x20, 0x74, 0x72, 0x79, 0x20, 0x74, 0x6f, + 0x20, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x20, 0x61, 0x20, 0x6e, 0x6f, 0x6e, 0x2d, 0x65, 0x78, + 0x69, 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x69, 0x74, + 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x72, 0x6f, 0x77, 0x20, 0x61, 0x6e, 0x20, 0x65, + 0x72, 0x72, 0x6f, 0x72, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, + 0x6c, 0x6c, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x20, 0x79, 0x6f, 0x75, + 0x20, 0x74, 0x6f, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, + 0x20, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, + 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, + 0x69, 0x65, 0x77, 0x65, 0x72, 0x40, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, + 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, + 0x72, 0x60, 0x2c, 0x20, 0x62, 0x65, 0x63, 0x61, 0x75, 0x73, 0x65, 0x20, 0x74, 0x68, 0x65, 0x79, + 0x20, 0x61, 0x72, 0x65, 0x20, 0x69, 0x6d, 0x70, 0x6c, 0x69, 0x63, 0x69, 0x74, 0x2e, 0x0a, 0x41, + 0x6e, 0x20, 0x60, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x60, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x62, + 0x65, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x69, 0x74, 0x20, 0x69, + 0x73, 0x2c, 0x20, 0x69, 0x74, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, + 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x20, 0x74, 0x68, 0x61, + 0x74, 0x20, 0x65, 0x61, 0x63, 0x68, 0x20, 0x77, 0x72, 0x69, 0x74, 0x74, 0x65, 0x6e, 0x20, 0x74, + 0x75, 0x70, 0x6c, 0x65, 0x20, 0x28, 0x6e, 0x6f, 0x74, 0x20, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, + 0x64, 0x29, 0x20, 0x69, 0x73, 0x20, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, + 0x69, 0x65, 0x64, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x69, 0x74, 0x20, 0x69, 0x73, 0x20, 0x6e, 0x6f, + 0x74, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x6c, 0x61, 0x74, 0x65, 0x73, 0x74, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x49, 0x44, 0x20, 0x77, + 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x2e, 0x0a, 0x23, 0x23, 0x20, + 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x41, 0x64, 0x64, 0x69, + 0x6e, 0x67, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x73, + 0x0a, 0x54, 0x6f, 0x20, 0x61, 0x64, 0x64, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, + 0x6e, 0x65, 0x60, 0x20, 0x61, 0x73, 0x20, 0x61, 0x20, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, + 0x60, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, + 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x2c, 0x20, 0x63, 0x61, + 0x6c, 0x6c, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, + 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, + 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x77, 0x72, + 0x69, 0x74, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, + 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, + 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, + 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x2c, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, - 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, - 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, - 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, - 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, - 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, - 0x22, 0x74, 0x69, 0x6d, 0x65, 0x5f, 0x73, 0x6c, 0x6f, 0x74, 0x3a, 0x6f, 0x66, 0x66, 0x69, 0x63, - 0x65, 0x5f, 0x68, 0x6f, 0x75, 0x72, 0x73, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, + 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, 0x56, 0x56, 0x31, 0x37, 0x50, 0x45, 0x43, 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, 0x59, - 0x35, 0x4e, 0x43, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x51, - 0x75, 0x65, 0x72, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, - 0x0a, 0x53, 0x6f, 0x6d, 0x65, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x73, 0x20, 0x77, 0x69, 0x6c, - 0x6c, 0x20, 0x61, 0x6c, 0x77, 0x61, 0x79, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, - 0x60, 0x74, 0x72, 0x75, 0x65, 0x60, 0x2c, 0x20, 0x65, 0x76, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x74, - 0x68, 0x6f, 0x75, 0x74, 0x20, 0x61, 0x6e, 0x79, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, - 0x20, 0x46, 0x6f, 0x72, 0x20, 0x65, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x66, 0x6f, - 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, - 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, - 0x64, 0x65, 0x6c, 0x0a, 0x60, 0x60, 0x60, 0x70, 0x79, 0x74, 0x68, 0x6f, 0x6e, 0x0a, 0x6d, 0x6f, - 0x64, 0x65, 0x6c, 0x0a, 0x20, 0x20, 0x73, 0x63, 0x68, 0x65, 0x6d, 0x61, 0x20, 0x31, 0x2e, 0x31, - 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, - 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x0a, 0x20, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x73, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x65, 0x20, - 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, 0x72, 0x5d, 0x0a, 0x60, - 0x60, 0x60, 0x0a, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, - 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, - 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, + 0x35, 0x4e, 0x43, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x52, + 0x65, 0x6d, 0x6f, 0x76, 0x69, 0x6e, 0x67, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x73, 0x68, 0x69, 0x70, 0x73, 0x0a, 0x54, 0x6f, 0x20, 0x72, 0x65, 0x6d, 0x6f, 0x76, 0x65, 0x20, + 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x60, 0x20, 0x61, 0x73, 0x20, 0x61, 0x20, + 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x60, 0x64, 0x6f, + 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, + 0x65, 0x74, 0x60, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, + 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, + 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, + 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x73, + 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, + 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, + 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, + 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, + 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, + 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x05, 0x57, 0x72, 0x69, 0x74, 0x65, 0x82, + 0xd3, 0xe4, 0x93, 0x02, 0x1d, 0x3a, 0x01, 0x2a, 0x22, 0x18, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, + 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x77, 0x72, 0x69, + 0x74, 0x65, 0x12, 0xda, 0x2a, 0x0a, 0x05, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x12, 0x18, 0x2e, 0x6f, + 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x52, + 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x19, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, + 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, + 0x65, 0x22, 0x9b, 0x2a, 0x92, 0x41, 0xf4, 0x29, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x36, + 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x77, 0x68, 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x61, 0x20, + 0x75, 0x73, 0x65, 0x72, 0x20, 0x69, 0x73, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, + 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x20, 0x61, 0x6e, 0x20, + 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x1a, 0x9c, 0x29, 0x54, 0x68, 0x65, 0x20, 0x43, 0x68, 0x65, + 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x77, + 0x68, 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x61, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x75, + 0x73, 0x65, 0x72, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x61, 0x20, 0x67, 0x69, + 0x76, 0x65, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x69, 0x6e, 0x20, 0x61, 0x20, + 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x0a, 0x54, 0x68, 0x65, + 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x60, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x6f, 0x66, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x20, 0x63, 0x61, 0x6e, + 0x20, 0x62, 0x65, 0x20, 0x61, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x63, 0x20, 0x74, + 0x61, 0x72, 0x67, 0x65, 0x74, 0x2c, 0x20, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, + 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x60, 0x2c, 0x20, 0x6f, 0x72, 0x20, 0x61, + 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x28, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, + 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x29, 0x20, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, + 0x60, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x3a, 0x6d, 0x61, 0x72, 0x6b, 0x65, 0x74, 0x69, 0x6e, 0x67, + 0x23, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x60, 0x20, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x74, 0x79, + 0x70, 0x65, 0x2d, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x20, 0x70, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x20, + 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x2a, 0x60, 0x2e, + 0x0a, 0x54, 0x6f, 0x20, 0x61, 0x72, 0x72, 0x69, 0x76, 0x65, 0x20, 0x61, 0x74, 0x20, 0x61, 0x20, + 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, + 0x75, 0x73, 0x65, 0x73, 0x3a, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, + 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x2c, 0x20, 0x65, 0x78, + 0x70, 0x6c, 0x69, 0x63, 0x69, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x77, 0x72, + 0x69, 0x74, 0x74, 0x65, 0x6e, 0x20, 0x74, 0x68, 0x72, 0x6f, 0x75, 0x67, 0x68, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x57, 0x72, 0x69, 0x74, 0x65, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x63, 0x6f, 0x6e, + 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x70, + 0x72, 0x65, 0x73, 0x65, 0x6e, 0x74, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, + 0x71, 0x75, 0x65, 0x73, 0x74, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x69, 0x6d, 0x70, 0x6c, 0x69, + 0x63, 0x69, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, + 0x65, 0x78, 0x69, 0x73, 0x74, 0x20, 0x62, 0x79, 0x20, 0x76, 0x69, 0x72, 0x74, 0x75, 0x65, 0x20, + 0x6f, 0x66, 0x20, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x73, 0x65, 0x74, 0x20, + 0x74, 0x68, 0x65, 0x6f, 0x72, 0x79, 0x20, 0x28, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, + 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, + 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x40, 0x64, 0x6f, 0x63, + 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, + 0x74, 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x60, 0x3b, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, + 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, + 0x61, 0x72, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, - 0x64, 0x67, 0x65, 0x74, 0x23, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, - 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, - 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, - 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, - 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x61, 0x6c, - 0x77, 0x61, 0x79, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x60, 0x7b, 0x20, 0x22, - 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x65, 0x64, 0x22, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x20, 0x7d, - 0x60, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20, 0x62, 0x65, 0x63, 0x61, 0x75, - 0x73, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x20, 0x61, 0x72, 0x65, 0x20, - 0x73, 0x65, 0x6c, 0x66, 0x2d, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x6e, 0x67, 0x3a, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, + 0x64, 0x67, 0x65, 0x74, 0x60, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, + 0x74, 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, + 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, + 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, + 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x29, 0x2e, 0x0a, 0x41, 0x20, 0x60, 0x63, 0x6f, + 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x60, + 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, + 0x20, 0x62, 0x65, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, + 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, 0x20, 0x6f, 0x62, + 0x6a, 0x65, 0x63, 0x74, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x73, 0x20, 0x6f, 0x6e, + 0x65, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, + 0x65, 0x79, 0x73, 0x60, 0x2c, 0x20, 0x77, 0x68, 0x69, 0x63, 0x68, 0x20, 0x69, 0x73, 0x20, 0x61, + 0x6e, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, + 0x20, 0x6b, 0x65, 0x79, 0x73, 0x2e, 0x20, 0x45, 0x61, 0x63, 0x68, 0x20, 0x6f, 0x66, 0x20, 0x74, + 0x68, 0x65, 0x73, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, + 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x73, 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, + 0x65, 0x64, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x2e, 0x0a, + 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x70, 0x72, 0x6f, + 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x60, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, + 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x60, + 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x2e, 0x20, 0x54, 0x68, + 0x69, 0x73, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, + 0x74, 0x6f, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x69, 0x6e, 0x70, 0x75, 0x74, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, + 0x6b, 0x65, 0x79, 0x60, 0x20, 0x69, 0x73, 0x20, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x20, 0x66, 0x6f, + 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x73, 0x70, 0x65, 0x63, + 0x69, 0x66, 0x69, 0x65, 0x64, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x73, 0x70, + 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x73, 0x73, + 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6d, + 0x61, 0x64, 0x65, 0x20, 0x61, 0x67, 0x61, 0x69, 0x6e, 0x73, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, + 0x6c, 0x61, 0x74, 0x65, 0x73, 0x74, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x49, 0x44, 0x2e, 0x20, 0x49, + 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, 0x67, 0x6c, 0x79, 0x20, 0x72, 0x65, + 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x73, 0x70, 0x65, + 0x63, 0x69, 0x66, 0x79, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x69, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20, + 0x62, 0x65, 0x74, 0x74, 0x65, 0x72, 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x6e, + 0x63, 0x65, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, + 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, + 0x65, 0x78, 0x74, 0x60, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x74, 0x68, 0x61, 0x74, + 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f, + 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, + 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, + 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x2e, 0x20, + 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, 0x67, 0x6c, 0x79, 0x20, 0x72, + 0x65, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x70, 0x72, + 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x66, 0x6f, + 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, 0x6e, 0x70, 0x75, 0x74, 0x20, + 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6c, + 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, + 0x2c, 0x20, 0x74, 0x6f, 0x20, 0x65, 0x6e, 0x73, 0x75, 0x72, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, + 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x62, 0x65, 0x20, 0x65, + 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x64, 0x20, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x63, 0x74, + 0x6c, 0x79, 0x2e, 0x0a, 0x42, 0x79, 0x20, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x2c, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x63, 0x61, + 0x63, 0x68, 0x65, 0x73, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x66, 0x6f, 0x72, + 0x20, 0x61, 0x20, 0x73, 0x68, 0x6f, 0x72, 0x74, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20, 0x74, 0x6f, + 0x20, 0x6f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, + 0x6d, 0x61, 0x6e, 0x63, 0x65, 0x2e, 0x20, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x73, + 0x70, 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x6f, + 0x66, 0x20, 0x60, 0x48, 0x49, 0x47, 0x48, 0x45, 0x52, 0x5f, 0x43, 0x4f, 0x4e, 0x53, 0x49, 0x53, + 0x54, 0x45, 0x4e, 0x43, 0x59, 0x60, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, + 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, + 0x65, 0x6e, 0x63, 0x79, 0x60, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x20, + 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x74, 0x6f, 0x20, 0x69, + 0x6e, 0x66, 0x6f, 0x72, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, + 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, + 0x69, 0x73, 0x69, 0x73, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x20, 0x69, 0x73, 0x20, 0x70, 0x72, 0x65, + 0x66, 0x65, 0x72, 0x72, 0x65, 0x64, 0x20, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, + 0x70, 0x65, 0x6e, 0x73, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, + 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x2e, 0x20, 0x43, 0x6f, 0x6e, 0x73, + 0x69, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, + 0x20, 0x62, 0x65, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, + 0x63, 0x79, 0x20, 0x69, 0x66, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x67, + 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, + 0x6e, 0x63, 0x79, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, + 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x77, 0x68, + 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x73, 0x20, 0x69, 0x6e, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x60, 0x61, 0x6c, 0x6c, 0x6f, + 0x77, 0x65, 0x64, 0x60, 0x2e, 0x0a, 0x0a, 0x53, 0x6f, 0x6d, 0x65, 0x20, 0x65, 0x78, 0x63, 0x65, + 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x2c, 0x20, 0x62, 0x75, + 0x74, 0x20, 0x69, 0x6e, 0x20, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x6c, 0x2c, 0x20, 0x69, 0x66, + 0x20, 0x61, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x72, 0x65, 0x73, + 0x70, 0x6f, 0x6e, 0x64, 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, 0x7b, 0x61, 0x6c, 0x6c, + 0x6f, 0x77, 0x65, 0x64, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x7d, 0x60, 0x2c, 0x20, 0x74, 0x68, + 0x65, 0x6e, 0x20, 0x79, 0x6f, 0x75, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x65, 0x78, 0x70, 0x65, 0x63, + 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x71, 0x75, 0x69, 0x76, 0x61, 0x6c, 0x65, 0x6e, 0x74, + 0x20, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x71, 0x75, 0x65, + 0x72, 0x79, 0x20, 0x74, 0x6f, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x76, 0x69, 0x63, + 0x65, 0x76, 0x65, 0x72, 0x73, 0x61, 0x2e, 0x20, 0x0a, 0x46, 0x6f, 0x72, 0x20, 0x65, 0x78, 0x61, + 0x6d, 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x69, 0x66, 0x20, 0x60, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x28, + 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x2c, 0x20, 0x72, 0x65, 0x61, 0x64, 0x65, + 0x72, 0x2c, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, + 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x29, 0x60, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, + 0x64, 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, 0x7b, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x65, + 0x64, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x7d, 0x60, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x6e, 0x20, + 0x60, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x28, 0x75, 0x73, 0x65, + 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x2c, 0x20, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x2c, 0x20, + 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x29, 0x60, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x69, + 0x6e, 0x63, 0x6c, 0x75, 0x64, 0x65, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, + 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x20, 0x69, 0x6e, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x0a, 0x23, + 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x73, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x51, + 0x75, 0x65, 0x72, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x63, 0x6f, 0x6e, + 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x0a, 0x49, + 0x6e, 0x20, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x20, 0x74, 0x6f, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, + 0x20, 0x69, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, + 0x6e, 0x6e, 0x65, 0x60, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x60, 0x75, 0x73, + 0x65, 0x72, 0x60, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, + 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, + 0x77, 0x69, 0x74, 0x68, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x60, 0x64, 0x6f, 0x63, + 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, + 0x74, 0x60, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, + 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, + 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, + 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, + 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x22, 0x2c, + 0x0a, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x74, 0x69, + 0x6d, 0x65, 0x5f, 0x73, 0x6c, 0x6f, 0x74, 0x3a, 0x6f, 0x66, 0x66, 0x69, 0x63, 0x65, 0x5f, 0x68, + 0x6f, 0x75, 0x72, 0x73, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x74, 0x68, 0x65, 0x20, + 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x62, 0x65, + 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, + 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, + 0x20, 0x62, 0x6f, 0x64, 0x79, 0x3a, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, + 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, + 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, + 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, + 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, + 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, + 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, + 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, + 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, + 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, + 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, + 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, + 0x20, 0x22, 0x74, 0x69, 0x6d, 0x65, 0x5f, 0x73, 0x6c, 0x6f, 0x74, 0x3a, 0x6f, 0x66, 0x66, 0x69, + 0x63, 0x65, 0x5f, 0x68, 0x6f, 0x75, 0x72, 0x73, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, + 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, + 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, + 0x56, 0x56, 0x31, 0x37, 0x50, 0x45, 0x43, 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, + 0x59, 0x35, 0x4e, 0x43, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x23, 0x23, 0x23, 0x20, + 0x51, 0x75, 0x65, 0x72, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, + 0x73, 0x0a, 0x53, 0x6f, 0x6d, 0x65, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x73, 0x20, 0x77, 0x69, + 0x6c, 0x6c, 0x20, 0x61, 0x6c, 0x77, 0x61, 0x79, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, + 0x20, 0x60, 0x74, 0x72, 0x75, 0x65, 0x60, 0x2c, 0x20, 0x65, 0x76, 0x65, 0x6e, 0x20, 0x77, 0x69, + 0x74, 0x68, 0x6f, 0x75, 0x74, 0x20, 0x61, 0x6e, 0x79, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, + 0x2e, 0x20, 0x46, 0x6f, 0x72, 0x20, 0x65, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x66, + 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, + 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, + 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x60, 0x60, 0x60, 0x70, 0x79, 0x74, 0x68, 0x6f, 0x6e, 0x0a, 0x6d, + 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x20, 0x20, 0x73, 0x63, 0x68, 0x65, 0x6d, 0x61, 0x20, 0x31, 0x2e, + 0x31, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x0a, 0x74, 0x79, 0x70, 0x65, + 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x0a, 0x20, 0x20, 0x72, 0x65, 0x6c, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x65, + 0x20, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, 0x72, 0x5d, 0x0a, + 0x60, 0x60, 0x60, 0x0a, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, + 0x67, 0x20, 0x71, 0x75, 0x65, 0x72, 0x79, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, + 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, + 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, + 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, + 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, + 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, + 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, + 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, + 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x61, + 0x6c, 0x77, 0x61, 0x79, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x60, 0x7b, 0x20, + 0x22, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x65, 0x64, 0x22, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x20, + 0x7d, 0x60, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20, 0x62, 0x65, 0x63, 0x61, + 0x75, 0x73, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x20, 0x61, 0x72, 0x65, + 0x20, 0x73, 0x65, 0x6c, 0x66, 0x2d, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x6e, 0x67, 0x3a, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x60, 0x64, 0x6f, 0x63, + 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, + 0x74, 0x23, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x61, + 0x6c, 0x77, 0x61, 0x79, 0x73, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, + 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, + 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x2e, 0x0a, 0x23, 0x23, + 0x23, 0x20, 0x51, 0x75, 0x65, 0x72, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, + 0x65, 0x74, 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, + 0x6e, 0x63, 0x65, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, + 0x0a, 0x41, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x75, + 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x79, 0x69, 0x65, 0x6c, 0x64, + 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x6d, 0x75, + 0x73, 0x74, 0x20, 0x62, 0x65, 0x20, 0x74, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x20, 0x63, 0x61, + 0x72, 0x65, 0x66, 0x75, 0x6c, 0x6c, 0x79, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6d, + 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x69, 0x6e, 0x76, 0x6f, 0x6c, 0x76, 0x65, 0x73, 0x20, 0x64, 0x69, + 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x2e, 0x20, 0x46, 0x6f, 0x72, 0x20, 0x65, 0x78, + 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, + 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, + 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x60, 0x60, 0x60, + 0x70, 0x79, 0x74, 0x68, 0x6f, 0x6e, 0x0a, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x20, 0x20, 0x73, + 0x63, 0x68, 0x65, 0x6d, 0x61, 0x20, 0x31, 0x2e, 0x31, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x75, + 0x73, 0x65, 0x72, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x0a, 0x20, + 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x64, + 0x65, 0x66, 0x69, 0x6e, 0x65, 0x20, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x75, + 0x73, 0x65, 0x72, 0x5d, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, + 0x6e, 0x74, 0x0a, 0x20, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x65, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b, 0x65, + 0x64, 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, 0x72, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, + 0x66, 0x69, 0x6e, 0x65, 0x20, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x67, 0x72, + 0x6f, 0x75, 0x70, 0x23, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x5d, 0x20, 0x62, 0x75, 0x74, 0x20, + 0x6e, 0x6f, 0x74, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b, 0x65, 0x64, 0x0a, 0x60, 0x60, 0x60, 0x0a, + 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x71, 0x75, + 0x65, 0x72, 0x79, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, + 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x67, 0x72, 0x6f, + 0x75, 0x70, 0x3a, 0x66, 0x69, 0x6e, 0x61, 0x6e, 0x63, 0x65, 0x23, 0x6d, 0x65, 0x6d, 0x62, 0x65, + 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, + 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, + 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, + 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, + 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, + 0x79, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, + 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, + 0x22, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x67, 0x72, 0x6f, + 0x75, 0x70, 0x3a, 0x66, 0x69, 0x6e, 0x61, 0x6e, 0x63, 0x65, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x67, 0x72, + 0x6f, 0x75, 0x70, 0x3a, 0x66, 0x69, 0x6e, 0x61, 0x6e, 0x63, 0x65, 0x23, 0x6d, 0x65, 0x6d, 0x62, + 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, + 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, + 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, + 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, + 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, + 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x62, + 0x6c, 0x6f, 0x63, 0x6b, 0x65, 0x64, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, - 0x23, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x61, 0x6c, - 0x77, 0x61, 0x79, 0x73, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x72, - 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, - 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, - 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x2e, 0x0a, 0x23, 0x23, 0x23, - 0x20, 0x51, 0x75, 0x65, 0x72, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, - 0x74, 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, - 0x63, 0x65, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x0a, - 0x41, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x75, 0x73, - 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x79, 0x69, 0x65, 0x6c, 0x64, 0x20, - 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x6d, 0x75, 0x73, - 0x74, 0x20, 0x62, 0x65, 0x20, 0x74, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x20, 0x63, 0x61, 0x72, - 0x65, 0x66, 0x75, 0x6c, 0x6c, 0x79, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6d, 0x6f, - 0x64, 0x65, 0x6c, 0x20, 0x69, 0x6e, 0x76, 0x6f, 0x6c, 0x76, 0x65, 0x73, 0x20, 0x64, 0x69, 0x66, - 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x2e, 0x20, 0x46, 0x6f, 0x72, 0x20, 0x65, 0x78, 0x61, - 0x6d, 0x70, 0x6c, 0x65, 0x2c, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6f, - 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x60, 0x60, 0x60, 0x70, - 0x79, 0x74, 0x68, 0x6f, 0x6e, 0x0a, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x20, 0x20, 0x73, 0x63, - 0x68, 0x65, 0x6d, 0x61, 0x20, 0x31, 0x2e, 0x31, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x75, 0x73, - 0x65, 0x72, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x0a, 0x20, 0x20, - 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, - 0x66, 0x69, 0x6e, 0x65, 0x20, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x75, 0x73, - 0x65, 0x72, 0x5d, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, - 0x74, 0x0a, 0x20, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x65, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b, 0x65, 0x64, - 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, 0x72, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, - 0x69, 0x6e, 0x65, 0x20, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x67, 0x72, 0x6f, - 0x75, 0x70, 0x23, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x5d, 0x20, 0x62, 0x75, 0x74, 0x20, 0x6e, - 0x6f, 0x74, 0x20, 0x62, 0x6c, 0x6f, 0x63, 0x6b, 0x65, 0x64, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x74, - 0x68, 0x65, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x71, 0x75, 0x65, - 0x72, 0x79, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, + 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, + 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x77, 0x69, 0x6c, 0x6c, 0x20, + 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x60, 0x7b, 0x20, 0x22, 0x61, 0x6c, 0x6c, 0x6f, 0x77, + 0x65, 0x64, 0x22, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x20, 0x7d, 0x60, 0x2c, 0x20, 0x65, 0x76, + 0x65, 0x6e, 0x20, 0x74, 0x68, 0x6f, 0x75, 0x67, 0x68, 0x20, 0x61, 0x20, 0x73, 0x70, 0x65, 0x63, + 0x69, 0x66, 0x69, 0x63, 0x20, 0x75, 0x73, 0x65, 0x72, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x60, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x3a, + 0x66, 0x69, 0x6e, 0x61, 0x6e, 0x63, 0x65, 0x23, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x60, 0x20, + 0x64, 0x6f, 0x65, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x2e, 0x0a, 0x23, + 0x23, 0x23, 0x20, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x68, 0x69, + 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, 0x6e, 0x63, 0x79, + 0x0a, 0x42, 0x79, 0x20, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x2c, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x63, 0x61, 0x63, 0x68, 0x65, + 0x73, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, + 0x73, 0x68, 0x6f, 0x72, 0x74, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20, 0x74, 0x6f, 0x20, 0x6f, 0x70, + 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x6e, + 0x63, 0x65, 0x2e, 0x20, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x72, 0x65, 0x71, 0x75, + 0x65, 0x73, 0x74, 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, + 0x73, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x20, 0x74, 0x6f, 0x20, 0x69, 0x6e, 0x66, 0x6f, 0x72, 0x6d, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x20, 0x74, 0x68, 0x61, 0x74, + 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, + 0x6e, 0x63, 0x79, 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, 0x20, 0x62, 0x65, 0x20, 0x70, 0x72, + 0x65, 0x66, 0x65, 0x72, 0x72, 0x65, 0x64, 0x20, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, + 0x78, 0x70, 0x65, 0x6e, 0x73, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, + 0x73, 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x2e, 0x20, 0x43, 0x61, 0x72, + 0x65, 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, 0x20, 0x62, 0x65, 0x20, 0x74, 0x61, 0x6b, 0x65, + 0x6e, 0x20, 0x77, 0x68, 0x65, 0x6e, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x69, 0x6e, + 0x67, 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, + 0x65, 0x6e, 0x63, 0x79, 0x20, 0x64, 0x75, 0x65, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, + 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, + 0x79, 0x2e, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x3a, 0x66, 0x69, 0x6e, 0x61, 0x6e, 0x63, 0x65, 0x23, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, @@ -4606,1287 +4699,1221 @@ var file_openfga_v1_openfga_service_proto_rawDesc = []byte{ 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, - 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, - 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, - 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, - 0x73, 0x65, 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, - 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x67, 0x72, 0x6f, 0x75, - 0x70, 0x3a, 0x66, 0x69, 0x6e, 0x61, 0x6e, 0x63, 0x65, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x67, 0x72, 0x6f, - 0x75, 0x70, 0x3a, 0x66, 0x69, 0x6e, 0x61, 0x6e, 0x63, 0x65, 0x23, 0x6d, 0x65, 0x6d, 0x62, 0x65, - 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, - 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, - 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, - 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, - 0x72, 0x3a, 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x62, 0x6c, - 0x6f, 0x63, 0x6b, 0x65, 0x64, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, - 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, - 0x20, 0x7d, 0x2c, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, - 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x60, 0x7b, 0x20, 0x22, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x65, - 0x64, 0x22, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x20, 0x7d, 0x60, 0x2c, 0x20, 0x65, 0x76, 0x65, - 0x6e, 0x20, 0x74, 0x68, 0x6f, 0x75, 0x67, 0x68, 0x20, 0x61, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, - 0x66, 0x69, 0x63, 0x20, 0x75, 0x73, 0x65, 0x72, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x60, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x3a, 0x66, - 0x69, 0x6e, 0x61, 0x6e, 0x63, 0x65, 0x23, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x60, 0x20, 0x64, - 0x6f, 0x65, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x2e, 0x0a, 0x23, 0x23, - 0x23, 0x20, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x68, 0x69, 0x67, - 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x0a, - 0x42, 0x79, 0x20, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x63, 0x61, 0x63, 0x68, 0x65, 0x73, - 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x73, - 0x68, 0x6f, 0x72, 0x74, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20, 0x74, 0x6f, 0x20, 0x6f, 0x70, 0x74, - 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x6e, 0x63, - 0x65, 0x2e, 0x20, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, - 0x73, 0x74, 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, - 0x74, 0x65, 0x6e, 0x63, 0x79, 0x20, 0x74, 0x6f, 0x20, 0x69, 0x6e, 0x66, 0x6f, 0x72, 0x6d, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, 0x6e, - 0x63, 0x79, 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, 0x20, 0x62, 0x65, 0x20, 0x70, 0x72, 0x65, - 0x66, 0x65, 0x72, 0x72, 0x65, 0x64, 0x20, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, - 0x70, 0x65, 0x6e, 0x73, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, - 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x2e, 0x20, 0x43, 0x61, 0x72, 0x65, - 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, 0x20, 0x62, 0x65, 0x20, 0x74, 0x61, 0x6b, 0x65, 0x6e, - 0x20, 0x77, 0x68, 0x65, 0x6e, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x67, - 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, - 0x6e, 0x63, 0x79, 0x20, 0x64, 0x75, 0x65, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, - 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, 0x79, - 0x2e, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, - 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x67, 0x72, 0x6f, 0x75, 0x70, - 0x3a, 0x66, 0x69, 0x6e, 0x61, 0x6e, 0x63, 0x65, 0x23, 0x6d, 0x65, 0x6d, 0x62, 0x65, 0x72, 0x22, - 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, - 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, - 0x74, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x73, 0x69, - 0x73, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x22, 0x3a, 0x20, 0x22, 0x48, 0x49, 0x47, 0x48, 0x45, 0x52, - 0x5f, 0x43, 0x4f, 0x4e, 0x53, 0x49, 0x53, 0x54, 0x45, 0x4e, 0x43, 0x59, 0x22, 0x0a, 0x7d, 0x0a, - 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x05, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x82, 0xd3, 0xe4, 0x93, 0x02, - 0x1d, 0x3a, 0x01, 0x2a, 0x22, 0x18, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, - 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x12, 0x8b, - 0x13, 0x0a, 0x0a, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x12, 0x1d, 0x2e, + 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x73, + 0x69, 0x73, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x22, 0x3a, 0x20, 0x22, 0x48, 0x49, 0x47, 0x48, 0x45, + 0x52, 0x5f, 0x43, 0x4f, 0x4e, 0x53, 0x49, 0x53, 0x54, 0x45, 0x4e, 0x43, 0x59, 0x22, 0x0a, 0x7d, + 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x05, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x82, 0xd3, 0xe4, 0x93, + 0x02, 0x1d, 0x3a, 0x01, 0x2a, 0x22, 0x18, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, + 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x12, + 0x8b, 0x13, 0x0a, 0x0a, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x12, 0x1d, + 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x61, 0x74, 0x63, + 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x61, 0x74, 0x63, 0x68, - 0x43, 0x68, 0x65, 0x63, 0x6b, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1e, 0x2e, 0x6f, - 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, - 0x68, 0x65, 0x63, 0x6b, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0xbd, 0x12, 0x92, - 0x41, 0x90, 0x12, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, - 0x70, 0x20, 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x35, 0x53, 0x65, 0x6e, 0x64, 0x20, - 0x61, 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x63, 0x68, 0x65, 0x63, 0x6b, - 0x60, 0x20, 0x6f, 0x70, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x69, 0x6e, 0x20, - 0x61, 0x20, 0x73, 0x69, 0x6e, 0x67, 0x6c, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, - 0x1a, 0xb4, 0x11, 0x54, 0x68, 0x65, 0x20, 0x60, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, 0x65, - 0x63, 0x6b, 0x60, 0x20, 0x41, 0x50, 0x49, 0x20, 0x66, 0x75, 0x6e, 0x63, 0x74, 0x69, 0x6f, 0x6e, - 0x73, 0x20, 0x6e, 0x65, 0x61, 0x72, 0x6c, 0x79, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x63, - 0x61, 0x6c, 0x6c, 0x79, 0x20, 0x74, 0x6f, 0x20, 0x60, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x60, 0x2c, - 0x20, 0x62, 0x75, 0x74, 0x20, 0x69, 0x6e, 0x73, 0x74, 0x65, 0x61, 0x64, 0x20, 0x6f, 0x66, 0x20, - 0x63, 0x68, 0x65, 0x63, 0x6b, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x73, 0x69, 0x6e, 0x67, 0x6c, - 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x2d, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x72, 0x65, - 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x42, 0x61, 0x74, 0x63, 0x68, - 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x61, 0x63, 0x63, 0x65, 0x70, 0x74, 0x73, 0x20, 0x61, 0x20, - 0x6c, 0x69, 0x73, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x73, 0x68, 0x69, 0x70, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x61, - 0x6e, 0x64, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, 0x20, 0x6d, 0x61, 0x70, - 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x69, 0x6e, 0x67, 0x20, 0x60, 0x42, 0x61, 0x74, - 0x63, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x49, 0x74, 0x65, 0x6d, 0x60, 0x20, 0x72, 0x65, 0x73, - 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x65, 0x61, 0x63, 0x68, 0x20, 0x63, - 0x68, 0x65, 0x63, 0x6b, 0x20, 0x69, 0x74, 0x20, 0x72, 0x65, 0x63, 0x65, 0x69, 0x76, 0x65, 0x64, - 0x2e, 0x0a, 0x0a, 0x41, 0x6e, 0x20, 0x61, 0x73, 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, 0x65, 0x64, - 0x20, 0x60, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, - 0x60, 0x20, 0x69, 0x73, 0x20, 0x72, 0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x64, 0x20, 0x66, 0x6f, - 0x72, 0x20, 0x65, 0x61, 0x63, 0x68, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x69, 0x6e, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x62, 0x61, 0x74, 0x63, 0x68, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, 0x20, - 0x49, 0x44, 0x20, 0x69, 0x73, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x63, 0x6f, - 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x20, 0x61, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, - 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x70, 0x70, 0x72, 0x6f, 0x70, 0x72, 0x69, 0x61, - 0x74, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x20, 0x49, 0x74, 0x20, - 0x69, 0x73, 0x20, 0x61, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x20, 0x63, 0x6f, 0x6e, 0x73, - 0x69, 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x6f, 0x66, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x61, - 0x6c, 0x70, 0x68, 0x61, 0x6e, 0x75, 0x6d, 0x65, 0x72, 0x69, 0x63, 0x20, 0x63, 0x68, 0x61, 0x72, - 0x61, 0x63, 0x74, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x72, 0x20, 0x68, 0x79, 0x70, 0x68, 0x65, 0x6e, - 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x61, 0x20, 0x6d, 0x61, 0x78, 0x69, 0x6d, 0x75, 0x6d, - 0x20, 0x6c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x20, 0x6f, 0x66, 0x20, 0x33, 0x36, 0x20, 0x63, 0x68, - 0x61, 0x72, 0x61, 0x63, 0x74, 0x65, 0x72, 0x73, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, 0x20, 0x60, - 0x63, 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, 0x60, 0x20, - 0x69, 0x73, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x6d, 0x61, 0x70, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x65, 0x61, 0x63, - 0x68, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, - 0x74, 0x65, 0x6d, 0x20, 0x77, 0x68, 0x69, 0x63, 0x68, 0x20, 0x77, 0x61, 0x73, 0x20, 0x63, 0x68, - 0x65, 0x63, 0x6b, 0x65, 0x64, 0x2c, 0x20, 0x73, 0x6f, 0x20, 0x69, 0x74, 0x20, 0x6d, 0x75, 0x73, - 0x74, 0x20, 0x62, 0x65, 0x20, 0x75, 0x6e, 0x69, 0x71, 0x75, 0x65, 0x20, 0x66, 0x6f, 0x72, 0x20, - 0x65, 0x61, 0x63, 0x68, 0x20, 0x69, 0x74, 0x65, 0x6d, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x62, 0x61, 0x74, 0x63, 0x68, 0x2e, 0x20, 0x57, 0x65, 0x20, 0x72, 0x65, 0x63, 0x6f, 0x6d, - 0x6d, 0x65, 0x6e, 0x64, 0x20, 0x75, 0x73, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x55, 0x55, 0x49, - 0x44, 0x20, 0x6f, 0x72, 0x20, 0x55, 0x4c, 0x49, 0x44, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x60, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, - 0x60, 0x2c, 0x20, 0x62, 0x75, 0x74, 0x20, 0x79, 0x6f, 0x75, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x75, - 0x73, 0x65, 0x20, 0x77, 0x68, 0x61, 0x74, 0x65, 0x76, 0x65, 0x72, 0x20, 0x75, 0x6e, 0x69, 0x71, - 0x75, 0x65, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x20, 0x79, 0x6f, - 0x75, 0x20, 0x6e, 0x65, 0x65, 0x64, 0x20, 0x61, 0x73, 0x20, 0x6c, 0x6f, 0x6e, 0x67, 0x20, 0x20, - 0x61, 0x73, 0x20, 0x69, 0x74, 0x20, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x20, 0x74, 0x68, - 0x69, 0x73, 0x20, 0x72, 0x65, 0x67, 0x65, 0x78, 0x20, 0x70, 0x61, 0x74, 0x74, 0x65, 0x72, 0x6e, - 0x3a, 0x20, 0x60, 0x5e, 0x5b, 0x5c, 0x77, 0x5c, 0x64, 0x2d, 0x5d, 0x7b, 0x31, 0x2c, 0x33, 0x36, - 0x7d, 0x24, 0x60, 0x0a, 0x0a, 0x4e, 0x4f, 0x54, 0x45, 0x3a, 0x20, 0x54, 0x68, 0x65, 0x20, 0x6d, - 0x61, 0x78, 0x69, 0x6d, 0x75, 0x6d, 0x20, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x20, 0x6f, 0x66, - 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x63, 0x61, 0x6e, - 0x20, 0x62, 0x65, 0x20, 0x70, 0x61, 0x73, 0x73, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x60, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x60, 0x20, 0x41, - 0x50, 0x49, 0x20, 0x69, 0x73, 0x20, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x75, 0x72, 0x61, 0x62, - 0x6c, 0x65, 0x20, 0x76, 0x69, 0x61, 0x20, 0x74, 0x68, 0x65, 0x20, 0x5b, 0x4f, 0x50, 0x45, 0x4e, - 0x46, 0x47, 0x41, 0x5f, 0x4d, 0x41, 0x58, 0x5f, 0x43, 0x48, 0x45, 0x43, 0x4b, 0x53, 0x5f, 0x50, - 0x45, 0x52, 0x5f, 0x42, 0x41, 0x54, 0x43, 0x48, 0x5f, 0x43, 0x48, 0x45, 0x43, 0x4b, 0x5d, 0x28, - 0x68, 0x74, 0x74, 0x70, 0x73, 0x3a, 0x2f, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x64, 0x65, 0x76, 0x2f, 0x64, 0x6f, 0x63, 0x73, 0x2f, 0x67, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, - 0x2d, 0x73, 0x74, 0x61, 0x72, 0x74, 0x65, 0x64, 0x2f, 0x73, 0x65, 0x74, 0x75, 0x70, 0x2d, 0x6f, - 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x75, 0x72, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x23, 0x4f, 0x50, 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, 0x4d, 0x41, 0x58, - 0x5f, 0x43, 0x48, 0x45, 0x43, 0x4b, 0x53, 0x5f, 0x50, 0x45, 0x52, 0x5f, 0x42, 0x41, 0x54, 0x43, - 0x48, 0x5f, 0x43, 0x48, 0x45, 0x43, 0x4b, 0x29, 0x20, 0x65, 0x6e, 0x76, 0x69, 0x72, 0x6f, 0x6e, - 0x6d, 0x65, 0x6e, 0x74, 0x20, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x2e, 0x20, 0x49, - 0x66, 0x20, 0x60, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x60, 0x20, 0x69, - 0x73, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x65, 0x64, 0x20, 0x75, 0x73, 0x69, 0x6e, 0x67, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x53, 0x44, 0x4b, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x53, 0x44, 0x4b, 0x20, - 0x63, 0x61, 0x6e, 0x20, 0x73, 0x70, 0x6c, 0x69, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x61, - 0x74, 0x63, 0x68, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, - 0x74, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x79, 0x6f, 0x75, 0x2e, 0x0a, 0x0a, 0x46, 0x6f, 0x72, - 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x64, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73, 0x20, 0x6f, 0x6e, - 0x20, 0x68, 0x6f, 0x77, 0x20, 0x60, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x60, 0x20, 0x66, 0x75, 0x6e, - 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2c, 0x20, 0x73, 0x65, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x64, 0x6f, 0x63, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x60, 0x2f, 0x63, 0x68, 0x65, 0x63, 0x6b, - 0x60, 0x2e, 0x0a, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x73, - 0x0a, 0x23, 0x23, 0x23, 0x23, 0x20, 0x41, 0x20, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, 0x65, - 0x63, 0x6b, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, - 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x73, 0x22, 0x3a, 0x20, - 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, - 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, - 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, - 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x61, - 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, - 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x2e, 0x2e, 0x2e, - 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, - 0x74, 0x22, 0x3a, 0x20, 0x7b, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, - 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x20, - 0x22, 0x30, 0x31, 0x4a, 0x41, 0x38, 0x50, 0x4d, 0x33, 0x51, 0x4d, 0x37, 0x56, 0x42, 0x50, 0x47, - 0x42, 0x38, 0x4b, 0x4d, 0x50, 0x4b, 0x38, 0x53, 0x42, 0x44, 0x35, 0x22, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, - 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, - 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, - 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, - 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, - 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, - 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x2e, - 0x2e, 0x2e, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, - 0x65, 0x78, 0x74, 0x22, 0x3a, 0x20, 0x7b, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x22, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, 0x22, - 0x3a, 0x20, 0x22, 0x30, 0x31, 0x4a, 0x41, 0x38, 0x50, 0x4d, 0x4d, 0x36, 0x41, 0x39, 0x30, 0x4e, - 0x56, 0x35, 0x45, 0x54, 0x30, 0x46, 0x32, 0x38, 0x43, 0x59, 0x53, 0x5a, 0x51, 0x22, 0x0a, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, - 0x0a, 0x0a, 0x42, 0x65, 0x6c, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x61, 0x20, 0x70, 0x6f, 0x73, - 0x73, 0x69, 0x62, 0x6c, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x74, - 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x62, 0x6f, 0x76, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, - 0x65, 0x73, 0x74, 0x2e, 0x20, 0x4e, 0x6f, 0x74, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x20, 0x6d, 0x61, 0x70, 0x27, 0x73, 0x20, - 0x6b, 0x65, 0x79, 0x73, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x63, 0x6f, - 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, 0x60, 0x20, 0x76, 0x61, - 0x6c, 0x75, 0x65, 0x73, 0x20, 0x66, 0x72, 0x6f, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x68, - 0x65, 0x63, 0x6b, 0x65, 0x64, 0x20, 0x69, 0x74, 0x65, 0x6d, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x3a, 0x0a, 0x60, 0x60, 0x60, 0x6a, - 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, - 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x30, 0x31, 0x4a, 0x41, 0x38, - 0x50, 0x4d, 0x4d, 0x36, 0x41, 0x39, 0x30, 0x4e, 0x56, 0x35, 0x45, 0x54, 0x30, 0x46, 0x32, 0x38, - 0x43, 0x59, 0x53, 0x5a, 0x51, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x65, 0x64, 0x22, 0x3a, 0x20, 0x66, 0x61, 0x6c, 0x73, - 0x65, 0x2c, 0x20, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x65, 0x72, 0x72, 0x6f, - 0x72, 0x22, 0x3a, 0x20, 0x7b, 0x22, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x22, 0x3a, 0x20, - 0x22, 0x22, 0x7d, 0x20, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x43, 0x68, 0x65, 0x63, 0x6b, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0xbd, 0x12, + 0x92, 0x41, 0x90, 0x12, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, + 0x69, 0x70, 0x20, 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x35, 0x53, 0x65, 0x6e, 0x64, + 0x20, 0x61, 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x63, 0x68, 0x65, 0x63, + 0x6b, 0x60, 0x20, 0x6f, 0x70, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x69, 0x6e, + 0x20, 0x61, 0x20, 0x73, 0x69, 0x6e, 0x67, 0x6c, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, + 0x74, 0x1a, 0xb4, 0x11, 0x54, 0x68, 0x65, 0x20, 0x60, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, + 0x65, 0x63, 0x6b, 0x60, 0x20, 0x41, 0x50, 0x49, 0x20, 0x66, 0x75, 0x6e, 0x63, 0x74, 0x69, 0x6f, + 0x6e, 0x73, 0x20, 0x6e, 0x65, 0x61, 0x72, 0x6c, 0x79, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, + 0x63, 0x61, 0x6c, 0x6c, 0x79, 0x20, 0x74, 0x6f, 0x20, 0x60, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x60, + 0x2c, 0x20, 0x62, 0x75, 0x74, 0x20, 0x69, 0x6e, 0x73, 0x74, 0x65, 0x61, 0x64, 0x20, 0x6f, 0x66, + 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x73, 0x69, 0x6e, 0x67, + 0x6c, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x2d, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x72, + 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x42, 0x61, 0x74, 0x63, + 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x61, 0x63, 0x63, 0x65, 0x70, 0x74, 0x73, 0x20, 0x61, + 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x73, 0x68, 0x69, 0x70, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, + 0x61, 0x6e, 0x64, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, 0x20, 0x6d, 0x61, + 0x70, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x69, 0x6e, 0x67, 0x20, 0x60, 0x42, 0x61, + 0x74, 0x63, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x49, 0x74, 0x65, 0x6d, 0x60, 0x20, 0x72, 0x65, + 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x65, 0x61, 0x63, 0x68, 0x20, + 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x69, 0x74, 0x20, 0x72, 0x65, 0x63, 0x65, 0x69, 0x76, 0x65, + 0x64, 0x2e, 0x0a, 0x0a, 0x41, 0x6e, 0x20, 0x61, 0x73, 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, 0x65, + 0x64, 0x20, 0x60, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, + 0x64, 0x60, 0x20, 0x69, 0x73, 0x20, 0x72, 0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x64, 0x20, 0x66, + 0x6f, 0x72, 0x20, 0x65, 0x61, 0x63, 0x68, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x69, 0x6e, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x61, 0x74, 0x63, 0x68, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, + 0x20, 0x49, 0x44, 0x20, 0x69, 0x73, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x63, + 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x20, 0x61, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, + 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x70, 0x70, 0x72, 0x6f, 0x70, 0x72, 0x69, + 0x61, 0x74, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x20, 0x49, 0x74, + 0x20, 0x69, 0x73, 0x20, 0x61, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x20, 0x63, 0x6f, 0x6e, + 0x73, 0x69, 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x6f, 0x66, 0x20, 0x6f, 0x6e, 0x6c, 0x79, 0x20, + 0x61, 0x6c, 0x70, 0x68, 0x61, 0x6e, 0x75, 0x6d, 0x65, 0x72, 0x69, 0x63, 0x20, 0x63, 0x68, 0x61, + 0x72, 0x61, 0x63, 0x74, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x72, 0x20, 0x68, 0x79, 0x70, 0x68, 0x65, + 0x6e, 0x73, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x61, 0x20, 0x6d, 0x61, 0x78, 0x69, 0x6d, 0x75, + 0x6d, 0x20, 0x6c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x20, 0x6f, 0x66, 0x20, 0x33, 0x36, 0x20, 0x63, + 0x68, 0x61, 0x72, 0x61, 0x63, 0x74, 0x65, 0x72, 0x73, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, 0x20, + 0x60, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, 0x60, + 0x20, 0x69, 0x73, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x6d, 0x61, 0x70, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x65, 0x61, + 0x63, 0x68, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, + 0x69, 0x74, 0x65, 0x6d, 0x20, 0x77, 0x68, 0x69, 0x63, 0x68, 0x20, 0x77, 0x61, 0x73, 0x20, 0x63, + 0x68, 0x65, 0x63, 0x6b, 0x65, 0x64, 0x2c, 0x20, 0x73, 0x6f, 0x20, 0x69, 0x74, 0x20, 0x6d, 0x75, + 0x73, 0x74, 0x20, 0x62, 0x65, 0x20, 0x75, 0x6e, 0x69, 0x71, 0x75, 0x65, 0x20, 0x66, 0x6f, 0x72, + 0x20, 0x65, 0x61, 0x63, 0x68, 0x20, 0x69, 0x74, 0x65, 0x6d, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x62, 0x61, 0x74, 0x63, 0x68, 0x2e, 0x20, 0x57, 0x65, 0x20, 0x72, 0x65, 0x63, 0x6f, + 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x20, 0x75, 0x73, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x55, 0x55, + 0x49, 0x44, 0x20, 0x6f, 0x72, 0x20, 0x55, 0x4c, 0x49, 0x44, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x60, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, + 0x64, 0x60, 0x2c, 0x20, 0x62, 0x75, 0x74, 0x20, 0x79, 0x6f, 0x75, 0x20, 0x63, 0x61, 0x6e, 0x20, + 0x75, 0x73, 0x65, 0x20, 0x77, 0x68, 0x61, 0x74, 0x65, 0x76, 0x65, 0x72, 0x20, 0x75, 0x6e, 0x69, + 0x71, 0x75, 0x65, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x20, 0x79, + 0x6f, 0x75, 0x20, 0x6e, 0x65, 0x65, 0x64, 0x20, 0x61, 0x73, 0x20, 0x6c, 0x6f, 0x6e, 0x67, 0x20, + 0x20, 0x61, 0x73, 0x20, 0x69, 0x74, 0x20, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x20, 0x74, + 0x68, 0x69, 0x73, 0x20, 0x72, 0x65, 0x67, 0x65, 0x78, 0x20, 0x70, 0x61, 0x74, 0x74, 0x65, 0x72, + 0x6e, 0x3a, 0x20, 0x60, 0x5e, 0x5b, 0x5c, 0x77, 0x5c, 0x64, 0x2d, 0x5d, 0x7b, 0x31, 0x2c, 0x33, + 0x36, 0x7d, 0x24, 0x60, 0x0a, 0x0a, 0x4e, 0x4f, 0x54, 0x45, 0x3a, 0x20, 0x54, 0x68, 0x65, 0x20, + 0x6d, 0x61, 0x78, 0x69, 0x6d, 0x75, 0x6d, 0x20, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x20, 0x6f, + 0x66, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x63, 0x61, + 0x6e, 0x20, 0x62, 0x65, 0x20, 0x70, 0x61, 0x73, 0x73, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x60, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x60, 0x20, + 0x41, 0x50, 0x49, 0x20, 0x69, 0x73, 0x20, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x75, 0x72, 0x61, + 0x62, 0x6c, 0x65, 0x20, 0x76, 0x69, 0x61, 0x20, 0x74, 0x68, 0x65, 0x20, 0x5b, 0x4f, 0x50, 0x45, + 0x4e, 0x46, 0x47, 0x41, 0x5f, 0x4d, 0x41, 0x58, 0x5f, 0x43, 0x48, 0x45, 0x43, 0x4b, 0x53, 0x5f, + 0x50, 0x45, 0x52, 0x5f, 0x42, 0x41, 0x54, 0x43, 0x48, 0x5f, 0x43, 0x48, 0x45, 0x43, 0x4b, 0x5d, + 0x28, 0x68, 0x74, 0x74, 0x70, 0x73, 0x3a, 0x2f, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, + 0x2e, 0x64, 0x65, 0x76, 0x2f, 0x64, 0x6f, 0x63, 0x73, 0x2f, 0x67, 0x65, 0x74, 0x74, 0x69, 0x6e, + 0x67, 0x2d, 0x73, 0x74, 0x61, 0x72, 0x74, 0x65, 0x64, 0x2f, 0x73, 0x65, 0x74, 0x75, 0x70, 0x2d, + 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x75, 0x72, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x23, 0x4f, 0x50, 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, 0x4d, 0x41, + 0x58, 0x5f, 0x43, 0x48, 0x45, 0x43, 0x4b, 0x53, 0x5f, 0x50, 0x45, 0x52, 0x5f, 0x42, 0x41, 0x54, + 0x43, 0x48, 0x5f, 0x43, 0x48, 0x45, 0x43, 0x4b, 0x29, 0x20, 0x65, 0x6e, 0x76, 0x69, 0x72, 0x6f, + 0x6e, 0x6d, 0x65, 0x6e, 0x74, 0x20, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x2e, 0x20, + 0x49, 0x66, 0x20, 0x60, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x60, 0x20, + 0x69, 0x73, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x65, 0x64, 0x20, 0x75, 0x73, 0x69, 0x6e, 0x67, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x53, 0x44, 0x4b, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x53, 0x44, 0x4b, + 0x20, 0x63, 0x61, 0x6e, 0x20, 0x73, 0x70, 0x6c, 0x69, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, + 0x61, 0x74, 0x63, 0x68, 0x20, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, + 0x73, 0x74, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x79, 0x6f, 0x75, 0x2e, 0x0a, 0x0a, 0x46, 0x6f, + 0x72, 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x64, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73, 0x20, 0x6f, + 0x6e, 0x20, 0x68, 0x6f, 0x77, 0x20, 0x60, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x60, 0x20, 0x66, 0x75, + 0x6e, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2c, 0x20, 0x73, 0x65, 0x65, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x64, 0x6f, 0x63, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x60, 0x2f, 0x63, 0x68, 0x65, 0x63, + 0x6b, 0x60, 0x2e, 0x0a, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, + 0x73, 0x0a, 0x23, 0x23, 0x23, 0x23, 0x20, 0x41, 0x20, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, + 0x65, 0x63, 0x6b, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, + 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x73, 0x22, 0x3a, + 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, + 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, + 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, + 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, + 0x61, 0x6e, 0x6e, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, + 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x2e, 0x2e, + 0x2e, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x65, + 0x78, 0x74, 0x22, 0x3a, 0x20, 0x7b, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, + 0x63, 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x4a, 0x41, 0x38, 0x50, 0x4d, 0x33, 0x51, 0x4d, 0x37, 0x56, 0x42, 0x50, - 0x47, 0x42, 0x38, 0x4b, 0x4d, 0x50, 0x4b, 0x38, 0x53, 0x42, 0x44, 0x35, 0x22, 0x3a, 0x20, 0x7b, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x65, 0x64, - 0x22, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x2c, 0x20, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x22, 0x3a, 0x20, 0x7b, 0x22, 0x6d, 0x65, 0x73, 0x73, - 0x61, 0x67, 0x65, 0x22, 0x3a, 0x20, 0x22, 0x22, 0x7d, 0x20, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, - 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x0a, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, 0x68, - 0x65, 0x63, 0x6b, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x23, 0x3a, 0x01, 0x2a, 0x22, 0x1e, 0x2f, 0x73, - 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, - 0x2f, 0x62, 0x61, 0x74, 0x63, 0x68, 0x2d, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x12, 0xda, 0x1e, 0x0a, - 0x06, 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x12, 0x19, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, - 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x52, 0x65, 0x71, 0x75, 0x65, - 0x73, 0x74, 0x1a, 0x1a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, - 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x98, - 0x1e, 0x92, 0x41, 0xf0, 0x1d, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, - 0x68, 0x69, 0x70, 0x20, 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x8e, 0x01, 0x45, 0x78, - 0x70, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x68, 0x69, 0x70, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, - 0x74, 0x20, 0x74, 0x72, 0x65, 0x65, 0x20, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x2c, 0x20, 0x61, - 0x6e, 0x64, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, 0x65, - 0x72, 0x73, 0x65, 0x74, 0x20, 0x72, 0x65, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, 0x72, 0x75, 0x6c, - 0x65, 0x73, 0x2e, 0x20, 0x20, 0x55, 0x73, 0x65, 0x66, 0x75, 0x6c, 0x20, 0x74, 0x6f, 0x20, 0x72, - 0x65, 0x61, 0x73, 0x6f, 0x6e, 0x20, 0x61, 0x62, 0x6f, 0x75, 0x74, 0x20, 0x61, 0x6e, 0x64, 0x20, - 0x64, 0x65, 0x62, 0x75, 0x67, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, 0x20, - 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x1a, 0xbe, 0x1c, 0x54, - 0x68, 0x65, 0x20, 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, - 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x75, 0x73, - 0x65, 0x72, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, - 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, - 0x69, 0x6e, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, - 0x77, 0x69, 0x74, 0x68, 0x20, 0x61, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x69, - 0x6e, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x73, 0x74, 0x6f, 0x72, - 0x65, 0x2e, 0x0a, 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, - 0x72, 0x65, 0x6e, 0x74, 0x20, 0x66, 0x72, 0x6f, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x2f, + 0x47, 0x42, 0x38, 0x4b, 0x4d, 0x50, 0x4b, 0x38, 0x53, 0x42, 0x44, 0x35, 0x22, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, + 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, + 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, + 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, + 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, + 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x65, + 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, + 0x2e, 0x2e, 0x2e, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, + 0x74, 0x65, 0x78, 0x74, 0x22, 0x3a, 0x20, 0x7b, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x22, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, + 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x4a, 0x41, 0x38, 0x50, 0x4d, 0x4d, 0x36, 0x41, 0x39, 0x30, + 0x4e, 0x56, 0x35, 0x45, 0x54, 0x30, 0x46, 0x32, 0x38, 0x43, 0x59, 0x53, 0x5a, 0x51, 0x22, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, + 0x60, 0x0a, 0x0a, 0x42, 0x65, 0x6c, 0x6f, 0x77, 0x20, 0x69, 0x73, 0x20, 0x61, 0x20, 0x70, 0x6f, + 0x73, 0x73, 0x69, 0x62, 0x6c, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, + 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x62, 0x6f, 0x76, 0x65, 0x20, 0x72, 0x65, 0x71, + 0x75, 0x65, 0x73, 0x74, 0x2e, 0x20, 0x4e, 0x6f, 0x74, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x20, 0x6d, 0x61, 0x70, 0x27, 0x73, + 0x20, 0x6b, 0x65, 0x79, 0x73, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x63, + 0x6f, 0x72, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, 0x60, 0x20, 0x76, + 0x61, 0x6c, 0x75, 0x65, 0x73, 0x20, 0x66, 0x72, 0x6f, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, + 0x68, 0x65, 0x63, 0x6b, 0x65, 0x64, 0x20, 0x69, 0x74, 0x65, 0x6d, 0x73, 0x20, 0x69, 0x6e, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x3a, 0x0a, 0x60, 0x60, 0x60, + 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x73, 0x75, 0x6c, + 0x74, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x30, 0x31, 0x4a, 0x41, + 0x38, 0x50, 0x4d, 0x4d, 0x36, 0x41, 0x39, 0x30, 0x4e, 0x56, 0x35, 0x45, 0x54, 0x30, 0x46, 0x32, + 0x38, 0x43, 0x59, 0x53, 0x5a, 0x51, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x65, 0x64, 0x22, 0x3a, 0x20, 0x66, 0x61, 0x6c, + 0x73, 0x65, 0x2c, 0x20, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x65, 0x72, 0x72, + 0x6f, 0x72, 0x22, 0x3a, 0x20, 0x7b, 0x22, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x22, 0x3a, + 0x20, 0x22, 0x22, 0x7d, 0x20, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x30, 0x31, 0x4a, 0x41, 0x38, 0x50, 0x4d, 0x33, 0x51, 0x4d, 0x37, 0x56, 0x42, + 0x50, 0x47, 0x42, 0x38, 0x4b, 0x4d, 0x50, 0x4b, 0x38, 0x53, 0x42, 0x44, 0x35, 0x22, 0x3a, 0x20, + 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x65, + 0x64, 0x22, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0x2c, 0x20, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x22, 0x3a, 0x20, 0x7b, 0x22, 0x6d, 0x65, 0x73, + 0x73, 0x61, 0x67, 0x65, 0x22, 0x3a, 0x20, 0x22, 0x22, 0x7d, 0x20, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x0a, 0x42, 0x61, 0x74, 0x63, 0x68, 0x43, + 0x68, 0x65, 0x63, 0x6b, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x23, 0x3a, 0x01, 0x2a, 0x22, 0x1e, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, - 0x7d, 0x2f, 0x72, 0x65, 0x61, 0x64, 0x60, 0x20, 0x41, 0x50, 0x49, 0x20, 0x69, 0x6e, 0x20, 0x74, - 0x68, 0x61, 0x74, 0x20, 0x62, 0x6f, 0x74, 0x68, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x61, - 0x6e, 0x64, 0x20, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x20, 0x75, 0x73, 0x65, 0x72, - 0x73, 0x65, 0x74, 0x73, 0x20, 0x61, 0x72, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, - 0x64, 0x2e, 0x0a, 0x42, 0x6f, 0x64, 0x79, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, - 0x72, 0x73, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x6f, 0x62, - 0x6a, 0x65, 0x63, 0x74, 0x60, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, - 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x20, 0x61, - 0x72, 0x65, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x64, 0x2e, - 0x0a, 0x41, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, - 0x75, 0x70, 0x6c, 0x65, 0x73, 0x60, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x6d, 0x61, - 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x62, 0x65, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, - 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x6f, - 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x2e, 0x20, 0x54, - 0x68, 0x69, 0x73, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, - 0x69, 0x6e, 0x73, 0x20, 0x6f, 0x6e, 0x65, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x60, 0x74, - 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x60, 0x2c, 0x20, 0x77, 0x68, 0x69, 0x63, - 0x68, 0x20, 0x69, 0x73, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x6f, 0x66, - 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x6b, 0x65, 0x79, 0x73, 0x2e, 0x20, 0x45, 0x61, 0x63, - 0x68, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x73, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, - 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x73, - 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, 0x65, 0x64, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, - 0x69, 0x6f, 0x6e, 0x60, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, - 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, - 0x20, 0x74, 0x72, 0x65, 0x65, 0x20, 0x77, 0x68, 0x6f, 0x73, 0x65, 0x20, 0x6c, 0x65, 0x61, 0x76, - 0x65, 0x73, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, - 0x66, 0x69, 0x63, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x75, 0x73, - 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x2e, 0x20, 0x55, 0x6e, 0x69, 0x6f, 0x6e, 0x2c, 0x20, 0x69, - 0x6e, 0x74, 0x65, 0x72, 0x73, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x61, 0x6e, 0x64, 0x20, - 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x20, 0x6f, 0x70, 0x65, 0x72, 0x61, - 0x74, 0x6f, 0x72, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6c, 0x6f, 0x63, 0x61, 0x74, 0x65, 0x64, 0x20, - 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x6d, 0x65, 0x64, 0x69, - 0x61, 0x74, 0x65, 0x20, 0x6e, 0x6f, 0x64, 0x65, 0x73, 0x2e, 0x0a, 0x0a, 0x23, 0x23, 0x20, 0x45, - 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x0a, 0x54, 0x6f, 0x20, 0x65, 0x78, 0x70, 0x61, 0x6e, 0x64, - 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x68, 0x61, 0x76, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, - 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x77, - 0x69, 0x74, 0x68, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, - 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, - 0x60, 0x2c, 0x20, 0x75, 0x73, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x45, 0x78, 0x70, 0x61, 0x6e, - 0x64, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, - 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, - 0x20, 0x62, 0x6f, 0x64, 0x79, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, - 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, 0x7b, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, + 0x7d, 0x2f, 0x62, 0x61, 0x74, 0x63, 0x68, 0x2d, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x12, 0xda, 0x1e, + 0x0a, 0x06, 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x12, 0x19, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, + 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x52, 0x65, 0x71, 0x75, + 0x65, 0x73, 0x74, 0x1a, 0x1a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, + 0x2e, 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, + 0x98, 0x1e, 0x92, 0x41, 0xf0, 0x1d, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x73, 0x68, 0x69, 0x70, 0x20, 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x8e, 0x01, 0x45, + 0x78, 0x70, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, + 0x65, 0x74, 0x20, 0x74, 0x72, 0x65, 0x65, 0x20, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x2c, 0x20, + 0x61, 0x6e, 0x64, 0x20, 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x75, 0x73, + 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x72, 0x65, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, 0x72, 0x75, + 0x6c, 0x65, 0x73, 0x2e, 0x20, 0x20, 0x55, 0x73, 0x65, 0x66, 0x75, 0x6c, 0x20, 0x74, 0x6f, 0x20, + 0x72, 0x65, 0x61, 0x73, 0x6f, 0x6e, 0x20, 0x61, 0x62, 0x6f, 0x75, 0x74, 0x20, 0x61, 0x6e, 0x64, + 0x20, 0x64, 0x65, 0x62, 0x75, 0x67, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, + 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x1a, 0xbe, 0x1c, + 0x54, 0x68, 0x65, 0x20, 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, + 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x75, + 0x73, 0x65, 0x72, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, + 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x63, 0x65, 0x72, 0x74, + 0x61, 0x69, 0x6e, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, + 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x61, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, + 0x69, 0x6e, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x73, 0x74, 0x6f, + 0x72, 0x65, 0x2e, 0x0a, 0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20, 0x64, 0x69, 0x66, 0x66, + 0x65, 0x72, 0x65, 0x6e, 0x74, 0x20, 0x66, 0x72, 0x6f, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, + 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, + 0x64, 0x7d, 0x2f, 0x72, 0x65, 0x61, 0x64, 0x60, 0x20, 0x41, 0x50, 0x49, 0x20, 0x69, 0x6e, 0x20, + 0x74, 0x68, 0x61, 0x74, 0x20, 0x62, 0x6f, 0x74, 0x68, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, + 0x61, 0x6e, 0x64, 0x20, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x20, 0x75, 0x73, 0x65, + 0x72, 0x73, 0x65, 0x74, 0x73, 0x20, 0x61, 0x72, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, + 0x65, 0x64, 0x2e, 0x0a, 0x42, 0x6f, 0x64, 0x79, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, + 0x65, 0x72, 0x73, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x6f, + 0x62, 0x6a, 0x65, 0x63, 0x74, 0x60, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x60, 0x74, 0x75, 0x70, 0x6c, + 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x2e, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x20, + 0x61, 0x72, 0x65, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x64, + 0x2e, 0x0a, 0x41, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, + 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x60, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x6d, + 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x62, 0x65, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75, + 0x64, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, + 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x2e, 0x20, + 0x54, 0x68, 0x69, 0x73, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x63, 0x6f, 0x6e, 0x74, + 0x61, 0x69, 0x6e, 0x73, 0x20, 0x6f, 0x6e, 0x65, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x60, + 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x60, 0x2c, 0x20, 0x77, 0x68, 0x69, + 0x63, 0x68, 0x20, 0x69, 0x73, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x6f, + 0x66, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x6b, 0x65, 0x79, 0x73, 0x2e, 0x20, 0x45, 0x61, + 0x63, 0x68, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x73, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, + 0x65, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, + 0x73, 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, 0x65, 0x64, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, + 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, + 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, + 0x61, 0x20, 0x74, 0x72, 0x65, 0x65, 0x20, 0x77, 0x68, 0x6f, 0x73, 0x65, 0x20, 0x6c, 0x65, 0x61, + 0x76, 0x65, 0x73, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x70, 0x65, 0x63, + 0x69, 0x66, 0x69, 0x63, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x75, + 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x2e, 0x20, 0x55, 0x6e, 0x69, 0x6f, 0x6e, 0x2c, 0x20, + 0x69, 0x6e, 0x74, 0x65, 0x72, 0x73, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x61, 0x6e, 0x64, + 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x20, 0x6f, 0x70, 0x65, 0x72, + 0x61, 0x74, 0x6f, 0x72, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6c, 0x6f, 0x63, 0x61, 0x74, 0x65, 0x64, + 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x6d, 0x65, 0x64, + 0x69, 0x61, 0x74, 0x65, 0x20, 0x6e, 0x6f, 0x64, 0x65, 0x73, 0x2e, 0x0a, 0x0a, 0x23, 0x23, 0x20, + 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x0a, 0x54, 0x6f, 0x20, 0x65, 0x78, 0x70, 0x61, 0x6e, + 0x64, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, + 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, + 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, + 0x77, 0x69, 0x74, 0x68, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x60, 0x64, 0x6f, 0x63, + 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, + 0x74, 0x60, 0x2c, 0x20, 0x75, 0x73, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x45, 0x78, 0x70, 0x61, + 0x6e, 0x64, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, + 0x66, 0x6f, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, + 0x74, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, + 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, 0x20, + 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, + 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, + 0x75, 0x64, 0x67, 0x65, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, + 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, + 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x22, + 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, 0x56, 0x56, 0x31, 0x37, 0x50, 0x45, 0x43, + 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, 0x59, 0x35, 0x4e, 0x43, 0x22, 0x0a, 0x7d, + 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x27, 0x73, 0x20, 0x72, + 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, + 0x61, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x74, 0x72, 0x65, 0x65, 0x20, 0x6f, + 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, + 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x61, + 0x76, 0x65, 0x20, 0x72, 0x65, 0x61, 0x64, 0x20, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x20, 0x74, + 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x2e, 0x0a, + 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x72, 0x65, + 0x65, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x6f, 0x6f, 0x74, 0x22, 0x3a, + 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, - 0x64, 0x67, 0x65, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x0a, - 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x22, 0x3a, - 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, 0x56, 0x56, 0x31, 0x37, 0x50, 0x45, 0x43, 0x4e, - 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, 0x59, 0x35, 0x4e, 0x43, 0x22, 0x0a, 0x7d, 0x0a, - 0x60, 0x60, 0x60, 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x27, 0x73, 0x20, 0x72, 0x65, - 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x61, - 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x20, 0x74, 0x72, 0x65, 0x65, 0x20, 0x6f, 0x66, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x75, - 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x61, 0x76, - 0x65, 0x20, 0x72, 0x65, 0x61, 0x64, 0x20, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x20, 0x74, 0x6f, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x2e, 0x0a, 0x60, - 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x72, 0x65, 0x65, - 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x6f, 0x6f, 0x74, 0x22, 0x3a, 0x7b, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x64, - 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, - 0x67, 0x65, 0x74, 0x23, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x22, 0x75, 0x6e, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6e, 0x6f, 0x64, 0x65, 0x73, 0x22, 0x3a, 0x5b, 0x0a, 0x20, + 0x64, 0x67, 0x65, 0x74, 0x23, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x6e, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6e, 0x6f, 0x64, 0x65, 0x73, 0x22, 0x3a, 0x5b, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, + 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, + 0x64, 0x67, 0x65, 0x74, 0x23, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6c, 0x65, 0x61, 0x66, 0x22, + 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, + 0x73, 0x22, 0x3a, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, + 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6c, 0x65, 0x61, 0x66, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, - 0x22, 0x3a, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, + 0x22, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, + 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x3a, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, + 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x77, 0x72, 0x69, + 0x74, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, + 0x0a, 0x54, 0x68, 0x65, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x65, 0x72, 0x20, 0x63, 0x61, 0x6e, 0x20, + 0x74, 0x68, 0x65, 0x6e, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x65, 0x78, 0x70, 0x61, 0x6e, 0x64, + 0x20, 0x41, 0x50, 0x49, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x77, 0x72, + 0x69, 0x74, 0x65, 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, + 0x69, 0x70, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, + 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, + 0x60, 0x2e, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x20, 0x52, 0x65, + 0x71, 0x75, 0x65, 0x73, 0x74, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x43, 0x6f, 0x6e, 0x74, 0x65, + 0x78, 0x74, 0x75, 0x61, 0x6c, 0x20, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x0a, 0x0a, 0x47, 0x69, + 0x76, 0x65, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x60, 0x60, + 0x60, 0x70, 0x79, 0x74, 0x68, 0x6f, 0x6e, 0x0a, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x73, 0x63, 0x68, 0x65, 0x6d, 0x61, 0x20, 0x31, 0x2e, 0x31, 0x0a, 0x0a, 0x74, 0x79, + 0x70, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x0a, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x66, 0x6f, + 0x6c, 0x64, 0x65, 0x72, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x73, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, + 0x65, 0x20, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, 0x72, 0x5d, 0x0a, + 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x65, 0x20, 0x70, 0x61, 0x72, 0x65, + 0x6e, 0x74, 0x3a, 0x20, 0x5b, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x5d, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, + 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, 0x72, 0x5d, 0x20, 0x6f, 0x72, 0x20, 0x77, 0x72, + 0x69, 0x74, 0x65, 0x72, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, + 0x69, 0x6e, 0x65, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, + 0x72, 0x5d, 0x20, 0x6f, 0x72, 0x20, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x20, 0x66, 0x72, 0x6f, 0x6d, + 0x20, 0x70, 0x61, 0x72, 0x65, 0x6e, 0x74, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x61, 0x6e, 0x64, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x61, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, + 0x65, 0x73, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x5b, 0x7b, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, + 0x62, 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x66, 0x6f, + 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x22, 0x0a, 0x7d, 0x5d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x0a, + 0x54, 0x6f, 0x20, 0x65, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x60, 0x77, + 0x72, 0x69, 0x74, 0x65, 0x72, 0x73, 0x60, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, + 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x60, 0x20, 0x77, 0x68, 0x65, 0x6e, 0x20, 0x60, 0x64, 0x6f, + 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x60, 0x20, 0x69, 0x73, 0x20, 0x70, 0x75, 0x74, + 0x20, 0x69, 0x6e, 0x20, 0x60, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x60, 0x2c, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x63, + 0x6f, 0x75, 0x6c, 0x64, 0x20, 0x62, 0x65, 0x0a, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, + 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, + 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, + 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x22, 0x2c, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, + 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, + 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, + 0x65, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, + 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, + 0x22, 0x3a, 0x20, 0x22, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x22, 0x2c, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x22, 0x3a, 0x20, 0x22, 0x70, 0x61, 0x72, 0x65, 0x6e, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, + 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, + 0x60, 0x60, 0x60, 0x0a, 0x74, 0x68, 0x69, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, + 0x3a, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, + 0x72, 0x65, 0x65, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x6f, 0x6f, + 0x74, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6e, 0x61, 0x6d, + 0x65, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x23, + 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, + 0x75, 0x6e, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x6e, 0x6f, 0x64, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, + 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x23, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, + 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6c, + 0x65, 0x61, 0x66, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x64, 0x6f, - 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, - 0x65, 0x74, 0x23, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6c, 0x65, 0x61, 0x66, 0x22, 0x3a, 0x7b, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, - 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, - 0x72, 0x73, 0x65, 0x74, 0x22, 0x3a, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, - 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x77, 0x72, 0x69, 0x74, - 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, - 0x54, 0x68, 0x65, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x65, 0x72, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x74, - 0x68, 0x65, 0x6e, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x65, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x20, - 0x41, 0x50, 0x49, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x77, 0x72, 0x69, - 0x74, 0x65, 0x72, 0x60, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, - 0x70, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, - 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, - 0x2e, 0x0a, 0x23, 0x23, 0x23, 0x20, 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x20, 0x52, 0x65, 0x71, - 0x75, 0x65, 0x73, 0x74, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, - 0x74, 0x75, 0x61, 0x6c, 0x20, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x0a, 0x0a, 0x47, 0x69, 0x76, - 0x65, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x60, 0x60, 0x60, - 0x70, 0x79, 0x74, 0x68, 0x6f, 0x6e, 0x0a, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x73, 0x63, 0x68, 0x65, 0x6d, 0x61, 0x20, 0x31, 0x2e, 0x31, 0x0a, 0x0a, 0x74, 0x79, 0x70, - 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x0a, 0x0a, 0x74, 0x79, 0x70, 0x65, 0x20, 0x66, 0x6f, 0x6c, - 0x64, 0x65, 0x72, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x73, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x65, - 0x20, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, 0x72, 0x5d, 0x0a, 0x0a, - 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x65, 0x20, 0x70, 0x61, 0x72, 0x65, 0x6e, - 0x74, 0x3a, 0x20, 0x5b, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, 0x65, - 0x72, 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, 0x72, 0x5d, 0x20, 0x6f, 0x72, 0x20, 0x77, 0x72, 0x69, - 0x74, 0x65, 0x72, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x64, 0x65, 0x66, 0x69, - 0x6e, 0x65, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x3a, 0x20, 0x5b, 0x75, 0x73, 0x65, 0x72, - 0x5d, 0x20, 0x6f, 0x72, 0x20, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x20, 0x66, 0x72, 0x6f, 0x6d, 0x20, - 0x70, 0x61, 0x72, 0x65, 0x6e, 0x74, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x61, 0x6e, 0x64, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x61, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, - 0x73, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x5b, 0x7b, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x3a, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, - 0x6f, 0x62, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x66, 0x6f, 0x6c, - 0x64, 0x65, 0x72, 0x3a, 0x31, 0x22, 0x0a, 0x7d, 0x5d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x0a, 0x54, - 0x6f, 0x20, 0x65, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x60, 0x77, 0x72, - 0x69, 0x74, 0x65, 0x72, 0x73, 0x60, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, - 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x60, 0x20, 0x77, 0x68, 0x65, 0x6e, 0x20, 0x60, 0x64, 0x6f, 0x63, - 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x60, 0x20, 0x69, 0x73, 0x20, 0x70, 0x75, 0x74, 0x20, - 0x69, 0x6e, 0x20, 0x60, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x60, 0x2c, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x63, 0x6f, - 0x75, 0x6c, 0x64, 0x20, 0x62, 0x65, 0x0a, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, - 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, 0x3a, - 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, - 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x22, 0x2c, 0x0a, 0x20, - 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, - 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x22, - 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, - 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, - 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, - 0x3a, 0x20, 0x22, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x22, 0x2c, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, - 0x3a, 0x20, 0x22, 0x70, 0x61, 0x72, 0x65, 0x6e, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x64, - 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, - 0x60, 0x60, 0x0a, 0x74, 0x68, 0x69, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x3a, - 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x72, - 0x65, 0x65, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x6f, 0x6f, 0x74, - 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6e, 0x61, 0x6d, 0x65, - 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x23, 0x77, - 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, - 0x6e, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x6e, 0x6f, 0x64, 0x65, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, - 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x23, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x2c, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6c, 0x65, - 0x61, 0x66, 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, 0x3a, 0x20, 0x7b, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, - 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, - 0x3a, 0x31, 0x23, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6c, 0x65, 0x61, 0x66, 0x22, 0x3a, 0x20, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x54, 0x6f, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, - 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x65, 0x74, 0x22, 0x3a, 0x20, - 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x23, 0x70, 0x61, 0x72, 0x65, - 0x6e, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x22, 0x3a, - 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, - 0x73, 0x65, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x23, - 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, - 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x54, 0x68, 0x69, 0x73, 0x20, 0x74, 0x65, - 0x6c, 0x6c, 0x73, 0x20, 0x75, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x60, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x60, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x66, 0x6f, 0x6c, 0x64, - 0x65, 0x72, 0x3a, 0x31, 0x60, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x62, - 0x65, 0x20, 0x61, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x2e, 0x20, 0x53, 0x6f, 0x20, 0x6f, - 0x75, 0x72, 0x20, 0x6e, 0x65, 0x78, 0x74, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x63, 0x6f, 0x75, - 0x6c, 0x64, 0x20, 0x62, 0x65, 0x20, 0x74, 0x6f, 0x20, 0x66, 0x69, 0x6e, 0x64, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x60, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x73, 0x60, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x66, - 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x60, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, - 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x22, - 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, - 0x3a, 0x20, 0x22, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x22, 0x2c, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x6f, - 0x77, 0x6e, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, - 0x77, 0x68, 0x69, 0x63, 0x68, 0x20, 0x67, 0x69, 0x76, 0x65, 0x73, 0x0a, 0x60, 0x60, 0x60, 0x6a, - 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x72, 0x65, 0x65, 0x22, 0x3a, 0x20, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x6f, 0x6f, 0x74, 0x22, 0x3a, 0x20, 0x7b, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x3a, 0x20, 0x22, 0x66, - 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x23, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x22, 0x2c, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6c, 0x65, 0x61, 0x66, 0x22, 0x3a, 0x20, 0x7b, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, 0x3a, - 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, - 0x65, 0x72, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x0a, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x06, 0x45, - 0x78, 0x70, 0x61, 0x6e, 0x64, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x1e, 0x3a, 0x01, 0x2a, 0x22, 0x19, - 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, - 0x64, 0x7d, 0x2f, 0x65, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x12, 0x82, 0x0b, 0x0a, 0x17, 0x52, 0x65, - 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, - 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0x2a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, - 0x74, 0x1a, 0x2b, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x22, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x3a, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, + 0x74, 0x3a, 0x31, 0x23, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6c, 0x65, 0x61, 0x66, 0x22, 0x3a, + 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x54, 0x6f, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, + 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x65, 0x74, 0x22, 0x3a, + 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x31, 0x23, 0x70, 0x61, 0x72, + 0x65, 0x6e, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x22, + 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, + 0x72, 0x73, 0x65, 0x74, 0x22, 0x3a, 0x20, 0x22, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, + 0x23, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, + 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x54, 0x68, 0x69, 0x73, 0x20, 0x74, + 0x65, 0x6c, 0x6c, 0x73, 0x20, 0x75, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x60, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x60, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x66, 0x6f, 0x6c, + 0x64, 0x65, 0x72, 0x3a, 0x31, 0x60, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, + 0x62, 0x65, 0x20, 0x61, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x2e, 0x20, 0x53, 0x6f, 0x20, + 0x6f, 0x75, 0x72, 0x20, 0x6e, 0x65, 0x78, 0x74, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x63, 0x6f, + 0x75, 0x6c, 0x64, 0x20, 0x62, 0x65, 0x20, 0x74, 0x6f, 0x20, 0x66, 0x69, 0x6e, 0x64, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x60, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x73, 0x60, 0x20, 0x6f, 0x66, 0x20, 0x60, + 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x60, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, + 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x5f, 0x6b, 0x65, 0x79, + 0x22, 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, + 0x22, 0x3a, 0x20, 0x22, 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x22, 0x2c, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x20, 0x22, + 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, + 0x0a, 0x77, 0x68, 0x69, 0x63, 0x68, 0x20, 0x67, 0x69, 0x76, 0x65, 0x73, 0x0a, 0x60, 0x60, 0x60, + 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x72, 0x65, 0x65, 0x22, 0x3a, + 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x6f, 0x6f, 0x74, 0x22, 0x3a, 0x20, 0x7b, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x3a, 0x20, 0x22, + 0x66, 0x6f, 0x6c, 0x64, 0x65, 0x72, 0x3a, 0x31, 0x23, 0x6f, 0x77, 0x6e, 0x65, 0x72, 0x22, 0x2c, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6c, 0x65, 0x61, 0x66, 0x22, 0x3a, 0x20, 0x7b, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, + 0x3a, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, + 0x73, 0x65, 0x72, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x62, 0x6f, 0x62, 0x22, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x06, + 0x45, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x1e, 0x3a, 0x01, 0x2a, 0x22, + 0x19, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, + 0x69, 0x64, 0x7d, 0x2f, 0x65, 0x78, 0x70, 0x61, 0x6e, 0x64, 0x12, 0x82, 0x0b, 0x0a, 0x17, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x8d, - 0x0a, 0x92, 0x41, 0xda, 0x09, 0x0a, 0x14, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0x3a, 0x52, 0x65, 0x74, - 0x75, 0x72, 0x6e, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, - 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, - 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, 0x6c, 0x61, - 0x72, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, 0xec, 0x08, 0x54, 0x68, 0x65, 0x20, 0x52, 0x65, - 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, - 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, - 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, - 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, - 0x6c, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, - 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x27, - 0x73, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, - 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, - 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x2c, 0x20, 0x73, 0x6f, - 0x72, 0x74, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x64, 0x65, 0x73, 0x63, 0x65, 0x6e, 0x64, 0x69, - 0x6e, 0x67, 0x20, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x20, 0x6f, 0x66, 0x20, 0x63, 0x72, 0x65, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x0a, 0x0a, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, - 0x65, 0x0a, 0x41, 0x73, 0x73, 0x75, 0x6d, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, 0x20, - 0x73, 0x74, 0x6f, 0x72, 0x65, 0x27, 0x73, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x68, 0x61, 0x73, 0x20, - 0x62, 0x65, 0x65, 0x6e, 0x20, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x75, 0x72, 0x65, 0x64, 0x20, - 0x74, 0x77, 0x69, 0x63, 0x65, 0x2e, 0x20, 0x54, 0x6f, 0x20, 0x67, 0x65, 0x74, 0x20, 0x61, 0x6c, - 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x68, 0x61, 0x76, 0x65, 0x20, 0x62, 0x65, 0x65, 0x6e, 0x20, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, - 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x69, 0x73, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2c, - 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x47, 0x45, 0x54, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, - 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2d, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x2e, 0x20, - 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, - 0x75, 0x72, 0x6e, 0x20, 0x61, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x74, - 0x68, 0x61, 0x74, 0x20, 0x6c, 0x6f, 0x6f, 0x6b, 0x73, 0x20, 0x6c, 0x69, 0x6b, 0x65, 0x3a, 0x0a, - 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, 0x74, - 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, - 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x22, 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, 0x56, - 0x56, 0x31, 0x37, 0x50, 0x45, 0x43, 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, 0x59, - 0x35, 0x4e, 0x43, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, - 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x20, - 0x5b, 0x2e, 0x2e, 0x2e, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, - 0x30, 0x31, 0x47, 0x34, 0x5a, 0x57, 0x38, 0x46, 0x34, 0x41, 0x30, 0x37, 0x41, 0x4b, 0x51, 0x38, - 0x52, 0x48, 0x53, 0x56, 0x47, 0x39, 0x52, 0x57, 0x30, 0x34, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, - 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x2e, 0x2e, 0x2e, 0x5d, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, - 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x3a, - 0x20, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, 0x45, - 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, 0x31, - 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, 0x69, - 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, 0x58, - 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, 0x30, - 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, 0x51, - 0x3d, 0x3d, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x49, 0x66, 0x20, 0x74, 0x68, 0x65, - 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x61, + 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0x2a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, + 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, + 0x73, 0x74, 0x1a, 0x2b, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, + 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, + 0x8d, 0x0a, 0x92, 0x41, 0xda, 0x09, 0x0a, 0x14, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0x3a, 0x52, 0x65, + 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, 0x74, + 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, + 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, 0x6c, + 0x61, 0x72, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, 0xec, 0x08, 0x54, 0x68, 0x65, 0x20, 0x52, + 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, + 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, - 0x65, 0x6c, 0x73, 0x20, 0x61, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x2c, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x60, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x77, 0x69, - 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x0a, 0x60, 0x60, 0x60, 0x6a, - 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, - 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x22, 0x3a, 0x20, - 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x69, - 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, 0x56, 0x56, 0x31, 0x37, 0x50, - 0x45, 0x43, 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, 0x59, 0x35, 0x4e, 0x43, 0x22, - 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, - 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x2e, 0x2e, 0x2e, - 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x34, - 0x5a, 0x57, 0x38, 0x46, 0x34, 0x41, 0x30, 0x37, 0x41, 0x4b, 0x51, 0x38, 0x52, 0x48, 0x53, 0x56, - 0x47, 0x39, 0x52, 0x57, 0x30, 0x34, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, - 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, - 0x22, 0x3a, 0x20, 0x5b, 0x2e, 0x2e, 0x2e, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, - 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x22, 0x0a, - 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x17, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, - 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x82, - 0xd3, 0xe4, 0x93, 0x02, 0x29, 0x12, 0x27, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, - 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, - 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2d, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0x84, - 0x0b, 0x0a, 0x16, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x12, 0x29, 0x2e, 0x6f, 0x70, 0x65, 0x6e, - 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, - 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, 0x71, - 0x75, 0x65, 0x73, 0x74, 0x1a, 0x2a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, - 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, - 0x22, 0x92, 0x0a, 0x92, 0x41, 0xda, 0x09, 0x0a, 0x14, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, - 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0x35, 0x52, - 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, 0x6c, - 0x61, 0x72, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6e, - 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, - 0x6f, 0x64, 0x65, 0x6c, 0x1a, 0xf2, 0x08, 0x54, 0x68, 0x65, 0x20, 0x52, 0x65, 0x61, 0x64, 0x41, - 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, - 0x6c, 0x20, 0x41, 0x50, 0x49, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, 0x6e, - 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, - 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x62, 0x79, 0x20, 0x69, 0x74, 0x73, 0x20, 0x69, 0x64, 0x65, 0x6e, - 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, - 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, 0x6c, 0x61, 0x72, 0x20, 0x76, 0x65, 0x72, 0x73, - 0x69, 0x6f, 0x6e, 0x2e, 0x0a, 0x0a, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, - 0x0a, 0x54, 0x6f, 0x20, 0x72, 0x65, 0x74, 0x72, 0x69, 0x65, 0x76, 0x65, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, - 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x49, 0x44, 0x20, 0x60, 0x30, 0x31, - 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, - 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, 0x31, 0x4a, 0x60, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x47, 0x45, 0x54, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x2d, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x20, 0x62, 0x79, 0x20, 0x49, 0x44, - 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, 0x30, 0x31, 0x47, 0x35, 0x4a, - 0x41, 0x56, 0x4a, 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, - 0x53, 0x37, 0x58, 0x31, 0x4a, 0x60, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x69, - 0x64, 0x60, 0x20, 0x70, 0x61, 0x74, 0x68, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, - 0x72, 0x2e, 0x20, 0x20, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, - 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x3a, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, - 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x69, 0x64, 0x22, 0x3a, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, 0x34, - 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, 0x31, - 0x4a, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, - 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x5b, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, - 0x70, 0x65, 0x22, 0x3a, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x64, 0x6f, 0x63, 0x75, - 0x6d, 0x65, 0x6e, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, - 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x3a, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, - 0x6e, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x68, 0x69, 0x6c, 0x64, 0x22, 0x3a, 0x5b, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, + 0x65, 0x6c, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, + 0x6e, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, + 0x27, 0x73, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, + 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x72, 0x72, 0x61, + 0x79, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, + 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x2c, 0x20, 0x73, + 0x6f, 0x72, 0x74, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x64, 0x65, 0x73, 0x63, 0x65, 0x6e, 0x64, + 0x69, 0x6e, 0x67, 0x20, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x20, 0x6f, 0x66, 0x20, 0x63, 0x72, 0x65, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x0a, 0x0a, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, + 0x6c, 0x65, 0x0a, 0x41, 0x73, 0x73, 0x75, 0x6d, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, + 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x27, 0x73, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, + 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x68, 0x61, 0x73, + 0x20, 0x62, 0x65, 0x65, 0x6e, 0x20, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x75, 0x72, 0x65, 0x64, + 0x20, 0x74, 0x77, 0x69, 0x63, 0x65, 0x2e, 0x20, 0x54, 0x6f, 0x20, 0x67, 0x65, 0x74, 0x20, 0x61, + 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, + 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x62, 0x65, 0x65, 0x6e, 0x20, 0x63, 0x72, 0x65, 0x61, 0x74, + 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x69, 0x73, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, + 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x47, 0x45, 0x54, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, + 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2d, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x2e, + 0x20, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, + 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, + 0x74, 0x68, 0x61, 0x74, 0x20, 0x6c, 0x6f, 0x6f, 0x6b, 0x73, 0x20, 0x6c, 0x69, 0x6b, 0x65, 0x3a, + 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, + 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, + 0x6c, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x22, 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, + 0x56, 0x56, 0x31, 0x37, 0x50, 0x45, 0x43, 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, + 0x59, 0x35, 0x4e, 0x43, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, + 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, + 0x20, 0x5b, 0x2e, 0x2e, 0x2e, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x69, 0x64, 0x22, 0x3a, 0x20, + 0x22, 0x30, 0x31, 0x47, 0x34, 0x5a, 0x57, 0x38, 0x46, 0x34, 0x41, 0x30, 0x37, 0x41, 0x4b, 0x51, + 0x38, 0x52, 0x48, 0x53, 0x56, 0x47, 0x39, 0x52, 0x57, 0x30, 0x34, 0x22, 0x2c, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, + 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x2e, 0x2e, 0x2e, 0x5d, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, + 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, + 0x3a, 0x20, 0x22, 0x65, 0x79, 0x4a, 0x77, 0x61, 0x79, 0x49, 0x36, 0x49, 0x6b, 0x78, 0x42, 0x56, + 0x45, 0x56, 0x54, 0x56, 0x46, 0x39, 0x4f, 0x55, 0x30, 0x4e, 0x50, 0x54, 0x6b, 0x5a, 0x4a, 0x52, + 0x31, 0x39, 0x68, 0x64, 0x58, 0x52, 0x6f, 0x4d, 0x48, 0x4e, 0x30, 0x62, 0x33, 0x4a, 0x6c, 0x49, + 0x69, 0x77, 0x69, 0x63, 0x32, 0x73, 0x69, 0x4f, 0x69, 0x49, 0x78, 0x65, 0x6d, 0x31, 0x71, 0x62, + 0x58, 0x46, 0x33, 0x4d, 0x57, 0x5a, 0x4c, 0x5a, 0x45, 0x78, 0x54, 0x63, 0x55, 0x6f, 0x79, 0x4e, + 0x30, 0x31, 0x4d, 0x64, 0x54, 0x64, 0x71, 0x54, 0x6a, 0x68, 0x30, 0x63, 0x57, 0x67, 0x69, 0x66, + 0x51, 0x3d, 0x3d, 0x22, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x49, 0x66, 0x20, 0x74, 0x68, + 0x65, 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, + 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, + 0x64, 0x65, 0x6c, 0x73, 0x20, 0x61, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x2c, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x60, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x77, + 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x0a, 0x60, 0x60, 0x60, + 0x6a, 0x73, 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, + 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x22, 0x3a, + 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, + 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, 0x56, 0x56, 0x31, 0x37, + 0x50, 0x45, 0x43, 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, 0x59, 0x35, 0x4e, 0x43, + 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, + 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x2e, 0x2e, + 0x2e, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x69, 0x64, 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, + 0x34, 0x5a, 0x57, 0x38, 0x46, 0x34, 0x41, 0x30, 0x37, 0x41, 0x4b, 0x51, 0x38, 0x52, 0x48, 0x53, + 0x56, 0x47, 0x39, 0x52, 0x57, 0x30, 0x34, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x22, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, + 0x73, 0x22, 0x3a, 0x20, 0x5b, 0x2e, 0x2e, 0x2e, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, + 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x22, 0x3a, 0x20, 0x22, 0x22, + 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x17, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, + 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, + 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x29, 0x12, 0x27, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, + 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x61, 0x75, 0x74, 0x68, 0x6f, + 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2d, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, + 0x84, 0x0b, 0x0a, 0x16, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x12, 0x29, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, + 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, + 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x2a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, + 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, + 0x65, 0x22, 0x92, 0x0a, 0x92, 0x41, 0xda, 0x09, 0x0a, 0x14, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, + 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0x35, + 0x52, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, + 0x6c, 0x61, 0x72, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x20, 0x6f, 0x66, 0x20, 0x61, + 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, + 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x1a, 0xf2, 0x08, 0x54, 0x68, 0x65, 0x20, 0x52, 0x65, 0x61, 0x64, + 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, + 0x65, 0x6c, 0x20, 0x41, 0x50, 0x49, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, + 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, + 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x62, 0x79, 0x20, 0x69, 0x74, 0x73, 0x20, 0x69, 0x64, 0x65, + 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, + 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, + 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x75, 0x6c, 0x61, 0x72, 0x20, 0x76, 0x65, 0x72, + 0x73, 0x69, 0x6f, 0x6e, 0x2e, 0x0a, 0x0a, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, + 0x65, 0x0a, 0x54, 0x6f, 0x20, 0x72, 0x65, 0x74, 0x72, 0x69, 0x65, 0x76, 0x65, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, + 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x49, 0x44, 0x20, 0x60, 0x30, + 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, + 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, 0x31, 0x4a, 0x60, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x47, 0x45, 0x54, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x2d, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x20, 0x62, 0x79, 0x20, 0x49, + 0x44, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, 0x30, 0x31, 0x47, 0x35, + 0x4a, 0x41, 0x56, 0x4a, 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, + 0x56, 0x53, 0x37, 0x58, 0x31, 0x4a, 0x60, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, + 0x69, 0x64, 0x60, 0x20, 0x70, 0x61, 0x74, 0x68, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, + 0x65, 0x72, 0x2e, 0x20, 0x20, 0x54, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, + 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x3a, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, + 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x69, 0x64, 0x22, 0x3a, 0x22, 0x30, 0x31, 0x47, 0x35, 0x4a, 0x41, 0x56, 0x4a, + 0x34, 0x31, 0x54, 0x34, 0x39, 0x45, 0x39, 0x54, 0x54, 0x33, 0x53, 0x4b, 0x56, 0x53, 0x37, 0x58, + 0x31, 0x4a, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, + 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x5b, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, + 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x75, 0x73, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x64, 0x6f, 0x63, + 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, + 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, + 0x75, 0x6e, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x68, 0x69, 0x6c, 0x64, 0x22, 0x3a, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x55, 0x73, - 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, - 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, - 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, - 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x77, 0x72, - 0x69, 0x74, 0x65, 0x72, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x5d, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x49, 0x6e, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x61, 0x62, 0x6f, 0x76, 0x65, 0x20, 0x65, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, - 0x2c, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x32, 0x20, 0x74, 0x79, - 0x70, 0x65, 0x73, 0x20, 0x28, 0x60, 0x75, 0x73, 0x65, 0x72, 0x60, 0x20, 0x61, 0x6e, 0x64, 0x20, - 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x60, 0x29, 0x2e, 0x20, 0x54, 0x68, 0x65, - 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x60, 0x20, 0x74, 0x79, 0x70, 0x65, - 0x20, 0x68, 0x61, 0x73, 0x20, 0x32, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, - 0x20, 0x28, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x60, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x60, - 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x29, 0x2e, 0x2a, 0x16, 0x52, 0x65, 0x61, 0x64, 0x41, - 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, - 0x6c, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x2e, 0x12, 0x2c, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, - 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x61, 0x75, 0x74, 0x68, - 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2d, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, - 0x2f, 0x7b, 0x69, 0x64, 0x7d, 0x12, 0xf9, 0x0a, 0x0a, 0x17, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, - 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, - 0x6c, 0x12, 0x2a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, - 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x2b, 0x2e, - 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, + 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, 0x55, + 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, + 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, + 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, + 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x77, + 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x5d, 0x0a, 0x20, 0x20, 0x7d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x49, 0x6e, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x61, 0x62, 0x6f, 0x76, 0x65, 0x20, 0x65, 0x78, 0x61, 0x6d, 0x70, 0x6c, + 0x65, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x32, 0x20, 0x74, + 0x79, 0x70, 0x65, 0x73, 0x20, 0x28, 0x60, 0x75, 0x73, 0x65, 0x72, 0x60, 0x20, 0x61, 0x6e, 0x64, + 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x60, 0x29, 0x2e, 0x20, 0x54, 0x68, + 0x65, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x60, 0x20, 0x74, 0x79, 0x70, + 0x65, 0x20, 0x68, 0x61, 0x73, 0x20, 0x32, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x73, 0x20, 0x28, 0x60, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x60, 0x20, 0x61, 0x6e, 0x64, 0x20, + 0x60, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x60, 0x29, 0x2e, 0x2a, 0x16, 0x52, 0x65, 0x61, 0x64, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, - 0x65, 0x6c, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x84, 0x0a, 0x92, 0x41, 0xce, - 0x09, 0x0a, 0x14, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x20, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0x20, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x20, - 0x61, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x1a, 0xa8, 0x08, 0x54, 0x68, 0x65, 0x20, - 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, - 0x20, 0x61, 0x64, 0x64, 0x20, 0x61, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, - 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x74, - 0x6f, 0x20, 0x61, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x0a, 0x45, 0x61, 0x63, 0x68, 0x20, - 0x69, 0x74, 0x65, 0x6d, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x74, 0x79, 0x70, - 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x60, 0x20, 0x61, - 0x72, 0x72, 0x61, 0x79, 0x20, 0x69, 0x73, 0x20, 0x61, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, - 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x61, 0x73, 0x20, 0x73, 0x70, 0x65, - 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, - 0x65, 0x6c, 0x64, 0x20, 0x60, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, - 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, - 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x27, 0x73, 0x20, 0x49, 0x44, 0x20, 0x69, 0x6e, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x60, 0x69, 0x64, 0x60, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x2e, 0x0a, - 0x0a, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x0a, 0x54, 0x6f, 0x20, 0x61, - 0x64, 0x64, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x60, - 0x75, 0x73, 0x65, 0x72, 0x60, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, - 0x65, 0x6e, 0x74, 0x60, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, - 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x50, 0x4f, 0x53, 0x54, - 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2d, 0x6d, - 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x3a, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, 0x6f, - 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, - 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7b, - 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x75, - 0x73, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, - 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x7b, 0x0a, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, 0x3a, - 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x6e, 0x69, - 0x6f, 0x6e, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x22, 0x63, 0x68, 0x69, 0x6c, 0x64, 0x22, 0x3a, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x68, 0x69, - 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, 0x64, - 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, 0x62, - 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, - 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x0a, 0x20, 0x20, - 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, - 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x5d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, 0x0a, - 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x27, 0x73, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, - 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, 0x65, 0x20, - 0x74, 0x68, 0x65, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x20, 0x69, 0x64, 0x20, 0x66, - 0x6f, 0x72, 0x20, 0x74, 0x68, 0x69, 0x73, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x2c, 0x20, 0x77, 0x68, 0x69, - 0x63, 0x68, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x6c, 0x6f, 0x6f, 0x6b, 0x20, 0x6c, 0x69, 0x6b, - 0x65, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x7b, 0x22, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, - 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x22, - 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, 0x56, 0x56, 0x31, 0x37, 0x50, 0x45, 0x43, - 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, 0x59, 0x35, 0x4e, 0x43, 0x22, 0x7d, 0x0a, - 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x17, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, - 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x4a, 0x50, 0x0a, - 0x03, 0x32, 0x30, 0x31, 0x12, 0x49, 0x0a, 0x16, 0x41, 0x20, 0x73, 0x75, 0x63, 0x63, 0x65, 0x73, - 0x73, 0x66, 0x75, 0x6c, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x12, 0x2f, - 0x0a, 0x2d, 0x1a, 0x2b, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, - 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x82, - 0xd3, 0xe4, 0x93, 0x02, 0x2c, 0x3a, 0x01, 0x2a, 0x22, 0x27, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, + 0x65, 0x6c, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x2e, 0x12, 0x2c, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2d, 0x6d, 0x6f, 0x64, 0x65, 0x6c, - 0x73, 0x12, 0xef, 0x04, 0x0a, 0x0f, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, 0x73, 0x65, 0x72, - 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x22, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x23, 0x2e, 0x6f, 0x70, 0x65, 0x6e, - 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, 0x73, 0x65, - 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x92, - 0x04, 0x92, 0x41, 0xcd, 0x03, 0x0a, 0x0a, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, - 0x73, 0x12, 0x2f, 0x55, 0x70, 0x73, 0x65, 0x72, 0x74, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, - 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, + 0x73, 0x2f, 0x7b, 0x69, 0x64, 0x7d, 0x12, 0xf9, 0x0a, 0x0a, 0x17, 0x57, 0x72, 0x69, 0x74, 0x65, + 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, + 0x65, 0x6c, 0x12, 0x2a, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, + 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x2b, + 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, + 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, + 0x64, 0x65, 0x6c, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x84, 0x0a, 0x92, 0x41, + 0xce, 0x09, 0x0a, 0x14, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x20, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x12, 0x20, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, + 0x20, 0x61, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x1a, 0xa8, 0x08, 0x54, 0x68, 0x65, + 0x20, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, + 0x6c, 0x20, 0x61, 0x64, 0x64, 0x20, 0x61, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, - 0x49, 0x44, 0x1a, 0xb2, 0x02, 0x54, 0x68, 0x65, 0x20, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, - 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, - 0x6c, 0x20, 0x75, 0x70, 0x73, 0x65, 0x72, 0x74, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x61, 0x73, 0x73, - 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6e, 0x20, 0x61, - 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, - 0x65, 0x6c, 0x20, 0x69, 0x64, 0x2c, 0x20, 0x6f, 0x72, 0x20, 0x6f, 0x76, 0x65, 0x72, 0x77, 0x72, - 0x69, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x69, 0x6e, 0x67, - 0x20, 0x6f, 0x6e, 0x65, 0x73, 0x2e, 0x20, 0x41, 0x6e, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, - 0x69, 0x6f, 0x6e, 0x20, 0x69, 0x73, 0x20, 0x61, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, - 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x73, 0x20, 0x61, - 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x6b, 0x65, 0x79, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x65, 0x78, 0x70, 0x65, 0x63, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6f, 0x66, 0x20, 0x77, - 0x68, 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x61, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x6f, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x6f, - 0x66, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x6b, 0x65, 0x79, - 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x74, 0x72, 0x75, - 0x65, 0x20, 0x6f, 0x72, 0x20, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, - 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x6c, 0x79, 0x20, 0x61, 0x20, 0x6c, 0x69, 0x73, - 0x74, 0x20, 0x6f, 0x66, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x20, - 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x2a, 0x0f, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, - 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x4a, 0x48, 0x0a, 0x03, 0x32, 0x30, 0x34, 0x12, - 0x41, 0x0a, 0x16, 0x41, 0x20, 0x73, 0x75, 0x63, 0x63, 0x65, 0x73, 0x73, 0x66, 0x75, 0x6c, 0x20, - 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x12, 0x27, 0x0a, 0x25, 0x1a, 0x23, 0x2e, - 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, - 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, - 0x73, 0x65, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x3b, 0x3a, 0x01, 0x2a, 0x1a, 0x36, 0x2f, 0x73, 0x74, - 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, - 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x7b, 0x61, 0x75, 0x74, 0x68, - 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, - 0x69, 0x64, 0x7d, 0x12, 0xd3, 0x02, 0x0a, 0x0e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, - 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x21, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, - 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x22, 0x2e, 0x6f, 0x70, 0x65, 0x6e, - 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, 0x72, - 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0xf9, 0x01, - 0x92, 0x41, 0xb7, 0x01, 0x0a, 0x0a, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, - 0x12, 0x2d, 0x52, 0x65, 0x61, 0x64, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, - 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, - 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x49, 0x44, 0x1a, - 0x6a, 0x54, 0x68, 0x65, 0x20, 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, - 0x6f, 0x6e, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, - 0x75, 0x72, 0x6e, 0x2c, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, - 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, - 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x69, 0x64, 0x2c, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x73, 0x74, 0x6f, 0x72, - 0x65, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x69, 0x74, 0x2e, 0x20, 0x2a, 0x0e, 0x52, 0x65, 0x61, - 0x64, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x82, 0xd3, 0xe4, 0x93, 0x02, - 0x38, 0x12, 0x36, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, - 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, - 0x2f, 0x7b, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, - 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x7d, 0x12, 0xe3, 0x07, 0x0a, 0x0b, 0x52, 0x65, - 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x12, 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, - 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, - 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1f, 0x2e, 0x6f, 0x70, 0x65, 0x6e, - 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, - 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x92, 0x07, 0x92, 0x41, 0xec, - 0x06, 0x0a, 0x13, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, - 0x54, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x12, 0x26, 0x52, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x61, - 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x1a, 0x9f, - 0x06, 0x54, 0x68, 0x65, 0x20, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, - 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, - 0x20, 0x61, 0x20, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x65, 0x64, 0x20, 0x6c, 0x69, 0x73, - 0x74, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, - 0x65, 0x73, 0x20, 0x28, 0x61, 0x64, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x61, 0x6e, - 0x64, 0x20, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x29, 0x20, 0x74, 0x68, 0x61, - 0x74, 0x20, 0x6f, 0x63, 0x63, 0x75, 0x72, 0x72, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x61, 0x20, - 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2c, 0x20, 0x73, 0x6f, 0x72, - 0x74, 0x65, 0x64, 0x20, 0x62, 0x79, 0x20, 0x61, 0x73, 0x63, 0x65, 0x6e, 0x64, 0x69, 0x6e, 0x67, - 0x20, 0x74, 0x69, 0x6d, 0x65, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, + 0x74, 0x6f, 0x20, 0x61, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x0a, 0x45, 0x61, 0x63, 0x68, + 0x20, 0x69, 0x74, 0x65, 0x6d, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x74, 0x79, + 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x60, 0x20, + 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x69, 0x73, 0x20, 0x61, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, + 0x64, 0x65, 0x66, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x61, 0x73, 0x20, 0x73, 0x70, + 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, + 0x69, 0x65, 0x6c, 0x64, 0x20, 0x60, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, 0x69, 0x6e, + 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, + 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x27, 0x73, 0x20, 0x49, 0x44, 0x20, 0x69, 0x6e, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x69, 0x64, 0x60, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x2e, + 0x0a, 0x0a, 0x23, 0x23, 0x20, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x0a, 0x54, 0x6f, 0x20, + 0x61, 0x64, 0x64, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, + 0x60, 0x75, 0x73, 0x65, 0x72, 0x60, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, + 0x6d, 0x65, 0x6e, 0x74, 0x60, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x64, 0x65, 0x66, 0x69, 0x6e, + 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x50, 0x4f, 0x53, + 0x54, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2d, + 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x3a, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x6a, 0x73, + 0x6f, 0x6e, 0x0a, 0x7b, 0x0a, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, 0x66, + 0x69, 0x6e, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, + 0x75, 0x73, 0x65, 0x72, 0x22, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, + 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x22, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x7b, 0x0a, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, 0x61, 0x64, 0x65, 0x72, 0x22, + 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x75, 0x6e, + 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x22, 0x63, 0x68, 0x69, 0x6c, 0x64, 0x22, 0x3a, 0x5b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x68, + 0x69, 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x63, 0x6f, 0x6d, 0x70, 0x75, 0x74, 0x65, + 0x64, 0x55, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x6f, + 0x62, 0x6a, 0x65, 0x63, 0x74, 0x22, 0x3a, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x72, 0x65, + 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x5d, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x22, 0x77, 0x72, 0x69, 0x74, 0x65, 0x72, 0x22, 0x3a, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x22, 0x74, 0x68, 0x69, 0x73, 0x22, 0x3a, 0x7b, 0x7d, 0x0a, 0x20, + 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d, + 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x5d, 0x0a, 0x7d, 0x0a, 0x60, 0x60, 0x60, + 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x27, 0x73, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, 0x65, - 0x20, 0x61, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, - 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x69, 0x73, 0x20, 0x75, 0x73, - 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x67, 0x65, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6e, 0x65, - 0x78, 0x74, 0x20, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, - 0x73, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, - 0x6e, 0x6f, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x20, 0x61, 0x66, 0x74, 0x65, 0x72, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x64, 0x20, 0x63, 0x6f, - 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, - 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x61, 0x6d, 0x65, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, - 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, - 0x64, 0x20, 0x69, 0x6e, 0x20, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x69, - 0x74, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x77, 0x68, 0x65, - 0x6e, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x20, 0x61, 0x72, - 0x65, 0x20, 0x72, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x65, 0x64, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x20, 0x6e, 0x65, 0x76, 0x65, 0x72, 0x20, 0x68, - 0x61, 0x64, 0x20, 0x61, 0x6e, 0x79, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x61, 0x64, - 0x64, 0x65, 0x64, 0x20, 0x6f, 0x72, 0x20, 0x72, 0x65, 0x6d, 0x6f, 0x76, 0x65, 0x64, 0x2c, 0x20, - 0x74, 0x68, 0x69, 0x73, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, - 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x63, 0x61, - 0x6e, 0x20, 0x75, 0x73, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x74, 0x79, 0x70, 0x65, 0x60, - 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x20, 0x74, 0x6f, 0x20, 0x6f, 0x6e, - 0x6c, 0x79, 0x20, 0x67, 0x65, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, - 0x6f, 0x66, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, - 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, 0x66, 0x66, 0x65, 0x63, 0x74, 0x20, 0x6f, 0x62, 0x6a, - 0x65, 0x63, 0x74, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x79, 0x70, - 0x65, 0x2e, 0x0a, 0x57, 0x68, 0x65, 0x6e, 0x20, 0x72, 0x65, 0x61, 0x64, 0x69, 0x6e, 0x67, 0x20, - 0x61, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, 0x68, - 0x61, 0x6e, 0x67, 0x65, 0x2c, 0x20, 0x69, 0x66, 0x20, 0x69, 0x74, 0x20, 0x77, 0x61, 0x73, 0x20, - 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, - 0x62, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, 0x2e, 0x0a, 0x57, 0x68, 0x65, - 0x6e, 0x20, 0x72, 0x65, 0x61, 0x64, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x64, 0x65, 0x6c, 0x65, - 0x74, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x2c, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x77, - 0x69, 0x6c, 0x6c, 0x20, 0x4e, 0x4f, 0x54, 0x20, 0x62, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, - 0x6e, 0x65, 0x64, 0x20, 0x72, 0x65, 0x67, 0x61, 0x72, 0x64, 0x6c, 0x65, 0x73, 0x73, 0x20, 0x6f, - 0x66, 0x20, 0x77, 0x68, 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x69, 0x74, 0x20, 0x77, 0x61, 0x73, - 0x20, 0x6f, 0x72, 0x69, 0x67, 0x69, 0x6e, 0x61, 0x6c, 0x6c, 0x79, 0x20, 0x63, 0x6f, 0x6e, 0x64, - 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x20, 0x6f, 0x72, 0x20, 0x6e, 0x6f, 0x74, 0x2e, 0x0a, - 0x2a, 0x0b, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x82, 0xd3, 0xe4, - 0x93, 0x02, 0x1c, 0x12, 0x1a, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, - 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x12, - 0xbb, 0x02, 0x0a, 0x0b, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x12, - 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x72, 0x65, - 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, - 0x1f, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x72, 0x65, - 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, - 0x22, 0xea, 0x01, 0x92, 0x41, 0xd4, 0x01, 0x0a, 0x06, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, - 0x0e, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x20, 0x61, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, - 0x67, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x20, 0x61, 0x20, 0x75, 0x6e, 0x69, 0x71, 0x75, 0x65, - 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x20, 0x77, - 0x68, 0x69, 0x63, 0x68, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, - 0x64, 0x20, 0x74, 0x6f, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, - 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x20, - 0x61, 0x6e, 0x64, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, - 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x2a, 0x0b, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, - 0x53, 0x74, 0x6f, 0x72, 0x65, 0x4a, 0x44, 0x0a, 0x03, 0x32, 0x30, 0x31, 0x12, 0x3d, 0x0a, 0x16, - 0x41, 0x20, 0x73, 0x75, 0x63, 0x63, 0x65, 0x73, 0x73, 0x66, 0x75, 0x6c, 0x20, 0x72, 0x65, 0x73, - 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x12, 0x23, 0x0a, 0x21, 0x1a, 0x1f, 0x2e, 0x6f, 0x70, 0x65, - 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x53, 0x74, - 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x82, 0xd3, 0xe4, 0x93, 0x02, - 0x0c, 0x3a, 0x01, 0x2a, 0x22, 0x07, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x8e, 0x02, - 0x0a, 0x0b, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x12, 0x1e, 0x2e, - 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, - 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1f, 0x2e, - 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, - 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0xbd, - 0x01, 0x92, 0x41, 0x87, 0x01, 0x0a, 0x06, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x0e, 0x55, - 0x70, 0x64, 0x61, 0x74, 0x65, 0x20, 0x61, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, 0x1a, 0x55, - 0x70, 0x64, 0x61, 0x74, 0x65, 0x73, 0x20, 0x61, 0x6e, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x69, - 0x6e, 0x67, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x2a, 0x0b, 0x55, 0x70, 0x64, 0x61, 0x74, - 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x4a, 0x44, 0x0a, 0x03, 0x32, 0x30, 0x30, 0x12, 0x3d, 0x0a, + 0x20, 0x74, 0x68, 0x65, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x20, 0x69, 0x64, 0x20, + 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x69, 0x73, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, + 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x2c, 0x20, 0x77, 0x68, + 0x69, 0x63, 0x68, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x6c, 0x6f, 0x6f, 0x6b, 0x20, 0x6c, 0x69, + 0x6b, 0x65, 0x20, 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x7b, 0x22, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, + 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, + 0x22, 0x3a, 0x20, 0x22, 0x30, 0x31, 0x47, 0x35, 0x30, 0x51, 0x56, 0x56, 0x31, 0x37, 0x50, 0x45, + 0x43, 0x4e, 0x56, 0x41, 0x48, 0x58, 0x31, 0x47, 0x47, 0x34, 0x59, 0x35, 0x4e, 0x43, 0x22, 0x7d, + 0x0a, 0x60, 0x60, 0x60, 0x0a, 0x2a, 0x17, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, + 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x4a, 0x50, + 0x0a, 0x03, 0x32, 0x30, 0x31, 0x12, 0x49, 0x0a, 0x16, 0x41, 0x20, 0x73, 0x75, 0x63, 0x63, 0x65, + 0x73, 0x73, 0x66, 0x75, 0x6c, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x12, + 0x2f, 0x0a, 0x2d, 0x1a, 0x2b, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, + 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x6c, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, + 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x2c, 0x3a, 0x01, 0x2a, 0x22, 0x27, 0x2f, 0x73, 0x74, 0x6f, 0x72, + 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x61, 0x75, + 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2d, 0x6d, 0x6f, 0x64, 0x65, + 0x6c, 0x73, 0x12, 0xef, 0x04, 0x0a, 0x0f, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, 0x73, 0x65, + 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x22, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, + 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x23, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, 0x73, 0x73, + 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, + 0x92, 0x04, 0x92, 0x41, 0xcd, 0x03, 0x0a, 0x0a, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, + 0x6e, 0x73, 0x12, 0x2f, 0x55, 0x70, 0x73, 0x65, 0x72, 0x74, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, + 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, + 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, + 0x20, 0x49, 0x44, 0x1a, 0xb2, 0x02, 0x54, 0x68, 0x65, 0x20, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, + 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, + 0x6c, 0x6c, 0x20, 0x75, 0x70, 0x73, 0x65, 0x72, 0x74, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x61, 0x73, + 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6e, 0x20, + 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, + 0x64, 0x65, 0x6c, 0x20, 0x69, 0x64, 0x2c, 0x20, 0x6f, 0x72, 0x20, 0x6f, 0x76, 0x65, 0x72, 0x77, + 0x72, 0x69, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x69, 0x6e, + 0x67, 0x20, 0x6f, 0x6e, 0x65, 0x73, 0x2e, 0x20, 0x41, 0x6e, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, + 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x69, 0x73, 0x20, 0x61, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, + 0x74, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x73, 0x20, + 0x61, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x6b, 0x65, 0x79, 0x2c, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x65, 0x78, 0x70, 0x65, 0x63, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6f, 0x66, 0x20, + 0x77, 0x68, 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x61, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x20, 0x74, + 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, + 0x6f, 0x66, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x6b, 0x65, + 0x79, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, 0x74, 0x72, + 0x75, 0x65, 0x20, 0x6f, 0x72, 0x20, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x2c, 0x20, 0x61, 0x6e, 0x64, + 0x20, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x6c, 0x79, 0x20, 0x61, 0x20, 0x6c, 0x69, + 0x73, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, + 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x2a, 0x0f, 0x57, 0x72, 0x69, 0x74, 0x65, 0x41, + 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x4a, 0x48, 0x0a, 0x03, 0x32, 0x30, 0x34, + 0x12, 0x41, 0x0a, 0x16, 0x41, 0x20, 0x73, 0x75, 0x63, 0x63, 0x65, 0x73, 0x73, 0x66, 0x75, 0x6c, + 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x12, 0x27, 0x0a, 0x25, 0x1a, 0x23, + 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x57, 0x72, 0x69, 0x74, + 0x65, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, + 0x6e, 0x73, 0x65, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x3b, 0x3a, 0x01, 0x2a, 0x1a, 0x36, 0x2f, 0x73, + 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, + 0x2f, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x7b, 0x61, 0x75, 0x74, + 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, + 0x5f, 0x69, 0x64, 0x7d, 0x12, 0xd3, 0x02, 0x0a, 0x0e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, + 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x21, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, + 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x22, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, + 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0xf9, + 0x01, 0x92, 0x41, 0xb7, 0x01, 0x0a, 0x0a, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, + 0x73, 0x12, 0x2d, 0x52, 0x65, 0x61, 0x64, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, + 0x6e, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, + 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x49, 0x44, + 0x1a, 0x6a, 0x54, 0x68, 0x65, 0x20, 0x52, 0x65, 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, + 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, + 0x74, 0x75, 0x72, 0x6e, 0x2c, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x20, 0x67, 0x69, 0x76, 0x65, + 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, + 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x69, 0x64, 0x2c, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x73, 0x74, 0x6f, + 0x72, 0x65, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x69, 0x74, 0x2e, 0x20, 0x2a, 0x0e, 0x52, 0x65, + 0x61, 0x64, 0x41, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x82, 0xd3, 0xe4, 0x93, + 0x02, 0x38, 0x12, 0x36, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, + 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x61, 0x73, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, + 0x73, 0x2f, 0x7b, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x7d, 0x12, 0xe3, 0x07, 0x0a, 0x0b, 0x52, + 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x12, 0x1e, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, + 0x67, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1f, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, + 0x67, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x92, 0x07, 0x92, 0x41, + 0xec, 0x06, 0x0a, 0x13, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, + 0x20, 0x54, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x12, 0x26, 0x52, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x20, + 0x61, 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x1a, + 0x9f, 0x06, 0x54, 0x68, 0x65, 0x20, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, + 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, + 0x6e, 0x20, 0x61, 0x20, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x65, 0x64, 0x20, 0x6c, 0x69, + 0x73, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, 0x68, 0x61, 0x6e, + 0x67, 0x65, 0x73, 0x20, 0x28, 0x61, 0x64, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x20, 0x61, + 0x6e, 0x64, 0x20, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x29, 0x20, 0x74, 0x68, + 0x61, 0x74, 0x20, 0x6f, 0x63, 0x63, 0x75, 0x72, 0x72, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x61, + 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2c, 0x20, 0x73, 0x6f, + 0x72, 0x74, 0x65, 0x64, 0x20, 0x62, 0x79, 0x20, 0x61, 0x73, 0x63, 0x65, 0x6e, 0x64, 0x69, 0x6e, + 0x67, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, + 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, + 0x65, 0x20, 0x61, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, + 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x69, 0x73, 0x20, 0x75, + 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x67, 0x65, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6e, + 0x65, 0x78, 0x74, 0x20, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, + 0x65, 0x73, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, + 0x20, 0x6e, 0x6f, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x20, 0x61, 0x66, 0x74, 0x65, + 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x64, 0x20, 0x63, + 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, + 0x6e, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x61, 0x6d, 0x65, 0x20, 0x74, 0x6f, 0x6b, 0x65, + 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, + 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x20, 0x66, 0x6f, 0x72, 0x20, + 0x69, 0x74, 0x20, 0x74, 0x6f, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x77, 0x68, + 0x65, 0x6e, 0x20, 0x6e, 0x65, 0x77, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x20, 0x61, + 0x72, 0x65, 0x20, 0x72, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x65, 0x64, 0x2e, 0x20, 0x49, 0x66, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x20, 0x6e, 0x65, 0x76, 0x65, 0x72, 0x20, + 0x68, 0x61, 0x64, 0x20, 0x61, 0x6e, 0x79, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x61, + 0x64, 0x64, 0x65, 0x64, 0x20, 0x6f, 0x72, 0x20, 0x72, 0x65, 0x6d, 0x6f, 0x76, 0x65, 0x64, 0x2c, + 0x20, 0x74, 0x68, 0x69, 0x73, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, + 0x20, 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x63, + 0x61, 0x6e, 0x20, 0x75, 0x73, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x60, 0x74, 0x79, 0x70, 0x65, + 0x60, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x20, 0x74, 0x6f, 0x20, 0x6f, + 0x6e, 0x6c, 0x79, 0x20, 0x67, 0x65, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6c, 0x69, 0x73, 0x74, + 0x20, 0x6f, 0x66, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, + 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, 0x66, 0x66, 0x65, 0x63, 0x74, 0x20, 0x6f, 0x62, + 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x79, + 0x70, 0x65, 0x2e, 0x0a, 0x57, 0x68, 0x65, 0x6e, 0x20, 0x72, 0x65, 0x61, 0x64, 0x69, 0x6e, 0x67, + 0x20, 0x61, 0x20, 0x77, 0x72, 0x69, 0x74, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, + 0x68, 0x61, 0x6e, 0x67, 0x65, 0x2c, 0x20, 0x69, 0x66, 0x20, 0x69, 0x74, 0x20, 0x77, 0x61, 0x73, + 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, + 0x20, 0x62, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, 0x2e, 0x0a, 0x57, 0x68, + 0x65, 0x6e, 0x20, 0x72, 0x65, 0x61, 0x64, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x64, 0x65, 0x6c, + 0x65, 0x74, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x20, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, + 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x20, + 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x4e, 0x4f, 0x54, 0x20, 0x62, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, + 0x72, 0x6e, 0x65, 0x64, 0x20, 0x72, 0x65, 0x67, 0x61, 0x72, 0x64, 0x6c, 0x65, 0x73, 0x73, 0x20, + 0x6f, 0x66, 0x20, 0x77, 0x68, 0x65, 0x74, 0x68, 0x65, 0x72, 0x20, 0x69, 0x74, 0x20, 0x77, 0x61, + 0x73, 0x20, 0x6f, 0x72, 0x69, 0x67, 0x69, 0x6e, 0x61, 0x6c, 0x6c, 0x79, 0x20, 0x63, 0x6f, 0x6e, + 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x20, 0x6f, 0x72, 0x20, 0x6e, 0x6f, 0x74, 0x2e, + 0x0a, 0x2a, 0x0b, 0x52, 0x65, 0x61, 0x64, 0x43, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x82, 0xd3, + 0xe4, 0x93, 0x02, 0x1c, 0x12, 0x1a, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, + 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x73, + 0x12, 0xbb, 0x02, 0x0a, 0x0b, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, + 0x12, 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x72, + 0x65, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, + 0x1a, 0x1f, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x72, + 0x65, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, + 0x65, 0x22, 0xea, 0x01, 0x92, 0x41, 0xd4, 0x01, 0x0a, 0x06, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, + 0x12, 0x0e, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x20, 0x61, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, + 0x1a, 0x67, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x20, 0x61, 0x20, 0x75, 0x6e, 0x69, 0x71, 0x75, + 0x65, 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x20, + 0x77, 0x68, 0x69, 0x63, 0x68, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, + 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x20, 0x61, 0x75, 0x74, 0x68, + 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, + 0x20, 0x61, 0x6e, 0x64, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, + 0x70, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x2a, 0x0b, 0x43, 0x72, 0x65, 0x61, 0x74, + 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x4a, 0x44, 0x0a, 0x03, 0x32, 0x30, 0x31, 0x12, 0x3d, 0x0a, 0x16, 0x41, 0x20, 0x73, 0x75, 0x63, 0x63, 0x65, 0x73, 0x73, 0x66, 0x75, 0x6c, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x12, 0x23, 0x0a, 0x21, 0x1a, 0x1f, 0x2e, 0x6f, 0x70, - 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x53, - 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0xfa, 0xd2, 0xe4, 0x93, - 0x02, 0x0f, 0x12, 0x0d, 0x55, 0x4e, 0x49, 0x4d, 0x50, 0x4c, 0x45, 0x4d, 0x45, 0x4e, 0x54, 0x45, - 0x44, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x17, 0x3a, 0x01, 0x2a, 0x32, 0x12, 0x2f, 0x73, 0x74, 0x6f, - 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x12, 0xd2, - 0x02, 0x0a, 0x0b, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x12, 0x1e, - 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x44, 0x65, 0x6c, 0x65, + 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x53, + 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x82, 0xd3, 0xe4, 0x93, + 0x02, 0x0c, 0x3a, 0x01, 0x2a, 0x22, 0x07, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x8e, + 0x02, 0x0a, 0x0b, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x12, 0x1e, + 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1f, - 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x44, 0x65, 0x6c, 0x65, + 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, - 0x81, 0x02, 0x92, 0x41, 0xe3, 0x01, 0x0a, 0x06, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x0e, - 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x20, 0x61, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, 0x76, - 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, - 0x41, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, 0x20, 0x64, 0x6f, - 0x65, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x64, 0x61, 0x74, 0x61, 0x20, 0x61, 0x73, 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, 0x65, - 0x64, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, - 0x2c, 0x20, 0x6c, 0x69, 0x6b, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x6f, 0x72, - 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, - 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x2e, 0x2a, 0x0b, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, 0x74, - 0x6f, 0x72, 0x65, 0x4a, 0x44, 0x0a, 0x03, 0x32, 0x30, 0x34, 0x12, 0x3d, 0x0a, 0x16, 0x41, 0x20, - 0x73, 0x75, 0x63, 0x63, 0x65, 0x73, 0x73, 0x66, 0x75, 0x6c, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, - 0x6e, 0x73, 0x65, 0x2e, 0x12, 0x23, 0x0a, 0x21, 0x1a, 0x1f, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, - 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, - 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x14, 0x2a, - 0x12, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, - 0x69, 0x64, 0x7d, 0x12, 0xaf, 0x01, 0x0a, 0x08, 0x47, 0x65, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, - 0x12, 0x1b, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x47, 0x65, - 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1c, 0x2e, - 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x47, 0x65, 0x74, 0x53, 0x74, - 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x68, 0x92, 0x41, 0x4b, - 0x0a, 0x06, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x0b, 0x47, 0x65, 0x74, 0x20, 0x61, 0x20, - 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, 0x2a, 0x52, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, - 0x6e, 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x20, - 0x62, 0x79, 0x20, 0x69, 0x74, 0x73, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, - 0x72, 0x2a, 0x08, 0x47, 0x65, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x82, 0xd3, 0xe4, 0x93, 0x02, - 0x14, 0x12, 0x12, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, - 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x12, 0xa9, 0x02, 0x0a, 0x0a, 0x4c, 0x69, 0x73, 0x74, 0x53, 0x74, - 0x6f, 0x72, 0x65, 0x73, 0x12, 0x1d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, - 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, - 0x65, 0x73, 0x74, 0x1a, 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, - 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, - 0x6e, 0x73, 0x65, 0x22, 0xdb, 0x01, 0x92, 0x41, 0xc8, 0x01, 0x0a, 0x06, 0x53, 0x74, 0x6f, 0x72, - 0x65, 0x73, 0x12, 0x0f, 0x4c, 0x69, 0x73, 0x74, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x73, 0x74, 0x6f, - 0x72, 0x65, 0x73, 0x1a, 0xa0, 0x01, 0x52, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, 0x20, - 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x65, 0x64, 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, 0x6f, - 0x66, 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, - 0x20, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x67, 0x65, 0x74, - 0x20, 0x61, 0x64, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x20, 0x73, 0x74, 0x6f, 0x72, - 0x65, 0x73, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, - 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, 0x72, - 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x73, 0x74, - 0x6f, 0x72, 0x65, 0x73, 0x2e, 0x0a, 0x2a, 0x0a, 0x4c, 0x69, 0x73, 0x74, 0x53, 0x74, 0x6f, 0x72, - 0x65, 0x73, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x09, 0x12, 0x07, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, - 0x73, 0x12, 0xf1, 0x04, 0x0a, 0x13, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x4c, 0x69, - 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x12, 0x26, 0x2e, 0x6f, 0x70, 0x65, 0x6e, - 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x4c, - 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, - 0x74, 0x1a, 0x27, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x53, - 0x74, 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, - 0x74, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x86, 0x04, 0x92, 0x41, 0xcf, - 0x03, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, - 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x46, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x20, - 0x61, 0x6c, 0x6c, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x74, 0x68, - 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x20, 0x68, 0x61, 0x73, 0x20, - 0x61, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x77, 0x69, 0x74, 0x68, 0x1a, - 0xd9, 0x02, 0x54, 0x68, 0x65, 0x20, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x20, 0x4c, - 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x69, - 0x73, 0x20, 0x76, 0x65, 0x72, 0x79, 0x20, 0x73, 0x69, 0x6d, 0x69, 0x6c, 0x61, 0x72, 0x20, 0x74, - 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, - 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, - 0x74, 0x77, 0x6f, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x73, 0x3a, - 0x20, 0x0a, 0x31, 0x2e, 0x20, 0x49, 0x6e, 0x73, 0x74, 0x65, 0x61, 0x64, 0x20, 0x6f, 0x66, 0x20, - 0x63, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x6f, - 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x62, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x20, 0x72, 0x65, - 0x74, 0x75, 0x72, 0x6e, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, - 0x73, 0x65, 0x2c, 0x20, 0x69, 0x74, 0x20, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x73, 0x20, 0x74, - 0x68, 0x65, 0x6d, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6c, 0x69, 0x65, 0x6e, - 0x74, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x79, 0x20, 0x61, 0x72, 0x65, 0x20, 0x63, 0x6f, - 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x65, 0x64, 0x2e, 0x20, 0x0a, 0x32, 0x2e, 0x20, 0x54, 0x68, 0x65, - 0x20, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x20, 0x6f, 0x66, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, - 0x74, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, 0x20, 0x69, 0x73, 0x20, 0x6f, - 0x6e, 0x6c, 0x79, 0x20, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x65, 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x65, 0x78, 0x65, 0x63, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x69, 0x6d, - 0x65, 0x6f, 0x75, 0x74, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, - 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6c, 0x61, 0x67, 0x20, 0x4f, 0x50, 0x45, 0x4e, 0x46, - 0x47, 0x41, 0x5f, 0x4c, 0x49, 0x53, 0x54, 0x5f, 0x4f, 0x42, 0x4a, 0x45, 0x43, 0x54, 0x53, 0x5f, - 0x44, 0x45, 0x41, 0x44, 0x4c, 0x49, 0x4e, 0x45, 0x2e, 0x20, 0x0a, 0x2a, 0x13, 0x53, 0x74, 0x72, - 0x65, 0x61, 0x6d, 0x65, 0x64, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, - 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x2d, 0x3a, 0x01, 0x2a, 0x22, 0x28, 0x2f, 0x73, 0x74, 0x6f, 0x72, - 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x73, 0x74, - 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x2d, 0x6c, 0x69, 0x73, 0x74, 0x2d, 0x6f, 0x62, 0x6a, 0x65, - 0x63, 0x74, 0x73, 0x30, 0x01, 0x12, 0xdd, 0x11, 0x0a, 0x0b, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, - 0x6a, 0x65, 0x63, 0x74, 0x73, 0x12, 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x76, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x52, 0x65, - 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1f, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, - 0x76, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x52, 0x65, - 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x8c, 0x11, 0x92, 0x41, 0xde, 0x10, 0x0a, 0x14, 0x52, - 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x51, 0x75, 0x65, 0x72, - 0x69, 0x65, 0x73, 0x12, 0x44, 0x4c, 0x69, 0x73, 0x74, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x6f, 0x62, - 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x67, 0x69, 0x76, - 0x65, 0x6e, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, - 0x20, 0x75, 0x73, 0x65, 0x72, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, 0x61, - 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x77, 0x69, 0x74, 0x68, 0x1a, 0xf2, 0x0f, 0x54, 0x68, 0x65, 0x20, + 0xbd, 0x01, 0x92, 0x41, 0x87, 0x01, 0x0a, 0x06, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x0e, + 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x20, 0x61, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, 0x1a, + 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x73, 0x20, 0x61, 0x6e, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, + 0x69, 0x6e, 0x67, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x2a, 0x0b, 0x55, 0x70, 0x64, 0x61, + 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x4a, 0x44, 0x0a, 0x03, 0x32, 0x30, 0x30, 0x12, 0x3d, + 0x0a, 0x16, 0x41, 0x20, 0x73, 0x75, 0x63, 0x63, 0x65, 0x73, 0x73, 0x66, 0x75, 0x6c, 0x20, 0x72, + 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x12, 0x23, 0x0a, 0x21, 0x1a, 0x1f, 0x2e, 0x6f, + 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, + 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0xfa, 0xd2, 0xe4, + 0x93, 0x02, 0x0f, 0x12, 0x0d, 0x55, 0x4e, 0x49, 0x4d, 0x50, 0x4c, 0x45, 0x4d, 0x45, 0x4e, 0x54, + 0x45, 0x44, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x17, 0x3a, 0x01, 0x2a, 0x32, 0x12, 0x2f, 0x73, 0x74, + 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x12, + 0xd2, 0x02, 0x0a, 0x0b, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x12, + 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x44, 0x65, 0x6c, + 0x65, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, + 0x1f, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x44, 0x65, 0x6c, + 0x65, 0x74, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, + 0x22, 0x81, 0x02, 0x92, 0x41, 0xe3, 0x01, 0x0a, 0x06, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, + 0x0e, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x20, 0x61, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, + 0x76, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, + 0x47, 0x41, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x2e, 0x20, 0x54, 0x68, 0x69, 0x73, 0x20, 0x64, + 0x6f, 0x65, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x64, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x64, 0x61, 0x74, 0x61, 0x20, 0x61, 0x73, 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, + 0x65, 0x64, 0x20, 0x77, 0x69, 0x74, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, + 0x65, 0x2c, 0x20, 0x6c, 0x69, 0x6b, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x6f, + 0x72, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, + 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x73, 0x2e, 0x2a, 0x0b, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, + 0x74, 0x6f, 0x72, 0x65, 0x4a, 0x44, 0x0a, 0x03, 0x32, 0x30, 0x34, 0x12, 0x3d, 0x0a, 0x16, 0x41, + 0x20, 0x73, 0x75, 0x63, 0x63, 0x65, 0x73, 0x73, 0x66, 0x75, 0x6c, 0x20, 0x72, 0x65, 0x73, 0x70, + 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x12, 0x23, 0x0a, 0x21, 0x1a, 0x1f, 0x2e, 0x6f, 0x70, 0x65, 0x6e, + 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x53, 0x74, 0x6f, + 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x14, + 0x2a, 0x12, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, + 0x5f, 0x69, 0x64, 0x7d, 0x12, 0xaf, 0x01, 0x0a, 0x08, 0x47, 0x65, 0x74, 0x53, 0x74, 0x6f, 0x72, + 0x65, 0x12, 0x1b, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x47, + 0x65, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1c, + 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x47, 0x65, 0x74, 0x53, + 0x74, 0x6f, 0x72, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x68, 0x92, 0x41, + 0x4b, 0x0a, 0x06, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x0b, 0x47, 0x65, 0x74, 0x20, 0x61, + 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x1a, 0x2a, 0x52, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, + 0x61, 0x6e, 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, + 0x20, 0x62, 0x79, 0x20, 0x69, 0x74, 0x73, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, + 0x65, 0x72, 0x2a, 0x08, 0x47, 0x65, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x82, 0xd3, 0xe4, 0x93, + 0x02, 0x14, 0x12, 0x12, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, + 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x12, 0xa9, 0x02, 0x0a, 0x0a, 0x4c, 0x69, 0x73, 0x74, 0x53, + 0x74, 0x6f, 0x72, 0x65, 0x73, 0x12, 0x1d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, + 0x76, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x52, 0x65, 0x71, + 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, + 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, + 0x6f, 0x6e, 0x73, 0x65, 0x22, 0xdb, 0x01, 0x92, 0x41, 0xc8, 0x01, 0x0a, 0x06, 0x53, 0x74, 0x6f, + 0x72, 0x65, 0x73, 0x12, 0x0f, 0x4c, 0x69, 0x73, 0x74, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x73, 0x74, + 0x6f, 0x72, 0x65, 0x73, 0x1a, 0xa0, 0x01, 0x52, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, + 0x20, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x65, 0x64, 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, + 0x6f, 0x66, 0x20, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x47, 0x41, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, + 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x61, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x67, 0x65, + 0x74, 0x20, 0x61, 0x64, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x20, 0x73, 0x74, 0x6f, + 0x72, 0x65, 0x73, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x69, 0x6e, 0x75, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x20, 0x77, 0x69, 0x6c, 0x6c, + 0x20, 0x62, 0x65, 0x20, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x20, 0x69, 0x66, 0x20, 0x74, 0x68, 0x65, + 0x72, 0x65, 0x20, 0x61, 0x72, 0x65, 0x20, 0x6e, 0x6f, 0x20, 0x6d, 0x6f, 0x72, 0x65, 0x20, 0x73, + 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2e, 0x0a, 0x2a, 0x0a, 0x4c, 0x69, 0x73, 0x74, 0x53, 0x74, 0x6f, + 0x72, 0x65, 0x73, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x09, 0x12, 0x07, 0x2f, 0x73, 0x74, 0x6f, 0x72, + 0x65, 0x73, 0x12, 0xf1, 0x04, 0x0a, 0x13, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x4c, + 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x12, 0x26, 0x2e, 0x6f, 0x70, 0x65, + 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, + 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, + 0x73, 0x74, 0x1a, 0x27, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, + 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, + 0x63, 0x74, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x86, 0x04, 0x92, 0x41, + 0xcf, 0x03, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, + 0x20, 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x46, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, + 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x6f, 0x66, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x74, + 0x68, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x20, 0x68, 0x61, 0x73, + 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x77, 0x69, 0x74, 0x68, + 0x1a, 0xd9, 0x02, 0x54, 0x68, 0x65, 0x20, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x20, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, - 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, 0x6f, - 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, - 0x73, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x74, - 0x79, 0x70, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, - 0x72, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, - 0x20, 0x77, 0x69, 0x74, 0x68, 0x2e, 0x0a, 0x20, 0x54, 0x6f, 0x20, 0x61, 0x72, 0x72, 0x69, 0x76, - 0x65, 0x20, 0x61, 0x74, 0x20, 0x61, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x2c, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x75, 0x73, 0x65, 0x73, 0x3a, 0x20, 0x61, 0x6e, 0x20, - 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, - 0x64, 0x65, 0x6c, 0x2c, 0x20, 0x65, 0x78, 0x70, 0x6c, 0x69, 0x63, 0x69, 0x74, 0x20, 0x74, 0x75, - 0x70, 0x6c, 0x65, 0x73, 0x20, 0x77, 0x72, 0x69, 0x74, 0x74, 0x65, 0x6e, 0x20, 0x74, 0x68, 0x72, - 0x6f, 0x75, 0x67, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x57, 0x72, 0x69, 0x74, 0x65, 0x20, 0x41, - 0x50, 0x49, 0x2c, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x20, 0x74, - 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x70, 0x72, 0x65, 0x73, 0x65, 0x6e, 0x74, 0x20, 0x69, 0x6e, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x2c, 0x20, 0x61, 0x6e, - 0x64, 0x20, 0x69, 0x6d, 0x70, 0x6c, 0x69, 0x63, 0x69, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, - 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x20, 0x62, 0x79, 0x20, - 0x76, 0x69, 0x72, 0x74, 0x75, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x70, 0x70, 0x6c, 0x79, 0x69, - 0x6e, 0x67, 0x20, 0x73, 0x65, 0x74, 0x20, 0x74, 0x68, 0x65, 0x6f, 0x72, 0x79, 0x20, 0x28, 0x73, - 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, - 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, 0x69, 0x65, - 0x77, 0x65, 0x72, 0x40, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, - 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x60, - 0x3b, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, - 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, 0x72, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, 0x65, - 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, - 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x20, 0x61, 0x72, 0x65, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, - 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x76, 0x69, - 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, - 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x29, - 0x2e, 0x0a, 0x41, 0x6e, 0x20, 0x60, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, - 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x60, 0x20, 0x6d, 0x61, - 0x79, 0x20, 0x62, 0x65, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, - 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x2e, 0x20, 0x49, 0x66, 0x20, 0x69, - 0x74, 0x20, 0x69, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, - 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x73, 0x74, 0x20, 0x61, - 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, - 0x65, 0x6c, 0x20, 0x49, 0x44, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, - 0x65, 0x64, 0x2e, 0x20, 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, 0x67, - 0x6c, 0x79, 0x20, 0x72, 0x65, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, 0x74, - 0x6f, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, - 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x69, 0x64, - 0x20, 0x66, 0x6f, 0x72, 0x20, 0x62, 0x65, 0x74, 0x74, 0x65, 0x72, 0x20, 0x70, 0x65, 0x72, 0x66, - 0x6f, 0x72, 0x6d, 0x61, 0x6e, 0x63, 0x65, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, - 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, 0x60, 0x63, - 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, - 0x60, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x74, - 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x20, 0x61, 0x73, 0x20, 0x72, 0x65, 0x67, 0x75, 0x6c, 0x61, - 0x72, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x20, 0x45, 0x61, 0x63, 0x68, 0x20, 0x6f, - 0x66, 0x20, 0x74, 0x68, 0x65, 0x73, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x6d, - 0x61, 0x79, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x73, 0x73, 0x6f, 0x63, - 0x69, 0x61, 0x74, 0x65, 0x64, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, - 0x60, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, - 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, 0x65, - 0x78, 0x74, 0x60, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, - 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, - 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, - 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x2e, 0x20, 0x49, - 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, 0x67, 0x6c, 0x79, 0x20, 0x72, 0x65, - 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x70, 0x72, 0x6f, - 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x66, 0x6f, 0x72, - 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, 0x6e, 0x70, 0x75, 0x74, 0x20, 0x70, - 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2c, - 0x20, 0x74, 0x6f, 0x20, 0x65, 0x6e, 0x73, 0x75, 0x72, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, - 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x62, 0x65, 0x20, 0x65, 0x76, - 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x64, 0x20, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x63, 0x74, 0x6c, - 0x79, 0x2e, 0x0a, 0x42, 0x79, 0x20, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x2c, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x63, 0x61, 0x63, - 0x68, 0x65, 0x73, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, - 0x61, 0x20, 0x73, 0x68, 0x6f, 0x72, 0x74, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20, 0x74, 0x6f, 0x20, - 0x6f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, 0x6d, - 0x61, 0x6e, 0x63, 0x65, 0x2e, 0x20, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x73, 0x70, - 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x6f, 0x66, - 0x20, 0x60, 0x48, 0x49, 0x47, 0x48, 0x45, 0x52, 0x5f, 0x43, 0x4f, 0x4e, 0x53, 0x49, 0x53, 0x54, - 0x45, 0x4e, 0x43, 0x59, 0x60, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, 0x70, - 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, - 0x6e, 0x63, 0x79, 0x60, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x20, 0x69, - 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x74, 0x6f, 0x20, 0x69, 0x6e, - 0x66, 0x6f, 0x72, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x20, - 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x69, - 0x73, 0x69, 0x73, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x20, 0x69, 0x73, 0x20, 0x70, 0x72, 0x65, 0x66, - 0x65, 0x72, 0x72, 0x65, 0x64, 0x20, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, 0x70, - 0x65, 0x6e, 0x73, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, 0x65, - 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x2e, 0x20, 0x43, 0x6f, 0x6e, 0x73, 0x69, - 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, 0x20, - 0x62, 0x65, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, - 0x79, 0x20, 0x69, 0x66, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x67, 0x20, - 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, 0x6e, - 0x63, 0x79, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, - 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, - 0x73, 0x20, 0x69, 0x6e, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x69, 0x6e, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x22, 0x20, 0x66, - 0x69, 0x65, 0x6c, 0x64, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, - 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x74, 0x68, 0x65, 0x79, 0x20, 0x77, 0x69, - 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x73, 0x20, 0x69, 0x6e, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x66, 0x6f, 0x72, 0x6d, - 0x61, 0x74, 0x20, 0x60, 0x3c, 0x74, 0x79, 0x70, 0x65, 0x3e, 0x3a, 0x3c, 0x69, 0x64, 0x3e, 0x60, - 0x20, 0x28, 0x65, 0x2e, 0x67, 0x2e, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, - 0x3a, 0x72, 0x6f, 0x61, 0x64, 0x6d, 0x61, 0x70, 0x22, 0x29, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, - 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x20, 0x6f, 0x66, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, - 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, - 0x65, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, - 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x65, 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, - 0x78, 0x65, 0x63, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, - 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x66, 0x6c, 0x61, 0x67, 0x20, 0x4f, 0x50, 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, 0x4c, - 0x49, 0x53, 0x54, 0x5f, 0x4f, 0x42, 0x4a, 0x45, 0x43, 0x54, 0x53, 0x5f, 0x44, 0x45, 0x41, 0x44, - 0x4c, 0x49, 0x4e, 0x45, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x75, 0x70, 0x70, 0x65, 0x72, 0x20, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x20, 0x73, 0x70, 0x65, 0x63, - 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6c, 0x61, - 0x67, 0x20, 0x4f, 0x50, 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, 0x4c, 0x49, 0x53, 0x54, 0x5f, 0x4f, - 0x42, 0x4a, 0x45, 0x43, 0x54, 0x53, 0x5f, 0x4d, 0x41, 0x58, 0x5f, 0x52, 0x45, 0x53, 0x55, 0x4c, - 0x54, 0x53, 0x2c, 0x20, 0x77, 0x68, 0x69, 0x63, 0x68, 0x65, 0x76, 0x65, 0x72, 0x20, 0x69, 0x73, - 0x20, 0x68, 0x69, 0x74, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, - 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x77, 0x69, - 0x6c, 0x6c, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x62, 0x65, 0x20, 0x73, 0x6f, 0x72, 0x74, 0x65, 0x64, - 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x20, - 0x74, 0x77, 0x6f, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x6c, 0x20, 0x63, 0x61, - 0x6c, 0x6c, 0x73, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x67, 0x69, 0x76, 0x65, 0x20, 0x61, 0x20, 0x67, - 0x69, 0x76, 0x65, 0x6e, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x74, 0x20, 0x73, - 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x2e, 0x2a, 0x0b, - 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x82, 0xd3, 0xe4, 0x93, 0x02, - 0x24, 0x3a, 0x01, 0x2a, 0x22, 0x1f, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, - 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x6c, 0x69, 0x73, 0x74, 0x2d, 0x6f, 0x62, - 0x6a, 0x65, 0x63, 0x74, 0x73, 0x12, 0xe5, 0x11, 0x0a, 0x09, 0x4c, 0x69, 0x73, 0x74, 0x55, 0x73, - 0x65, 0x72, 0x73, 0x12, 0x1c, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, - 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, - 0x74, 0x1a, 0x1d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, 0x4c, - 0x69, 0x73, 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, - 0x22, 0x9a, 0x11, 0x92, 0x41, 0xee, 0x10, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x5d, 0x4c, - 0x69, 0x73, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x6d, 0x61, - 0x74, 0x63, 0x68, 0x69, 0x6e, 0x67, 0x20, 0x74, 0x68, 0x65, 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, - 0x64, 0x65, 0x64, 0x20, 0x66, 0x69, 0x6c, 0x74, 0x65, 0x72, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x68, - 0x61, 0x76, 0x65, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x72, 0x65, - 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, 0x74, - 0x69, 0x63, 0x75, 0x6c, 0x61, 0x72, 0x20, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x1a, 0xeb, 0x0f, 0x54, - 0x68, 0x65, 0x20, 0x4c, 0x69, 0x73, 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x20, 0x41, 0x50, 0x49, + 0x69, 0x73, 0x20, 0x76, 0x65, 0x72, 0x79, 0x20, 0x73, 0x69, 0x6d, 0x69, 0x6c, 0x61, 0x72, 0x20, + 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x4c, 0x69, 0x73, 0x74, 0x4f, + 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x77, 0x69, 0x74, 0x68, + 0x20, 0x74, 0x77, 0x6f, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x63, 0x65, 0x73, + 0x3a, 0x20, 0x0a, 0x31, 0x2e, 0x20, 0x49, 0x6e, 0x73, 0x74, 0x65, 0x61, 0x64, 0x20, 0x6f, 0x66, + 0x20, 0x63, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x6c, 0x6c, 0x20, + 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x62, 0x65, 0x66, 0x6f, 0x72, 0x65, 0x20, 0x72, + 0x65, 0x74, 0x75, 0x72, 0x6e, 0x69, 0x6e, 0x67, 0x20, 0x61, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, + 0x6e, 0x73, 0x65, 0x2c, 0x20, 0x69, 0x74, 0x20, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x73, 0x20, + 0x74, 0x68, 0x65, 0x6d, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6c, 0x69, 0x65, + 0x6e, 0x74, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x79, 0x20, 0x61, 0x72, 0x65, 0x20, 0x63, + 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x65, 0x64, 0x2e, 0x20, 0x0a, 0x32, 0x2e, 0x20, 0x54, 0x68, + 0x65, 0x20, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x20, 0x6f, 0x66, 0x20, 0x72, 0x65, 0x73, 0x75, + 0x6c, 0x74, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, 0x20, 0x69, 0x73, 0x20, + 0x6f, 0x6e, 0x6c, 0x79, 0x20, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x65, 0x64, 0x20, 0x62, 0x79, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, 0x65, 0x63, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x69, + 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, + 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6c, 0x61, 0x67, 0x20, 0x4f, 0x50, 0x45, 0x4e, + 0x46, 0x47, 0x41, 0x5f, 0x4c, 0x49, 0x53, 0x54, 0x5f, 0x4f, 0x42, 0x4a, 0x45, 0x43, 0x54, 0x53, + 0x5f, 0x44, 0x45, 0x41, 0x44, 0x4c, 0x49, 0x4e, 0x45, 0x2e, 0x20, 0x0a, 0x2a, 0x13, 0x53, 0x74, + 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, + 0x73, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x2d, 0x3a, 0x01, 0x2a, 0x22, 0x28, 0x2f, 0x73, 0x74, 0x6f, + 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x73, + 0x74, 0x72, 0x65, 0x61, 0x6d, 0x65, 0x64, 0x2d, 0x6c, 0x69, 0x73, 0x74, 0x2d, 0x6f, 0x62, 0x6a, + 0x65, 0x63, 0x74, 0x73, 0x30, 0x01, 0x12, 0xdd, 0x11, 0x0a, 0x0b, 0x4c, 0x69, 0x73, 0x74, 0x4f, + 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x12, 0x1e, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, + 0x2e, 0x76, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x52, + 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1f, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, + 0x2e, 0x76, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x52, + 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x8c, 0x11, 0x92, 0x41, 0xde, 0x10, 0x0a, 0x14, + 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x51, 0x75, 0x65, + 0x72, 0x69, 0x65, 0x73, 0x12, 0x44, 0x4c, 0x69, 0x73, 0x74, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x6f, + 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x67, 0x69, + 0x76, 0x65, 0x6e, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x68, + 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, + 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x77, 0x69, 0x74, 0x68, 0x1a, 0xf2, 0x0f, 0x54, 0x68, 0x65, + 0x20, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x41, 0x50, 0x49, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, 0x20, 0x6c, 0x69, 0x73, 0x74, 0x20, - 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, - 0x20, 0x6f, 0x66, 0x20, 0x61, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x63, 0x20, 0x74, - 0x79, 0x70, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x20, - 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x61, 0x20, 0x67, 0x69, - 0x76, 0x65, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x2e, 0x0a, 0x20, 0x54, 0x6f, 0x20, - 0x61, 0x72, 0x72, 0x69, 0x76, 0x65, 0x20, 0x61, 0x74, 0x20, 0x61, 0x20, 0x72, 0x65, 0x73, 0x75, - 0x6c, 0x74, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x75, 0x73, 0x65, 0x73, - 0x3a, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, - 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x2c, 0x20, 0x65, 0x78, 0x70, 0x6c, 0x69, 0x63, - 0x69, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x77, 0x72, 0x69, 0x74, 0x74, 0x65, - 0x6e, 0x20, 0x74, 0x68, 0x72, 0x6f, 0x75, 0x67, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x57, 0x72, - 0x69, 0x74, 0x65, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, - 0x75, 0x61, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x70, 0x72, 0x65, 0x73, 0x65, - 0x6e, 0x74, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, - 0x74, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x69, 0x6d, 0x70, 0x6c, 0x69, 0x63, 0x69, 0x74, 0x20, - 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x65, 0x78, 0x69, 0x73, - 0x74, 0x20, 0x62, 0x79, 0x20, 0x76, 0x69, 0x72, 0x74, 0x75, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x61, - 0x70, 0x70, 0x6c, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x73, 0x65, 0x74, 0x20, 0x74, 0x68, 0x65, 0x6f, - 0x72, 0x79, 0x20, 0x28, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, 0x64, 0x6f, 0x63, - 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, - 0x74, 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x40, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, + 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, + 0x74, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, + 0x74, 0x79, 0x70, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, + 0x65, 0x72, 0x20, 0x68, 0x61, 0x73, 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, + 0x6e, 0x20, 0x77, 0x69, 0x74, 0x68, 0x2e, 0x0a, 0x20, 0x54, 0x6f, 0x20, 0x61, 0x72, 0x72, 0x69, + 0x76, 0x65, 0x20, 0x61, 0x74, 0x20, 0x61, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x2c, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x75, 0x73, 0x65, 0x73, 0x3a, 0x20, 0x61, 0x6e, + 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, + 0x6f, 0x64, 0x65, 0x6c, 0x2c, 0x20, 0x65, 0x78, 0x70, 0x6c, 0x69, 0x63, 0x69, 0x74, 0x20, 0x74, + 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x77, 0x72, 0x69, 0x74, 0x74, 0x65, 0x6e, 0x20, 0x74, 0x68, + 0x72, 0x6f, 0x75, 0x67, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x57, 0x72, 0x69, 0x74, 0x65, 0x20, + 0x41, 0x50, 0x49, 0x2c, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x20, + 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x70, 0x72, 0x65, 0x73, 0x65, 0x6e, 0x74, 0x20, 0x69, + 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x2c, 0x20, 0x61, + 0x6e, 0x64, 0x20, 0x69, 0x6d, 0x70, 0x6c, 0x69, 0x63, 0x69, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, + 0x65, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x20, 0x62, 0x79, + 0x20, 0x76, 0x69, 0x72, 0x74, 0x75, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x70, 0x70, 0x6c, 0x79, + 0x69, 0x6e, 0x67, 0x20, 0x73, 0x65, 0x74, 0x20, 0x74, 0x68, 0x65, 0x6f, 0x72, 0x79, 0x20, 0x28, + 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, 0x69, - 0x65, 0x77, 0x65, 0x72, 0x60, 0x3b, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x74, 0x20, 0x6f, + 0x65, 0x77, 0x65, 0x72, 0x40, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, + 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, + 0x60, 0x3b, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, + 0x65, 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, 0x72, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, + 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, + 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, 0x20, 0x61, 0x72, + 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, + 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x76, + 0x69, 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, 0x6d, + 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x60, + 0x29, 0x2e, 0x0a, 0x41, 0x6e, 0x20, 0x60, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, + 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, 0x64, 0x60, 0x20, 0x6d, + 0x61, 0x79, 0x20, 0x62, 0x65, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, + 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x2e, 0x20, 0x49, 0x66, 0x20, + 0x69, 0x74, 0x20, 0x69, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, + 0x69, 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x73, 0x74, 0x20, + 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, + 0x64, 0x65, 0x6c, 0x20, 0x49, 0x44, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, + 0x73, 0x65, 0x64, 0x2e, 0x20, 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, + 0x67, 0x6c, 0x79, 0x20, 0x72, 0x65, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, + 0x74, 0x6f, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, + 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x69, + 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x62, 0x65, 0x74, 0x74, 0x65, 0x72, 0x20, 0x70, 0x65, 0x72, + 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x6e, 0x63, 0x65, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, + 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, 0x60, + 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, 0x75, 0x70, 0x6c, 0x65, + 0x73, 0x60, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, + 0x74, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x20, 0x61, 0x73, 0x20, 0x72, 0x65, 0x67, 0x75, 0x6c, + 0x61, 0x72, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x20, 0x45, 0x61, 0x63, 0x68, 0x20, + 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x73, 0x65, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, + 0x6d, 0x61, 0x79, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x73, 0x73, 0x6f, + 0x63, 0x69, 0x61, 0x74, 0x65, 0x64, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, + 0x6e, 0x60, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, + 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, + 0x65, 0x78, 0x74, 0x60, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x74, 0x68, 0x61, 0x74, + 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x20, 0x74, 0x6f, + 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, + 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, + 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x2e, 0x20, + 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, 0x67, 0x6c, 0x79, 0x20, 0x72, + 0x65, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x70, 0x72, + 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x66, 0x6f, + 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, 0x6e, 0x70, 0x75, 0x74, 0x20, + 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6c, + 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x73, + 0x2c, 0x20, 0x74, 0x6f, 0x20, 0x65, 0x6e, 0x73, 0x75, 0x72, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, + 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x62, 0x65, 0x20, 0x65, + 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x64, 0x20, 0x63, 0x6f, 0x72, 0x72, 0x65, 0x63, 0x74, + 0x6c, 0x79, 0x2e, 0x0a, 0x42, 0x79, 0x20, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x2c, 0x20, + 0x74, 0x68, 0x65, 0x20, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x20, 0x41, 0x50, 0x49, 0x20, 0x63, 0x61, + 0x63, 0x68, 0x65, 0x73, 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x66, 0x6f, 0x72, + 0x20, 0x61, 0x20, 0x73, 0x68, 0x6f, 0x72, 0x74, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x20, 0x74, 0x6f, + 0x20, 0x6f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, + 0x6d, 0x61, 0x6e, 0x63, 0x65, 0x2e, 0x20, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x73, + 0x70, 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x6f, + 0x66, 0x20, 0x60, 0x48, 0x49, 0x47, 0x48, 0x45, 0x52, 0x5f, 0x43, 0x4f, 0x4e, 0x53, 0x49, 0x53, + 0x54, 0x45, 0x4e, 0x43, 0x59, 0x60, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, + 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, + 0x65, 0x6e, 0x63, 0x79, 0x60, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x20, + 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x74, 0x6f, 0x20, 0x69, + 0x6e, 0x66, 0x6f, 0x72, 0x6d, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, + 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, + 0x69, 0x73, 0x69, 0x73, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x20, 0x69, 0x73, 0x20, 0x70, 0x72, 0x65, + 0x66, 0x65, 0x72, 0x72, 0x65, 0x64, 0x20, 0x61, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, + 0x70, 0x65, 0x6e, 0x73, 0x65, 0x20, 0x6f, 0x66, 0x20, 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, + 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x2e, 0x20, 0x43, 0x6f, 0x6e, 0x73, + 0x69, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, + 0x20, 0x62, 0x65, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x69, 0x6e, 0x63, 0x72, 0x65, 0x61, 0x73, 0x65, 0x64, 0x20, 0x6c, 0x61, 0x74, 0x65, 0x6e, + 0x63, 0x79, 0x20, 0x69, 0x66, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x67, + 0x20, 0x68, 0x69, 0x67, 0x68, 0x65, 0x72, 0x20, 0x63, 0x6f, 0x6e, 0x73, 0x69, 0x73, 0x74, 0x65, + 0x6e, 0x63, 0x79, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, + 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, + 0x74, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x69, + 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x22, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x22, 0x20, + 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, + 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x74, 0x68, 0x65, 0x79, 0x20, 0x77, + 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x73, 0x20, 0x69, + 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, 0x66, 0x6f, 0x72, + 0x6d, 0x61, 0x74, 0x20, 0x60, 0x3c, 0x74, 0x79, 0x70, 0x65, 0x3e, 0x3a, 0x3c, 0x69, 0x64, 0x3e, + 0x60, 0x20, 0x28, 0x65, 0x2e, 0x67, 0x2e, 0x20, 0x22, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, + 0x74, 0x3a, 0x72, 0x6f, 0x61, 0x64, 0x6d, 0x61, 0x70, 0x22, 0x29, 0x2e, 0x0a, 0x54, 0x68, 0x65, + 0x20, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x20, 0x6f, 0x66, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, + 0x74, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, + 0x73, 0x65, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, + 0x20, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x65, 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65, 0x20, + 0x65, 0x78, 0x65, 0x63, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, + 0x74, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x66, 0x6c, 0x61, 0x67, 0x20, 0x4f, 0x50, 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, + 0x4c, 0x49, 0x53, 0x54, 0x5f, 0x4f, 0x42, 0x4a, 0x45, 0x43, 0x54, 0x53, 0x5f, 0x44, 0x45, 0x41, + 0x44, 0x4c, 0x49, 0x4e, 0x45, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x62, 0x79, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x75, 0x70, 0x70, 0x65, 0x72, 0x20, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x20, 0x73, 0x70, 0x65, + 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6c, + 0x61, 0x67, 0x20, 0x4f, 0x50, 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, 0x4c, 0x49, 0x53, 0x54, 0x5f, + 0x4f, 0x42, 0x4a, 0x45, 0x43, 0x54, 0x53, 0x5f, 0x4d, 0x41, 0x58, 0x5f, 0x52, 0x45, 0x53, 0x55, + 0x4c, 0x54, 0x53, 0x2c, 0x20, 0x77, 0x68, 0x69, 0x63, 0x68, 0x65, 0x76, 0x65, 0x72, 0x20, 0x69, + 0x73, 0x20, 0x68, 0x69, 0x74, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x2e, 0x0a, 0x54, 0x68, 0x65, + 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x20, 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x77, + 0x69, 0x6c, 0x6c, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x62, 0x65, 0x20, 0x73, 0x6f, 0x72, 0x74, 0x65, + 0x64, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x66, 0x6f, 0x72, 0x65, + 0x20, 0x74, 0x77, 0x6f, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x6c, 0x20, 0x63, + 0x61, 0x6c, 0x6c, 0x73, 0x20, 0x63, 0x61, 0x6e, 0x20, 0x67, 0x69, 0x76, 0x65, 0x20, 0x61, 0x20, + 0x67, 0x69, 0x76, 0x65, 0x6e, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x74, 0x20, + 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x2e, 0x2a, + 0x0b, 0x4c, 0x69, 0x73, 0x74, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x82, 0xd3, 0xe4, 0x93, + 0x02, 0x24, 0x3a, 0x01, 0x2a, 0x22, 0x1f, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, + 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, 0x64, 0x7d, 0x2f, 0x6c, 0x69, 0x73, 0x74, 0x2d, 0x6f, + 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x12, 0xe5, 0x11, 0x0a, 0x09, 0x4c, 0x69, 0x73, 0x74, 0x55, + 0x73, 0x65, 0x72, 0x73, 0x12, 0x1c, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, + 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, + 0x73, 0x74, 0x1a, 0x1d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, 0x2e, + 0x4c, 0x69, 0x73, 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, + 0x65, 0x22, 0x9a, 0x11, 0x92, 0x41, 0xee, 0x10, 0x0a, 0x14, 0x52, 0x65, 0x6c, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x68, 0x69, 0x70, 0x20, 0x51, 0x75, 0x65, 0x72, 0x69, 0x65, 0x73, 0x12, 0x5d, + 0x4c, 0x69, 0x73, 0x74, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x6d, + 0x61, 0x74, 0x63, 0x68, 0x69, 0x6e, 0x67, 0x20, 0x74, 0x68, 0x65, 0x20, 0x70, 0x72, 0x6f, 0x76, + 0x69, 0x64, 0x65, 0x64, 0x20, 0x66, 0x69, 0x6c, 0x74, 0x65, 0x72, 0x20, 0x77, 0x68, 0x6f, 0x20, + 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x20, 0x63, 0x65, 0x72, 0x74, 0x61, 0x69, 0x6e, 0x20, 0x72, + 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x61, 0x20, 0x70, 0x61, 0x72, + 0x74, 0x69, 0x63, 0x75, 0x6c, 0x61, 0x72, 0x20, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x1a, 0xeb, 0x0f, + 0x54, 0x68, 0x65, 0x20, 0x4c, 0x69, 0x73, 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x20, 0x41, 0x50, + 0x49, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x73, 0x20, 0x61, 0x20, 0x6c, 0x69, 0x73, 0x74, + 0x20, 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x73, 0x65, 0x72, + 0x73, 0x20, 0x6f, 0x66, 0x20, 0x61, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x63, 0x20, + 0x74, 0x79, 0x70, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, + 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x61, 0x20, 0x67, + 0x69, 0x76, 0x65, 0x6e, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x2e, 0x0a, 0x20, 0x54, 0x6f, + 0x20, 0x61, 0x72, 0x72, 0x69, 0x76, 0x65, 0x20, 0x61, 0x74, 0x20, 0x61, 0x20, 0x72, 0x65, 0x73, + 0x75, 0x6c, 0x74, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x41, 0x50, 0x49, 0x20, 0x75, 0x73, 0x65, + 0x73, 0x3a, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, + 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x2c, 0x20, 0x65, 0x78, 0x70, 0x6c, 0x69, + 0x63, 0x69, 0x74, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x77, 0x72, 0x69, 0x74, 0x74, + 0x65, 0x6e, 0x20, 0x74, 0x68, 0x72, 0x6f, 0x75, 0x67, 0x68, 0x20, 0x74, 0x68, 0x65, 0x20, 0x57, + 0x72, 0x69, 0x74, 0x65, 0x20, 0x41, 0x50, 0x49, 0x2c, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, + 0x74, 0x75, 0x61, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x70, 0x72, 0x65, 0x73, + 0x65, 0x6e, 0x74, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75, 0x65, + 0x73, 0x74, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x69, 0x6d, 0x70, 0x6c, 0x69, 0x63, 0x69, 0x74, + 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x65, 0x78, 0x69, + 0x73, 0x74, 0x20, 0x62, 0x79, 0x20, 0x76, 0x69, 0x72, 0x74, 0x75, 0x65, 0x20, 0x6f, 0x66, 0x20, + 0x61, 0x70, 0x70, 0x6c, 0x79, 0x69, 0x6e, 0x67, 0x20, 0x73, 0x65, 0x74, 0x20, 0x74, 0x68, 0x65, + 0x6f, 0x72, 0x79, 0x20, 0x28, 0x73, 0x75, 0x63, 0x68, 0x20, 0x61, 0x73, 0x20, 0x60, 0x64, 0x6f, + 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, + 0x65, 0x74, 0x23, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x40, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, + 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, 0x23, 0x76, + 0x69, 0x65, 0x77, 0x65, 0x72, 0x60, 0x3b, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x74, 0x20, + 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, 0x72, 0x65, + 0x20, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, + 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, + 0x74, 0x60, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, 0x72, 0x65, 0x20, - 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, 0x6f, 0x63, 0x75, - 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, 0x67, 0x65, 0x74, - 0x60, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x65, 0x74, 0x20, 0x6f, 0x66, - 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x77, 0x68, 0x6f, 0x20, 0x61, 0x72, 0x65, 0x20, 0x74, - 0x68, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, 0x64, - 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, 0x64, - 0x67, 0x65, 0x74, 0x60, 0x29, 0x2e, 0x0a, 0x41, 0x6e, 0x20, 0x60, 0x61, 0x75, 0x74, 0x68, 0x6f, - 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x69, - 0x64, 0x60, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x62, 0x65, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, - 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x2e, - 0x20, 0x49, 0x66, 0x20, 0x69, 0x74, 0x20, 0x69, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x73, 0x70, - 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6c, 0x61, 0x74, - 0x65, 0x73, 0x74, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x49, 0x44, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, - 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x2e, 0x20, 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, - 0x74, 0x72, 0x6f, 0x6e, 0x67, 0x6c, 0x79, 0x20, 0x72, 0x65, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, - 0x64, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, 0x61, - 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, - 0x65, 0x6c, 0x20, 0x69, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x62, 0x65, 0x74, 0x74, 0x65, 0x72, - 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x6e, 0x63, 0x65, 0x2e, 0x0a, 0x59, 0x6f, - 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, - 0x66, 0x79, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, 0x74, - 0x75, 0x70, 0x6c, 0x65, 0x73, 0x60, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x77, 0x69, 0x6c, 0x6c, - 0x20, 0x62, 0x65, 0x20, 0x74, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x20, 0x61, 0x73, 0x20, 0x72, - 0x65, 0x67, 0x75, 0x6c, 0x61, 0x72, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x20, 0x45, - 0x61, 0x63, 0x68, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x73, 0x65, 0x20, 0x74, 0x75, 0x70, - 0x6c, 0x65, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, 0x20, - 0x61, 0x73, 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, 0x65, 0x64, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x64, - 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, - 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x60, - 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x60, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x20, - 0x74, 0x68, 0x61, 0x74, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, - 0x64, 0x20, 0x74, 0x6f, 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x20, 0x74, 0x75, - 0x70, 0x6c, 0x65, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x79, 0x73, 0x74, - 0x65, 0x6d, 0x2e, 0x20, 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, 0x67, - 0x6c, 0x79, 0x20, 0x72, 0x65, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, 0x74, - 0x6f, 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x75, - 0x65, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, 0x6e, - 0x70, 0x75, 0x74, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x20, 0x6f, - 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, - 0x69, 0x6f, 0x6e, 0x73, 0x2c, 0x20, 0x74, 0x6f, 0x20, 0x65, 0x6e, 0x73, 0x75, 0x72, 0x65, 0x20, - 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, - 0x62, 0x65, 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x64, 0x20, 0x63, 0x6f, 0x72, - 0x72, 0x65, 0x63, 0x74, 0x6c, 0x79, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, - 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, - 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x20, 0x75, 0x73, - 0x65, 0x72, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, - 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, 0x20, 0x66, - 0x69, 0x65, 0x6c, 0x64, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, 0x70, - 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x73, 0x65, 0x20, 0x72, 0x65, 0x73, 0x75, - 0x6c, 0x74, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, 0x65, 0x20, - 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x63, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, - 0x2c, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x20, 0x0a, 0x6f, 0x72, 0x20, 0x74, - 0x79, 0x70, 0x65, 0x2d, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x20, 0x70, 0x75, 0x62, 0x6c, 0x69, 0x63, - 0x20, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x2e, 0x20, 0x45, 0x61, 0x63, 0x68, 0x20, 0x6f, 0x66, - 0x20, 0x74, 0x68, 0x65, 0x73, 0x65, 0x20, 0x74, 0x79, 0x70, 0x65, 0x73, 0x20, 0x6f, 0x66, 0x20, - 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x69, 0x73, 0x20, 0x65, 0x6e, 0x63, 0x6f, 0x64, - 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x69, 0x74, 0x73, 0x20, 0x6f, 0x77, 0x6e, 0x20, 0x74, 0x79, - 0x70, 0x65, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x72, 0x65, 0x70, 0x72, 0x65, - 0x73, 0x65, 0x6e, 0x74, 0x65, 0x64, 0x20, 0x61, 0x73, 0x20, 0x61, 0x20, 0x73, 0x74, 0x72, 0x69, - 0x6e, 0x67, 0x2e, 0x49, 0x6e, 0x20, 0x63, 0x61, 0x73, 0x65, 0x73, 0x20, 0x77, 0x68, 0x65, 0x72, - 0x65, 0x20, 0x61, 0x20, 0x74, 0x79, 0x70, 0x65, 0x2d, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x20, 0x70, - 0x75, 0x62, 0x6c, 0x69, 0x63, 0x20, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x20, 0x72, 0x65, 0x73, - 0x75, 0x6c, 0x74, 0x20, 0x69, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, 0x20, - 0x28, 0x65, 0x2e, 0x67, 0x2e, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x2a, 0x60, 0x29, 0x2c, - 0x20, 0x69, 0x74, 0x20, 0x63, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x20, 0x62, 0x65, 0x20, 0x69, 0x6e, - 0x66, 0x65, 0x72, 0x72, 0x65, 0x64, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, 0x6c, 0x6c, 0x20, - 0x73, 0x75, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x0a, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x61, 0x74, - 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x20, 0x72, 0x65, 0x6c, - 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, 0x62, 0x6a, - 0x65, 0x63, 0x74, 0x3b, 0x20, 0x69, 0x74, 0x20, 0x69, 0x73, 0x20, 0x70, 0x6f, 0x73, 0x73, 0x69, - 0x62, 0x6c, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x6e, 0x65, 0x67, 0x61, 0x74, 0x69, 0x6f, - 0x6e, 0x73, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x63, 0x68, 0x65, - 0x63, 0x6b, 0x73, 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, 0x20, 0x73, 0x74, 0x69, 0x6c, 0x6c, - 0x20, 0x62, 0x65, 0x20, 0x71, 0x75, 0x65, 0x72, 0x69, 0x65, 0x64, 0x0a, 0x6f, 0x6e, 0x20, 0x69, - 0x6e, 0x64, 0x69, 0x76, 0x69, 0x64, 0x75, 0x61, 0x6c, 0x20, 0x73, 0x75, 0x62, 0x6a, 0x65, 0x63, - 0x74, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x65, 0x6e, 0x73, 0x75, 0x72, 0x65, 0x20, 0x61, 0x63, 0x63, - 0x65, 0x73, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x64, 0x6f, 0x63, 0x75, - 0x6d, 0x65, 0x6e, 0x74, 0x2e, 0x54, 0x68, 0x65, 0x20, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x20, - 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, - 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, 0x77, - 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x65, 0x64, 0x20, 0x62, - 0x79, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, 0x65, 0x63, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x20, - 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, - 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6c, 0x61, 0x67, 0x20, 0x4f, 0x50, - 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, 0x4c, 0x49, 0x53, 0x54, 0x5f, 0x55, 0x53, 0x45, 0x52, 0x53, - 0x5f, 0x44, 0x45, 0x41, 0x44, 0x4c, 0x49, 0x4e, 0x45, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x62, 0x79, - 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x70, 0x70, 0x65, 0x72, 0x20, 0x62, 0x6f, 0x75, 0x6e, 0x64, - 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, - 0x65, 0x20, 0x66, 0x6c, 0x61, 0x67, 0x20, 0x4f, 0x50, 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, 0x4c, - 0x49, 0x53, 0x54, 0x5f, 0x55, 0x53, 0x45, 0x52, 0x53, 0x5f, 0x4d, 0x41, 0x58, 0x5f, 0x52, 0x45, - 0x53, 0x55, 0x4c, 0x54, 0x53, 0x2c, 0x20, 0x77, 0x68, 0x69, 0x63, 0x68, 0x65, 0x76, 0x65, 0x72, - 0x20, 0x69, 0x73, 0x20, 0x68, 0x69, 0x74, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x2e, 0x0a, 0x54, - 0x68, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, 0x20, 0x75, 0x73, 0x65, 0x72, - 0x73, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x62, 0x65, 0x20, 0x73, 0x6f, - 0x72, 0x74, 0x65, 0x64, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, 0x66, - 0x6f, 0x72, 0x65, 0x20, 0x74, 0x77, 0x6f, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, - 0x6c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x79, 0x69, 0x65, 0x6c, - 0x64, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x74, 0x20, 0x73, 0x65, 0x74, 0x73, - 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x2e, 0x2a, 0x09, 0x4c, 0x69, 0x73, 0x74, - 0x55, 0x73, 0x65, 0x72, 0x73, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x22, 0x3a, 0x01, 0x2a, 0x22, 0x1d, - 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x69, - 0x64, 0x7d, 0x2f, 0x6c, 0x69, 0x73, 0x74, 0x2d, 0x75, 0x73, 0x65, 0x72, 0x73, 0x42, 0xa1, 0x01, - 0x0a, 0x0e, 0x63, 0x6f, 0x6d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, 0x31, - 0x42, 0x13, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, - 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x31, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, - 0x63, 0x6f, 0x6d, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x61, 0x70, 0x69, 0x2f, - 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x76, 0x31, - 0x3b, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x76, 0x31, 0xa2, 0x02, 0x03, 0x4f, 0x58, 0x58, - 0xaa, 0x02, 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x56, 0x31, 0xca, 0x02, 0x0a, - 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x5c, 0x56, 0x31, 0xe2, 0x02, 0x16, 0x4f, 0x70, 0x65, - 0x6e, 0x66, 0x67, 0x61, 0x5c, 0x56, 0x31, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, 0x64, - 0x61, 0x74, 0x61, 0xea, 0x02, 0x0b, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x3a, 0x3a, 0x56, - 0x31, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33, + 0x74, 0x68, 0x65, 0x20, 0x76, 0x69, 0x65, 0x77, 0x65, 0x72, 0x73, 0x20, 0x6f, 0x66, 0x20, 0x60, + 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x3a, 0x32, 0x30, 0x32, 0x31, 0x2d, 0x62, 0x75, + 0x64, 0x67, 0x65, 0x74, 0x60, 0x29, 0x2e, 0x0a, 0x41, 0x6e, 0x20, 0x60, 0x61, 0x75, 0x74, 0x68, + 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, + 0x69, 0x64, 0x60, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x62, 0x65, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, + 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x62, 0x6f, 0x64, 0x79, + 0x2e, 0x20, 0x49, 0x66, 0x20, 0x69, 0x74, 0x20, 0x69, 0x73, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x73, + 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6c, 0x61, + 0x74, 0x65, 0x73, 0x74, 0x20, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x20, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x20, 0x49, 0x44, 0x20, 0x77, 0x69, 0x6c, 0x6c, + 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, 0x65, 0x64, 0x2e, 0x20, 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, + 0x73, 0x74, 0x72, 0x6f, 0x6e, 0x67, 0x6c, 0x79, 0x20, 0x72, 0x65, 0x63, 0x6f, 0x6d, 0x6d, 0x65, + 0x6e, 0x64, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x79, 0x20, + 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6d, 0x6f, + 0x64, 0x65, 0x6c, 0x20, 0x69, 0x64, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x62, 0x65, 0x74, 0x74, 0x65, + 0x72, 0x20, 0x70, 0x65, 0x72, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x6e, 0x63, 0x65, 0x2e, 0x0a, 0x59, + 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x73, 0x70, 0x65, 0x63, + 0x69, 0x66, 0x79, 0x20, 0x60, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x75, 0x61, 0x6c, 0x5f, + 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x60, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x77, 0x69, 0x6c, + 0x6c, 0x20, 0x62, 0x65, 0x20, 0x74, 0x72, 0x65, 0x61, 0x74, 0x65, 0x64, 0x20, 0x61, 0x73, 0x20, + 0x72, 0x65, 0x67, 0x75, 0x6c, 0x61, 0x72, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, 0x2e, 0x20, + 0x45, 0x61, 0x63, 0x68, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x73, 0x65, 0x20, 0x74, 0x75, + 0x70, 0x6c, 0x65, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x6e, + 0x20, 0x61, 0x73, 0x73, 0x6f, 0x63, 0x69, 0x61, 0x74, 0x65, 0x64, 0x20, 0x60, 0x63, 0x6f, 0x6e, + 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x60, 0x2e, 0x0a, 0x59, 0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, + 0x20, 0x61, 0x6c, 0x73, 0x6f, 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, + 0x60, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x60, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, + 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x75, 0x73, + 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x65, 0x64, 0x20, 0x74, + 0x75, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x73, 0x79, 0x73, + 0x74, 0x65, 0x6d, 0x2e, 0x20, 0x49, 0x74, 0x20, 0x69, 0x73, 0x20, 0x73, 0x74, 0x72, 0x6f, 0x6e, + 0x67, 0x6c, 0x79, 0x20, 0x72, 0x65, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x20, + 0x74, 0x6f, 0x20, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, + 0x75, 0x65, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x69, + 0x6e, 0x70, 0x75, 0x74, 0x20, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x20, + 0x6f, 0x66, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x68, 0x65, 0x20, 0x63, 0x6f, 0x6e, 0x64, 0x69, + 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2c, 0x20, 0x74, 0x6f, 0x20, 0x65, 0x6e, 0x73, 0x75, 0x72, 0x65, + 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, 0x6c, 0x6c, 0x20, 0x74, 0x75, 0x70, 0x6c, 0x65, 0x73, + 0x20, 0x62, 0x65, 0x20, 0x65, 0x76, 0x61, 0x6c, 0x75, 0x61, 0x74, 0x65, 0x64, 0x20, 0x63, 0x6f, + 0x72, 0x72, 0x65, 0x63, 0x74, 0x6c, 0x79, 0x2e, 0x0a, 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, + 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x61, + 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x20, 0x75, + 0x73, 0x65, 0x72, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, + 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x22, 0x75, 0x73, 0x65, 0x72, 0x73, 0x22, 0x20, + 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x65, 0x20, 0x72, 0x65, 0x73, + 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x73, 0x65, 0x20, 0x72, 0x65, 0x73, + 0x75, 0x6c, 0x74, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, 0x65, + 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x63, 0x20, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, + 0x73, 0x2c, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x65, 0x74, 0x73, 0x20, 0x0a, 0x6f, 0x72, 0x20, + 0x74, 0x79, 0x70, 0x65, 0x2d, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x20, 0x70, 0x75, 0x62, 0x6c, 0x69, + 0x63, 0x20, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x2e, 0x20, 0x45, 0x61, 0x63, 0x68, 0x20, 0x6f, + 0x66, 0x20, 0x74, 0x68, 0x65, 0x73, 0x65, 0x20, 0x74, 0x79, 0x70, 0x65, 0x73, 0x20, 0x6f, 0x66, + 0x20, 0x72, 0x65, 0x73, 0x75, 0x6c, 0x74, 0x73, 0x20, 0x69, 0x73, 0x20, 0x65, 0x6e, 0x63, 0x6f, + 0x64, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x69, 0x74, 0x73, 0x20, 0x6f, 0x77, 0x6e, 0x20, 0x74, + 0x79, 0x70, 0x65, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x72, 0x65, 0x70, 0x72, + 0x65, 0x73, 0x65, 0x6e, 0x74, 0x65, 0x64, 0x20, 0x61, 0x73, 0x20, 0x61, 0x20, 0x73, 0x74, 0x72, + 0x69, 0x6e, 0x67, 0x2e, 0x49, 0x6e, 0x20, 0x63, 0x61, 0x73, 0x65, 0x73, 0x20, 0x77, 0x68, 0x65, + 0x72, 0x65, 0x20, 0x61, 0x20, 0x74, 0x79, 0x70, 0x65, 0x2d, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x20, + 0x70, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x20, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x20, 0x72, 0x65, + 0x73, 0x75, 0x6c, 0x74, 0x20, 0x69, 0x73, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, + 0x20, 0x28, 0x65, 0x2e, 0x67, 0x2e, 0x20, 0x60, 0x75, 0x73, 0x65, 0x72, 0x3a, 0x2a, 0x60, 0x29, + 0x2c, 0x20, 0x69, 0x74, 0x20, 0x63, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x20, 0x62, 0x65, 0x20, 0x69, + 0x6e, 0x66, 0x65, 0x72, 0x72, 0x65, 0x64, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x61, 0x6c, 0x6c, + 0x20, 0x73, 0x75, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x0a, 0x6f, 0x66, 0x20, 0x74, 0x68, 0x61, + 0x74, 0x20, 0x74, 0x79, 0x70, 0x65, 0x20, 0x68, 0x61, 0x76, 0x65, 0x20, 0x61, 0x20, 0x72, 0x65, + 0x6c, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20, 0x6f, 0x62, + 0x6a, 0x65, 0x63, 0x74, 0x3b, 0x20, 0x69, 0x74, 0x20, 0x69, 0x73, 0x20, 0x70, 0x6f, 0x73, 0x73, + 0x69, 0x62, 0x6c, 0x65, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x6e, 0x65, 0x67, 0x61, 0x74, 0x69, + 0x6f, 0x6e, 0x73, 0x20, 0x65, 0x78, 0x69, 0x73, 0x74, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x63, 0x68, + 0x65, 0x63, 0x6b, 0x73, 0x20, 0x73, 0x68, 0x6f, 0x75, 0x6c, 0x64, 0x20, 0x73, 0x74, 0x69, 0x6c, + 0x6c, 0x20, 0x62, 0x65, 0x20, 0x71, 0x75, 0x65, 0x72, 0x69, 0x65, 0x64, 0x0a, 0x6f, 0x6e, 0x20, + 0x69, 0x6e, 0x64, 0x69, 0x76, 0x69, 0x64, 0x75, 0x61, 0x6c, 0x20, 0x73, 0x75, 0x62, 0x6a, 0x65, + 0x63, 0x74, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x65, 0x6e, 0x73, 0x75, 0x72, 0x65, 0x20, 0x61, 0x63, + 0x63, 0x65, 0x73, 0x73, 0x20, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x61, 0x74, 0x20, 0x64, 0x6f, 0x63, + 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x2e, 0x54, 0x68, 0x65, 0x20, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, + 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, + 0x20, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x20, 0x61, 0x72, 0x72, 0x61, 0x79, 0x20, + 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x65, 0x64, 0x20, + 0x62, 0x79, 0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x78, 0x65, 0x63, 0x75, 0x74, 0x69, 0x6f, 0x6e, + 0x20, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, + 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x6c, 0x61, 0x67, 0x20, 0x4f, + 0x50, 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, 0x4c, 0x49, 0x53, 0x54, 0x5f, 0x55, 0x53, 0x45, 0x52, + 0x53, 0x5f, 0x44, 0x45, 0x41, 0x44, 0x4c, 0x49, 0x4e, 0x45, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x62, + 0x79, 0x20, 0x74, 0x68, 0x65, 0x20, 0x75, 0x70, 0x70, 0x65, 0x72, 0x20, 0x62, 0x6f, 0x75, 0x6e, + 0x64, 0x20, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x64, 0x20, 0x69, 0x6e, 0x20, 0x74, + 0x68, 0x65, 0x20, 0x66, 0x6c, 0x61, 0x67, 0x20, 0x4f, 0x50, 0x45, 0x4e, 0x46, 0x47, 0x41, 0x5f, + 0x4c, 0x49, 0x53, 0x54, 0x5f, 0x55, 0x53, 0x45, 0x52, 0x53, 0x5f, 0x4d, 0x41, 0x58, 0x5f, 0x52, + 0x45, 0x53, 0x55, 0x4c, 0x54, 0x53, 0x2c, 0x20, 0x77, 0x68, 0x69, 0x63, 0x68, 0x65, 0x76, 0x65, + 0x72, 0x20, 0x69, 0x73, 0x20, 0x68, 0x69, 0x74, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x2e, 0x0a, + 0x54, 0x68, 0x65, 0x20, 0x72, 0x65, 0x74, 0x75, 0x72, 0x6e, 0x65, 0x64, 0x20, 0x75, 0x73, 0x65, + 0x72, 0x73, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x62, 0x65, 0x20, 0x73, + 0x6f, 0x72, 0x74, 0x65, 0x64, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x74, 0x68, 0x65, 0x72, 0x65, + 0x66, 0x6f, 0x72, 0x65, 0x20, 0x74, 0x77, 0x6f, 0x20, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x63, + 0x61, 0x6c, 0x20, 0x63, 0x61, 0x6c, 0x6c, 0x73, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x79, 0x69, 0x65, + 0x6c, 0x64, 0x20, 0x64, 0x69, 0x66, 0x66, 0x65, 0x72, 0x65, 0x6e, 0x74, 0x20, 0x73, 0x65, 0x74, + 0x73, 0x20, 0x6f, 0x66, 0x20, 0x75, 0x73, 0x65, 0x72, 0x73, 0x2e, 0x2a, 0x09, 0x4c, 0x69, 0x73, + 0x74, 0x55, 0x73, 0x65, 0x72, 0x73, 0x82, 0xd3, 0xe4, 0x93, 0x02, 0x22, 0x3a, 0x01, 0x2a, 0x22, + 0x1d, 0x2f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x73, 0x2f, 0x7b, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, + 0x69, 0x64, 0x7d, 0x2f, 0x6c, 0x69, 0x73, 0x74, 0x2d, 0x75, 0x73, 0x65, 0x72, 0x73, 0x42, 0xa1, + 0x01, 0x0a, 0x0e, 0x63, 0x6f, 0x6d, 0x2e, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x76, + 0x31, 0x42, 0x13, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, + 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x31, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, + 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x61, 0x70, 0x69, + 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2f, 0x76, + 0x31, 0x3b, 0x6f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x76, 0x31, 0xa2, 0x02, 0x03, 0x4f, 0x58, + 0x58, 0xaa, 0x02, 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x2e, 0x56, 0x31, 0xca, 0x02, + 0x0a, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x5c, 0x56, 0x31, 0xe2, 0x02, 0x16, 0x4f, 0x70, + 0x65, 0x6e, 0x66, 0x67, 0x61, 0x5c, 0x56, 0x31, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, + 0x64, 0x61, 0x74, 0x61, 0xea, 0x02, 0x0b, 0x4f, 0x70, 0x65, 0x6e, 0x66, 0x67, 0x61, 0x3a, 0x3a, + 0x56, 0x31, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33, } var ( @@ -5901,7 +5928,7 @@ func file_openfga_v1_openfga_service_proto_rawDescGZIP() []byte { return file_openfga_v1_openfga_service_proto_rawDescData } -var file_openfga_v1_openfga_service_proto_msgTypes = make([]protoimpl.MessageInfo, 51) +var file_openfga_v1_openfga_service_proto_msgTypes = make([]protoimpl.MessageInfo, 52) var file_openfga_v1_openfga_service_proto_goTypes = []interface{}{ (*ListObjectsRequest)(nil), // 0: openfga.v1.ListObjectsRequest (*ListObjectsResponse)(nil), // 1: openfga.v1.ListObjectsResponse @@ -5954,132 +5981,134 @@ var file_openfga_v1_openfga_service_proto_goTypes = []interface{}{ (*Assertions)(nil), // 48: openfga.v1.Assertions nil, // 49: openfga.v1.BatchCheckResponse.ResultEntry nil, // 50: openfga.v1.WriteAuthorizationModelRequest.ConditionsEntry - (*ContextualTupleKeys)(nil), // 51: openfga.v1.ContextualTupleKeys - (*structpb.Struct)(nil), // 52: google.protobuf.Struct - (ConsistencyPreference)(0), // 53: openfga.v1.ConsistencyPreference - (*Object)(nil), // 54: openfga.v1.Object - (*UserTypeFilter)(nil), // 55: openfga.v1.UserTypeFilter - (*TupleKey)(nil), // 56: openfga.v1.TupleKey - (*User)(nil), // 57: openfga.v1.User - (*wrapperspb.Int32Value)(nil), // 58: google.protobuf.Int32Value - (*Tuple)(nil), // 59: openfga.v1.Tuple - (*TupleKeyWithoutCondition)(nil), // 60: openfga.v1.TupleKeyWithoutCondition - (ErrorCode)(0), // 61: openfga.v1.ErrorCode - (InternalErrorCode)(0), // 62: openfga.v1.InternalErrorCode - (*UsersetTree)(nil), // 63: openfga.v1.UsersetTree - (*AuthorizationModel)(nil), // 64: openfga.v1.AuthorizationModel - (*TypeDefinition)(nil), // 65: openfga.v1.TypeDefinition - (*timestamppb.Timestamp)(nil), // 66: google.protobuf.Timestamp - (*TupleChange)(nil), // 67: openfga.v1.TupleChange - (*Store)(nil), // 68: openfga.v1.Store - (*Condition)(nil), // 69: openfga.v1.Condition + nil, // 51: openfga.v1.WriteAuthorizationModelRequest.MetadataEntry + (*ContextualTupleKeys)(nil), // 52: openfga.v1.ContextualTupleKeys + (*structpb.Struct)(nil), // 53: google.protobuf.Struct + (ConsistencyPreference)(0), // 54: openfga.v1.ConsistencyPreference + (*Object)(nil), // 55: openfga.v1.Object + (*UserTypeFilter)(nil), // 56: openfga.v1.UserTypeFilter + (*TupleKey)(nil), // 57: openfga.v1.TupleKey + (*User)(nil), // 58: openfga.v1.User + (*wrapperspb.Int32Value)(nil), // 59: google.protobuf.Int32Value + (*Tuple)(nil), // 60: openfga.v1.Tuple + (*TupleKeyWithoutCondition)(nil), // 61: openfga.v1.TupleKeyWithoutCondition + (ErrorCode)(0), // 62: openfga.v1.ErrorCode + (InternalErrorCode)(0), // 63: openfga.v1.InternalErrorCode + (*UsersetTree)(nil), // 64: openfga.v1.UsersetTree + (*AuthorizationModel)(nil), // 65: openfga.v1.AuthorizationModel + (*TypeDefinition)(nil), // 66: openfga.v1.TypeDefinition + (*timestamppb.Timestamp)(nil), // 67: google.protobuf.Timestamp + (*TupleChange)(nil), // 68: openfga.v1.TupleChange + (*Store)(nil), // 69: openfga.v1.Store + (*Condition)(nil), // 70: openfga.v1.Condition } var file_openfga_v1_openfga_service_proto_depIdxs = []int32{ - 51, // 0: openfga.v1.ListObjectsRequest.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys - 52, // 1: openfga.v1.ListObjectsRequest.context:type_name -> google.protobuf.Struct - 53, // 2: openfga.v1.ListObjectsRequest.consistency:type_name -> openfga.v1.ConsistencyPreference - 54, // 3: openfga.v1.ListUsersRequest.object:type_name -> openfga.v1.Object - 55, // 4: openfga.v1.ListUsersRequest.user_filters:type_name -> openfga.v1.UserTypeFilter - 56, // 5: openfga.v1.ListUsersRequest.contextual_tuples:type_name -> openfga.v1.TupleKey - 52, // 6: openfga.v1.ListUsersRequest.context:type_name -> google.protobuf.Struct - 53, // 7: openfga.v1.ListUsersRequest.consistency:type_name -> openfga.v1.ConsistencyPreference - 57, // 8: openfga.v1.ListUsersResponse.users:type_name -> openfga.v1.User - 51, // 9: openfga.v1.StreamedListObjectsRequest.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys - 52, // 10: openfga.v1.StreamedListObjectsRequest.context:type_name -> google.protobuf.Struct - 53, // 11: openfga.v1.StreamedListObjectsRequest.consistency:type_name -> openfga.v1.ConsistencyPreference + 52, // 0: openfga.v1.ListObjectsRequest.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys + 53, // 1: openfga.v1.ListObjectsRequest.context:type_name -> google.protobuf.Struct + 54, // 2: openfga.v1.ListObjectsRequest.consistency:type_name -> openfga.v1.ConsistencyPreference + 55, // 3: openfga.v1.ListUsersRequest.object:type_name -> openfga.v1.Object + 56, // 4: openfga.v1.ListUsersRequest.user_filters:type_name -> openfga.v1.UserTypeFilter + 57, // 5: openfga.v1.ListUsersRequest.contextual_tuples:type_name -> openfga.v1.TupleKey + 53, // 6: openfga.v1.ListUsersRequest.context:type_name -> google.protobuf.Struct + 54, // 7: openfga.v1.ListUsersRequest.consistency:type_name -> openfga.v1.ConsistencyPreference + 58, // 8: openfga.v1.ListUsersResponse.users:type_name -> openfga.v1.User + 52, // 9: openfga.v1.StreamedListObjectsRequest.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys + 53, // 10: openfga.v1.StreamedListObjectsRequest.context:type_name -> google.protobuf.Struct + 54, // 11: openfga.v1.StreamedListObjectsRequest.consistency:type_name -> openfga.v1.ConsistencyPreference 7, // 12: openfga.v1.ReadRequest.tuple_key:type_name -> openfga.v1.ReadRequestTupleKey - 58, // 13: openfga.v1.ReadRequest.page_size:type_name -> google.protobuf.Int32Value - 53, // 14: openfga.v1.ReadRequest.consistency:type_name -> openfga.v1.ConsistencyPreference - 59, // 15: openfga.v1.ReadResponse.tuples:type_name -> openfga.v1.Tuple - 56, // 16: openfga.v1.WriteRequestWrites.tuple_keys:type_name -> openfga.v1.TupleKey - 60, // 17: openfga.v1.WriteRequestDeletes.tuple_keys:type_name -> openfga.v1.TupleKeyWithoutCondition + 59, // 13: openfga.v1.ReadRequest.page_size:type_name -> google.protobuf.Int32Value + 54, // 14: openfga.v1.ReadRequest.consistency:type_name -> openfga.v1.ConsistencyPreference + 60, // 15: openfga.v1.ReadResponse.tuples:type_name -> openfga.v1.Tuple + 57, // 16: openfga.v1.WriteRequestWrites.tuple_keys:type_name -> openfga.v1.TupleKey + 61, // 17: openfga.v1.WriteRequestDeletes.tuple_keys:type_name -> openfga.v1.TupleKeyWithoutCondition 9, // 18: openfga.v1.WriteRequest.writes:type_name -> openfga.v1.WriteRequestWrites 10, // 19: openfga.v1.WriteRequest.deletes:type_name -> openfga.v1.WriteRequestDeletes 14, // 20: openfga.v1.CheckRequest.tuple_key:type_name -> openfga.v1.CheckRequestTupleKey - 51, // 21: openfga.v1.CheckRequest.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys - 52, // 22: openfga.v1.CheckRequest.context:type_name -> google.protobuf.Struct - 53, // 23: openfga.v1.CheckRequest.consistency:type_name -> openfga.v1.ConsistencyPreference + 52, // 21: openfga.v1.CheckRequest.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys + 53, // 22: openfga.v1.CheckRequest.context:type_name -> google.protobuf.Struct + 54, // 23: openfga.v1.CheckRequest.consistency:type_name -> openfga.v1.ConsistencyPreference 17, // 24: openfga.v1.BatchCheckRequest.checks:type_name -> openfga.v1.BatchCheckItem - 53, // 25: openfga.v1.BatchCheckRequest.consistency:type_name -> openfga.v1.ConsistencyPreference + 54, // 25: openfga.v1.BatchCheckRequest.consistency:type_name -> openfga.v1.ConsistencyPreference 14, // 26: openfga.v1.BatchCheckItem.tuple_key:type_name -> openfga.v1.CheckRequestTupleKey - 51, // 27: openfga.v1.BatchCheckItem.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys - 52, // 28: openfga.v1.BatchCheckItem.context:type_name -> google.protobuf.Struct + 52, // 27: openfga.v1.BatchCheckItem.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys + 53, // 28: openfga.v1.BatchCheckItem.context:type_name -> google.protobuf.Struct 49, // 29: openfga.v1.BatchCheckResponse.result:type_name -> openfga.v1.BatchCheckResponse.ResultEntry 20, // 30: openfga.v1.BatchCheckSingleResult.error:type_name -> openfga.v1.CheckError - 61, // 31: openfga.v1.CheckError.input_error:type_name -> openfga.v1.ErrorCode - 62, // 32: openfga.v1.CheckError.internal_error:type_name -> openfga.v1.InternalErrorCode + 62, // 31: openfga.v1.CheckError.input_error:type_name -> openfga.v1.ErrorCode + 63, // 32: openfga.v1.CheckError.internal_error:type_name -> openfga.v1.InternalErrorCode 22, // 33: openfga.v1.ExpandRequest.tuple_key:type_name -> openfga.v1.ExpandRequestTupleKey - 53, // 34: openfga.v1.ExpandRequest.consistency:type_name -> openfga.v1.ConsistencyPreference - 51, // 35: openfga.v1.ExpandRequest.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys - 63, // 36: openfga.v1.ExpandResponse.tree:type_name -> openfga.v1.UsersetTree - 64, // 37: openfga.v1.ReadAuthorizationModelResponse.authorization_model:type_name -> openfga.v1.AuthorizationModel - 65, // 38: openfga.v1.WriteAuthorizationModelRequest.type_definitions:type_name -> openfga.v1.TypeDefinition + 54, // 34: openfga.v1.ExpandRequest.consistency:type_name -> openfga.v1.ConsistencyPreference + 52, // 35: openfga.v1.ExpandRequest.contextual_tuples:type_name -> openfga.v1.ContextualTupleKeys + 64, // 36: openfga.v1.ExpandResponse.tree:type_name -> openfga.v1.UsersetTree + 65, // 37: openfga.v1.ReadAuthorizationModelResponse.authorization_model:type_name -> openfga.v1.AuthorizationModel + 66, // 38: openfga.v1.WriteAuthorizationModelRequest.type_definitions:type_name -> openfga.v1.TypeDefinition 50, // 39: openfga.v1.WriteAuthorizationModelRequest.conditions:type_name -> openfga.v1.WriteAuthorizationModelRequest.ConditionsEntry - 58, // 40: openfga.v1.ReadAuthorizationModelsRequest.page_size:type_name -> google.protobuf.Int32Value - 64, // 41: openfga.v1.ReadAuthorizationModelsResponse.authorization_models:type_name -> openfga.v1.AuthorizationModel - 47, // 42: openfga.v1.WriteAssertionsRequest.assertions:type_name -> openfga.v1.Assertion - 47, // 43: openfga.v1.ReadAssertionsResponse.assertions:type_name -> openfga.v1.Assertion - 58, // 44: openfga.v1.ReadChangesRequest.page_size:type_name -> google.protobuf.Int32Value - 66, // 45: openfga.v1.ReadChangesRequest.start_time:type_name -> google.protobuf.Timestamp - 67, // 46: openfga.v1.ReadChangesResponse.changes:type_name -> openfga.v1.TupleChange - 66, // 47: openfga.v1.CreateStoreResponse.created_at:type_name -> google.protobuf.Timestamp - 66, // 48: openfga.v1.CreateStoreResponse.updated_at:type_name -> google.protobuf.Timestamp - 66, // 49: openfga.v1.UpdateStoreResponse.created_at:type_name -> google.protobuf.Timestamp - 66, // 50: openfga.v1.UpdateStoreResponse.updated_at:type_name -> google.protobuf.Timestamp - 66, // 51: openfga.v1.GetStoreResponse.created_at:type_name -> google.protobuf.Timestamp - 66, // 52: openfga.v1.GetStoreResponse.updated_at:type_name -> google.protobuf.Timestamp - 66, // 53: openfga.v1.GetStoreResponse.deleted_at:type_name -> google.protobuf.Timestamp - 58, // 54: openfga.v1.ListStoresRequest.page_size:type_name -> google.protobuf.Int32Value - 68, // 55: openfga.v1.ListStoresResponse.stores:type_name -> openfga.v1.Store - 46, // 56: openfga.v1.Assertion.tuple_key:type_name -> openfga.v1.AssertionTupleKey - 56, // 57: openfga.v1.Assertion.contextual_tuples:type_name -> openfga.v1.TupleKey - 52, // 58: openfga.v1.Assertion.context:type_name -> google.protobuf.Struct - 47, // 59: openfga.v1.Assertions.assertions:type_name -> openfga.v1.Assertion - 19, // 60: openfga.v1.BatchCheckResponse.ResultEntry.value:type_name -> openfga.v1.BatchCheckSingleResult - 69, // 61: openfga.v1.WriteAuthorizationModelRequest.ConditionsEntry.value:type_name -> openfga.v1.Condition - 6, // 62: openfga.v1.OpenFGAService.Read:input_type -> openfga.v1.ReadRequest - 11, // 63: openfga.v1.OpenFGAService.Write:input_type -> openfga.v1.WriteRequest - 13, // 64: openfga.v1.OpenFGAService.Check:input_type -> openfga.v1.CheckRequest - 16, // 65: openfga.v1.OpenFGAService.BatchCheck:input_type -> openfga.v1.BatchCheckRequest - 21, // 66: openfga.v1.OpenFGAService.Expand:input_type -> openfga.v1.ExpandRequest - 28, // 67: openfga.v1.OpenFGAService.ReadAuthorizationModels:input_type -> openfga.v1.ReadAuthorizationModelsRequest - 24, // 68: openfga.v1.OpenFGAService.ReadAuthorizationModel:input_type -> openfga.v1.ReadAuthorizationModelRequest - 26, // 69: openfga.v1.OpenFGAService.WriteAuthorizationModel:input_type -> openfga.v1.WriteAuthorizationModelRequest - 30, // 70: openfga.v1.OpenFGAService.WriteAssertions:input_type -> openfga.v1.WriteAssertionsRequest - 32, // 71: openfga.v1.OpenFGAService.ReadAssertions:input_type -> openfga.v1.ReadAssertionsRequest - 34, // 72: openfga.v1.OpenFGAService.ReadChanges:input_type -> openfga.v1.ReadChangesRequest - 36, // 73: openfga.v1.OpenFGAService.CreateStore:input_type -> openfga.v1.CreateStoreRequest - 38, // 74: openfga.v1.OpenFGAService.UpdateStore:input_type -> openfga.v1.UpdateStoreRequest - 40, // 75: openfga.v1.OpenFGAService.DeleteStore:input_type -> openfga.v1.DeleteStoreRequest - 42, // 76: openfga.v1.OpenFGAService.GetStore:input_type -> openfga.v1.GetStoreRequest - 44, // 77: openfga.v1.OpenFGAService.ListStores:input_type -> openfga.v1.ListStoresRequest - 4, // 78: openfga.v1.OpenFGAService.StreamedListObjects:input_type -> openfga.v1.StreamedListObjectsRequest - 0, // 79: openfga.v1.OpenFGAService.ListObjects:input_type -> openfga.v1.ListObjectsRequest - 2, // 80: openfga.v1.OpenFGAService.ListUsers:input_type -> openfga.v1.ListUsersRequest - 8, // 81: openfga.v1.OpenFGAService.Read:output_type -> openfga.v1.ReadResponse - 12, // 82: openfga.v1.OpenFGAService.Write:output_type -> openfga.v1.WriteResponse - 15, // 83: openfga.v1.OpenFGAService.Check:output_type -> openfga.v1.CheckResponse - 18, // 84: openfga.v1.OpenFGAService.BatchCheck:output_type -> openfga.v1.BatchCheckResponse - 23, // 85: openfga.v1.OpenFGAService.Expand:output_type -> openfga.v1.ExpandResponse - 29, // 86: openfga.v1.OpenFGAService.ReadAuthorizationModels:output_type -> openfga.v1.ReadAuthorizationModelsResponse - 25, // 87: openfga.v1.OpenFGAService.ReadAuthorizationModel:output_type -> openfga.v1.ReadAuthorizationModelResponse - 27, // 88: openfga.v1.OpenFGAService.WriteAuthorizationModel:output_type -> openfga.v1.WriteAuthorizationModelResponse - 31, // 89: openfga.v1.OpenFGAService.WriteAssertions:output_type -> openfga.v1.WriteAssertionsResponse - 33, // 90: openfga.v1.OpenFGAService.ReadAssertions:output_type -> openfga.v1.ReadAssertionsResponse - 35, // 91: openfga.v1.OpenFGAService.ReadChanges:output_type -> openfga.v1.ReadChangesResponse - 37, // 92: openfga.v1.OpenFGAService.CreateStore:output_type -> openfga.v1.CreateStoreResponse - 39, // 93: openfga.v1.OpenFGAService.UpdateStore:output_type -> openfga.v1.UpdateStoreResponse - 41, // 94: openfga.v1.OpenFGAService.DeleteStore:output_type -> openfga.v1.DeleteStoreResponse - 43, // 95: openfga.v1.OpenFGAService.GetStore:output_type -> openfga.v1.GetStoreResponse - 45, // 96: openfga.v1.OpenFGAService.ListStores:output_type -> openfga.v1.ListStoresResponse - 5, // 97: openfga.v1.OpenFGAService.StreamedListObjects:output_type -> openfga.v1.StreamedListObjectsResponse - 1, // 98: openfga.v1.OpenFGAService.ListObjects:output_type -> openfga.v1.ListObjectsResponse - 3, // 99: openfga.v1.OpenFGAService.ListUsers:output_type -> openfga.v1.ListUsersResponse - 81, // [81:100] is the sub-list for method output_type - 62, // [62:81] is the sub-list for method input_type - 62, // [62:62] is the sub-list for extension type_name - 62, // [62:62] is the sub-list for extension extendee - 0, // [0:62] is the sub-list for field type_name + 51, // 40: openfga.v1.WriteAuthorizationModelRequest.metadata:type_name -> openfga.v1.WriteAuthorizationModelRequest.MetadataEntry + 59, // 41: openfga.v1.ReadAuthorizationModelsRequest.page_size:type_name -> google.protobuf.Int32Value + 65, // 42: openfga.v1.ReadAuthorizationModelsResponse.authorization_models:type_name -> openfga.v1.AuthorizationModel + 47, // 43: openfga.v1.WriteAssertionsRequest.assertions:type_name -> openfga.v1.Assertion + 47, // 44: openfga.v1.ReadAssertionsResponse.assertions:type_name -> openfga.v1.Assertion + 59, // 45: openfga.v1.ReadChangesRequest.page_size:type_name -> google.protobuf.Int32Value + 67, // 46: openfga.v1.ReadChangesRequest.start_time:type_name -> google.protobuf.Timestamp + 68, // 47: openfga.v1.ReadChangesResponse.changes:type_name -> openfga.v1.TupleChange + 67, // 48: openfga.v1.CreateStoreResponse.created_at:type_name -> google.protobuf.Timestamp + 67, // 49: openfga.v1.CreateStoreResponse.updated_at:type_name -> google.protobuf.Timestamp + 67, // 50: openfga.v1.UpdateStoreResponse.created_at:type_name -> google.protobuf.Timestamp + 67, // 51: openfga.v1.UpdateStoreResponse.updated_at:type_name -> google.protobuf.Timestamp + 67, // 52: openfga.v1.GetStoreResponse.created_at:type_name -> google.protobuf.Timestamp + 67, // 53: openfga.v1.GetStoreResponse.updated_at:type_name -> google.protobuf.Timestamp + 67, // 54: openfga.v1.GetStoreResponse.deleted_at:type_name -> google.protobuf.Timestamp + 59, // 55: openfga.v1.ListStoresRequest.page_size:type_name -> google.protobuf.Int32Value + 69, // 56: openfga.v1.ListStoresResponse.stores:type_name -> openfga.v1.Store + 46, // 57: openfga.v1.Assertion.tuple_key:type_name -> openfga.v1.AssertionTupleKey + 57, // 58: openfga.v1.Assertion.contextual_tuples:type_name -> openfga.v1.TupleKey + 53, // 59: openfga.v1.Assertion.context:type_name -> google.protobuf.Struct + 47, // 60: openfga.v1.Assertions.assertions:type_name -> openfga.v1.Assertion + 19, // 61: openfga.v1.BatchCheckResponse.ResultEntry.value:type_name -> openfga.v1.BatchCheckSingleResult + 70, // 62: openfga.v1.WriteAuthorizationModelRequest.ConditionsEntry.value:type_name -> openfga.v1.Condition + 6, // 63: openfga.v1.OpenFGAService.Read:input_type -> openfga.v1.ReadRequest + 11, // 64: openfga.v1.OpenFGAService.Write:input_type -> openfga.v1.WriteRequest + 13, // 65: openfga.v1.OpenFGAService.Check:input_type -> openfga.v1.CheckRequest + 16, // 66: openfga.v1.OpenFGAService.BatchCheck:input_type -> openfga.v1.BatchCheckRequest + 21, // 67: openfga.v1.OpenFGAService.Expand:input_type -> openfga.v1.ExpandRequest + 28, // 68: openfga.v1.OpenFGAService.ReadAuthorizationModels:input_type -> openfga.v1.ReadAuthorizationModelsRequest + 24, // 69: openfga.v1.OpenFGAService.ReadAuthorizationModel:input_type -> openfga.v1.ReadAuthorizationModelRequest + 26, // 70: openfga.v1.OpenFGAService.WriteAuthorizationModel:input_type -> openfga.v1.WriteAuthorizationModelRequest + 30, // 71: openfga.v1.OpenFGAService.WriteAssertions:input_type -> openfga.v1.WriteAssertionsRequest + 32, // 72: openfga.v1.OpenFGAService.ReadAssertions:input_type -> openfga.v1.ReadAssertionsRequest + 34, // 73: openfga.v1.OpenFGAService.ReadChanges:input_type -> openfga.v1.ReadChangesRequest + 36, // 74: openfga.v1.OpenFGAService.CreateStore:input_type -> openfga.v1.CreateStoreRequest + 38, // 75: openfga.v1.OpenFGAService.UpdateStore:input_type -> openfga.v1.UpdateStoreRequest + 40, // 76: openfga.v1.OpenFGAService.DeleteStore:input_type -> openfga.v1.DeleteStoreRequest + 42, // 77: openfga.v1.OpenFGAService.GetStore:input_type -> openfga.v1.GetStoreRequest + 44, // 78: openfga.v1.OpenFGAService.ListStores:input_type -> openfga.v1.ListStoresRequest + 4, // 79: openfga.v1.OpenFGAService.StreamedListObjects:input_type -> openfga.v1.StreamedListObjectsRequest + 0, // 80: openfga.v1.OpenFGAService.ListObjects:input_type -> openfga.v1.ListObjectsRequest + 2, // 81: openfga.v1.OpenFGAService.ListUsers:input_type -> openfga.v1.ListUsersRequest + 8, // 82: openfga.v1.OpenFGAService.Read:output_type -> openfga.v1.ReadResponse + 12, // 83: openfga.v1.OpenFGAService.Write:output_type -> openfga.v1.WriteResponse + 15, // 84: openfga.v1.OpenFGAService.Check:output_type -> openfga.v1.CheckResponse + 18, // 85: openfga.v1.OpenFGAService.BatchCheck:output_type -> openfga.v1.BatchCheckResponse + 23, // 86: openfga.v1.OpenFGAService.Expand:output_type -> openfga.v1.ExpandResponse + 29, // 87: openfga.v1.OpenFGAService.ReadAuthorizationModels:output_type -> openfga.v1.ReadAuthorizationModelsResponse + 25, // 88: openfga.v1.OpenFGAService.ReadAuthorizationModel:output_type -> openfga.v1.ReadAuthorizationModelResponse + 27, // 89: openfga.v1.OpenFGAService.WriteAuthorizationModel:output_type -> openfga.v1.WriteAuthorizationModelResponse + 31, // 90: openfga.v1.OpenFGAService.WriteAssertions:output_type -> openfga.v1.WriteAssertionsResponse + 33, // 91: openfga.v1.OpenFGAService.ReadAssertions:output_type -> openfga.v1.ReadAssertionsResponse + 35, // 92: openfga.v1.OpenFGAService.ReadChanges:output_type -> openfga.v1.ReadChangesResponse + 37, // 93: openfga.v1.OpenFGAService.CreateStore:output_type -> openfga.v1.CreateStoreResponse + 39, // 94: openfga.v1.OpenFGAService.UpdateStore:output_type -> openfga.v1.UpdateStoreResponse + 41, // 95: openfga.v1.OpenFGAService.DeleteStore:output_type -> openfga.v1.DeleteStoreResponse + 43, // 96: openfga.v1.OpenFGAService.GetStore:output_type -> openfga.v1.GetStoreResponse + 45, // 97: openfga.v1.OpenFGAService.ListStores:output_type -> openfga.v1.ListStoresResponse + 5, // 98: openfga.v1.OpenFGAService.StreamedListObjects:output_type -> openfga.v1.StreamedListObjectsResponse + 1, // 99: openfga.v1.OpenFGAService.ListObjects:output_type -> openfga.v1.ListObjectsResponse + 3, // 100: openfga.v1.OpenFGAService.ListUsers:output_type -> openfga.v1.ListUsersResponse + 82, // [82:101] is the sub-list for method output_type + 63, // [63:82] is the sub-list for method input_type + 63, // [63:63] is the sub-list for extension type_name + 63, // [63:63] is the sub-list for extension extendee + 0, // [0:63] is the sub-list for field type_name } func init() { file_openfga_v1_openfga_service_proto_init() } @@ -6695,7 +6724,7 @@ func file_openfga_v1_openfga_service_proto_init() { GoPackagePath: reflect.TypeOf(x{}).PkgPath(), RawDescriptor: file_openfga_v1_openfga_service_proto_rawDesc, NumEnums: 0, - NumMessages: 51, + NumMessages: 52, NumExtensions: 0, NumServices: 1, }, diff --git a/proto/openfga/v1/openfga_service.pb.validate.go b/proto/openfga/v1/openfga_service.pb.validate.go index 0a1c9418..25c301c1 100644 --- a/proto/openfga/v1/openfga_service.pb.validate.go +++ b/proto/openfga/v1/openfga_service.pb.validate.go @@ -4473,6 +4473,73 @@ func (m *WriteAuthorizationModelRequest) validate(all bool) error { } } + if len(m.GetMetadata()) > 20 { + err := WriteAuthorizationModelRequestValidationError{ + field: "Metadata", + reason: "value must contain no more than 20 pair(s)", + } + if !all { + return err + } + errors = append(errors, err) + } + + { + sorted_keys := make([]string, len(m.GetMetadata())) + i := 0 + for key := range m.GetMetadata() { + sorted_keys[i] = key + i++ + } + sort.Slice(sorted_keys, func(i, j int) bool { return sorted_keys[i] < sorted_keys[j] }) + for _, key := range sorted_keys { + val := m.GetMetadata()[key] + _ = val + + if key != "" { + + if len(key) > 63 { + err := WriteAuthorizationModelRequestValidationError{ + field: fmt.Sprintf("Metadata[%v]", key), + reason: "value length must be at most 63 bytes", + } + if !all { + return err + } + errors = append(errors, err) + } + + if !_WriteAuthorizationModelRequest_Metadata_Pattern.MatchString(key) { + err := WriteAuthorizationModelRequestValidationError{ + field: fmt.Sprintf("Metadata[%v]", key), + reason: "value does not match regex pattern \"^[a-z0-9]([a-z0-9\\\\-\\\\.]*[a-z0-9])?$\"", + } + if !all { + return err + } + errors = append(errors, err) + } + + } + + if val != "" { + + if len(val) > 256 { + err := WriteAuthorizationModelRequestValidationError{ + field: fmt.Sprintf("Metadata[%v]", key), + reason: "value length must be at most 256 bytes", + } + if !all { + return err + } + errors = append(errors, err) + } + + } + + } + } + if len(errors) > 0 { return WriteAuthorizationModelRequestMultiError(errors) } @@ -4564,6 +4631,8 @@ var _WriteAuthorizationModelRequest_SchemaVersion_InLookup = map[string]struct{} var _WriteAuthorizationModelRequest_Conditions_Pattern = regexp.MustCompile("^[^:#@\\s]{1,50}$") +var _WriteAuthorizationModelRequest_Metadata_Pattern = regexp.MustCompile("^[a-z0-9]([a-z0-9\\-\\.]*[a-z0-9])?$") + // Validate checks the field values on WriteAuthorizationModelResponse with the // rules defined in the proto definition for this message. If any rules are // violated, the first error encountered is returned, or nil if there are no violations.