corev1

type AllowedCaveat struct {

	// *
	// caveat_name is the name of the allowed caveat.
	CaveatName string `protobuf:"bytes,1,opt,name=caveat_name,json=caveatName,proto3" json:"caveat_name,omitempty"`
	// contains filtered or unexported fields
}

type AllowedRelation struct {

	// * namespace is the full namespace path of the allowed object type
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// *
	// relation_or_wildcard indicates the relation for the objects, or a wildcard.
	//
	// Types that are valid to be assigned to RelationOrWildcard:
	//
	//	*AllowedRelation_Relation
	//	*AllowedRelation_PublicWildcard_
	RelationOrWildcard isAllowedRelation_RelationOrWildcard `protobuf_oneof:"relation_or_wildcard"`
	// * source_position contains the position of the type in the source schema, if any
	SourcePosition *SourcePosition `protobuf:"bytes,5,opt,name=source_position,json=sourcePosition,proto3" json:"source_position,omitempty"`
	// *
	// required_caveat defines the required caveat on this relation.
	RequiredCaveat *AllowedCaveat `protobuf:"bytes,6,opt,name=required_caveat,json=requiredCaveat,proto3" json:"required_caveat,omitempty"`
	// *
	// required_expiration defines the required expiration on this relation.
	RequiredExpiration *ExpirationTrait `protobuf:"bytes,7,opt,name=required_expiration,json=requiredExpiration,proto3" json:"required_expiration,omitempty"`
	// contains filtered or unexported fields
}

type AllowedRelation_PublicWildcard struct {
	// contains filtered or unexported fields
}

type AllowedRelation_PublicWildcard_ struct {
	PublicWildcard *AllowedRelation_PublicWildcard `protobuf:"bytes,4,opt,name=public_wildcard,json=publicWildcard,proto3,oneof"`
}

type AllowedRelation_Relation struct {
	Relation string `protobuf:"bytes,3,opt,name=relation,proto3,oneof"`
}

type CaveatDefinition struct {

	// * name represents the globally-unique identifier of the caveat *
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// * serialized_expression is the byte representation of a caveat's logic
	SerializedExpression []byte `protobuf:"bytes,2,opt,name=serialized_expression,json=serializedExpression,proto3" json:"serialized_expression,omitempty"`
	// * parameters_and_types is a map from parameter name to its type
	ParameterTypes map[string]*CaveatTypeReference `` /* 177-byte string literal not displayed */
	// * metadata contains compiler metadata from schemas compiled into caveats
	Metadata *Metadata `protobuf:"bytes,4,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// * source_position contains the position of the caveat in the source schema, if any
	SourcePosition *SourcePosition `protobuf:"bytes,5,opt,name=source_position,json=sourcePosition,proto3" json:"source_position,omitempty"`
	// contains filtered or unexported fields
}

type CaveatExpression struct {

	// Types that are valid to be assigned to OperationOrCaveat:
	//
	//	*CaveatExpression_Operation
	//	*CaveatExpression_Caveat
	OperationOrCaveat isCaveatExpression_OperationOrCaveat `protobuf_oneof:"operation_or_caveat"`
	// contains filtered or unexported fields
}

type CaveatExpression_Caveat struct {
	Caveat *ContextualizedCaveat `protobuf:"bytes,2,opt,name=caveat,proto3,oneof"`
}

type CaveatExpression_Operation struct {
	Operation *CaveatOperation `protobuf:"bytes,1,opt,name=operation,proto3,oneof"`
}

type CaveatOperation struct {
	Op       CaveatOperation_Operation `protobuf:"varint,1,opt,name=op,proto3,enum=core.v1.CaveatOperation_Operation" json:"op,omitempty"`
	Children []*CaveatExpression       `protobuf:"bytes,2,rep,name=children,proto3" json:"children,omitempty"`
	// contains filtered or unexported fields
}

type CaveatOperation_Operation int32

type CaveatTypeReference struct {
	TypeName   string                 `protobuf:"bytes,1,opt,name=type_name,json=typeName,proto3" json:"type_name,omitempty"`
	ChildTypes []*CaveatTypeReference `protobuf:"bytes,2,rep,name=child_types,json=childTypes,proto3" json:"child_types,omitempty"`
	// contains filtered or unexported fields
}

type ComputedUserset struct {
	Object         ComputedUserset_Object `protobuf:"varint,1,opt,name=object,proto3,enum=core.v1.ComputedUserset_Object" json:"object,omitempty"`
	Relation       string                 `protobuf:"bytes,2,opt,name=relation,proto3" json:"relation,omitempty"`
	SourcePosition *SourcePosition        `protobuf:"bytes,3,opt,name=source_position,json=sourcePosition,proto3" json:"source_position,omitempty"`
	// contains filtered or unexported fields
}

type ComputedUserset_Object int32

type ContextualizedCaveat struct {

	// * caveat_name is the name used in the schema for a stored caveat *
	CaveatName string `protobuf:"bytes,1,opt,name=caveat_name,json=caveatName,proto3" json:"caveat_name,omitempty"`
	// * context are arguments used as input during caveat evaluation with a predefined value *
	Context *structpb.Struct `protobuf:"bytes,2,opt,name=context,proto3" json:"context,omitempty"`
	// contains filtered or unexported fields
}

type DirectSubject struct {
	Subject          *ObjectAndRelation `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
	CaveatExpression *CaveatExpression  `protobuf:"bytes,2,opt,name=caveat_expression,json=caveatExpression,proto3" json:"caveat_expression,omitempty"`
	// contains filtered or unexported fields
}

type DirectSubjects struct {
	Subjects []*DirectSubject `protobuf:"bytes,1,rep,name=subjects,proto3" json:"subjects,omitempty"`
	// contains filtered or unexported fields
}

type ExpirationTrait struct {
	// contains filtered or unexported fields
}

type FunctionedTupleToUserset struct {
	Function        FunctionedTupleToUserset_Function  `protobuf:"varint,1,opt,name=function,proto3,enum=core.v1.FunctionedTupleToUserset_Function" json:"function,omitempty"`
	Tupleset        *FunctionedTupleToUserset_Tupleset `protobuf:"bytes,2,opt,name=tupleset,proto3" json:"tupleset,omitempty"`
	ComputedUserset *ComputedUserset                   `protobuf:"bytes,3,opt,name=computed_userset,json=computedUserset,proto3" json:"computed_userset,omitempty"`
	SourcePosition  *SourcePosition                    `protobuf:"bytes,4,opt,name=source_position,json=sourcePosition,proto3" json:"source_position,omitempty"`
	// contains filtered or unexported fields
}

type FunctionedTupleToUserset_Function int32

type FunctionedTupleToUserset_Tupleset struct {
	Relation string `protobuf:"bytes,1,opt,name=relation,proto3" json:"relation,omitempty"`
	// contains filtered or unexported fields
}

type Metadata struct {
	MetadataMessage []*anypb.Any `protobuf:"bytes,1,rep,name=metadata_message,json=metadataMessage,proto3" json:"metadata_message,omitempty"`
	// contains filtered or unexported fields
}

type NamespaceDefinition struct {

	// * name is the unique for the namespace, including prefixes (which are optional)
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// * relation contains the relations and permissions defined in the namespace
	Relation []*Relation `protobuf:"bytes,2,rep,name=relation,proto3" json:"relation,omitempty"`
	// * metadata contains compiler metadata from schemas compiled into namespaces
	Metadata *Metadata `protobuf:"bytes,3,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// * source_position contains the position of the namespace in the source schema, if any
	SourcePosition *SourcePosition `protobuf:"bytes,4,opt,name=source_position,json=sourcePosition,proto3" json:"source_position,omitempty"`
	// contains filtered or unexported fields
}

type ObjectAndRelation struct {

	// * namespace is the full namespace path for the referenced object
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// * object_id is the unique ID for the object within the namespace
	ObjectId string `protobuf:"bytes,2,opt,name=object_id,json=objectId,proto3" json:"object_id,omitempty"`
	// * relation is the name of the referenced relation or permission under the namespace
	Relation string `protobuf:"bytes,3,opt,name=relation,proto3" json:"relation,omitempty"`
	// contains filtered or unexported fields
}

type ReachabilityEntrypoint struct {

	// *
	// kind is the kind of the entrypoint.
	Kind ReachabilityEntrypoint_ReachabilityEntrypointKind `protobuf:"varint,1,opt,name=kind,proto3,enum=core.v1.ReachabilityEntrypoint_ReachabilityEntrypointKind" json:"kind,omitempty"`
	// *
	// target_relation is the relation on which the entrypoint exists.
	TargetRelation *RelationReference `protobuf:"bytes,2,opt,name=target_relation,json=targetRelation,proto3" json:"target_relation,omitempty"`
	// *
	// result_status contains the status of objects found for this entrypoint as direct results for
	// the parent relation/permission.
	ResultStatus ReachabilityEntrypoint_EntrypointResultStatus `` /* 157-byte string literal not displayed */
	// *
	// tupleset_relation is the name of the tupleset relation on the TupleToUserset this entrypoint
	// represents, if applicable.
	TuplesetRelation string `protobuf:"bytes,5,opt,name=tupleset_relation,json=tuplesetRelation,proto3" json:"tupleset_relation,omitempty"`
	// *
	// computed_userset_relation is the name of the computed userset relation on the ComputedUserset
	// this entrypoint represents, if applicable.
	ComputedUsersetRelation string `` /* 132-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ReachabilityEntrypoint_EntrypointResultStatus int32

type ReachabilityEntrypoint_ReachabilityEntrypointKind int32

type ReachabilityEntrypoints struct {

	// *
	// entrypoints are the entrypoints found.
	Entrypoints []*ReachabilityEntrypoint `protobuf:"bytes,1,rep,name=entrypoints,proto3" json:"entrypoints,omitempty"`
	// *
	// subject_type, if specified, is the type of subjects to which the entrypoint(s) apply. A
	// subject type is only set for wildcards.
	SubjectType string `protobuf:"bytes,2,opt,name=subject_type,json=subjectType,proto3" json:"subject_type,omitempty"`
	// *
	// subject_relation, if specified, is the type and relation of subjects to which the
	// entrypoint(s) apply.
	SubjectRelation *RelationReference `protobuf:"bytes,3,opt,name=subject_relation,json=subjectRelation,proto3" json:"subject_relation,omitempty"`
	// contains filtered or unexported fields
}

type ReachabilityGraph struct {

	// *
	// entrypoints_by_subject_type provides all entrypoints by subject *type*, representing wildcards.
	// The keys of the map are the full path(s) for the namespace(s) referenced by reachable wildcards
	EntrypointsBySubjectType map[string]*ReachabilityEntrypoints `` /* 211-byte string literal not displayed */
	// *
	// entrypoints_by_subject_relation provides all entrypoints by subject type+relation.
	// The keys of the map are of the form `namespace_path#relation_name`
	EntrypointsBySubjectRelation map[string]*ReachabilityEntrypoints `` /* 223-byte string literal not displayed */
	// contains filtered or unexported fields
}

type Relation struct {

	// * name is the full name for the relation or permission
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// * userset_rewrite, if specified, is the rewrite for computing the value of the permission.
	UsersetRewrite *UsersetRewrite `protobuf:"bytes,2,opt,name=userset_rewrite,json=usersetRewrite,proto3" json:"userset_rewrite,omitempty"`
	// *
	// type_information, if specified, is the list of allowed object types that can appear in this
	// relation
	TypeInformation *TypeInformation `protobuf:"bytes,3,opt,name=type_information,json=typeInformation,proto3" json:"type_information,omitempty"`
	// * metadata contains compiler metadata from schemas compiled into namespaces
	Metadata *Metadata `protobuf:"bytes,4,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// * source_position contains the position of the relation in the source schema, if any
	SourcePosition    *SourcePosition `protobuf:"bytes,5,opt,name=source_position,json=sourcePosition,proto3" json:"source_position,omitempty"`
	AliasingRelation  string          `protobuf:"bytes,6,opt,name=aliasing_relation,json=aliasingRelation,proto3" json:"aliasing_relation,omitempty"`
	CanonicalCacheKey string          `protobuf:"bytes,7,opt,name=canonical_cache_key,json=canonicalCacheKey,proto3" json:"canonical_cache_key,omitempty"`
	// contains filtered or unexported fields
}

type RelationReference struct {

	// * namespace is the full namespace path
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// * relation is the name of the referenced relation or permission under the namespace
	Relation string `protobuf:"bytes,3,opt,name=relation,proto3" json:"relation,omitempty"`
	// contains filtered or unexported fields
}

type RelationTuple struct {

	// * resource_and_relation is the resource for the tuple
	ResourceAndRelation *ObjectAndRelation `protobuf:"bytes,1,opt,name=resource_and_relation,json=resourceAndRelation,proto3" json:"resource_and_relation,omitempty"`
	// * subject is the subject for the tuple
	Subject *ObjectAndRelation `protobuf:"bytes,2,opt,name=subject,proto3" json:"subject,omitempty"`
	// * caveat is a reference to a the caveat that must be enforced over the tuple *
	Caveat *ContextualizedCaveat `protobuf:"bytes,3,opt,name=caveat,proto3" json:"caveat,omitempty"`
	// * integrity holds (optional) information about the integrity of the tuple
	Integrity *RelationshipIntegrity `protobuf:"bytes,4,opt,name=integrity,proto3" json:"integrity,omitempty"`
	// * optional_expiration_time is the (optional) time at which the tuple expires
	OptionalExpirationTime *timestamppb.Timestamp `` /* 129-byte string literal not displayed */
	// contains filtered or unexported fields
}