Update protobuf definitions: 0f8ccde2

By allanger Commit link: 0f8ccde25c Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/93
Update protobuf definitions: 951d2802
2026-05-26 07:23:49 +00:00 · 2026-05-18 17:51:30 +00:00 · 2026-05-17 20:08:45 +00:00 · 2026-05-15 13:23:01 +00:00 · 2026-05-15 13:21:54 +00:00 · 2026-05-15 08:37:21 +00:00
17 changed files with 3631 additions and 3114 deletions
--- a/APIDoc.md
+++ b/APIDoc.md
@@ -0,0 +1,833 @@
+# Protocol Documentation
+<a name="top"></a>
+
+## Table of Contents
+
+- [accounts/v1/accounts_v1.proto](#accounts_v1_accounts_v1-proto)
+    - [AccountData](#accounts-v1-AccountData)
+    - [AccountPassword](#accounts-v1-AccountPassword)
+    - [IsEmailVerifiedRequest](#accounts-v1-IsEmailVerifiedRequest)
+    - [IsEmailVerifiedResponse](#accounts-v1-IsEmailVerifiedResponse)
+    - [NewPasswordRequest](#accounts-v1-NewPasswordRequest)
+    - [PersonalData](#accounts-v1-PersonalData)
+    - [RefreshTokenRequest](#accounts-v1-RefreshTokenRequest)
+    - [ResetPasswordRequest](#accounts-v1-ResetPasswordRequest)
+    - [SignInRequest](#accounts-v1-SignInRequest)
+    - [SignUpRequest](#accounts-v1-SignUpRequest)
+  
+    - [AccountsService](#accounts-v1-AccountsService)
+    - [PublicAccountsService](#accounts-v1-PublicAccountsService)
+  
+- [projects/v1/projects_v1.proto](#projects_v1_projects_v1-proto)
+    - [CreateProjectRequest](#projects-v1-CreateProjectRequest)
+    - [CreateProjectResponse](#projects-v1-CreateProjectResponse)
+    - [GetProjectRequest](#projects-v1-GetProjectRequest)
+    - [GetProjectResponse](#projects-v1-GetProjectResponse)
+    - [ListProjectsRequest](#projects-v1-ListProjectsRequest)
+    - [ListProjectsResponse](#projects-v1-ListProjectsResponse)
+    - [UpdateProjectRequest](#projects-v1-UpdateProjectRequest)
+    - [UpdateProjectResponse](#projects-v1-UpdateProjectResponse)
+  
+    - [ProjectsService](#projects-v1-ProjectsService)
+  
+- [test/v1/test_v1.proto](#test_v1_test_v1-proto)
+    - [PingRequest](#test-v1-PingRequest)
+    - [PingResponse](#test-v1-PingResponse)
+    - [PingStreamResponse](#test-v1-PingStreamResponse)
+    - [PongRequest](#test-v1-PongRequest)
+    - [PongResponse](#test-v1-PongResponse)
+    - [PongStreamResponse](#test-v1-PongStreamResponse)
+  
+    - [PublicTestService](#test-v1-PublicTestService)
+    - [TestService](#test-v1-TestService)
+  
+- [tokens/v1/tokens_v1.proto](#tokens_v1_tokens_v1-proto)
+    - [AuthenticateWithTokenRequest](#tokens-v1-AuthenticateWithTokenRequest)
+    - [CreateTokenRequest](#tokens-v1-CreateTokenRequest)
+    - [CreateTokenResponse](#tokens-v1-CreateTokenResponse)
+    - [ForceTokenExpirationRequest](#tokens-v1-ForceTokenExpirationRequest)
+    - [GetTokenRequest](#tokens-v1-GetTokenRequest)
+    - [GetTokenResponse](#tokens-v1-GetTokenResponse)
+    - [ListPermissionsResponse](#tokens-v1-ListPermissionsResponse)
+    - [ListTokensResponse](#tokens-v1-ListTokensResponse)
+    - [MethodList](#tokens-v1-MethodList)
+    - [RegenerateTokenRequest](#tokens-v1-RegenerateTokenRequest)
+    - [RegenerateTokenResponse](#tokens-v1-RegenerateTokenResponse)
+    - [TokenMetadata](#tokens-v1-TokenMetadata)
+    - [TokenPermissions](#tokens-v1-TokenPermissions)
+    - [TokenPermissions.PermissionsEntry](#tokens-v1-TokenPermissions-PermissionsEntry)
+    - [TokenUUID](#tokens-v1-TokenUUID)
+    - [TokenValue](#tokens-v1-TokenValue)
+    - [UpdateTokenRequest](#tokens-v1-UpdateTokenRequest)
+    - [UpdateTokenResponse](#tokens-v1-UpdateTokenResponse)
+  
+    - [PublicTokensService](#tokens-v1-PublicTokensService)
+    - [TokensService](#tokens-v1-TokensService)
+  
+- [Scalar Value Types](#scalar-value-types)
+
+
+
+<a name="accounts_v1_accounts_v1-proto"></a>
+<p align="right"><a href="#top">Top</a></p>
+
+## accounts/v1/accounts_v1.proto
+Protobuf definitions for the accounts service.
+
+
+<a name="accounts-v1-AccountData"></a>
+
+### AccountData
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| name | [string](#string) |  | Account name |
+| email | [string](#string) |  | Account email |
+
+
+
+
+
+
+<a name="accounts-v1-AccountPassword"></a>
+
+### AccountPassword
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| password | [string](#string) |  |  |
+
+
+
+
+
+
+<a name="accounts-v1-IsEmailVerifiedRequest"></a>
+
+### IsEmailVerifiedRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| data | [AccountData](#accounts-v1-AccountData) |  |  |
+
+
+
+
+
+
+<a name="accounts-v1-IsEmailVerifiedResponse"></a>
+
+### IsEmailVerifiedResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| verified | [bool](#bool) |  |  |
+
+
+
+
+
+
+<a name="accounts-v1-NewPasswordRequest"></a>
+
+### NewPasswordRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| data | [AccountData](#accounts-v1-AccountData) |  |  |
+| password | [AccountPassword](#accounts-v1-AccountPassword) |  |  |
+| code | [string](#string) |  |  |
+
+
+
+
+
+
+<a name="accounts-v1-PersonalData"></a>
+
+### PersonalData
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| name | [string](#string) |  |  |
+| surname | [string](#string) |  |  |
+
+
+
+
+
+
+<a name="accounts-v1-RefreshTokenRequest"></a>
+
+### RefreshTokenRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| session_id | [string](#string) |  |  |
+
+
+
+
+
+
+<a name="accounts-v1-ResetPasswordRequest"></a>
+
+### ResetPasswordRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| data | [AccountData](#accounts-v1-AccountData) |  |  |
+
+
+
+
+
+
+<a name="accounts-v1-SignInRequest"></a>
+
+### SignInRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| email | [string](#string) |  |  |
+| password | [string](#string) |  |  |
+
+
+
+
+
+
+<a name="accounts-v1-SignUpRequest"></a>
+
+### SignUpRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| email | [string](#string) |  |  |
+| password | [string](#string) |  |  |
+| personal_data | [PersonalData](#accounts-v1-PersonalData) |  |  |
+
+
+
+
+
+ 
+
+ 
+
+ 
+
+
+<a name="accounts-v1-AccountsService"></a>
+
+### AccountsService
+
+
+| Method Name | Request Type | Response Type | Description |
+| ----------- | ------------ | ------------- | ------------|
+| IsEmailVerified | [IsEmailVerifiedRequest](#accounts-v1-IsEmailVerifiedRequest) | [IsEmailVerifiedResponse](#accounts-v1-IsEmailVerifiedResponse) | Is email for the current account verified |
+| RefreshSession | [.google.protobuf.Empty](#google-protobuf-Empty) | [.google.protobuf.Empty](#google-protobuf-Empty) |  |
+| TokenAuthorization | [.google.protobuf.Empty](#google-protobuf-Empty) | [.google.protobuf.Empty](#google-protobuf-Empty) | Authorize using long living tokens |
+
+
+<a name="accounts-v1-PublicAccountsService"></a>
+
+### PublicAccountsService
+Service for handling accounts that do not require authentication
+
+| Method Name | Request Type | Response Type | Description |
+| ----------- | ------------ | ------------- | ------------|
+| SignIn | [SignInRequest](#accounts-v1-SignInRequest) | [.google.protobuf.Empty](#google-protobuf-Empty) | Sing in into an existing account |
+| SignUp | [SignUpRequest](#accounts-v1-SignUpRequest) | [.google.protobuf.Empty](#google-protobuf-Empty) | Create a new account |
+
+ 
+
+
+
+<a name="projects_v1_projects_v1-proto"></a>
+<p align="right"><a href="#top">Top</a></p>
+
+## projects/v1/projects_v1.proto
+Protobuf definitions for the accounts service.
+
+
+<a name="projects-v1-CreateProjectRequest"></a>
+
+### CreateProjectRequest
+
+
+
+
+
+
+
+<a name="projects-v1-CreateProjectResponse"></a>
+
+### CreateProjectResponse
+
+
+
+
+
+
+
+<a name="projects-v1-GetProjectRequest"></a>
+
+### GetProjectRequest
+
+
+
+
+
+
+
+<a name="projects-v1-GetProjectResponse"></a>
+
+### GetProjectResponse
+
+
+
+
+
+
+
+<a name="projects-v1-ListProjectsRequest"></a>
+
+### ListProjectsRequest
+
+
+
+
+
+
+
+<a name="projects-v1-ListProjectsResponse"></a>
+
+### ListProjectsResponse
+
+
+
+
+
+
+
+<a name="projects-v1-UpdateProjectRequest"></a>
+
+### UpdateProjectRequest
+
+
+
+
+
+
+
+<a name="projects-v1-UpdateProjectResponse"></a>
+
+### UpdateProjectResponse
+
+
+
+
+
+
+ 
+
+ 
+
+ 
+
+
+<a name="projects-v1-ProjectsService"></a>
+
+### ProjectsService
+
+
+| Method Name | Request Type | Response Type | Description |
+| ----------- | ------------ | ------------- | ------------|
+| CreateProject | [CreateProjectRequest](#projects-v1-CreateProjectRequest) | [CreateProjectResponse](#projects-v1-CreateProjectResponse) |  |
+| GetProject | [GetProjectRequest](#projects-v1-GetProjectRequest) | [GetProjectResponse](#projects-v1-GetProjectResponse) |  |
+| ListProjects | [ListProjectsRequest](#projects-v1-ListProjectsRequest) | [ListProjectsResponse](#projects-v1-ListProjectsResponse) stream |  |
+| UpdateProject | [UpdateProjectRequest](#projects-v1-UpdateProjectRequest) | [UpdateProjectResponse](#projects-v1-UpdateProjectResponse) |  |
+
+ 
+
+
+
+<a name="test_v1_test_v1-proto"></a>
+<p align="right"><a href="#top">Top</a></p>
+
+## test/v1/test_v1.proto
+
+
+
+<a name="test-v1-PingRequest"></a>
+
+### PingRequest
+
+
+
+
+
+
+
+<a name="test-v1-PingResponse"></a>
+
+### PingResponse
+
+
+
+
+
+
+
+<a name="test-v1-PingStreamResponse"></a>
+
+### PingStreamResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| dummy | [string](#string) |  |  |
+
+
+
+
+
+
+<a name="test-v1-PongRequest"></a>
+
+### PongRequest
+
+
+
+
+
+
+
+<a name="test-v1-PongResponse"></a>
+
+### PongResponse
+
+
+
+
+
+
+
+<a name="test-v1-PongStreamResponse"></a>
+
+### PongStreamResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| dummy | [string](#string) |  |  |
+
+
+
+
+
+ 
+
+ 
+
+ 
+
+
+<a name="test-v1-PublicTestService"></a>
+
+### PublicTestService
+Service for handling environments
+
+| Method Name | Request Type | Response Type | Description |
+| ----------- | ------------ | ------------- | ------------|
+| Ping | [PingRequest](#test-v1-PingRequest) | [PingResponse](#test-v1-PingResponse) |  |
+| PingStream | [.google.protobuf.Empty](#google-protobuf-Empty) | [PingStreamResponse](#test-v1-PingStreamResponse) stream |  |
+
+
+<a name="test-v1-TestService"></a>
+
+### TestService
+
+
+| Method Name | Request Type | Response Type | Description |
+| ----------- | ------------ | ------------- | ------------|
+| Pong | [PongRequest](#test-v1-PongRequest) | [PongResponse](#test-v1-PongResponse) |  |
+| PongStream | [.google.protobuf.Empty](#google-protobuf-Empty) | [PongStreamResponse](#test-v1-PongStreamResponse) stream |  |
+
+ 
+
+
+
+<a name="tokens_v1_tokens_v1-proto"></a>
+<p align="right"><a href="#top">Top</a></p>
+
+## tokens/v1/tokens_v1.proto
+Protobuf definitions for the accounts service.
+
+
+<a name="tokens-v1-AuthenticateWithTokenRequest"></a>
+
+### AuthenticateWithTokenRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_value | [TokenValue](#tokens-v1-TokenValue) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-CreateTokenRequest"></a>
+
+### CreateTokenRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_metadata | [TokenMetadata](#tokens-v1-TokenMetadata) |  |  |
+| token_permissions | [TokenPermissions](#tokens-v1-TokenPermissions) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-CreateTokenResponse"></a>
+
+### CreateTokenResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_uuid | [TokenUUID](#tokens-v1-TokenUUID) |  |  |
+| token_value | [TokenValue](#tokens-v1-TokenValue) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-ForceTokenExpirationRequest"></a>
+
+### ForceTokenExpirationRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_uuid | [TokenUUID](#tokens-v1-TokenUUID) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-GetTokenRequest"></a>
+
+### GetTokenRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_uuid | [TokenUUID](#tokens-v1-TokenUUID) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-GetTokenResponse"></a>
+
+### GetTokenResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_uuid | [TokenUUID](#tokens-v1-TokenUUID) |  |  |
+| token_metadata | [TokenMetadata](#tokens-v1-TokenMetadata) |  |  |
+| token_permissions | [TokenPermissions](#tokens-v1-TokenPermissions) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-ListPermissionsResponse"></a>
+
+### ListPermissionsResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| permissions | [TokenPermissions](#tokens-v1-TokenPermissions) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-ListTokensResponse"></a>
+
+### ListTokensResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_uuid | [TokenUUID](#tokens-v1-TokenUUID) |  |  |
+| token_metadata | [TokenMetadata](#tokens-v1-TokenMetadata) |  |  |
+| token_permissions | [TokenPermissions](#tokens-v1-TokenPermissions) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-MethodList"></a>
+
+### MethodList
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| methods | [string](#string) | repeated |  |
+
+
+
+
+
+
+<a name="tokens-v1-RegenerateTokenRequest"></a>
+
+### RegenerateTokenRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_uuid | [TokenUUID](#tokens-v1-TokenUUID) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-RegenerateTokenResponse"></a>
+
+### RegenerateTokenResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_uuid | [TokenUUID](#tokens-v1-TokenUUID) |  |  |
+| token_value | [TokenValue](#tokens-v1-TokenValue) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-TokenMetadata"></a>
+
+### TokenMetadata
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| name | [string](#string) |  | A token name |
+| expires_at | [google.protobuf.Timestamp](#google-protobuf-Timestamp) |  | Token expiration timestamp |
+| last_used_at | [google.protobuf.Timestamp](#google-protobuf-Timestamp) |  | When the token was used the last time |
+| generated_at | [google.protobuf.Timestamp](#google-protobuf-Timestamp) |  | When was the current token generated |
+| created_at | [google.protobuf.Timestamp](#google-protobuf-Timestamp) |  | When was the current token entry created |
+| revoked_at | [google.protobuf.Timestamp](#google-protobuf-Timestamp) |  | When was the token revoked |
+
+
+
+
+
+
+<a name="tokens-v1-TokenPermissions"></a>
+
+### TokenPermissions
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| permissions | [TokenPermissions.PermissionsEntry](#tokens-v1-TokenPermissions-PermissionsEntry) | repeated |  |
+
+
+
+
+
+
+<a name="tokens-v1-TokenPermissions-PermissionsEntry"></a>
+
+### TokenPermissions.PermissionsEntry
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| key | [string](#string) |  |  |
+| value | [MethodList](#tokens-v1-MethodList) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-TokenUUID"></a>
+
+### TokenUUID
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| uuid | [string](#string) |  | An ID of a token |
+
+
+
+
+
+
+<a name="tokens-v1-TokenValue"></a>
+
+### TokenValue
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token | [string](#string) |  | Token value Can be only retrieved once after the generation |
+
+
+
+
+
+
+<a name="tokens-v1-UpdateTokenRequest"></a>
+
+### UpdateTokenRequest
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_uuid | [TokenUUID](#tokens-v1-TokenUUID) |  |  |
+| token_metadata | [TokenMetadata](#tokens-v1-TokenMetadata) |  |  |
+| token_permissions | [TokenPermissions](#tokens-v1-TokenPermissions) |  |  |
+
+
+
+
+
+
+<a name="tokens-v1-UpdateTokenResponse"></a>
+
+### UpdateTokenResponse
+
+
+
+| Field | Type | Label | Description |
+| ----- | ---- | ----- | ----------- |
+| token_uuid | [TokenUUID](#tokens-v1-TokenUUID) |  |  |
+| token_metadata | [TokenMetadata](#tokens-v1-TokenMetadata) |  |  |
+| token_permissions | [TokenPermissions](#tokens-v1-TokenPermissions) |  |  |
+
+
+
+
+
+ 
+
+ 
+
+ 
+
+
+<a name="tokens-v1-PublicTokensService"></a>
+
+### PublicTokensService
+An endpoint to authenticate with a token should be here
+
+| Method Name | Request Type | Response Type | Description |
+| ----------- | ------------ | ------------- | ------------|
+| AuthenticateWithToken | [AuthenticateWithTokenRequest](#tokens-v1-AuthenticateWithTokenRequest) | [.google.protobuf.Empty](#google-protobuf-Empty) | Recieve a JWT access token DO NOT implement it in the web app! |
+
+
+<a name="tokens-v1-TokensService"></a>
+
+### TokensService
+Tokens should be used for programmatic access
+For example CLI or terraform modules
+
+| Method Name | Request Type | Response Type | Description |
+| ----------- | ------------ | ------------- | ------------|
+| CreateToken | [CreateTokenRequest](#tokens-v1-CreateTokenRequest) | [CreateTokenResponse](#tokens-v1-CreateTokenResponse) | Create a new token |
+| UpdateToken | [UpdateTokenRequest](#tokens-v1-UpdateTokenRequest) | [UpdateTokenResponse](#tokens-v1-UpdateTokenResponse) | Update an existing token |
+| ForceTokenExpiration | [ForceTokenExpirationRequest](#tokens-v1-ForceTokenExpirationRequest) | [.google.protobuf.Empty](#google-protobuf-Empty) | Expire an existing token |
+| RegenerateToken | [RegenerateTokenRequest](#tokens-v1-RegenerateTokenRequest) | [RegenerateTokenResponse](#tokens-v1-RegenerateTokenResponse) | Create a new token with the same UUID |
+| GetToken | [GetTokenRequest](#tokens-v1-GetTokenRequest) | [GetTokenResponse](#tokens-v1-GetTokenResponse) | Get an existing token |
+| ListTokens | [.google.protobuf.Empty](#google-protobuf-Empty) | [ListTokensResponse](#tokens-v1-ListTokensResponse) stream | List all existing tokens |
+| ListPermissions | [.google.protobuf.Empty](#google-protobuf-Empty) | [ListPermissionsResponse](#tokens-v1-ListPermissionsResponse) stream | List all available permissions |
+
+ 
+
+
+
+## Scalar Value Types
+
+| .proto Type | Notes | C++ | Java | Python | Go | C# | PHP | Ruby |
+| ----------- | ----- | --- | ---- | ------ | -- | -- | --- | ---- |
+| <a name="double" /> double |  | double | double | float | float64 | double | float | Float |
+| <a name="float" /> float |  | float | float | float | float32 | float | float | Float |
+| <a name="int32" /> int32 | Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint32 instead. | int32 | int | int | int32 | int | integer | Bignum or Fixnum (as required) |
+| <a name="int64" /> int64 | Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint64 instead. | int64 | long | int/long | int64 | long | integer/string | Bignum |
+| <a name="uint32" /> uint32 | Uses variable-length encoding. | uint32 | int | int/long | uint32 | uint | integer | Bignum or Fixnum (as required) |
+| <a name="uint64" /> uint64 | Uses variable-length encoding. | uint64 | long | int/long | uint64 | ulong | integer/string | Bignum or Fixnum (as required) |
+| <a name="sint32" /> sint32 | Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int32s. | int32 | int | int | int32 | int | integer | Bignum or Fixnum (as required) |
+| <a name="sint64" /> sint64 | Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int64s. | int64 | long | int/long | int64 | long | integer/string | Bignum |
+| <a name="fixed32" /> fixed32 | Always four bytes. More efficient than uint32 if values are often greater than 2^28. | uint32 | int | int | uint32 | uint | integer | Bignum or Fixnum (as required) |
+| <a name="fixed64" /> fixed64 | Always eight bytes. More efficient than uint64 if values are often greater than 2^56. | uint64 | long | int/long | uint64 | ulong | integer/string | Bignum |
+| <a name="sfixed32" /> sfixed32 | Always four bytes. | int32 | int | int | int32 | int | integer | Bignum or Fixnum (as required) |
+| <a name="sfixed64" /> sfixed64 | Always eight bytes. | int64 | long | int/long | int64 | long | integer/string | Bignum |
+| <a name="bool" /> bool |  | bool | boolean | boolean | bool | bool | boolean | TrueClass/FalseClass |
+| <a name="string" /> string | A string must always contain UTF-8 encoded or 7-bit ASCII text. | string | String | str/unicode | string | string | string | String (UTF-8) |
+| <a name="bytes" /> bytes | May contain any arbitrary sequence of bytes. | string | ByteString | str | []byte | ByteString | string | String (ASCII-8BIT) |
+
--- a/go.mod
+++ b/go.mod
@@ -3,13 +3,13 @@ module gitea.badhouseplants.net/softplayer/softplayer-go-proto
 go 1.25.9

 require (
-	google.golang.org/grpc v1.80.0
+	google.golang.org/grpc v1.81.0
 	google.golang.org/protobuf v1.36.11
 )

 require (
-	golang.org/x/net v0.49.0 // indirect
-	golang.org/x/sys v0.40.0 // indirect
-	golang.org/x/text v0.33.0 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260120221211-b8f7ae30c516 // indirect
+	golang.org/x/net v0.51.0 // indirect
+	golang.org/x/sys v0.42.0 // indirect
+	golang.org/x/text v0.34.0 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 // indirect
 )
--- a/go.sum
+++ b/go.sum
@@ -24,15 +24,25 @@ go.opentelemetry.io/otel/trace v1.39.0 h1:2d2vfpEDmCJ5zVYz7ijaJdOF59xLomrvj7bjt6
 go.opentelemetry.io/otel/trace v1.39.0/go.mod h1:88w4/PnZSazkGzz/w84VHpQafiU4EtqqlVdxWy+rNOA=
 golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
 golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
+golang.org/x/net v0.51.0 h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo=
+golang.org/x/net v0.51.0/go.mod h1:aamm+2QF5ogm02fjy5Bb7CQ0WMt1/WVM7FtyaTLlA9Y=
 golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
 golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=
+golang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
 golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
 golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
+golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
+golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
 gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
 gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260120221211-b8f7ae30c516 h1:sNrWoksmOyF5bvJUcnmbeAmQi8baNhqg5IWaI3llQqU=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260120221211-b8f7ae30c516/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 h1:ggcbiqK8WWh6l1dnltU4BgWGIGo+EVYxCaAPih/zQXQ=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
 google.golang.org/grpc v1.80.0 h1:Xr6m2WmWZLETvUNvIUmeD5OAagMw3FiKmMlTdViWsHM=
 google.golang.org/grpc v1.80.0/go.mod h1:ho/dLnxwi3EDJA4Zghp7k2Ec1+c2jqup0bFkw07bwF4=
+google.golang.org/grpc v1.81.0 h1:W3G9N3KQf3BU+YuCtGKJk0CmxQNbAISICD/9AORxLIw=
+google.golang.org/grpc v1.81.0/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I=
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
 google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
--- a/pkg/accounts/v1/accounts_v1.pb.go
+++ b/pkg/accounts/v1/accounts_v1.pb.go
@@ -120,17 +120,70 @@ func (x *AccountData) GetEmail() string {
 	return ""
 }

+type PersonalData struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Name          string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
+	Surname       string                 `protobuf:"bytes,2,opt,name=surname,proto3" json:"surname,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *PersonalData) Reset() {
+	*x = PersonalData{}
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *PersonalData) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PersonalData) ProtoMessage() {}
+
+func (x *PersonalData) ProtoReflect() protoreflect.Message {
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PersonalData.ProtoReflect.Descriptor instead.
+func (*PersonalData) Descriptor() ([]byte, []int) {
+	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *PersonalData) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *PersonalData) GetSurname() string {
+	if x != nil {
+		return x.Surname
+	}
+	return ""
+}
+
 type SignUpRequest struct {
 	state         protoimpl.MessageState `protogen:"open.v1"`
 	Email         string                 `protobuf:"bytes,1,opt,name=email,proto3" json:"email,omitempty"`
 	Password      string                 `protobuf:"bytes,2,opt,name=password,proto3" json:"password,omitempty"`
+	PersonalData  *PersonalData          `protobuf:"bytes,3,opt,name=personal_data,json=personalData,proto3" json:"personal_data,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }

 func (x *SignUpRequest) Reset() {
 	*x = SignUpRequest{}
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[2]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[3]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -142,7 +195,7 @@ func (x *SignUpRequest) String() string {
 func (*SignUpRequest) ProtoMessage() {}

 func (x *SignUpRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[2]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[3]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -155,7 +208,7 @@ func (x *SignUpRequest) ProtoReflect() protoreflect.Message {

 // Deprecated: Use SignUpRequest.ProtoReflect.Descriptor instead.
 func (*SignUpRequest) Descriptor() ([]byte, []int) {
-	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{2}
+	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{3}
 }

 func (x *SignUpRequest) GetEmail() string {
@@ -172,6 +225,13 @@ func (x *SignUpRequest) GetPassword() string {
 	return ""
 }

+func (x *SignUpRequest) GetPersonalData() *PersonalData {
+	if x != nil {
+		return x.PersonalData
+	}
+	return nil
+}
+
 type SignInRequest struct {
 	state         protoimpl.MessageState `protogen:"open.v1"`
 	Email         string                 `protobuf:"bytes,1,opt,name=email,proto3" json:"email,omitempty"`
@@ -182,7 +242,7 @@ type SignInRequest struct {

 func (x *SignInRequest) Reset() {
 	*x = SignInRequest{}
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[3]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[4]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -194,7 +254,7 @@ func (x *SignInRequest) String() string {
 func (*SignInRequest) ProtoMessage() {}

 func (x *SignInRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[3]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[4]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -207,7 +267,7 @@ func (x *SignInRequest) ProtoReflect() protoreflect.Message {

 // Deprecated: Use SignInRequest.ProtoReflect.Descriptor instead.
 func (*SignInRequest) Descriptor() ([]byte, []int) {
-	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{3}
+	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{4}
 }

 func (x *SignInRequest) GetEmail() string {
@@ -233,7 +293,7 @@ type ResetPasswordRequest struct {

 func (x *ResetPasswordRequest) Reset() {
 	*x = ResetPasswordRequest{}
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[4]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[5]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -245,7 +305,7 @@ func (x *ResetPasswordRequest) String() string {
 func (*ResetPasswordRequest) ProtoMessage() {}

 func (x *ResetPasswordRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[4]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[5]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -258,7 +318,7 @@ func (x *ResetPasswordRequest) ProtoReflect() protoreflect.Message {

 // Deprecated: Use ResetPasswordRequest.ProtoReflect.Descriptor instead.
 func (*ResetPasswordRequest) Descriptor() ([]byte, []int) {
-	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{4}
+	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{5}
 }

 func (x *ResetPasswordRequest) GetData() *AccountData {
@@ -279,7 +339,7 @@ type NewPasswordRequest struct {

 func (x *NewPasswordRequest) Reset() {
 	*x = NewPasswordRequest{}
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[5]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[6]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -291,7 +351,7 @@ func (x *NewPasswordRequest) String() string {
 func (*NewPasswordRequest) ProtoMessage() {}

 func (x *NewPasswordRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[5]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[6]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -304,7 +364,7 @@ func (x *NewPasswordRequest) ProtoReflect() protoreflect.Message {

 // Deprecated: Use NewPasswordRequest.ProtoReflect.Descriptor instead.
 func (*NewPasswordRequest) Descriptor() ([]byte, []int) {
-	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{5}
+	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{6}
 }

 func (x *NewPasswordRequest) GetData() *AccountData {
@@ -337,7 +397,7 @@ type IsEmailVerifiedRequest struct {

 func (x *IsEmailVerifiedRequest) Reset() {
 	*x = IsEmailVerifiedRequest{}
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[6]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[7]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -349,7 +409,7 @@ func (x *IsEmailVerifiedRequest) String() string {
 func (*IsEmailVerifiedRequest) ProtoMessage() {}

 func (x *IsEmailVerifiedRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[6]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[7]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -362,7 +422,7 @@ func (x *IsEmailVerifiedRequest) ProtoReflect() protoreflect.Message {

 // Deprecated: Use IsEmailVerifiedRequest.ProtoReflect.Descriptor instead.
 func (*IsEmailVerifiedRequest) Descriptor() ([]byte, []int) {
-	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{6}
+	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{7}
 }

 func (x *IsEmailVerifiedRequest) GetData() *AccountData {
@@ -381,7 +441,7 @@ type IsEmailVerifiedResponse struct {

 func (x *IsEmailVerifiedResponse) Reset() {
 	*x = IsEmailVerifiedResponse{}
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[7]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[8]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -393,7 +453,7 @@ func (x *IsEmailVerifiedResponse) String() string {
 func (*IsEmailVerifiedResponse) ProtoMessage() {}

 func (x *IsEmailVerifiedResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[7]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[8]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -406,7 +466,7 @@ func (x *IsEmailVerifiedResponse) ProtoReflect() protoreflect.Message {

 // Deprecated: Use IsEmailVerifiedResponse.ProtoReflect.Descriptor instead.
 func (*IsEmailVerifiedResponse) Descriptor() ([]byte, []int) {
-	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{7}
+	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{8}
 }

 func (x *IsEmailVerifiedResponse) GetVerified() bool {
@@ -425,7 +485,7 @@ type RefreshTokenRequest struct {

 func (x *RefreshTokenRequest) Reset() {
 	*x = RefreshTokenRequest{}
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[8]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[9]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -437,7 +497,7 @@ func (x *RefreshTokenRequest) String() string {
 func (*RefreshTokenRequest) ProtoMessage() {}

 func (x *RefreshTokenRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[8]
+	mi := &file_accounts_v1_accounts_v1_proto_msgTypes[9]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -450,7 +510,7 @@ func (x *RefreshTokenRequest) ProtoReflect() protoreflect.Message {

 // Deprecated: Use RefreshTokenRequest.ProtoReflect.Descriptor instead.
 func (*RefreshTokenRequest) Descriptor() ([]byte, []int) {
-	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{8}
+	return file_accounts_v1_accounts_v1_proto_rawDescGZIP(), []int{9}
 }

 func (x *RefreshTokenRequest) GetSessionId() string {
@@ -469,10 +529,14 @@ const file_accounts_v1_accounts_v1_proto_rawDesc = "" +
 	"\bpassword\x18\x01 \x01(\tR\bpassword\"7\n" +
 	"\vAccountData\x12\x12\n" +
 	"\x04name\x18\x01 \x01(\tR\x04name\x12\x14\n" +
-	"\x05email\x18\x02 \x01(\tR\x05email\"A\n" +
+	"\x05email\x18\x02 \x01(\tR\x05email\"<\n" +
+	"\fPersonalData\x12\x12\n" +
+	"\x04name\x18\x01 \x01(\tR\x04name\x12\x18\n" +
+	"\asurname\x18\x02 \x01(\tR\asurname\"\x81\x01\n" +
 	"\rSignUpRequest\x12\x14\n" +
 	"\x05email\x18\x01 \x01(\tR\x05email\x12\x1a\n" +
-	"\bpassword\x18\x02 \x01(\tR\bpassword\"A\n" +
+	"\bpassword\x18\x02 \x01(\tR\bpassword\x12>\n" +
+	"\rpersonal_data\x18\x03 \x01(\v2\x19.accounts.v1.PersonalDataR\fpersonalData\"A\n" +
 	"\rSignInRequest\x12\x14\n" +
 	"\x05email\x18\x01 \x01(\tR\x05email\x12\x1a\n" +
 	"\bpassword\x18\x02 \x01(\tR\bpassword\"D\n" +
@@ -488,13 +552,14 @@ const file_accounts_v1_accounts_v1_proto_rawDesc = "" +
 	"\bverified\x18\x01 \x01(\bR\bverified\"4\n" +
 	"\x13RefreshTokenRequest\x12\x1d\n" +
 	"\n" +
-	"session_id\x18\x01 \x01(\tR\tsessionId2\xe3\x01\n" +
-	"\x15AccountsNoAuthService\x12>\n" +
+	"session_id\x18\x01 \x01(\tR\tsessionId2\x97\x01\n" +
+	"\x15PublicAccountsService\x12>\n" +
 	"\x06SignIn\x12\x1a.accounts.v1.SignInRequest\x1a\x16.google.protobuf.Empty\"\x00\x12>\n" +
-	"\x06SignUp\x12\x1a.accounts.v1.SignUpRequest\x1a\x16.google.protobuf.Empty\"\x00\x12J\n" +
-	"\fRefreshToken\x12 .accounts.v1.RefreshTokenRequest\x1a\x16.google.protobuf.Empty\"\x002u\n" +
-	"\x13AccountsAuthService\x12^\n" +
-	"\x0fIsEmailVerified\x12#.accounts.v1.IsEmailVerifiedRequest\x1a$.accounts.v1.IsEmailVerifiedResponse\"\x00BIZGgitea.badhouseplants.net/softplayer/softplayer-go-proto/pkg/accounts/v1b\x06proto3"
+	"\x06SignUp\x12\x1a.accounts.v1.SignUpRequest\x1a\x16.google.protobuf.Empty\"\x002\xfd\x01\n" +
+	"\x0fAccountsService\x12^\n" +
+	"\x0fIsEmailVerified\x12#.accounts.v1.IsEmailVerifiedRequest\x1a$.accounts.v1.IsEmailVerifiedResponse\"\x00\x12B\n" +
+	"\x0eRefreshSession\x12\x16.google.protobuf.Empty\x1a\x16.google.protobuf.Empty\"\x00\x12F\n" +
+	"\x12TokenAuthorization\x12\x16.google.protobuf.Empty\x1a\x16.google.protobuf.Empty\"\x00BIZGgitea.badhouseplants.net/softplayer/softplayer-go-proto/pkg/accounts/v1b\x06proto3"

 var (
 	file_accounts_v1_accounts_v1_proto_rawDescOnce sync.Once
@@ -508,37 +573,41 @@ func file_accounts_v1_accounts_v1_proto_rawDescGZIP() []byte {
 	return file_accounts_v1_accounts_v1_proto_rawDescData
 }

-var file_accounts_v1_accounts_v1_proto_msgTypes = make([]protoimpl.MessageInfo, 9)
+var file_accounts_v1_accounts_v1_proto_msgTypes = make([]protoimpl.MessageInfo, 10)
 var file_accounts_v1_accounts_v1_proto_goTypes = []any{
 	(*AccountPassword)(nil),         // 0: accounts.v1.AccountPassword
 	(*AccountData)(nil),             // 1: accounts.v1.AccountData
-	(*SignUpRequest)(nil),           // 2: accounts.v1.SignUpRequest
-	(*SignInRequest)(nil),           // 3: accounts.v1.SignInRequest
-	(*ResetPasswordRequest)(nil),    // 4: accounts.v1.ResetPasswordRequest
-	(*NewPasswordRequest)(nil),      // 5: accounts.v1.NewPasswordRequest
-	(*IsEmailVerifiedRequest)(nil),  // 6: accounts.v1.IsEmailVerifiedRequest
-	(*IsEmailVerifiedResponse)(nil), // 7: accounts.v1.IsEmailVerifiedResponse
-	(*RefreshTokenRequest)(nil),     // 8: accounts.v1.RefreshTokenRequest
-	(*emptypb.Empty)(nil),           // 9: google.protobuf.Empty
+	(*PersonalData)(nil),            // 2: accounts.v1.PersonalData
+	(*SignUpRequest)(nil),           // 3: accounts.v1.SignUpRequest
+	(*SignInRequest)(nil),           // 4: accounts.v1.SignInRequest
+	(*ResetPasswordRequest)(nil),    // 5: accounts.v1.ResetPasswordRequest
+	(*NewPasswordRequest)(nil),      // 6: accounts.v1.NewPasswordRequest
+	(*IsEmailVerifiedRequest)(nil),  // 7: accounts.v1.IsEmailVerifiedRequest
+	(*IsEmailVerifiedResponse)(nil), // 8: accounts.v1.IsEmailVerifiedResponse
+	(*RefreshTokenRequest)(nil),     // 9: accounts.v1.RefreshTokenRequest
+	(*emptypb.Empty)(nil),           // 10: google.protobuf.Empty
 }
 var file_accounts_v1_accounts_v1_proto_depIdxs = []int32{
-	1, // 0: accounts.v1.ResetPasswordRequest.data:type_name -> accounts.v1.AccountData
-	1, // 1: accounts.v1.NewPasswordRequest.data:type_name -> accounts.v1.AccountData
-	0, // 2: accounts.v1.NewPasswordRequest.password:type_name -> accounts.v1.AccountPassword
-	1, // 3: accounts.v1.IsEmailVerifiedRequest.data:type_name -> accounts.v1.AccountData
-	3, // 4: accounts.v1.AccountsNoAuthService.SignIn:input_type -> accounts.v1.SignInRequest
-	2, // 5: accounts.v1.AccountsNoAuthService.SignUp:input_type -> accounts.v1.SignUpRequest
-	8, // 6: accounts.v1.AccountsNoAuthService.RefreshToken:input_type -> accounts.v1.RefreshTokenRequest
-	6, // 7: accounts.v1.AccountsAuthService.IsEmailVerified:input_type -> accounts.v1.IsEmailVerifiedRequest
-	9, // 8: accounts.v1.AccountsNoAuthService.SignIn:output_type -> google.protobuf.Empty
-	9, // 9: accounts.v1.AccountsNoAuthService.SignUp:output_type -> google.protobuf.Empty
-	9, // 10: accounts.v1.AccountsNoAuthService.RefreshToken:output_type -> google.protobuf.Empty
-	7, // 11: accounts.v1.AccountsAuthService.IsEmailVerified:output_type -> accounts.v1.IsEmailVerifiedResponse
-	8, // [8:12] is the sub-list for method output_type
-	4, // [4:8] is the sub-list for method input_type
-	4, // [4:4] is the sub-list for extension type_name
-	4, // [4:4] is the sub-list for extension extendee
-	0, // [0:4] is the sub-list for field type_name
+	2,  // 0: accounts.v1.SignUpRequest.personal_data:type_name -> accounts.v1.PersonalData
+	1,  // 1: accounts.v1.ResetPasswordRequest.data:type_name -> accounts.v1.AccountData
+	1,  // 2: accounts.v1.NewPasswordRequest.data:type_name -> accounts.v1.AccountData
+	0,  // 3: accounts.v1.NewPasswordRequest.password:type_name -> accounts.v1.AccountPassword
+	1,  // 4: accounts.v1.IsEmailVerifiedRequest.data:type_name -> accounts.v1.AccountData
+	4,  // 5: accounts.v1.PublicAccountsService.SignIn:input_type -> accounts.v1.SignInRequest
+	3,  // 6: accounts.v1.PublicAccountsService.SignUp:input_type -> accounts.v1.SignUpRequest
+	7,  // 7: accounts.v1.AccountsService.IsEmailVerified:input_type -> accounts.v1.IsEmailVerifiedRequest
+	10, // 8: accounts.v1.AccountsService.RefreshSession:input_type -> google.protobuf.Empty
+	10, // 9: accounts.v1.AccountsService.TokenAuthorization:input_type -> google.protobuf.Empty
+	10, // 10: accounts.v1.PublicAccountsService.SignIn:output_type -> google.protobuf.Empty
+	10, // 11: accounts.v1.PublicAccountsService.SignUp:output_type -> google.protobuf.Empty
+	8,  // 12: accounts.v1.AccountsService.IsEmailVerified:output_type -> accounts.v1.IsEmailVerifiedResponse
+	10, // 13: accounts.v1.AccountsService.RefreshSession:output_type -> google.protobuf.Empty
+	10, // 14: accounts.v1.AccountsService.TokenAuthorization:output_type -> google.protobuf.Empty
+	10, // [10:15] is the sub-list for method output_type
+	5,  // [5:10] is the sub-list for method input_type
+	5,  // [5:5] is the sub-list for extension type_name
+	5,  // [5:5] is the sub-list for extension extendee
+	0,  // [0:5] is the sub-list for field type_name
 }

 func init() { file_accounts_v1_accounts_v1_proto_init() }
@@ -552,7 +621,7 @@ func file_accounts_v1_accounts_v1_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_accounts_v1_accounts_v1_proto_rawDesc), len(file_accounts_v1_accounts_v1_proto_rawDesc)),
 			NumEnums:      0,
-			NumMessages:   9,
+			NumMessages:   10,
 			NumExtensions: 0,
 			NumServices:   2,
 		},
--- a/pkg/accounts/v1/accounts_v1_grpc.pb.go
+++ b/pkg/accounts/v1/accounts_v1_grpc.pb.go
@@ -2,7 +2,7 @@

 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
-// - protoc-gen-go-grpc v1.6.1
+// - protoc-gen-go-grpc v1.6.2
 // - protoc             (unknown)
 // source: accounts/v1/accounts_v1.proto

@@ -22,187 +22,147 @@ import (
 const _ = grpc.SupportPackageIsVersion9

 const (
-	AccountsNoAuthService_SignIn_FullMethodName       = "/accounts.v1.AccountsNoAuthService/SignIn"
-	AccountsNoAuthService_SignUp_FullMethodName       = "/accounts.v1.AccountsNoAuthService/SignUp"
-	AccountsNoAuthService_RefreshToken_FullMethodName = "/accounts.v1.AccountsNoAuthService/RefreshToken"
+	PublicAccountsService_SignIn_FullMethodName = "/accounts.v1.PublicAccountsService/SignIn"
+	PublicAccountsService_SignUp_FullMethodName = "/accounts.v1.PublicAccountsService/SignUp"
 )

-// AccountsNoAuthServiceClient is the client API for AccountsNoAuthService service.
+// PublicAccountsServiceClient is the client API for PublicAccountsService service.
 //
 // For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
 //
 // *
 // Service for handling accounts that do not require authentication
-type AccountsNoAuthServiceClient interface {
+type PublicAccountsServiceClient interface {
 	// Sing in into an existing account
 	SignIn(ctx context.Context, in *SignInRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
 	// Create a new account
 	SignUp(ctx context.Context, in *SignUpRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
-	// RefreshToken doesn't use regular auth methods
-	RefreshToken(ctx context.Context, in *RefreshTokenRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
 }

-type accountsNoAuthServiceClient struct {
+type publicAccountsServiceClient struct {
 	cc grpc.ClientConnInterface
 }

-func NewAccountsNoAuthServiceClient(cc grpc.ClientConnInterface) AccountsNoAuthServiceClient {
-	return &accountsNoAuthServiceClient{cc}
+func NewPublicAccountsServiceClient(cc grpc.ClientConnInterface) PublicAccountsServiceClient {
+	return &publicAccountsServiceClient{cc}
 }

-func (c *accountsNoAuthServiceClient) SignIn(ctx context.Context, in *SignInRequest, opts ...grpc.CallOption) (*emptypb.Empty, error) {
+func (c *publicAccountsServiceClient) SignIn(ctx context.Context, in *SignInRequest, opts ...grpc.CallOption) (*emptypb.Empty, error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	out := new(emptypb.Empty)
-	err := c.cc.Invoke(ctx, AccountsNoAuthService_SignIn_FullMethodName, in, out, cOpts...)
+	err := c.cc.Invoke(ctx, PublicAccountsService_SignIn_FullMethodName, in, out, cOpts...)
 	if err != nil {
 		return nil, err
 	}
 	return out, nil
 }

-func (c *accountsNoAuthServiceClient) SignUp(ctx context.Context, in *SignUpRequest, opts ...grpc.CallOption) (*emptypb.Empty, error) {
+func (c *publicAccountsServiceClient) SignUp(ctx context.Context, in *SignUpRequest, opts ...grpc.CallOption) (*emptypb.Empty, error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	out := new(emptypb.Empty)
-	err := c.cc.Invoke(ctx, AccountsNoAuthService_SignUp_FullMethodName, in, out, cOpts...)
+	err := c.cc.Invoke(ctx, PublicAccountsService_SignUp_FullMethodName, in, out, cOpts...)
 	if err != nil {
 		return nil, err
 	}
 	return out, nil
 }

-func (c *accountsNoAuthServiceClient) RefreshToken(ctx context.Context, in *RefreshTokenRequest, opts ...grpc.CallOption) (*emptypb.Empty, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(emptypb.Empty)
-	err := c.cc.Invoke(ctx, AccountsNoAuthService_RefreshToken_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-// AccountsNoAuthServiceServer is the server API for AccountsNoAuthService service.
-// All implementations should embed UnimplementedAccountsNoAuthServiceServer
+// PublicAccountsServiceServer is the server API for PublicAccountsService service.
+// All implementations should embed UnimplementedPublicAccountsServiceServer
 // for forward compatibility.
 //
 // *
 // Service for handling accounts that do not require authentication
-type AccountsNoAuthServiceServer interface {
+type PublicAccountsServiceServer interface {
 	// Sing in into an existing account
 	SignIn(context.Context, *SignInRequest) (*emptypb.Empty, error)
 	// Create a new account
 	SignUp(context.Context, *SignUpRequest) (*emptypb.Empty, error)
-	// RefreshToken doesn't use regular auth methods
-	RefreshToken(context.Context, *RefreshTokenRequest) (*emptypb.Empty, error)
 }

-// UnimplementedAccountsNoAuthServiceServer should be embedded to have
+// UnimplementedPublicAccountsServiceServer should be embedded to have
 // forward compatible implementations.
 //
 // NOTE: this should be embedded by value instead of pointer to avoid a nil
 // pointer dereference when methods are called.
-type UnimplementedAccountsNoAuthServiceServer struct{}
+type UnimplementedPublicAccountsServiceServer struct{}

-func (UnimplementedAccountsNoAuthServiceServer) SignIn(context.Context, *SignInRequest) (*emptypb.Empty, error) {
+func (UnimplementedPublicAccountsServiceServer) SignIn(context.Context, *SignInRequest) (*emptypb.Empty, error) {
 	return nil, status.Error(codes.Unimplemented, "method SignIn not implemented")
 }
-func (UnimplementedAccountsNoAuthServiceServer) SignUp(context.Context, *SignUpRequest) (*emptypb.Empty, error) {
+func (UnimplementedPublicAccountsServiceServer) SignUp(context.Context, *SignUpRequest) (*emptypb.Empty, error) {
 	return nil, status.Error(codes.Unimplemented, "method SignUp not implemented")
 }
-func (UnimplementedAccountsNoAuthServiceServer) RefreshToken(context.Context, *RefreshTokenRequest) (*emptypb.Empty, error) {
-	return nil, status.Error(codes.Unimplemented, "method RefreshToken not implemented")
-}
-func (UnimplementedAccountsNoAuthServiceServer) testEmbeddedByValue() {}
+func (UnimplementedPublicAccountsServiceServer) testEmbeddedByValue() {}

-// UnsafeAccountsNoAuthServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to AccountsNoAuthServiceServer will
+// UnsafePublicAccountsServiceServer may be embedded to opt out of forward compatibility for this service.
+// Use of this interface is not recommended, as added methods to PublicAccountsServiceServer will
 // result in compilation errors.
-type UnsafeAccountsNoAuthServiceServer interface {
-	mustEmbedUnimplementedAccountsNoAuthServiceServer()
+type UnsafePublicAccountsServiceServer interface {
+	mustEmbedUnimplementedPublicAccountsServiceServer()
 }

-func RegisterAccountsNoAuthServiceServer(s grpc.ServiceRegistrar, srv AccountsNoAuthServiceServer) {
-	// If the following call panics, it indicates UnimplementedAccountsNoAuthServiceServer was
+func RegisterPublicAccountsServiceServer(s grpc.ServiceRegistrar, srv PublicAccountsServiceServer) {
+	// If the following call panics, it indicates UnimplementedPublicAccountsServiceServer was
 	// embedded by pointer and is nil.  This will cause panics if an
 	// unimplemented method is ever invoked, so we test this at initialization
 	// time to prevent it from happening at runtime later due to I/O.
 	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
 		t.testEmbeddedByValue()
 	}
-	s.RegisterService(&AccountsNoAuthService_ServiceDesc, srv)
+	s.RegisterService(&PublicAccountsService_ServiceDesc, srv)
 }

-func _AccountsNoAuthService_SignIn_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+func _PublicAccountsService_SignIn_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
 	in := new(SignInRequest)
 	if err := dec(in); err != nil {
 		return nil, err
 	}
 	if interceptor == nil {
-		return srv.(AccountsNoAuthServiceServer).SignIn(ctx, in)
+		return srv.(PublicAccountsServiceServer).SignIn(ctx, in)
 	}
 	info := &grpc.UnaryServerInfo{
 		Server:     srv,
-		FullMethod: AccountsNoAuthService_SignIn_FullMethodName,
+		FullMethod: PublicAccountsService_SignIn_FullMethodName,
 	}
 	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(AccountsNoAuthServiceServer).SignIn(ctx, req.(*SignInRequest))
+		return srv.(PublicAccountsServiceServer).SignIn(ctx, req.(*SignInRequest))
 	}
 	return interceptor(ctx, in, info, handler)
 }

-func _AccountsNoAuthService_SignUp_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+func _PublicAccountsService_SignUp_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
 	in := new(SignUpRequest)
 	if err := dec(in); err != nil {
 		return nil, err
 	}
 	if interceptor == nil {
-		return srv.(AccountsNoAuthServiceServer).SignUp(ctx, in)
+		return srv.(PublicAccountsServiceServer).SignUp(ctx, in)
 	}
 	info := &grpc.UnaryServerInfo{
 		Server:     srv,
-		FullMethod: AccountsNoAuthService_SignUp_FullMethodName,
+		FullMethod: PublicAccountsService_SignUp_FullMethodName,
 	}
 	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(AccountsNoAuthServiceServer).SignUp(ctx, req.(*SignUpRequest))
+		return srv.(PublicAccountsServiceServer).SignUp(ctx, req.(*SignUpRequest))
 	}
 	return interceptor(ctx, in, info, handler)
 }

-func _AccountsNoAuthService_RefreshToken_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(RefreshTokenRequest)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(AccountsNoAuthServiceServer).RefreshToken(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: AccountsNoAuthService_RefreshToken_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(AccountsNoAuthServiceServer).RefreshToken(ctx, req.(*RefreshTokenRequest))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-// AccountsNoAuthService_ServiceDesc is the grpc.ServiceDesc for AccountsNoAuthService service.
+// PublicAccountsService_ServiceDesc is the grpc.ServiceDesc for PublicAccountsService service.
 // It's only intended for direct use with grpc.RegisterService,
 // and not to be introspected or modified (even as a copy)
-var AccountsNoAuthService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "accounts.v1.AccountsNoAuthService",
-	HandlerType: (*AccountsNoAuthServiceServer)(nil),
+var PublicAccountsService_ServiceDesc = grpc.ServiceDesc{
+	ServiceName: "accounts.v1.PublicAccountsService",
+	HandlerType: (*PublicAccountsServiceServer)(nil),
 	Methods: []grpc.MethodDesc{
 		{
 			MethodName: "SignIn",
-			Handler:    _AccountsNoAuthService_SignIn_Handler,
+			Handler:    _PublicAccountsService_SignIn_Handler,
 		},
 		{
 			MethodName: "SignUp",
-			Handler:    _AccountsNoAuthService_SignUp_Handler,
-		},
-		{
-			MethodName: "RefreshToken",
-			Handler:    _AccountsNoAuthService_RefreshToken_Handler,
+			Handler:    _PublicAccountsService_SignUp_Handler,
 		},
 	},
 	Streams:  []grpc.StreamDesc{},
@@ -210,109 +170,179 @@ var AccountsNoAuthService_ServiceDesc = grpc.ServiceDesc{
 }

 const (
-	AccountsAuthService_IsEmailVerified_FullMethodName = "/accounts.v1.AccountsAuthService/IsEmailVerified"
+	AccountsService_IsEmailVerified_FullMethodName    = "/accounts.v1.AccountsService/IsEmailVerified"
+	AccountsService_RefreshSession_FullMethodName     = "/accounts.v1.AccountsService/RefreshSession"
+	AccountsService_TokenAuthorization_FullMethodName = "/accounts.v1.AccountsService/TokenAuthorization"
 )

-// AccountsAuthServiceClient is the client API for AccountsAuthService service.
+// AccountsServiceClient is the client API for AccountsService service.
 //
 // For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-//
-// *
-// Service for handling accounts that do require authentication
-// Tokens should be sent via metadata, so the service is able to authenticate a user for a request
-type AccountsAuthServiceClient interface {
+type AccountsServiceClient interface {
 	// Is email for the current account verified
 	IsEmailVerified(ctx context.Context, in *IsEmailVerifiedRequest, opts ...grpc.CallOption) (*IsEmailVerifiedResponse, error)
+	RefreshSession(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*emptypb.Empty, error)
+	// Authorize using long living tokens
+	TokenAuthorization(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*emptypb.Empty, error)
 }

-type accountsAuthServiceClient struct {
+type accountsServiceClient struct {
 	cc grpc.ClientConnInterface
 }

-func NewAccountsAuthServiceClient(cc grpc.ClientConnInterface) AccountsAuthServiceClient {
-	return &accountsAuthServiceClient{cc}
+func NewAccountsServiceClient(cc grpc.ClientConnInterface) AccountsServiceClient {
+	return &accountsServiceClient{cc}
 }

-func (c *accountsAuthServiceClient) IsEmailVerified(ctx context.Context, in *IsEmailVerifiedRequest, opts ...grpc.CallOption) (*IsEmailVerifiedResponse, error) {
+func (c *accountsServiceClient) IsEmailVerified(ctx context.Context, in *IsEmailVerifiedRequest, opts ...grpc.CallOption) (*IsEmailVerifiedResponse, error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	out := new(IsEmailVerifiedResponse)
-	err := c.cc.Invoke(ctx, AccountsAuthService_IsEmailVerified_FullMethodName, in, out, cOpts...)
+	err := c.cc.Invoke(ctx, AccountsService_IsEmailVerified_FullMethodName, in, out, cOpts...)
 	if err != nil {
 		return nil, err
 	}
 	return out, nil
 }

-// AccountsAuthServiceServer is the server API for AccountsAuthService service.
-// All implementations should embed UnimplementedAccountsAuthServiceServer
-// for forward compatibility.
-//
-// *
-// Service for handling accounts that do require authentication
-// Tokens should be sent via metadata, so the service is able to authenticate a user for a request
-type AccountsAuthServiceServer interface {
-	// Is email for the current account verified
-	IsEmailVerified(context.Context, *IsEmailVerifiedRequest) (*IsEmailVerifiedResponse, error)
+func (c *accountsServiceClient) RefreshSession(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*emptypb.Empty, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(emptypb.Empty)
+	err := c.cc.Invoke(ctx, AccountsService_RefreshSession_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
 }

-// UnimplementedAccountsAuthServiceServer should be embedded to have
+func (c *accountsServiceClient) TokenAuthorization(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*emptypb.Empty, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(emptypb.Empty)
+	err := c.cc.Invoke(ctx, AccountsService_TokenAuthorization_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// AccountsServiceServer is the server API for AccountsService service.
+// All implementations should embed UnimplementedAccountsServiceServer
+// for forward compatibility.
+type AccountsServiceServer interface {
+	// Is email for the current account verified
+	IsEmailVerified(context.Context, *IsEmailVerifiedRequest) (*IsEmailVerifiedResponse, error)
+	RefreshSession(context.Context, *emptypb.Empty) (*emptypb.Empty, error)
+	// Authorize using long living tokens
+	TokenAuthorization(context.Context, *emptypb.Empty) (*emptypb.Empty, error)
+}
+
+// UnimplementedAccountsServiceServer should be embedded to have
 // forward compatible implementations.
 //
 // NOTE: this should be embedded by value instead of pointer to avoid a nil
 // pointer dereference when methods are called.
-type UnimplementedAccountsAuthServiceServer struct{}
+type UnimplementedAccountsServiceServer struct{}

-func (UnimplementedAccountsAuthServiceServer) IsEmailVerified(context.Context, *IsEmailVerifiedRequest) (*IsEmailVerifiedResponse, error) {
+func (UnimplementedAccountsServiceServer) IsEmailVerified(context.Context, *IsEmailVerifiedRequest) (*IsEmailVerifiedResponse, error) {
 	return nil, status.Error(codes.Unimplemented, "method IsEmailVerified not implemented")
 }
-func (UnimplementedAccountsAuthServiceServer) testEmbeddedByValue() {}
+func (UnimplementedAccountsServiceServer) RefreshSession(context.Context, *emptypb.Empty) (*emptypb.Empty, error) {
+	return nil, status.Error(codes.Unimplemented, "method RefreshSession not implemented")
+}
+func (UnimplementedAccountsServiceServer) TokenAuthorization(context.Context, *emptypb.Empty) (*emptypb.Empty, error) {
+	return nil, status.Error(codes.Unimplemented, "method TokenAuthorization not implemented")
+}
+func (UnimplementedAccountsServiceServer) testEmbeddedByValue() {}

-// UnsafeAccountsAuthServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to AccountsAuthServiceServer will
+// UnsafeAccountsServiceServer may be embedded to opt out of forward compatibility for this service.
+// Use of this interface is not recommended, as added methods to AccountsServiceServer will
 // result in compilation errors.
-type UnsafeAccountsAuthServiceServer interface {
-	mustEmbedUnimplementedAccountsAuthServiceServer()
+type UnsafeAccountsServiceServer interface {
+	mustEmbedUnimplementedAccountsServiceServer()
 }

-func RegisterAccountsAuthServiceServer(s grpc.ServiceRegistrar, srv AccountsAuthServiceServer) {
-	// If the following call panics, it indicates UnimplementedAccountsAuthServiceServer was
+func RegisterAccountsServiceServer(s grpc.ServiceRegistrar, srv AccountsServiceServer) {
+	// If the following call panics, it indicates UnimplementedAccountsServiceServer was
 	// embedded by pointer and is nil.  This will cause panics if an
 	// unimplemented method is ever invoked, so we test this at initialization
 	// time to prevent it from happening at runtime later due to I/O.
 	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
 		t.testEmbeddedByValue()
 	}
-	s.RegisterService(&AccountsAuthService_ServiceDesc, srv)
+	s.RegisterService(&AccountsService_ServiceDesc, srv)
 }

-func _AccountsAuthService_IsEmailVerified_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+func _AccountsService_IsEmailVerified_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
 	in := new(IsEmailVerifiedRequest)
 	if err := dec(in); err != nil {
 		return nil, err
 	}
 	if interceptor == nil {
-		return srv.(AccountsAuthServiceServer).IsEmailVerified(ctx, in)
+		return srv.(AccountsServiceServer).IsEmailVerified(ctx, in)
 	}
 	info := &grpc.UnaryServerInfo{
 		Server:     srv,
-		FullMethod: AccountsAuthService_IsEmailVerified_FullMethodName,
+		FullMethod: AccountsService_IsEmailVerified_FullMethodName,
 	}
 	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(AccountsAuthServiceServer).IsEmailVerified(ctx, req.(*IsEmailVerifiedRequest))
+		return srv.(AccountsServiceServer).IsEmailVerified(ctx, req.(*IsEmailVerifiedRequest))
 	}
 	return interceptor(ctx, in, info, handler)
 }

-// AccountsAuthService_ServiceDesc is the grpc.ServiceDesc for AccountsAuthService service.
+func _AccountsService_RefreshSession_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(emptypb.Empty)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(AccountsServiceServer).RefreshSession(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: AccountsService_RefreshSession_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(AccountsServiceServer).RefreshSession(ctx, req.(*emptypb.Empty))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _AccountsService_TokenAuthorization_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(emptypb.Empty)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(AccountsServiceServer).TokenAuthorization(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: AccountsService_TokenAuthorization_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(AccountsServiceServer).TokenAuthorization(ctx, req.(*emptypb.Empty))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+// AccountsService_ServiceDesc is the grpc.ServiceDesc for AccountsService service.
 // It's only intended for direct use with grpc.RegisterService,
 // and not to be introspected or modified (even as a copy)
-var AccountsAuthService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "accounts.v1.AccountsAuthService",
-	HandlerType: (*AccountsAuthServiceServer)(nil),
+var AccountsService_ServiceDesc = grpc.ServiceDesc{
+	ServiceName: "accounts.v1.AccountsService",
+	HandlerType: (*AccountsServiceServer)(nil),
 	Methods: []grpc.MethodDesc{
 		{
 			MethodName: "IsEmailVerified",
-			Handler:    _AccountsAuthService_IsEmailVerified_Handler,
+			Handler:    _AccountsService_IsEmailVerified_Handler,
+		},
+		{
+			MethodName: "RefreshSession",
+			Handler:    _AccountsService_RefreshSession_Handler,
+		},
+		{
+			MethodName: "TokenAuthorization",
+			Handler:    _AccountsService_TokenAuthorization_Handler,
 		},
 	},
 	Streams:  []grpc.StreamDesc{},
--- a/pkg/applications/v1/applications_v1.pb.go
+++ b/pkg/applications/v1/applications_v1.pb.go
@@ -1,840 +0,0 @@
-/// This file has messages for describing applications
-
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.36.11
-// 	protoc        (unknown)
-// source: applications/v1/applications_v1.proto
-
-package applications
-
-import (
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	emptypb "google.golang.org/protobuf/types/known/emptypb"
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-type OwnerId struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Uuid          string                 `protobuf:"bytes,1,opt,name=uuid,proto3" json:"uuid,omitempty"` // UUID of a user that is creating an environemnt
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *OwnerId) Reset() {
-	*x = OwnerId{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[0]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *OwnerId) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*OwnerId) ProtoMessage() {}
-
-func (x *OwnerId) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[0]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use OwnerId.ProtoReflect.Descriptor instead.
-func (*OwnerId) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *OwnerId) GetUuid() string {
-	if x != nil {
-		return x.Uuid
-	}
-	return ""
-}
-
-type Token struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Token         string                 `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"` // Token that should be used to create an environment
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *Token) Reset() {
-	*x = Token{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[1]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *Token) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*Token) ProtoMessage() {}
-
-func (x *Token) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[1]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use Token.ProtoReflect.Descriptor instead.
-func (*Token) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{1}
-}
-
-func (x *Token) GetToken() string {
-	if x != nil {
-		return x.Token
-	}
-	return ""
-}
-
-type CreateOptions struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Metadata      *ApplicationMetadata   `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
-	Spec          *ApplicationSpec       `protobuf:"bytes,2,opt,name=spec,proto3" json:"spec,omitempty"`
-	OwnerId       *OwnerId               `protobuf:"bytes,3,opt,name=owner_id,json=ownerId,proto3" json:"owner_id,omitempty"`
-	Token         *Token                 `protobuf:"bytes,4,opt,name=token,proto3" json:"token,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *CreateOptions) Reset() {
-	*x = CreateOptions{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[2]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *CreateOptions) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*CreateOptions) ProtoMessage() {}
-
-func (x *CreateOptions) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[2]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use CreateOptions.ProtoReflect.Descriptor instead.
-func (*CreateOptions) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{2}
-}
-
-func (x *CreateOptions) GetMetadata() *ApplicationMetadata {
-	if x != nil {
-		return x.Metadata
-	}
-	return nil
-}
-
-func (x *CreateOptions) GetSpec() *ApplicationSpec {
-	if x != nil {
-		return x.Spec
-	}
-	return nil
-}
-
-func (x *CreateOptions) GetOwnerId() *OwnerId {
-	if x != nil {
-		return x.OwnerId
-	}
-	return nil
-}
-
-func (x *CreateOptions) GetToken() *Token {
-	if x != nil {
-		return x.Token
-	}
-	return nil
-}
-
-type UpdateOptions struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Id            *ApplicationId         `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
-	Metadata      *ApplicationMetadata   `protobuf:"bytes,2,opt,name=metadata,proto3" json:"metadata,omitempty"`
-	Spec          *ApplicationSpec       `protobuf:"bytes,3,opt,name=spec,proto3" json:"spec,omitempty"`
-	OwnerId       *OwnerId               `protobuf:"bytes,4,opt,name=owner_id,json=ownerId,proto3" json:"owner_id,omitempty"`
-	Token         *Token                 `protobuf:"bytes,5,opt,name=token,proto3" json:"token,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *UpdateOptions) Reset() {
-	*x = UpdateOptions{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[3]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *UpdateOptions) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*UpdateOptions) ProtoMessage() {}
-
-func (x *UpdateOptions) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[3]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use UpdateOptions.ProtoReflect.Descriptor instead.
-func (*UpdateOptions) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{3}
-}
-
-func (x *UpdateOptions) GetId() *ApplicationId {
-	if x != nil {
-		return x.Id
-	}
-	return nil
-}
-
-func (x *UpdateOptions) GetMetadata() *ApplicationMetadata {
-	if x != nil {
-		return x.Metadata
-	}
-	return nil
-}
-
-func (x *UpdateOptions) GetSpec() *ApplicationSpec {
-	if x != nil {
-		return x.Spec
-	}
-	return nil
-}
-
-func (x *UpdateOptions) GetOwnerId() *OwnerId {
-	if x != nil {
-		return x.OwnerId
-	}
-	return nil
-}
-
-func (x *UpdateOptions) GetToken() *Token {
-	if x != nil {
-		return x.Token
-	}
-	return nil
-}
-
-type DeleteOptions struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Id            *ApplicationId         `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
-	Metadata      *ApplicationMetadata   `protobuf:"bytes,2,opt,name=metadata,proto3" json:"metadata,omitempty"`
-	OwnerId       *OwnerId               `protobuf:"bytes,3,opt,name=owner_id,json=ownerId,proto3" json:"owner_id,omitempty"`
-	Token         *Token                 `protobuf:"bytes,4,opt,name=token,proto3" json:"token,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *DeleteOptions) Reset() {
-	*x = DeleteOptions{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[4]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *DeleteOptions) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*DeleteOptions) ProtoMessage() {}
-
-func (x *DeleteOptions) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[4]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use DeleteOptions.ProtoReflect.Descriptor instead.
-func (*DeleteOptions) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{4}
-}
-
-func (x *DeleteOptions) GetId() *ApplicationId {
-	if x != nil {
-		return x.Id
-	}
-	return nil
-}
-
-func (x *DeleteOptions) GetMetadata() *ApplicationMetadata {
-	if x != nil {
-		return x.Metadata
-	}
-	return nil
-}
-
-func (x *DeleteOptions) GetOwnerId() *OwnerId {
-	if x != nil {
-		return x.OwnerId
-	}
-	return nil
-}
-
-func (x *DeleteOptions) GetToken() *Token {
-	if x != nil {
-		return x.Token
-	}
-	return nil
-}
-
-type GetOptions struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Id            *ApplicationId         `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
-	Metadata      *ApplicationMetadata   `protobuf:"bytes,2,opt,name=metadata,proto3" json:"metadata,omitempty"`
-	OwnerId       *OwnerId               `protobuf:"bytes,3,opt,name=owner_id,json=ownerId,proto3" json:"owner_id,omitempty"`
-	Token         *Token                 `protobuf:"bytes,4,opt,name=token,proto3" json:"token,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *GetOptions) Reset() {
-	*x = GetOptions{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[5]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *GetOptions) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*GetOptions) ProtoMessage() {}
-
-func (x *GetOptions) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[5]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use GetOptions.ProtoReflect.Descriptor instead.
-func (*GetOptions) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{5}
-}
-
-func (x *GetOptions) GetId() *ApplicationId {
-	if x != nil {
-		return x.Id
-	}
-	return nil
-}
-
-func (x *GetOptions) GetMetadata() *ApplicationMetadata {
-	if x != nil {
-		return x.Metadata
-	}
-	return nil
-}
-
-func (x *GetOptions) GetOwnerId() *OwnerId {
-	if x != nil {
-		return x.OwnerId
-	}
-	return nil
-}
-
-func (x *GetOptions) GetToken() *Token {
-	if x != nil {
-		return x.Token
-	}
-	return nil
-}
-
-type ListOptions struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Metadata      *ApplicationMetadata   `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
-	OwnerId       *OwnerId               `protobuf:"bytes,2,opt,name=owner_id,json=ownerId,proto3" json:"owner_id,omitempty"`
-	Token         *Token                 `protobuf:"bytes,3,opt,name=token,proto3" json:"token,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *ListOptions) Reset() {
-	*x = ListOptions{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[6]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *ListOptions) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*ListOptions) ProtoMessage() {}
-
-func (x *ListOptions) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[6]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use ListOptions.ProtoReflect.Descriptor instead.
-func (*ListOptions) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{6}
-}
-
-func (x *ListOptions) GetMetadata() *ApplicationMetadata {
-	if x != nil {
-		return x.Metadata
-	}
-	return nil
-}
-
-func (x *ListOptions) GetOwnerId() *OwnerId {
-	if x != nil {
-		return x.OwnerId
-	}
-	return nil
-}
-
-func (x *ListOptions) GetToken() *Token {
-	if x != nil {
-		return x.Token
-	}
-	return nil
-}
-
-type ApplicationId struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Uuid          string                 `protobuf:"bytes,1,opt,name=uuid,proto3" json:"uuid,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *ApplicationId) Reset() {
-	*x = ApplicationId{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[7]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *ApplicationId) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*ApplicationId) ProtoMessage() {}
-
-func (x *ApplicationId) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[7]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use ApplicationId.ProtoReflect.Descriptor instead.
-func (*ApplicationId) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{7}
-}
-
-func (x *ApplicationId) GetUuid() string {
-	if x != nil {
-		return x.Uuid
-	}
-	return ""
-}
-
-type ApplicationMetadata struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Name          string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
-	Description   string                 `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *ApplicationMetadata) Reset() {
-	*x = ApplicationMetadata{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[8]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *ApplicationMetadata) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*ApplicationMetadata) ProtoMessage() {}
-
-func (x *ApplicationMetadata) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[8]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use ApplicationMetadata.ProtoReflect.Descriptor instead.
-func (*ApplicationMetadata) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{8}
-}
-
-func (x *ApplicationMetadata) GetName() string {
-	if x != nil {
-		return x.Name
-	}
-	return ""
-}
-
-func (x *ApplicationMetadata) GetDescription() string {
-	if x != nil {
-		return x.Description
-	}
-	return ""
-}
-
-type ApplicationSpec struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Application   string                 `protobuf:"bytes,1,opt,name=application,proto3" json:"application,omitempty"`
-	Version       string                 `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
-	EnvironemntId string                 `protobuf:"bytes,3,opt,name=environemnt_id,json=environemntId,proto3" json:"environemnt_id,omitempty"`
-	Config        map[string]string      `protobuf:"bytes,4,rep,name=config,proto3" json:"config,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
-	RawConfig     string                 `protobuf:"bytes,5,opt,name=raw_config,json=rawConfig,proto3" json:"raw_config,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *ApplicationSpec) Reset() {
-	*x = ApplicationSpec{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[9]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *ApplicationSpec) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*ApplicationSpec) ProtoMessage() {}
-
-func (x *ApplicationSpec) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[9]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use ApplicationSpec.ProtoReflect.Descriptor instead.
-func (*ApplicationSpec) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{9}
-}
-
-func (x *ApplicationSpec) GetApplication() string {
-	if x != nil {
-		return x.Application
-	}
-	return ""
-}
-
-func (x *ApplicationSpec) GetVersion() string {
-	if x != nil {
-		return x.Version
-	}
-	return ""
-}
-
-func (x *ApplicationSpec) GetEnvironemntId() string {
-	if x != nil {
-		return x.EnvironemntId
-	}
-	return ""
-}
-
-func (x *ApplicationSpec) GetConfig() map[string]string {
-	if x != nil {
-		return x.Config
-	}
-	return nil
-}
-
-func (x *ApplicationSpec) GetRawConfig() string {
-	if x != nil {
-		return x.RawConfig
-	}
-	return ""
-}
-
-type ApplicationFull struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Metadata      *ApplicationMetadata   `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
-	Spec          *ApplicationSpec       `protobuf:"bytes,2,opt,name=spec,proto3" json:"spec,omitempty"`
-	Id            *ApplicationId         `protobuf:"bytes,3,opt,name=id,proto3" json:"id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *ApplicationFull) Reset() {
-	*x = ApplicationFull{}
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[10]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *ApplicationFull) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*ApplicationFull) ProtoMessage() {}
-
-func (x *ApplicationFull) ProtoReflect() protoreflect.Message {
-	mi := &file_applications_v1_applications_v1_proto_msgTypes[10]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use ApplicationFull.ProtoReflect.Descriptor instead.
-func (*ApplicationFull) Descriptor() ([]byte, []int) {
-	return file_applications_v1_applications_v1_proto_rawDescGZIP(), []int{10}
-}
-
-func (x *ApplicationFull) GetMetadata() *ApplicationMetadata {
-	if x != nil {
-		return x.Metadata
-	}
-	return nil
-}
-
-func (x *ApplicationFull) GetSpec() *ApplicationSpec {
-	if x != nil {
-		return x.Spec
-	}
-	return nil
-}
-
-func (x *ApplicationFull) GetId() *ApplicationId {
-	if x != nil {
-		return x.Id
-	}
-	return nil
-}
-
-var File_applications_v1_applications_v1_proto protoreflect.FileDescriptor
-
-const file_applications_v1_applications_v1_proto_rawDesc = "" +
-	"\n" +
-	"%applications/v1/applications_v1.proto\x12\fapplications\x1a\x1bgoogle/protobuf/empty.proto\"\x1d\n" +
-	"\aOwnerId\x12\x12\n" +
-	"\x04uuid\x18\x01 \x01(\tR\x04uuid\"\x1d\n" +
-	"\x05Token\x12\x14\n" +
-	"\x05token\x18\x01 \x01(\tR\x05token\"\xde\x01\n" +
-	"\rCreateOptions\x12=\n" +
-	"\bmetadata\x18\x01 \x01(\v2!.applications.ApplicationMetadataR\bmetadata\x121\n" +
-	"\x04spec\x18\x02 \x01(\v2\x1d.applications.ApplicationSpecR\x04spec\x120\n" +
-	"\bowner_id\x18\x03 \x01(\v2\x15.applications.OwnerIdR\aownerId\x12)\n" +
-	"\x05token\x18\x04 \x01(\v2\x13.applications.TokenR\x05token\"\x8b\x02\n" +
-	"\rUpdateOptions\x12+\n" +
-	"\x02id\x18\x01 \x01(\v2\x1b.applications.ApplicationIdR\x02id\x12=\n" +
-	"\bmetadata\x18\x02 \x01(\v2!.applications.ApplicationMetadataR\bmetadata\x121\n" +
-	"\x04spec\x18\x03 \x01(\v2\x1d.applications.ApplicationSpecR\x04spec\x120\n" +
-	"\bowner_id\x18\x04 \x01(\v2\x15.applications.OwnerIdR\aownerId\x12)\n" +
-	"\x05token\x18\x05 \x01(\v2\x13.applications.TokenR\x05token\"\xd8\x01\n" +
-	"\rDeleteOptions\x12+\n" +
-	"\x02id\x18\x01 \x01(\v2\x1b.applications.ApplicationIdR\x02id\x12=\n" +
-	"\bmetadata\x18\x02 \x01(\v2!.applications.ApplicationMetadataR\bmetadata\x120\n" +
-	"\bowner_id\x18\x03 \x01(\v2\x15.applications.OwnerIdR\aownerId\x12)\n" +
-	"\x05token\x18\x04 \x01(\v2\x13.applications.TokenR\x05token\"\xd5\x01\n" +
-	"\n" +
-	"GetOptions\x12+\n" +
-	"\x02id\x18\x01 \x01(\v2\x1b.applications.ApplicationIdR\x02id\x12=\n" +
-	"\bmetadata\x18\x02 \x01(\v2!.applications.ApplicationMetadataR\bmetadata\x120\n" +
-	"\bowner_id\x18\x03 \x01(\v2\x15.applications.OwnerIdR\aownerId\x12)\n" +
-	"\x05token\x18\x04 \x01(\v2\x13.applications.TokenR\x05token\"\xa9\x01\n" +
-	"\vListOptions\x12=\n" +
-	"\bmetadata\x18\x01 \x01(\v2!.applications.ApplicationMetadataR\bmetadata\x120\n" +
-	"\bowner_id\x18\x02 \x01(\v2\x15.applications.OwnerIdR\aownerId\x12)\n" +
-	"\x05token\x18\x03 \x01(\v2\x13.applications.TokenR\x05token\"#\n" +
-	"\rApplicationId\x12\x12\n" +
-	"\x04uuid\x18\x01 \x01(\tR\x04uuid\"K\n" +
-	"\x13ApplicationMetadata\x12\x12\n" +
-	"\x04name\x18\x01 \x01(\tR\x04name\x12 \n" +
-	"\vdescription\x18\x02 \x01(\tR\vdescription\"\x91\x02\n" +
-	"\x0fApplicationSpec\x12 \n" +
-	"\vapplication\x18\x01 \x01(\tR\vapplication\x12\x18\n" +
-	"\aversion\x18\x02 \x01(\tR\aversion\x12%\n" +
-	"\x0eenvironemnt_id\x18\x03 \x01(\tR\renvironemntId\x12A\n" +
-	"\x06config\x18\x04 \x03(\v2).applications.ApplicationSpec.ConfigEntryR\x06config\x12\x1d\n" +
-	"\n" +
-	"raw_config\x18\x05 \x01(\tR\trawConfig\x1a9\n" +
-	"\vConfigEntry\x12\x10\n" +
-	"\x03key\x18\x01 \x01(\tR\x03key\x12\x14\n" +
-	"\x05value\x18\x02 \x01(\tR\x05value:\x028\x01\"\xb0\x01\n" +
-	"\x0fApplicationFull\x12=\n" +
-	"\bmetadata\x18\x01 \x01(\v2!.applications.ApplicationMetadataR\bmetadata\x121\n" +
-	"\x04spec\x18\x02 \x01(\v2\x1d.applications.ApplicationSpecR\x04spec\x12+\n" +
-	"\x02id\x18\x03 \x01(\v2\x1b.applications.ApplicationIdR\x02id2\xe7\x02\n" +
-	"\fApplications\x12F\n" +
-	"\x06Create\x12\x1b.applications.CreateOptions\x1a\x1d.applications.ApplicationFull\"\x00\x12F\n" +
-	"\x06Update\x12\x1b.applications.UpdateOptions\x1a\x1d.applications.ApplicationFull\"\x00\x12?\n" +
-	"\x06Delete\x12\x1b.applications.DeleteOptions\x1a\x16.google.protobuf.Empty\"\x00\x12@\n" +
-	"\x03Get\x12\x18.applications.GetOptions\x1a\x1d.applications.ApplicationFull\"\x00\x12D\n" +
-	"\x04List\x12\x19.applications.ListOptions\x1a\x1d.applications.ApplicationFull\"\x000\x01BJZHgitea.badhouseplants.net/softplayer/softplayer-go-proto/pkg/applicationsb\x06proto3"
-
-var (
-	file_applications_v1_applications_v1_proto_rawDescOnce sync.Once
-	file_applications_v1_applications_v1_proto_rawDescData []byte
-)
-
-func file_applications_v1_applications_v1_proto_rawDescGZIP() []byte {
-	file_applications_v1_applications_v1_proto_rawDescOnce.Do(func() {
-		file_applications_v1_applications_v1_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_applications_v1_applications_v1_proto_rawDesc), len(file_applications_v1_applications_v1_proto_rawDesc)))
-	})
-	return file_applications_v1_applications_v1_proto_rawDescData
-}
-
-var file_applications_v1_applications_v1_proto_msgTypes = make([]protoimpl.MessageInfo, 12)
-var file_applications_v1_applications_v1_proto_goTypes = []any{
-	(*OwnerId)(nil),             // 0: applications.OwnerId
-	(*Token)(nil),               // 1: applications.Token
-	(*CreateOptions)(nil),       // 2: applications.CreateOptions
-	(*UpdateOptions)(nil),       // 3: applications.UpdateOptions
-	(*DeleteOptions)(nil),       // 4: applications.DeleteOptions
-	(*GetOptions)(nil),          // 5: applications.GetOptions
-	(*ListOptions)(nil),         // 6: applications.ListOptions
-	(*ApplicationId)(nil),       // 7: applications.ApplicationId
-	(*ApplicationMetadata)(nil), // 8: applications.ApplicationMetadata
-	(*ApplicationSpec)(nil),     // 9: applications.ApplicationSpec
-	(*ApplicationFull)(nil),     // 10: applications.ApplicationFull
-	nil,                         // 11: applications.ApplicationSpec.ConfigEntry
-	(*emptypb.Empty)(nil),       // 12: google.protobuf.Empty
-}
-var file_applications_v1_applications_v1_proto_depIdxs = []int32{
-	8,  // 0: applications.CreateOptions.metadata:type_name -> applications.ApplicationMetadata
-	9,  // 1: applications.CreateOptions.spec:type_name -> applications.ApplicationSpec
-	0,  // 2: applications.CreateOptions.owner_id:type_name -> applications.OwnerId
-	1,  // 3: applications.CreateOptions.token:type_name -> applications.Token
-	7,  // 4: applications.UpdateOptions.id:type_name -> applications.ApplicationId
-	8,  // 5: applications.UpdateOptions.metadata:type_name -> applications.ApplicationMetadata
-	9,  // 6: applications.UpdateOptions.spec:type_name -> applications.ApplicationSpec
-	0,  // 7: applications.UpdateOptions.owner_id:type_name -> applications.OwnerId
-	1,  // 8: applications.UpdateOptions.token:type_name -> applications.Token
-	7,  // 9: applications.DeleteOptions.id:type_name -> applications.ApplicationId
-	8,  // 10: applications.DeleteOptions.metadata:type_name -> applications.ApplicationMetadata
-	0,  // 11: applications.DeleteOptions.owner_id:type_name -> applications.OwnerId
-	1,  // 12: applications.DeleteOptions.token:type_name -> applications.Token
-	7,  // 13: applications.GetOptions.id:type_name -> applications.ApplicationId
-	8,  // 14: applications.GetOptions.metadata:type_name -> applications.ApplicationMetadata
-	0,  // 15: applications.GetOptions.owner_id:type_name -> applications.OwnerId
-	1,  // 16: applications.GetOptions.token:type_name -> applications.Token
-	8,  // 17: applications.ListOptions.metadata:type_name -> applications.ApplicationMetadata
-	0,  // 18: applications.ListOptions.owner_id:type_name -> applications.OwnerId
-	1,  // 19: applications.ListOptions.token:type_name -> applications.Token
-	11, // 20: applications.ApplicationSpec.config:type_name -> applications.ApplicationSpec.ConfigEntry
-	8,  // 21: applications.ApplicationFull.metadata:type_name -> applications.ApplicationMetadata
-	9,  // 22: applications.ApplicationFull.spec:type_name -> applications.ApplicationSpec
-	7,  // 23: applications.ApplicationFull.id:type_name -> applications.ApplicationId
-	2,  // 24: applications.Applications.Create:input_type -> applications.CreateOptions
-	3,  // 25: applications.Applications.Update:input_type -> applications.UpdateOptions
-	4,  // 26: applications.Applications.Delete:input_type -> applications.DeleteOptions
-	5,  // 27: applications.Applications.Get:input_type -> applications.GetOptions
-	6,  // 28: applications.Applications.List:input_type -> applications.ListOptions
-	10, // 29: applications.Applications.Create:output_type -> applications.ApplicationFull
-	10, // 30: applications.Applications.Update:output_type -> applications.ApplicationFull
-	12, // 31: applications.Applications.Delete:output_type -> google.protobuf.Empty
-	10, // 32: applications.Applications.Get:output_type -> applications.ApplicationFull
-	10, // 33: applications.Applications.List:output_type -> applications.ApplicationFull
-	29, // [29:34] is the sub-list for method output_type
-	24, // [24:29] is the sub-list for method input_type
-	24, // [24:24] is the sub-list for extension type_name
-	24, // [24:24] is the sub-list for extension extendee
-	0,  // [0:24] is the sub-list for field type_name
-}
-
-func init() { file_applications_v1_applications_v1_proto_init() }
-func file_applications_v1_applications_v1_proto_init() {
-	if File_applications_v1_applications_v1_proto != nil {
-		return
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: unsafe.Slice(unsafe.StringData(file_applications_v1_applications_v1_proto_rawDesc), len(file_applications_v1_applications_v1_proto_rawDesc)),
-			NumEnums:      0,
-			NumMessages:   12,
-			NumExtensions: 0,
-			NumServices:   1,
-		},
-		GoTypes:           file_applications_v1_applications_v1_proto_goTypes,
-		DependencyIndexes: file_applications_v1_applications_v1_proto_depIdxs,
-		MessageInfos:      file_applications_v1_applications_v1_proto_msgTypes,
-	}.Build()
-	File_applications_v1_applications_v1_proto = out.File
-	file_applications_v1_applications_v1_proto_goTypes = nil
-	file_applications_v1_applications_v1_proto_depIdxs = nil
-}
--- a/pkg/applications/v1/applications_v1_grpc.pb.go
+++ b/pkg/applications/v1/applications_v1_grpc.pb.go
@@ -1,284 +0,0 @@
-/// This file has messages for describing applications
-
-// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
-// versions:
-// - protoc-gen-go-grpc v1.6.1
-// - protoc             (unknown)
-// source: applications/v1/applications_v1.proto
-
-package applications
-
-import (
-	context "context"
-	grpc "google.golang.org/grpc"
-	codes "google.golang.org/grpc/codes"
-	status "google.golang.org/grpc/status"
-	emptypb "google.golang.org/protobuf/types/known/emptypb"
-)
-
-// This is a compile-time assertion to ensure that this generated file
-// is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.64.0 or later.
-const _ = grpc.SupportPackageIsVersion9
-
-const (
-	Applications_Create_FullMethodName = "/applications.Applications/Create"
-	Applications_Update_FullMethodName = "/applications.Applications/Update"
-	Applications_Delete_FullMethodName = "/applications.Applications/Delete"
-	Applications_Get_FullMethodName    = "/applications.Applications/Get"
-	Applications_List_FullMethodName   = "/applications.Applications/List"
-)
-
-// ApplicationsClient is the client API for Applications service.
-//
-// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-//
-// *
-// Service for handling applications
-type ApplicationsClient interface {
-	Create(ctx context.Context, in *CreateOptions, opts ...grpc.CallOption) (*ApplicationFull, error)
-	Update(ctx context.Context, in *UpdateOptions, opts ...grpc.CallOption) (*ApplicationFull, error)
-	Delete(ctx context.Context, in *DeleteOptions, opts ...grpc.CallOption) (*emptypb.Empty, error)
-	Get(ctx context.Context, in *GetOptions, opts ...grpc.CallOption) (*ApplicationFull, error)
-	List(ctx context.Context, in *ListOptions, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ApplicationFull], error)
-}
-
-type applicationsClient struct {
-	cc grpc.ClientConnInterface
-}
-
-func NewApplicationsClient(cc grpc.ClientConnInterface) ApplicationsClient {
-	return &applicationsClient{cc}
-}
-
-func (c *applicationsClient) Create(ctx context.Context, in *CreateOptions, opts ...grpc.CallOption) (*ApplicationFull, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(ApplicationFull)
-	err := c.cc.Invoke(ctx, Applications_Create_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *applicationsClient) Update(ctx context.Context, in *UpdateOptions, opts ...grpc.CallOption) (*ApplicationFull, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(ApplicationFull)
-	err := c.cc.Invoke(ctx, Applications_Update_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *applicationsClient) Delete(ctx context.Context, in *DeleteOptions, opts ...grpc.CallOption) (*emptypb.Empty, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(emptypb.Empty)
-	err := c.cc.Invoke(ctx, Applications_Delete_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *applicationsClient) Get(ctx context.Context, in *GetOptions, opts ...grpc.CallOption) (*ApplicationFull, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(ApplicationFull)
-	err := c.cc.Invoke(ctx, Applications_Get_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *applicationsClient) List(ctx context.Context, in *ListOptions, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ApplicationFull], error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	stream, err := c.cc.NewStream(ctx, &Applications_ServiceDesc.Streams[0], Applications_List_FullMethodName, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	x := &grpc.GenericClientStream[ListOptions, ApplicationFull]{ClientStream: stream}
-	if err := x.ClientStream.SendMsg(in); err != nil {
-		return nil, err
-	}
-	if err := x.ClientStream.CloseSend(); err != nil {
-		return nil, err
-	}
-	return x, nil
-}
-
-// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
-type Applications_ListClient = grpc.ServerStreamingClient[ApplicationFull]
-
-// ApplicationsServer is the server API for Applications service.
-// All implementations should embed UnimplementedApplicationsServer
-// for forward compatibility.
-//
-// *
-// Service for handling applications
-type ApplicationsServer interface {
-	Create(context.Context, *CreateOptions) (*ApplicationFull, error)
-	Update(context.Context, *UpdateOptions) (*ApplicationFull, error)
-	Delete(context.Context, *DeleteOptions) (*emptypb.Empty, error)
-	Get(context.Context, *GetOptions) (*ApplicationFull, error)
-	List(*ListOptions, grpc.ServerStreamingServer[ApplicationFull]) error
-}
-
-// UnimplementedApplicationsServer should be embedded to have
-// forward compatible implementations.
-//
-// NOTE: this should be embedded by value instead of pointer to avoid a nil
-// pointer dereference when methods are called.
-type UnimplementedApplicationsServer struct{}
-
-func (UnimplementedApplicationsServer) Create(context.Context, *CreateOptions) (*ApplicationFull, error) {
-	return nil, status.Error(codes.Unimplemented, "method Create not implemented")
-}
-func (UnimplementedApplicationsServer) Update(context.Context, *UpdateOptions) (*ApplicationFull, error) {
-	return nil, status.Error(codes.Unimplemented, "method Update not implemented")
-}
-func (UnimplementedApplicationsServer) Delete(context.Context, *DeleteOptions) (*emptypb.Empty, error) {
-	return nil, status.Error(codes.Unimplemented, "method Delete not implemented")
-}
-func (UnimplementedApplicationsServer) Get(context.Context, *GetOptions) (*ApplicationFull, error) {
-	return nil, status.Error(codes.Unimplemented, "method Get not implemented")
-}
-func (UnimplementedApplicationsServer) List(*ListOptions, grpc.ServerStreamingServer[ApplicationFull]) error {
-	return status.Error(codes.Unimplemented, "method List not implemented")
-}
-func (UnimplementedApplicationsServer) testEmbeddedByValue() {}
-
-// UnsafeApplicationsServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to ApplicationsServer will
-// result in compilation errors.
-type UnsafeApplicationsServer interface {
-	mustEmbedUnimplementedApplicationsServer()
-}
-
-func RegisterApplicationsServer(s grpc.ServiceRegistrar, srv ApplicationsServer) {
-	// If the following call panics, it indicates UnimplementedApplicationsServer was
-	// embedded by pointer and is nil.  This will cause panics if an
-	// unimplemented method is ever invoked, so we test this at initialization
-	// time to prevent it from happening at runtime later due to I/O.
-	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
-		t.testEmbeddedByValue()
-	}
-	s.RegisterService(&Applications_ServiceDesc, srv)
-}
-
-func _Applications_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(CreateOptions)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ApplicationsServer).Create(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: Applications_Create_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ApplicationsServer).Create(ctx, req.(*CreateOptions))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _Applications_Update_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(UpdateOptions)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ApplicationsServer).Update(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: Applications_Update_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ApplicationsServer).Update(ctx, req.(*UpdateOptions))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _Applications_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(DeleteOptions)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ApplicationsServer).Delete(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: Applications_Delete_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ApplicationsServer).Delete(ctx, req.(*DeleteOptions))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _Applications_Get_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(GetOptions)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ApplicationsServer).Get(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: Applications_Get_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ApplicationsServer).Get(ctx, req.(*GetOptions))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _Applications_List_Handler(srv interface{}, stream grpc.ServerStream) error {
-	m := new(ListOptions)
-	if err := stream.RecvMsg(m); err != nil {
-		return err
-	}
-	return srv.(ApplicationsServer).List(m, &grpc.GenericServerStream[ListOptions, ApplicationFull]{ServerStream: stream})
-}
-
-// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
-type Applications_ListServer = grpc.ServerStreamingServer[ApplicationFull]
-
-// Applications_ServiceDesc is the grpc.ServiceDesc for Applications service.
-// It's only intended for direct use with grpc.RegisterService,
-// and not to be introspected or modified (even as a copy)
-var Applications_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "applications.Applications",
-	HandlerType: (*ApplicationsServer)(nil),
-	Methods: []grpc.MethodDesc{
-		{
-			MethodName: "Create",
-			Handler:    _Applications_Create_Handler,
-		},
-		{
-			MethodName: "Update",
-			Handler:    _Applications_Update_Handler,
-		},
-		{
-			MethodName: "Delete",
-			Handler:    _Applications_Delete_Handler,
-		},
-		{
-			MethodName: "Get",
-			Handler:    _Applications_Get_Handler,
-		},
-	},
-	Streams: []grpc.StreamDesc{
-		{
-			StreamName:    "List",
-			Handler:       _Applications_List_Handler,
-			ServerStreams: true,
-		},
-	},
-	Metadata: "applications/v1/applications_v1.proto",
-}
--- a/pkg/email/v1/email_v1.pb.go
+++ b/pkg/email/v1/email_v1.pb.go
@@ -1,187 +0,0 @@
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.36.11
-// 	protoc        (unknown)
-// source: email/v1/email_v1.proto
-
-package email
-
-import (
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	emptypb "google.golang.org/protobuf/types/known/emptypb"
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-type RequestValidation struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	UserId        string                 `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RequestValidation) Reset() {
-	*x = RequestValidation{}
-	mi := &file_email_v1_email_v1_proto_msgTypes[0]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RequestValidation) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RequestValidation) ProtoMessage() {}
-
-func (x *RequestValidation) ProtoReflect() protoreflect.Message {
-	mi := &file_email_v1_email_v1_proto_msgTypes[0]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RequestValidation.ProtoReflect.Descriptor instead.
-func (*RequestValidation) Descriptor() ([]byte, []int) {
-	return file_email_v1_email_v1_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *RequestValidation) GetUserId() string {
-	if x != nil {
-		return x.UserId
-	}
-	return ""
-}
-
-type ConfirmValidation struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	UserId        string                 `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
-	Code          int32                  `protobuf:"varint,2,opt,name=code,proto3" json:"code,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *ConfirmValidation) Reset() {
-	*x = ConfirmValidation{}
-	mi := &file_email_v1_email_v1_proto_msgTypes[1]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *ConfirmValidation) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*ConfirmValidation) ProtoMessage() {}
-
-func (x *ConfirmValidation) ProtoReflect() protoreflect.Message {
-	mi := &file_email_v1_email_v1_proto_msgTypes[1]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use ConfirmValidation.ProtoReflect.Descriptor instead.
-func (*ConfirmValidation) Descriptor() ([]byte, []int) {
-	return file_email_v1_email_v1_proto_rawDescGZIP(), []int{1}
-}
-
-func (x *ConfirmValidation) GetUserId() string {
-	if x != nil {
-		return x.UserId
-	}
-	return ""
-}
-
-func (x *ConfirmValidation) GetCode() int32 {
-	if x != nil {
-		return x.Code
-	}
-	return 0
-}
-
-var File_email_v1_email_v1_proto protoreflect.FileDescriptor
-
-const file_email_v1_email_v1_proto_rawDesc = "" +
-	"\n" +
-	"\x17email/v1/email_v1.proto\x12\x05email\x1a\x1bgoogle/protobuf/empty.proto\",\n" +
-	"\x11RequestValidation\x12\x17\n" +
-	"\auser_id\x18\x01 \x01(\tR\x06userId\"@\n" +
-	"\x11ConfirmValidation\x12\x17\n" +
-	"\auser_id\x18\x01 \x01(\tR\x06userId\x12\x12\n" +
-	"\x04code\x18\x02 \x01(\x05R\x04code2\x99\x01\n" +
-	"\x0fEmailValidation\x12A\n" +
-	"\vSendRequest\x12\x18.email.RequestValidation\x1a\x16.google.protobuf.Empty\"\x00\x12C\n" +
-	"\rValidateEmail\x12\x18.email.ConfirmValidation\x1a\x16.google.protobuf.Empty\"\x00BCZAgitea.badhouseplants.net/softplayer/softplayer-go-proto/pkg/emailb\x06proto3"
-
-var (
-	file_email_v1_email_v1_proto_rawDescOnce sync.Once
-	file_email_v1_email_v1_proto_rawDescData []byte
-)
-
-func file_email_v1_email_v1_proto_rawDescGZIP() []byte {
-	file_email_v1_email_v1_proto_rawDescOnce.Do(func() {
-		file_email_v1_email_v1_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_email_v1_email_v1_proto_rawDesc), len(file_email_v1_email_v1_proto_rawDesc)))
-	})
-	return file_email_v1_email_v1_proto_rawDescData
-}
-
-var file_email_v1_email_v1_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
-var file_email_v1_email_v1_proto_goTypes = []any{
-	(*RequestValidation)(nil), // 0: email.RequestValidation
-	(*ConfirmValidation)(nil), // 1: email.ConfirmValidation
-	(*emptypb.Empty)(nil),     // 2: google.protobuf.Empty
-}
-var file_email_v1_email_v1_proto_depIdxs = []int32{
-	0, // 0: email.EmailValidation.SendRequest:input_type -> email.RequestValidation
-	1, // 1: email.EmailValidation.ValidateEmail:input_type -> email.ConfirmValidation
-	2, // 2: email.EmailValidation.SendRequest:output_type -> google.protobuf.Empty
-	2, // 3: email.EmailValidation.ValidateEmail:output_type -> google.protobuf.Empty
-	2, // [2:4] is the sub-list for method output_type
-	0, // [0:2] is the sub-list for method input_type
-	0, // [0:0] is the sub-list for extension type_name
-	0, // [0:0] is the sub-list for extension extendee
-	0, // [0:0] is the sub-list for field type_name
-}
-
-func init() { file_email_v1_email_v1_proto_init() }
-func file_email_v1_email_v1_proto_init() {
-	if File_email_v1_email_v1_proto != nil {
-		return
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: unsafe.Slice(unsafe.StringData(file_email_v1_email_v1_proto_rawDesc), len(file_email_v1_email_v1_proto_rawDesc)),
-			NumEnums:      0,
-			NumMessages:   2,
-			NumExtensions: 0,
-			NumServices:   1,
-		},
-		GoTypes:           file_email_v1_email_v1_proto_goTypes,
-		DependencyIndexes: file_email_v1_email_v1_proto_depIdxs,
-		MessageInfos:      file_email_v1_email_v1_proto_msgTypes,
-	}.Build()
-	File_email_v1_email_v1_proto = out.File
-	file_email_v1_email_v1_proto_goTypes = nil
-	file_email_v1_email_v1_proto_depIdxs = nil
-}
--- a/pkg/email/v1/email_v1_grpc.pb.go
+++ b/pkg/email/v1/email_v1_grpc.pb.go
@@ -1,162 +0,0 @@
-// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
-// versions:
-// - protoc-gen-go-grpc v1.6.1
-// - protoc             (unknown)
-// source: email/v1/email_v1.proto
-
-package email
-
-import (
-	context "context"
-	grpc "google.golang.org/grpc"
-	codes "google.golang.org/grpc/codes"
-	status "google.golang.org/grpc/status"
-	emptypb "google.golang.org/protobuf/types/known/emptypb"
-)
-
-// This is a compile-time assertion to ensure that this generated file
-// is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.64.0 or later.
-const _ = grpc.SupportPackageIsVersion9
-
-const (
-	EmailValidation_SendRequest_FullMethodName   = "/email.EmailValidation/SendRequest"
-	EmailValidation_ValidateEmail_FullMethodName = "/email.EmailValidation/ValidateEmail"
-)
-
-// EmailValidationClient is the client API for EmailValidation service.
-//
-// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-//
-// A service that should handle email validation
-type EmailValidationClient interface {
-	SendRequest(ctx context.Context, in *RequestValidation, opts ...grpc.CallOption) (*emptypb.Empty, error)
-	ValidateEmail(ctx context.Context, in *ConfirmValidation, opts ...grpc.CallOption) (*emptypb.Empty, error)
-}
-
-type emailValidationClient struct {
-	cc grpc.ClientConnInterface
-}
-
-func NewEmailValidationClient(cc grpc.ClientConnInterface) EmailValidationClient {
-	return &emailValidationClient{cc}
-}
-
-func (c *emailValidationClient) SendRequest(ctx context.Context, in *RequestValidation, opts ...grpc.CallOption) (*emptypb.Empty, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(emptypb.Empty)
-	err := c.cc.Invoke(ctx, EmailValidation_SendRequest_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *emailValidationClient) ValidateEmail(ctx context.Context, in *ConfirmValidation, opts ...grpc.CallOption) (*emptypb.Empty, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(emptypb.Empty)
-	err := c.cc.Invoke(ctx, EmailValidation_ValidateEmail_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-// EmailValidationServer is the server API for EmailValidation service.
-// All implementations should embed UnimplementedEmailValidationServer
-// for forward compatibility.
-//
-// A service that should handle email validation
-type EmailValidationServer interface {
-	SendRequest(context.Context, *RequestValidation) (*emptypb.Empty, error)
-	ValidateEmail(context.Context, *ConfirmValidation) (*emptypb.Empty, error)
-}
-
-// UnimplementedEmailValidationServer should be embedded to have
-// forward compatible implementations.
-//
-// NOTE: this should be embedded by value instead of pointer to avoid a nil
-// pointer dereference when methods are called.
-type UnimplementedEmailValidationServer struct{}
-
-func (UnimplementedEmailValidationServer) SendRequest(context.Context, *RequestValidation) (*emptypb.Empty, error) {
-	return nil, status.Error(codes.Unimplemented, "method SendRequest not implemented")
-}
-func (UnimplementedEmailValidationServer) ValidateEmail(context.Context, *ConfirmValidation) (*emptypb.Empty, error) {
-	return nil, status.Error(codes.Unimplemented, "method ValidateEmail not implemented")
-}
-func (UnimplementedEmailValidationServer) testEmbeddedByValue() {}
-
-// UnsafeEmailValidationServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to EmailValidationServer will
-// result in compilation errors.
-type UnsafeEmailValidationServer interface {
-	mustEmbedUnimplementedEmailValidationServer()
-}
-
-func RegisterEmailValidationServer(s grpc.ServiceRegistrar, srv EmailValidationServer) {
-	// If the following call panics, it indicates UnimplementedEmailValidationServer was
-	// embedded by pointer and is nil.  This will cause panics if an
-	// unimplemented method is ever invoked, so we test this at initialization
-	// time to prevent it from happening at runtime later due to I/O.
-	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
-		t.testEmbeddedByValue()
-	}
-	s.RegisterService(&EmailValidation_ServiceDesc, srv)
-}
-
-func _EmailValidation_SendRequest_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(RequestValidation)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(EmailValidationServer).SendRequest(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: EmailValidation_SendRequest_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(EmailValidationServer).SendRequest(ctx, req.(*RequestValidation))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _EmailValidation_ValidateEmail_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(ConfirmValidation)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(EmailValidationServer).ValidateEmail(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: EmailValidation_ValidateEmail_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(EmailValidationServer).ValidateEmail(ctx, req.(*ConfirmValidation))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-// EmailValidation_ServiceDesc is the grpc.ServiceDesc for EmailValidation service.
-// It's only intended for direct use with grpc.RegisterService,
-// and not to be introspected or modified (even as a copy)
-var EmailValidation_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "email.EmailValidation",
-	HandlerType: (*EmailValidationServer)(nil),
-	Methods: []grpc.MethodDesc{
-		{
-			MethodName: "SendRequest",
-			Handler:    _EmailValidation_SendRequest_Handler,
-		},
-		{
-			MethodName: "ValidateEmail",
-			Handler:    _EmailValidation_ValidateEmail_Handler,
-		},
-	},
-	Streams:  []grpc.StreamDesc{},
-	Metadata: "email/v1/email_v1.proto",
-}
--- a/pkg/environments/v1/environments_v1.pb.go
+++ b/pkg/environments/v1/environments_v1.pb.go
--- a/pkg/environments/v1/environments_v1_grpc.pb.go
+++ b/pkg/environments/v1/environments_v1_grpc.pb.go
@@ -1,284 +0,0 @@
-/// This file has messages for describing environments
-
-// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
-// versions:
-// - protoc-gen-go-grpc v1.6.1
-// - protoc             (unknown)
-// source: environments/v1/environments_v1.proto
-
-package environments
-
-import (
-	context "context"
-	grpc "google.golang.org/grpc"
-	codes "google.golang.org/grpc/codes"
-	status "google.golang.org/grpc/status"
-	emptypb "google.golang.org/protobuf/types/known/emptypb"
-)
-
-// This is a compile-time assertion to ensure that this generated file
-// is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.64.0 or later.
-const _ = grpc.SupportPackageIsVersion9
-
-const (
-	Environments_Create_FullMethodName = "/environments.Environments/Create"
-	Environments_Update_FullMethodName = "/environments.Environments/Update"
-	Environments_Delete_FullMethodName = "/environments.Environments/Delete"
-	Environments_Get_FullMethodName    = "/environments.Environments/Get"
-	Environments_List_FullMethodName   = "/environments.Environments/List"
-)
-
-// EnvironmentsClient is the client API for Environments service.
-//
-// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-//
-// *
-// Service for handling environments
-type EnvironmentsClient interface {
-	Create(ctx context.Context, in *CreateOptions, opts ...grpc.CallOption) (*EnvironmentFull, error)
-	Update(ctx context.Context, in *UpdateOptions, opts ...grpc.CallOption) (*EnvironmentFull, error)
-	Delete(ctx context.Context, in *DeleteOptions, opts ...grpc.CallOption) (*emptypb.Empty, error)
-	Get(ctx context.Context, in *GetOptions, opts ...grpc.CallOption) (*EnvironmentFull, error)
-	List(ctx context.Context, in *ListOptions, opts ...grpc.CallOption) (grpc.ServerStreamingClient[EnvironmentFull], error)
-}
-
-type environmentsClient struct {
-	cc grpc.ClientConnInterface
-}
-
-func NewEnvironmentsClient(cc grpc.ClientConnInterface) EnvironmentsClient {
-	return &environmentsClient{cc}
-}
-
-func (c *environmentsClient) Create(ctx context.Context, in *CreateOptions, opts ...grpc.CallOption) (*EnvironmentFull, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(EnvironmentFull)
-	err := c.cc.Invoke(ctx, Environments_Create_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *environmentsClient) Update(ctx context.Context, in *UpdateOptions, opts ...grpc.CallOption) (*EnvironmentFull, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(EnvironmentFull)
-	err := c.cc.Invoke(ctx, Environments_Update_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *environmentsClient) Delete(ctx context.Context, in *DeleteOptions, opts ...grpc.CallOption) (*emptypb.Empty, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(emptypb.Empty)
-	err := c.cc.Invoke(ctx, Environments_Delete_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *environmentsClient) Get(ctx context.Context, in *GetOptions, opts ...grpc.CallOption) (*EnvironmentFull, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(EnvironmentFull)
-	err := c.cc.Invoke(ctx, Environments_Get_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *environmentsClient) List(ctx context.Context, in *ListOptions, opts ...grpc.CallOption) (grpc.ServerStreamingClient[EnvironmentFull], error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	stream, err := c.cc.NewStream(ctx, &Environments_ServiceDesc.Streams[0], Environments_List_FullMethodName, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	x := &grpc.GenericClientStream[ListOptions, EnvironmentFull]{ClientStream: stream}
-	if err := x.ClientStream.SendMsg(in); err != nil {
-		return nil, err
-	}
-	if err := x.ClientStream.CloseSend(); err != nil {
-		return nil, err
-	}
-	return x, nil
-}
-
-// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
-type Environments_ListClient = grpc.ServerStreamingClient[EnvironmentFull]
-
-// EnvironmentsServer is the server API for Environments service.
-// All implementations should embed UnimplementedEnvironmentsServer
-// for forward compatibility.
-//
-// *
-// Service for handling environments
-type EnvironmentsServer interface {
-	Create(context.Context, *CreateOptions) (*EnvironmentFull, error)
-	Update(context.Context, *UpdateOptions) (*EnvironmentFull, error)
-	Delete(context.Context, *DeleteOptions) (*emptypb.Empty, error)
-	Get(context.Context, *GetOptions) (*EnvironmentFull, error)
-	List(*ListOptions, grpc.ServerStreamingServer[EnvironmentFull]) error
-}
-
-// UnimplementedEnvironmentsServer should be embedded to have
-// forward compatible implementations.
-//
-// NOTE: this should be embedded by value instead of pointer to avoid a nil
-// pointer dereference when methods are called.
-type UnimplementedEnvironmentsServer struct{}
-
-func (UnimplementedEnvironmentsServer) Create(context.Context, *CreateOptions) (*EnvironmentFull, error) {
-	return nil, status.Error(codes.Unimplemented, "method Create not implemented")
-}
-func (UnimplementedEnvironmentsServer) Update(context.Context, *UpdateOptions) (*EnvironmentFull, error) {
-	return nil, status.Error(codes.Unimplemented, "method Update not implemented")
-}
-func (UnimplementedEnvironmentsServer) Delete(context.Context, *DeleteOptions) (*emptypb.Empty, error) {
-	return nil, status.Error(codes.Unimplemented, "method Delete not implemented")
-}
-func (UnimplementedEnvironmentsServer) Get(context.Context, *GetOptions) (*EnvironmentFull, error) {
-	return nil, status.Error(codes.Unimplemented, "method Get not implemented")
-}
-func (UnimplementedEnvironmentsServer) List(*ListOptions, grpc.ServerStreamingServer[EnvironmentFull]) error {
-	return status.Error(codes.Unimplemented, "method List not implemented")
-}
-func (UnimplementedEnvironmentsServer) testEmbeddedByValue() {}
-
-// UnsafeEnvironmentsServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to EnvironmentsServer will
-// result in compilation errors.
-type UnsafeEnvironmentsServer interface {
-	mustEmbedUnimplementedEnvironmentsServer()
-}
-
-func RegisterEnvironmentsServer(s grpc.ServiceRegistrar, srv EnvironmentsServer) {
-	// If the following call panics, it indicates UnimplementedEnvironmentsServer was
-	// embedded by pointer and is nil.  This will cause panics if an
-	// unimplemented method is ever invoked, so we test this at initialization
-	// time to prevent it from happening at runtime later due to I/O.
-	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
-		t.testEmbeddedByValue()
-	}
-	s.RegisterService(&Environments_ServiceDesc, srv)
-}
-
-func _Environments_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(CreateOptions)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(EnvironmentsServer).Create(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: Environments_Create_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(EnvironmentsServer).Create(ctx, req.(*CreateOptions))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _Environments_Update_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(UpdateOptions)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(EnvironmentsServer).Update(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: Environments_Update_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(EnvironmentsServer).Update(ctx, req.(*UpdateOptions))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _Environments_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(DeleteOptions)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(EnvironmentsServer).Delete(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: Environments_Delete_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(EnvironmentsServer).Delete(ctx, req.(*DeleteOptions))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _Environments_Get_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(GetOptions)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(EnvironmentsServer).Get(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: Environments_Get_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(EnvironmentsServer).Get(ctx, req.(*GetOptions))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _Environments_List_Handler(srv interface{}, stream grpc.ServerStream) error {
-	m := new(ListOptions)
-	if err := stream.RecvMsg(m); err != nil {
-		return err
-	}
-	return srv.(EnvironmentsServer).List(m, &grpc.GenericServerStream[ListOptions, EnvironmentFull]{ServerStream: stream})
-}
-
-// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
-type Environments_ListServer = grpc.ServerStreamingServer[EnvironmentFull]
-
-// Environments_ServiceDesc is the grpc.ServiceDesc for Environments service.
-// It's only intended for direct use with grpc.RegisterService,
-// and not to be introspected or modified (even as a copy)
-var Environments_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "environments.Environments",
-	HandlerType: (*EnvironmentsServer)(nil),
-	Methods: []grpc.MethodDesc{
-		{
-			MethodName: "Create",
-			Handler:    _Environments_Create_Handler,
-		},
-		{
-			MethodName: "Update",
-			Handler:    _Environments_Update_Handler,
-		},
-		{
-			MethodName: "Delete",
-			Handler:    _Environments_Delete_Handler,
-		},
-		{
-			MethodName: "Get",
-			Handler:    _Environments_Get_Handler,
-		},
-	},
-	Streams: []grpc.StreamDesc{
-		{
-			StreamName:    "List",
-			Handler:       _Environments_List_Handler,
-			ServerStreams: true,
-		},
-	},
-	Metadata: "environments/v1/environments_v1.proto",
-}
--- a/pkg/projects/v1/projects_v1.pb.go
+++ b/pkg/projects/v1/projects_v1.pb.go
@@ -0,0 +1,395 @@
+/// Protobuf definitions for the accounts service.
+
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.11
+// 	protoc        (unknown)
+// source: projects/v1/projects_v1.proto
+
+package v1
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type CreateProjectRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CreateProjectRequest) Reset() {
+	*x = CreateProjectRequest{}
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CreateProjectRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateProjectRequest) ProtoMessage() {}
+
+func (x *CreateProjectRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateProjectRequest.ProtoReflect.Descriptor instead.
+func (*CreateProjectRequest) Descriptor() ([]byte, []int) {
+	return file_projects_v1_projects_v1_proto_rawDescGZIP(), []int{0}
+}
+
+type CreateProjectResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CreateProjectResponse) Reset() {
+	*x = CreateProjectResponse{}
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CreateProjectResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateProjectResponse) ProtoMessage() {}
+
+func (x *CreateProjectResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateProjectResponse.ProtoReflect.Descriptor instead.
+func (*CreateProjectResponse) Descriptor() ([]byte, []int) {
+	return file_projects_v1_projects_v1_proto_rawDescGZIP(), []int{1}
+}
+
+type GetProjectRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetProjectRequest) Reset() {
+	*x = GetProjectRequest{}
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetProjectRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetProjectRequest) ProtoMessage() {}
+
+func (x *GetProjectRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetProjectRequest.ProtoReflect.Descriptor instead.
+func (*GetProjectRequest) Descriptor() ([]byte, []int) {
+	return file_projects_v1_projects_v1_proto_rawDescGZIP(), []int{2}
+}
+
+type GetProjectResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetProjectResponse) Reset() {
+	*x = GetProjectResponse{}
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetProjectResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetProjectResponse) ProtoMessage() {}
+
+func (x *GetProjectResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetProjectResponse.ProtoReflect.Descriptor instead.
+func (*GetProjectResponse) Descriptor() ([]byte, []int) {
+	return file_projects_v1_projects_v1_proto_rawDescGZIP(), []int{3}
+}
+
+type ListProjectsRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListProjectsRequest) Reset() {
+	*x = ListProjectsRequest{}
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListProjectsRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListProjectsRequest) ProtoMessage() {}
+
+func (x *ListProjectsRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListProjectsRequest.ProtoReflect.Descriptor instead.
+func (*ListProjectsRequest) Descriptor() ([]byte, []int) {
+	return file_projects_v1_projects_v1_proto_rawDescGZIP(), []int{4}
+}
+
+type ListProjectsResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListProjectsResponse) Reset() {
+	*x = ListProjectsResponse{}
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListProjectsResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListProjectsResponse) ProtoMessage() {}
+
+func (x *ListProjectsResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[5]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListProjectsResponse.ProtoReflect.Descriptor instead.
+func (*ListProjectsResponse) Descriptor() ([]byte, []int) {
+	return file_projects_v1_projects_v1_proto_rawDescGZIP(), []int{5}
+}
+
+type UpdateProjectRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *UpdateProjectRequest) Reset() {
+	*x = UpdateProjectRequest{}
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *UpdateProjectRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*UpdateProjectRequest) ProtoMessage() {}
+
+func (x *UpdateProjectRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[6]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use UpdateProjectRequest.ProtoReflect.Descriptor instead.
+func (*UpdateProjectRequest) Descriptor() ([]byte, []int) {
+	return file_projects_v1_projects_v1_proto_rawDescGZIP(), []int{6}
+}
+
+type UpdateProjectResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *UpdateProjectResponse) Reset() {
+	*x = UpdateProjectResponse{}
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *UpdateProjectResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*UpdateProjectResponse) ProtoMessage() {}
+
+func (x *UpdateProjectResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_projects_v1_projects_v1_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use UpdateProjectResponse.ProtoReflect.Descriptor instead.
+func (*UpdateProjectResponse) Descriptor() ([]byte, []int) {
+	return file_projects_v1_projects_v1_proto_rawDescGZIP(), []int{7}
+}
+
+var File_projects_v1_projects_v1_proto protoreflect.FileDescriptor
+
+const file_projects_v1_projects_v1_proto_rawDesc = "" +
+	"\n" +
+	"\x1dprojects/v1/projects_v1.proto\x12\vprojects.v1\"\x16\n" +
+	"\x14CreateProjectRequest\"\x17\n" +
+	"\x15CreateProjectResponse\"\x13\n" +
+	"\x11GetProjectRequest\"\x14\n" +
+	"\x12GetProjectResponse\"\x15\n" +
+	"\x13ListProjectsRequest\"\x16\n" +
+	"\x14ListProjectsResponse\"\x16\n" +
+	"\x14UpdateProjectRequest\"\x17\n" +
+	"\x15UpdateProjectResponse2\xef\x02\n" +
+	"\x0fProjectsService\x12X\n" +
+	"\rCreateProject\x12!.projects.v1.CreateProjectRequest\x1a\".projects.v1.CreateProjectResponse\"\x00\x12O\n" +
+	"\n" +
+	"GetProject\x12\x1e.projects.v1.GetProjectRequest\x1a\x1f.projects.v1.GetProjectResponse\"\x00\x12W\n" +
+	"\fListProjects\x12 .projects.v1.ListProjectsRequest\x1a!.projects.v1.ListProjectsResponse\"\x000\x01\x12X\n" +
+	"\rUpdateProject\x12!.projects.v1.UpdateProjectRequest\x1a\".projects.v1.UpdateProjectResponse\"\x00BIZGgitea.badhouseplants.net/softplayer/softplayer-go-proto/pkg/projects/v1b\x06proto3"
+
+var (
+	file_projects_v1_projects_v1_proto_rawDescOnce sync.Once
+	file_projects_v1_projects_v1_proto_rawDescData []byte
+)
+
+func file_projects_v1_projects_v1_proto_rawDescGZIP() []byte {
+	file_projects_v1_projects_v1_proto_rawDescOnce.Do(func() {
+		file_projects_v1_projects_v1_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_projects_v1_projects_v1_proto_rawDesc), len(file_projects_v1_projects_v1_proto_rawDesc)))
+	})
+	return file_projects_v1_projects_v1_proto_rawDescData
+}
+
+var file_projects_v1_projects_v1_proto_msgTypes = make([]protoimpl.MessageInfo, 8)
+var file_projects_v1_projects_v1_proto_goTypes = []any{
+	(*CreateProjectRequest)(nil),  // 0: projects.v1.CreateProjectRequest
+	(*CreateProjectResponse)(nil), // 1: projects.v1.CreateProjectResponse
+	(*GetProjectRequest)(nil),     // 2: projects.v1.GetProjectRequest
+	(*GetProjectResponse)(nil),    // 3: projects.v1.GetProjectResponse
+	(*ListProjectsRequest)(nil),   // 4: projects.v1.ListProjectsRequest
+	(*ListProjectsResponse)(nil),  // 5: projects.v1.ListProjectsResponse
+	(*UpdateProjectRequest)(nil),  // 6: projects.v1.UpdateProjectRequest
+	(*UpdateProjectResponse)(nil), // 7: projects.v1.UpdateProjectResponse
+}
+var file_projects_v1_projects_v1_proto_depIdxs = []int32{
+	0, // 0: projects.v1.ProjectsService.CreateProject:input_type -> projects.v1.CreateProjectRequest
+	2, // 1: projects.v1.ProjectsService.GetProject:input_type -> projects.v1.GetProjectRequest
+	4, // 2: projects.v1.ProjectsService.ListProjects:input_type -> projects.v1.ListProjectsRequest
+	6, // 3: projects.v1.ProjectsService.UpdateProject:input_type -> projects.v1.UpdateProjectRequest
+	1, // 4: projects.v1.ProjectsService.CreateProject:output_type -> projects.v1.CreateProjectResponse
+	3, // 5: projects.v1.ProjectsService.GetProject:output_type -> projects.v1.GetProjectResponse
+	5, // 6: projects.v1.ProjectsService.ListProjects:output_type -> projects.v1.ListProjectsResponse
+	7, // 7: projects.v1.ProjectsService.UpdateProject:output_type -> projects.v1.UpdateProjectResponse
+	4, // [4:8] is the sub-list for method output_type
+	0, // [0:4] is the sub-list for method input_type
+	0, // [0:0] is the sub-list for extension type_name
+	0, // [0:0] is the sub-list for extension extendee
+	0, // [0:0] is the sub-list for field type_name
+}
+
+func init() { file_projects_v1_projects_v1_proto_init() }
+func file_projects_v1_projects_v1_proto_init() {
+	if File_projects_v1_projects_v1_proto != nil {
+		return
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: unsafe.Slice(unsafe.StringData(file_projects_v1_projects_v1_proto_rawDesc), len(file_projects_v1_projects_v1_proto_rawDesc)),
+			NumEnums:      0,
+			NumMessages:   8,
+			NumExtensions: 0,
+			NumServices:   1,
+		},
+		GoTypes:           file_projects_v1_projects_v1_proto_goTypes,
+		DependencyIndexes: file_projects_v1_projects_v1_proto_depIdxs,
+		MessageInfos:      file_projects_v1_projects_v1_proto_msgTypes,
+	}.Build()
+	File_projects_v1_projects_v1_proto = out.File
+	file_projects_v1_projects_v1_proto_goTypes = nil
+	file_projects_v1_projects_v1_proto_depIdxs = nil
+}
--- a/pkg/projects/v1/projects_v1_grpc.pb.go
+++ b/pkg/projects/v1/projects_v1_grpc.pb.go
@@ -0,0 +1,239 @@
+/// Protobuf definitions for the accounts service.
+
+// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
+// versions:
+// - protoc-gen-go-grpc v1.6.2
+// - protoc             (unknown)
+// source: projects/v1/projects_v1.proto
+
+package v1
+
+import (
+	context "context"
+	grpc "google.golang.org/grpc"
+	codes "google.golang.org/grpc/codes"
+	status "google.golang.org/grpc/status"
+)
+
+// This is a compile-time assertion to ensure that this generated file
+// is compatible with the grpc package it is being compiled against.
+// Requires gRPC-Go v1.64.0 or later.
+const _ = grpc.SupportPackageIsVersion9
+
+const (
+	ProjectsService_CreateProject_FullMethodName = "/projects.v1.ProjectsService/CreateProject"
+	ProjectsService_GetProject_FullMethodName    = "/projects.v1.ProjectsService/GetProject"
+	ProjectsService_ListProjects_FullMethodName  = "/projects.v1.ProjectsService/ListProjects"
+	ProjectsService_UpdateProject_FullMethodName = "/projects.v1.ProjectsService/UpdateProject"
+)
+
+// ProjectsServiceClient is the client API for ProjectsService service.
+//
+// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
+type ProjectsServiceClient interface {
+	CreateProject(ctx context.Context, in *CreateProjectRequest, opts ...grpc.CallOption) (*CreateProjectResponse, error)
+	GetProject(ctx context.Context, in *GetProjectRequest, opts ...grpc.CallOption) (*GetProjectResponse, error)
+	ListProjects(ctx context.Context, in *ListProjectsRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ListProjectsResponse], error)
+	UpdateProject(ctx context.Context, in *UpdateProjectRequest, opts ...grpc.CallOption) (*UpdateProjectResponse, error)
+}
+
+type projectsServiceClient struct {
+	cc grpc.ClientConnInterface
+}
+
+func NewProjectsServiceClient(cc grpc.ClientConnInterface) ProjectsServiceClient {
+	return &projectsServiceClient{cc}
+}
+
+func (c *projectsServiceClient) CreateProject(ctx context.Context, in *CreateProjectRequest, opts ...grpc.CallOption) (*CreateProjectResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(CreateProjectResponse)
+	err := c.cc.Invoke(ctx, ProjectsService_CreateProject_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *projectsServiceClient) GetProject(ctx context.Context, in *GetProjectRequest, opts ...grpc.CallOption) (*GetProjectResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(GetProjectResponse)
+	err := c.cc.Invoke(ctx, ProjectsService_GetProject_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *projectsServiceClient) ListProjects(ctx context.Context, in *ListProjectsRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ListProjectsResponse], error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	stream, err := c.cc.NewStream(ctx, &ProjectsService_ServiceDesc.Streams[0], ProjectsService_ListProjects_FullMethodName, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	x := &grpc.GenericClientStream[ListProjectsRequest, ListProjectsResponse]{ClientStream: stream}
+	if err := x.ClientStream.SendMsg(in); err != nil {
+		return nil, err
+	}
+	if err := x.ClientStream.CloseSend(); err != nil {
+		return nil, err
+	}
+	return x, nil
+}
+
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type ProjectsService_ListProjectsClient = grpc.ServerStreamingClient[ListProjectsResponse]
+
+func (c *projectsServiceClient) UpdateProject(ctx context.Context, in *UpdateProjectRequest, opts ...grpc.CallOption) (*UpdateProjectResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(UpdateProjectResponse)
+	err := c.cc.Invoke(ctx, ProjectsService_UpdateProject_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// ProjectsServiceServer is the server API for ProjectsService service.
+// All implementations should embed UnimplementedProjectsServiceServer
+// for forward compatibility.
+type ProjectsServiceServer interface {
+	CreateProject(context.Context, *CreateProjectRequest) (*CreateProjectResponse, error)
+	GetProject(context.Context, *GetProjectRequest) (*GetProjectResponse, error)
+	ListProjects(*ListProjectsRequest, grpc.ServerStreamingServer[ListProjectsResponse]) error
+	UpdateProject(context.Context, *UpdateProjectRequest) (*UpdateProjectResponse, error)
+}
+
+// UnimplementedProjectsServiceServer should be embedded to have
+// forward compatible implementations.
+//
+// NOTE: this should be embedded by value instead of pointer to avoid a nil
+// pointer dereference when methods are called.
+type UnimplementedProjectsServiceServer struct{}
+
+func (UnimplementedProjectsServiceServer) CreateProject(context.Context, *CreateProjectRequest) (*CreateProjectResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method CreateProject not implemented")
+}
+func (UnimplementedProjectsServiceServer) GetProject(context.Context, *GetProjectRequest) (*GetProjectResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method GetProject not implemented")
+}
+func (UnimplementedProjectsServiceServer) ListProjects(*ListProjectsRequest, grpc.ServerStreamingServer[ListProjectsResponse]) error {
+	return status.Error(codes.Unimplemented, "method ListProjects not implemented")
+}
+func (UnimplementedProjectsServiceServer) UpdateProject(context.Context, *UpdateProjectRequest) (*UpdateProjectResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method UpdateProject not implemented")
+}
+func (UnimplementedProjectsServiceServer) testEmbeddedByValue() {}
+
+// UnsafeProjectsServiceServer may be embedded to opt out of forward compatibility for this service.
+// Use of this interface is not recommended, as added methods to ProjectsServiceServer will
+// result in compilation errors.
+type UnsafeProjectsServiceServer interface {
+	mustEmbedUnimplementedProjectsServiceServer()
+}
+
+func RegisterProjectsServiceServer(s grpc.ServiceRegistrar, srv ProjectsServiceServer) {
+	// If the following call panics, it indicates UnimplementedProjectsServiceServer was
+	// embedded by pointer and is nil.  This will cause panics if an
+	// unimplemented method is ever invoked, so we test this at initialization
+	// time to prevent it from happening at runtime later due to I/O.
+	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
+		t.testEmbeddedByValue()
+	}
+	s.RegisterService(&ProjectsService_ServiceDesc, srv)
+}
+
+func _ProjectsService_CreateProject_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(CreateProjectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(ProjectsServiceServer).CreateProject(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: ProjectsService_CreateProject_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(ProjectsServiceServer).CreateProject(ctx, req.(*CreateProjectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _ProjectsService_GetProject_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(GetProjectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(ProjectsServiceServer).GetProject(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: ProjectsService_GetProject_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(ProjectsServiceServer).GetProject(ctx, req.(*GetProjectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _ProjectsService_ListProjects_Handler(srv interface{}, stream grpc.ServerStream) error {
+	m := new(ListProjectsRequest)
+	if err := stream.RecvMsg(m); err != nil {
+		return err
+	}
+	return srv.(ProjectsServiceServer).ListProjects(m, &grpc.GenericServerStream[ListProjectsRequest, ListProjectsResponse]{ServerStream: stream})
+}
+
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type ProjectsService_ListProjectsServer = grpc.ServerStreamingServer[ListProjectsResponse]
+
+func _ProjectsService_UpdateProject_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(UpdateProjectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(ProjectsServiceServer).UpdateProject(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: ProjectsService_UpdateProject_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(ProjectsServiceServer).UpdateProject(ctx, req.(*UpdateProjectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+// ProjectsService_ServiceDesc is the grpc.ServiceDesc for ProjectsService service.
+// It's only intended for direct use with grpc.RegisterService,
+// and not to be introspected or modified (even as a copy)
+var ProjectsService_ServiceDesc = grpc.ServiceDesc{
+	ServiceName: "projects.v1.ProjectsService",
+	HandlerType: (*ProjectsServiceServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "CreateProject",
+			Handler:    _ProjectsService_CreateProject_Handler,
+		},
+		{
+			MethodName: "GetProject",
+			Handler:    _ProjectsService_GetProject_Handler,
+		},
+		{
+			MethodName: "UpdateProject",
+			Handler:    _ProjectsService_UpdateProject_Handler,
+		},
+	},
+	Streams: []grpc.StreamDesc{
+		{
+			StreamName:    "ListProjects",
+			Handler:       _ProjectsService_ListProjects_Handler,
+			ServerStreams: true,
+		},
+	},
+	Metadata: "projects/v1/projects_v1.proto",
+}
--- a/pkg/test/v1/test_v1.pb.go
+++ b/pkg/test/v1/test_v1.pb.go
@@ -9,6 +9,7 @@ package v1
 import (
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	emptypb "google.golang.org/protobuf/types/known/emptypb"
 	reflect "reflect"
 	sync "sync"
 	unsafe "unsafe"
@@ -165,19 +166,115 @@ func (*PongResponse) Descriptor() ([]byte, []int) {
 	return file_test_v1_test_v1_proto_rawDescGZIP(), []int{3}
 }

+type PingStreamResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Dummy         string                 `protobuf:"bytes,1,opt,name=dummy,proto3" json:"dummy,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *PingStreamResponse) Reset() {
+	*x = PingStreamResponse{}
+	mi := &file_test_v1_test_v1_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *PingStreamResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PingStreamResponse) ProtoMessage() {}
+
+func (x *PingStreamResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_test_v1_test_v1_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PingStreamResponse.ProtoReflect.Descriptor instead.
+func (*PingStreamResponse) Descriptor() ([]byte, []int) {
+	return file_test_v1_test_v1_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *PingStreamResponse) GetDummy() string {
+	if x != nil {
+		return x.Dummy
+	}
+	return ""
+}
+
+type PongStreamResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Dummy         string                 `protobuf:"bytes,1,opt,name=dummy,proto3" json:"dummy,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *PongStreamResponse) Reset() {
+	*x = PongStreamResponse{}
+	mi := &file_test_v1_test_v1_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *PongStreamResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PongStreamResponse) ProtoMessage() {}
+
+func (x *PongStreamResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_test_v1_test_v1_proto_msgTypes[5]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PongStreamResponse.ProtoReflect.Descriptor instead.
+func (*PongStreamResponse) Descriptor() ([]byte, []int) {
+	return file_test_v1_test_v1_proto_rawDescGZIP(), []int{5}
+}
+
+func (x *PongStreamResponse) GetDummy() string {
+	if x != nil {
+		return x.Dummy
+	}
+	return ""
+}
+
 var File_test_v1_test_v1_proto protoreflect.FileDescriptor

 const file_test_v1_test_v1_proto_rawDesc = "" +
 	"\n" +
-	"\x15test/v1/test_v1.proto\x12\atest.v1\"\r\n" +
+	"\x15test/v1/test_v1.proto\x12\atest.v1\x1a\x1bgoogle/protobuf/empty.proto\"\r\n" +
 	"\vPingRequest\"\x0e\n" +
 	"\fPingResponse\"\r\n" +
 	"\vPongRequest\"\x0e\n" +
-	"\fPongResponse2J\n" +
-	"\x11TestNoAuthService\x125\n" +
-	"\x04Ping\x12\x14.test.v1.PingRequest\x1a\x15.test.v1.PingResponse\"\x002H\n" +
-	"\x0fTestAuthService\x125\n" +
-	"\x04Pong\x12\x14.test.v1.PongRequest\x1a\x15.test.v1.PongResponse\"\x00BEZCgitea.badhouseplants.net/softplayer/softplayer-go-proto/pkg/test/v1b\x06proto3"
+	"\fPongResponse\"*\n" +
+	"\x12PingStreamResponse\x12\x14\n" +
+	"\x05dummy\x18\x01 \x01(\tR\x05dummy\"*\n" +
+	"\x12PongStreamResponse\x12\x14\n" +
+	"\x05dummy\x18\x01 \x01(\tR\x05dummy2\x91\x01\n" +
+	"\x11PublicTestService\x125\n" +
+	"\x04Ping\x12\x14.test.v1.PingRequest\x1a\x15.test.v1.PingResponse\"\x00\x12E\n" +
+	"\n" +
+	"PingStream\x12\x16.google.protobuf.Empty\x1a\x1b.test.v1.PingStreamResponse\"\x000\x012\x8b\x01\n" +
+	"\vTestService\x125\n" +
+	"\x04Pong\x12\x14.test.v1.PongRequest\x1a\x15.test.v1.PongResponse\"\x00\x12E\n" +
+	"\n" +
+	"PongStream\x12\x16.google.protobuf.Empty\x1a\x1b.test.v1.PongStreamResponse\"\x000\x01BEZCgitea.badhouseplants.net/softplayer/softplayer-go-proto/pkg/test/v1b\x06proto3"

 var (
 	file_test_v1_test_v1_proto_rawDescOnce sync.Once
@@ -191,20 +288,27 @@ func file_test_v1_test_v1_proto_rawDescGZIP() []byte {
 	return file_test_v1_test_v1_proto_rawDescData
 }

-var file_test_v1_test_v1_proto_msgTypes = make([]protoimpl.MessageInfo, 4)
+var file_test_v1_test_v1_proto_msgTypes = make([]protoimpl.MessageInfo, 6)
 var file_test_v1_test_v1_proto_goTypes = []any{
-	(*PingRequest)(nil),  // 0: test.v1.PingRequest
-	(*PingResponse)(nil), // 1: test.v1.PingResponse
-	(*PongRequest)(nil),  // 2: test.v1.PongRequest
-	(*PongResponse)(nil), // 3: test.v1.PongResponse
+	(*PingRequest)(nil),        // 0: test.v1.PingRequest
+	(*PingResponse)(nil),       // 1: test.v1.PingResponse
+	(*PongRequest)(nil),        // 2: test.v1.PongRequest
+	(*PongResponse)(nil),       // 3: test.v1.PongResponse
+	(*PingStreamResponse)(nil), // 4: test.v1.PingStreamResponse
+	(*PongStreamResponse)(nil), // 5: test.v1.PongStreamResponse
+	(*emptypb.Empty)(nil),      // 6: google.protobuf.Empty
 }
 var file_test_v1_test_v1_proto_depIdxs = []int32{
-	0, // 0: test.v1.TestNoAuthService.Ping:input_type -> test.v1.PingRequest
-	2, // 1: test.v1.TestAuthService.Pong:input_type -> test.v1.PongRequest
-	1, // 2: test.v1.TestNoAuthService.Ping:output_type -> test.v1.PingResponse
-	3, // 3: test.v1.TestAuthService.Pong:output_type -> test.v1.PongResponse
-	2, // [2:4] is the sub-list for method output_type
-	0, // [0:2] is the sub-list for method input_type
+	0, // 0: test.v1.PublicTestService.Ping:input_type -> test.v1.PingRequest
+	6, // 1: test.v1.PublicTestService.PingStream:input_type -> google.protobuf.Empty
+	2, // 2: test.v1.TestService.Pong:input_type -> test.v1.PongRequest
+	6, // 3: test.v1.TestService.PongStream:input_type -> google.protobuf.Empty
+	1, // 4: test.v1.PublicTestService.Ping:output_type -> test.v1.PingResponse
+	4, // 5: test.v1.PublicTestService.PingStream:output_type -> test.v1.PingStreamResponse
+	3, // 6: test.v1.TestService.Pong:output_type -> test.v1.PongResponse
+	5, // 7: test.v1.TestService.PongStream:output_type -> test.v1.PongStreamResponse
+	4, // [4:8] is the sub-list for method output_type
+	0, // [0:4] is the sub-list for method input_type
 	0, // [0:0] is the sub-list for extension type_name
 	0, // [0:0] is the sub-list for extension extendee
 	0, // [0:0] is the sub-list for field type_name
@@ -221,7 +325,7 @@ func file_test_v1_test_v1_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_test_v1_test_v1_proto_rawDesc), len(file_test_v1_test_v1_proto_rawDesc)),
 			NumEnums:      0,
-			NumMessages:   4,
+			NumMessages:   6,
 			NumExtensions: 0,
 			NumServices:   2,
 		},
--- a/pkg/test/v1/test_v1_grpc.pb.go
+++ b/pkg/test/v1/test_v1_grpc.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
-// - protoc-gen-go-grpc v1.6.1
+// - protoc-gen-go-grpc v1.6.2
 // - protoc             (unknown)
 // source: test/v1/test_v1.proto

@@ -11,6 +11,7 @@ import (
 	grpc "google.golang.org/grpc"
 	codes "google.golang.org/grpc/codes"
 	status "google.golang.org/grpc/status"
+	emptypb "google.golang.org/protobuf/types/known/emptypb"
 )

 // This is a compile-time assertion to ensure that this generated file
@@ -19,207 +20,291 @@ import (
 const _ = grpc.SupportPackageIsVersion9

 const (
-	TestNoAuthService_Ping_FullMethodName = "/test.v1.TestNoAuthService/Ping"
+	PublicTestService_Ping_FullMethodName       = "/test.v1.PublicTestService/Ping"
+	PublicTestService_PingStream_FullMethodName = "/test.v1.PublicTestService/PingStream"
 )

-// TestNoAuthServiceClient is the client API for TestNoAuthService service.
+// PublicTestServiceClient is the client API for PublicTestService service.
 //
 // For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
 //
 // *
 // Service for handling environments
-type TestNoAuthServiceClient interface {
+type PublicTestServiceClient interface {
 	Ping(ctx context.Context, in *PingRequest, opts ...grpc.CallOption) (*PingResponse, error)
+	PingStream(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (grpc.ServerStreamingClient[PingStreamResponse], error)
 }

-type testNoAuthServiceClient struct {
+type publicTestServiceClient struct {
 	cc grpc.ClientConnInterface
 }

-func NewTestNoAuthServiceClient(cc grpc.ClientConnInterface) TestNoAuthServiceClient {
-	return &testNoAuthServiceClient{cc}
+func NewPublicTestServiceClient(cc grpc.ClientConnInterface) PublicTestServiceClient {
+	return &publicTestServiceClient{cc}
 }

-func (c *testNoAuthServiceClient) Ping(ctx context.Context, in *PingRequest, opts ...grpc.CallOption) (*PingResponse, error) {
+func (c *publicTestServiceClient) Ping(ctx context.Context, in *PingRequest, opts ...grpc.CallOption) (*PingResponse, error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	out := new(PingResponse)
-	err := c.cc.Invoke(ctx, TestNoAuthService_Ping_FullMethodName, in, out, cOpts...)
+	err := c.cc.Invoke(ctx, PublicTestService_Ping_FullMethodName, in, out, cOpts...)
 	if err != nil {
 		return nil, err
 	}
 	return out, nil
 }

-// TestNoAuthServiceServer is the server API for TestNoAuthService service.
-// All implementations should embed UnimplementedTestNoAuthServiceServer
+func (c *publicTestServiceClient) PingStream(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (grpc.ServerStreamingClient[PingStreamResponse], error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	stream, err := c.cc.NewStream(ctx, &PublicTestService_ServiceDesc.Streams[0], PublicTestService_PingStream_FullMethodName, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	x := &grpc.GenericClientStream[emptypb.Empty, PingStreamResponse]{ClientStream: stream}
+	if err := x.ClientStream.SendMsg(in); err != nil {
+		return nil, err
+	}
+	if err := x.ClientStream.CloseSend(); err != nil {
+		return nil, err
+	}
+	return x, nil
+}
+
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type PublicTestService_PingStreamClient = grpc.ServerStreamingClient[PingStreamResponse]
+
+// PublicTestServiceServer is the server API for PublicTestService service.
+// All implementations should embed UnimplementedPublicTestServiceServer
 // for forward compatibility.
 //
 // *
 // Service for handling environments
-type TestNoAuthServiceServer interface {
+type PublicTestServiceServer interface {
 	Ping(context.Context, *PingRequest) (*PingResponse, error)
+	PingStream(*emptypb.Empty, grpc.ServerStreamingServer[PingStreamResponse]) error
 }

-// UnimplementedTestNoAuthServiceServer should be embedded to have
+// UnimplementedPublicTestServiceServer should be embedded to have
 // forward compatible implementations.
 //
 // NOTE: this should be embedded by value instead of pointer to avoid a nil
 // pointer dereference when methods are called.
-type UnimplementedTestNoAuthServiceServer struct{}
+type UnimplementedPublicTestServiceServer struct{}

-func (UnimplementedTestNoAuthServiceServer) Ping(context.Context, *PingRequest) (*PingResponse, error) {
+func (UnimplementedPublicTestServiceServer) Ping(context.Context, *PingRequest) (*PingResponse, error) {
 	return nil, status.Error(codes.Unimplemented, "method Ping not implemented")
 }
-func (UnimplementedTestNoAuthServiceServer) testEmbeddedByValue() {}
+func (UnimplementedPublicTestServiceServer) PingStream(*emptypb.Empty, grpc.ServerStreamingServer[PingStreamResponse]) error {
+	return status.Error(codes.Unimplemented, "method PingStream not implemented")
+}
+func (UnimplementedPublicTestServiceServer) testEmbeddedByValue() {}

-// UnsafeTestNoAuthServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to TestNoAuthServiceServer will
+// UnsafePublicTestServiceServer may be embedded to opt out of forward compatibility for this service.
+// Use of this interface is not recommended, as added methods to PublicTestServiceServer will
 // result in compilation errors.
-type UnsafeTestNoAuthServiceServer interface {
-	mustEmbedUnimplementedTestNoAuthServiceServer()
+type UnsafePublicTestServiceServer interface {
+	mustEmbedUnimplementedPublicTestServiceServer()
 }

-func RegisterTestNoAuthServiceServer(s grpc.ServiceRegistrar, srv TestNoAuthServiceServer) {
-	// If the following call panics, it indicates UnimplementedTestNoAuthServiceServer was
+func RegisterPublicTestServiceServer(s grpc.ServiceRegistrar, srv PublicTestServiceServer) {
+	// If the following call panics, it indicates UnimplementedPublicTestServiceServer was
 	// embedded by pointer and is nil.  This will cause panics if an
 	// unimplemented method is ever invoked, so we test this at initialization
 	// time to prevent it from happening at runtime later due to I/O.
 	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
 		t.testEmbeddedByValue()
 	}
-	s.RegisterService(&TestNoAuthService_ServiceDesc, srv)
+	s.RegisterService(&PublicTestService_ServiceDesc, srv)
 }

-func _TestNoAuthService_Ping_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+func _PublicTestService_Ping_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
 	in := new(PingRequest)
 	if err := dec(in); err != nil {
 		return nil, err
 	}
 	if interceptor == nil {
-		return srv.(TestNoAuthServiceServer).Ping(ctx, in)
+		return srv.(PublicTestServiceServer).Ping(ctx, in)
 	}
 	info := &grpc.UnaryServerInfo{
 		Server:     srv,
-		FullMethod: TestNoAuthService_Ping_FullMethodName,
+		FullMethod: PublicTestService_Ping_FullMethodName,
 	}
 	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(TestNoAuthServiceServer).Ping(ctx, req.(*PingRequest))
+		return srv.(PublicTestServiceServer).Ping(ctx, req.(*PingRequest))
 	}
 	return interceptor(ctx, in, info, handler)
 }

-// TestNoAuthService_ServiceDesc is the grpc.ServiceDesc for TestNoAuthService service.
+func _PublicTestService_PingStream_Handler(srv interface{}, stream grpc.ServerStream) error {
+	m := new(emptypb.Empty)
+	if err := stream.RecvMsg(m); err != nil {
+		return err
+	}
+	return srv.(PublicTestServiceServer).PingStream(m, &grpc.GenericServerStream[emptypb.Empty, PingStreamResponse]{ServerStream: stream})
+}
+
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type PublicTestService_PingStreamServer = grpc.ServerStreamingServer[PingStreamResponse]
+
+// PublicTestService_ServiceDesc is the grpc.ServiceDesc for PublicTestService service.
 // It's only intended for direct use with grpc.RegisterService,
 // and not to be introspected or modified (even as a copy)
-var TestNoAuthService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "test.v1.TestNoAuthService",
-	HandlerType: (*TestNoAuthServiceServer)(nil),
+var PublicTestService_ServiceDesc = grpc.ServiceDesc{
+	ServiceName: "test.v1.PublicTestService",
+	HandlerType: (*PublicTestServiceServer)(nil),
 	Methods: []grpc.MethodDesc{
 		{
 			MethodName: "Ping",
-			Handler:    _TestNoAuthService_Ping_Handler,
+			Handler:    _PublicTestService_Ping_Handler,
+		},
+	},
+	Streams: []grpc.StreamDesc{
+		{
+			StreamName:    "PingStream",
+			Handler:       _PublicTestService_PingStream_Handler,
+			ServerStreams: true,
 		},
 	},
-	Streams:  []grpc.StreamDesc{},
 	Metadata: "test/v1/test_v1.proto",
 }

 const (
-	TestAuthService_Pong_FullMethodName = "/test.v1.TestAuthService/Pong"
+	TestService_Pong_FullMethodName       = "/test.v1.TestService/Pong"
+	TestService_PongStream_FullMethodName = "/test.v1.TestService/PongStream"
 )

-// TestAuthServiceClient is the client API for TestAuthService service.
+// TestServiceClient is the client API for TestService service.
 //
 // For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-type TestAuthServiceClient interface {
+type TestServiceClient interface {
 	Pong(ctx context.Context, in *PongRequest, opts ...grpc.CallOption) (*PongResponse, error)
+	PongStream(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (grpc.ServerStreamingClient[PongStreamResponse], error)
 }

-type testAuthServiceClient struct {
+type testServiceClient struct {
 	cc grpc.ClientConnInterface
 }

-func NewTestAuthServiceClient(cc grpc.ClientConnInterface) TestAuthServiceClient {
-	return &testAuthServiceClient{cc}
+func NewTestServiceClient(cc grpc.ClientConnInterface) TestServiceClient {
+	return &testServiceClient{cc}
 }

-func (c *testAuthServiceClient) Pong(ctx context.Context, in *PongRequest, opts ...grpc.CallOption) (*PongResponse, error) {
+func (c *testServiceClient) Pong(ctx context.Context, in *PongRequest, opts ...grpc.CallOption) (*PongResponse, error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	out := new(PongResponse)
-	err := c.cc.Invoke(ctx, TestAuthService_Pong_FullMethodName, in, out, cOpts...)
+	err := c.cc.Invoke(ctx, TestService_Pong_FullMethodName, in, out, cOpts...)
 	if err != nil {
 		return nil, err
 	}
 	return out, nil
 }

-// TestAuthServiceServer is the server API for TestAuthService service.
-// All implementations should embed UnimplementedTestAuthServiceServer
-// for forward compatibility.
-type TestAuthServiceServer interface {
-	Pong(context.Context, *PongRequest) (*PongResponse, error)
+func (c *testServiceClient) PongStream(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (grpc.ServerStreamingClient[PongStreamResponse], error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	stream, err := c.cc.NewStream(ctx, &TestService_ServiceDesc.Streams[0], TestService_PongStream_FullMethodName, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	x := &grpc.GenericClientStream[emptypb.Empty, PongStreamResponse]{ClientStream: stream}
+	if err := x.ClientStream.SendMsg(in); err != nil {
+		return nil, err
+	}
+	if err := x.ClientStream.CloseSend(); err != nil {
+		return nil, err
+	}
+	return x, nil
 }

-// UnimplementedTestAuthServiceServer should be embedded to have
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type TestService_PongStreamClient = grpc.ServerStreamingClient[PongStreamResponse]
+
+// TestServiceServer is the server API for TestService service.
+// All implementations should embed UnimplementedTestServiceServer
+// for forward compatibility.
+type TestServiceServer interface {
+	Pong(context.Context, *PongRequest) (*PongResponse, error)
+	PongStream(*emptypb.Empty, grpc.ServerStreamingServer[PongStreamResponse]) error
+}
+
+// UnimplementedTestServiceServer should be embedded to have
 // forward compatible implementations.
 //
 // NOTE: this should be embedded by value instead of pointer to avoid a nil
 // pointer dereference when methods are called.
-type UnimplementedTestAuthServiceServer struct{}
+type UnimplementedTestServiceServer struct{}

-func (UnimplementedTestAuthServiceServer) Pong(context.Context, *PongRequest) (*PongResponse, error) {
+func (UnimplementedTestServiceServer) Pong(context.Context, *PongRequest) (*PongResponse, error) {
 	return nil, status.Error(codes.Unimplemented, "method Pong not implemented")
 }
-func (UnimplementedTestAuthServiceServer) testEmbeddedByValue() {}
+func (UnimplementedTestServiceServer) PongStream(*emptypb.Empty, grpc.ServerStreamingServer[PongStreamResponse]) error {
+	return status.Error(codes.Unimplemented, "method PongStream not implemented")
+}
+func (UnimplementedTestServiceServer) testEmbeddedByValue() {}

-// UnsafeTestAuthServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to TestAuthServiceServer will
+// UnsafeTestServiceServer may be embedded to opt out of forward compatibility for this service.
+// Use of this interface is not recommended, as added methods to TestServiceServer will
 // result in compilation errors.
-type UnsafeTestAuthServiceServer interface {
-	mustEmbedUnimplementedTestAuthServiceServer()
+type UnsafeTestServiceServer interface {
+	mustEmbedUnimplementedTestServiceServer()
 }

-func RegisterTestAuthServiceServer(s grpc.ServiceRegistrar, srv TestAuthServiceServer) {
-	// If the following call panics, it indicates UnimplementedTestAuthServiceServer was
+func RegisterTestServiceServer(s grpc.ServiceRegistrar, srv TestServiceServer) {
+	// If the following call panics, it indicates UnimplementedTestServiceServer was
 	// embedded by pointer and is nil.  This will cause panics if an
 	// unimplemented method is ever invoked, so we test this at initialization
 	// time to prevent it from happening at runtime later due to I/O.
 	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
 		t.testEmbeddedByValue()
 	}
-	s.RegisterService(&TestAuthService_ServiceDesc, srv)
+	s.RegisterService(&TestService_ServiceDesc, srv)
 }

-func _TestAuthService_Pong_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+func _TestService_Pong_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
 	in := new(PongRequest)
 	if err := dec(in); err != nil {
 		return nil, err
 	}
 	if interceptor == nil {
-		return srv.(TestAuthServiceServer).Pong(ctx, in)
+		return srv.(TestServiceServer).Pong(ctx, in)
 	}
 	info := &grpc.UnaryServerInfo{
 		Server:     srv,
-		FullMethod: TestAuthService_Pong_FullMethodName,
+		FullMethod: TestService_Pong_FullMethodName,
 	}
 	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(TestAuthServiceServer).Pong(ctx, req.(*PongRequest))
+		return srv.(TestServiceServer).Pong(ctx, req.(*PongRequest))
 	}
 	return interceptor(ctx, in, info, handler)
 }

-// TestAuthService_ServiceDesc is the grpc.ServiceDesc for TestAuthService service.
+func _TestService_PongStream_Handler(srv interface{}, stream grpc.ServerStream) error {
+	m := new(emptypb.Empty)
+	if err := stream.RecvMsg(m); err != nil {
+		return err
+	}
+	return srv.(TestServiceServer).PongStream(m, &grpc.GenericServerStream[emptypb.Empty, PongStreamResponse]{ServerStream: stream})
+}
+
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type TestService_PongStreamServer = grpc.ServerStreamingServer[PongStreamResponse]
+
+// TestService_ServiceDesc is the grpc.ServiceDesc for TestService service.
 // It's only intended for direct use with grpc.RegisterService,
 // and not to be introspected or modified (even as a copy)
-var TestAuthService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "test.v1.TestAuthService",
-	HandlerType: (*TestAuthServiceServer)(nil),
+var TestService_ServiceDesc = grpc.ServiceDesc{
+	ServiceName: "test.v1.TestService",
+	HandlerType: (*TestServiceServer)(nil),
 	Methods: []grpc.MethodDesc{
 		{
 			MethodName: "Pong",
-			Handler:    _TestAuthService_Pong_Handler,
+			Handler:    _TestService_Pong_Handler,
+		},
+	},
+	Streams: []grpc.StreamDesc{
+		{
+			StreamName:    "PongStream",
+			Handler:       _TestService_PongStream_Handler,
+			ServerStreams: true,
 		},
 	},
-	Streams:  []grpc.StreamDesc{},
 	Metadata: "test/v1/test_v1.proto",
 }
--- a/pkg/tokens/v1/tokens_v1.pb.go
+++ b/pkg/tokens/v1/tokens_v1.pb.go
--- a/pkg/tokens/v1/tokens_v1_grpc.pb.go
+++ b/pkg/tokens/v1/tokens_v1_grpc.pb.go
@@ -0,0 +1,485 @@
+/// Protobuf definitions for the accounts service.
+
+// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
+// versions:
+// - protoc-gen-go-grpc v1.6.2
+// - protoc             (unknown)
+// source: tokens/v1/tokens_v1.proto
+
+package v1
+
+import (
+	context "context"
+	grpc "google.golang.org/grpc"
+	codes "google.golang.org/grpc/codes"
+	status "google.golang.org/grpc/status"
+	emptypb "google.golang.org/protobuf/types/known/emptypb"
+)
+
+// This is a compile-time assertion to ensure that this generated file
+// is compatible with the grpc package it is being compiled against.
+// Requires gRPC-Go v1.64.0 or later.
+const _ = grpc.SupportPackageIsVersion9
+
+const (
+	TokensService_CreateToken_FullMethodName          = "/tokens.v1.TokensService/CreateToken"
+	TokensService_UpdateToken_FullMethodName          = "/tokens.v1.TokensService/UpdateToken"
+	TokensService_ForceTokenExpiration_FullMethodName = "/tokens.v1.TokensService/ForceTokenExpiration"
+	TokensService_RegenerateToken_FullMethodName      = "/tokens.v1.TokensService/RegenerateToken"
+	TokensService_GetToken_FullMethodName             = "/tokens.v1.TokensService/GetToken"
+	TokensService_ListTokens_FullMethodName           = "/tokens.v1.TokensService/ListTokens"
+	TokensService_ListPermissions_FullMethodName      = "/tokens.v1.TokensService/ListPermissions"
+)
+
+// TokensServiceClient is the client API for TokensService service.
+//
+// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
+//
+// Tokens should be used for programmatic access
+// For example CLI or terraform modules
+type TokensServiceClient interface {
+	// Create a new token
+	CreateToken(ctx context.Context, in *CreateTokenRequest, opts ...grpc.CallOption) (*CreateTokenResponse, error)
+	// Update an existing token
+	UpdateToken(ctx context.Context, in *UpdateTokenRequest, opts ...grpc.CallOption) (*UpdateTokenResponse, error)
+	// Expire an existing token
+	ForceTokenExpiration(ctx context.Context, in *ForceTokenExpirationRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
+	// Create a new token with the same UUID
+	RegenerateToken(ctx context.Context, in *RegenerateTokenRequest, opts ...grpc.CallOption) (*RegenerateTokenResponse, error)
+	// Get an existing token
+	GetToken(ctx context.Context, in *GetTokenRequest, opts ...grpc.CallOption) (*GetTokenResponse, error)
+	// List all existing tokens
+	ListTokens(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ListTokensResponse], error)
+	// List all available permissions
+	ListPermissions(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ListPermissionsResponse], error)
+}
+
+type tokensServiceClient struct {
+	cc grpc.ClientConnInterface
+}
+
+func NewTokensServiceClient(cc grpc.ClientConnInterface) TokensServiceClient {
+	return &tokensServiceClient{cc}
+}
+
+func (c *tokensServiceClient) CreateToken(ctx context.Context, in *CreateTokenRequest, opts ...grpc.CallOption) (*CreateTokenResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(CreateTokenResponse)
+	err := c.cc.Invoke(ctx, TokensService_CreateToken_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *tokensServiceClient) UpdateToken(ctx context.Context, in *UpdateTokenRequest, opts ...grpc.CallOption) (*UpdateTokenResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(UpdateTokenResponse)
+	err := c.cc.Invoke(ctx, TokensService_UpdateToken_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *tokensServiceClient) ForceTokenExpiration(ctx context.Context, in *ForceTokenExpirationRequest, opts ...grpc.CallOption) (*emptypb.Empty, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(emptypb.Empty)
+	err := c.cc.Invoke(ctx, TokensService_ForceTokenExpiration_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *tokensServiceClient) RegenerateToken(ctx context.Context, in *RegenerateTokenRequest, opts ...grpc.CallOption) (*RegenerateTokenResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(RegenerateTokenResponse)
+	err := c.cc.Invoke(ctx, TokensService_RegenerateToken_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *tokensServiceClient) GetToken(ctx context.Context, in *GetTokenRequest, opts ...grpc.CallOption) (*GetTokenResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(GetTokenResponse)
+	err := c.cc.Invoke(ctx, TokensService_GetToken_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *tokensServiceClient) ListTokens(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ListTokensResponse], error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	stream, err := c.cc.NewStream(ctx, &TokensService_ServiceDesc.Streams[0], TokensService_ListTokens_FullMethodName, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	x := &grpc.GenericClientStream[emptypb.Empty, ListTokensResponse]{ClientStream: stream}
+	if err := x.ClientStream.SendMsg(in); err != nil {
+		return nil, err
+	}
+	if err := x.ClientStream.CloseSend(); err != nil {
+		return nil, err
+	}
+	return x, nil
+}
+
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type TokensService_ListTokensClient = grpc.ServerStreamingClient[ListTokensResponse]
+
+func (c *tokensServiceClient) ListPermissions(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ListPermissionsResponse], error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	stream, err := c.cc.NewStream(ctx, &TokensService_ServiceDesc.Streams[1], TokensService_ListPermissions_FullMethodName, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	x := &grpc.GenericClientStream[emptypb.Empty, ListPermissionsResponse]{ClientStream: stream}
+	if err := x.ClientStream.SendMsg(in); err != nil {
+		return nil, err
+	}
+	if err := x.ClientStream.CloseSend(); err != nil {
+		return nil, err
+	}
+	return x, nil
+}
+
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type TokensService_ListPermissionsClient = grpc.ServerStreamingClient[ListPermissionsResponse]
+
+// TokensServiceServer is the server API for TokensService service.
+// All implementations should embed UnimplementedTokensServiceServer
+// for forward compatibility.
+//
+// Tokens should be used for programmatic access
+// For example CLI or terraform modules
+type TokensServiceServer interface {
+	// Create a new token
+	CreateToken(context.Context, *CreateTokenRequest) (*CreateTokenResponse, error)
+	// Update an existing token
+	UpdateToken(context.Context, *UpdateTokenRequest) (*UpdateTokenResponse, error)
+	// Expire an existing token
+	ForceTokenExpiration(context.Context, *ForceTokenExpirationRequest) (*emptypb.Empty, error)
+	// Create a new token with the same UUID
+	RegenerateToken(context.Context, *RegenerateTokenRequest) (*RegenerateTokenResponse, error)
+	// Get an existing token
+	GetToken(context.Context, *GetTokenRequest) (*GetTokenResponse, error)
+	// List all existing tokens
+	ListTokens(*emptypb.Empty, grpc.ServerStreamingServer[ListTokensResponse]) error
+	// List all available permissions
+	ListPermissions(*emptypb.Empty, grpc.ServerStreamingServer[ListPermissionsResponse]) error
+}
+
+// UnimplementedTokensServiceServer should be embedded to have
+// forward compatible implementations.
+//
+// NOTE: this should be embedded by value instead of pointer to avoid a nil
+// pointer dereference when methods are called.
+type UnimplementedTokensServiceServer struct{}
+
+func (UnimplementedTokensServiceServer) CreateToken(context.Context, *CreateTokenRequest) (*CreateTokenResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method CreateToken not implemented")
+}
+func (UnimplementedTokensServiceServer) UpdateToken(context.Context, *UpdateTokenRequest) (*UpdateTokenResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method UpdateToken not implemented")
+}
+func (UnimplementedTokensServiceServer) ForceTokenExpiration(context.Context, *ForceTokenExpirationRequest) (*emptypb.Empty, error) {
+	return nil, status.Error(codes.Unimplemented, "method ForceTokenExpiration not implemented")
+}
+func (UnimplementedTokensServiceServer) RegenerateToken(context.Context, *RegenerateTokenRequest) (*RegenerateTokenResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method RegenerateToken not implemented")
+}
+func (UnimplementedTokensServiceServer) GetToken(context.Context, *GetTokenRequest) (*GetTokenResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method GetToken not implemented")
+}
+func (UnimplementedTokensServiceServer) ListTokens(*emptypb.Empty, grpc.ServerStreamingServer[ListTokensResponse]) error {
+	return status.Error(codes.Unimplemented, "method ListTokens not implemented")
+}
+func (UnimplementedTokensServiceServer) ListPermissions(*emptypb.Empty, grpc.ServerStreamingServer[ListPermissionsResponse]) error {
+	return status.Error(codes.Unimplemented, "method ListPermissions not implemented")
+}
+func (UnimplementedTokensServiceServer) testEmbeddedByValue() {}
+
+// UnsafeTokensServiceServer may be embedded to opt out of forward compatibility for this service.
+// Use of this interface is not recommended, as added methods to TokensServiceServer will
+// result in compilation errors.
+type UnsafeTokensServiceServer interface {
+	mustEmbedUnimplementedTokensServiceServer()
+}
+
+func RegisterTokensServiceServer(s grpc.ServiceRegistrar, srv TokensServiceServer) {
+	// If the following call panics, it indicates UnimplementedTokensServiceServer was
+	// embedded by pointer and is nil.  This will cause panics if an
+	// unimplemented method is ever invoked, so we test this at initialization
+	// time to prevent it from happening at runtime later due to I/O.
+	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
+		t.testEmbeddedByValue()
+	}
+	s.RegisterService(&TokensService_ServiceDesc, srv)
+}
+
+func _TokensService_CreateToken_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(CreateTokenRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(TokensServiceServer).CreateToken(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: TokensService_CreateToken_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(TokensServiceServer).CreateToken(ctx, req.(*CreateTokenRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _TokensService_UpdateToken_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(UpdateTokenRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(TokensServiceServer).UpdateToken(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: TokensService_UpdateToken_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(TokensServiceServer).UpdateToken(ctx, req.(*UpdateTokenRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _TokensService_ForceTokenExpiration_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ForceTokenExpirationRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(TokensServiceServer).ForceTokenExpiration(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: TokensService_ForceTokenExpiration_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(TokensServiceServer).ForceTokenExpiration(ctx, req.(*ForceTokenExpirationRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _TokensService_RegenerateToken_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(RegenerateTokenRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(TokensServiceServer).RegenerateToken(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: TokensService_RegenerateToken_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(TokensServiceServer).RegenerateToken(ctx, req.(*RegenerateTokenRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _TokensService_GetToken_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(GetTokenRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(TokensServiceServer).GetToken(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: TokensService_GetToken_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(TokensServiceServer).GetToken(ctx, req.(*GetTokenRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _TokensService_ListTokens_Handler(srv interface{}, stream grpc.ServerStream) error {
+	m := new(emptypb.Empty)
+	if err := stream.RecvMsg(m); err != nil {
+		return err
+	}
+	return srv.(TokensServiceServer).ListTokens(m, &grpc.GenericServerStream[emptypb.Empty, ListTokensResponse]{ServerStream: stream})
+}
+
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type TokensService_ListTokensServer = grpc.ServerStreamingServer[ListTokensResponse]
+
+func _TokensService_ListPermissions_Handler(srv interface{}, stream grpc.ServerStream) error {
+	m := new(emptypb.Empty)
+	if err := stream.RecvMsg(m); err != nil {
+		return err
+	}
+	return srv.(TokensServiceServer).ListPermissions(m, &grpc.GenericServerStream[emptypb.Empty, ListPermissionsResponse]{ServerStream: stream})
+}
+
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type TokensService_ListPermissionsServer = grpc.ServerStreamingServer[ListPermissionsResponse]
+
+// TokensService_ServiceDesc is the grpc.ServiceDesc for TokensService service.
+// It's only intended for direct use with grpc.RegisterService,
+// and not to be introspected or modified (even as a copy)
+var TokensService_ServiceDesc = grpc.ServiceDesc{
+	ServiceName: "tokens.v1.TokensService",
+	HandlerType: (*TokensServiceServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "CreateToken",
+			Handler:    _TokensService_CreateToken_Handler,
+		},
+		{
+			MethodName: "UpdateToken",
+			Handler:    _TokensService_UpdateToken_Handler,
+		},
+		{
+			MethodName: "ForceTokenExpiration",
+			Handler:    _TokensService_ForceTokenExpiration_Handler,
+		},
+		{
+			MethodName: "RegenerateToken",
+			Handler:    _TokensService_RegenerateToken_Handler,
+		},
+		{
+			MethodName: "GetToken",
+			Handler:    _TokensService_GetToken_Handler,
+		},
+	},
+	Streams: []grpc.StreamDesc{
+		{
+			StreamName:    "ListTokens",
+			Handler:       _TokensService_ListTokens_Handler,
+			ServerStreams: true,
+		},
+		{
+			StreamName:    "ListPermissions",
+			Handler:       _TokensService_ListPermissions_Handler,
+			ServerStreams: true,
+		},
+	},
+	Metadata: "tokens/v1/tokens_v1.proto",
+}
+
+const (
+	PublicTokensService_AuthenticateWithToken_FullMethodName = "/tokens.v1.PublicTokensService/AuthenticateWithToken"
+)
+
+// PublicTokensServiceClient is the client API for PublicTokensService service.
+//
+// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
+//
+// An endpoint to authenticate with a token should be here
+type PublicTokensServiceClient interface {
+	// Recieve a JWT access token
+	// DO NOT implement it in the web app!
+	AuthenticateWithToken(ctx context.Context, in *AuthenticateWithTokenRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
+}
+
+type publicTokensServiceClient struct {
+	cc grpc.ClientConnInterface
+}
+
+func NewPublicTokensServiceClient(cc grpc.ClientConnInterface) PublicTokensServiceClient {
+	return &publicTokensServiceClient{cc}
+}
+
+func (c *publicTokensServiceClient) AuthenticateWithToken(ctx context.Context, in *AuthenticateWithTokenRequest, opts ...grpc.CallOption) (*emptypb.Empty, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(emptypb.Empty)
+	err := c.cc.Invoke(ctx, PublicTokensService_AuthenticateWithToken_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// PublicTokensServiceServer is the server API for PublicTokensService service.
+// All implementations should embed UnimplementedPublicTokensServiceServer
+// for forward compatibility.
+//
+// An endpoint to authenticate with a token should be here
+type PublicTokensServiceServer interface {
+	// Recieve a JWT access token
+	// DO NOT implement it in the web app!
+	AuthenticateWithToken(context.Context, *AuthenticateWithTokenRequest) (*emptypb.Empty, error)
+}
+
+// UnimplementedPublicTokensServiceServer should be embedded to have
+// forward compatible implementations.
+//
+// NOTE: this should be embedded by value instead of pointer to avoid a nil
+// pointer dereference when methods are called.
+type UnimplementedPublicTokensServiceServer struct{}
+
+func (UnimplementedPublicTokensServiceServer) AuthenticateWithToken(context.Context, *AuthenticateWithTokenRequest) (*emptypb.Empty, error) {
+	return nil, status.Error(codes.Unimplemented, "method AuthenticateWithToken not implemented")
+}
+func (UnimplementedPublicTokensServiceServer) testEmbeddedByValue() {}
+
+// UnsafePublicTokensServiceServer may be embedded to opt out of forward compatibility for this service.
+// Use of this interface is not recommended, as added methods to PublicTokensServiceServer will
+// result in compilation errors.
+type UnsafePublicTokensServiceServer interface {
+	mustEmbedUnimplementedPublicTokensServiceServer()
+}
+
+func RegisterPublicTokensServiceServer(s grpc.ServiceRegistrar, srv PublicTokensServiceServer) {
+	// If the following call panics, it indicates UnimplementedPublicTokensServiceServer was
+	// embedded by pointer and is nil.  This will cause panics if an
+	// unimplemented method is ever invoked, so we test this at initialization
+	// time to prevent it from happening at runtime later due to I/O.
+	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
+		t.testEmbeddedByValue()
+	}
+	s.RegisterService(&PublicTokensService_ServiceDesc, srv)
+}
+
+func _PublicTokensService_AuthenticateWithToken_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(AuthenticateWithTokenRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(PublicTokensServiceServer).AuthenticateWithToken(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: PublicTokensService_AuthenticateWithToken_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(PublicTokensServiceServer).AuthenticateWithToken(ctx, req.(*AuthenticateWithTokenRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+// PublicTokensService_ServiceDesc is the grpc.ServiceDesc for PublicTokensService service.
+// It's only intended for direct use with grpc.RegisterService,
+// and not to be introspected or modified (even as a copy)
+var PublicTokensService_ServiceDesc = grpc.ServiceDesc{
+	ServiceName: "tokens.v1.PublicTokensService",
+	HandlerType: (*PublicTokensServiceServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "AuthenticateWithToken",
+			Handler:    _PublicTokensService_AuthenticateWithToken_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "tokens/v1/tokens_v1.proto",
+}
Author	SHA1	Message	Date
devops-bot	0501245694	Update protobuf definitions: 0f8ccde2 By allanger Commit link: `0f8ccde25c` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/93	2026-05-26 07:23:49 +00:00
devops-bot	4b27db42e2	Update protobuf definitions: 951d2802 By allanger Commit link: `951d2802de` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/79	2026-05-18 17:51:30 +00:00
devops-bot	22f1b32dfa	Update protobuf definitions: dfea0e67 By allanger Commit link: `dfea0e6782` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/78	2026-05-17 20:08:45 +00:00
Kinda Bot	70512b4d24	Update module google.golang.org/grpc to v1.81.0	2026-05-15 13:23:01 +00:00
devops-bot	2bb55ac0fb	Update protobuf definitions: 5121916c By allanger Commit link: `5121916c38` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/77	2026-05-15 13:21:54 +00:00
devops-bot	5041195797	Update protobuf definitions: 7d11a972 By allanger Commit link: `7d11a972f3` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/76	2026-05-15 08:37:21 +00:00
devops-bot	48bddcf5c6	Update protobuf definitions: b8349e39 By allanger Commit link: `b8349e3962` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/75	2026-05-14 17:39:33 +00:00
devops-bot	9c02001a83	Update protobuf definitions: 1925e0de By allanger Commit link: `1925e0de3f` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/73	2026-05-14 15:22:54 +00:00
devops-bot	f577d4d9c7	Update protobuf definitions: f2464648 By allanger Commit link: `f2464648e1` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/72	2026-05-14 11:51:32 +00:00
devops-bot	78ac0ceb90	Update protobuf definitions: 14c078b6 By allanger Commit link: `14c078b64f` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/71	2026-05-14 11:45:07 +00:00
devops-bot	0a43a3e712	Update protobuf definitions: 8a346ccc By allanger Commit link: `8a346cccb7` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/70	2026-05-14 11:42:08 +00:00
devops-bot	3ce39b865e	Update protobuf definitions: 6db0e356 By allanger Commit link: `6db0e356f8` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/69	2026-05-14 09:56:22 +00:00
devops-bot	600a2eb804	Update protobuf definitions: 53c5c443 By allanger Commit link: `53c5c44307` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/68	2026-05-14 09:12:25 +00:00
devops-bot	0f4959475d	Update protobuf definitions: dbd64234 By allanger Commit link: `dbd6423439` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/67	2026-05-11 09:46:40 +00:00
devops-bot	f2ffc52321	Update protobuf definitions: 52f43e57 By allanger Commit link: `52f43e57ad` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/66	2026-05-10 20:11:03 +00:00
devops-bot	d06c827862	Update protobuf definitions: 92ae9a7a By allanger Commit link: `92ae9a7a1b` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/64	2026-05-10 17:03:41 +00:00
devops-bot	fc9f6fe537	Update protobuf definitions: 2431d438 By allanger Commit link: `2431d438e5` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/63	2026-05-10 16:56:41 +00:00
devops-bot	c676c47095	Update protobuf definitions: d88ceea9 By allanger Commit link: `d88ceea9ea` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/62	2026-05-10 16:42:58 +00:00
devops-bot	bf7467c36f	Update protobuf definitions: 50a27971 By allanger Commit link: `50a2797157` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/60	2026-05-09 19:22:30 +00:00
devops-bot	9cd7ea0b99	Update protobuf definitions: 9a404e5f By allanger Commit link: `9a404e5f09` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/59	2026-05-09 13:26:27 +00:00
devops-bot	b9850db6fe	Update protobuf definitions: 2b8987ca By allanger Commit link: `2b8987cab4` Pipeline link: https://ci.badhouseplants.net/repos/34/pipeline/58	2026-05-08 19:17:38 +00:00