// SecretsService -- TARS KMS-fronted signing surface.
//
// Milestone A only needs Sign / Verify for the session JWT (purpose
// JWKS_SIGNING). PutSecret / GetSecret / RotateResourceDek / EraseSecret
// and the KEK-rotation RPCs (RotatePurposeKek / RotateMasterKek) land
// alongside this proto for shape parity with IA, but only Sign and
// Verify are required for `ia login` end-to-end. The day-one shortcut
// is a static EC P-256 key configured via env, replacing the multi-tier
// envelope flow until milestone C.
//
// All RPCs here are internal-only -- services consume secrets-svc over
// the mTLS-protected internal subdomain, not the public facade.
//
// Plan reference: A2 in check-ia-and-plan-optimized-cook.md.

// Code generated by protoc-gen-go. DO NOT EDIT.
// versions:
// 	protoc-gen-go v1.36.10
// 	protoc        (unknown)
// source: tars/kms/v1/secrets_svc.proto

package kmsv1

import (
	_ "github.com/tetrateio/agentrouter-go/genapi/api/tars/auth/v1"
	_ "github.com/tetrateio/agentrouter-go/genapi/api/tars/cli/v1"
	_ "github.com/tetrateio/agentrouter-go/genapi/api/tars/docs/v1"
	_ "google.golang.org/genproto/googleapis/api/annotations"
	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
	timestamppb "google.golang.org/protobuf/types/known/timestamppb"
	reflect "reflect"
	sync "sync"
	unsafe "unsafe"
)

const (
	// Verify that this generated code is sufficiently up-to-date.
	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
	// Verify that runtime/protoimpl is sufficiently up-to-date.
	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
)

// Purpose enumerates the closed set of purpose-scoped KEKs.
//
// A purpose-KEK wraps every DEK created for that purpose. Adding a
// purpose is a versioned change; removal is breaking.
type Purpose int32

const (
	Purpose_PURPOSE_UNSPECIFIED Purpose = 0
	// Audit log signing.
	Purpose_PURPOSE_AUDIT_SIGNING Purpose = 1
	// BYOK material wrapping.
	Purpose_PURPOSE_BYOK Purpose = 2
	// Session JWT signing for identity-svc.
	Purpose_PURPOSE_JWKS_SIGNING Purpose = 3
	// Outbound webhook secret wrapping.
	Purpose_PURPOSE_WEBHOOK_SECRET Purpose = 4
	// Data-plane service-account JWT signing.
	Purpose_PURPOSE_DATAPLANE_SA Purpose = 5
)

// Enum value maps for Purpose.
var (
	Purpose_name = map[int32]string{
		0: "PURPOSE_UNSPECIFIED",
		1: "PURPOSE_AUDIT_SIGNING",
		2: "PURPOSE_BYOK",
		3: "PURPOSE_JWKS_SIGNING",
		4: "PURPOSE_WEBHOOK_SECRET",
		5: "PURPOSE_DATAPLANE_SA",
	}
	Purpose_value = map[string]int32{
		"PURPOSE_UNSPECIFIED":    0,
		"PURPOSE_AUDIT_SIGNING":  1,
		"PURPOSE_BYOK":           2,
		"PURPOSE_JWKS_SIGNING":   3,
		"PURPOSE_WEBHOOK_SECRET": 4,
		"PURPOSE_DATAPLANE_SA":   5,
	}
)

func (x Purpose) Enum() *Purpose {
	p := new(Purpose)
	*p = x
	return p
}

func (x Purpose) String() string {
	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
}

func (Purpose) Descriptor() protoreflect.EnumDescriptor {
	return file_tars_kms_v1_secrets_svc_proto_enumTypes[0].Descriptor()
}

func (Purpose) Type() protoreflect.EnumType {
	return &file_tars_kms_v1_secrets_svc_proto_enumTypes[0]
}

func (x Purpose) Number() protoreflect.EnumNumber {
	return protoreflect.EnumNumber(x)
}

// Deprecated: Use Purpose.Descriptor instead.
func (Purpose) EnumDescriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{0}
}

// SecretRef is the stored handle returned by PutSecret. Service callers
// persist this in their own tables.
type SecretRef struct {
	state protoimpl.MessageState `protogen:"open.v1"`
	// Resource name secret_<ulid>. Server-assigned; immutable.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Purpose this secret was wrapped under.
	Purpose Purpose `protobuf:"varint,2,opt,name=purpose,proto3,enum=tars.kms.v1.Purpose" json:"purpose,omitempty"`
	// Active purpose-KEK version at wrap time.
	KekVersion int32 `protobuf:"varint,3,opt,name=kek_version,json=kekVersion,proto3" json:"kek_version,omitempty"`
	// Caller-supplied tag for audit-trail readability.
	Label         string                 `protobuf:"bytes,4,opt,name=label,proto3" json:"label,omitempty"`
	CreatedAt     *timestamppb.Timestamp `protobuf:"bytes,50,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	UpdatedAt     *timestamppb.Timestamp `protobuf:"bytes,51,opt,name=updated_at,json=updatedAt,proto3" json:"updated_at,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *SecretRef) Reset() {
	*x = SecretRef{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[0]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *SecretRef) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*SecretRef) ProtoMessage() {}

func (x *SecretRef) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[0]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use SecretRef.ProtoReflect.Descriptor instead.
func (*SecretRef) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{0}
}

func (x *SecretRef) GetId() string {
	if x != nil {
		return x.Id
	}
	return ""
}

func (x *SecretRef) GetPurpose() Purpose {
	if x != nil {
		return x.Purpose
	}
	return Purpose_PURPOSE_UNSPECIFIED
}

func (x *SecretRef) GetKekVersion() int32 {
	if x != nil {
		return x.KekVersion
	}
	return 0
}

func (x *SecretRef) GetLabel() string {
	if x != nil {
		return x.Label
	}
	return ""
}

func (x *SecretRef) GetCreatedAt() *timestamppb.Timestamp {
	if x != nil {
		return x.CreatedAt
	}
	return nil
}

func (x *SecretRef) GetUpdatedAt() *timestamppb.Timestamp {
	if x != nil {
		return x.UpdatedAt
	}
	return nil
}

type PutSecretRequest struct {
	state   protoimpl.MessageState `protogen:"open.v1"`
	Purpose Purpose                `protobuf:"varint,1,opt,name=purpose,proto3,enum=tars.kms.v1.Purpose" json:"purpose,omitempty"`
	// Plaintext bytes the store wraps under a fresh DEK. Wire type is
	// string so the proto-driven CLI generator can surface --plaintext as
	// a flag; callers passing truly binary material should base64-encode
	// outside the proto contract or use the byte-typed milestone-C
	// surface once operations.v1 lands.
	Plaintext     string `protobuf:"bytes,2,opt,name=plaintext,proto3" json:"plaintext,omitempty"`
	Label         string `protobuf:"bytes,3,opt,name=label,proto3" json:"label,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *PutSecretRequest) Reset() {
	*x = PutSecretRequest{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[1]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *PutSecretRequest) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*PutSecretRequest) ProtoMessage() {}

func (x *PutSecretRequest) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[1]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use PutSecretRequest.ProtoReflect.Descriptor instead.
func (*PutSecretRequest) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{1}
}

func (x *PutSecretRequest) GetPurpose() Purpose {
	if x != nil {
		return x.Purpose
	}
	return Purpose_PURPOSE_UNSPECIFIED
}

func (x *PutSecretRequest) GetPlaintext() string {
	if x != nil {
		return x.Plaintext
	}
	return ""
}

func (x *PutSecretRequest) GetLabel() string {
	if x != nil {
		return x.Label
	}
	return ""
}

type PutSecretResponse struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	Ref           *SecretRef             `protobuf:"bytes,1,opt,name=ref,proto3" json:"ref,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *PutSecretResponse) Reset() {
	*x = PutSecretResponse{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[2]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *PutSecretResponse) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*PutSecretResponse) ProtoMessage() {}

func (x *PutSecretResponse) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[2]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use PutSecretResponse.ProtoReflect.Descriptor instead.
func (*PutSecretResponse) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{2}
}

func (x *PutSecretResponse) GetRef() *SecretRef {
	if x != nil {
		return x.Ref
	}
	return nil
}

type GetSecretRequest struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *GetSecretRequest) Reset() {
	*x = GetSecretRequest{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[3]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *GetSecretRequest) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*GetSecretRequest) ProtoMessage() {}

func (x *GetSecretRequest) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[3]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use GetSecretRequest.ProtoReflect.Descriptor instead.
func (*GetSecretRequest) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{3}
}

func (x *GetSecretRequest) GetId() string {
	if x != nil {
		return x.Id
	}
	return ""
}

type GetSecretResponse struct {
	state protoimpl.MessageState `protogen:"open.v1"`
	Ref   *SecretRef             `protobuf:"bytes,1,opt,name=ref,proto3" json:"ref,omitempty"`
	// Plaintext bytes; see PutSecretRequest.plaintext for the binary
	// round-trip caveat.
	Plaintext     string `protobuf:"bytes,2,opt,name=plaintext,proto3" json:"plaintext,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *GetSecretResponse) Reset() {
	*x = GetSecretResponse{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[4]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *GetSecretResponse) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*GetSecretResponse) ProtoMessage() {}

func (x *GetSecretResponse) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[4]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use GetSecretResponse.ProtoReflect.Descriptor instead.
func (*GetSecretResponse) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{4}
}

func (x *GetSecretResponse) GetRef() *SecretRef {
	if x != nil {
		return x.Ref
	}
	return nil
}

func (x *GetSecretResponse) GetPlaintext() string {
	if x != nil {
		return x.Plaintext
	}
	return ""
}

type RotateResourceDekRequest struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *RotateResourceDekRequest) Reset() {
	*x = RotateResourceDekRequest{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[5]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *RotateResourceDekRequest) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*RotateResourceDekRequest) ProtoMessage() {}

func (x *RotateResourceDekRequest) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[5]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use RotateResourceDekRequest.ProtoReflect.Descriptor instead.
func (*RotateResourceDekRequest) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{5}
}

func (x *RotateResourceDekRequest) GetId() string {
	if x != nil {
		return x.Id
	}
	return ""
}

type RotateResourceDekResponse struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *RotateResourceDekResponse) Reset() {
	*x = RotateResourceDekResponse{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[6]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *RotateResourceDekResponse) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*RotateResourceDekResponse) ProtoMessage() {}

func (x *RotateResourceDekResponse) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[6]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use RotateResourceDekResponse.ProtoReflect.Descriptor instead.
func (*RotateResourceDekResponse) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{6}
}

type EraseSecretRequest struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *EraseSecretRequest) Reset() {
	*x = EraseSecretRequest{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[7]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *EraseSecretRequest) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*EraseSecretRequest) ProtoMessage() {}

func (x *EraseSecretRequest) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[7]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use EraseSecretRequest.ProtoReflect.Descriptor instead.
func (*EraseSecretRequest) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{7}
}

func (x *EraseSecretRequest) GetId() string {
	if x != nil {
		return x.Id
	}
	return ""
}

type EraseSecretResponse struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *EraseSecretResponse) Reset() {
	*x = EraseSecretResponse{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[8]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *EraseSecretResponse) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*EraseSecretResponse) ProtoMessage() {}

func (x *EraseSecretResponse) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[8]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use EraseSecretResponse.ProtoReflect.Descriptor instead.
func (*EraseSecretResponse) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{8}
}

type RotatePurposeKekRequest struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	Purpose       Purpose                `protobuf:"varint,1,opt,name=purpose,proto3,enum=tars.kms.v1.Purpose" json:"purpose,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *RotatePurposeKekRequest) Reset() {
	*x = RotatePurposeKekRequest{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[9]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *RotatePurposeKekRequest) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*RotatePurposeKekRequest) ProtoMessage() {}

func (x *RotatePurposeKekRequest) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[9]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use RotatePurposeKekRequest.ProtoReflect.Descriptor instead.
func (*RotatePurposeKekRequest) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{9}
}

func (x *RotatePurposeKekRequest) GetPurpose() Purpose {
	if x != nil {
		return x.Purpose
	}
	return Purpose_PURPOSE_UNSPECIFIED
}

type RotatePurposeKekResponse struct {
	state protoimpl.MessageState `protogen:"open.v1"`
	// Operation id (op_<ulid>) the caller polls via OperationsService.
	OperationId   string `protobuf:"bytes,1,opt,name=operation_id,json=operationId,proto3" json:"operation_id,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *RotatePurposeKekResponse) Reset() {
	*x = RotatePurposeKekResponse{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[10]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *RotatePurposeKekResponse) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*RotatePurposeKekResponse) ProtoMessage() {}

func (x *RotatePurposeKekResponse) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[10]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use RotatePurposeKekResponse.ProtoReflect.Descriptor instead.
func (*RotatePurposeKekResponse) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{10}
}

func (x *RotatePurposeKekResponse) GetOperationId() string {
	if x != nil {
		return x.OperationId
	}
	return ""
}

type RotateMasterKekRequest struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *RotateMasterKekRequest) Reset() {
	*x = RotateMasterKekRequest{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[11]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *RotateMasterKekRequest) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*RotateMasterKekRequest) ProtoMessage() {}

func (x *RotateMasterKekRequest) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[11]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use RotateMasterKekRequest.ProtoReflect.Descriptor instead.
func (*RotateMasterKekRequest) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{11}
}

type RotateMasterKekResponse struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	OperationId   string                 `protobuf:"bytes,1,opt,name=operation_id,json=operationId,proto3" json:"operation_id,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *RotateMasterKekResponse) Reset() {
	*x = RotateMasterKekResponse{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[12]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *RotateMasterKekResponse) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*RotateMasterKekResponse) ProtoMessage() {}

func (x *RotateMasterKekResponse) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[12]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use RotateMasterKekResponse.ProtoReflect.Descriptor instead.
func (*RotateMasterKekResponse) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{12}
}

func (x *RotateMasterKekResponse) GetOperationId() string {
	if x != nil {
		return x.OperationId
	}
	return ""
}

type SignRequest struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	Purpose       Purpose                `protobuf:"varint,1,opt,name=purpose,proto3,enum=tars.kms.v1.Purpose" json:"purpose,omitempty"`
	Payload       []byte                 `protobuf:"bytes,2,opt,name=payload,proto3" json:"payload,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *SignRequest) Reset() {
	*x = SignRequest{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[13]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *SignRequest) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*SignRequest) ProtoMessage() {}

func (x *SignRequest) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[13]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use SignRequest.ProtoReflect.Descriptor instead.
func (*SignRequest) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{13}
}

func (x *SignRequest) GetPurpose() Purpose {
	if x != nil {
		return x.Purpose
	}
	return Purpose_PURPOSE_UNSPECIFIED
}

func (x *SignRequest) GetPayload() []byte {
	if x != nil {
		return x.Payload
	}
	return nil
}

type SignResponse struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	Signature     []byte                 `protobuf:"bytes,1,opt,name=signature,proto3" json:"signature,omitempty"`
	KekVersion    int32                  `protobuf:"varint,2,opt,name=kek_version,json=kekVersion,proto3" json:"kek_version,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *SignResponse) Reset() {
	*x = SignResponse{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[14]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *SignResponse) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*SignResponse) ProtoMessage() {}

func (x *SignResponse) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[14]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use SignResponse.ProtoReflect.Descriptor instead.
func (*SignResponse) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{14}
}

func (x *SignResponse) GetSignature() []byte {
	if x != nil {
		return x.Signature
	}
	return nil
}

func (x *SignResponse) GetKekVersion() int32 {
	if x != nil {
		return x.KekVersion
	}
	return 0
}

type VerifyRequest struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	Purpose       Purpose                `protobuf:"varint,1,opt,name=purpose,proto3,enum=tars.kms.v1.Purpose" json:"purpose,omitempty"`
	Payload       []byte                 `protobuf:"bytes,2,opt,name=payload,proto3" json:"payload,omitempty"`
	Signature     []byte                 `protobuf:"bytes,3,opt,name=signature,proto3" json:"signature,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *VerifyRequest) Reset() {
	*x = VerifyRequest{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[15]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *VerifyRequest) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*VerifyRequest) ProtoMessage() {}

func (x *VerifyRequest) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[15]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use VerifyRequest.ProtoReflect.Descriptor instead.
func (*VerifyRequest) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{15}
}

func (x *VerifyRequest) GetPurpose() Purpose {
	if x != nil {
		return x.Purpose
	}
	return Purpose_PURPOSE_UNSPECIFIED
}

func (x *VerifyRequest) GetPayload() []byte {
	if x != nil {
		return x.Payload
	}
	return nil
}

func (x *VerifyRequest) GetSignature() []byte {
	if x != nil {
		return x.Signature
	}
	return nil
}

type VerifyResponse struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	Valid         bool                   `protobuf:"varint,1,opt,name=valid,proto3" json:"valid,omitempty"`
	KekVersion    int32                  `protobuf:"varint,2,opt,name=kek_version,json=kekVersion,proto3" json:"kek_version,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *VerifyResponse) Reset() {
	*x = VerifyResponse{}
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[16]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *VerifyResponse) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*VerifyResponse) ProtoMessage() {}

func (x *VerifyResponse) ProtoReflect() protoreflect.Message {
	mi := &file_tars_kms_v1_secrets_svc_proto_msgTypes[16]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use VerifyResponse.ProtoReflect.Descriptor instead.
func (*VerifyResponse) Descriptor() ([]byte, []int) {
	return file_tars_kms_v1_secrets_svc_proto_rawDescGZIP(), []int{16}
}

func (x *VerifyResponse) GetValid() bool {
	if x != nil {
		return x.Valid
	}
	return false
}

func (x *VerifyResponse) GetKekVersion() int32 {
	if x != nil {
		return x.KekVersion
	}
	return 0
}

var File_tars_kms_v1_secrets_svc_proto protoreflect.FileDescriptor

const file_tars_kms_v1_secrets_svc_proto_rawDesc = "" +
	"\n" +
	"\x1dtars/kms/v1/secrets_svc.proto\x12\vtars.kms.v1\x1a\x1cgoogle/api/annotations.proto\x1a\x1fgoogle/api/field_behavior.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x1ftars/auth/v1/auth_options.proto\x1a\x15tars/cli/v1/cli.proto\x1a\x17tars/docs/v1/docs.proto\"\x91\x02\n" +
	"\tSecretRef\x12\x13\n" +
	"\x02id\x18\x01 \x01(\tB\x03\xe0A\x03R\x02id\x123\n" +
	"\apurpose\x18\x02 \x01(\x0e2\x14.tars.kms.v1.PurposeB\x03\xe0A\x03R\apurpose\x12$\n" +
	"\vkek_version\x18\x03 \x01(\x05B\x03\xe0A\x03R\n" +
	"kekVersion\x12\x14\n" +
	"\x05label\x18\x04 \x01(\tR\x05label\x12>\n" +
	"\n" +
	"created_at\x182 \x01(\v2\x1a.google.protobuf.TimestampB\x03\xe0A\x03R\tcreatedAt\x12>\n" +
	"\n" +
	"updated_at\x183 \x01(\v2\x1a.google.protobuf.TimestampB\x03\xe0A\x03R\tupdatedAt\"\x80\x01\n" +
	"\x10PutSecretRequest\x123\n" +
	"\apurpose\x18\x01 \x01(\x0e2\x14.tars.kms.v1.PurposeB\x03\xe0A\x02R\apurpose\x12!\n" +
	"\tplaintext\x18\x02 \x01(\tB\x03\xe0A\x02R\tplaintext\x12\x14\n" +
	"\x05label\x18\x03 \x01(\tR\x05label\"=\n" +
	"\x11PutSecretResponse\x12(\n" +
	"\x03ref\x18\x01 \x01(\v2\x16.tars.kms.v1.SecretRefR\x03ref\"'\n" +
	"\x10GetSecretRequest\x12\x13\n" +
	"\x02id\x18\x01 \x01(\tB\x03\xe0A\x02R\x02id\"`\n" +
	"\x11GetSecretResponse\x12(\n" +
	"\x03ref\x18\x01 \x01(\v2\x16.tars.kms.v1.SecretRefR\x03ref\x12!\n" +
	"\tplaintext\x18\x02 \x01(\tB\x03\xe0A\x03R\tplaintext\"/\n" +
	"\x18RotateResourceDekRequest\x12\x13\n" +
	"\x02id\x18\x01 \x01(\tB\x03\xe0A\x02R\x02id\"\x1b\n" +
	"\x19RotateResourceDekResponse\")\n" +
	"\x12EraseSecretRequest\x12\x13\n" +
	"\x02id\x18\x01 \x01(\tB\x03\xe0A\x02R\x02id\"\x15\n" +
	"\x13EraseSecretResponse\"N\n" +
	"\x17RotatePurposeKekRequest\x123\n" +
	"\apurpose\x18\x01 \x01(\x0e2\x14.tars.kms.v1.PurposeB\x03\xe0A\x02R\apurpose\"B\n" +
	"\x18RotatePurposeKekResponse\x12&\n" +
	"\foperation_id\x18\x01 \x01(\tB\x03\xe0A\x03R\voperationId\"\x18\n" +
	"\x16RotateMasterKekRequest\"A\n" +
	"\x17RotateMasterKekResponse\x12&\n" +
	"\foperation_id\x18\x01 \x01(\tB\x03\xe0A\x03R\voperationId\"a\n" +
	"\vSignRequest\x123\n" +
	"\apurpose\x18\x01 \x01(\x0e2\x14.tars.kms.v1.PurposeB\x03\xe0A\x02R\apurpose\x12\x1d\n" +
	"\apayload\x18\x02 \x01(\fB\x03\xe0A\x02R\apayload\"W\n" +
	"\fSignResponse\x12!\n" +
	"\tsignature\x18\x01 \x01(\fB\x03\xe0A\x03R\tsignature\x12$\n" +
	"\vkek_version\x18\x02 \x01(\x05B\x03\xe0A\x03R\n" +
	"kekVersion\"\x86\x01\n" +
	"\rVerifyRequest\x123\n" +
	"\apurpose\x18\x01 \x01(\x0e2\x14.tars.kms.v1.PurposeB\x03\xe0A\x02R\apurpose\x12\x1d\n" +
	"\apayload\x18\x02 \x01(\fB\x03\xe0A\x02R\apayload\x12!\n" +
	"\tsignature\x18\x03 \x01(\fB\x03\xe0A\x02R\tsignature\"Q\n" +
	"\x0eVerifyResponse\x12\x19\n" +
	"\x05valid\x18\x01 \x01(\bB\x03\xe0A\x03R\x05valid\x12$\n" +
	"\vkek_version\x18\x02 \x01(\x05B\x03\xe0A\x03R\n" +
	"kekVersion*\x9f\x01\n" +
	"\aPurpose\x12\x17\n" +
	"\x13PURPOSE_UNSPECIFIED\x10\x00\x12\x19\n" +
	"\x15PURPOSE_AUDIT_SIGNING\x10\x01\x12\x10\n" +
	"\fPURPOSE_BYOK\x10\x02\x12\x18\n" +
	"\x14PURPOSE_JWKS_SIGNING\x10\x03\x12\x1a\n" +
	"\x16PURPOSE_WEBHOOK_SECRET\x10\x04\x12\x18\n" +
	"\x14PURPOSE_DATAPLANE_SA\x10\x052\xce\n" +
	"\n" +
	"\x0eSecretsService\x12\xa2\x01\n" +
	"\tPutSecret\x12\x1d.tars.kms.v1.PutSecretRequest\x1a\x1e.tars.kms.v1.PutSecretResponse\"V\x8a\xb5\x18\r\n" +
	"\x01\x02\x12\binternal\x92\xb5\x18\x13(\x01:\x03kms:\n" +
	"put-secret\xa2\xb5\x18\x10Put a KMS secret\x82\xd3\xe4\x93\x02\x14:\x01*\"\x0f/v1/kms/secrets\x12\xab\x01\n" +
	"\tGetSecret\x12\x1d.tars.kms.v1.GetSecretRequest\x1a\x1e.tars.kms.v1.GetSecretResponse\"_\x8a\xb5\x18\r\n" +
	"\x01\x02\x12\binternal\x92\xb5\x18\x17\x1a\x02id(\x01:\x03kms:\n" +
	"get-secret\xa2\xb5\x18\x10Get a KMS secret\x82\xd3\xe4\x93\x02\x16\x12\x14/v1/kms/secrets/{id}\x90\x02\x01\x12\xe9\x01\n" +
	"\x11RotateResourceDek\x12%.tars.kms.v1.RotateResourceDekRequest\x1a&.tars.kms.v1.RotateResourceDekResponse\"\x84\x01\x8a\xb5\x18\r\n" +
	"\x01\x02\x12\binternal\x92\xb5\x18\x17\x1a\x02id(\x01:\x03kms:\n" +
	"rotate-dek\xa2\xb5\x18*Rotate the resource DEK on a stored secret\x82\xd3\xe4\x93\x02$:\x01*\"\x1f/v1/kms/secrets/{id}/rotate-dek\x12\xb2\x01\n" +
	"\vEraseSecret\x12\x1f.tars.kms.v1.EraseSecretRequest\x1a .tars.kms.v1.EraseSecretResponse\"`\x8a\xb5\x18\r\n" +
	"\x01\x02\x12\binternal\x92\xb5\x18\x19\x1a\x02id(\x01:\x03kms:\ferase-secret\xa2\xb5\x18\x12Erase a KMS secret\x82\xd3\xe4\x93\x02\x16*\x14/v1/kms/secrets/{id}\x12\xd1\x01\n" +
	"\x10RotatePurposeKek\x12$.tars.kms.v1.RotatePurposeKekRequest\x1a%.tars.kms.v1.RotatePurposeKekResponse\"p\x8a\xb5\x18\r\n" +
	"\x01\x02\x12\binternal\x92\xb5\x18\x1b(\x01:\x03kms:\x12rotate-purpose-kek\xa2\xb5\x18\x16Rotate the purpose KEK\x82\xd3\xe4\x93\x02 :\x01*\"\x1b/v1/kms/purpose-keks/rotate\x12\xca\x01\n" +
	"\x0fRotateMasterKek\x12#.tars.kms.v1.RotateMasterKekRequest\x1a$.tars.kms.v1.RotateMasterKekResponse\"l\x8a\xb5\x18\r\n" +
	"\x01\x02\x12\binternal\x92\xb5\x18\x1a(\x01:\x03kms:\x11rotate-master-kek\xa2\xb5\x18\x15Rotate the master KEK\x82\xd3\xe4\x93\x02\x1e:\x01*\"\x19/v1/kms/master-kek/rotate\x12N\n" +
	"\x04Sign\x12\x18.tars.kms.v1.SignRequest\x1a\x19.tars.kms.v1.SignResponse\"\x11\x8a\xb5\x18\r\n" +
	"\x01\x02\x12\binternal\x12W\n" +
	"\x06Verify\x12\x1a.tars.kms.v1.VerifyRequest\x1a\x1b.tars.kms.v1.VerifyResponse\"\x14\x8a\xb5\x18\r\n" +
	"\x01\x02\x12\binternal\x90\x02\x01B\xa3\x01\n" +
	"\x0fcom.tars.kms.v1B\x0fSecretsSvcProtoP\x01Z1github.com/tetrateio/fraser/api/tars/kms/v1;kmsv1\xa2\x02\x03TKX\xaa\x02\vTars.Kms.V1\xca\x02\vTars\\Kms\\V1\xe2\x02\x17Tars\\Kms\\V1\\GPBMetadata\xea\x02\rTars::Kms::V1b\x06proto3"

var (
	file_tars_kms_v1_secrets_svc_proto_rawDescOnce sync.Once
	file_tars_kms_v1_secrets_svc_proto_rawDescData []byte
)

func file_tars_kms_v1_secrets_svc_proto_rawDescGZIP() []byte {
	file_tars_kms_v1_secrets_svc_proto_rawDescOnce.Do(func() {
		file_tars_kms_v1_secrets_svc_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_tars_kms_v1_secrets_svc_proto_rawDesc), len(file_tars_kms_v1_secrets_svc_proto_rawDesc)))
	})
	return file_tars_kms_v1_secrets_svc_proto_rawDescData
}

var file_tars_kms_v1_secrets_svc_proto_enumTypes = make([]protoimpl.EnumInfo, 1)
var file_tars_kms_v1_secrets_svc_proto_msgTypes = make([]protoimpl.MessageInfo, 17)
var file_tars_kms_v1_secrets_svc_proto_goTypes = []any{
	(Purpose)(0),                      // 0: tars.kms.v1.Purpose
	(*SecretRef)(nil),                 // 1: tars.kms.v1.SecretRef
	(*PutSecretRequest)(nil),          // 2: tars.kms.v1.PutSecretRequest
	(*PutSecretResponse)(nil),         // 3: tars.kms.v1.PutSecretResponse
	(*GetSecretRequest)(nil),          // 4: tars.kms.v1.GetSecretRequest
	(*GetSecretResponse)(nil),         // 5: tars.kms.v1.GetSecretResponse
	(*RotateResourceDekRequest)(nil),  // 6: tars.kms.v1.RotateResourceDekRequest
	(*RotateResourceDekResponse)(nil), // 7: tars.kms.v1.RotateResourceDekResponse
	(*EraseSecretRequest)(nil),        // 8: tars.kms.v1.EraseSecretRequest
	(*EraseSecretResponse)(nil),       // 9: tars.kms.v1.EraseSecretResponse
	(*RotatePurposeKekRequest)(nil),   // 10: tars.kms.v1.RotatePurposeKekRequest
	(*RotatePurposeKekResponse)(nil),  // 11: tars.kms.v1.RotatePurposeKekResponse
	(*RotateMasterKekRequest)(nil),    // 12: tars.kms.v1.RotateMasterKekRequest
	(*RotateMasterKekResponse)(nil),   // 13: tars.kms.v1.RotateMasterKekResponse
	(*SignRequest)(nil),               // 14: tars.kms.v1.SignRequest
	(*SignResponse)(nil),              // 15: tars.kms.v1.SignResponse
	(*VerifyRequest)(nil),             // 16: tars.kms.v1.VerifyRequest
	(*VerifyResponse)(nil),            // 17: tars.kms.v1.VerifyResponse
	(*timestamppb.Timestamp)(nil),     // 18: google.protobuf.Timestamp
}
var file_tars_kms_v1_secrets_svc_proto_depIdxs = []int32{
	0,  // 0: tars.kms.v1.SecretRef.purpose:type_name -> tars.kms.v1.Purpose
	18, // 1: tars.kms.v1.SecretRef.created_at:type_name -> google.protobuf.Timestamp
	18, // 2: tars.kms.v1.SecretRef.updated_at:type_name -> google.protobuf.Timestamp
	0,  // 3: tars.kms.v1.PutSecretRequest.purpose:type_name -> tars.kms.v1.Purpose
	1,  // 4: tars.kms.v1.PutSecretResponse.ref:type_name -> tars.kms.v1.SecretRef
	1,  // 5: tars.kms.v1.GetSecretResponse.ref:type_name -> tars.kms.v1.SecretRef
	0,  // 6: tars.kms.v1.RotatePurposeKekRequest.purpose:type_name -> tars.kms.v1.Purpose
	0,  // 7: tars.kms.v1.SignRequest.purpose:type_name -> tars.kms.v1.Purpose
	0,  // 8: tars.kms.v1.VerifyRequest.purpose:type_name -> tars.kms.v1.Purpose
	2,  // 9: tars.kms.v1.SecretsService.PutSecret:input_type -> tars.kms.v1.PutSecretRequest
	4,  // 10: tars.kms.v1.SecretsService.GetSecret:input_type -> tars.kms.v1.GetSecretRequest
	6,  // 11: tars.kms.v1.SecretsService.RotateResourceDek:input_type -> tars.kms.v1.RotateResourceDekRequest
	8,  // 12: tars.kms.v1.SecretsService.EraseSecret:input_type -> tars.kms.v1.EraseSecretRequest
	10, // 13: tars.kms.v1.SecretsService.RotatePurposeKek:input_type -> tars.kms.v1.RotatePurposeKekRequest
	12, // 14: tars.kms.v1.SecretsService.RotateMasterKek:input_type -> tars.kms.v1.RotateMasterKekRequest
	14, // 15: tars.kms.v1.SecretsService.Sign:input_type -> tars.kms.v1.SignRequest
	16, // 16: tars.kms.v1.SecretsService.Verify:input_type -> tars.kms.v1.VerifyRequest
	3,  // 17: tars.kms.v1.SecretsService.PutSecret:output_type -> tars.kms.v1.PutSecretResponse
	5,  // 18: tars.kms.v1.SecretsService.GetSecret:output_type -> tars.kms.v1.GetSecretResponse
	7,  // 19: tars.kms.v1.SecretsService.RotateResourceDek:output_type -> tars.kms.v1.RotateResourceDekResponse
	9,  // 20: tars.kms.v1.SecretsService.EraseSecret:output_type -> tars.kms.v1.EraseSecretResponse
	11, // 21: tars.kms.v1.SecretsService.RotatePurposeKek:output_type -> tars.kms.v1.RotatePurposeKekResponse
	13, // 22: tars.kms.v1.SecretsService.RotateMasterKek:output_type -> tars.kms.v1.RotateMasterKekResponse
	15, // 23: tars.kms.v1.SecretsService.Sign:output_type -> tars.kms.v1.SignResponse
	17, // 24: tars.kms.v1.SecretsService.Verify:output_type -> tars.kms.v1.VerifyResponse
	17, // [17:25] is the sub-list for method output_type
	9,  // [9:17] is the sub-list for method input_type
	9,  // [9:9] is the sub-list for extension type_name
	9,  // [9:9] is the sub-list for extension extendee
	0,  // [0:9] is the sub-list for field type_name
}

func init() { file_tars_kms_v1_secrets_svc_proto_init() }
func file_tars_kms_v1_secrets_svc_proto_init() {
	if File_tars_kms_v1_secrets_svc_proto != nil {
		return
	}
	type x struct{}
	out := protoimpl.TypeBuilder{
		File: protoimpl.DescBuilder{
			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
			RawDescriptor: unsafe.Slice(unsafe.StringData(file_tars_kms_v1_secrets_svc_proto_rawDesc), len(file_tars_kms_v1_secrets_svc_proto_rawDesc)),
			NumEnums:      1,
			NumMessages:   17,
			NumExtensions: 0,
			NumServices:   1,
		},
		GoTypes:           file_tars_kms_v1_secrets_svc_proto_goTypes,
		DependencyIndexes: file_tars_kms_v1_secrets_svc_proto_depIdxs,
		EnumInfos:         file_tars_kms_v1_secrets_svc_proto_enumTypes,
		MessageInfos:      file_tars_kms_v1_secrets_svc_proto_msgTypes,
	}.Build()
	File_tars_kms_v1_secrets_svc_proto = out.File
	file_tars_kms_v1_secrets_svc_proto_goTypes = nil
	file_tars_kms_v1_secrets_svc_proto_depIdxs = nil
}
