From 9592e691c5883268fcca515874875672caeb013b Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Tue, 15 Apr 2025 09:03:22 -0600
Subject: [PATCH 01/19] add protos and generate

---
 docs/grpc/index.html                          |  794 ++++++++
 .../registered_resources.swagger.json         |   46 +
 protocol/go/policy/objects.pb.go              |  350 +++-
 .../registered_resources.pb.go                | 1774 +++++++++++++++++
 service/policy/objects.proto                  |   22 +
 .../registered_resources.proto                |  225 +++
 6 files changed, 3133 insertions(+), 78 deletions(-)
 create mode 100644 docs/openapi/policy/registeredresources/registered_resources.swagger.json
 create mode 100644 protocol/go/policy/registeredresources/registered_resources.pb.go
 create mode 100644 service/policy/registeredresources/registered_resources.proto

diff --git a/docs/grpc/index.html b/docs/grpc/index.html
index 9905bf9dda..5f1342529e 100644
--- a/docs/grpc/index.html
+++ b/docs/grpc/index.html
@@ -253,6 +253,14 @@ <h2>Table of Contents</h2>
                   <a href="#policy.PublicKey"><span class="badge">M</span>PublicKey</a>
                 </li>
               
+                <li>
+                  <a href="#policy.RegisteredResource"><span class="badge">M</span>RegisteredResource</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.RegisteredResourceValue"><span class="badge">M</span>RegisteredResourceValue</a>
+                </li>
+              
                 <li>
                   <a href="#policy.ResourceMapping"><span class="badge">M</span>ResourceMapping</a>
                 </li>
@@ -1067,6 +1075,97 @@ <h2>Table of Contents</h2>
           </li>
         
           
+          <li>
+            <a href="#policy%2fregisteredresources%2fregistered_resources.proto">policy/registeredresources/registered_resources.proto</a>
+            <ul>
+              
+                <li>
+                  <a href="#policy.registeredresources.CreateRegisteredResourceRequest"><span class="badge">M</span>CreateRegisteredResourceRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.CreateRegisteredResourceResponse"><span class="badge">M</span>CreateRegisteredResourceResponse</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.CreateRegisteredResourceValueRequest"><span class="badge">M</span>CreateRegisteredResourceValueRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.CreateRegisteredResourceValueResponse"><span class="badge">M</span>CreateRegisteredResourceValueResponse</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.DeleteRegisteredResourceRequest"><span class="badge">M</span>DeleteRegisteredResourceRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.DeleteRegisteredResourceResponse"><span class="badge">M</span>DeleteRegisteredResourceResponse</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.DeleteRegisteredResourceValueRequest"><span class="badge">M</span>DeleteRegisteredResourceValueRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.DeleteRegisteredResourceValueResponse"><span class="badge">M</span>DeleteRegisteredResourceValueResponse</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.GetRegisteredResourceRequest"><span class="badge">M</span>GetRegisteredResourceRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.GetRegisteredResourceResponse"><span class="badge">M</span>GetRegisteredResourceResponse</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.GetRegisteredResourceValueRequest"><span class="badge">M</span>GetRegisteredResourceValueRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.GetRegisteredResourceValueResponse"><span class="badge">M</span>GetRegisteredResourceValueResponse</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.ListRegisteredResourceValuesRequest"><span class="badge">M</span>ListRegisteredResourceValuesRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.ListRegisteredResourceValuesResponse"><span class="badge">M</span>ListRegisteredResourceValuesResponse</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.ListRegisteredResourcesRequest"><span class="badge">M</span>ListRegisteredResourcesRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.ListRegisteredResourcesResponse"><span class="badge">M</span>ListRegisteredResourcesResponse</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.UpdateRegisteredResourceRequest"><span class="badge">M</span>UpdateRegisteredResourceRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.UpdateRegisteredResourceResponse"><span class="badge">M</span>UpdateRegisteredResourceResponse</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.UpdateRegisteredResourceValueRequest"><span class="badge">M</span>UpdateRegisteredResourceValueRequest</a>
+                </li>
+              
+                <li>
+                  <a href="#policy.registeredresources.UpdateRegisteredResourceValueResponse"><span class="badge">M</span>UpdateRegisteredResourceValueResponse</a>
+                </li>
+              
+              
+              
+              
+            </ul>
+          </li>
+        
+          
           <li>
             <a href="#policy%2fresourcemapping%2fresource_mapping.proto">policy/resourcemapping/resource_mapping.proto</a>
             <ul>
@@ -2117,6 +2216,96 @@ <h3 id="policy.PublicKey">PublicKey</h3>
 
         
       
+        <h3 id="policy.RegisteredResource">RegisteredResource</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>name</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>values</td>
+                  <td><a href="#policy.RegisteredResourceValue">RegisteredResourceValue</a></td>
+                  <td>repeated</td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>metadata</td>
+                  <td><a href="#common.Metadata">common.Metadata</a></td>
+                  <td></td>
+                  <td><p>Common metadata </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.RegisteredResourceValue">RegisteredResourceValue</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>value</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>resource</td>
+                  <td><a href="#policy.RegisteredResource">RegisteredResource</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>metadata</td>
+                  <td><a href="#common.Metadata">common.Metadata</a></td>
+                  <td></td>
+                  <td><p>Common metadata </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
         <h3 id="policy.ResourceMapping">ResourceMapping</h3>
         <p>Resource Mappings (aka Access Control Resource Encodings aka ACRE) are</p><p>structures supporting the mapping of Resources and Attribute Values</p>
 
@@ -8761,6 +8950,611 @@ <h4>Methods with idempotency_level option</h4>
         
     
       
+      <div class="file-heading">
+        <h2 id="policy/registeredresources/registered_resources.proto">policy/registeredresources/registered_resources.proto</h2><a href="#title">Top</a>
+      </div>
+      <p></p>
+
+      
+        <h3 id="policy.registeredresources.CreateRegisteredResourceRequest">CreateRegisteredResourceRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>name</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Required </p></td>
+                </tr>
+              
+                <tr>
+                  <td>values</td>
+                  <td><a href="#string">string</a></td>
+                  <td>repeated</td>
+                  <td><p>Optional 
+Registered Resource Values (when provided) must be alphanumeric strings, allowing hyphens and underscores but not as the first or last character.
+The stored value will be normalized to lower case. </p></td>
+                </tr>
+              
+                <tr>
+                  <td>metadata</td>
+                  <td><a href="#common.MetadataMutable">common.MetadataMutable</a></td>
+                  <td></td>
+                  <td><p>Optional
+Common metadata </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.CreateRegisteredResourceResponse">CreateRegisteredResourceResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>resource</td>
+                  <td><a href="#policy.RegisteredResource">policy.RegisteredResource</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.CreateRegisteredResourceValueRequest">CreateRegisteredResourceValueRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>resource_id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Required </p></td>
+                </tr>
+              
+                <tr>
+                  <td>value</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Required </p></td>
+                </tr>
+              
+                <tr>
+                  <td>metadata</td>
+                  <td><a href="#common.MetadataMutable">common.MetadataMutable</a></td>
+                  <td></td>
+                  <td><p>Optional
+Common metadata </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.CreateRegisteredResourceValueResponse">CreateRegisteredResourceValueResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>value</td>
+                  <td><a href="#policy.RegisteredResourceValue">policy.RegisteredResourceValue</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.DeleteRegisteredResourceRequest">DeleteRegisteredResourceRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Required </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.DeleteRegisteredResourceResponse">DeleteRegisteredResourceResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>resource</td>
+                  <td><a href="#policy.RegisteredResource">policy.RegisteredResource</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.DeleteRegisteredResourceValueRequest">DeleteRegisteredResourceValueRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Required </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.DeleteRegisteredResourceValueResponse">DeleteRegisteredResourceValueResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>value</td>
+                  <td><a href="#policy.RegisteredResourceValue">policy.RegisteredResourceValue</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.GetRegisteredResourceRequest">GetRegisteredResourceRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>resource_id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>fqn</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.GetRegisteredResourceResponse">GetRegisteredResourceResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>group</td>
+                  <td><a href="#policy.RegisteredResource">policy.RegisteredResource</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.GetRegisteredResourceValueRequest">GetRegisteredResourceValueRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>value_id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>fqn</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.GetRegisteredResourceValueResponse">GetRegisteredResourceValueResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>value</td>
+                  <td><a href="#policy.RegisteredResourceValue">policy.RegisteredResourceValue</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.ListRegisteredResourceValuesRequest">ListRegisteredResourceValuesRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>resource_id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Optional </p></td>
+                </tr>
+              
+                <tr>
+                  <td>pagination</td>
+                  <td><a href="#policy.PageRequest">policy.PageRequest</a></td>
+                  <td></td>
+                  <td><p>Optional </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.ListRegisteredResourceValuesResponse">ListRegisteredResourceValuesResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>values</td>
+                  <td><a href="#policy.RegisteredResourceValue">policy.RegisteredResourceValue</a></td>
+                  <td>repeated</td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>pagination</td>
+                  <td><a href="#policy.PageResponse">policy.PageResponse</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.ListRegisteredResourcesRequest">ListRegisteredResourcesRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>pagination</td>
+                  <td><a href="#policy.PageRequest">policy.PageRequest</a></td>
+                  <td></td>
+                  <td><p>Optional </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.ListRegisteredResourcesResponse">ListRegisteredResourcesResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>resources</td>
+                  <td><a href="#policy.RegisteredResource">policy.RegisteredResource</a></td>
+                  <td>repeated</td>
+                  <td><p> </p></td>
+                </tr>
+              
+                <tr>
+                  <td>pagination</td>
+                  <td><a href="#policy.PageResponse">policy.PageResponse</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.UpdateRegisteredResourceRequest">UpdateRegisteredResourceRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Required </p></td>
+                </tr>
+              
+                <tr>
+                  <td>name</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Optional </p></td>
+                </tr>
+              
+                <tr>
+                  <td>metadata</td>
+                  <td><a href="#common.MetadataMutable">common.MetadataMutable</a></td>
+                  <td></td>
+                  <td><p>Optional
+Common metadata </p></td>
+                </tr>
+              
+                <tr>
+                  <td>metadata_update_behavior</td>
+                  <td><a href="#common.MetadataUpdateEnum">common.MetadataUpdateEnum</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.UpdateRegisteredResourceResponse">UpdateRegisteredResourceResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>resource</td>
+                  <td><a href="#policy.RegisteredResource">policy.RegisteredResource</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.UpdateRegisteredResourceValueRequest">UpdateRegisteredResourceValueRequest</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>id</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Required </p></td>
+                </tr>
+              
+                <tr>
+                  <td>value</td>
+                  <td><a href="#string">string</a></td>
+                  <td></td>
+                  <td><p>Optional </p></td>
+                </tr>
+              
+                <tr>
+                  <td>metadata</td>
+                  <td><a href="#common.MetadataMutable">common.MetadataMutable</a></td>
+                  <td></td>
+                  <td><p>Optional
+Common metadata </p></td>
+                </tr>
+              
+                <tr>
+                  <td>metadata_update_behavior</td>
+                  <td><a href="#common.MetadataUpdateEnum">common.MetadataUpdateEnum</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+        <h3 id="policy.registeredresources.UpdateRegisteredResourceValueResponse">UpdateRegisteredResourceValueResponse</h3>
+        <p></p>
+
+        
+          <table class="field-table">
+            <thead>
+              <tr><td>Field</td><td>Type</td><td>Label</td><td>Description</td></tr>
+            </thead>
+            <tbody>
+              
+                <tr>
+                  <td>value</td>
+                  <td><a href="#policy.RegisteredResourceValue">policy.RegisteredResourceValue</a></td>
+                  <td></td>
+                  <td><p> </p></td>
+                </tr>
+              
+            </tbody>
+          </table>
+
+          
+
+        
+      
+
+      
+
+      
+
+      
+    
+      
       <div class="file-heading">
         <h2 id="policy/resourcemapping/resource_mapping.proto">policy/resourcemapping/resource_mapping.proto</h2><a href="#title">Top</a>
       </div>
diff --git a/docs/openapi/policy/registeredresources/registered_resources.swagger.json b/docs/openapi/policy/registeredresources/registered_resources.swagger.json
new file mode 100644
index 0000000000..6ea9b41e72
--- /dev/null
+++ b/docs/openapi/policy/registeredresources/registered_resources.swagger.json
@@ -0,0 +1,46 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "policy/registeredresources/registered_resources.proto",
+    "version": "version not set"
+  },
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "paths": {},
+  "definitions": {
+    "protobufAny": {
+      "type": "object",
+      "properties": {
+        "@type": {
+          "type": "string",
+          "description": "A URL/resource name that uniquely identifies the type of the serialized\nprotocol buffer message. This string must contain at least\none \"/\" character. The last segment of the URL's path must represent\nthe fully qualified name of the type (as in\n`path/google.protobuf.Duration`). The name should be in a canonical form\n(e.g., leading \".\" is not accepted).\n\nIn practice, teams usually precompile into the binary all types that they\nexpect it to use in the context of Any. However, for URLs which use the\nscheme `http`, `https`, or no scheme, one can optionally set up a type\nserver that maps type URLs to message definitions as follows:\n\n* If no scheme is provided, `https` is assumed.\n* An HTTP GET on the URL must yield a [google.protobuf.Type][]\n  value in binary format, or produce an error.\n* Applications are allowed to cache lookup results based on the\n  URL, or have them precompiled into a binary to avoid any\n  lookup. Therefore, binary compatibility needs to be preserved\n  on changes to types. (Use versioned type names to manage\n  breaking changes.)\n\nNote: this functionality is not currently available in the official\nprotobuf release, and it is not used for type URLs beginning with\ntype.googleapis.com. As of May 2023, there are no widely used type server\nimplementations and no plans to implement one.\n\nSchemes other than `http`, `https` (or the empty scheme) might be\nused with implementation specific semantics."
+        }
+      },
+      "additionalProperties": {},
+      "description": "`Any` contains an arbitrary serialized protocol buffer message along with a\nURL that describes the type of the serialized message.\n\nProtobuf library provides support to pack/unpack Any values in the form\nof utility functions or additional generated methods of the Any type.\n\nExample 1: Pack and unpack a message in C++.\n\n    Foo foo = ...;\n    Any any;\n    any.PackFrom(foo);\n    ...\n    if (any.UnpackTo(\u0026foo)) {\n      ...\n    }\n\nExample 2: Pack and unpack a message in Java.\n\n    Foo foo = ...;\n    Any any = Any.pack(foo);\n    ...\n    if (any.is(Foo.class)) {\n      foo = any.unpack(Foo.class);\n    }\n    // or ...\n    if (any.isSameTypeAs(Foo.getDefaultInstance())) {\n      foo = any.unpack(Foo.getDefaultInstance());\n    }\n\n Example 3: Pack and unpack a message in Python.\n\n    foo = Foo(...)\n    any = Any()\n    any.Pack(foo)\n    ...\n    if any.Is(Foo.DESCRIPTOR):\n      any.Unpack(foo)\n      ...\n\n Example 4: Pack and unpack a message in Go\n\n     foo := \u0026pb.Foo{...}\n     any, err := anypb.New(foo)\n     if err != nil {\n       ...\n     }\n     ...\n     foo := \u0026pb.Foo{}\n     if err := any.UnmarshalTo(foo); err != nil {\n       ...\n     }\n\nThe pack methods provided by protobuf library will by default use\n'type.googleapis.com/full.type.name' as the type URL and the unpack\nmethods only use the fully qualified type name after the last '/'\nin the type URL, for example \"foo.bar.com/x/y.z\" will yield type\nname \"y.z\".\n\nJSON\n====\nThe JSON representation of an `Any` value uses the regular\nrepresentation of the deserialized, embedded message, with an\nadditional field `@type` which contains the type URL. Example:\n\n    package google.profile;\n    message Person {\n      string first_name = 1;\n      string last_name = 2;\n    }\n\n    {\n      \"@type\": \"type.googleapis.com/google.profile.Person\",\n      \"firstName\": \u003cstring\u003e,\n      \"lastName\": \u003cstring\u003e\n    }\n\nIf the embedded message type is well-known and has a custom JSON\nrepresentation, that representation will be embedded adding a field\n`value` which holds the custom JSON in addition to the `@type`\nfield. Example (for message [google.protobuf.Duration][]):\n\n    {\n      \"@type\": \"type.googleapis.com/google.protobuf.Duration\",\n      \"value\": \"1.212s\"\n    }"
+    },
+    "rpcStatus": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        },
+        "details": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/protobufAny"
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/protocol/go/policy/objects.pb.go b/protocol/go/policy/objects.pb.go
index 3a40fb5675..cab3e94b11 100644
--- a/protocol/go/policy/objects.pb.go
+++ b/protocol/go/policy/objects.pb.go
@@ -1675,6 +1675,150 @@ func (*PublicKey_Remote) isPublicKey_PublicKey() {}
 
 func (*PublicKey_Cached) isPublicKey_PublicKey() {}
 
+type RegisteredResource struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Id     string                     `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+	Name   string                     `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
+	Values []*RegisteredResourceValue `protobuf:"bytes,3,rep,name=values,proto3" json:"values,omitempty"`
+	// Common metadata
+	Metadata *common.Metadata `protobuf:"bytes,100,opt,name=metadata,proto3" json:"metadata,omitempty"`
+}
+
+func (x *RegisteredResource) Reset() {
+	*x = RegisteredResource{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_objects_proto_msgTypes[17]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *RegisteredResource) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RegisteredResource) ProtoMessage() {}
+
+func (x *RegisteredResource) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_objects_proto_msgTypes[17]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RegisteredResource.ProtoReflect.Descriptor instead.
+func (*RegisteredResource) Descriptor() ([]byte, []int) {
+	return file_policy_objects_proto_rawDescGZIP(), []int{17}
+}
+
+func (x *RegisteredResource) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+func (x *RegisteredResource) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *RegisteredResource) GetValues() []*RegisteredResourceValue {
+	if x != nil {
+		return x.Values
+	}
+	return nil
+}
+
+func (x *RegisteredResource) GetMetadata() *common.Metadata {
+	if x != nil {
+		return x.Metadata
+	}
+	return nil
+}
+
+type RegisteredResourceValue struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Id       string              `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+	Value    string              `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
+	Resource *RegisteredResource `protobuf:"bytes,3,opt,name=resource,proto3" json:"resource,omitempty"`
+	// Common metadata
+	Metadata *common.Metadata `protobuf:"bytes,100,opt,name=metadata,proto3" json:"metadata,omitempty"`
+}
+
+func (x *RegisteredResourceValue) Reset() {
+	*x = RegisteredResourceValue{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_objects_proto_msgTypes[18]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *RegisteredResourceValue) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RegisteredResourceValue) ProtoMessage() {}
+
+func (x *RegisteredResourceValue) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_objects_proto_msgTypes[18]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RegisteredResourceValue.ProtoReflect.Descriptor instead.
+func (*RegisteredResourceValue) Descriptor() ([]byte, []int) {
+	return file_policy_objects_proto_rawDescGZIP(), []int{18}
+}
+
+func (x *RegisteredResourceValue) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+func (x *RegisteredResourceValue) GetValue() string {
+	if x != nil {
+		return x.Value
+	}
+	return ""
+}
+
+func (x *RegisteredResourceValue) GetResource() *RegisteredResource {
+	if x != nil {
+		return x.Resource
+	}
+	return nil
+}
+
+func (x *RegisteredResourceValue) GetMetadata() *common.Metadata {
+	if x != nil {
+		return x.Metadata
+	}
+	return nil
+}
+
 var File_policy_objects_proto protoreflect.FileDescriptor
 
 var file_policy_objects_proto_rawDesc = []byte{
@@ -1950,66 +2094,86 @@ var file_policy_objects_proto_rawDesc = []byte{
 	0x61, 0x73, 0x50, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x4b, 0x65, 0x79, 0x53, 0x65, 0x74, 0x48, 0x00,
 	0x52, 0x06, 0x63, 0x61, 0x63, 0x68, 0x65, 0x64, 0x42, 0x0c, 0x0a, 0x0a, 0x70, 0x75, 0x62, 0x6c,
 	0x69, 0x63, 0x5f, 0x6b, 0x65, 0x79, 0x4a, 0x04, 0x08, 0x02, 0x10, 0x03, 0x52, 0x05, 0x6c, 0x6f,
-	0x63, 0x61, 0x6c, 0x2a, 0xb3, 0x01, 0x0a, 0x15, 0x41, 0x74, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74,
-	0x65, 0x52, 0x75, 0x6c, 0x65, 0x54, 0x79, 0x70, 0x65, 0x45, 0x6e, 0x75, 0x6d, 0x12, 0x28, 0x0a,
-	0x24, 0x41, 0x54, 0x54, 0x52, 0x49, 0x42, 0x55, 0x54, 0x45, 0x5f, 0x52, 0x55, 0x4c, 0x45, 0x5f,
-	0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43,
-	0x49, 0x46, 0x49, 0x45, 0x44, 0x10, 0x00, 0x12, 0x23, 0x0a, 0x1f, 0x41, 0x54, 0x54, 0x52, 0x49,
+	0x63, 0x61, 0x6c, 0x22, 0x9f, 0x01, 0x0a, 0x12, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
+	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x0e, 0x0a, 0x02, 0x69, 0x64,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x02, 0x69, 0x64, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61,
+	0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x37,
+	0x0a, 0x06, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1f,
+	0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
+	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52,
+	0x06, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x2c, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64,
+	0x61, 0x74, 0x61, 0x18, 0x64, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x10, 0x2e, 0x63, 0x6f, 0x6d, 0x6d,
+	0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74,
+	0x61, 0x64, 0x61, 0x74, 0x61, 0x22, 0xa5, 0x01, 0x0a, 0x17, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74,
+	0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75,
+	0x65, 0x12, 0x0e, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x02, 0x69,
+	0x64, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x36, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x6f, 0x6c, 0x69,
+	0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12,
+	0x2c, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x64, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x10, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64,
+	0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x2a, 0xb3, 0x01,
+	0x0a, 0x15, 0x41, 0x74, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x65, 0x52, 0x75, 0x6c, 0x65, 0x54,
+	0x79, 0x70, 0x65, 0x45, 0x6e, 0x75, 0x6d, 0x12, 0x28, 0x0a, 0x24, 0x41, 0x54, 0x54, 0x52, 0x49,
 	0x42, 0x55, 0x54, 0x45, 0x5f, 0x52, 0x55, 0x4c, 0x45, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45,
-	0x4e, 0x55, 0x4d, 0x5f, 0x41, 0x4c, 0x4c, 0x5f, 0x4f, 0x46, 0x10, 0x01, 0x12, 0x23, 0x0a, 0x1f,
-	0x41, 0x54, 0x54, 0x52, 0x49, 0x42, 0x55, 0x54, 0x45, 0x5f, 0x52, 0x55, 0x4c, 0x45, 0x5f, 0x54,
-	0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x41, 0x4e, 0x59, 0x5f, 0x4f, 0x46, 0x10,
-	0x02, 0x12, 0x26, 0x0a, 0x22, 0x41, 0x54, 0x54, 0x52, 0x49, 0x42, 0x55, 0x54, 0x45, 0x5f, 0x52,
-	0x55, 0x4c, 0x45, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x48, 0x49,
-	0x45, 0x52, 0x41, 0x52, 0x43, 0x48, 0x59, 0x10, 0x03, 0x2a, 0xca, 0x01, 0x0a, 0x1a, 0x53, 0x75,
-	0x62, 0x6a, 0x65, 0x63, 0x74, 0x4d, 0x61, 0x70, 0x70, 0x69, 0x6e, 0x67, 0x4f, 0x70, 0x65, 0x72,
-	0x61, 0x74, 0x6f, 0x72, 0x45, 0x6e, 0x75, 0x6d, 0x12, 0x2d, 0x0a, 0x29, 0x53, 0x55, 0x42, 0x4a,
-	0x45, 0x43, 0x54, 0x5f, 0x4d, 0x41, 0x50, 0x50, 0x49, 0x4e, 0x47, 0x5f, 0x4f, 0x50, 0x45, 0x52,
-	0x41, 0x54, 0x4f, 0x52, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43,
-	0x49, 0x46, 0x49, 0x45, 0x44, 0x10, 0x00, 0x12, 0x24, 0x0a, 0x20, 0x53, 0x55, 0x42, 0x4a, 0x45,
-	0x43, 0x54, 0x5f, 0x4d, 0x41, 0x50, 0x50, 0x49, 0x4e, 0x47, 0x5f, 0x4f, 0x50, 0x45, 0x52, 0x41,
-	0x54, 0x4f, 0x52, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x49, 0x4e, 0x10, 0x01, 0x12, 0x28, 0x0a,
-	0x24, 0x53, 0x55, 0x42, 0x4a, 0x45, 0x43, 0x54, 0x5f, 0x4d, 0x41, 0x50, 0x50, 0x49, 0x4e, 0x47,
-	0x5f, 0x4f, 0x50, 0x45, 0x52, 0x41, 0x54, 0x4f, 0x52, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x4e,
-	0x4f, 0x54, 0x5f, 0x49, 0x4e, 0x10, 0x02, 0x12, 0x2d, 0x0a, 0x29, 0x53, 0x55, 0x42, 0x4a, 0x45,
+	0x4e, 0x55, 0x4d, 0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49, 0x46, 0x49, 0x45, 0x44, 0x10,
+	0x00, 0x12, 0x23, 0x0a, 0x1f, 0x41, 0x54, 0x54, 0x52, 0x49, 0x42, 0x55, 0x54, 0x45, 0x5f, 0x52,
+	0x55, 0x4c, 0x45, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x41, 0x4c,
+	0x4c, 0x5f, 0x4f, 0x46, 0x10, 0x01, 0x12, 0x23, 0x0a, 0x1f, 0x41, 0x54, 0x54, 0x52, 0x49, 0x42,
+	0x55, 0x54, 0x45, 0x5f, 0x52, 0x55, 0x4c, 0x45, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e,
+	0x55, 0x4d, 0x5f, 0x41, 0x4e, 0x59, 0x5f, 0x4f, 0x46, 0x10, 0x02, 0x12, 0x26, 0x0a, 0x22, 0x41,
+	0x54, 0x54, 0x52, 0x49, 0x42, 0x55, 0x54, 0x45, 0x5f, 0x52, 0x55, 0x4c, 0x45, 0x5f, 0x54, 0x59,
+	0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x48, 0x49, 0x45, 0x52, 0x41, 0x52, 0x43, 0x48,
+	0x59, 0x10, 0x03, 0x2a, 0xca, 0x01, 0x0a, 0x1a, 0x53, 0x75, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x4d,
+	0x61, 0x70, 0x70, 0x69, 0x6e, 0x67, 0x4f, 0x70, 0x65, 0x72, 0x61, 0x74, 0x6f, 0x72, 0x45, 0x6e,
+	0x75, 0x6d, 0x12, 0x2d, 0x0a, 0x29, 0x53, 0x55, 0x42, 0x4a, 0x45, 0x43, 0x54, 0x5f, 0x4d, 0x41,
+	0x50, 0x50, 0x49, 0x4e, 0x47, 0x5f, 0x4f, 0x50, 0x45, 0x52, 0x41, 0x54, 0x4f, 0x52, 0x5f, 0x45,
+	0x4e, 0x55, 0x4d, 0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49, 0x46, 0x49, 0x45, 0x44, 0x10,
+	0x00, 0x12, 0x24, 0x0a, 0x20, 0x53, 0x55, 0x42, 0x4a, 0x45, 0x43, 0x54, 0x5f, 0x4d, 0x41, 0x50,
+	0x50, 0x49, 0x4e, 0x47, 0x5f, 0x4f, 0x50, 0x45, 0x52, 0x41, 0x54, 0x4f, 0x52, 0x5f, 0x45, 0x4e,
+	0x55, 0x4d, 0x5f, 0x49, 0x4e, 0x10, 0x01, 0x12, 0x28, 0x0a, 0x24, 0x53, 0x55, 0x42, 0x4a, 0x45,
 	0x43, 0x54, 0x5f, 0x4d, 0x41, 0x50, 0x50, 0x49, 0x4e, 0x47, 0x5f, 0x4f, 0x50, 0x45, 0x52, 0x41,
-	0x54, 0x4f, 0x52, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x49, 0x4e, 0x5f, 0x43, 0x4f, 0x4e, 0x54,
-	0x41, 0x49, 0x4e, 0x53, 0x10, 0x03, 0x2a, 0x90, 0x01, 0x0a, 0x18, 0x43, 0x6f, 0x6e, 0x64, 0x69,
-	0x74, 0x69, 0x6f, 0x6e, 0x42, 0x6f, 0x6f, 0x6c, 0x65, 0x61, 0x6e, 0x54, 0x79, 0x70, 0x65, 0x45,
-	0x6e, 0x75, 0x6d, 0x12, 0x2b, 0x0a, 0x27, 0x43, 0x4f, 0x4e, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e,
-	0x5f, 0x42, 0x4f, 0x4f, 0x4c, 0x45, 0x41, 0x4e, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e,
-	0x55, 0x4d, 0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49, 0x46, 0x49, 0x45, 0x44, 0x10, 0x00,
-	0x12, 0x23, 0x0a, 0x1f, 0x43, 0x4f, 0x4e, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x42, 0x4f,
-	0x4f, 0x4c, 0x45, 0x41, 0x4e, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f,
-	0x41, 0x4e, 0x44, 0x10, 0x01, 0x12, 0x22, 0x0a, 0x1e, 0x43, 0x4f, 0x4e, 0x44, 0x49, 0x54, 0x49,
-	0x4f, 0x4e, 0x5f, 0x42, 0x4f, 0x4f, 0x4c, 0x45, 0x41, 0x4e, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f,
-	0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x4f, 0x52, 0x10, 0x02, 0x2a, 0x88, 0x02, 0x0a, 0x13, 0x4b, 0x61,
-	0x73, 0x50, 0x75, 0x62, 0x6c, 0x69, 0x63, 0x4b, 0x65, 0x79, 0x41, 0x6c, 0x67, 0x45, 0x6e, 0x75,
-	0x6d, 0x12, 0x27, 0x0a, 0x23, 0x4b, 0x41, 0x53, 0x5f, 0x50, 0x55, 0x42, 0x4c, 0x49, 0x43, 0x5f,
-	0x4b, 0x45, 0x59, 0x5f, 0x41, 0x4c, 0x47, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x55, 0x4e, 0x53,
-	0x50, 0x45, 0x43, 0x49, 0x46, 0x49, 0x45, 0x44, 0x10, 0x00, 0x12, 0x24, 0x0a, 0x20, 0x4b, 0x41,
+	0x54, 0x4f, 0x52, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x4e, 0x4f, 0x54, 0x5f, 0x49, 0x4e, 0x10,
+	0x02, 0x12, 0x2d, 0x0a, 0x29, 0x53, 0x55, 0x42, 0x4a, 0x45, 0x43, 0x54, 0x5f, 0x4d, 0x41, 0x50,
+	0x50, 0x49, 0x4e, 0x47, 0x5f, 0x4f, 0x50, 0x45, 0x52, 0x41, 0x54, 0x4f, 0x52, 0x5f, 0x45, 0x4e,
+	0x55, 0x4d, 0x5f, 0x49, 0x4e, 0x5f, 0x43, 0x4f, 0x4e, 0x54, 0x41, 0x49, 0x4e, 0x53, 0x10, 0x03,
+	0x2a, 0x90, 0x01, 0x0a, 0x18, 0x43, 0x6f, 0x6e, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x6f,
+	0x6f, 0x6c, 0x65, 0x61, 0x6e, 0x54, 0x79, 0x70, 0x65, 0x45, 0x6e, 0x75, 0x6d, 0x12, 0x2b, 0x0a,
+	0x27, 0x43, 0x4f, 0x4e, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x42, 0x4f, 0x4f, 0x4c, 0x45,
+	0x41, 0x4e, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x55, 0x4e, 0x53,
+	0x50, 0x45, 0x43, 0x49, 0x46, 0x49, 0x45, 0x44, 0x10, 0x00, 0x12, 0x23, 0x0a, 0x1f, 0x43, 0x4f,
+	0x4e, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x42, 0x4f, 0x4f, 0x4c, 0x45, 0x41, 0x4e, 0x5f,
+	0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x41, 0x4e, 0x44, 0x10, 0x01, 0x12,
+	0x22, 0x0a, 0x1e, 0x43, 0x4f, 0x4e, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x42, 0x4f, 0x4f,
+	0x4c, 0x45, 0x41, 0x4e, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x4f,
+	0x52, 0x10, 0x02, 0x2a, 0x88, 0x02, 0x0a, 0x13, 0x4b, 0x61, 0x73, 0x50, 0x75, 0x62, 0x6c, 0x69,
+	0x63, 0x4b, 0x65, 0x79, 0x41, 0x6c, 0x67, 0x45, 0x6e, 0x75, 0x6d, 0x12, 0x27, 0x0a, 0x23, 0x4b,
+	0x41, 0x53, 0x5f, 0x50, 0x55, 0x42, 0x4c, 0x49, 0x43, 0x5f, 0x4b, 0x45, 0x59, 0x5f, 0x41, 0x4c,
+	0x47, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49, 0x46, 0x49,
+	0x45, 0x44, 0x10, 0x00, 0x12, 0x24, 0x0a, 0x20, 0x4b, 0x41, 0x53, 0x5f, 0x50, 0x55, 0x42, 0x4c,
+	0x49, 0x43, 0x5f, 0x4b, 0x45, 0x59, 0x5f, 0x41, 0x4c, 0x47, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f,
+	0x52, 0x53, 0x41, 0x5f, 0x32, 0x30, 0x34, 0x38, 0x10, 0x01, 0x12, 0x24, 0x0a, 0x20, 0x4b, 0x41,
 	0x53, 0x5f, 0x50, 0x55, 0x42, 0x4c, 0x49, 0x43, 0x5f, 0x4b, 0x45, 0x59, 0x5f, 0x41, 0x4c, 0x47,
-	0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x52, 0x53, 0x41, 0x5f, 0x32, 0x30, 0x34, 0x38, 0x10, 0x01,
-	0x12, 0x24, 0x0a, 0x20, 0x4b, 0x41, 0x53, 0x5f, 0x50, 0x55, 0x42, 0x4c, 0x49, 0x43, 0x5f, 0x4b,
-	0x45, 0x59, 0x5f, 0x41, 0x4c, 0x47, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x52, 0x53, 0x41, 0x5f,
-	0x34, 0x30, 0x39, 0x36, 0x10, 0x02, 0x12, 0x28, 0x0a, 0x24, 0x4b, 0x41, 0x53, 0x5f, 0x50, 0x55,
-	0x42, 0x4c, 0x49, 0x43, 0x5f, 0x4b, 0x45, 0x59, 0x5f, 0x41, 0x4c, 0x47, 0x5f, 0x45, 0x4e, 0x55,
-	0x4d, 0x5f, 0x45, 0x43, 0x5f, 0x53, 0x45, 0x43, 0x50, 0x32, 0x35, 0x36, 0x52, 0x31, 0x10, 0x05,
+	0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x52, 0x53, 0x41, 0x5f, 0x34, 0x30, 0x39, 0x36, 0x10, 0x02,
 	0x12, 0x28, 0x0a, 0x24, 0x4b, 0x41, 0x53, 0x5f, 0x50, 0x55, 0x42, 0x4c, 0x49, 0x43, 0x5f, 0x4b,
 	0x45, 0x59, 0x5f, 0x41, 0x4c, 0x47, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x45, 0x43, 0x5f, 0x53,
-	0x45, 0x43, 0x50, 0x33, 0x38, 0x34, 0x52, 0x31, 0x10, 0x06, 0x12, 0x28, 0x0a, 0x24, 0x4b, 0x41,
+	0x45, 0x43, 0x50, 0x32, 0x35, 0x36, 0x52, 0x31, 0x10, 0x05, 0x12, 0x28, 0x0a, 0x24, 0x4b, 0x41,
 	0x53, 0x5f, 0x50, 0x55, 0x42, 0x4c, 0x49, 0x43, 0x5f, 0x4b, 0x45, 0x59, 0x5f, 0x41, 0x4c, 0x47,
-	0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x45, 0x43, 0x5f, 0x53, 0x45, 0x43, 0x50, 0x35, 0x32, 0x31,
-	0x52, 0x31, 0x10, 0x07, 0x42, 0x82, 0x01, 0x0a, 0x0a, 0x63, 0x6f, 0x6d, 0x2e, 0x70, 0x6f, 0x6c,
-	0x69, 0x63, 0x79, 0x42, 0x0c, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x50, 0x72, 0x6f, 0x74,
-	0x6f, 0x50, 0x01, 0x5a, 0x2e, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f,
-	0x6f, 0x70, 0x65, 0x6e, 0x74, 0x64, 0x66, 0x2f, 0x70, 0x6c, 0x61, 0x74, 0x66, 0x6f, 0x72, 0x6d,
-	0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x2f, 0x67, 0x6f, 0x2f, 0x70, 0x6f, 0x6c,
-	0x69, 0x63, 0x79, 0xa2, 0x02, 0x03, 0x50, 0x58, 0x58, 0xaa, 0x02, 0x06, 0x50, 0x6f, 0x6c, 0x69,
-	0x63, 0x79, 0xca, 0x02, 0x06, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0xe2, 0x02, 0x12, 0x50, 0x6f,
-	0x6c, 0x69, 0x63, 0x79, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
-	0xea, 0x02, 0x06, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f,
-	0x33,
+	0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x45, 0x43, 0x5f, 0x53, 0x45, 0x43, 0x50, 0x33, 0x38, 0x34,
+	0x52, 0x31, 0x10, 0x06, 0x12, 0x28, 0x0a, 0x24, 0x4b, 0x41, 0x53, 0x5f, 0x50, 0x55, 0x42, 0x4c,
+	0x49, 0x43, 0x5f, 0x4b, 0x45, 0x59, 0x5f, 0x41, 0x4c, 0x47, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f,
+	0x45, 0x43, 0x5f, 0x53, 0x45, 0x43, 0x50, 0x35, 0x32, 0x31, 0x52, 0x31, 0x10, 0x07, 0x42, 0x82,
+	0x01, 0x0a, 0x0a, 0x63, 0x6f, 0x6d, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x42, 0x0c, 0x4f,
+	0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x2e, 0x67,
+	0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x74, 0x64,
+	0x66, 0x2f, 0x70, 0x6c, 0x61, 0x74, 0x66, 0x6f, 0x72, 0x6d, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x63, 0x6f, 0x6c, 0x2f, 0x67, 0x6f, 0x2f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0xa2, 0x02, 0x03,
+	0x50, 0x58, 0x58, 0xaa, 0x02, 0x06, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0xca, 0x02, 0x06, 0x50,
+	0x6f, 0x6c, 0x69, 0x63, 0x79, 0xe2, 0x02, 0x12, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5c, 0x47,
+	0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0xea, 0x02, 0x06, 0x50, 0x6f, 0x6c,
+	0x69, 0x63, 0x79, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
@@ -2025,7 +2189,7 @@ func file_policy_objects_proto_rawDescGZIP() []byte {
 }
 
 var file_policy_objects_proto_enumTypes = make([]protoimpl.EnumInfo, 5)
-var file_policy_objects_proto_msgTypes = make([]protoimpl.MessageInfo, 17)
+var file_policy_objects_proto_msgTypes = make([]protoimpl.MessageInfo, 19)
 var file_policy_objects_proto_goTypes = []interface{}{
 	(AttributeRuleTypeEnum)(0),      // 0: policy.AttributeRuleTypeEnum
 	(SubjectMappingOperatorEnum)(0), // 1: policy.SubjectMappingOperatorEnum
@@ -2049,58 +2213,64 @@ var file_policy_objects_proto_goTypes = []interface{}{
 	(*KasPublicKey)(nil),            // 19: policy.KasPublicKey
 	(*KasPublicKeySet)(nil),         // 20: policy.KasPublicKeySet
 	(*PublicKey)(nil),               // 21: policy.PublicKey
-	(*wrapperspb.BoolValue)(nil),    // 22: google.protobuf.BoolValue
-	(*common.Metadata)(nil),         // 23: common.Metadata
+	(*RegisteredResource)(nil),      // 22: policy.RegisteredResource
+	(*RegisteredResourceValue)(nil), // 23: policy.RegisteredResourceValue
+	(*wrapperspb.BoolValue)(nil),    // 24: google.protobuf.BoolValue
+	(*common.Metadata)(nil),         // 25: common.Metadata
 }
 var file_policy_objects_proto_depIdxs = []int32{
-	22, // 0: policy.Namespace.active:type_name -> google.protobuf.BoolValue
-	23, // 1: policy.Namespace.metadata:type_name -> common.Metadata
+	24, // 0: policy.Namespace.active:type_name -> google.protobuf.BoolValue
+	25, // 1: policy.Namespace.metadata:type_name -> common.Metadata
 	17, // 2: policy.Namespace.grants:type_name -> policy.KeyAccessServer
 	18, // 3: policy.Namespace.keys:type_name -> policy.Key
 	5,  // 4: policy.Attribute.namespace:type_name -> policy.Namespace
 	0,  // 5: policy.Attribute.rule:type_name -> policy.AttributeRuleTypeEnum
 	7,  // 6: policy.Attribute.values:type_name -> policy.Value
 	17, // 7: policy.Attribute.grants:type_name -> policy.KeyAccessServer
-	22, // 8: policy.Attribute.active:type_name -> google.protobuf.BoolValue
+	24, // 8: policy.Attribute.active:type_name -> google.protobuf.BoolValue
 	18, // 9: policy.Attribute.keys:type_name -> policy.Key
-	23, // 10: policy.Attribute.metadata:type_name -> common.Metadata
+	25, // 10: policy.Attribute.metadata:type_name -> common.Metadata
 	6,  // 11: policy.Value.attribute:type_name -> policy.Attribute
 	17, // 12: policy.Value.grants:type_name -> policy.KeyAccessServer
-	22, // 13: policy.Value.active:type_name -> google.protobuf.BoolValue
+	24, // 13: policy.Value.active:type_name -> google.protobuf.BoolValue
 	9,  // 14: policy.Value.subject_mappings:type_name -> policy.SubjectMapping
 	18, // 15: policy.Value.keys:type_name -> policy.Key
-	23, // 16: policy.Value.metadata:type_name -> common.Metadata
+	25, // 16: policy.Value.metadata:type_name -> common.Metadata
 	4,  // 17: policy.Action.standard:type_name -> policy.Action.StandardAction
-	23, // 18: policy.Action.metadata:type_name -> common.Metadata
+	25, // 18: policy.Action.metadata:type_name -> common.Metadata
 	7,  // 19: policy.SubjectMapping.attribute_value:type_name -> policy.Value
 	13, // 20: policy.SubjectMapping.subject_condition_set:type_name -> policy.SubjectConditionSet
 	8,  // 21: policy.SubjectMapping.actions:type_name -> policy.Action
-	23, // 22: policy.SubjectMapping.metadata:type_name -> common.Metadata
+	25, // 22: policy.SubjectMapping.metadata:type_name -> common.Metadata
 	1,  // 23: policy.Condition.operator:type_name -> policy.SubjectMappingOperatorEnum
 	10, // 24: policy.ConditionGroup.conditions:type_name -> policy.Condition
 	2,  // 25: policy.ConditionGroup.boolean_operator:type_name -> policy.ConditionBooleanTypeEnum
 	11, // 26: policy.SubjectSet.condition_groups:type_name -> policy.ConditionGroup
 	12, // 27: policy.SubjectConditionSet.subject_sets:type_name -> policy.SubjectSet
-	23, // 28: policy.SubjectConditionSet.metadata:type_name -> common.Metadata
-	23, // 29: policy.ResourceMappingGroup.metadata:type_name -> common.Metadata
-	23, // 30: policy.ResourceMapping.metadata:type_name -> common.Metadata
+	25, // 28: policy.SubjectConditionSet.metadata:type_name -> common.Metadata
+	25, // 29: policy.ResourceMappingGroup.metadata:type_name -> common.Metadata
+	25, // 30: policy.ResourceMapping.metadata:type_name -> common.Metadata
 	7,  // 31: policy.ResourceMapping.attribute_value:type_name -> policy.Value
 	15, // 32: policy.ResourceMapping.group:type_name -> policy.ResourceMappingGroup
 	21, // 33: policy.KeyAccessServer.public_key:type_name -> policy.PublicKey
-	23, // 34: policy.KeyAccessServer.metadata:type_name -> common.Metadata
-	22, // 35: policy.Key.is_active:type_name -> google.protobuf.BoolValue
-	22, // 36: policy.Key.was_mapped:type_name -> google.protobuf.BoolValue
+	25, // 34: policy.KeyAccessServer.metadata:type_name -> common.Metadata
+	24, // 35: policy.Key.is_active:type_name -> google.protobuf.BoolValue
+	24, // 36: policy.Key.was_mapped:type_name -> google.protobuf.BoolValue
 	19, // 37: policy.Key.public_key:type_name -> policy.KasPublicKey
 	17, // 38: policy.Key.kas:type_name -> policy.KeyAccessServer
-	23, // 39: policy.Key.metadata:type_name -> common.Metadata
+	25, // 39: policy.Key.metadata:type_name -> common.Metadata
 	3,  // 40: policy.KasPublicKey.alg:type_name -> policy.KasPublicKeyAlgEnum
 	19, // 41: policy.KasPublicKeySet.keys:type_name -> policy.KasPublicKey
 	20, // 42: policy.PublicKey.cached:type_name -> policy.KasPublicKeySet
-	43, // [43:43] is the sub-list for method output_type
-	43, // [43:43] is the sub-list for method input_type
-	43, // [43:43] is the sub-list for extension type_name
-	43, // [43:43] is the sub-list for extension extendee
-	0,  // [0:43] is the sub-list for field type_name
+	23, // 43: policy.RegisteredResource.values:type_name -> policy.RegisteredResourceValue
+	25, // 44: policy.RegisteredResource.metadata:type_name -> common.Metadata
+	22, // 45: policy.RegisteredResourceValue.resource:type_name -> policy.RegisteredResource
+	25, // 46: policy.RegisteredResourceValue.metadata:type_name -> common.Metadata
+	47, // [47:47] is the sub-list for method output_type
+	47, // [47:47] is the sub-list for method input_type
+	47, // [47:47] is the sub-list for extension type_name
+	47, // [47:47] is the sub-list for extension extendee
+	0,  // [0:47] is the sub-list for field type_name
 }
 
 func init() { file_policy_objects_proto_init() }
@@ -2313,6 +2483,30 @@ func file_policy_objects_proto_init() {
 				return nil
 			}
 		}
+		file_policy_objects_proto_msgTypes[17].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*RegisteredResource); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_objects_proto_msgTypes[18].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*RegisteredResourceValue); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
 	}
 	file_policy_objects_proto_msgTypes[3].OneofWrappers = []interface{}{
 		(*Action_Standard)(nil),
@@ -2328,7 +2522,7 @@ func file_policy_objects_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: file_policy_objects_proto_rawDesc,
 			NumEnums:      5,
-			NumMessages:   17,
+			NumMessages:   19,
 			NumExtensions: 0,
 			NumServices:   0,
 		},
diff --git a/protocol/go/policy/registeredresources/registered_resources.pb.go b/protocol/go/policy/registeredresources/registered_resources.pb.go
new file mode 100644
index 0000000000..09250a6cf6
--- /dev/null
+++ b/protocol/go/policy/registeredresources/registered_resources.pb.go
@@ -0,0 +1,1774 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.33.0
+// 	protoc        (unknown)
+// source: policy/registeredresources/registered_resources.proto
+
+package registeredresources
+
+import (
+	_ "buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go/buf/validate"
+	common "github.com/opentdf/platform/protocol/go/common"
+	policy "github.com/opentdf/platform/protocol/go/policy"
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type CreateRegisteredResourceRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Required
+	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
+	// Optional
+	// Registered Resource Values (when provided) must be alphanumeric strings, allowing hyphens and underscores but not as the first or last character.
+	// The stored value will be normalized to lower case.
+	Values []string `protobuf:"bytes,2,rep,name=values,proto3" json:"values,omitempty"`
+	// Optional
+	// Common metadata
+	Metadata *common.MetadataMutable `protobuf:"bytes,100,opt,name=metadata,proto3" json:"metadata,omitempty"`
+}
+
+func (x *CreateRegisteredResourceRequest) Reset() {
+	*x = CreateRegisteredResourceRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[0]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CreateRegisteredResourceRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateRegisteredResourceRequest) ProtoMessage() {}
+
+func (x *CreateRegisteredResourceRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[0]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateRegisteredResourceRequest.ProtoReflect.Descriptor instead.
+func (*CreateRegisteredResourceRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *CreateRegisteredResourceRequest) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *CreateRegisteredResourceRequest) GetValues() []string {
+	if x != nil {
+		return x.Values
+	}
+	return nil
+}
+
+func (x *CreateRegisteredResourceRequest) GetMetadata() *common.MetadataMutable {
+	if x != nil {
+		return x.Metadata
+	}
+	return nil
+}
+
+type CreateRegisteredResourceResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Resource *policy.RegisteredResource `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
+}
+
+func (x *CreateRegisteredResourceResponse) Reset() {
+	*x = CreateRegisteredResourceResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[1]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CreateRegisteredResourceResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateRegisteredResourceResponse) ProtoMessage() {}
+
+func (x *CreateRegisteredResourceResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[1]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateRegisteredResourceResponse.ProtoReflect.Descriptor instead.
+func (*CreateRegisteredResourceResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *CreateRegisteredResourceResponse) GetResource() *policy.RegisteredResource {
+	if x != nil {
+		return x.Resource
+	}
+	return nil
+}
+
+type GetRegisteredResourceRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Types that are assignable to Identifier:
+	//
+	//	*GetRegisteredResourceRequest_ResourceId
+	//	*GetRegisteredResourceRequest_Fqn
+	Identifier isGetRegisteredResourceRequest_Identifier `protobuf_oneof:"identifier"`
+}
+
+func (x *GetRegisteredResourceRequest) Reset() {
+	*x = GetRegisteredResourceRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[2]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *GetRegisteredResourceRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetRegisteredResourceRequest) ProtoMessage() {}
+
+func (x *GetRegisteredResourceRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[2]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetRegisteredResourceRequest.ProtoReflect.Descriptor instead.
+func (*GetRegisteredResourceRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{2}
+}
+
+func (m *GetRegisteredResourceRequest) GetIdentifier() isGetRegisteredResourceRequest_Identifier {
+	if m != nil {
+		return m.Identifier
+	}
+	return nil
+}
+
+func (x *GetRegisteredResourceRequest) GetResourceId() string {
+	if x, ok := x.GetIdentifier().(*GetRegisteredResourceRequest_ResourceId); ok {
+		return x.ResourceId
+	}
+	return ""
+}
+
+func (x *GetRegisteredResourceRequest) GetFqn() string {
+	if x, ok := x.GetIdentifier().(*GetRegisteredResourceRequest_Fqn); ok {
+		return x.Fqn
+	}
+	return ""
+}
+
+type isGetRegisteredResourceRequest_Identifier interface {
+	isGetRegisteredResourceRequest_Identifier()
+}
+
+type GetRegisteredResourceRequest_ResourceId struct {
+	ResourceId string `protobuf:"bytes,1,opt,name=resource_id,json=resourceId,proto3,oneof"`
+}
+
+type GetRegisteredResourceRequest_Fqn struct {
+	Fqn string `protobuf:"bytes,2,opt,name=fqn,proto3,oneof"`
+}
+
+func (*GetRegisteredResourceRequest_ResourceId) isGetRegisteredResourceRequest_Identifier() {}
+
+func (*GetRegisteredResourceRequest_Fqn) isGetRegisteredResourceRequest_Identifier() {}
+
+type GetRegisteredResourceResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Group *policy.RegisteredResource `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
+}
+
+func (x *GetRegisteredResourceResponse) Reset() {
+	*x = GetRegisteredResourceResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[3]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *GetRegisteredResourceResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetRegisteredResourceResponse) ProtoMessage() {}
+
+func (x *GetRegisteredResourceResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[3]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetRegisteredResourceResponse.ProtoReflect.Descriptor instead.
+func (*GetRegisteredResourceResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *GetRegisteredResourceResponse) GetGroup() *policy.RegisteredResource {
+	if x != nil {
+		return x.Group
+	}
+	return nil
+}
+
+type ListRegisteredResourcesRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Optional
+	Pagination *policy.PageRequest `protobuf:"bytes,10,opt,name=pagination,proto3" json:"pagination,omitempty"`
+}
+
+func (x *ListRegisteredResourcesRequest) Reset() {
+	*x = ListRegisteredResourcesRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[4]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *ListRegisteredResourcesRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListRegisteredResourcesRequest) ProtoMessage() {}
+
+func (x *ListRegisteredResourcesRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[4]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListRegisteredResourcesRequest.ProtoReflect.Descriptor instead.
+func (*ListRegisteredResourcesRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *ListRegisteredResourcesRequest) GetPagination() *policy.PageRequest {
+	if x != nil {
+		return x.Pagination
+	}
+	return nil
+}
+
+type ListRegisteredResourcesResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Resources  []*policy.RegisteredResource `protobuf:"bytes,1,rep,name=resources,proto3" json:"resources,omitempty"`
+	Pagination *policy.PageResponse         `protobuf:"bytes,10,opt,name=pagination,proto3" json:"pagination,omitempty"`
+}
+
+func (x *ListRegisteredResourcesResponse) Reset() {
+	*x = ListRegisteredResourcesResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[5]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *ListRegisteredResourcesResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListRegisteredResourcesResponse) ProtoMessage() {}
+
+func (x *ListRegisteredResourcesResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[5]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListRegisteredResourcesResponse.ProtoReflect.Descriptor instead.
+func (*ListRegisteredResourcesResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{5}
+}
+
+func (x *ListRegisteredResourcesResponse) GetResources() []*policy.RegisteredResource {
+	if x != nil {
+		return x.Resources
+	}
+	return nil
+}
+
+func (x *ListRegisteredResourcesResponse) GetPagination() *policy.PageResponse {
+	if x != nil {
+		return x.Pagination
+	}
+	return nil
+}
+
+type UpdateRegisteredResourceRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Required
+	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+	// Optional
+	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
+	// Optional
+	// Common metadata
+	Metadata               *common.MetadataMutable   `protobuf:"bytes,100,opt,name=metadata,proto3" json:"metadata,omitempty"`
+	MetadataUpdateBehavior common.MetadataUpdateEnum `protobuf:"varint,101,opt,name=metadata_update_behavior,json=metadataUpdateBehavior,proto3,enum=common.MetadataUpdateEnum" json:"metadata_update_behavior,omitempty"`
+}
+
+func (x *UpdateRegisteredResourceRequest) Reset() {
+	*x = UpdateRegisteredResourceRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[6]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *UpdateRegisteredResourceRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*UpdateRegisteredResourceRequest) ProtoMessage() {}
+
+func (x *UpdateRegisteredResourceRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[6]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use UpdateRegisteredResourceRequest.ProtoReflect.Descriptor instead.
+func (*UpdateRegisteredResourceRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{6}
+}
+
+func (x *UpdateRegisteredResourceRequest) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+func (x *UpdateRegisteredResourceRequest) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *UpdateRegisteredResourceRequest) GetMetadata() *common.MetadataMutable {
+	if x != nil {
+		return x.Metadata
+	}
+	return nil
+}
+
+func (x *UpdateRegisteredResourceRequest) GetMetadataUpdateBehavior() common.MetadataUpdateEnum {
+	if x != nil {
+		return x.MetadataUpdateBehavior
+	}
+	return common.MetadataUpdateEnum(0)
+}
+
+type UpdateRegisteredResourceResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Resource *policy.RegisteredResource `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
+}
+
+func (x *UpdateRegisteredResourceResponse) Reset() {
+	*x = UpdateRegisteredResourceResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[7]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *UpdateRegisteredResourceResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*UpdateRegisteredResourceResponse) ProtoMessage() {}
+
+func (x *UpdateRegisteredResourceResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[7]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use UpdateRegisteredResourceResponse.ProtoReflect.Descriptor instead.
+func (*UpdateRegisteredResourceResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *UpdateRegisteredResourceResponse) GetResource() *policy.RegisteredResource {
+	if x != nil {
+		return x.Resource
+	}
+	return nil
+}
+
+type DeleteRegisteredResourceRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Required
+	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+}
+
+func (x *DeleteRegisteredResourceRequest) Reset() {
+	*x = DeleteRegisteredResourceRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[8]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *DeleteRegisteredResourceRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteRegisteredResourceRequest) ProtoMessage() {}
+
+func (x *DeleteRegisteredResourceRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[8]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteRegisteredResourceRequest.ProtoReflect.Descriptor instead.
+func (*DeleteRegisteredResourceRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *DeleteRegisteredResourceRequest) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+type DeleteRegisteredResourceResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Resource *policy.RegisteredResource `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
+}
+
+func (x *DeleteRegisteredResourceResponse) Reset() {
+	*x = DeleteRegisteredResourceResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[9]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *DeleteRegisteredResourceResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteRegisteredResourceResponse) ProtoMessage() {}
+
+func (x *DeleteRegisteredResourceResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[9]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteRegisteredResourceResponse.ProtoReflect.Descriptor instead.
+func (*DeleteRegisteredResourceResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{9}
+}
+
+func (x *DeleteRegisteredResourceResponse) GetResource() *policy.RegisteredResource {
+	if x != nil {
+		return x.Resource
+	}
+	return nil
+}
+
+type CreateRegisteredResourceValueRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Required
+	ResourceId string `protobuf:"bytes,1,opt,name=resource_id,json=resourceId,proto3" json:"resource_id,omitempty"`
+	// Required
+	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
+	// Optional
+	// Common metadata
+	Metadata *common.MetadataMutable `protobuf:"bytes,100,opt,name=metadata,proto3" json:"metadata,omitempty"`
+}
+
+func (x *CreateRegisteredResourceValueRequest) Reset() {
+	*x = CreateRegisteredResourceValueRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[10]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CreateRegisteredResourceValueRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateRegisteredResourceValueRequest) ProtoMessage() {}
+
+func (x *CreateRegisteredResourceValueRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[10]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateRegisteredResourceValueRequest.ProtoReflect.Descriptor instead.
+func (*CreateRegisteredResourceValueRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{10}
+}
+
+func (x *CreateRegisteredResourceValueRequest) GetResourceId() string {
+	if x != nil {
+		return x.ResourceId
+	}
+	return ""
+}
+
+func (x *CreateRegisteredResourceValueRequest) GetValue() string {
+	if x != nil {
+		return x.Value
+	}
+	return ""
+}
+
+func (x *CreateRegisteredResourceValueRequest) GetMetadata() *common.MetadataMutable {
+	if x != nil {
+		return x.Metadata
+	}
+	return nil
+}
+
+type CreateRegisteredResourceValueResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Value *policy.RegisteredResourceValue `protobuf:"bytes,1,opt,name=value,proto3" json:"value,omitempty"`
+}
+
+func (x *CreateRegisteredResourceValueResponse) Reset() {
+	*x = CreateRegisteredResourceValueResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[11]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CreateRegisteredResourceValueResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateRegisteredResourceValueResponse) ProtoMessage() {}
+
+func (x *CreateRegisteredResourceValueResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[11]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateRegisteredResourceValueResponse.ProtoReflect.Descriptor instead.
+func (*CreateRegisteredResourceValueResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{11}
+}
+
+func (x *CreateRegisteredResourceValueResponse) GetValue() *policy.RegisteredResourceValue {
+	if x != nil {
+		return x.Value
+	}
+	return nil
+}
+
+type GetRegisteredResourceValueRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Types that are assignable to Identifier:
+	//
+	//	*GetRegisteredResourceValueRequest_ValueId
+	//	*GetRegisteredResourceValueRequest_Fqn
+	Identifier isGetRegisteredResourceValueRequest_Identifier `protobuf_oneof:"identifier"`
+}
+
+func (x *GetRegisteredResourceValueRequest) Reset() {
+	*x = GetRegisteredResourceValueRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[12]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *GetRegisteredResourceValueRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetRegisteredResourceValueRequest) ProtoMessage() {}
+
+func (x *GetRegisteredResourceValueRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[12]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetRegisteredResourceValueRequest.ProtoReflect.Descriptor instead.
+func (*GetRegisteredResourceValueRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{12}
+}
+
+func (m *GetRegisteredResourceValueRequest) GetIdentifier() isGetRegisteredResourceValueRequest_Identifier {
+	if m != nil {
+		return m.Identifier
+	}
+	return nil
+}
+
+func (x *GetRegisteredResourceValueRequest) GetValueId() string {
+	if x, ok := x.GetIdentifier().(*GetRegisteredResourceValueRequest_ValueId); ok {
+		return x.ValueId
+	}
+	return ""
+}
+
+func (x *GetRegisteredResourceValueRequest) GetFqn() string {
+	if x, ok := x.GetIdentifier().(*GetRegisteredResourceValueRequest_Fqn); ok {
+		return x.Fqn
+	}
+	return ""
+}
+
+type isGetRegisteredResourceValueRequest_Identifier interface {
+	isGetRegisteredResourceValueRequest_Identifier()
+}
+
+type GetRegisteredResourceValueRequest_ValueId struct {
+	ValueId string `protobuf:"bytes,1,opt,name=value_id,json=valueId,proto3,oneof"`
+}
+
+type GetRegisteredResourceValueRequest_Fqn struct {
+	Fqn string `protobuf:"bytes,2,opt,name=fqn,proto3,oneof"`
+}
+
+func (*GetRegisteredResourceValueRequest_ValueId) isGetRegisteredResourceValueRequest_Identifier() {}
+
+func (*GetRegisteredResourceValueRequest_Fqn) isGetRegisteredResourceValueRequest_Identifier() {}
+
+type GetRegisteredResourceValueResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Value *policy.RegisteredResourceValue `protobuf:"bytes,1,opt,name=value,proto3" json:"value,omitempty"`
+}
+
+func (x *GetRegisteredResourceValueResponse) Reset() {
+	*x = GetRegisteredResourceValueResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[13]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *GetRegisteredResourceValueResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetRegisteredResourceValueResponse) ProtoMessage() {}
+
+func (x *GetRegisteredResourceValueResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[13]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetRegisteredResourceValueResponse.ProtoReflect.Descriptor instead.
+func (*GetRegisteredResourceValueResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{13}
+}
+
+func (x *GetRegisteredResourceValueResponse) GetValue() *policy.RegisteredResourceValue {
+	if x != nil {
+		return x.Value
+	}
+	return nil
+}
+
+type ListRegisteredResourceValuesRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Optional
+	ResourceId string `protobuf:"bytes,1,opt,name=resource_id,json=resourceId,proto3" json:"resource_id,omitempty"`
+	// Optional
+	Pagination *policy.PageRequest `protobuf:"bytes,10,opt,name=pagination,proto3" json:"pagination,omitempty"`
+}
+
+func (x *ListRegisteredResourceValuesRequest) Reset() {
+	*x = ListRegisteredResourceValuesRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[14]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *ListRegisteredResourceValuesRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListRegisteredResourceValuesRequest) ProtoMessage() {}
+
+func (x *ListRegisteredResourceValuesRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[14]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListRegisteredResourceValuesRequest.ProtoReflect.Descriptor instead.
+func (*ListRegisteredResourceValuesRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{14}
+}
+
+func (x *ListRegisteredResourceValuesRequest) GetResourceId() string {
+	if x != nil {
+		return x.ResourceId
+	}
+	return ""
+}
+
+func (x *ListRegisteredResourceValuesRequest) GetPagination() *policy.PageRequest {
+	if x != nil {
+		return x.Pagination
+	}
+	return nil
+}
+
+type ListRegisteredResourceValuesResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Values     []*policy.RegisteredResourceValue `protobuf:"bytes,1,rep,name=values,proto3" json:"values,omitempty"`
+	Pagination *policy.PageResponse              `protobuf:"bytes,10,opt,name=pagination,proto3" json:"pagination,omitempty"`
+}
+
+func (x *ListRegisteredResourceValuesResponse) Reset() {
+	*x = ListRegisteredResourceValuesResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[15]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *ListRegisteredResourceValuesResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListRegisteredResourceValuesResponse) ProtoMessage() {}
+
+func (x *ListRegisteredResourceValuesResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[15]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListRegisteredResourceValuesResponse.ProtoReflect.Descriptor instead.
+func (*ListRegisteredResourceValuesResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{15}
+}
+
+func (x *ListRegisteredResourceValuesResponse) GetValues() []*policy.RegisteredResourceValue {
+	if x != nil {
+		return x.Values
+	}
+	return nil
+}
+
+func (x *ListRegisteredResourceValuesResponse) GetPagination() *policy.PageResponse {
+	if x != nil {
+		return x.Pagination
+	}
+	return nil
+}
+
+type UpdateRegisteredResourceValueRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Required
+	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+	// Optional
+	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
+	// Optional
+	// Common metadata
+	Metadata               *common.MetadataMutable   `protobuf:"bytes,100,opt,name=metadata,proto3" json:"metadata,omitempty"`
+	MetadataUpdateBehavior common.MetadataUpdateEnum `protobuf:"varint,101,opt,name=metadata_update_behavior,json=metadataUpdateBehavior,proto3,enum=common.MetadataUpdateEnum" json:"metadata_update_behavior,omitempty"`
+}
+
+func (x *UpdateRegisteredResourceValueRequest) Reset() {
+	*x = UpdateRegisteredResourceValueRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[16]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *UpdateRegisteredResourceValueRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*UpdateRegisteredResourceValueRequest) ProtoMessage() {}
+
+func (x *UpdateRegisteredResourceValueRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[16]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use UpdateRegisteredResourceValueRequest.ProtoReflect.Descriptor instead.
+func (*UpdateRegisteredResourceValueRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{16}
+}
+
+func (x *UpdateRegisteredResourceValueRequest) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+func (x *UpdateRegisteredResourceValueRequest) GetValue() string {
+	if x != nil {
+		return x.Value
+	}
+	return ""
+}
+
+func (x *UpdateRegisteredResourceValueRequest) GetMetadata() *common.MetadataMutable {
+	if x != nil {
+		return x.Metadata
+	}
+	return nil
+}
+
+func (x *UpdateRegisteredResourceValueRequest) GetMetadataUpdateBehavior() common.MetadataUpdateEnum {
+	if x != nil {
+		return x.MetadataUpdateBehavior
+	}
+	return common.MetadataUpdateEnum(0)
+}
+
+type UpdateRegisteredResourceValueResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Value *policy.RegisteredResourceValue `protobuf:"bytes,1,opt,name=value,proto3" json:"value,omitempty"`
+}
+
+func (x *UpdateRegisteredResourceValueResponse) Reset() {
+	*x = UpdateRegisteredResourceValueResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[17]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *UpdateRegisteredResourceValueResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*UpdateRegisteredResourceValueResponse) ProtoMessage() {}
+
+func (x *UpdateRegisteredResourceValueResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[17]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use UpdateRegisteredResourceValueResponse.ProtoReflect.Descriptor instead.
+func (*UpdateRegisteredResourceValueResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{17}
+}
+
+func (x *UpdateRegisteredResourceValueResponse) GetValue() *policy.RegisteredResourceValue {
+	if x != nil {
+		return x.Value
+	}
+	return nil
+}
+
+type DeleteRegisteredResourceValueRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// Required
+	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+}
+
+func (x *DeleteRegisteredResourceValueRequest) Reset() {
+	*x = DeleteRegisteredResourceValueRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[18]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *DeleteRegisteredResourceValueRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteRegisteredResourceValueRequest) ProtoMessage() {}
+
+func (x *DeleteRegisteredResourceValueRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[18]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteRegisteredResourceValueRequest.ProtoReflect.Descriptor instead.
+func (*DeleteRegisteredResourceValueRequest) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{18}
+}
+
+func (x *DeleteRegisteredResourceValueRequest) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+type DeleteRegisteredResourceValueResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Value *policy.RegisteredResourceValue `protobuf:"bytes,1,opt,name=value,proto3" json:"value,omitempty"`
+}
+
+func (x *DeleteRegisteredResourceValueResponse) Reset() {
+	*x = DeleteRegisteredResourceValueResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[19]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *DeleteRegisteredResourceValueResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteRegisteredResourceValueResponse) ProtoMessage() {}
+
+func (x *DeleteRegisteredResourceValueResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_policy_registeredresources_registered_resources_proto_msgTypes[19]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteRegisteredResourceValueResponse.ProtoReflect.Descriptor instead.
+func (*DeleteRegisteredResourceValueResponse) Descriptor() ([]byte, []int) {
+	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{19}
+}
+
+func (x *DeleteRegisteredResourceValueResponse) GetValue() *policy.RegisteredResourceValue {
+	if x != nil {
+		return x.Value
+	}
+	return nil
+}
+
+var File_policy_registeredresources_registered_resources_proto protoreflect.FileDescriptor
+
+var file_policy_registeredresources_registered_resources_proto_rawDesc = []byte{
+	0x0a, 0x35, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2f, 0x72, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x2f, 0x72, 0x65, 0x67,
+	0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x5f, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x1a, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e,
+	0x72, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x73, 0x1a, 0x1b, 0x62, 0x75, 0x66, 0x2f, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74,
+	0x65, 0x2f, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x1a, 0x13, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2f, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x14, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2f, 0x6f, 0x62,
+	0x6a, 0x65, 0x63, 0x74, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x16, 0x70, 0x6f, 0x6c,
+	0x69, 0x63, 0x79, 0x2f, 0x73, 0x65, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x73, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x22, 0xd9, 0x03, 0x0a, 0x1f, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x52, 0x65,
+	0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0xa8, 0x02, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x93, 0x02, 0xba, 0x48, 0x8f, 0x02, 0xba, 0x01, 0x83,
+	0x02, 0x0a, 0x0e, 0x72, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61,
+	0x74, 0x12, 0xb3, 0x01, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x20, 0x52,
+	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x20, 0x4e, 0x61, 0x6d, 0x65, 0x20, 0x6d, 0x75, 0x73,
+	0x74, 0x20, 0x62, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x6e, 0x75, 0x6d,
+	0x65, 0x72, 0x69, 0x63, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x2c, 0x20, 0x61, 0x6c, 0x6c,
+	0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x68, 0x79, 0x70, 0x68, 0x65, 0x6e, 0x73, 0x20, 0x61, 0x6e,
+	0x64, 0x20, 0x75, 0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x20, 0x62, 0x75,
+	0x74, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, 0x72,
+	0x73, 0x74, 0x20, 0x6f, 0x72, 0x20, 0x6c, 0x61, 0x73, 0x74, 0x20, 0x63, 0x68, 0x61, 0x72, 0x61,
+	0x63, 0x74, 0x65, 0x72, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64,
+	0x20, 0x6e, 0x61, 0x6d, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6e, 0x6f,
+	0x72, 0x6d, 0x61, 0x6c, 0x69, 0x7a, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x6c, 0x6f, 0x77, 0x65,
+	0x72, 0x20, 0x63, 0x61, 0x73, 0x65, 0x2e, 0x1a, 0x3b, 0x74, 0x68, 0x69, 0x73, 0x2e, 0x6d, 0x61,
+	0x74, 0x63, 0x68, 0x65, 0x73, 0x28, 0x27, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30,
+	0x2d, 0x39, 0x5d, 0x28, 0x3f, 0x3a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39,
+	0x5f, 0x2d, 0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x29,
+	0x3f, 0x24, 0x27, 0x29, 0xc8, 0x01, 0x01, 0x72, 0x03, 0x18, 0xfd, 0x01, 0x52, 0x04, 0x6e, 0x61,
+	0x6d, 0x65, 0x12, 0x56, 0x0a, 0x06, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03,
+	0x28, 0x09, 0x42, 0x3e, 0xba, 0x48, 0x3b, 0x92, 0x01, 0x38, 0x08, 0x00, 0x18, 0x01, 0x22, 0x32,
+	0x72, 0x30, 0x18, 0xfd, 0x01, 0x32, 0x2b, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30,
+	0x2d, 0x39, 0x5d, 0x28, 0x3f, 0x3a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39,
+	0x5f, 0x2d, 0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x29,
+	0x3f, 0x24, 0x52, 0x06, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x33, 0x0a, 0x08, 0x6d, 0x65,
+	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x64, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x63,
+	0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x4d, 0x75,
+	0x74, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x22,
+	0x5a, 0x0a, 0x20, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f,
+	0x6e, 0x73, 0x65, 0x12, 0x36, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52,
+	0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x22, 0x80, 0x01, 0x0a, 0x1c,
+	0x47, 0x65, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x2b, 0x0a, 0x0b,
+	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x48, 0x00, 0x52, 0x0a, 0x72,
+	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49, 0x64, 0x12, 0x1e, 0x0a, 0x03, 0x66, 0x71, 0x6e,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0a, 0xba, 0x48, 0x07, 0x72, 0x05, 0x10, 0x01, 0x88,
+	0x01, 0x01, 0x48, 0x00, 0x52, 0x03, 0x66, 0x71, 0x6e, 0x42, 0x13, 0x0a, 0x0a, 0x69, 0x64, 0x65,
+	0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x05, 0xba, 0x48, 0x02, 0x08, 0x01, 0x22, 0x51,
+	0x0a, 0x1d, 0x47, 0x65, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52,
+	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12,
+	0x30, 0x0a, 0x05, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a,
+	0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
+	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x05, 0x67, 0x72, 0x6f, 0x75,
+	0x70, 0x22, 0x55, 0x0a, 0x1e, 0x4c, 0x69, 0x73, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75,
+	0x65, 0x73, 0x74, 0x12, 0x33, 0x0a, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f,
+	0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79,
+	0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x52, 0x0a, 0x70, 0x61,
+	0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x91, 0x01, 0x0a, 0x1f, 0x4c, 0x69, 0x73,
+	0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x38, 0x0a, 0x09,
+	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32,
+	0x1a, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x34, 0x0a, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61,
+	0x74, 0x69, 0x6f, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x70, 0x6f, 0x6c,
+	0x69, 0x63, 0x79, 0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65,
+	0x52, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x89, 0x04, 0x0a,
+	0x1f, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65,
+	0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
+	0x12, 0x18, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48,
+	0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x02, 0x69, 0x64, 0x12, 0xc0, 0x02, 0x0a, 0x04, 0x6e,
+	0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0xab, 0x02, 0xba, 0x48, 0xa7, 0x02,
+	0xba, 0x01, 0x9b, 0x02, 0x0a, 0x0e, 0x72, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x5f, 0x66, 0x6f,
+	0x72, 0x6d, 0x61, 0x74, 0x12, 0xb3, 0x01, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65,
+	0x64, 0x20, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x20, 0x4e, 0x61, 0x6d, 0x65, 0x20,
+	0x6d, 0x75, 0x73, 0x74, 0x20, 0x62, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x6c, 0x70, 0x68, 0x61,
+	0x6e, 0x75, 0x6d, 0x65, 0x72, 0x69, 0x63, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x2c, 0x20,
+	0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x68, 0x79, 0x70, 0x68, 0x65, 0x6e, 0x73,
+	0x20, 0x61, 0x6e, 0x64, 0x20, 0x75, 0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73,
+	0x20, 0x62, 0x75, 0x74, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20,
+	0x66, 0x69, 0x72, 0x73, 0x74, 0x20, 0x6f, 0x72, 0x20, 0x6c, 0x61, 0x73, 0x74, 0x20, 0x63, 0x68,
+	0x61, 0x72, 0x61, 0x63, 0x74, 0x65, 0x72, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f,
+	0x72, 0x65, 0x64, 0x20, 0x6e, 0x61, 0x6d, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65,
+	0x20, 0x6e, 0x6f, 0x72, 0x6d, 0x61, 0x6c, 0x69, 0x7a, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x6c,
+	0x6f, 0x77, 0x65, 0x72, 0x20, 0x63, 0x61, 0x73, 0x65, 0x2e, 0x1a, 0x53, 0x73, 0x69, 0x7a, 0x65,
+	0x28, 0x74, 0x68, 0x69, 0x73, 0x29, 0x20, 0x3e, 0x20, 0x30, 0x20, 0x3f, 0x20, 0x74, 0x68, 0x69,
+	0x73, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x28, 0x27, 0x5e, 0x5b, 0x61, 0x2d, 0x7a,
+	0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x28, 0x3f, 0x3a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d,
+	0x5a, 0x30, 0x2d, 0x39, 0x5f, 0x2d, 0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30,
+	0x2d, 0x39, 0x5d, 0x29, 0x3f, 0x24, 0x27, 0x29, 0x20, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0xc8,
+	0x01, 0x00, 0x72, 0x03, 0x18, 0xfd, 0x01, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x33, 0x0a,
+	0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x64, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x17, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74,
+	0x61, 0x4d, 0x75, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61,
+	0x74, 0x61, 0x12, 0x54, 0x0a, 0x18, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x5f, 0x75,
+	0x70, 0x64, 0x61, 0x74, 0x65, 0x5f, 0x62, 0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x18, 0x65,
+	0x20, 0x01, 0x28, 0x0e, 0x32, 0x1a, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65,
+	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x45, 0x6e, 0x75, 0x6d,
+	0x52, 0x16, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65,
+	0x42, 0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x22, 0x5a, 0x0a, 0x20, 0x55, 0x70, 0x64, 0x61,
+	0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f,
+	0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x36, 0x0a, 0x08,
+	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a,
+	0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
+	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f,
+	0x75, 0x72, 0x63, 0x65, 0x22, 0x3b, 0x0a, 0x1f, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x52, 0x65,
+	0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x18, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x02, 0x69,
+	0x64, 0x22, 0x5a, 0x0a, 0x20, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73,
+	0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x73,
+	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x36, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79,
+	0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x22, 0xb6, 0x03,
+	0x0a, 0x24, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
+	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52,
+	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x29, 0x0a, 0x0b, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05,
+	0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x0a, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49,
+	0x64, 0x12, 0xad, 0x02, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28,
+	0x09, 0x42, 0x96, 0x02, 0xba, 0x48, 0x92, 0x02, 0xba, 0x01, 0x86, 0x02, 0x0a, 0x0f, 0x72, 0x72,
+	0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0xb5, 0x01,
+	0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x20, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x20, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x6d, 0x75, 0x73, 0x74, 0x20, 0x62,
+	0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x6e, 0x75, 0x6d, 0x65, 0x72, 0x69,
+	0x63, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x2c, 0x20, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x69,
+	0x6e, 0x67, 0x20, 0x68, 0x79, 0x70, 0x68, 0x65, 0x6e, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x75,
+	0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x20, 0x62, 0x75, 0x74, 0x20, 0x6e,
+	0x6f, 0x74, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x20,
+	0x6f, 0x72, 0x20, 0x6c, 0x61, 0x73, 0x74, 0x20, 0x63, 0x68, 0x61, 0x72, 0x61, 0x63, 0x74, 0x65,
+	0x72, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64, 0x20, 0x76, 0x61,
+	0x6c, 0x75, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6e, 0x6f, 0x72, 0x6d,
+	0x61, 0x6c, 0x69, 0x7a, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x6c, 0x6f, 0x77, 0x65, 0x72, 0x20,
+	0x63, 0x61, 0x73, 0x65, 0x2e, 0x1a, 0x3b, 0x74, 0x68, 0x69, 0x73, 0x2e, 0x6d, 0x61, 0x74, 0x63,
+	0x68, 0x65, 0x73, 0x28, 0x27, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39,
+	0x5d, 0x28, 0x3f, 0x3a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5f, 0x2d,
+	0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x29, 0x3f, 0x24,
+	0x27, 0x29, 0xc8, 0x01, 0x01, 0x72, 0x03, 0x18, 0xfd, 0x01, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75,
+	0x65, 0x12, 0x33, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x64, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74,
+	0x61, 0x64, 0x61, 0x74, 0x61, 0x4d, 0x75, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x08, 0x6d, 0x65,
+	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x22, 0x5e, 0x0a, 0x25, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65,
+	0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12,
+	0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f,
+	0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
+	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52,
+	0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x7f, 0x0a, 0x21, 0x47, 0x65, 0x74, 0x52, 0x65, 0x67,
+	0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56,
+	0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x25, 0x0a, 0x08, 0x76,
+	0x61, 0x6c, 0x75, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba,
+	0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x48, 0x00, 0x52, 0x07, 0x76, 0x61, 0x6c, 0x75, 0x65,
+	0x49, 0x64, 0x12, 0x1e, 0x0a, 0x03, 0x66, 0x71, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42,
+	0x0a, 0xba, 0x48, 0x07, 0x72, 0x05, 0x10, 0x01, 0x88, 0x01, 0x01, 0x48, 0x00, 0x52, 0x03, 0x66,
+	0x71, 0x6e, 0x42, 0x13, 0x0a, 0x0a, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72,
+	0x12, 0x05, 0xba, 0x48, 0x02, 0x08, 0x01, 0x22, 0x5b, 0x0a, 0x22, 0x47, 0x65, 0x74, 0x52, 0x65,
+	0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x35, 0x0a,
+	0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70,
+	0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64,
+	0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x05, 0x76,
+	0x61, 0x6c, 0x75, 0x65, 0x22, 0xb2, 0x02, 0x0a, 0x23, 0x4c, 0x69, 0x73, 0x74, 0x52, 0x65, 0x67,
+	0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56,
+	0x61, 0x6c, 0x75, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0xd5, 0x01, 0x0a,
+	0x0b, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x09, 0x42, 0xb3, 0x01, 0xba, 0x48, 0xaf, 0x01, 0xba, 0x01, 0xab, 0x01, 0x0a, 0x14, 0x6f,
+	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x5f, 0x75, 0x75, 0x69, 0x64, 0x5f, 0x66, 0x6f, 0x72,
+	0x6d, 0x61, 0x74, 0x12, 0x23, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x20, 0x66, 0x69,
+	0x65, 0x6c, 0x64, 0x20, 0x6d, 0x75, 0x73, 0x74, 0x20, 0x62, 0x65, 0x20, 0x61, 0x20, 0x76, 0x61,
+	0x6c, 0x69, 0x64, 0x20, 0x55, 0x55, 0x49, 0x44, 0x1a, 0x6e, 0x73, 0x69, 0x7a, 0x65, 0x28, 0x74,
+	0x68, 0x69, 0x73, 0x29, 0x20, 0x3d, 0x3d, 0x20, 0x30, 0x20, 0x7c, 0x7c, 0x20, 0x74, 0x68, 0x69,
+	0x73, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x28, 0x27, 0x5b, 0x30, 0x2d, 0x39, 0x61,
+	0x2d, 0x66, 0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x38, 0x7d, 0x2d, 0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d,
+	0x66, 0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x34, 0x7d, 0x2d, 0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d, 0x66,
+	0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x34, 0x7d, 0x2d, 0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d, 0x66, 0x41,
+	0x2d, 0x46, 0x5d, 0x7b, 0x34, 0x7d, 0x2d, 0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d, 0x66, 0x41, 0x2d,
+	0x46, 0x5d, 0x7b, 0x31, 0x32, 0x7d, 0x27, 0x29, 0x52, 0x0a, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x49, 0x64, 0x12, 0x33, 0x0a, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69,
+	0x6f, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63,
+	0x79, 0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x52, 0x0a, 0x70,
+	0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x95, 0x01, 0x0a, 0x24, 0x4c, 0x69,
+	0x73, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f,
+	0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e,
+	0x73, 0x65, 0x12, 0x37, 0x0a, 0x06, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69,
+	0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61,
+	0x6c, 0x75, 0x65, 0x52, 0x06, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x34, 0x0a, 0x0a, 0x70,
+	0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x14, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x73,
+	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x52, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f,
+	0x6e, 0x22, 0x93, 0x04, 0x0a, 0x24, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69,
+	0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61,
+	0x6c, 0x75, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x18, 0x0a, 0x02, 0x69, 0x64,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01,
+	0x52, 0x02, 0x69, 0x64, 0x12, 0xc5, 0x02, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x09, 0x42, 0xae, 0x02, 0xba, 0x48, 0xaa, 0x02, 0xba, 0x01, 0x9e, 0x02, 0x0a,
+	0x0f, 0x72, 0x72, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74,
+	0x12, 0xb5, 0x01, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x20, 0x52, 0x65,
+	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x20, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x6d, 0x75, 0x73,
+	0x74, 0x20, 0x62, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x6e, 0x75, 0x6d,
+	0x65, 0x72, 0x69, 0x63, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x2c, 0x20, 0x61, 0x6c, 0x6c,
+	0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x68, 0x79, 0x70, 0x68, 0x65, 0x6e, 0x73, 0x20, 0x61, 0x6e,
+	0x64, 0x20, 0x75, 0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x20, 0x62, 0x75,
+	0x74, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, 0x72,
+	0x73, 0x74, 0x20, 0x6f, 0x72, 0x20, 0x6c, 0x61, 0x73, 0x74, 0x20, 0x63, 0x68, 0x61, 0x72, 0x61,
+	0x63, 0x74, 0x65, 0x72, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64,
+	0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6e,
+	0x6f, 0x72, 0x6d, 0x61, 0x6c, 0x69, 0x7a, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x6c, 0x6f, 0x77,
+	0x65, 0x72, 0x20, 0x63, 0x61, 0x73, 0x65, 0x2e, 0x1a, 0x53, 0x73, 0x69, 0x7a, 0x65, 0x28, 0x74,
+	0x68, 0x69, 0x73, 0x29, 0x20, 0x3e, 0x20, 0x30, 0x20, 0x3f, 0x20, 0x74, 0x68, 0x69, 0x73, 0x2e,
+	0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x28, 0x27, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d,
+	0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x28, 0x3f, 0x3a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30,
+	0x2d, 0x39, 0x5f, 0x2d, 0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39,
+	0x5d, 0x29, 0x3f, 0x24, 0x27, 0x29, 0x20, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0xc8, 0x01, 0x00,
+	0x72, 0x03, 0x18, 0xfd, 0x01, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x33, 0x0a, 0x08,
+	0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x64, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x17,
+	0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
+	0x4d, 0x75, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74,
+	0x61, 0x12, 0x54, 0x0a, 0x18, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x5f, 0x75, 0x70,
+	0x64, 0x61, 0x74, 0x65, 0x5f, 0x62, 0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x18, 0x65, 0x20,
+	0x01, 0x28, 0x0e, 0x32, 0x1a, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74,
+	0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x45, 0x6e, 0x75, 0x6d, 0x52,
+	0x16, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x42,
+	0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x22, 0x5e, 0x0a, 0x25, 0x55, 0x70, 0x64, 0x61, 0x74,
+	0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65,
+	0x12, 0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65,
+	0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x40, 0x0a, 0x24, 0x44, 0x65, 0x6c, 0x65, 0x74,
+	0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12,
+	0x18, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05,
+	0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x02, 0x69, 0x64, 0x22, 0x5e, 0x0a, 0x25, 0x44, 0x65, 0x6c,
+	0x65, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e,
+	0x73, 0x65, 0x12, 0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73,
+	0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c,
+	0x75, 0x65, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x87, 0x02, 0x0a, 0x1e, 0x63, 0x6f,
+	0x6d, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x72, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x42, 0x18, 0x52, 0x65,
+	0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62,
+	0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x74, 0x64, 0x66, 0x2f, 0x70, 0x6c, 0x61,
+	0x74, 0x66, 0x6f, 0x72, 0x6d, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x2f, 0x67,
+	0x6f, 0x2f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2f, 0x72, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0xa2, 0x02, 0x03, 0x50,
+	0x52, 0x58, 0xaa, 0x02, 0x1a, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69,
+	0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0xca,
+	0x02, 0x1a, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5c, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0xe2, 0x02, 0x26, 0x50,
+	0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5c, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64,
+	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74,
+	0x61, 0x64, 0x61, 0x74, 0x61, 0xea, 0x02, 0x1b, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x3a, 0x3a,
+	0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x73, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+}
+
+var (
+	file_policy_registeredresources_registered_resources_proto_rawDescOnce sync.Once
+	file_policy_registeredresources_registered_resources_proto_rawDescData = file_policy_registeredresources_registered_resources_proto_rawDesc
+)
+
+func file_policy_registeredresources_registered_resources_proto_rawDescGZIP() []byte {
+	file_policy_registeredresources_registered_resources_proto_rawDescOnce.Do(func() {
+		file_policy_registeredresources_registered_resources_proto_rawDescData = protoimpl.X.CompressGZIP(file_policy_registeredresources_registered_resources_proto_rawDescData)
+	})
+	return file_policy_registeredresources_registered_resources_proto_rawDescData
+}
+
+var file_policy_registeredresources_registered_resources_proto_msgTypes = make([]protoimpl.MessageInfo, 20)
+var file_policy_registeredresources_registered_resources_proto_goTypes = []interface{}{
+	(*CreateRegisteredResourceRequest)(nil),       // 0: policy.registeredresources.CreateRegisteredResourceRequest
+	(*CreateRegisteredResourceResponse)(nil),      // 1: policy.registeredresources.CreateRegisteredResourceResponse
+	(*GetRegisteredResourceRequest)(nil),          // 2: policy.registeredresources.GetRegisteredResourceRequest
+	(*GetRegisteredResourceResponse)(nil),         // 3: policy.registeredresources.GetRegisteredResourceResponse
+	(*ListRegisteredResourcesRequest)(nil),        // 4: policy.registeredresources.ListRegisteredResourcesRequest
+	(*ListRegisteredResourcesResponse)(nil),       // 5: policy.registeredresources.ListRegisteredResourcesResponse
+	(*UpdateRegisteredResourceRequest)(nil),       // 6: policy.registeredresources.UpdateRegisteredResourceRequest
+	(*UpdateRegisteredResourceResponse)(nil),      // 7: policy.registeredresources.UpdateRegisteredResourceResponse
+	(*DeleteRegisteredResourceRequest)(nil),       // 8: policy.registeredresources.DeleteRegisteredResourceRequest
+	(*DeleteRegisteredResourceResponse)(nil),      // 9: policy.registeredresources.DeleteRegisteredResourceResponse
+	(*CreateRegisteredResourceValueRequest)(nil),  // 10: policy.registeredresources.CreateRegisteredResourceValueRequest
+	(*CreateRegisteredResourceValueResponse)(nil), // 11: policy.registeredresources.CreateRegisteredResourceValueResponse
+	(*GetRegisteredResourceValueRequest)(nil),     // 12: policy.registeredresources.GetRegisteredResourceValueRequest
+	(*GetRegisteredResourceValueResponse)(nil),    // 13: policy.registeredresources.GetRegisteredResourceValueResponse
+	(*ListRegisteredResourceValuesRequest)(nil),   // 14: policy.registeredresources.ListRegisteredResourceValuesRequest
+	(*ListRegisteredResourceValuesResponse)(nil),  // 15: policy.registeredresources.ListRegisteredResourceValuesResponse
+	(*UpdateRegisteredResourceValueRequest)(nil),  // 16: policy.registeredresources.UpdateRegisteredResourceValueRequest
+	(*UpdateRegisteredResourceValueResponse)(nil), // 17: policy.registeredresources.UpdateRegisteredResourceValueResponse
+	(*DeleteRegisteredResourceValueRequest)(nil),  // 18: policy.registeredresources.DeleteRegisteredResourceValueRequest
+	(*DeleteRegisteredResourceValueResponse)(nil), // 19: policy.registeredresources.DeleteRegisteredResourceValueResponse
+	(*common.MetadataMutable)(nil),                // 20: common.MetadataMutable
+	(*policy.RegisteredResource)(nil),             // 21: policy.RegisteredResource
+	(*policy.PageRequest)(nil),                    // 22: policy.PageRequest
+	(*policy.PageResponse)(nil),                   // 23: policy.PageResponse
+	(common.MetadataUpdateEnum)(0),                // 24: common.MetadataUpdateEnum
+	(*policy.RegisteredResourceValue)(nil),        // 25: policy.RegisteredResourceValue
+}
+var file_policy_registeredresources_registered_resources_proto_depIdxs = []int32{
+	20, // 0: policy.registeredresources.CreateRegisteredResourceRequest.metadata:type_name -> common.MetadataMutable
+	21, // 1: policy.registeredresources.CreateRegisteredResourceResponse.resource:type_name -> policy.RegisteredResource
+	21, // 2: policy.registeredresources.GetRegisteredResourceResponse.group:type_name -> policy.RegisteredResource
+	22, // 3: policy.registeredresources.ListRegisteredResourcesRequest.pagination:type_name -> policy.PageRequest
+	21, // 4: policy.registeredresources.ListRegisteredResourcesResponse.resources:type_name -> policy.RegisteredResource
+	23, // 5: policy.registeredresources.ListRegisteredResourcesResponse.pagination:type_name -> policy.PageResponse
+	20, // 6: policy.registeredresources.UpdateRegisteredResourceRequest.metadata:type_name -> common.MetadataMutable
+	24, // 7: policy.registeredresources.UpdateRegisteredResourceRequest.metadata_update_behavior:type_name -> common.MetadataUpdateEnum
+	21, // 8: policy.registeredresources.UpdateRegisteredResourceResponse.resource:type_name -> policy.RegisteredResource
+	21, // 9: policy.registeredresources.DeleteRegisteredResourceResponse.resource:type_name -> policy.RegisteredResource
+	20, // 10: policy.registeredresources.CreateRegisteredResourceValueRequest.metadata:type_name -> common.MetadataMutable
+	25, // 11: policy.registeredresources.CreateRegisteredResourceValueResponse.value:type_name -> policy.RegisteredResourceValue
+	25, // 12: policy.registeredresources.GetRegisteredResourceValueResponse.value:type_name -> policy.RegisteredResourceValue
+	22, // 13: policy.registeredresources.ListRegisteredResourceValuesRequest.pagination:type_name -> policy.PageRequest
+	25, // 14: policy.registeredresources.ListRegisteredResourceValuesResponse.values:type_name -> policy.RegisteredResourceValue
+	23, // 15: policy.registeredresources.ListRegisteredResourceValuesResponse.pagination:type_name -> policy.PageResponse
+	20, // 16: policy.registeredresources.UpdateRegisteredResourceValueRequest.metadata:type_name -> common.MetadataMutable
+	24, // 17: policy.registeredresources.UpdateRegisteredResourceValueRequest.metadata_update_behavior:type_name -> common.MetadataUpdateEnum
+	25, // 18: policy.registeredresources.UpdateRegisteredResourceValueResponse.value:type_name -> policy.RegisteredResourceValue
+	25, // 19: policy.registeredresources.DeleteRegisteredResourceValueResponse.value:type_name -> policy.RegisteredResourceValue
+	20, // [20:20] is the sub-list for method output_type
+	20, // [20:20] is the sub-list for method input_type
+	20, // [20:20] is the sub-list for extension type_name
+	20, // [20:20] is the sub-list for extension extendee
+	0,  // [0:20] is the sub-list for field type_name
+}
+
+func init() { file_policy_registeredresources_registered_resources_proto_init() }
+func file_policy_registeredresources_registered_resources_proto_init() {
+	if File_policy_registeredresources_registered_resources_proto != nil {
+		return
+	}
+	if !protoimpl.UnsafeEnabled {
+		file_policy_registeredresources_registered_resources_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CreateRegisteredResourceRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[1].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CreateRegisteredResourceResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[2].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*GetRegisteredResourceRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[3].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*GetRegisteredResourceResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[4].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*ListRegisteredResourcesRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[5].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*ListRegisteredResourcesResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[6].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*UpdateRegisteredResourceRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[7].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*UpdateRegisteredResourceResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[8].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*DeleteRegisteredResourceRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[9].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*DeleteRegisteredResourceResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[10].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CreateRegisteredResourceValueRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[11].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CreateRegisteredResourceValueResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[12].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*GetRegisteredResourceValueRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[13].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*GetRegisteredResourceValueResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[14].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*ListRegisteredResourceValuesRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[15].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*ListRegisteredResourceValuesResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[16].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*UpdateRegisteredResourceValueRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[17].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*UpdateRegisteredResourceValueResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[18].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*DeleteRegisteredResourceValueRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_policy_registeredresources_registered_resources_proto_msgTypes[19].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*DeleteRegisteredResourceValueResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+	}
+	file_policy_registeredresources_registered_resources_proto_msgTypes[2].OneofWrappers = []interface{}{
+		(*GetRegisteredResourceRequest_ResourceId)(nil),
+		(*GetRegisteredResourceRequest_Fqn)(nil),
+	}
+	file_policy_registeredresources_registered_resources_proto_msgTypes[12].OneofWrappers = []interface{}{
+		(*GetRegisteredResourceValueRequest_ValueId)(nil),
+		(*GetRegisteredResourceValueRequest_Fqn)(nil),
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: file_policy_registeredresources_registered_resources_proto_rawDesc,
+			NumEnums:      0,
+			NumMessages:   20,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_policy_registeredresources_registered_resources_proto_goTypes,
+		DependencyIndexes: file_policy_registeredresources_registered_resources_proto_depIdxs,
+		MessageInfos:      file_policy_registeredresources_registered_resources_proto_msgTypes,
+	}.Build()
+	File_policy_registeredresources_registered_resources_proto = out.File
+	file_policy_registeredresources_registered_resources_proto_rawDesc = nil
+	file_policy_registeredresources_registered_resources_proto_goTypes = nil
+	file_policy_registeredresources_registered_resources_proto_depIdxs = nil
+}
diff --git a/service/policy/objects.proto b/service/policy/objects.proto
index 3d8e127c8d..70f8d97a63 100644
--- a/service/policy/objects.proto
+++ b/service/policy/objects.proto
@@ -385,3 +385,25 @@ message PublicKey {
     KasPublicKeySet cached = 3;
   }
 }
+
+message RegisteredResource {
+  string id = 1;
+
+  string name = 2;
+
+  repeated RegisteredResourceValue values = 3;
+
+  // Common metadata
+  common.Metadata metadata = 100;
+}
+
+message RegisteredResourceValue {
+  string id = 1;
+
+  string value = 2;
+
+  RegisteredResource resource = 3;
+
+  // Common metadata
+  common.Metadata metadata = 100;
+}
diff --git a/service/policy/registeredresources/registered_resources.proto b/service/policy/registeredresources/registered_resources.proto
new file mode 100644
index 0000000000..0e2bc01807
--- /dev/null
+++ b/service/policy/registeredresources/registered_resources.proto
@@ -0,0 +1,225 @@
+syntax = "proto3";
+
+package policy.registeredresources;
+
+import "buf/validate/validate.proto";
+
+import "common/common.proto";
+import "policy/objects.proto";
+import "policy/selectors.proto";
+
+///
+/// Registered Resource
+///
+
+message CreateRegisteredResourceRequest {
+  // Required
+  string name = 1 [
+    (buf.validate.field).required = true,
+    (buf.validate.field).string.max_len = 253,
+    (buf.validate.field).cel = {
+      id: "rr_name_format",
+      message: "Registered Resource Name must be an alphanumeric string, allowing hyphens and underscores but not as the first or last character. The stored name will be normalized to lower case.",
+      expression: "this.matches('^[a-zA-Z0-9](?:[a-zA-Z0-9_-]*[a-zA-Z0-9])?$')"
+    }
+  ];
+
+  // Optional 
+  // Registered Resource Values (when provided) must be alphanumeric strings, allowing hyphens and underscores but not as the first or last character.
+  // The stored value will be normalized to lower case.
+  repeated string values = 2 [
+    (buf.validate.field).repeated = {
+      min_items: 0,
+      unique: true,
+      items: {
+        string: 
+          {
+            max_len: 253,
+            pattern: "^[a-zA-Z0-9](?:[a-zA-Z0-9_-]*[a-zA-Z0-9])?$"
+          }
+      },
+    }
+  ];
+
+  // Optional
+  // Common metadata
+  common.MetadataMutable metadata = 100;
+}
+message CreateRegisteredResourceResponse {
+  policy.RegisteredResource resource = 1;
+}
+
+message GetRegisteredResourceRequest {
+  oneof identifier {
+    option (buf.validate.oneof).required = true;
+
+    string resource_id = 1 [
+      (buf.validate.field).string.uuid = true
+    ];
+
+    string fqn = 2 [
+      (buf.validate.field).string = {
+        min_len : 1
+        uri : true
+      }
+    ];
+  }
+}
+message GetRegisteredResourceResponse {
+  policy.RegisteredResource group = 1;
+}
+
+message ListRegisteredResourcesRequest {
+  // Optional
+  policy.PageRequest pagination = 10;
+}
+message ListRegisteredResourcesResponse {
+  repeated policy.RegisteredResource resources = 1;
+
+  policy.PageResponse pagination = 10;
+}
+
+message UpdateRegisteredResourceRequest {
+  // Required
+  string id = 1 [
+    (buf.validate.field).string.uuid = true
+  ];
+
+  // Optional
+  string name = 2 [
+    (buf.validate.field).required = false,
+    (buf.validate.field).string.max_len = 253,
+    (buf.validate.field).cel = {
+      id: "rr_name_format",
+      message: "Registered Resource Name must be an alphanumeric string, allowing hyphens and underscores but not as the first or last character. The stored name will be normalized to lower case.",
+      expression: "size(this) > 0 ? this.matches('^[a-zA-Z0-9](?:[a-zA-Z0-9_-]*[a-zA-Z0-9])?$') : true"
+    }
+  ];
+
+  // Optional
+  // Common metadata
+  common.MetadataMutable metadata = 100;
+  common.MetadataUpdateEnum metadata_update_behavior = 101;
+}
+message UpdateRegisteredResourceResponse {
+  policy.RegisteredResource resource = 1;
+}
+
+message DeleteRegisteredResourceRequest {
+  // Required
+  string id = 1 [
+    (buf.validate.field).string.uuid = true
+  ];
+}
+message DeleteRegisteredResourceResponse {
+  policy.RegisteredResource resource = 1;
+}
+
+///
+/// Registered Resource Values
+///
+
+message CreateRegisteredResourceValueRequest {
+  // Required
+  string resource_id = 1 [
+    (buf.validate.field).string.uuid = true
+  ];
+
+  // Required
+  string value = 2 [
+    (buf.validate.field).required = true,
+    (buf.validate.field).string.max_len = 253,
+    (buf.validate.field).cel = {
+      id: "rr_value_format",
+      message: "Registered Resource Value must be an alphanumeric string, allowing hyphens and underscores but not as the first or last character. The stored value will be normalized to lower case.",
+      expression: "this.matches('^[a-zA-Z0-9](?:[a-zA-Z0-9_-]*[a-zA-Z0-9])?$')"
+    }
+  ];
+  
+  // Optional
+  // Common metadata
+  common.MetadataMutable metadata = 100;
+}
+message CreateRegisteredResourceValueResponse {
+  policy.RegisteredResourceValue value = 1;
+}
+
+message GetRegisteredResourceValueRequest {
+  oneof identifier {
+    option (buf.validate.oneof).required = true;
+
+    string value_id = 1 [
+      (buf.validate.field).string.uuid = true
+    ];
+
+    string fqn = 2 [
+      (buf.validate.field).string = {
+        min_len : 1
+        uri : true
+      }
+    ];
+  }
+}
+message GetRegisteredResourceValueResponse {
+  policy.RegisteredResourceValue value = 1;
+}
+
+message ListRegisteredResourceValuesRequest {
+  // Optional
+  string resource_id = 1 [(buf.validate.field).cel = {
+    id: "optional_uuid_format",
+    message: "Optional field must be a valid UUID",
+    expression: "size(this) == 0 || this.matches('[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}')"
+  }];
+  
+  // Optional
+  policy.PageRequest pagination = 10;
+}
+message ListRegisteredResourceValuesResponse {
+  repeated policy.RegisteredResourceValue values = 1;
+
+  policy.PageResponse pagination = 10;
+}
+
+message UpdateRegisteredResourceValueRequest {
+  // Required
+  string id = 1 [
+    (buf.validate.field).string.uuid = true
+  ];
+
+  // Optional
+  string value = 2 [
+    (buf.validate.field).required = false,
+    (buf.validate.field).string.max_len = 253,
+    (buf.validate.field).cel = {
+      id: "rr_value_format",
+      message: "Registered Resource Value must be an alphanumeric string, allowing hyphens and underscores but not as the first or last character. The stored value will be normalized to lower case.",
+      expression: "size(this) > 0 ? this.matches('^[a-zA-Z0-9](?:[a-zA-Z0-9_-]*[a-zA-Z0-9])?$') : true"
+    }
+  ];
+
+  // Optional
+  // Common metadata
+  common.MetadataMutable metadata = 100;
+  common.MetadataUpdateEnum metadata_update_behavior = 101;
+}
+message UpdateRegisteredResourceValueResponse {
+  policy.RegisteredResourceValue value = 1;
+}
+
+message DeleteRegisteredResourceValueRequest {
+  // Required
+  string id = 1 [
+    (buf.validate.field).string.uuid = true
+  ];
+}
+message DeleteRegisteredResourceValueResponse {
+  policy.RegisteredResourceValue value = 1;
+}
+
+
+///
+/// Registered Resources Service
+///
+
+// TODO: Add service definition for Registered Resources operations

From d47cdc4470ee98aa088e3d20c2f8397e3ae86002 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Tue, 15 Apr 2025 09:07:47 -0600
Subject: [PATCH 02/19] fix missed rename

---
 docs/grpc/index.html                          |   2 +-
 .../registered_resources.pb.go                | 401 +++++++++---------
 .../registered_resources.proto                |   2 +-
 3 files changed, 203 insertions(+), 202 deletions(-)

diff --git a/docs/grpc/index.html b/docs/grpc/index.html
index 5f1342529e..54d8c735a8 100644
--- a/docs/grpc/index.html
+++ b/docs/grpc/index.html
@@ -9222,7 +9222,7 @@ <h3 id="policy.registeredresources.GetRegisteredResourceResponse">GetRegisteredR
             <tbody>
               
                 <tr>
-                  <td>group</td>
+                  <td>resource</td>
                   <td><a href="#policy.RegisteredResource">policy.RegisteredResource</a></td>
                   <td></td>
                   <td><p> </p></td>
diff --git a/protocol/go/policy/registeredresources/registered_resources.pb.go b/protocol/go/policy/registeredresources/registered_resources.pb.go
index 09250a6cf6..18f7bf23de 100644
--- a/protocol/go/policy/registeredresources/registered_resources.pb.go
+++ b/protocol/go/policy/registeredresources/registered_resources.pb.go
@@ -225,7 +225,7 @@ type GetRegisteredResourceResponse struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	Group *policy.RegisteredResource `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
+	Resource *policy.RegisteredResource `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
 }
 
 func (x *GetRegisteredResourceResponse) Reset() {
@@ -260,9 +260,9 @@ func (*GetRegisteredResourceResponse) Descriptor() ([]byte, []int) {
 	return file_policy_registeredresources_registered_resources_proto_rawDescGZIP(), []int{3}
 }
 
-func (x *GetRegisteredResourceResponse) GetGroup() *policy.RegisteredResource {
+func (x *GetRegisteredResourceResponse) GetResource() *policy.RegisteredResource {
 	if x != nil {
-		return x.Group
+		return x.Resource
 	}
 	return nil
 }
@@ -1215,35 +1215,85 @@ var file_policy_registeredresources_registered_resources_proto_rawDesc = []byte{
 	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49, 0x64, 0x12, 0x1e, 0x0a, 0x03, 0x66, 0x71, 0x6e,
 	0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0a, 0xba, 0x48, 0x07, 0x72, 0x05, 0x10, 0x01, 0x88,
 	0x01, 0x01, 0x48, 0x00, 0x52, 0x03, 0x66, 0x71, 0x6e, 0x42, 0x13, 0x0a, 0x0a, 0x69, 0x64, 0x65,
-	0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x05, 0xba, 0x48, 0x02, 0x08, 0x01, 0x22, 0x51,
+	0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x05, 0xba, 0x48, 0x02, 0x08, 0x01, 0x22, 0x57,
 	0x0a, 0x1d, 0x47, 0x65, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52,
 	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12,
-	0x30, 0x0a, 0x05, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a,
-	0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
-	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x05, 0x67, 0x72, 0x6f, 0x75,
-	0x70, 0x22, 0x55, 0x0a, 0x1e, 0x4c, 0x69, 0x73, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
-	0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75,
-	0x65, 0x73, 0x74, 0x12, 0x33, 0x0a, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f,
-	0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79,
-	0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x52, 0x0a, 0x70, 0x61,
-	0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x91, 0x01, 0x0a, 0x1f, 0x4c, 0x69, 0x73,
-	0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x38, 0x0a, 0x09,
-	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x1a, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
-	0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x09, 0x72, 0x65, 0x73,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x34, 0x0a, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61,
-	0x74, 0x69, 0x6f, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x70, 0x6f, 0x6c,
-	0x69, 0x63, 0x79, 0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65,
-	0x52, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x89, 0x04, 0x0a,
-	0x1f, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65,
-	0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
-	0x12, 0x18, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48,
-	0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x02, 0x69, 0x64, 0x12, 0xc0, 0x02, 0x0a, 0x04, 0x6e,
-	0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0xab, 0x02, 0xba, 0x48, 0xa7, 0x02,
-	0xba, 0x01, 0x9b, 0x02, 0x0a, 0x0e, 0x72, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x5f, 0x66, 0x6f,
-	0x72, 0x6d, 0x61, 0x74, 0x12, 0xb3, 0x01, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65,
-	0x64, 0x20, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x20, 0x4e, 0x61, 0x6d, 0x65, 0x20,
+	0x36, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73,
+	0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x08, 0x72,
+	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x22, 0x55, 0x0a, 0x1e, 0x4c, 0x69, 0x73, 0x74, 0x52,
+	0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x33, 0x0a, 0x0a, 0x70, 0x61, 0x67,
+	0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e,
+	0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65,
+	0x73, 0x74, 0x52, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x91,
+	0x01, 0x0a, 0x1f, 0x4c, 0x69, 0x73, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65,
+	0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e,
+	0x73, 0x65, 0x12, 0x38, 0x0a, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x18,
+	0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52,
+	0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x52, 0x09, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x12, 0x34, 0x0a, 0x0a,
+	0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x14, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65,
+	0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x52, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69,
+	0x6f, 0x6e, 0x22, 0x89, 0x04, 0x0a, 0x1f, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67,
+	0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52,
+	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x18, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x02, 0x69, 0x64,
+	0x12, 0xc0, 0x02, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42,
+	0xab, 0x02, 0xba, 0x48, 0xa7, 0x02, 0xba, 0x01, 0x9b, 0x02, 0x0a, 0x0e, 0x72, 0x72, 0x5f, 0x6e,
+	0x61, 0x6d, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0xb3, 0x01, 0x52, 0x65, 0x67,
+	0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x20, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x20, 0x4e, 0x61, 0x6d, 0x65, 0x20, 0x6d, 0x75, 0x73, 0x74, 0x20, 0x62, 0x65, 0x20, 0x61, 0x6e,
+	0x20, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x6e, 0x75, 0x6d, 0x65, 0x72, 0x69, 0x63, 0x20, 0x73, 0x74,
+	0x72, 0x69, 0x6e, 0x67, 0x2c, 0x20, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x68,
+	0x79, 0x70, 0x68, 0x65, 0x6e, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x75, 0x6e, 0x64, 0x65, 0x72,
+	0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x20, 0x62, 0x75, 0x74, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x61,
+	0x73, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x20, 0x6f, 0x72, 0x20, 0x6c,
+	0x61, 0x73, 0x74, 0x20, 0x63, 0x68, 0x61, 0x72, 0x61, 0x63, 0x74, 0x65, 0x72, 0x2e, 0x20, 0x54,
+	0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64, 0x20, 0x6e, 0x61, 0x6d, 0x65, 0x20, 0x77,
+	0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6e, 0x6f, 0x72, 0x6d, 0x61, 0x6c, 0x69, 0x7a, 0x65,
+	0x64, 0x20, 0x74, 0x6f, 0x20, 0x6c, 0x6f, 0x77, 0x65, 0x72, 0x20, 0x63, 0x61, 0x73, 0x65, 0x2e,
+	0x1a, 0x53, 0x73, 0x69, 0x7a, 0x65, 0x28, 0x74, 0x68, 0x69, 0x73, 0x29, 0x20, 0x3e, 0x20, 0x30,
+	0x20, 0x3f, 0x20, 0x74, 0x68, 0x69, 0x73, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x28,
+	0x27, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x28, 0x3f, 0x3a,
+	0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5f, 0x2d, 0x5d, 0x2a, 0x5b, 0x61,
+	0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x29, 0x3f, 0x24, 0x27, 0x29, 0x20, 0x3a,
+	0x20, 0x74, 0x72, 0x75, 0x65, 0xc8, 0x01, 0x00, 0x72, 0x03, 0x18, 0xfd, 0x01, 0x52, 0x04, 0x6e,
+	0x61, 0x6d, 0x65, 0x12, 0x33, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18,
+	0x64, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d,
+	0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x4d, 0x75, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x08,
+	0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x54, 0x0a, 0x18, 0x6d, 0x65, 0x74, 0x61,
+	0x64, 0x61, 0x74, 0x61, 0x5f, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x5f, 0x62, 0x65, 0x68, 0x61,
+	0x76, 0x69, 0x6f, 0x72, 0x18, 0x65, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x1a, 0x2e, 0x63, 0x6f, 0x6d,
+	0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61,
+	0x74, 0x65, 0x45, 0x6e, 0x75, 0x6d, 0x52, 0x16, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
+	0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x42, 0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x22, 0x5a,
+	0x0a, 0x20, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
+	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e,
+	0x73, 0x65, 0x12, 0x36, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65,
+	0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x52, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x22, 0x3b, 0x0a, 0x1f, 0x44, 0x65,
+	0x6c, 0x65, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65,
+	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x18, 0x0a,
+	0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03,
+	0xb0, 0x01, 0x01, 0x52, 0x02, 0x69, 0x64, 0x22, 0x5a, 0x0a, 0x20, 0x44, 0x65, 0x6c, 0x65, 0x74,
+	0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x36, 0x0a, 0x08, 0x72,
+	0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e,
+	0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65,
+	0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x22, 0xb6, 0x03, 0x0a, 0x24, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x52, 0x65,
+	0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x29, 0x0a, 0x0b,
+	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x0a, 0x72, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x49, 0x64, 0x12, 0xad, 0x02, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75,
+	0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x96, 0x02, 0xba, 0x48, 0x92, 0x02, 0xba, 0x01,
+	0x86, 0x02, 0x0a, 0x0f, 0x72, 0x72, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f, 0x66, 0x6f, 0x72,
+	0x6d, 0x61, 0x74, 0x12, 0xb5, 0x01, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64,
+	0x20, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x20, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x20,
 	0x6d, 0x75, 0x73, 0x74, 0x20, 0x62, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x6c, 0x70, 0x68, 0x61,
 	0x6e, 0x75, 0x6d, 0x65, 0x72, 0x69, 0x63, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x2c, 0x20,
 	0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x68, 0x79, 0x70, 0x68, 0x65, 0x6e, 0x73,
@@ -1251,182 +1301,133 @@ var file_policy_registeredresources_registered_resources_proto_rawDesc = []byte{
 	0x20, 0x62, 0x75, 0x74, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20,
 	0x66, 0x69, 0x72, 0x73, 0x74, 0x20, 0x6f, 0x72, 0x20, 0x6c, 0x61, 0x73, 0x74, 0x20, 0x63, 0x68,
 	0x61, 0x72, 0x61, 0x63, 0x74, 0x65, 0x72, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f,
-	0x72, 0x65, 0x64, 0x20, 0x6e, 0x61, 0x6d, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65,
-	0x20, 0x6e, 0x6f, 0x72, 0x6d, 0x61, 0x6c, 0x69, 0x7a, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x6c,
-	0x6f, 0x77, 0x65, 0x72, 0x20, 0x63, 0x61, 0x73, 0x65, 0x2e, 0x1a, 0x53, 0x73, 0x69, 0x7a, 0x65,
-	0x28, 0x74, 0x68, 0x69, 0x73, 0x29, 0x20, 0x3e, 0x20, 0x30, 0x20, 0x3f, 0x20, 0x74, 0x68, 0x69,
+	0x72, 0x65, 0x64, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62,
+	0x65, 0x20, 0x6e, 0x6f, 0x72, 0x6d, 0x61, 0x6c, 0x69, 0x7a, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20,
+	0x6c, 0x6f, 0x77, 0x65, 0x72, 0x20, 0x63, 0x61, 0x73, 0x65, 0x2e, 0x1a, 0x3b, 0x74, 0x68, 0x69,
 	0x73, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x28, 0x27, 0x5e, 0x5b, 0x61, 0x2d, 0x7a,
 	0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x28, 0x3f, 0x3a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d,
 	0x5a, 0x30, 0x2d, 0x39, 0x5f, 0x2d, 0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30,
-	0x2d, 0x39, 0x5d, 0x29, 0x3f, 0x24, 0x27, 0x29, 0x20, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0xc8,
-	0x01, 0x00, 0x72, 0x03, 0x18, 0xfd, 0x01, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x33, 0x0a,
-	0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x64, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x17, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74,
-	0x61, 0x4d, 0x75, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61,
-	0x74, 0x61, 0x12, 0x54, 0x0a, 0x18, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x5f, 0x75,
-	0x70, 0x64, 0x61, 0x74, 0x65, 0x5f, 0x62, 0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x18, 0x65,
-	0x20, 0x01, 0x28, 0x0e, 0x32, 0x1a, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65,
-	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x45, 0x6e, 0x75, 0x6d,
-	0x52, 0x16, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65,
-	0x42, 0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x22, 0x5a, 0x0a, 0x20, 0x55, 0x70, 0x64, 0x61,
-	0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x36, 0x0a, 0x08,
-	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a,
-	0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
-	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x22, 0x3b, 0x0a, 0x1f, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x52, 0x65,
+	0x2d, 0x39, 0x5d, 0x29, 0x3f, 0x24, 0x27, 0x29, 0xc8, 0x01, 0x01, 0x72, 0x03, 0x18, 0xfd, 0x01,
+	0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x33, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64,
+	0x61, 0x74, 0x61, 0x18, 0x64, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x63, 0x6f, 0x6d, 0x6d,
+	0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x4d, 0x75, 0x74, 0x61, 0x62,
+	0x6c, 0x65, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x22, 0x5e, 0x0a, 0x25,
+	0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64,
+	0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73,
+	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65,
 	0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
-	0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x18, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20,
-	0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x02, 0x69,
-	0x64, 0x22, 0x5a, 0x0a, 0x20, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73,
-	0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x52, 0x65, 0x73,
-	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x36, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
-	0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79,
-	0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x52, 0x08, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x22, 0xb6, 0x03,
-	0x0a, 0x24, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
-	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52,
-	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x29, 0x0a, 0x0b, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72,
-	0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05,
-	0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x0a, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49,
-	0x64, 0x12, 0xad, 0x02, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28,
-	0x09, 0x42, 0x96, 0x02, 0xba, 0x48, 0x92, 0x02, 0xba, 0x01, 0x86, 0x02, 0x0a, 0x0f, 0x72, 0x72,
-	0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0xb5, 0x01,
-	0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x20, 0x52, 0x65, 0x73, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x20, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x6d, 0x75, 0x73, 0x74, 0x20, 0x62,
-	0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x6e, 0x75, 0x6d, 0x65, 0x72, 0x69,
-	0x63, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x2c, 0x20, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x69,
-	0x6e, 0x67, 0x20, 0x68, 0x79, 0x70, 0x68, 0x65, 0x6e, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x75,
-	0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x20, 0x62, 0x75, 0x74, 0x20, 0x6e,
-	0x6f, 0x74, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x20,
-	0x6f, 0x72, 0x20, 0x6c, 0x61, 0x73, 0x74, 0x20, 0x63, 0x68, 0x61, 0x72, 0x61, 0x63, 0x74, 0x65,
-	0x72, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64, 0x20, 0x76, 0x61,
-	0x6c, 0x75, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6e, 0x6f, 0x72, 0x6d,
-	0x61, 0x6c, 0x69, 0x7a, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x6c, 0x6f, 0x77, 0x65, 0x72, 0x20,
-	0x63, 0x61, 0x73, 0x65, 0x2e, 0x1a, 0x3b, 0x74, 0x68, 0x69, 0x73, 0x2e, 0x6d, 0x61, 0x74, 0x63,
-	0x68, 0x65, 0x73, 0x28, 0x27, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39,
-	0x5d, 0x28, 0x3f, 0x3a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5f, 0x2d,
-	0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x29, 0x3f, 0x24,
-	0x27, 0x29, 0xc8, 0x01, 0x01, 0x72, 0x03, 0x18, 0xfd, 0x01, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75,
-	0x65, 0x12, 0x33, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x64, 0x20,
-	0x01, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74,
-	0x61, 0x64, 0x61, 0x74, 0x61, 0x4d, 0x75, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x08, 0x6d, 0x65,
-	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x22, 0x5e, 0x0a, 0x25, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65,
-	0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72,
-	0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12,
-	0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f,
-	0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
-	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52,
-	0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x7f, 0x0a, 0x21, 0x47, 0x65, 0x74, 0x52, 0x65, 0x67,
-	0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56,
-	0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x25, 0x0a, 0x08, 0x76,
-	0x61, 0x6c, 0x75, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba,
-	0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x48, 0x00, 0x52, 0x07, 0x76, 0x61, 0x6c, 0x75, 0x65,
-	0x49, 0x64, 0x12, 0x1e, 0x0a, 0x03, 0x66, 0x71, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42,
-	0x0a, 0xba, 0x48, 0x07, 0x72, 0x05, 0x10, 0x01, 0x88, 0x01, 0x01, 0x48, 0x00, 0x52, 0x03, 0x66,
-	0x71, 0x6e, 0x42, 0x13, 0x0a, 0x0a, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72,
-	0x12, 0x05, 0xba, 0x48, 0x02, 0x08, 0x01, 0x22, 0x5b, 0x0a, 0x22, 0x47, 0x65, 0x74, 0x52, 0x65,
-	0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
-	0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x35, 0x0a,
-	0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70,
-	0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64,
-	0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x05, 0x76,
-	0x61, 0x6c, 0x75, 0x65, 0x22, 0xb2, 0x02, 0x0a, 0x23, 0x4c, 0x69, 0x73, 0x74, 0x52, 0x65, 0x67,
-	0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56,
-	0x61, 0x6c, 0x75, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0xd5, 0x01, 0x0a,
-	0x0b, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x09, 0x42, 0xb3, 0x01, 0xba, 0x48, 0xaf, 0x01, 0xba, 0x01, 0xab, 0x01, 0x0a, 0x14, 0x6f,
-	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x5f, 0x75, 0x75, 0x69, 0x64, 0x5f, 0x66, 0x6f, 0x72,
-	0x6d, 0x61, 0x74, 0x12, 0x23, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x20, 0x66, 0x69,
-	0x65, 0x6c, 0x64, 0x20, 0x6d, 0x75, 0x73, 0x74, 0x20, 0x62, 0x65, 0x20, 0x61, 0x20, 0x76, 0x61,
-	0x6c, 0x69, 0x64, 0x20, 0x55, 0x55, 0x49, 0x44, 0x1a, 0x6e, 0x73, 0x69, 0x7a, 0x65, 0x28, 0x74,
-	0x68, 0x69, 0x73, 0x29, 0x20, 0x3d, 0x3d, 0x20, 0x30, 0x20, 0x7c, 0x7c, 0x20, 0x74, 0x68, 0x69,
-	0x73, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x28, 0x27, 0x5b, 0x30, 0x2d, 0x39, 0x61,
-	0x2d, 0x66, 0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x38, 0x7d, 0x2d, 0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d,
-	0x66, 0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x34, 0x7d, 0x2d, 0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d, 0x66,
-	0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x34, 0x7d, 0x2d, 0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d, 0x66, 0x41,
-	0x2d, 0x46, 0x5d, 0x7b, 0x34, 0x7d, 0x2d, 0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d, 0x66, 0x41, 0x2d,
-	0x46, 0x5d, 0x7b, 0x31, 0x32, 0x7d, 0x27, 0x29, 0x52, 0x0a, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72,
-	0x63, 0x65, 0x49, 0x64, 0x12, 0x33, 0x0a, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69,
-	0x6f, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63,
-	0x79, 0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x52, 0x0a, 0x70,
-	0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x95, 0x01, 0x0a, 0x24, 0x4c, 0x69,
-	0x73, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e,
-	0x73, 0x65, 0x12, 0x37, 0x0a, 0x06, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03,
+	0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x7f, 0x0a, 0x21,
+	0x47, 0x65, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73,
+	0x74, 0x12, 0x25, 0x0a, 0x08, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f, 0x69, 0x64, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x48, 0x00, 0x52,
+	0x07, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x49, 0x64, 0x12, 0x1e, 0x0a, 0x03, 0x66, 0x71, 0x6e, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0a, 0xba, 0x48, 0x07, 0x72, 0x05, 0x10, 0x01, 0x88, 0x01,
+	0x01, 0x48, 0x00, 0x52, 0x03, 0x66, 0x71, 0x6e, 0x42, 0x13, 0x0a, 0x0a, 0x69, 0x64, 0x65, 0x6e,
+	0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x05, 0xba, 0x48, 0x02, 0x08, 0x01, 0x22, 0x5b, 0x0a,
+	0x22, 0x47, 0x65, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65,
+	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f,
+	0x6e, 0x73, 0x65, 0x12, 0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01,
 	0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69,
 	0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61,
-	0x6c, 0x75, 0x65, 0x52, 0x06, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x34, 0x0a, 0x0a, 0x70,
-	0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x14, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x73,
-	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x52, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f,
-	0x6e, 0x22, 0x93, 0x04, 0x0a, 0x24, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69,
-	0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61,
-	0x6c, 0x75, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x18, 0x0a, 0x02, 0x69, 0x64,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01,
-	0x52, 0x02, 0x69, 0x64, 0x12, 0xc5, 0x02, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02,
-	0x20, 0x01, 0x28, 0x09, 0x42, 0xae, 0x02, 0xba, 0x48, 0xaa, 0x02, 0xba, 0x01, 0x9e, 0x02, 0x0a,
-	0x0f, 0x72, 0x72, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74,
-	0x12, 0xb5, 0x01, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x20, 0x52, 0x65,
-	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x20, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x6d, 0x75, 0x73,
-	0x74, 0x20, 0x62, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x6e, 0x75, 0x6d,
-	0x65, 0x72, 0x69, 0x63, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x2c, 0x20, 0x61, 0x6c, 0x6c,
-	0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x68, 0x79, 0x70, 0x68, 0x65, 0x6e, 0x73, 0x20, 0x61, 0x6e,
-	0x64, 0x20, 0x75, 0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x20, 0x62, 0x75,
-	0x74, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x61, 0x73, 0x20, 0x74, 0x68, 0x65, 0x20, 0x66, 0x69, 0x72,
-	0x73, 0x74, 0x20, 0x6f, 0x72, 0x20, 0x6c, 0x61, 0x73, 0x74, 0x20, 0x63, 0x68, 0x61, 0x72, 0x61,
-	0x63, 0x74, 0x65, 0x72, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x64,
-	0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x77, 0x69, 0x6c, 0x6c, 0x20, 0x62, 0x65, 0x20, 0x6e,
-	0x6f, 0x72, 0x6d, 0x61, 0x6c, 0x69, 0x7a, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20, 0x6c, 0x6f, 0x77,
-	0x65, 0x72, 0x20, 0x63, 0x61, 0x73, 0x65, 0x2e, 0x1a, 0x53, 0x73, 0x69, 0x7a, 0x65, 0x28, 0x74,
-	0x68, 0x69, 0x73, 0x29, 0x20, 0x3e, 0x20, 0x30, 0x20, 0x3f, 0x20, 0x74, 0x68, 0x69, 0x73, 0x2e,
-	0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x28, 0x27, 0x5e, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d,
-	0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x28, 0x3f, 0x3a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30,
-	0x2d, 0x39, 0x5f, 0x2d, 0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39,
-	0x5d, 0x29, 0x3f, 0x24, 0x27, 0x29, 0x20, 0x3a, 0x20, 0x74, 0x72, 0x75, 0x65, 0xc8, 0x01, 0x00,
-	0x72, 0x03, 0x18, 0xfd, 0x01, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x33, 0x0a, 0x08,
-	0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x64, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x17,
-	0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
-	0x4d, 0x75, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74,
-	0x61, 0x12, 0x54, 0x0a, 0x18, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x5f, 0x75, 0x70,
-	0x64, 0x61, 0x74, 0x65, 0x5f, 0x62, 0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x18, 0x65, 0x20,
-	0x01, 0x28, 0x0e, 0x32, 0x1a, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74,
-	0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x45, 0x6e, 0x75, 0x6d, 0x52,
-	0x16, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x42,
-	0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x22, 0x5e, 0x0a, 0x25, 0x55, 0x70, 0x64, 0x61, 0x74,
-	0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65,
-	0x12, 0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x6c, 0x75, 0x65, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0xb2, 0x02, 0x0a, 0x23, 0x4c,
+	0x69, 0x73, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65,
+	0x73, 0x74, 0x12, 0xd5, 0x01, 0x0a, 0x0b, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f,
+	0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0xb3, 0x01, 0xba, 0x48, 0xaf, 0x01, 0xba,
+	0x01, 0xab, 0x01, 0x0a, 0x14, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x5f, 0x75, 0x75,
+	0x69, 0x64, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x23, 0x4f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x61, 0x6c, 0x20, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x20, 0x6d, 0x75, 0x73, 0x74, 0x20, 0x62,
+	0x65, 0x20, 0x61, 0x20, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x20, 0x55, 0x55, 0x49, 0x44, 0x1a, 0x6e,
+	0x73, 0x69, 0x7a, 0x65, 0x28, 0x74, 0x68, 0x69, 0x73, 0x29, 0x20, 0x3d, 0x3d, 0x20, 0x30, 0x20,
+	0x7c, 0x7c, 0x20, 0x74, 0x68, 0x69, 0x73, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x28,
+	0x27, 0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d, 0x66, 0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x38, 0x7d, 0x2d,
+	0x5b, 0x30, 0x2d, 0x39, 0x61, 0x2d, 0x66, 0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x34, 0x7d, 0x2d, 0x5b,
+	0x30, 0x2d, 0x39, 0x61, 0x2d, 0x66, 0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x34, 0x7d, 0x2d, 0x5b, 0x30,
+	0x2d, 0x39, 0x61, 0x2d, 0x66, 0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x34, 0x7d, 0x2d, 0x5b, 0x30, 0x2d,
+	0x39, 0x61, 0x2d, 0x66, 0x41, 0x2d, 0x46, 0x5d, 0x7b, 0x31, 0x32, 0x7d, 0x27, 0x29, 0x52, 0x0a,
+	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x49, 0x64, 0x12, 0x33, 0x0a, 0x0a, 0x70, 0x61,
+	0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x13,
+	0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x50, 0x61, 0x67, 0x65, 0x52, 0x65, 0x71, 0x75,
+	0x65, 0x73, 0x74, 0x52, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22,
+	0x95, 0x01, 0x0a, 0x24, 0x4c, 0x69, 0x73, 0x74, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72,
+	0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73,
+	0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x37, 0x0a, 0x06, 0x76, 0x61, 0x6c, 0x75,
+	0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63,
+	0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f,
+	0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x06, 0x76, 0x61, 0x6c, 0x75, 0x65,
+	0x73, 0x12, 0x34, 0x0a, 0x0a, 0x70, 0x61, 0x67, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18,
+	0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x50,
+	0x61, 0x67, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x52, 0x0a, 0x70, 0x61, 0x67,
+	0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x93, 0x04, 0x0a, 0x24, 0x55, 0x70, 0x64, 0x61,
+	0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f,
+	0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
+	0x12, 0x18, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48,
+	0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x02, 0x69, 0x64, 0x12, 0xc5, 0x02, 0x0a, 0x05, 0x76,
+	0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0xae, 0x02, 0xba, 0x48, 0xaa,
+	0x02, 0xba, 0x01, 0x9e, 0x02, 0x0a, 0x0f, 0x72, 0x72, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f,
+	0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0xb5, 0x01, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
+	0x72, 0x65, 0x64, 0x20, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x20, 0x56, 0x61, 0x6c,
+	0x75, 0x65, 0x20, 0x6d, 0x75, 0x73, 0x74, 0x20, 0x62, 0x65, 0x20, 0x61, 0x6e, 0x20, 0x61, 0x6c,
+	0x70, 0x68, 0x61, 0x6e, 0x75, 0x6d, 0x65, 0x72, 0x69, 0x63, 0x20, 0x73, 0x74, 0x72, 0x69, 0x6e,
+	0x67, 0x2c, 0x20, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x69, 0x6e, 0x67, 0x20, 0x68, 0x79, 0x70, 0x68,
+	0x65, 0x6e, 0x73, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x75, 0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f,
+	0x72, 0x65, 0x73, 0x20, 0x62, 0x75, 0x74, 0x20, 0x6e, 0x6f, 0x74, 0x20, 0x61, 0x73, 0x20, 0x74,
+	0x68, 0x65, 0x20, 0x66, 0x69, 0x72, 0x73, 0x74, 0x20, 0x6f, 0x72, 0x20, 0x6c, 0x61, 0x73, 0x74,
+	0x20, 0x63, 0x68, 0x61, 0x72, 0x61, 0x63, 0x74, 0x65, 0x72, 0x2e, 0x20, 0x54, 0x68, 0x65, 0x20,
+	0x73, 0x74, 0x6f, 0x72, 0x65, 0x64, 0x20, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x20, 0x77, 0x69, 0x6c,
+	0x6c, 0x20, 0x62, 0x65, 0x20, 0x6e, 0x6f, 0x72, 0x6d, 0x61, 0x6c, 0x69, 0x7a, 0x65, 0x64, 0x20,
+	0x74, 0x6f, 0x20, 0x6c, 0x6f, 0x77, 0x65, 0x72, 0x20, 0x63, 0x61, 0x73, 0x65, 0x2e, 0x1a, 0x53,
+	0x73, 0x69, 0x7a, 0x65, 0x28, 0x74, 0x68, 0x69, 0x73, 0x29, 0x20, 0x3e, 0x20, 0x30, 0x20, 0x3f,
+	0x20, 0x74, 0x68, 0x69, 0x73, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x73, 0x28, 0x27, 0x5e,
+	0x5b, 0x61, 0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x28, 0x3f, 0x3a, 0x5b, 0x61,
+	0x2d, 0x7a, 0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5f, 0x2d, 0x5d, 0x2a, 0x5b, 0x61, 0x2d, 0x7a,
+	0x41, 0x2d, 0x5a, 0x30, 0x2d, 0x39, 0x5d, 0x29, 0x3f, 0x24, 0x27, 0x29, 0x20, 0x3a, 0x20, 0x74,
+	0x72, 0x75, 0x65, 0xc8, 0x01, 0x00, 0x72, 0x03, 0x18, 0xfd, 0x01, 0x52, 0x05, 0x76, 0x61, 0x6c,
+	0x75, 0x65, 0x12, 0x33, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x64,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x17, 0x2e, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x4d, 0x65,
+	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x4d, 0x75, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x52, 0x08, 0x6d,
+	0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x54, 0x0a, 0x18, 0x6d, 0x65, 0x74, 0x61, 0x64,
+	0x61, 0x74, 0x61, 0x5f, 0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x5f, 0x62, 0x65, 0x68, 0x61, 0x76,
+	0x69, 0x6f, 0x72, 0x18, 0x65, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x1a, 0x2e, 0x63, 0x6f, 0x6d, 0x6d,
+	0x6f, 0x6e, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x55, 0x70, 0x64, 0x61, 0x74,
+	0x65, 0x45, 0x6e, 0x75, 0x6d, 0x52, 0x16, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x55,
+	0x70, 0x64, 0x61, 0x74, 0x65, 0x42, 0x65, 0x68, 0x61, 0x76, 0x69, 0x6f, 0x72, 0x22, 0x5e, 0x0a,
+	0x25, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65,
+	0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65,
+	0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52,
+	0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x40, 0x0a,
+	0x24, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65,
+	0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65,
+	0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x18, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x42, 0x08, 0xba, 0x48, 0x05, 0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x02, 0x69, 0x64, 0x22,
+	0x5e, 0x0a, 0x25, 0x44, 0x65, 0x6c, 0x65, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
 	0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65,
-	0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x40, 0x0a, 0x24, 0x44, 0x65, 0x6c, 0x65, 0x74,
-	0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
-	0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12,
-	0x18, 0x0a, 0x02, 0x69, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x08, 0xba, 0x48, 0x05,
-	0x72, 0x03, 0xb0, 0x01, 0x01, 0x52, 0x02, 0x69, 0x64, 0x22, 0x5e, 0x0a, 0x25, 0x44, 0x65, 0x6c,
-	0x65, 0x74, 0x65, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73,
-	0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e,
-	0x73, 0x65, 0x12, 0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
-	0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73,
-	0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x56, 0x61, 0x6c,
-	0x75, 0x65, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x87, 0x02, 0x0a, 0x1e, 0x63, 0x6f,
-	0x6d, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x72, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
-	0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x42, 0x18, 0x52, 0x65,
-	0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65,
-	0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62,
-	0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x74, 0x64, 0x66, 0x2f, 0x70, 0x6c, 0x61,
-	0x74, 0x66, 0x6f, 0x72, 0x6d, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x2f, 0x67,
-	0x6f, 0x2f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2f, 0x72, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
-	0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0xa2, 0x02, 0x03, 0x50,
-	0x52, 0x58, 0xaa, 0x02, 0x1a, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x52, 0x65, 0x67, 0x69,
-	0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0xca,
-	0x02, 0x1a, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5c, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65,
-	0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0xe2, 0x02, 0x26, 0x50,
-	0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5c, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64,
-	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74,
-	0x61, 0x64, 0x61, 0x74, 0x61, 0xea, 0x02, 0x1b, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x3a, 0x3a,
-	0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72,
-	0x63, 0x65, 0x73, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x35, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75,
+	0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79,
+	0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65, 0x73, 0x6f, 0x75,
+	0x72, 0x63, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x42,
+	0x87, 0x02, 0x0a, 0x1e, 0x63, 0x6f, 0x6d, 0x2e, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x72,
+	0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x73, 0x42, 0x18, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x52, 0x65,
+	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42,
+	0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x6f, 0x70, 0x65, 0x6e, 0x74,
+	0x64, 0x66, 0x2f, 0x70, 0x6c, 0x61, 0x74, 0x66, 0x6f, 0x72, 0x6d, 0x2f, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x63, 0x6f, 0x6c, 0x2f, 0x67, 0x6f, 0x2f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2f, 0x72,
+	0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x73, 0xa2, 0x02, 0x03, 0x50, 0x52, 0x58, 0xaa, 0x02, 0x1a, 0x50, 0x6f, 0x6c, 0x69, 0x63,
+	0x79, 0x2e, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f,
+	0x75, 0x72, 0x63, 0x65, 0x73, 0xca, 0x02, 0x1a, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5c, 0x52,
+	0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63,
+	0x65, 0x73, 0xe2, 0x02, 0x26, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5c, 0x52, 0x65, 0x67, 0x69,
+	0x73, 0x74, 0x65, 0x72, 0x65, 0x64, 0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x5c,
+	0x47, 0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0xea, 0x02, 0x1b, 0x50, 0x6f,
+	0x6c, 0x69, 0x63, 0x79, 0x3a, 0x3a, 0x52, 0x65, 0x67, 0x69, 0x73, 0x74, 0x65, 0x72, 0x65, 0x64,
+	0x72, 0x65, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x73, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x33,
 }
 
 var (
@@ -1473,7 +1474,7 @@ var file_policy_registeredresources_registered_resources_proto_goTypes = []inter
 var file_policy_registeredresources_registered_resources_proto_depIdxs = []int32{
 	20, // 0: policy.registeredresources.CreateRegisteredResourceRequest.metadata:type_name -> common.MetadataMutable
 	21, // 1: policy.registeredresources.CreateRegisteredResourceResponse.resource:type_name -> policy.RegisteredResource
-	21, // 2: policy.registeredresources.GetRegisteredResourceResponse.group:type_name -> policy.RegisteredResource
+	21, // 2: policy.registeredresources.GetRegisteredResourceResponse.resource:type_name -> policy.RegisteredResource
 	22, // 3: policy.registeredresources.ListRegisteredResourcesRequest.pagination:type_name -> policy.PageRequest
 	21, // 4: policy.registeredresources.ListRegisteredResourcesResponse.resources:type_name -> policy.RegisteredResource
 	23, // 5: policy.registeredresources.ListRegisteredResourcesResponse.pagination:type_name -> policy.PageResponse
diff --git a/service/policy/registeredresources/registered_resources.proto b/service/policy/registeredresources/registered_resources.proto
index 0e2bc01807..a69816d079 100644
--- a/service/policy/registeredresources/registered_resources.proto
+++ b/service/policy/registeredresources/registered_resources.proto
@@ -66,7 +66,7 @@ message GetRegisteredResourceRequest {
   }
 }
 message GetRegisteredResourceResponse {
-  policy.RegisteredResource group = 1;
+  policy.RegisteredResource resource = 1;
 }
 
 message ListRegisteredResourcesRequest {

From 4c57dfa3b6d59521073bc7430a3b93101ef3dc19 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Tue, 15 Apr 2025 15:08:02 -0600
Subject: [PATCH 03/19] add reg res db client methods except list and initial
 test setup

---
 .../integration/registered_resources_test.go  |  59 ++++
 service/internal/fixtures/fixtures.go         |  48 ++++
 .../internal/fixtures/policy_fixtures.yaml    |  39 +++
 service/policy/db/db.go                       |   2 +-
 service/policy/db/models.go                   |  32 ++-
 service/policy/db/query.sql                   |  68 +++++
 service/policy/db/query.sql.go                | 235 +++++++++++++++-
 service/policy/db/registered_resources.go     | 264 ++++++++++++++++++
 8 files changed, 744 insertions(+), 3 deletions(-)
 create mode 100644 service/integration/registered_resources_test.go
 create mode 100644 service/policy/db/registered_resources.go

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
new file mode 100644
index 0000000000..f5a077002e
--- /dev/null
+++ b/service/integration/registered_resources_test.go
@@ -0,0 +1,59 @@
+package integration
+
+import (
+	"context"
+	"log/slog"
+	"testing"
+
+	"github.com/opentdf/platform/protocol/go/policy/registeredresources"
+	"github.com/opentdf/platform/service/internal/fixtures"
+	"github.com/stretchr/testify/suite"
+)
+
+type RegisteredResourcesSuite struct {
+	suite.Suite
+	f   fixtures.Fixtures
+	db  fixtures.DBInterface
+	ctx context.Context //nolint:containedctx // context is used in the test suite
+}
+
+func (s *RegisteredResourcesSuite) SetupSuite() {
+	slog.Info("setting up db.RegisteredResources test suite")
+	s.ctx = context.Background()
+	c := *Config
+	c.DB.Schema = "test_opentdf_registered_resources"
+	s.db = fixtures.NewDBInterface(c)
+	s.f = fixtures.NewFixture(s.db)
+	s.f.Provision()
+}
+
+func (s *RegisteredResourcesSuite) TearDownSuite() {
+	slog.Info("tearing down db.RegisteredResources test suite")
+	s.f.TearDown()
+}
+
+func TestRegisteredResourcesSuite(t *testing.T) {
+	if testing.Short() {
+		t.Skip("skipping registered resources integration test")
+	}
+	suite.Run(t, new(RegisteredResourcesSuite))
+}
+
+///
+/// Registered Resources
+///
+
+// CREATE TESTS HERE
+
+func (s *RegisteredResourcesSuite) Test_GetRegisteredResourceWithValues_Succeeds() {
+	// todo: move to a variable
+	testID := "f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789"
+
+	rsp, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, &registeredresources.GetRegisteredResourceRequest_ResourceId{
+		ResourceId: testID,
+	})
+	s.Require().NoError(err)
+	s.NotNil(rsp)
+
+	s.Require().Equal(len(rsp.Values), 2)
+}
diff --git a/service/internal/fixtures/fixtures.go b/service/internal/fixtures/fixtures.go
index 4e0573415e..3a3b988050 100644
--- a/service/internal/fixtures/fixtures.go
+++ b/service/internal/fixtures/fixtures.go
@@ -126,6 +126,17 @@ type FixtureDataNamespaceKeyMap struct {
 	KeyID       string `yaml:"key_id"`
 }
 
+type FixtureDataRegisteredResource struct {
+	ID   string `yaml:"id"`
+	Name string `yaml:"name"`
+}
+
+type FixtureDataRegisteredResourceValue struct {
+	ID                   string `yaml:"id"`
+	RegisteredResourceID string `yaml:"registered_resource_id"`
+	Value                string `yaml:"value"`
+}
+
 type FixtureData struct {
 	Namespaces struct {
 		Metadata FixtureMetadata                 `yaml:"metadata"`
@@ -177,6 +188,14 @@ type FixtureData struct {
 		Metadata FixtureMetadata              `yaml:"metadata"`
 		Data     []FixtureDataNamespaceKeyMap `yaml:"data"`
 	} `yaml:"namespace_key_map"`
+	RegisteredResources struct {
+		Metadata FixtureMetadata                          `yaml:"metadata"`
+		Data     map[string]FixtureDataRegisteredResource `yaml:"data"`
+	} `yaml:"registered_resources"`
+	RegisteredResourceValues struct {
+		Metadata FixtureMetadata                               `yaml:"metadata"`
+		Data     map[string]FixtureDataRegisteredResourceValue `yaml:"data"`
+	} `yaml:"registered_resource_values"`
 }
 
 func LoadFixtureData(file string) {
@@ -349,6 +368,10 @@ func (f *Fixtures) Provision() {
 	dkm := f.provisionDefinitionKeyMap()
 	slog.Info("📦 provisioning namespace key map")
 	nkm := f.provisionNamespaceKeyMap()
+	slog.Info("📦 provisioning registered resources")
+	rr := f.provisionRegisteredResources()
+	slog.Info("📦 provisioning registered resource values")
+	rrv := f.provisionRegisteredResourceValues()
 
 	slog.Info("📦 provisioned fixtures data",
 		slog.Int64("namespaces", n),
@@ -365,6 +388,8 @@ func (f *Fixtures) Provision() {
 		slog.Int64("value_key_map", vkm),
 		slog.Int64("definition_key_map", dkm),
 		slog.Int64("namespace_key_map", nkm),
+		slog.Int64("registered_resources", rr),
+		slog.Int64("registered_resource_values", rrv),
 	)
 	slog.Info("📚 indexing FQNs for fixtures")
 	f.db.PolicyClient.AttrFqnReindex(context.Background())
@@ -573,6 +598,29 @@ func (f *Fixtures) provisionNamespaceKeyMap() int64 {
 	return f.provision(fixtureData.NamespaceKeyMap.Metadata.TableName, fixtureData.NamespaceKeyMap.Metadata.Columns, values)
 }
 
+func (f *Fixtures) provisionRegisteredResources() int64 {
+	values := make([][]string, 0, len(fixtureData.RegisteredResources.Data))
+	for _, d := range fixtureData.RegisteredResources.Data {
+		values = append(values, []string{
+			f.db.StringWrap(d.ID),
+			f.db.StringWrap(d.Name),
+		})
+	}
+	return f.provision(fixtureData.RegisteredResources.Metadata.TableName, fixtureData.RegisteredResources.Metadata.Columns, values)
+}
+
+func (f *Fixtures) provisionRegisteredResourceValues() int64 {
+	values := make([][]string, 0, len(fixtureData.RegisteredResourceValues.Data))
+	for _, d := range fixtureData.RegisteredResourceValues.Data {
+		values = append(values, []string{
+			f.db.StringWrap(d.ID),
+			f.db.StringWrap(d.RegisteredResourceID),
+			f.db.StringWrap(d.Value),
+		})
+	}
+	return f.provision(fixtureData.RegisteredResourceValues.Metadata.TableName, fixtureData.RegisteredResourceValues.Metadata.Columns, values)
+}
+
 func (f *Fixtures) provision(t string, c []string, v [][]string) int64 {
 	rows, err := f.db.ExecInsert(t, c, v...)
 	if err != nil {
diff --git a/service/internal/fixtures/policy_fixtures.yaml b/service/internal/fixtures/policy_fixtures.yaml
index 1b884ab1c1..3fbfd3fa53 100644
--- a/service/internal/fixtures/policy_fixtures.yaml
+++ b/service/internal/fixtures/policy_fixtures.yaml
@@ -615,3 +615,42 @@ namespace_key_map:
       key_id: 68fb7e3e-6c7b-434d-bf38-07701ad8655a
     - namespace_id: 87ba60e1-da12-4889-95fd-267968bf0896 # deactivated
       key_id: d433e903-e3d1-4823-9b3e-7b188e7c6060
+
+##
+# Registered Resources
+#
+##
+registered_resources:
+  metadata:
+    table_name: registered_resources
+    columns:
+      - id
+      - name
+  data:
+    res_with_values:
+      id: f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789
+      name: res1
+    res_only:
+      id: a9b8c7d6-e5f4-3a2b-1c0d-9e8f7a6b5c4d
+      name: res2
+
+##
+# Registered Resource Values
+#
+##
+registered_resource_values:
+  metadata:
+    table_name: registered_resource_values
+    columns:
+      - id
+      - registered_resource_id
+      - value
+  data:
+    res1_value1:
+      id: 1d2c3b4a-5e6f-7a89-0b1c-2d3e4f5a6789
+      registered_resource_id: f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789
+      value: res1_value1
+    res1_value2:
+      id: 9e8f7a6b-5c4d-3b2a-1d0c-8f7e6a5b4c3d
+      registered_resource_id: f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789
+      value: res1_value2
diff --git a/service/policy/db/db.go b/service/policy/db/db.go
index b4a3b78a36..5b8c8f5307 100644
--- a/service/policy/db/db.go
+++ b/service/policy/db/db.go
@@ -1,6 +1,6 @@
 // Code generated by sqlc. DO NOT EDIT.
 // versions:
-//   sqlc v1.27.0
+//   sqlc v1.26.0
 
 package db
 
diff --git a/service/policy/db/models.go b/service/policy/db/models.go
index eecd59b5d6..a0cec0a782 100644
--- a/service/policy/db/models.go
+++ b/service/policy/db/models.go
@@ -1,6 +1,6 @@
 // Code generated by sqlc. DO NOT EDIT.
 // versions:
-//   sqlc v1.27.0
+//   sqlc v1.26.0
 
 package db
 
@@ -225,6 +225,36 @@ type PublicKey struct {
 	UpdatedAt pgtype.Timestamp `json:"updated_at"`
 }
 
+// Table to store registered resources
+type RegisteredResource struct {
+	// Primary key for the table
+	ID string `json:"id"`
+	// Name for the registered resource
+	Name string `json:"name"`
+	// Metadata for the registered resource (see protos for structure)
+	Metadata []byte `json:"metadata"`
+	// Timestamp when the record was created
+	CreatedAt pgtype.Timestamptz `json:"created_at"`
+	// Timestamp when the record was last updated
+	UpdatedAt pgtype.Timestamptz `json:"updated_at"`
+}
+
+// Table to store registered resource values
+type RegisteredResourceValue struct {
+	// Primary key for the table
+	ID string `json:"id"`
+	// Foreign key to the registered_resources table
+	RegisteredResourceID string `json:"registered_resource_id"`
+	// Value for the registered resource value
+	Value string `json:"value"`
+	// Metadata for the registered resource value (see protos for structure)
+	Metadata []byte `json:"metadata"`
+	// Timestamp when the record was created
+	CreatedAt pgtype.Timestamptz `json:"created_at"`
+	// Timestamp when the record was last updated
+	UpdatedAt pgtype.Timestamptz `json:"updated_at"`
+}
+
 // Table to store associated terms that should map resource data to attribute values
 type ResourceMapping struct {
 	// Primary key for the table
diff --git a/service/policy/db/query.sql b/service/policy/db/query.sql
index 17fb3c83ee..72a21e3234 100644
--- a/service/policy/db/query.sql
+++ b/service/policy/db/query.sql
@@ -1139,4 +1139,72 @@ INSERT INTO attribute_value_public_key_map (value_id, key_id) VALUES ($1, $2);
 -- name: removePublicKeyFromAttributeValue :execrows
 DELETE FROM attribute_value_public_key_map WHERE value_id = $1 AND key_id = $2;
 
+
+----------------------------------------------------------------
+-- REGISTERED RESOURCES
+----------------------------------------------------------------
+
+-- name: createRegisteredResource :one
+INSERT INTO registered_resources (name, metadata)
+VALUES ($1, $2)
+RETURNING id;
+
+-- name: getRegisteredResource :one
+-- TODO add FQN support
+SELECT
+    r.id,
+    r.name,
+    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', r.metadata -> 'labels', 'created_at', r.created_at, 'updated_at', r.updated_at)) as metadata,
+    JSON_AGG(
+        JSON_BUILD_OBJECT(
+            'id', v.id,
+            'value', v.value
+        )
+    ) as values
+FROM registered_resources r
+LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
+WHERE r.id = $1
+GROUP BY r.id;
+
+-- TODO add list methods
+
+-- name: updateRegisteredResource :execrows
+UPDATE registered_resources
+SET
+    name = COALESCE(sqlc.narg('name'), name),
+    metadata = COALESCE(sqlc.narg('metadata'), metadata)
+WHERE id = $1;
+
+-- name: deleteRegisteredResource :execrows
+DELETE FROM registered_resources WHERE id = $1;
+
+
+----------------------------------------------------------------
+-- REGISTERED RESOURCE VALUES
 ----------------------------------------------------------------
+
+-- name: createRegisteredResourceValue :one
+INSERT INTO registered_resource_values (registered_resource_id, value, metadata)
+VALUES ($1, $2, $3)
+RETURNING id;
+
+-- name: getRegisteredResourceValue :one
+SELECT
+    id,
+    registered_resource_id,
+    value,
+    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', metadata -> 'labels', 'created_at', created_at, 'updated_at', updated_at)) as metadata
+FROM registered_resource_values
+WHERE id = $1;
+
+-- TODO add list methods
+
+-- name: updateRegisteredResourceValue :execrows
+UPDATE registered_resource_values
+SET
+    value = COALESCE(sqlc.narg('value'), value),
+    metadata = COALESCE(sqlc.narg('metadata'), metadata)
+WHERE id = $1;
+
+-- name: deleteRegisteredResourceValue :execrows
+DELETE FROM registered_resource_values WHERE id = $1;
diff --git a/service/policy/db/query.sql.go b/service/policy/db/query.sql.go
index 2da4cb5110..e731ef8394 100644
--- a/service/policy/db/query.sql.go
+++ b/service/policy/db/query.sql.go
@@ -1,6 +1,6 @@
 // Code generated by sqlc. DO NOT EDIT.
 // versions:
-//   sqlc v1.27.0
+//   sqlc v1.26.0
 // source: query.sql
 
 package db
@@ -3308,6 +3308,59 @@ func (q *Queries) createPublicKey(ctx context.Context, arg createPublicKeyParams
 	return id, err
 }
 
+const createRegisteredResource = `-- name: createRegisteredResource :one
+
+INSERT INTO registered_resources (name, metadata)
+VALUES ($1, $2)
+RETURNING id
+`
+
+type createRegisteredResourceParams struct {
+	Name     string `json:"name"`
+	Metadata []byte `json:"metadata"`
+}
+
+// --------------------------------------------------------------
+// REGISTERED RESOURCES
+// --------------------------------------------------------------
+//
+//	INSERT INTO registered_resources (name, metadata)
+//	VALUES ($1, $2)
+//	RETURNING id
+func (q *Queries) createRegisteredResource(ctx context.Context, arg createRegisteredResourceParams) (string, error) {
+	row := q.db.QueryRow(ctx, createRegisteredResource, arg.Name, arg.Metadata)
+	var id string
+	err := row.Scan(&id)
+	return id, err
+}
+
+const createRegisteredResourceValue = `-- name: createRegisteredResourceValue :one
+
+INSERT INTO registered_resource_values (registered_resource_id, value, metadata)
+VALUES ($1, $2, $3)
+RETURNING id
+`
+
+type createRegisteredResourceValueParams struct {
+	RegisteredResourceID string `json:"registered_resource_id"`
+	Value                string `json:"value"`
+	Metadata             []byte `json:"metadata"`
+}
+
+// --------------------------------------------------------------
+// REGISTERED RESOURCE VALUES
+// --------------------------------------------------------------
+//
+//	INSERT INTO registered_resource_values (registered_resource_id, value, metadata)
+//	VALUES ($1, $2, $3)
+//	RETURNING id
+func (q *Queries) createRegisteredResourceValue(ctx context.Context, arg createRegisteredResourceValueParams) (string, error) {
+	row := q.db.QueryRow(ctx, createRegisteredResourceValue, arg.RegisteredResourceID, arg.Value, arg.Metadata)
+	var id string
+	err := row.Scan(&id)
+	return id, err
+}
+
 const deactivatePublicKey = `-- name: deactivatePublicKey :execrows
 UPDATE public_keys SET is_active = FALSE WHERE id = $1
 `
@@ -3338,6 +3391,36 @@ func (q *Queries) deletePublicKey(ctx context.Context, id string) (int64, error)
 	return result.RowsAffected(), nil
 }
 
+const deleteRegisteredResource = `-- name: deleteRegisteredResource :execrows
+DELETE FROM registered_resources WHERE id = $1
+`
+
+// deleteRegisteredResource
+//
+//	DELETE FROM registered_resources WHERE id = $1
+func (q *Queries) deleteRegisteredResource(ctx context.Context, id string) (int64, error) {
+	result, err := q.db.Exec(ctx, deleteRegisteredResource, id)
+	if err != nil {
+		return 0, err
+	}
+	return result.RowsAffected(), nil
+}
+
+const deleteRegisteredResourceValue = `-- name: deleteRegisteredResourceValue :execrows
+DELETE FROM registered_resource_values WHERE id = $1
+`
+
+// deleteRegisteredResourceValue
+//
+//	DELETE FROM registered_resource_values WHERE id = $1
+func (q *Queries) deleteRegisteredResourceValue(ctx context.Context, id string) (int64, error) {
+	result, err := q.db.Exec(ctx, deleteRegisteredResourceValue, id)
+	if err != nil {
+		return 0, err
+	}
+	return result.RowsAffected(), nil
+}
+
 const getPublicKey = `-- name: getPublicKey :one
 SELECT 
     k.id,
@@ -3402,6 +3485,96 @@ func (q *Queries) getPublicKey(ctx context.Context, id string) (getPublicKeyRow,
 	return i, err
 }
 
+const getRegisteredResource = `-- name: getRegisteredResource :one
+SELECT
+    r.id,
+    r.name,
+    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', r.metadata -> 'labels', 'created_at', r.created_at, 'updated_at', r.updated_at)) as metadata,
+    JSON_AGG(
+        JSON_BUILD_OBJECT(
+            'id', v.id,
+            'value', v.value
+        )
+    ) as values
+FROM registered_resources r
+LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
+WHERE r.id = $1
+GROUP BY r.id
+`
+
+type getRegisteredResourceRow struct {
+	ID       string `json:"id"`
+	Name     string `json:"name"`
+	Metadata []byte `json:"metadata"`
+	Values   []byte `json:"values"`
+}
+
+// TODO add FQN support
+//
+//	SELECT
+//	    r.id,
+//	    r.name,
+//	    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', r.metadata -> 'labels', 'created_at', r.created_at, 'updated_at', r.updated_at)) as metadata,
+//	    JSON_AGG(
+//	        JSON_BUILD_OBJECT(
+//	            'id', v.id,
+//	            'value', v.value
+//	        )
+//	    ) as values
+//	FROM registered_resources r
+//	LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
+//	WHERE r.id = $1
+//	GROUP BY r.id
+func (q *Queries) getRegisteredResource(ctx context.Context, id string) (getRegisteredResourceRow, error) {
+	row := q.db.QueryRow(ctx, getRegisteredResource, id)
+	var i getRegisteredResourceRow
+	err := row.Scan(
+		&i.ID,
+		&i.Name,
+		&i.Metadata,
+		&i.Values,
+	)
+	return i, err
+}
+
+const getRegisteredResourceValue = `-- name: getRegisteredResourceValue :one
+SELECT
+    id,
+    registered_resource_id,
+    value,
+    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', metadata -> 'labels', 'created_at', created_at, 'updated_at', updated_at)) as metadata
+FROM registered_resource_values
+WHERE id = $1
+`
+
+type getRegisteredResourceValueRow struct {
+	ID                   string `json:"id"`
+	RegisteredResourceID string `json:"registered_resource_id"`
+	Value                string `json:"value"`
+	Metadata             []byte `json:"metadata"`
+}
+
+// getRegisteredResourceValue
+//
+//	SELECT
+//	    id,
+//	    registered_resource_id,
+//	    value,
+//	    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', metadata -> 'labels', 'created_at', created_at, 'updated_at', updated_at)) as metadata
+//	FROM registered_resource_values
+//	WHERE id = $1
+func (q *Queries) getRegisteredResourceValue(ctx context.Context, id string) (getRegisteredResourceValueRow, error) {
+	row := q.db.QueryRow(ctx, getRegisteredResourceValue, id)
+	var i getRegisteredResourceValueRow
+	err := row.Scan(
+		&i.ID,
+		&i.RegisteredResourceID,
+		&i.Value,
+		&i.Metadata,
+	)
+	return i, err
+}
+
 const listPublicKeyMappings = `-- name: listPublicKeyMappings :many
 WITH counted AS (
     SELECT COUNT(DISTINCT kas.id) AS total FROM public_keys AS pk
@@ -3888,3 +4061,63 @@ func (q *Queries) updatePublicKey(ctx context.Context, arg updatePublicKeyParams
 	)
 	return i, err
 }
+
+const updateRegisteredResource = `-- name: updateRegisteredResource :execrows
+
+UPDATE registered_resources
+SET
+    name = COALESCE($2, name),
+    metadata = COALESCE($3, metadata)
+WHERE id = $1
+`
+
+type updateRegisteredResourceParams struct {
+	ID       string      `json:"id"`
+	Name     pgtype.Text `json:"name"`
+	Metadata []byte      `json:"metadata"`
+}
+
+// TODO add list methods
+//
+//	UPDATE registered_resources
+//	SET
+//	    name = COALESCE($2, name),
+//	    metadata = COALESCE($3, metadata)
+//	WHERE id = $1
+func (q *Queries) updateRegisteredResource(ctx context.Context, arg updateRegisteredResourceParams) (int64, error) {
+	result, err := q.db.Exec(ctx, updateRegisteredResource, arg.ID, arg.Name, arg.Metadata)
+	if err != nil {
+		return 0, err
+	}
+	return result.RowsAffected(), nil
+}
+
+const updateRegisteredResourceValue = `-- name: updateRegisteredResourceValue :execrows
+
+UPDATE registered_resource_values
+SET
+    value = COALESCE($2, value),
+    metadata = COALESCE($3, metadata)
+WHERE id = $1
+`
+
+type updateRegisteredResourceValueParams struct {
+	ID       string      `json:"id"`
+	Value    pgtype.Text `json:"value"`
+	Metadata []byte      `json:"metadata"`
+}
+
+// TODO add list methods
+//
+//	UPDATE registered_resource_values
+//	SET
+//	    value = COALESCE($2, value),
+//	    metadata = COALESCE($3, metadata)
+//	WHERE id = $1
+func (q *Queries) updateRegisteredResourceValue(ctx context.Context, arg updateRegisteredResourceValueParams) (int64, error) {
+	result, err := q.db.Exec(ctx, updateRegisteredResourceValue, arg.ID, arg.Value, arg.Metadata)
+	if err != nil {
+		return 0, err
+	}
+	return result.RowsAffected(), nil
+}
diff --git a/service/policy/db/registered_resources.go b/service/policy/db/registered_resources.go
new file mode 100644
index 0000000000..b06e4b6aed
--- /dev/null
+++ b/service/policy/db/registered_resources.go
@@ -0,0 +1,264 @@
+package db
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"strings"
+
+	"github.com/opentdf/platform/protocol/go/common"
+	"github.com/opentdf/platform/protocol/go/policy"
+	"github.com/opentdf/platform/protocol/go/policy/registeredresources"
+	"github.com/opentdf/platform/service/pkg/db"
+	"google.golang.org/protobuf/encoding/protojson"
+)
+
+func unmarshalRegisteredResourceValuesProto(valuesJSON []byte, values *[]*policy.RegisteredResourceValue) error {
+	if valuesJSON == nil {
+		return nil
+	}
+
+	raw := []json.RawMessage{}
+	if err := json.Unmarshal(valuesJSON, &raw); err != nil {
+		return fmt.Errorf("failed to unmarshal values array [%s]: %w", string(valuesJSON), err)
+	}
+
+	for _, r := range raw {
+		v := &policy.RegisteredResourceValue{}
+		if err := protojson.Unmarshal(r, v); err != nil {
+			return fmt.Errorf("failed to unmarshal value [%s]: %w", string(r), err)
+		}
+		*values = append(*values, v)
+	}
+
+	return nil
+}
+
+///
+/// Registered Resources
+///
+
+func (c PolicyDBClient) CreateRegisteredResource(ctx context.Context, r *registeredresources.CreateRegisteredResourceRequest) (*policy.RegisteredResource, error) {
+	name := strings.ToLower(r.GetName())
+	metadataJSON, _, err := db.MarshalCreateMetadata(r.GetMetadata())
+	if err != nil {
+		return nil, err
+	}
+
+	createdID, err := c.Queries.createRegisteredResource(ctx, createRegisteredResourceParams{
+		Name:     name,
+		Metadata: metadataJSON,
+	})
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+
+	for _, v := range r.GetValues() {
+		req := &registeredresources.CreateRegisteredResourceValueRequest{
+			ResourceId: createdID,
+			Value:      v,
+		}
+		_, err := c.CreateRegisteredResourceValue(ctx, req)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	return c.GetRegisteredResource(ctx, createdID)
+}
+
+func (c PolicyDBClient) GetRegisteredResource(ctx context.Context, identifier any) (*policy.RegisteredResource, error) {
+	var id string
+
+	switch i := identifier.(type) {
+	case *registeredresources.GetRegisteredResourceRequest_ResourceId:
+		// TODO: refactor to pgtype.UUID once the query supports both id and fqn
+		id = i.ResourceId
+	case *registeredresources.GetRegisteredResourceRequest_Fqn:
+		// TODO: implement
+		return nil, errors.New("FQN support not yet implemented")
+	default:
+		// unexpected type
+		return nil, errors.Join(db.ErrUnknownSelectIdentifier, fmt.Errorf("type [%T] value [%v]", i, i))
+	}
+
+	rr, err := c.Queries.getRegisteredResource(ctx, id)
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+
+	metadata := &common.Metadata{}
+	if err = unmarshalMetadata(rr.Metadata, metadata); err != nil {
+		return nil, err
+	}
+
+	values := []*policy.RegisteredResourceValue{}
+	if err = unmarshalRegisteredResourceValuesProto(rr.Values, &values); err != nil {
+		return nil, err
+	}
+
+	return &policy.RegisteredResource{
+		Id:       rr.ID,
+		Name:     rr.Name,
+		Metadata: metadata,
+		Values:   values,
+	}, nil
+}
+
+// todo: list
+
+func (c PolicyDBClient) UpdateRegisteredResource(ctx context.Context, r *registeredresources.UpdateRegisteredResourceRequest) (*policy.RegisteredResource, error) {
+	id := r.GetId()
+	name := strings.ToLower(r.GetName())
+	metadataJSON, metadata, err := db.MarshalUpdateMetadata(r.GetMetadata(), r.GetMetadataUpdateBehavior(), func() (*common.Metadata, error) {
+		v, err := c.GetAttributeValue(ctx, id)
+		if err != nil {
+			return nil, err
+		}
+		return v.GetMetadata(), nil
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	count, err := c.Queries.updateRegisteredResource(ctx, updateRegisteredResourceParams{
+		ID:       id,
+		Name:     pgtypeText(name),
+		Metadata: metadataJSON,
+	})
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+	if count == 0 {
+		return nil, db.ErrNotFound
+	}
+
+	return &policy.RegisteredResource{
+		Id:       id,
+		Name:     name,
+		Metadata: metadata,
+	}, nil
+}
+
+func (c PolicyDBClient) DeleteRegisteredResource(ctx context.Context, id string) (*policy.RegisteredResource, error) {
+	count, err := c.Queries.deleteRegisteredResource(ctx, id)
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+	if count == 0 {
+		return nil, db.ErrNotFound
+	}
+
+	return &policy.RegisteredResource{
+		Id: id,
+	}, nil
+}
+
+///
+/// Registered Resource Values
+///
+
+func (c PolicyDBClient) CreateRegisteredResourceValue(ctx context.Context, r *registeredresources.CreateRegisteredResourceValueRequest) (*policy.RegisteredResourceValue, error) {
+	resourceID := r.GetResourceId()
+	value := strings.ToLower(r.GetValue())
+	metadataJSON, _, err := db.MarshalCreateMetadata(r.GetMetadata())
+	if err != nil {
+		return nil, err
+	}
+
+	createdID, err := c.Queries.createRegisteredResourceValue(ctx, createRegisteredResourceValueParams{
+		RegisteredResourceID: resourceID,
+		Value:                value,
+		Metadata:             metadataJSON,
+	})
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+
+	return c.GetRegisteredResourceValue(ctx, createdID)
+}
+
+func (c PolicyDBClient) GetRegisteredResourceValue(ctx context.Context, identifier any) (*policy.RegisteredResourceValue, error) {
+	var id string
+
+	switch i := identifier.(type) {
+	case *registeredresources.GetRegisteredResourceValueRequest_ValueId:
+		// TODO: refactor to pgtype.UUID once the query supports both id and fqn
+		id = i.ValueId
+	case *registeredresources.GetRegisteredResourceRequest_Fqn:
+		// TODO: implement
+		return nil, errors.New("FQN support not yet implemented")
+	default:
+		// unexpected type
+		return nil, errors.Join(db.ErrUnknownSelectIdentifier, fmt.Errorf("type [%T] value [%v]", i, i))
+	}
+
+	rrv, err := c.Queries.getRegisteredResourceValue(ctx, id)
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+
+	metadata := &common.Metadata{}
+	if err = unmarshalMetadata(rrv.Metadata, metadata); err != nil {
+		return nil, err
+	}
+
+	return &policy.RegisteredResourceValue{
+		Id:       rrv.ID,
+		Value:    rrv.Value,
+		Metadata: metadata,
+		Resource: &policy.RegisteredResource{
+			Id: rrv.RegisteredResourceID,
+		},
+	}, nil
+}
+
+// todo: list
+
+func (c PolicyDBClient) UpdateRegisteredResourceValue(ctx context.Context, r *registeredresources.UpdateRegisteredResourceValueRequest) (*policy.RegisteredResourceValue, error) {
+	id := r.GetId()
+	value := strings.ToLower(r.GetValue())
+	metadataJSON, metadata, err := db.MarshalUpdateMetadata(r.GetMetadata(), r.GetMetadataUpdateBehavior(), func() (*common.Metadata, error) {
+		v, err := c.GetAttributeValue(ctx, id)
+		if err != nil {
+			return nil, err
+		}
+		return v.GetMetadata(), nil
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	count, err := c.Queries.updateRegisteredResourceValue(ctx, updateRegisteredResourceValueParams{
+		ID:       id,
+		Value:    pgtypeText(value),
+		Metadata: metadataJSON,
+	})
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+	if count == 0 {
+		return nil, db.ErrNotFound
+	}
+
+	return &policy.RegisteredResourceValue{
+		Id:       id,
+		Value:    value,
+		Metadata: metadata,
+	}, nil
+}
+
+func (c PolicyDBClient) DeleteRegisteredResourceValue(ctx context.Context, id string) (*policy.RegisteredResourceValue, error) {
+	count, err := c.Queries.deleteRegisteredResourceValue(ctx, id)
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+	if count == 0 {
+		return nil, db.ErrNotFound
+	}
+
+	return &policy.RegisteredResourceValue{
+		Id: id,
+	}, nil
+}

From 62ddb7a2c6496c08abc5c5588b9fd285566d1e71 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Wed, 16 Apr 2025 10:26:27 -0600
Subject: [PATCH 04/19] add list sql queries and client methods

---
 service/policy/db/query.sql               |  41 +++++-
 service/policy/db/query.sql.go            | 169 +++++++++++++++++++++-
 service/policy/db/registered_resources.go | 117 ++++++++++++++-
 3 files changed, 314 insertions(+), 13 deletions(-)

diff --git a/service/policy/db/query.sql b/service/policy/db/query.sql
index 72a21e3234..faec656491 100644
--- a/service/policy/db/query.sql
+++ b/service/policy/db/query.sql
@@ -1166,7 +1166,28 @@ LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
 WHERE r.id = $1
 GROUP BY r.id;
 
--- TODO add list methods
+-- name: listRegisteredResources :many
+WITH counted AS (
+    SELECT COUNT(id) AS total
+    FROM registered_resources
+)
+SELECT
+    r.id,
+    r.name,
+    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', r.metadata -> 'labels', 'created_at', r.created_at, 'updated_at', r.updated_at)) as metadata,
+    JSON_AGG(
+        JSON_BUILD_OBJECT(
+            'id', v.id,
+            'value', v.value
+        )
+    ) AS values,
+    counted.total
+FROM registered_resources r
+CROSS JOIN counted
+LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
+GROUP BY r.id, counted.total
+LIMIT @limit_ 
+OFFSET @offset_; 
 
 -- name: updateRegisteredResource :execrows
 UPDATE registered_resources
@@ -1197,7 +1218,23 @@ SELECT
 FROM registered_resource_values
 WHERE id = $1;
 
--- TODO add list methods
+-- name: listRegisteredResourceValues :many
+WITH counted AS (
+    SELECT COUNT(id) AS total
+    FROM registered_resources
+)
+SELECT
+    id,
+    registered_resource_id,
+    value,
+    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', metadata -> 'labels', 'created_at', created_at, 'updated_at', updated_at)) as metadata,
+    counted.total
+FROM registered_resource_values
+CROSS JOIN counted
+WHERE
+    NULLIF(@registered_resource_id, '') IS NULL OR registered_resource_id = @registered_resource_id::UUID
+LIMIT @limit_
+OFFSET @offset_;
 
 -- name: updateRegisteredResourceValue :execrows
 UPDATE registered_resource_values
diff --git a/service/policy/db/query.sql.go b/service/policy/db/query.sql.go
index e731ef8394..d4f72a4e0d 100644
--- a/service/policy/db/query.sql.go
+++ b/service/policy/db/query.sql.go
@@ -3964,6 +3964,169 @@ func (q *Queries) listPublicKeys(ctx context.Context, arg listPublicKeysParams)
 	return items, nil
 }
 
+const listRegisteredResourceValues = `-- name: listRegisteredResourceValues :many
+WITH counted AS (
+    SELECT COUNT(id) AS total
+    FROM registered_resources
+)
+SELECT
+    id,
+    registered_resource_id,
+    value,
+    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', metadata -> 'labels', 'created_at', created_at, 'updated_at', updated_at)) as metadata,
+    counted.total
+FROM registered_resource_values
+CROSS JOIN counted
+WHERE
+    NULLIF($1, '') IS NULL OR registered_resource_id = $1::UUID
+LIMIT $3
+OFFSET $2
+`
+
+type listRegisteredResourceValuesParams struct {
+	RegisteredResourceID interface{} `json:"registered_resource_id"`
+	Offset               int32       `json:"offset_"`
+	Limit                int32       `json:"limit_"`
+}
+
+type listRegisteredResourceValuesRow struct {
+	ID                   string `json:"id"`
+	RegisteredResourceID string `json:"registered_resource_id"`
+	Value                string `json:"value"`
+	Metadata             []byte `json:"metadata"`
+	Total                int64  `json:"total"`
+}
+
+// listRegisteredResourceValues
+//
+//	WITH counted AS (
+//	    SELECT COUNT(id) AS total
+//	    FROM registered_resources
+//	)
+//	SELECT
+//	    id,
+//	    registered_resource_id,
+//	    value,
+//	    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', metadata -> 'labels', 'created_at', created_at, 'updated_at', updated_at)) as metadata,
+//	    counted.total
+//	FROM registered_resource_values
+//	CROSS JOIN counted
+//	WHERE
+//	    NULLIF($1, '') IS NULL OR registered_resource_id = $1::UUID
+//	LIMIT $3
+//	OFFSET $2
+func (q *Queries) listRegisteredResourceValues(ctx context.Context, arg listRegisteredResourceValuesParams) ([]listRegisteredResourceValuesRow, error) {
+	rows, err := q.db.Query(ctx, listRegisteredResourceValues, arg.RegisteredResourceID, arg.Offset, arg.Limit)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var items []listRegisteredResourceValuesRow
+	for rows.Next() {
+		var i listRegisteredResourceValuesRow
+		if err := rows.Scan(
+			&i.ID,
+			&i.RegisteredResourceID,
+			&i.Value,
+			&i.Metadata,
+			&i.Total,
+		); err != nil {
+			return nil, err
+		}
+		items = append(items, i)
+	}
+	if err := rows.Err(); err != nil {
+		return nil, err
+	}
+	return items, nil
+}
+
+const listRegisteredResources = `-- name: listRegisteredResources :many
+WITH counted AS (
+    SELECT COUNT(id) AS total
+    FROM registered_resources
+)
+SELECT
+    r.id,
+    r.name,
+    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', r.metadata -> 'labels', 'created_at', r.created_at, 'updated_at', r.updated_at)) as metadata,
+    JSON_AGG(
+        JSON_BUILD_OBJECT(
+            'id', v.id,
+            'value', v.value
+        )
+    ) AS values,
+    counted.total
+FROM registered_resources r
+CROSS JOIN counted
+LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
+GROUP BY r.id, counted.total
+LIMIT $2 
+OFFSET $1
+`
+
+type listRegisteredResourcesParams struct {
+	Offset int32 `json:"offset_"`
+	Limit  int32 `json:"limit_"`
+}
+
+type listRegisteredResourcesRow struct {
+	ID       string `json:"id"`
+	Name     string `json:"name"`
+	Metadata []byte `json:"metadata"`
+	Values   []byte `json:"values"`
+	Total    int64  `json:"total"`
+}
+
+// listRegisteredResources
+//
+//	WITH counted AS (
+//	    SELECT COUNT(id) AS total
+//	    FROM registered_resources
+//	)
+//	SELECT
+//	    r.id,
+//	    r.name,
+//	    JSON_STRIP_NULLS(JSON_BUILD_OBJECT('labels', r.metadata -> 'labels', 'created_at', r.created_at, 'updated_at', r.updated_at)) as metadata,
+//	    JSON_AGG(
+//	        JSON_BUILD_OBJECT(
+//	            'id', v.id,
+//	            'value', v.value
+//	        )
+//	    ) AS values,
+//	    counted.total
+//	FROM registered_resources r
+//	CROSS JOIN counted
+//	LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
+//	GROUP BY r.id, counted.total
+//	LIMIT $2
+//	OFFSET $1
+func (q *Queries) listRegisteredResources(ctx context.Context, arg listRegisteredResourcesParams) ([]listRegisteredResourcesRow, error) {
+	rows, err := q.db.Query(ctx, listRegisteredResources, arg.Offset, arg.Limit)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var items []listRegisteredResourcesRow
+	for rows.Next() {
+		var i listRegisteredResourcesRow
+		if err := rows.Scan(
+			&i.ID,
+			&i.Name,
+			&i.Metadata,
+			&i.Values,
+			&i.Total,
+		); err != nil {
+			return nil, err
+		}
+		items = append(items, i)
+	}
+	if err := rows.Err(); err != nil {
+		return nil, err
+	}
+	return items, nil
+}
+
 const removePublicKeyFromAttributeDefinition = `-- name: removePublicKeyFromAttributeDefinition :execrows
 DELETE FROM attribute_definition_public_key_map WHERE definition_id = $1 AND key_id = $2
 `
@@ -4063,7 +4226,6 @@ func (q *Queries) updatePublicKey(ctx context.Context, arg updatePublicKeyParams
 }
 
 const updateRegisteredResource = `-- name: updateRegisteredResource :execrows
-
 UPDATE registered_resources
 SET
     name = COALESCE($2, name),
@@ -4077,7 +4239,7 @@ type updateRegisteredResourceParams struct {
 	Metadata []byte      `json:"metadata"`
 }
 
-// TODO add list methods
+// updateRegisteredResource
 //
 //	UPDATE registered_resources
 //	SET
@@ -4093,7 +4255,6 @@ func (q *Queries) updateRegisteredResource(ctx context.Context, arg updateRegist
 }
 
 const updateRegisteredResourceValue = `-- name: updateRegisteredResourceValue :execrows
-
 UPDATE registered_resource_values
 SET
     value = COALESCE($2, value),
@@ -4107,7 +4268,7 @@ type updateRegisteredResourceValueParams struct {
 	Metadata []byte      `json:"metadata"`
 }
 
-// TODO add list methods
+// updateRegisteredResourceValue
 //
 //	UPDATE registered_resource_values
 //	SET
diff --git a/service/policy/db/registered_resources.go b/service/policy/db/registered_resources.go
index b06e4b6aed..97bc1383f7 100644
--- a/service/policy/db/registered_resources.go
+++ b/service/policy/db/registered_resources.go
@@ -106,7 +106,59 @@ func (c PolicyDBClient) GetRegisteredResource(ctx context.Context, identifier an
 	}, nil
 }
 
-// todo: list
+func (c PolicyDBClient) ListRegisteredResources(ctx context.Context, r *registeredresources.ListRegisteredResourcesRequest) (*registeredresources.ListRegisteredResourcesResponse, error) {
+	limit, offset := c.getRequestedLimitOffset(r.GetPagination())
+
+	maxLimit := c.listCfg.limitMax
+	if maxLimit > 0 && limit > maxLimit {
+		return nil, db.ErrListLimitTooLarge
+	}
+
+	list, err := c.Queries.listRegisteredResources(ctx, listRegisteredResourcesParams{
+		Limit:  limit,
+		Offset: offset,
+	})
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+
+	rrList := make([]*policy.RegisteredResource, 0, len(list))
+
+	for i, r := range list {
+		metadata := &common.Metadata{}
+		if err = unmarshalMetadata(r.Metadata, metadata); err != nil {
+			return nil, err
+		}
+
+		values := []*policy.RegisteredResourceValue{}
+		if err = unmarshalRegisteredResourceValuesProto(r.Values, &values); err != nil {
+			return nil, err
+		}
+
+		rrList[i] = &policy.RegisteredResource{
+			Id:       r.ID,
+			Name:     r.Name,
+			Metadata: metadata,
+			Values:   values,
+		}
+	}
+
+	var total int32
+	var nextOffset int32
+	if len(list) > 0 {
+		total = int32(list[0].Total)
+		nextOffset = getNextOffset(offset, limit, total)
+	}
+
+	return &registeredresources.ListRegisteredResourcesResponse{
+		Resources: rrList,
+		Pagination: &policy.PageResponse{
+			CurrentOffset: offset,
+			Total:         total,
+			NextOffset:    nextOffset,
+		},
+	}, nil
+}
 
 func (c PolicyDBClient) UpdateRegisteredResource(ctx context.Context, r *registeredresources.UpdateRegisteredResourceRequest) (*policy.RegisteredResource, error) {
 	id := r.GetId()
@@ -194,27 +246,78 @@ func (c PolicyDBClient) GetRegisteredResourceValue(ctx context.Context, identifi
 		return nil, errors.Join(db.ErrUnknownSelectIdentifier, fmt.Errorf("type [%T] value [%v]", i, i))
 	}
 
-	rrv, err := c.Queries.getRegisteredResourceValue(ctx, id)
+	rv, err := c.Queries.getRegisteredResourceValue(ctx, id)
 	if err != nil {
 		return nil, db.WrapIfKnownInvalidQueryErr(err)
 	}
 
 	metadata := &common.Metadata{}
-	if err = unmarshalMetadata(rrv.Metadata, metadata); err != nil {
+	if err = unmarshalMetadata(rv.Metadata, metadata); err != nil {
 		return nil, err
 	}
 
 	return &policy.RegisteredResourceValue{
-		Id:       rrv.ID,
-		Value:    rrv.Value,
+		Id:       rv.ID,
+		Value:    rv.Value,
 		Metadata: metadata,
 		Resource: &policy.RegisteredResource{
-			Id: rrv.RegisteredResourceID,
+			Id: rv.RegisteredResourceID,
 		},
 	}, nil
 }
 
-// todo: list
+func (c PolicyDBClient) ListRegisteredResourceValues(ctx context.Context, r *registeredresources.ListRegisteredResourceValuesRequest) (*registeredresources.ListRegisteredResourceValuesResponse, error) {
+	resourceID := r.GetResourceId()
+	limit, offset := c.getRequestedLimitOffset(r.GetPagination())
+
+	maxLimit := c.listCfg.limitMax
+	if maxLimit > 0 && limit > maxLimit {
+		return nil, db.ErrListLimitTooLarge
+	}
+
+	list, err := c.Queries.listRegisteredResourceValues(ctx, listRegisteredResourceValuesParams{
+		RegisteredResourceID: resourceID,
+		Limit:                limit,
+		Offset:               offset,
+	})
+	if err != nil {
+		return nil, db.WrapIfKnownInvalidQueryErr(err)
+	}
+
+	rvList := make([]*policy.RegisteredResourceValue, 0, len(list))
+
+	for i, r := range list {
+		metadata := &common.Metadata{}
+		if err = unmarshalMetadata(r.Metadata, metadata); err != nil {
+			return nil, err
+		}
+
+		rvList[i] = &policy.RegisteredResourceValue{
+			Id:       r.ID,
+			Value:    r.Value,
+			Metadata: metadata,
+			Resource: &policy.RegisteredResource{
+				Id: r.RegisteredResourceID,
+			},
+		}
+	}
+
+	var total int32
+	var nextOffset int32
+	if len(list) > 0 {
+		total = int32(list[0].Total)
+		nextOffset = getNextOffset(offset, limit, total)
+	}
+
+	return &registeredresources.ListRegisteredResourceValuesResponse{
+		Values: rvList,
+		Pagination: &policy.PageResponse{
+			CurrentOffset: offset,
+			Total:         total,
+			NextOffset:    nextOffset,
+		},
+	}, nil
+}
 
 func (c PolicyDBClient) UpdateRegisteredResourceValue(ctx context.Context, r *registeredresources.UpdateRegisteredResourceValueRequest) (*policy.RegisteredResourceValue, error) {
 	id := r.GetId()

From ba348b598077c217cf1cd27bc44169931020aae7 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Wed, 16 Apr 2025 11:36:31 -0600
Subject: [PATCH 05/19] add integration tests for create db client methods

---
 .../integration/registered_resources_test.go  | 152 ++++++++++++++++--
 service/internal/fixtures/fixtures.go         |  18 +++
 .../internal/fixtures/policy_fixtures.yaml    |   8 +-
 service/policy/db/registered_resources.go     |   4 +
 4 files changed, 169 insertions(+), 13 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index f5a077002e..c580a8167f 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -3,10 +3,13 @@ package integration
 import (
 	"context"
 	"log/slog"
+	"strings"
 	"testing"
 
+	"github.com/opentdf/platform/protocol/go/common"
 	"github.com/opentdf/platform/protocol/go/policy/registeredresources"
 	"github.com/opentdf/platform/service/internal/fixtures"
+	"github.com/opentdf/platform/service/pkg/db"
 	"github.com/stretchr/testify/suite"
 )
 
@@ -43,17 +46,148 @@ func TestRegisteredResourcesSuite(t *testing.T) {
 /// Registered Resources
 ///
 
-// CREATE TESTS HERE
+// Create
 
-func (s *RegisteredResourcesSuite) Test_GetRegisteredResourceWithValues_Succeeds() {
-	// todo: move to a variable
-	testID := "f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789"
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_Succeeds() {
+	req := &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_create",
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(created)
+}
+
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_NormalizedName_Succeeds() {
+	req := &registeredresources.CreateRegisteredResourceRequest{
+		Name: "TeST_CrEaTe_NorMa-LiZeD",
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(created)
+	s.Equal(strings.ToLower(req.Name), created.Name)
+}
+
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithValues_Succeeds() {
+	values := []string{
+		"test_create_values__value1",
+		"test_create_values__value2",
+	}
+	req := &registeredresources.CreateRegisteredResourceRequest{
+		Name:   "test_create_values",
+		Values: values,
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(created)
+	s.Require().Equal(len(created.Values), 2)
+	s.Equal(values[0], created.Values[0].Value)
+	s.Equal(values[1], created.Values[1].Value)
+}
+
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithMetadata_Succeeds() {
+	req := &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_create_metadata",
+		Metadata: &common.MetadataMutable{
+			Labels: map[string]string{
+				"key1": "value1",
+				"key2": "value2",
+			},
+		},
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(created)
+	s.Require().Equal(len(created.Metadata.Labels), 2)
+}
+
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithNonUniqueName_Fails() {
+	existing := s.f.GetRegisteredResourceKey("res_with_values")
+	req := &registeredresources.CreateRegisteredResourceRequest{
+		Name: existing.Name,
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrUniqueConstraintViolation)
+	s.Nil(created)
+}
 
-	rsp, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, &registeredresources.GetRegisteredResourceRequest_ResourceId{
-		ResourceId: testID,
-	})
+///
+/// Registered Resource Values
+///
+
+// Create
+
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_Succeeds() {
+	res := s.f.GetRegisteredResourceKey("res_only")
+	req := &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: res.ID,
+		Value:      "test_create_value",
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(created)
+}
+
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_NormalizedName_Succeeds() {
+	res := s.f.GetRegisteredResourceKey("res_only")
+	req := &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: res.ID,
+		Value:      "TeST_CrEaTe_NorMa-LiZeD",
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(created)
+	s.Equal(strings.ToLower(req.Value), created.Value)
+}
+
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithMetadata_Succeeds() {
+	req := &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: s.f.GetRegisteredResourceKey("res_only").ID,
+		Value:      "test_create_metadata",
+		Metadata: &common.MetadataMutable{
+			Labels: map[string]string{
+				"key1": "value1",
+				"key2": "value2",
+			},
+		},
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
 	s.Require().NoError(err)
-	s.NotNil(rsp)
+	s.NotNil(created)
+	s.Require().Equal(len(created.Metadata.Labels), 2)
+}
+
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithInvalidResource_Fails() {
+	req := &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: "00000000-0000-0000-0000-000000000000",
+		Value:      "test_create_value__invalid_resource",
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrForeignKeyViolation)
+	s.Nil(created)
+}
+
+func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithNonUniqueResourceAndValue_Fails() {
+	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
+	existingResValue := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
+
+	req := &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: existingRes.ID,
+		Value:      existingResValue.Value,
+	}
 
-	s.Require().Equal(len(rsp.Values), 2)
+	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrUniqueConstraintViolation)
+	s.Nil(created)
 }
diff --git a/service/internal/fixtures/fixtures.go b/service/internal/fixtures/fixtures.go
index 3a3b988050..58a6eae714 100644
--- a/service/internal/fixtures/fixtures.go
+++ b/service/internal/fixtures/fixtures.go
@@ -333,6 +333,24 @@ func (f *Fixtures) GetNamespaceKeyMap(key string) []FixtureDataNamespaceKeyMap {
 	return nkms
 }
 
+func (f *Fixtures) GetRegisteredResourceKey(key string) FixtureDataRegisteredResource {
+	rr, ok := fixtureData.RegisteredResources.Data[key]
+	if !ok || rr.ID == "" {
+		slog.Error("could not find registered resource", slog.String("id", key))
+		panic("could not find registered resource fixture: " + key)
+	}
+	return rr
+}
+
+func (f *Fixtures) GetRegisteredResourceValueKey(key string) FixtureDataRegisteredResourceValue {
+	rv, ok := fixtureData.RegisteredResourceValues.Data[key]
+	if !ok || rv.ID == "" {
+		slog.Error("could not find registered resource value", slog.String("id", key))
+		panic("could not find registered resource value fixture: " + key)
+	}
+	return rv
+}
+
 func (f *Fixtures) Provision() {
 	slog.Info("📦 running migrations in schema", slog.String("schema", f.db.Schema))
 	_, err := f.db.Client.RunMigrations(context.Background(), policy.Migrations)
diff --git a/service/internal/fixtures/policy_fixtures.yaml b/service/internal/fixtures/policy_fixtures.yaml
index 3fbfd3fa53..d1dc16ba0b 100644
--- a/service/internal/fixtures/policy_fixtures.yaml
+++ b/service/internal/fixtures/policy_fixtures.yaml
@@ -646,11 +646,11 @@ registered_resource_values:
       - registered_resource_id
       - value
   data:
-    res1_value1:
+    res_with_values__value1:
       id: 1d2c3b4a-5e6f-7a89-0b1c-2d3e4f5a6789
       registered_resource_id: f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789
-      value: res1_value1
-    res1_value2:
+      value: res_with_values__value1
+    res_with_values__value2:
       id: 9e8f7a6b-5c4d-3b2a-1d0c-8f7e6a5b4c3d
       registered_resource_id: f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789
-      value: res1_value2
+      value: res_with_values__value2
diff --git a/service/policy/db/registered_resources.go b/service/policy/db/registered_resources.go
index 97bc1383f7..c1e99b9e99 100644
--- a/service/policy/db/registered_resources.go
+++ b/service/policy/db/registered_resources.go
@@ -72,6 +72,8 @@ func (c PolicyDBClient) GetRegisteredResource(ctx context.Context, identifier an
 	var id string
 
 	switch i := identifier.(type) {
+	case string:
+		id = i
 	case *registeredresources.GetRegisteredResourceRequest_ResourceId:
 		// TODO: refactor to pgtype.UUID once the query supports both id and fqn
 		id = i.ResourceId
@@ -235,6 +237,8 @@ func (c PolicyDBClient) GetRegisteredResourceValue(ctx context.Context, identifi
 	var id string
 
 	switch i := identifier.(type) {
+	case string:
+		id = i
 	case *registeredresources.GetRegisteredResourceValueRequest_ValueId:
 		// TODO: refactor to pgtype.UUID once the query supports both id and fqn
 		id = i.ValueId

From 093c19d2e750f34ade5f965ce034f4a26298cbac Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Wed, 16 Apr 2025 12:37:40 -0600
Subject: [PATCH 06/19] add delete integration tests

---
 .../integration/registered_resources_test.go  | 76 ++++++++++++++++++-
 1 file changed, 75 insertions(+), 1 deletion(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index c580a8167f..6fab43eb82 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -42,6 +42,8 @@ func TestRegisteredResourcesSuite(t *testing.T) {
 	suite.Run(t, new(RegisteredResourcesSuite))
 }
 
+const invalidID = "00000000-0000-0000-0000-000000000000"
+
 ///
 /// Registered Resources
 ///
@@ -116,6 +118,49 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithNonUniqueNa
 	s.Nil(created)
 }
 
+// Delete
+
+func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResource_Succeeds() {
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_delete",
+		Values: []string{
+			"test_delete_value1",
+			"test_delete_value2",
+		},
+	})
+	s.Require().NoError(err)
+
+	deleted, err := s.db.PolicyClient.DeleteRegisteredResource(s.ctx, created.Id)
+	s.Require().NoError(err)
+	s.Require().Equal(created.Id, deleted.Id)
+
+	// verify resource deleted
+
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.Id)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(got)
+
+	// verify resource values deleted
+
+	gotValue1, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Values[0].Id)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(gotValue1)
+
+	gotValue2, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Values[1].Id)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(gotValue2)
+}
+
+func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResource_WithInvalidID_Fails() {
+	deleted, err := s.db.PolicyClient.DeleteRegisteredResource(s.ctx, invalidID)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(deleted)
+}
+
 ///
 /// Registered Resource Values
 ///
@@ -167,7 +212,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithMetada
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithInvalidResource_Fails() {
 	req := &registeredresources.CreateRegisteredResourceValueRequest{
-		ResourceId: "00000000-0000-0000-0000-000000000000",
+		ResourceId: invalidID,
 		Value:      "test_create_value__invalid_resource",
 	}
 
@@ -191,3 +236,32 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithNonUni
 	s.Require().ErrorIs(err, db.ErrUniqueConstraintViolation)
 	s.Nil(created)
 }
+
+// Delete
+
+func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResourceValue_Succeeds() {
+	existingRes := s.f.GetRegisteredResourceKey("res_only")
+	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: existingRes.ID,
+		Value:      "test_delete_value",
+	})
+	s.Require().NoError(err)
+
+	deleted, err := s.db.PolicyClient.DeleteRegisteredResourceValue(s.ctx, created.Id)
+	s.Require().NoError(err)
+	s.Require().Equal(created.Id, deleted.Id)
+
+	// verify resource value deleted
+
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Id)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(got)
+}
+
+func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResourceValue_WithInvalidID_Fails() {
+	deleted, err := s.db.PolicyClient.DeleteRegisteredResourceValue(s.ctx, invalidID)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(deleted)
+}

From 5dd05d2bfd8c71f5c6e8f927fbe0de4753795a23 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Wed, 16 Apr 2025 15:02:45 -0600
Subject: [PATCH 07/19] add update integration tests

---
 .../integration/registered_resources_test.go  | 266 +++++++++++++++++-
 service/policy/db/registered_resources.go     |   4 +-
 2 files changed, 256 insertions(+), 14 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index 6fab43eb82..74bfb5ead3 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -52,7 +52,7 @@ const invalidID = "00000000-0000-0000-0000-000000000000"
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_Succeeds() {
 	req := &registeredresources.CreateRegisteredResourceRequest{
-		Name: "test_create",
+		Name: "test_create_res",
 	}
 
 	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
@@ -62,7 +62,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_Succeeds() {
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_NormalizedName_Succeeds() {
 	req := &registeredresources.CreateRegisteredResourceRequest{
-		Name: "TeST_CrEaTe_NorMa-LiZeD",
+		Name: "TeST_CrEaTe_RES_NorMa-LiZeD",
 	}
 
 	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
@@ -73,11 +73,11 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_NormalizedName_
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithValues_Succeeds() {
 	values := []string{
-		"test_create_values__value1",
-		"test_create_values__value2",
+		"test_create_res_values__value1",
+		"test_create_res_values__value2",
 	}
 	req := &registeredresources.CreateRegisteredResourceRequest{
-		Name:   "test_create_values",
+		Name:   "test_create_res_values",
 		Values: values,
 	}
 
@@ -91,7 +91,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithValues_Succ
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithMetadata_Succeeds() {
 	req := &registeredresources.CreateRegisteredResourceRequest{
-		Name: "test_create_metadata",
+		Name: "test_create_res_metadata",
 		Metadata: &common.MetadataMutable{
 			Labels: map[string]string{
 				"key1": "value1",
@@ -118,11 +118,129 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithNonUniqueNa
 	s.Nil(created)
 }
 
+// Update
+
+func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_Succeeds() {
+	fixedLabel := "fixed label"
+	updateLabel := "update label"
+	updatedLabel := "true"
+	newLabel := "new label"
+
+	labels := map[string]string{
+		"fixed":  fixedLabel,
+		"update": updateLabel,
+	}
+	updateLabels := map[string]string{
+		"update": updatedLabel,
+		"new":    newLabel,
+	}
+	expectedLabels := map[string]string{
+		"fixed":  fixedLabel,
+		"update": updatedLabel,
+		"new":    newLabel,
+	}
+
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_update_res",
+		Metadata: &common.MetadataMutable{
+			Labels: labels,
+		},
+	})
+	s.Require().NoError(err)
+	s.NotNil(created)
+
+	// update with no changes
+	updated, err := s.db.PolicyClient.UpdateRegisteredResource(s.ctx, &registeredresources.UpdateRegisteredResourceRequest{
+		Id: created.Id,
+	})
+	s.Require().NoError(err)
+	s.NotNil(updated)
+
+	// verify resource not updated
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.Id)
+	s.Require().NoError(err)
+	s.Require().NotNil(got)
+	s.Equal(created.Name, got.Name)
+	s.EqualValues(labels, got.GetMetadata().GetLabels())
+
+	// update with changes
+	updated, err = s.db.PolicyClient.UpdateRegisteredResource(s.ctx, &registeredresources.UpdateRegisteredResourceRequest{
+		Id:   created.Id,
+		Name: "test_update_res__new_name",
+		Metadata: &common.MetadataMutable{
+			Labels: updateLabels,
+		},
+		MetadataUpdateBehavior: common.MetadataUpdateEnum_METADATA_UPDATE_ENUM_EXTEND,
+	})
+	s.Require().NoError(err)
+	s.NotNil(updated)
+
+	// verify resource updated
+	got, err = s.db.PolicyClient.GetRegisteredResource(s.ctx, created.Id)
+	s.Require().NoError(err)
+	s.NotNil(got)
+	s.Equal("test_update_res__new_name", got.Name)
+	s.EqualValues(expectedLabels, got.GetMetadata().GetLabels())
+	metadata := got.GetMetadata()
+	createdAt := metadata.GetCreatedAt()
+	updatedAt := metadata.GetUpdatedAt()
+	s.False(createdAt.AsTime().IsZero())
+	s.False(updatedAt.AsTime().IsZero())
+	s.True(updatedAt.AsTime().After(createdAt.AsTime()))
+}
+
+func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_NormalizedName_Succeeds() {
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_update_res_normalized",
+	})
+	s.Require().NoError(err)
+	s.NotNil(created)
+
+	updated, err := s.db.PolicyClient.UpdateRegisteredResource(s.ctx, &registeredresources.UpdateRegisteredResourceRequest{
+		Id:   created.Id,
+		Name: "TeST_UpDaTe_RES_NorMa-LiZeD",
+	})
+	s.Require().NoError(err)
+	s.NotNil(updated)
+
+	// verify resource updated
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.Id)
+	s.Require().NoError(err)
+	s.NotNil(got)
+	s.Equal("test_update_res_norma-lized", got.Name)
+}
+
+func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_InvalidID_Fails() {
+	updated, err := s.db.PolicyClient.UpdateRegisteredResource(s.ctx, &registeredresources.UpdateRegisteredResourceRequest{
+		Id: invalidID,
+	})
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(updated)
+}
+
+func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_NonUniqueName_Fails() {
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_update_res_non_unique",
+	})
+	s.Require().NoError(err)
+	s.NotNil(created)
+
+	existingRes := s.f.GetRegisteredResourceKey("res_only")
+	updated, err := s.db.PolicyClient.UpdateRegisteredResource(s.ctx, &registeredresources.UpdateRegisteredResourceRequest{
+		Id:   created.Id,
+		Name: existingRes.Name,
+	})
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrUniqueConstraintViolation)
+	s.Nil(updated)
+}
+
 // Delete
 
 func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResource_Succeeds() {
 	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
-		Name: "test_delete",
+		Name: "test_delete_res",
 		Values: []string{
 			"test_delete_value1",
 			"test_delete_value2",
@@ -171,7 +289,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_Succeeds()
 	res := s.f.GetRegisteredResourceKey("res_only")
 	req := &registeredresources.CreateRegisteredResourceValueRequest{
 		ResourceId: res.ID,
-		Value:      "test_create_value",
+		Value:      "test_create_res_value",
 	}
 
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
@@ -183,7 +301,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_Normalized
 	res := s.f.GetRegisteredResourceKey("res_only")
 	req := &registeredresources.CreateRegisteredResourceValueRequest{
 		ResourceId: res.ID,
-		Value:      "TeST_CrEaTe_NorMa-LiZeD",
+		Value:      "TeST_CrEaTe_RES_value_NorMa-LiZeD",
 	}
 
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
@@ -195,7 +313,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_Normalized
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithMetadata_Succeeds() {
 	req := &registeredresources.CreateRegisteredResourceValueRequest{
 		ResourceId: s.f.GetRegisteredResourceKey("res_only").ID,
-		Value:      "test_create_metadata",
+		Value:      "test_create_res_value_metadata",
 		Metadata: &common.MetadataMutable{
 			Labels: map[string]string{
 				"key1": "value1",
@@ -213,7 +331,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithMetada
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithInvalidResource_Fails() {
 	req := &registeredresources.CreateRegisteredResourceValueRequest{
 		ResourceId: invalidID,
-		Value:      "test_create_value__invalid_resource",
+		Value:      "test_create_res_value__invalid_resource",
 	}
 
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
@@ -237,13 +355,137 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithNonUni
 	s.Nil(created)
 }
 
+// Update
+
+func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds() {
+	fixedLabel := "fixed label"
+	updateLabel := "update label"
+	updatedLabel := "true"
+	newLabel := "new label"
+
+	labels := map[string]string{
+		"fixed":  fixedLabel,
+		"update": updateLabel,
+	}
+	updateLabels := map[string]string{
+		"update": updatedLabel,
+		"new":    newLabel,
+	}
+	expectedLabels := map[string]string{
+		"fixed":  fixedLabel,
+		"update": updatedLabel,
+		"new":    newLabel,
+	}
+
+	existingRes := s.f.GetRegisteredResourceKey("res_only")
+	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: existingRes.ID,
+		Value:      "test_update_res_value",
+		Metadata: &common.MetadataMutable{
+			Labels: labels,
+		},
+	})
+	s.Require().NoError(err)
+	s.NotNil(created)
+
+	// update with no changes
+	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
+		Id: created.Id,
+	})
+	s.Require().NoError(err)
+	s.NotNil(updated)
+
+	// verify resource value not updated
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Id)
+	s.Require().NoError(err)
+	s.Require().NotNil(got)
+	s.Equal(created.Value, got.Value)
+	s.EqualValues(labels, got.GetMetadata().GetLabels())
+
+	// update with changes
+	updated, err = s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
+		Id:    created.Id,
+		Value: "test_update_res_value__new_value",
+		Metadata: &common.MetadataMutable{
+			Labels: updateLabels,
+		},
+		MetadataUpdateBehavior: common.MetadataUpdateEnum_METADATA_UPDATE_ENUM_EXTEND,
+	})
+	s.Require().NoError(err)
+	s.NotNil(updated)
+
+	// verify resource updated
+	got, err = s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Id)
+	s.Require().NoError(err)
+	s.NotNil(got)
+	s.Equal("test_update_res_value__new_value", got.Value)
+	s.EqualValues(expectedLabels, got.GetMetadata().GetLabels())
+	metadata := got.GetMetadata()
+	createdAt := metadata.GetCreatedAt()
+	updatedAt := metadata.GetUpdatedAt()
+	s.False(createdAt.AsTime().IsZero())
+	s.False(updatedAt.AsTime().IsZero())
+	s.True(updatedAt.AsTime().After(createdAt.AsTime()))
+}
+
+func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_NormalizedName_Succeeds() {
+	existingRes := s.f.GetRegisteredResourceKey("res_only")
+	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: existingRes.ID,
+		Value:      "test_update_res_value_normalized",
+	})
+	s.Require().NoError(err)
+	s.NotNil(created)
+
+	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
+		Id:    created.Id,
+		Value: "TeST_UpDaTe_RES_value_NorMa-LiZeD",
+	})
+	s.Require().NoError(err)
+	s.NotNil(updated)
+
+	// verify resource value updated
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Id)
+	s.Require().NoError(err)
+	s.NotNil(got)
+	s.Equal("test_update_res_value_norma-lized", got.Value)
+}
+
+func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_InvalidID_Fails() {
+	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
+		Id: invalidID,
+	})
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(updated)
+}
+
+func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_NonUniqueResourceAndValue_Fails() {
+	existingResValue := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
+
+	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: existingResValue.RegisteredResourceID,
+		Value:      "test_update_res_value_non_unique",
+	})
+	s.Require().NoError(err)
+	s.NotNil(created)
+
+	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
+		Id:    created.Id,
+		Value: existingResValue.Value,
+	})
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrUniqueConstraintViolation)
+	s.Nil(updated)
+}
+
 // Delete
 
 func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResourceValue_Succeeds() {
 	existingRes := s.f.GetRegisteredResourceKey("res_only")
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
 		ResourceId: existingRes.ID,
-		Value:      "test_delete_value",
+		Value:      "test_delete_res_value",
 	})
 	s.Require().NoError(err)
 
diff --git a/service/policy/db/registered_resources.go b/service/policy/db/registered_resources.go
index c1e99b9e99..aa7f1ad1eb 100644
--- a/service/policy/db/registered_resources.go
+++ b/service/policy/db/registered_resources.go
@@ -166,7 +166,7 @@ func (c PolicyDBClient) UpdateRegisteredResource(ctx context.Context, r *registe
 	id := r.GetId()
 	name := strings.ToLower(r.GetName())
 	metadataJSON, metadata, err := db.MarshalUpdateMetadata(r.GetMetadata(), r.GetMetadataUpdateBehavior(), func() (*common.Metadata, error) {
-		v, err := c.GetAttributeValue(ctx, id)
+		v, err := c.GetRegisteredResource(ctx, id)
 		if err != nil {
 			return nil, err
 		}
@@ -327,7 +327,7 @@ func (c PolicyDBClient) UpdateRegisteredResourceValue(ctx context.Context, r *re
 	id := r.GetId()
 	value := strings.ToLower(r.GetValue())
 	metadataJSON, metadata, err := db.MarshalUpdateMetadata(r.GetMetadata(), r.GetMetadataUpdateBehavior(), func() (*common.Metadata, error) {
-		v, err := c.GetAttributeValue(ctx, id)
+		v, err := c.GetRegisteredResourceValue(ctx, id)
 		if err != nil {
 			return nil, err
 		}

From 569d0fb1bd31d5ea0a28620764e053b3d6107516 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Wed, 16 Apr 2025 15:16:35 -0600
Subject: [PATCH 08/19] fix proto lint errors

---
 .../integration/registered_resources_test.go  | 73 ++++++++++---------
 1 file changed, 37 insertions(+), 36 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index 74bfb5ead3..1f832c631d 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -68,7 +68,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_NormalizedName_
 	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
 	s.Require().NoError(err)
 	s.NotNil(created)
-	s.Equal(strings.ToLower(req.Name), created.Name)
+	s.Equal(strings.ToLower(req.GetName()), created.GetName())
 }
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithValues_Succeeds() {
@@ -84,9 +84,10 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithValues_Succ
 	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
 	s.Require().NoError(err)
 	s.NotNil(created)
-	s.Require().Equal(len(created.Values), 2)
-	s.Equal(values[0], created.Values[0].Value)
-	s.Equal(values[1], created.Values[1].Value)
+	createdVals := created.GetValues()
+	s.Require().Equal(len(createdVals), 2)
+	s.Equal(values[0], createdVals[0].GetValue())
+	s.Equal(values[1], createdVals[1].GetValue())
 }
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithMetadata_Succeeds() {
@@ -103,7 +104,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithMetadata_Su
 	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
 	s.Require().NoError(err)
 	s.NotNil(created)
-	s.Require().Equal(len(created.Metadata.Labels), 2)
+	s.Require().Equal(len(created.GetMetadata().GetLabels()), 2)
 }
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithNonUniqueName_Fails() {
@@ -151,21 +152,21 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_Succeeds() {
 
 	// update with no changes
 	updated, err := s.db.PolicyClient.UpdateRegisteredResource(s.ctx, &registeredresources.UpdateRegisteredResourceRequest{
-		Id: created.Id,
+		Id: created.GetId(),
 	})
 	s.Require().NoError(err)
 	s.NotNil(updated)
 
 	// verify resource not updated
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.Id)
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
 	s.Require().NoError(err)
 	s.Require().NotNil(got)
-	s.Equal(created.Name, got.Name)
+	s.Equal(created.GetName(), got.GetName())
 	s.EqualValues(labels, got.GetMetadata().GetLabels())
 
 	// update with changes
 	updated, err = s.db.PolicyClient.UpdateRegisteredResource(s.ctx, &registeredresources.UpdateRegisteredResourceRequest{
-		Id:   created.Id,
+		Id:   created.GetId(),
 		Name: "test_update_res__new_name",
 		Metadata: &common.MetadataMutable{
 			Labels: updateLabels,
@@ -176,10 +177,10 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_Succeeds() {
 	s.NotNil(updated)
 
 	// verify resource updated
-	got, err = s.db.PolicyClient.GetRegisteredResource(s.ctx, created.Id)
+	got, err = s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
 	s.Require().NoError(err)
 	s.NotNil(got)
-	s.Equal("test_update_res__new_name", got.Name)
+	s.Equal("test_update_res__new_name", got.GetName())
 	s.EqualValues(expectedLabels, got.GetMetadata().GetLabels())
 	metadata := got.GetMetadata()
 	createdAt := metadata.GetCreatedAt()
@@ -197,17 +198,17 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_NormalizedName_
 	s.NotNil(created)
 
 	updated, err := s.db.PolicyClient.UpdateRegisteredResource(s.ctx, &registeredresources.UpdateRegisteredResourceRequest{
-		Id:   created.Id,
+		Id:   created.GetId(),
 		Name: "TeST_UpDaTe_RES_NorMa-LiZeD",
 	})
 	s.Require().NoError(err)
 	s.NotNil(updated)
 
 	// verify resource updated
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.Id)
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
 	s.Require().NoError(err)
 	s.NotNil(got)
-	s.Equal("test_update_res_norma-lized", got.Name)
+	s.Equal("test_update_res_norma-lized", got.GetName())
 }
 
 func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_InvalidID_Fails() {
@@ -228,7 +229,7 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_NonUniqueName_F
 
 	existingRes := s.f.GetRegisteredResourceKey("res_only")
 	updated, err := s.db.PolicyClient.UpdateRegisteredResource(s.ctx, &registeredresources.UpdateRegisteredResourceRequest{
-		Id:   created.Id,
+		Id:   created.GetId(),
 		Name: existingRes.Name,
 	})
 	s.Require().Error(err)
@@ -248,25 +249,25 @@ func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResource_Succeeds() {
 	})
 	s.Require().NoError(err)
 
-	deleted, err := s.db.PolicyClient.DeleteRegisteredResource(s.ctx, created.Id)
+	deleted, err := s.db.PolicyClient.DeleteRegisteredResource(s.ctx, created.GetId())
 	s.Require().NoError(err)
-	s.Require().Equal(created.Id, deleted.Id)
+	s.Require().Equal(created.GetId(), deleted.GetId())
 
 	// verify resource deleted
-
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.Id)
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(got)
 
 	// verify resource values deleted
+	gotValues := created.GetValues()
 
-	gotValue1, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Values[0].Id)
+	gotValue1, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, gotValues[0].GetId())
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(gotValue1)
 
-	gotValue2, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Values[1].Id)
+	gotValue2, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, gotValues[1].GetId())
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(gotValue2)
@@ -307,7 +308,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_Normalized
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
 	s.Require().NoError(err)
 	s.NotNil(created)
-	s.Equal(strings.ToLower(req.Value), created.Value)
+	s.Equal(strings.ToLower(req.GetValue()), created.GetValue())
 }
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithMetadata_Succeeds() {
@@ -325,7 +326,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithMetada
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
 	s.Require().NoError(err)
 	s.NotNil(created)
-	s.Require().Equal(len(created.Metadata.Labels), 2)
+	s.Require().Equal(len(created.GetMetadata().GetLabels()), 2)
 }
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithInvalidResource_Fails() {
@@ -390,21 +391,21 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds()
 
 	// update with no changes
 	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
-		Id: created.Id,
+		Id: created.GetId(),
 	})
 	s.Require().NoError(err)
 	s.NotNil(updated)
 
 	// verify resource value not updated
-	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Id)
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
 	s.Require().NoError(err)
 	s.Require().NotNil(got)
-	s.Equal(created.Value, got.Value)
+	s.Equal(created.GetValue(), got.GetValue())
 	s.EqualValues(labels, got.GetMetadata().GetLabels())
 
 	// update with changes
 	updated, err = s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
-		Id:    created.Id,
+		Id:    created.GetId(),
 		Value: "test_update_res_value__new_value",
 		Metadata: &common.MetadataMutable{
 			Labels: updateLabels,
@@ -415,10 +416,10 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds()
 	s.NotNil(updated)
 
 	// verify resource updated
-	got, err = s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Id)
+	got, err = s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
 	s.Require().NoError(err)
 	s.NotNil(got)
-	s.Equal("test_update_res_value__new_value", got.Value)
+	s.Equal("test_update_res_value__new_value", got.GetValue())
 	s.EqualValues(expectedLabels, got.GetMetadata().GetLabels())
 	metadata := got.GetMetadata()
 	createdAt := metadata.GetCreatedAt()
@@ -438,17 +439,17 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Normalized
 	s.NotNil(created)
 
 	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
-		Id:    created.Id,
+		Id:    created.GetId(),
 		Value: "TeST_UpDaTe_RES_value_NorMa-LiZeD",
 	})
 	s.Require().NoError(err)
 	s.NotNil(updated)
 
 	// verify resource value updated
-	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Id)
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
 	s.Require().NoError(err)
 	s.NotNil(got)
-	s.Equal("test_update_res_value_norma-lized", got.Value)
+	s.Equal("test_update_res_value_norma-lized", got.GetValue())
 }
 
 func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_InvalidID_Fails() {
@@ -471,7 +472,7 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_NonUniqueR
 	s.NotNil(created)
 
 	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
-		Id:    created.Id,
+		Id:    created.GetId(),
 		Value: existingResValue.Value,
 	})
 	s.Require().Error(err)
@@ -489,13 +490,13 @@ func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResourceValue_Succeeds()
 	})
 	s.Require().NoError(err)
 
-	deleted, err := s.db.PolicyClient.DeleteRegisteredResourceValue(s.ctx, created.Id)
+	deleted, err := s.db.PolicyClient.DeleteRegisteredResourceValue(s.ctx, created.GetId())
 	s.Require().NoError(err)
-	s.Require().Equal(created.Id, deleted.Id)
+	s.Require().Equal(created.GetId(), deleted.GetId())
 
 	// verify resource value deleted
 
-	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.Id)
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(got)

From 1f8bd21faccf3d309bda6aee5557373c3de936e0 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Wed, 16 Apr 2025 15:45:30 -0600
Subject: [PATCH 09/19] more lint fixes

---
 service/integration/registered_resources_test.go | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index 1f832c631d..7bb442c0a1 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -85,7 +85,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithValues_Succ
 	s.Require().NoError(err)
 	s.NotNil(created)
 	createdVals := created.GetValues()
-	s.Require().Equal(len(createdVals), 2)
+	s.Require().Len(createdVals, 2)
 	s.Equal(values[0], createdVals[0].GetValue())
 	s.Equal(values[1], createdVals[1].GetValue())
 }
@@ -104,7 +104,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithMetadata_Su
 	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, req)
 	s.Require().NoError(err)
 	s.NotNil(created)
-	s.Require().Equal(len(created.GetMetadata().GetLabels()), 2)
+	s.Require().Len(created.GetMetadata().GetLabels(), 2)
 }
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithNonUniqueName_Fails() {
@@ -326,7 +326,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithMetada
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
 	s.Require().NoError(err)
 	s.NotNil(created)
-	s.Require().Equal(len(created.GetMetadata().GetLabels()), 2)
+	s.Require().Len(created.GetMetadata().GetLabels(), 2)
 }
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithInvalidResource_Fails() {

From f1101fcb6b17c1f90a7320ea7b6392a4ae607380 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Thu, 17 Apr 2025 12:48:03 -0600
Subject: [PATCH 10/19] add get integration tests

---
 .../integration/registered_resources_test.go  | 65 +++++++++++++++++++
 service/policy/db/query.sql                   |  2 +-
 service/policy/db/query.sql.go                |  4 +-
 3 files changed, 68 insertions(+), 3 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index 7bb442c0a1..5ccc2bd38e 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -119,6 +119,48 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithNonUniqueNa
 	s.Nil(created)
 }
 
+// Get
+
+func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_Succeeds() {
+	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
+	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
+	existingResValue2 := s.f.GetRegisteredResourceValueKey("res_with_values__value2")
+
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, existingRes.ID)
+	s.Require().NoError(err)
+	s.NotNil(got)
+	s.Equal(existingRes.Name, got.GetName())
+	metadata := got.GetMetadata()
+	s.False(metadata.GetCreatedAt().AsTime().IsZero())
+	s.False(metadata.GetUpdatedAt().AsTime().IsZero())
+	values := got.GetValues()
+	s.Require().Len(values, 2)
+	s.Equal(existingResValue1.Value, values[0].GetValue())
+	s.Equal(existingResValue2.Value, values[1].GetValue())
+}
+
+func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_WithoutValues_Succeeds() {
+	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_get_res_without_values",
+	})
+	s.Require().NoError(err)
+	s.NotNil(created)
+
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
+	s.Require().NoError(err)
+	s.NotNil(got)
+	s.Equal(created.GetName(), got.GetName())
+	values := got.GetValues()
+	s.Require().Len(values, 0)
+}
+
+func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_InvalidID_Fails() {
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, invalidID)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(got)
+}
+
 // Update
 
 func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_Succeeds() {
@@ -356,6 +398,29 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithNonUni
 	s.Nil(created)
 }
 
+// Get
+
+func (s *RegisteredResourcesSuite) Test_GetRegisteredResourceValue_Succeeds() {
+	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
+	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
+
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, existingResValue1.ID)
+	s.Require().NoError(err)
+	s.NotNil(got)
+	s.Equal(existingRes.ID, got.GetResource().GetId())
+	s.Equal(existingResValue1.Value, got.GetValue())
+	metadata := got.GetMetadata()
+	s.False(metadata.GetCreatedAt().AsTime().IsZero())
+	s.False(metadata.GetUpdatedAt().AsTime().IsZero())
+}
+
+func (s *RegisteredResourcesSuite) Test_GetRegisteredResourceValue_InvalidID_Fails() {
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, invalidID)
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrNotFound)
+	s.Nil(got)
+}
+
 // Update
 
 func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds() {
diff --git a/service/policy/db/query.sql b/service/policy/db/query.sql
index faec656491..d8370b90f6 100644
--- a/service/policy/db/query.sql
+++ b/service/policy/db/query.sql
@@ -1160,7 +1160,7 @@ SELECT
             'id', v.id,
             'value', v.value
         )
-    ) as values
+    ) FILTER (WHERE v.id IS NOT NULL) as values
 FROM registered_resources r
 LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
 WHERE r.id = $1
diff --git a/service/policy/db/query.sql.go b/service/policy/db/query.sql.go
index d4f72a4e0d..2935e81bb0 100644
--- a/service/policy/db/query.sql.go
+++ b/service/policy/db/query.sql.go
@@ -3495,7 +3495,7 @@ SELECT
             'id', v.id,
             'value', v.value
         )
-    ) as values
+    ) FILTER (WHERE v.id IS NOT NULL) as values
 FROM registered_resources r
 LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
 WHERE r.id = $1
@@ -3520,7 +3520,7 @@ type getRegisteredResourceRow struct {
 //	            'id', v.id,
 //	            'value', v.value
 //	        )
-//	    ) as values
+//	    ) FILTER (WHERE v.id IS NOT NULL) as values
 //	FROM registered_resources r
 //	LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
 //	WHERE r.id = $1

From 9647b241d5cd5792a3d7c7906e9709e52483f60a Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Thu, 17 Apr 2025 14:34:19 -0600
Subject: [PATCH 11/19] lint fix

---
 service/integration/registered_resources_test.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index 5ccc2bd38e..fa4a6d1539 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -151,7 +151,7 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_WithoutValues_Succ
 	s.NotNil(got)
 	s.Equal(created.GetName(), got.GetName())
 	values := got.GetValues()
-	s.Require().Len(values, 0)
+	s.Require().Empty(values)
 }
 
 func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_InvalidID_Fails() {

From dd17373f2d9f69ea928d4e241435c3c78414e89f Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Thu, 17 Apr 2025 16:12:33 -0600
Subject: [PATCH 12/19] add list sql filter and fix bugs

---
 service/policy/db/query.sql               | 4 ++--
 service/policy/db/query.sql.go            | 4 ++--
 service/policy/db/registered_resources.go | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/service/policy/db/query.sql b/service/policy/db/query.sql
index d8370b90f6..9846e86e85 100644
--- a/service/policy/db/query.sql
+++ b/service/policy/db/query.sql
@@ -1180,14 +1180,14 @@ SELECT
             'id', v.id,
             'value', v.value
         )
-    ) AS values,
+    ) FILTER (WHERE v.id IS NOT NULL) as values,
     counted.total
 FROM registered_resources r
 CROSS JOIN counted
 LEFT JOIN registered_resource_values v ON v.registered_resource_id = r.id
 GROUP BY r.id, counted.total
 LIMIT @limit_ 
-OFFSET @offset_; 
+OFFSET @offset_;
 
 -- name: updateRegisteredResource :execrows
 UPDATE registered_resources
diff --git a/service/policy/db/query.sql.go b/service/policy/db/query.sql.go
index 2935e81bb0..1a90ce1144 100644
--- a/service/policy/db/query.sql.go
+++ b/service/policy/db/query.sql.go
@@ -4055,7 +4055,7 @@ SELECT
             'id', v.id,
             'value', v.value
         )
-    ) AS values,
+    ) FILTER (WHERE v.id IS NOT NULL) as values,
     counted.total
 FROM registered_resources r
 CROSS JOIN counted
@@ -4093,7 +4093,7 @@ type listRegisteredResourcesRow struct {
 //	            'id', v.id,
 //	            'value', v.value
 //	        )
-//	    ) AS values,
+//	    ) FILTER (WHERE v.id IS NOT NULL) as values,
 //	    counted.total
 //	FROM registered_resources r
 //	CROSS JOIN counted
diff --git a/service/policy/db/registered_resources.go b/service/policy/db/registered_resources.go
index aa7f1ad1eb..c5b9c85f78 100644
--- a/service/policy/db/registered_resources.go
+++ b/service/policy/db/registered_resources.go
@@ -124,7 +124,7 @@ func (c PolicyDBClient) ListRegisteredResources(ctx context.Context, r *register
 		return nil, db.WrapIfKnownInvalidQueryErr(err)
 	}
 
-	rrList := make([]*policy.RegisteredResource, 0, len(list))
+	rrList := make([]*policy.RegisteredResource, len(list))
 
 	for i, r := range list {
 		metadata := &common.Metadata{}
@@ -288,7 +288,7 @@ func (c PolicyDBClient) ListRegisteredResourceValues(ctx context.Context, r *reg
 		return nil, db.WrapIfKnownInvalidQueryErr(err)
 	}
 
-	rvList := make([]*policy.RegisteredResourceValue, 0, len(list))
+	rvList := make([]*policy.RegisteredResourceValue, len(list))
 
 	for i, r := range list {
 		metadata := &common.Metadata{}

From e05a00702ffd7a076fd505a156cfe6de63f3e327 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Thu, 17 Apr 2025 16:35:58 -0600
Subject: [PATCH 13/19] refactor integration tests to not modify fixture data

---
 .../integration/registered_resources_test.go  | 123 ++++++++++++------
 1 file changed, 80 insertions(+), 43 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index fa4a6d1539..f31e0d86f7 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -122,9 +122,7 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithNonUniqueNa
 // Get
 
 func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_Succeeds() {
-	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
-	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
-	existingResValue2 := s.f.GetRegisteredResourceValueKey("res_with_values__value2")
+	existingRes := s.f.GetRegisteredResourceKey("res_only")
 
 	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, existingRes.ID)
 	s.Require().NoError(err)
@@ -133,25 +131,21 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_Succeeds() {
 	metadata := got.GetMetadata()
 	s.False(metadata.GetCreatedAt().AsTime().IsZero())
 	s.False(metadata.GetUpdatedAt().AsTime().IsZero())
-	values := got.GetValues()
-	s.Require().Len(values, 2)
-	s.Equal(existingResValue1.Value, values[0].GetValue())
-	s.Equal(existingResValue2.Value, values[1].GetValue())
+	s.Empty(got.GetValues())
 }
 
-func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_WithoutValues_Succeeds() {
-	created, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
-		Name: "test_get_res_without_values",
-	})
-	s.Require().NoError(err)
-	s.NotNil(created)
+func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_WithValues_Succeeds() {
+	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
+	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
+	existingResValue2 := s.f.GetRegisteredResourceValueKey("res_with_values__value2")
 
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, existingRes.ID)
 	s.Require().NoError(err)
 	s.NotNil(got)
-	s.Equal(created.GetName(), got.GetName())
 	values := got.GetValues()
-	s.Require().Empty(values)
+	s.Require().Len(values, 2)
+	s.Equal(existingResValue1.Value, values[0].GetValue())
+	s.Equal(existingResValue2.Value, values[1].GetValue())
 }
 
 func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_InvalidID_Fails() {
@@ -329,10 +323,15 @@ func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResource_WithInvalidID_F
 // Create
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_Succeeds() {
-	res := s.f.GetRegisteredResourceKey("res_only")
+	res, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_create_res_value",
+	})
+	s.Require().NoError(err)
+	s.NotNil(res)
+
 	req := &registeredresources.CreateRegisteredResourceValueRequest{
-		ResourceId: res.ID,
-		Value:      "test_create_res_value",
+		ResourceId: res.GetId(),
+		Value:      "value",
 	}
 
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
@@ -341,10 +340,15 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_Succeeds()
 }
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_NormalizedName_Succeeds() {
-	res := s.f.GetRegisteredResourceKey("res_only")
+	res, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_create_res_value_normalized",
+	})
+	s.Require().NoError(err)
+	s.NotNil(res)
+
 	req := &registeredresources.CreateRegisteredResourceValueRequest{
-		ResourceId: res.ID,
-		Value:      "TeST_CrEaTe_RES_value_NorMa-LiZeD",
+		ResourceId: res.GetId(),
+		Value:      "VaLuE_NorMa-LiZeD",
 	}
 
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, req)
@@ -354,8 +358,14 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_Normalized
 }
 
 func (s *RegisteredResourcesSuite) Test_CreateRegisteredResourceValue_WithMetadata_Succeeds() {
+	res, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_create_res_value_metadata",
+	})
+	s.Require().NoError(err)
+	s.NotNil(res)
+
 	req := &registeredresources.CreateRegisteredResourceValueRequest{
-		ResourceId: s.f.GetRegisteredResourceKey("res_only").ID,
+		ResourceId: res.GetId(),
 		Value:      "test_create_res_value_metadata",
 		Metadata: &common.MetadataMutable{
 			Labels: map[string]string{
@@ -443,10 +453,15 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds()
 		"new":    newLabel,
 	}
 
-	existingRes := s.f.GetRegisteredResourceKey("res_only")
+	res, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_update_res_value",
+	})
+	s.Require().NoError(err)
+	s.NotNil(res)
+
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
-		ResourceId: existingRes.ID,
-		Value:      "test_update_res_value",
+		ResourceId: res.GetId(),
+		Value:      "value",
 		Metadata: &common.MetadataMutable{
 			Labels: labels,
 		},
@@ -471,7 +486,7 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds()
 	// update with changes
 	updated, err = s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
 		Id:    created.GetId(),
-		Value: "test_update_res_value__new_value",
+		Value: "updated_value",
 		Metadata: &common.MetadataMutable{
 			Labels: updateLabels,
 		},
@@ -484,7 +499,7 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds()
 	got, err = s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
 	s.Require().NoError(err)
 	s.NotNil(got)
-	s.Equal("test_update_res_value__new_value", got.GetValue())
+	s.Equal("updated_value", got.GetValue())
 	s.EqualValues(expectedLabels, got.GetMetadata().GetLabels())
 	metadata := got.GetMetadata()
 	createdAt := metadata.GetCreatedAt()
@@ -495,17 +510,22 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds()
 }
 
 func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_NormalizedName_Succeeds() {
-	existingRes := s.f.GetRegisteredResourceKey("res_only")
+	res, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_update_res_value_normalized",
+	})
+	s.Require().NoError(err)
+	s.NotNil(res)
+
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
-		ResourceId: existingRes.ID,
-		Value:      "test_update_res_value_normalized",
+		ResourceId: res.GetId(),
+		Value:      "value_normalized",
 	})
 	s.Require().NoError(err)
 	s.NotNil(created)
 
 	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
 		Id:    created.GetId(),
-		Value: "TeST_UpDaTe_RES_value_NorMa-LiZeD",
+		Value: "VaLuE_NorMa-LiZeD",
 	})
 	s.Require().NoError(err)
 	s.NotNil(updated)
@@ -514,7 +534,7 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Normalized
 	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
 	s.Require().NoError(err)
 	s.NotNil(got)
-	s.Equal("test_update_res_value_norma-lized", got.GetValue())
+	s.Equal("value_norma-lized", got.GetValue())
 }
 
 func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_InvalidID_Fails() {
@@ -527,18 +547,30 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_InvalidID_
 }
 
 func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_NonUniqueResourceAndValue_Fails() {
-	existingResValue := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
+	res, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_update_res_value_non_unique",
+	})
+	s.Require().NoError(err)
+	s.NotNil(res)
 
-	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
-		ResourceId: existingResValue.RegisteredResourceID,
-		Value:      "test_update_res_value_non_unique",
+	resVal1, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: res.GetId(),
+		Value:      "value1",
 	})
 	s.Require().NoError(err)
-	s.NotNil(created)
+	s.NotNil(resVal1)
+
+	resVal2, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
+		ResourceId: res.GetId(),
+		Value:      "value2",
+	})
+	s.Require().NoError(err)
+	s.NotNil(resVal2)
 
 	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
-		Id:    created.GetId(),
-		Value: existingResValue.Value,
+		Id:    resVal1.GetId(),
+		// causes unique constraint violation attempting to update value1 to value2
+		Value: resVal2.GetValue(),
 	})
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrUniqueConstraintViolation)
@@ -548,10 +580,15 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_NonUniqueR
 // Delete
 
 func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResourceValue_Succeeds() {
-	existingRes := s.f.GetRegisteredResourceKey("res_only")
+	res, err := s.db.PolicyClient.CreateRegisteredResource(s.ctx, &registeredresources.CreateRegisteredResourceRequest{
+		Name: "test_delete_res_value",
+	})
+	s.Require().NoError(err)
+	s.NotNil(res)
+
 	created, err := s.db.PolicyClient.CreateRegisteredResourceValue(s.ctx, &registeredresources.CreateRegisteredResourceValueRequest{
-		ResourceId: existingRes.ID,
-		Value:      "test_delete_res_value",
+		ResourceId: res.GetId(),
+		Value:      "value",
 	})
 	s.Require().NoError(err)
 

From 6acd1102da7ee1cfde937353538f425504998a22 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Fri, 18 Apr 2025 11:16:14 -0600
Subject: [PATCH 14/19] add list integration tests

---
 .../integration/registered_resources_test.go  | 241 +++++++++++++++++-
 .../internal/fixtures/policy_fixtures.yaml    |   9 +-
 2 files changed, 248 insertions(+), 2 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index f31e0d86f7..f09adfa3df 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -7,10 +7,12 @@ import (
 	"testing"
 
 	"github.com/opentdf/platform/protocol/go/common"
+	"github.com/opentdf/platform/protocol/go/policy"
 	"github.com/opentdf/platform/protocol/go/policy/registeredresources"
 	"github.com/opentdf/platform/service/internal/fixtures"
 	"github.com/opentdf/platform/service/pkg/db"
 	"github.com/stretchr/testify/suite"
+	"google.golang.org/protobuf/proto"
 )
 
 type RegisteredResourcesSuite struct {
@@ -155,6 +157,112 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_InvalidID_Fails()
 	s.Nil(got)
 }
 
+// List
+
+func (s *RegisteredResourcesSuite) Test_ListRegisteredResources_NoPagination_Succeeds() {
+	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
+	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
+	existingResValue2 := s.f.GetRegisteredResourceValueKey("res_with_values__value2")
+	existingResOnly := s.f.GetRegisteredResourceKey("res_only")
+
+	list, err := s.db.PolicyClient.ListRegisteredResources(s.ctx, &registeredresources.ListRegisteredResourcesRequest{})
+	s.Require().NoError(err)
+	s.NotNil(list)
+
+	foundCount := 0
+
+	for _, r := range list.GetResources() {
+		if r.GetId() == existingRes.ID {
+			foundCount++
+			s.Equal(existingRes.Name, r.GetName())
+			values := r.GetValues()
+			s.Require().Len(values, 2)
+			s.Equal(existingResValue1.Value, values[0].GetValue())
+			s.Equal(existingResValue2.Value, values[1].GetValue())
+			metadata := r.GetMetadata()
+			s.False(metadata.GetCreatedAt().AsTime().IsZero())
+			s.False(metadata.GetUpdatedAt().AsTime().IsZero())
+		}
+
+		if r.GetId() == existingResOnly.ID {
+			foundCount++
+			s.Equal(existingResOnly.Name, r.GetName())
+			s.Require().Empty(r.GetValues())
+		}
+	}
+
+	s.Equal(2, foundCount)
+}
+
+func (s *RegisteredResourcesSuite) Test_ListRegisteredResources_Limit_Succeeds() {
+	var limit int32 = 1
+	list, err := s.db.PolicyClient.ListRegisteredResources(s.ctx, &registeredresources.ListRegisteredResourcesRequest{
+		Pagination: &policy.PageRequest{
+			Limit: limit,
+		},
+	})
+	s.Require().NoError(err)
+	s.NotNil(list)
+	items := list.GetResources()
+	s.Len(items, int(limit))
+
+	// request with one below maximum
+	list, err = s.db.PolicyClient.ListRegisteredResources(s.ctx, &registeredresources.ListRegisteredResourcesRequest{
+		Pagination: &policy.PageRequest{
+			Limit: s.db.LimitMax - 1,
+		},
+	})
+	s.NoError(err)
+	s.NotNil(list)
+
+	// exactly maximum
+	list, err = s.db.PolicyClient.ListRegisteredResources(s.ctx, &registeredresources.ListRegisteredResourcesRequest{
+		Pagination: &policy.PageRequest{
+			Limit: s.db.LimitMax,
+		},
+	})
+	s.NoError(err)
+	s.NotNil(list)
+}
+
+func (s *NamespacesSuite) Test_ListRegisteredResources_Limit_TooLarge_Fails() {
+	listRsp, err := s.db.PolicyClient.ListRegisteredResources(s.ctx, &registeredresources.ListRegisteredResourcesRequest{
+		Pagination: &policy.PageRequest{
+			Limit: s.db.LimitMax + 1,
+		},
+	})
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrListLimitTooLarge)
+	s.Nil(listRsp)
+}
+
+func (s *AttributesSuite) Test_ListRegisteredResources_Offset_Succeeds() {
+	req := &registeredresources.ListRegisteredResourcesRequest{}
+	// make initial list request to compare against
+	list, err := s.db.PolicyClient.ListRegisteredResources(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(list)
+	items := list.GetResources()
+
+	// set the offset pagination
+	offset := 2
+	req.Pagination = &policy.PageRequest{
+		Offset: int32(offset),
+	}
+	offsetList, err := s.db.PolicyClient.ListRegisteredResources(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(offsetList)
+	offsetItems := offsetList.GetResources()
+
+	// length is reduced by the offset amount
+	s.Len(offsetItems, len(items)-offset)
+
+	// objects are equal between offset and original list beginning at offset index
+	for i, attr := range offsetItems {
+		s.True(proto.Equal(attr, items[i+offset]))
+	}
+}
+
 // Update
 
 func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_Succeeds() {
@@ -431,6 +539,137 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResourceValue_InvalidID_Fai
 	s.Nil(got)
 }
 
+// List
+
+func (s *RegisteredResourcesSuite) Test_ListRegisteredResourceValues_NoPagination_Succeeds() {
+	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
+	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
+	existingResValue2 := s.f.GetRegisteredResourceValueKey("res_with_values__value2")
+
+	list, err := s.db.PolicyClient.ListRegisteredResourceValues(s.ctx, &registeredresources.ListRegisteredResourceValuesRequest{})
+	s.Require().NoError(err)
+	s.NotNil(list)
+	// should be more values than the 2 explicitly tested below
+	s.Greater(len(list.GetValues()), 2)
+
+	foundCount := 0
+
+	for _, r := range list.GetValues() {
+		if r.GetId() == existingResValue1.ID {
+			foundCount++
+			s.Equal(existingResValue1.Value, r.GetValue())
+			s.Equal(existingRes.ID, r.GetResource().GetId())
+			metadata := r.GetMetadata()
+			s.False(metadata.GetCreatedAt().AsTime().IsZero())
+			s.False(metadata.GetUpdatedAt().AsTime().IsZero())
+		}
+
+		if r.GetId() == existingResValue2.ID {
+			foundCount++
+			s.Equal(existingResValue2.Value, r.GetValue())
+			s.Equal(existingRes.ID, r.GetResource().GetId())
+			metadata := r.GetMetadata()
+			s.False(metadata.GetCreatedAt().AsTime().IsZero())
+			s.False(metadata.GetUpdatedAt().AsTime().IsZero())
+		}
+	}
+
+	s.Equal(2, foundCount)
+}
+
+func (s *RegisteredResourcesSuite) Test_ListRegisteredResourceValues_Limit_Succeeds() {
+	var limit int32 = 1
+	list, err := s.db.PolicyClient.ListRegisteredResourceValues(s.ctx, &registeredresources.ListRegisteredResourceValuesRequest{
+		Pagination: &policy.PageRequest{
+			Limit: limit,
+		},
+	})
+	s.Require().NoError(err)
+	s.NotNil(list)
+	items := list.GetValues()
+	s.Len(items, int(limit))
+
+	// request with one below maximum
+	list, err = s.db.PolicyClient.ListRegisteredResourceValues(s.ctx, &registeredresources.ListRegisteredResourceValuesRequest{
+		Pagination: &policy.PageRequest{
+			Limit: s.db.LimitMax - 1,
+		},
+	})
+	s.NoError(err)
+	s.NotNil(list)
+
+	// exactly maximum
+	list, err = s.db.PolicyClient.ListRegisteredResourceValues(s.ctx, &registeredresources.ListRegisteredResourceValuesRequest{
+		Pagination: &policy.PageRequest{
+			Limit: s.db.LimitMax,
+		},
+	})
+	s.NoError(err)
+	s.NotNil(list)
+}
+
+func (s *NamespacesSuite) Test_ListRegisteredResourceValues_Limit_TooLarge_Fails() {
+	listRsp, err := s.db.PolicyClient.ListRegisteredResourceValues(s.ctx, &registeredresources.ListRegisteredResourceValuesRequest{
+		Pagination: &policy.PageRequest{
+			Limit: s.db.LimitMax + 1,
+		},
+	})
+	s.Require().Error(err)
+	s.Require().ErrorIs(err, db.ErrListLimitTooLarge)
+	s.Nil(listRsp)
+}
+
+func (s *AttributesSuite) Test_ListRegisteredResourceValues_Offset_Succeeds() {
+	req := &registeredresources.ListRegisteredResourceValuesRequest{}
+	// make initial list request to compare against
+	list, err := s.db.PolicyClient.ListRegisteredResourceValues(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(list)
+	items := list.GetValues()
+
+	// set the offset pagination
+	offset := 2
+	req.Pagination = &policy.PageRequest{
+		Offset: int32(offset),
+	}
+	offsetList, err := s.db.PolicyClient.ListRegisteredResourceValues(s.ctx, req)
+	s.Require().NoError(err)
+	s.NotNil(offsetList)
+	offsetItems := offsetList.GetValues()
+
+	// length is reduced by the offset amount
+	s.Len(offsetItems, len(items)-offset)
+
+	// objects are equal between offset and original list beginning at offset index
+	for i, attr := range offsetItems {
+		s.True(proto.Equal(attr, items[i+offset]))
+	}
+}
+
+func (s *RegisteredResourcesSuite) Test_ListRegisteredResourceValues_ByResourceID_Succeeds() {
+	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
+	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
+	existingResValue2 := s.f.GetRegisteredResourceValueKey("res_with_values__value2")
+
+	list, err := s.db.PolicyClient.ListRegisteredResourceValues(s.ctx, &registeredresources.ListRegisteredResourceValuesRequest{
+		ResourceId: existingRes.ID,
+	})
+	s.Require().NoError(err)
+	s.NotNil(list)
+	// should only be the 2 values associated with the resource
+	s.Len(list.GetValues(), 2)
+
+	foundCount := 0
+
+	for _, r := range list.GetValues() {
+		if r.GetId() == existingResValue1.ID || r.GetId() == existingResValue2.ID {
+			foundCount++
+		}
+	}
+
+	s.Equal(2, foundCount)
+}
+
 // Update
 
 func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds() {
@@ -568,7 +807,7 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_NonUniqueR
 	s.NotNil(resVal2)
 
 	updated, err := s.db.PolicyClient.UpdateRegisteredResourceValue(s.ctx, &registeredresources.UpdateRegisteredResourceValueRequest{
-		Id:    resVal1.GetId(),
+		Id: resVal1.GetId(),
 		// causes unique constraint violation attempting to update value1 to value2
 		Value: resVal2.GetValue(),
 	})
diff --git a/service/internal/fixtures/policy_fixtures.yaml b/service/internal/fixtures/policy_fixtures.yaml
index d1dc16ba0b..5ac0dc62c8 100644
--- a/service/internal/fixtures/policy_fixtures.yaml
+++ b/service/internal/fixtures/policy_fixtures.yaml
@@ -630,9 +630,12 @@ registered_resources:
     res_with_values:
       id: f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789
       name: res1
+    res_with_values2:
+      id: 39cd944b-d703-4330-936a-83b3d497c8d4
+      name: res2
     res_only:
       id: a9b8c7d6-e5f4-3a2b-1c0d-9e8f7a6b5c4d
-      name: res2
+      name: res3
 
 ##
 # Registered Resource Values
@@ -654,3 +657,7 @@ registered_resource_values:
       id: 9e8f7a6b-5c4d-3b2a-1d0c-8f7e6a5b4c3d
       registered_resource_id: f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789
       value: res_with_values__value2
+    res_with_values2__value1:
+      id: a932ff01-cca6-41f6-a147-7eba7560611b
+      registered_resource_id: 39cd944b-d703-4330-936a-83b3d497c8d4
+      value: res_with_values2__value1

From 5fff1481002cf0191777e6f74982a1dde33e08d1 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Fri, 18 Apr 2025 11:24:55 -0600
Subject: [PATCH 15/19] fix lint issues

---
 service/integration/registered_resources_test.go | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index f09adfa3df..ee71111608 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -212,7 +212,7 @@ func (s *RegisteredResourcesSuite) Test_ListRegisteredResources_Limit_Succeeds()
 			Limit: s.db.LimitMax - 1,
 		},
 	})
-	s.NoError(err)
+	s.Require().NoError(err)
 	s.NotNil(list)
 
 	// exactly maximum
@@ -221,7 +221,7 @@ func (s *RegisteredResourcesSuite) Test_ListRegisteredResources_Limit_Succeeds()
 			Limit: s.db.LimitMax,
 		},
 	})
-	s.NoError(err)
+	s.Require().NoError(err)
 	s.NotNil(list)
 }
 
@@ -595,7 +595,7 @@ func (s *RegisteredResourcesSuite) Test_ListRegisteredResourceValues_Limit_Succe
 			Limit: s.db.LimitMax - 1,
 		},
 	})
-	s.NoError(err)
+	s.Require().NoError(err)
 	s.NotNil(list)
 
 	// exactly maximum
@@ -604,7 +604,7 @@ func (s *RegisteredResourcesSuite) Test_ListRegisteredResourceValues_Limit_Succe
 			Limit: s.db.LimitMax,
 		},
 	})
-	s.NoError(err)
+	s.Require().NoError(err)
 	s.NotNil(list)
 }
 

From 6e818b70ae3b52b66ae3180de9419e8b7d10eb87 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Mon, 21 Apr 2025 13:17:09 -0600
Subject: [PATCH 16/19] PR change requests

---
 service/internal/fixtures/policy_fixtures.yaml | 6 +++---
 service/policy/db/query.sql                    | 4 +++-
 service/policy/db/query.sql.go                 | 8 ++++++--
 3 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/service/internal/fixtures/policy_fixtures.yaml b/service/internal/fixtures/policy_fixtures.yaml
index 5ac0dc62c8..9f4f82612a 100644
--- a/service/internal/fixtures/policy_fixtures.yaml
+++ b/service/internal/fixtures/policy_fixtures.yaml
@@ -629,13 +629,13 @@ registered_resources:
   data:
     res_with_values:
       id: f3a1b2c4-5d6e-7f89-0a1b-2c3d4e5f6789
-      name: res1
+      name: res_with_values
     res_with_values2:
       id: 39cd944b-d703-4330-936a-83b3d497c8d4
-      name: res2
+      name: res_with_values2
     res_only:
       id: a9b8c7d6-e5f4-3a2b-1c0d-9e8f7a6b5c4d
-      name: res3
+      name: res_only
 
 ##
 # Registered Resource Values
diff --git a/service/policy/db/query.sql b/service/policy/db/query.sql
index 9846e86e85..05ea999bf9 100644
--- a/service/policy/db/query.sql
+++ b/service/policy/db/query.sql
@@ -1221,7 +1221,9 @@ WHERE id = $1;
 -- name: listRegisteredResourceValues :many
 WITH counted AS (
     SELECT COUNT(id) AS total
-    FROM registered_resources
+    FROM registered_resource_values
+    WHERE
+        NULLIF(@registered_resource_id, '') IS NULL OR registered_resource_id = @registered_resource_id::UUID
 )
 SELECT
     id,
diff --git a/service/policy/db/query.sql.go b/service/policy/db/query.sql.go
index 1a90ce1144..b0da734a0f 100644
--- a/service/policy/db/query.sql.go
+++ b/service/policy/db/query.sql.go
@@ -3967,7 +3967,9 @@ func (q *Queries) listPublicKeys(ctx context.Context, arg listPublicKeysParams)
 const listRegisteredResourceValues = `-- name: listRegisteredResourceValues :many
 WITH counted AS (
     SELECT COUNT(id) AS total
-    FROM registered_resources
+    FROM registered_resource_values
+    WHERE
+        NULLIF($1, '') IS NULL OR registered_resource_id = $1::UUID
 )
 SELECT
     id,
@@ -4001,7 +4003,9 @@ type listRegisteredResourceValuesRow struct {
 //
 //	WITH counted AS (
 //	    SELECT COUNT(id) AS total
-//	    FROM registered_resources
+//	    FROM registered_resource_values
+//	    WHERE
+//	        NULLIF($1, '') IS NULL OR registered_resource_id = $1::UUID
 //	)
 //	SELECT
 //	    id,

From 876559f05b12d717678af685c9a356a90dd8dcec Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Mon, 21 Apr 2025 15:06:23 -0600
Subject: [PATCH 17/19] fix flaky tests

---
 .../integration/registered_resources_test.go  | 20 ++++++++++++-------
 1 file changed, 13 insertions(+), 7 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index ee71111608..ceb9c29fdc 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -139,15 +139,22 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_Succeeds() {
 func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_WithValues_Succeeds() {
 	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
 	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
-	existingResValue2 := s.f.GetRegisteredResourceValueKey("res_with_values__value2")
 
 	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, existingRes.ID)
 	s.Require().NoError(err)
 	s.NotNil(got)
 	values := got.GetValues()
 	s.Require().Len(values, 2)
-	s.Equal(existingResValue1.Value, values[0].GetValue())
-	s.Equal(existingResValue2.Value, values[1].GetValue())
+	var found bool
+	for _, v := range values {
+		// check at least one of the expected values exists
+		if existingResValue1.ID == v.GetId() {
+			found = true
+			s.Equal(existingResValue1.Value, v.GetValue())
+			break
+		}
+	}
+	s.True(found)
 }
 
 func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_InvalidID_Fails() {
@@ -161,8 +168,6 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_InvalidID_Fails()
 
 func (s *RegisteredResourcesSuite) Test_ListRegisteredResources_NoPagination_Succeeds() {
 	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
-	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
-	existingResValue2 := s.f.GetRegisteredResourceValueKey("res_with_values__value2")
 	existingResOnly := s.f.GetRegisteredResourceKey("res_only")
 
 	list, err := s.db.PolicyClient.ListRegisteredResources(s.ctx, &registeredresources.ListRegisteredResourcesRequest{})
@@ -177,8 +182,6 @@ func (s *RegisteredResourcesSuite) Test_ListRegisteredResources_NoPagination_Suc
 			s.Equal(existingRes.Name, r.GetName())
 			values := r.GetValues()
 			s.Require().Len(values, 2)
-			s.Equal(existingResValue1.Value, values[0].GetValue())
-			s.Equal(existingResValue2.Value, values[1].GetValue())
 			metadata := r.GetMetadata()
 			s.False(metadata.GetCreatedAt().AsTime().IsZero())
 			s.False(metadata.GetUpdatedAt().AsTime().IsZero())
@@ -188,6 +191,9 @@ func (s *RegisteredResourcesSuite) Test_ListRegisteredResources_NoPagination_Suc
 			foundCount++
 			s.Equal(existingResOnly.Name, r.GetName())
 			s.Require().Empty(r.GetValues())
+			metadata := r.GetMetadata()
+			s.False(metadata.GetCreatedAt().AsTime().IsZero())
+			s.False(metadata.GetUpdatedAt().AsTime().IsZero())
 		}
 	}
 

From 8373be9a73a5b44da40918d08e25d878c68fe45e Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Tue, 22 Apr 2025 11:38:16 -0600
Subject: [PATCH 18/19] refactor get methods to use request instead of any

---
 .../integration/registered_resources_test.go  | 91 ++++++++++++++++---
 service/policy/db/registered_resources.go     | 53 ++++++-----
 2 files changed, 108 insertions(+), 36 deletions(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index ceb9c29fdc..5e831e4b34 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -126,7 +126,11 @@ func (s *RegisteredResourcesSuite) Test_CreateRegisteredResource_WithNonUniqueNa
 func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_Succeeds() {
 	existingRes := s.f.GetRegisteredResourceKey("res_only")
 
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, existingRes.ID)
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, &registeredresources.GetRegisteredResourceRequest{
+		Identifier: &registeredresources.GetRegisteredResourceRequest_ResourceId{
+			ResourceId: existingRes.ID,
+		},
+	})
 	s.Require().NoError(err)
 	s.NotNil(got)
 	s.Equal(existingRes.Name, got.GetName())
@@ -140,7 +144,11 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_WithValues_Succeed
 	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
 	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
 
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, existingRes.ID)
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, &registeredresources.GetRegisteredResourceRequest{
+		Identifier: &registeredresources.GetRegisteredResourceRequest_ResourceId{
+			ResourceId: existingRes.ID,
+		},
+	})
 	s.Require().NoError(err)
 	s.NotNil(got)
 	values := got.GetValues()
@@ -158,7 +166,11 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_WithValues_Succeed
 }
 
 func (s *RegisteredResourcesSuite) Test_GetRegisteredResource_InvalidID_Fails() {
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, invalidID)
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, &registeredresources.GetRegisteredResourceRequest{
+		Identifier: &registeredresources.GetRegisteredResourceRequest_ResourceId{
+			ResourceId: invalidID,
+		},
+	})
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(got)
@@ -308,7 +320,11 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_Succeeds() {
 	s.NotNil(updated)
 
 	// verify resource not updated
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, &registeredresources.GetRegisteredResourceRequest{
+		Identifier: &registeredresources.GetRegisteredResourceRequest_ResourceId{
+			ResourceId: created.GetId(),
+		},
+	})
 	s.Require().NoError(err)
 	s.Require().NotNil(got)
 	s.Equal(created.GetName(), got.GetName())
@@ -327,7 +343,11 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_Succeeds() {
 	s.NotNil(updated)
 
 	// verify resource updated
-	got, err = s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
+	got, err = s.db.PolicyClient.GetRegisteredResource(s.ctx, &registeredresources.GetRegisteredResourceRequest{
+		Identifier: &registeredresources.GetRegisteredResourceRequest_ResourceId{
+			ResourceId: created.GetId(),
+		},
+	})
 	s.Require().NoError(err)
 	s.NotNil(got)
 	s.Equal("test_update_res__new_name", got.GetName())
@@ -355,7 +375,11 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResource_NormalizedName_
 	s.NotNil(updated)
 
 	// verify resource updated
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, &registeredresources.GetRegisteredResourceRequest{
+		Identifier: &registeredresources.GetRegisteredResourceRequest_ResourceId{
+			ResourceId: created.GetId(),
+		},
+	})
 	s.Require().NoError(err)
 	s.NotNil(got)
 	s.Equal("test_update_res_norma-lized", got.GetName())
@@ -404,7 +428,11 @@ func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResource_Succeeds() {
 	s.Require().Equal(created.GetId(), deleted.GetId())
 
 	// verify resource deleted
-	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, created.GetId())
+	got, err := s.db.PolicyClient.GetRegisteredResource(s.ctx, &registeredresources.GetRegisteredResourceRequest{
+		Identifier: &registeredresources.GetRegisteredResourceRequest_ResourceId{
+			ResourceId: created.GetId(),
+		},
+	})
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(got)
@@ -412,12 +440,21 @@ func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResource_Succeeds() {
 	// verify resource values deleted
 	gotValues := created.GetValues()
 
-	gotValue1, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, gotValues[0].GetId())
+	// gotValue1, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, gotValues[0].GetId())
+	gotValue1, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, &registeredresources.GetRegisteredResourceValueRequest{
+		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+			ValueId: gotValues[0].GetId(),
+		},
+	})
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(gotValue1)
 
-	gotValue2, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, gotValues[1].GetId())
+	gotValue2, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, &registeredresources.GetRegisteredResourceValueRequest{
+		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+			ValueId: gotValues[1].GetId(),
+		},
+	})
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(gotValue2)
@@ -528,7 +565,11 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResourceValue_Succeeds() {
 	existingRes := s.f.GetRegisteredResourceKey("res_with_values")
 	existingResValue1 := s.f.GetRegisteredResourceValueKey("res_with_values__value1")
 
-	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, existingResValue1.ID)
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, &registeredresources.GetRegisteredResourceValueRequest{
+		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+			ValueId: existingResValue1.ID,
+		},
+	})
 	s.Require().NoError(err)
 	s.NotNil(got)
 	s.Equal(existingRes.ID, got.GetResource().GetId())
@@ -539,7 +580,11 @@ func (s *RegisteredResourcesSuite) Test_GetRegisteredResourceValue_Succeeds() {
 }
 
 func (s *RegisteredResourcesSuite) Test_GetRegisteredResourceValue_InvalidID_Fails() {
-	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, invalidID)
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, &registeredresources.GetRegisteredResourceValueRequest{
+		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+			ValueId: invalidID,
+		},
+	})
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(got)
@@ -722,7 +767,11 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds()
 	s.NotNil(updated)
 
 	// verify resource value not updated
-	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, &registeredresources.GetRegisteredResourceValueRequest{
+		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+			ValueId: created.GetId(),
+		},
+	})
 	s.Require().NoError(err)
 	s.Require().NotNil(got)
 	s.Equal(created.GetValue(), got.GetValue())
@@ -741,7 +790,11 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Succeeds()
 	s.NotNil(updated)
 
 	// verify resource updated
-	got, err = s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
+	got, err = s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, &registeredresources.GetRegisteredResourceValueRequest{
+		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+			ValueId: created.GetId(),
+		},
+	})
 	s.Require().NoError(err)
 	s.NotNil(got)
 	s.Equal("updated_value", got.GetValue())
@@ -776,7 +829,11 @@ func (s *RegisteredResourcesSuite) Test_UpdateRegisteredResourceValue_Normalized
 	s.NotNil(updated)
 
 	// verify resource value updated
-	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, &registeredresources.GetRegisteredResourceValueRequest{
+		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+			ValueId: created.GetId(),
+		},
+	})
 	s.Require().NoError(err)
 	s.NotNil(got)
 	s.Equal("value_norma-lized", got.GetValue())
@@ -843,7 +900,11 @@ func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResourceValue_Succeeds()
 
 	// verify resource value deleted
 
-	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, created.GetId())
+	got, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, &registeredresources.GetRegisteredResourceValueRequest{
+		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+			ValueId: created.GetId(),
+		},
+	})
 	s.Require().Error(err)
 	s.Require().ErrorIs(err, db.ErrNotFound)
 	s.Nil(got)
diff --git a/service/policy/db/registered_resources.go b/service/policy/db/registered_resources.go
index c5b9c85f78..e86dc26b7a 100644
--- a/service/policy/db/registered_resources.go
+++ b/service/policy/db/registered_resources.go
@@ -65,24 +65,25 @@ func (c PolicyDBClient) CreateRegisteredResource(ctx context.Context, r *registe
 		}
 	}
 
-	return c.GetRegisteredResource(ctx, createdID)
+	return c.GetRegisteredResource(ctx, &registeredresources.GetRegisteredResourceRequest{
+		Identifier: &registeredresources.GetRegisteredResourceRequest_ResourceId{
+			ResourceId: createdID,
+		},
+	})
 }
 
-func (c PolicyDBClient) GetRegisteredResource(ctx context.Context, identifier any) (*policy.RegisteredResource, error) {
+func (c PolicyDBClient) GetRegisteredResource(ctx context.Context, r *registeredresources.GetRegisteredResourceRequest) (*policy.RegisteredResource, error) {
 	var id string
 
-	switch i := identifier.(type) {
-	case string:
-		id = i
-	case *registeredresources.GetRegisteredResourceRequest_ResourceId:
+	switch {
+	case r.GetResourceId() != "":
 		// TODO: refactor to pgtype.UUID once the query supports both id and fqn
-		id = i.ResourceId
-	case *registeredresources.GetRegisteredResourceRequest_Fqn:
+		id = r.GetResourceId()
+	case r.GetFqn() != "":
 		// TODO: implement
 		return nil, errors.New("FQN support not yet implemented")
 	default:
-		// unexpected type
-		return nil, errors.Join(db.ErrUnknownSelectIdentifier, fmt.Errorf("type [%T] value [%v]", i, i))
+		return nil, db.ErrSelectIdentifierInvalid
 	}
 
 	rr, err := c.Queries.getRegisteredResource(ctx, id)
@@ -166,7 +167,11 @@ func (c PolicyDBClient) UpdateRegisteredResource(ctx context.Context, r *registe
 	id := r.GetId()
 	name := strings.ToLower(r.GetName())
 	metadataJSON, metadata, err := db.MarshalUpdateMetadata(r.GetMetadata(), r.GetMetadataUpdateBehavior(), func() (*common.Metadata, error) {
-		v, err := c.GetRegisteredResource(ctx, id)
+		v, err := c.GetRegisteredResource(ctx, &registeredresources.GetRegisteredResourceRequest{
+			Identifier: &registeredresources.GetRegisteredResourceRequest_ResourceId{
+				ResourceId: id,
+			},
+		})
 		if err != nil {
 			return nil, err
 		}
@@ -230,24 +235,26 @@ func (c PolicyDBClient) CreateRegisteredResourceValue(ctx context.Context, r *re
 		return nil, db.WrapIfKnownInvalidQueryErr(err)
 	}
 
-	return c.GetRegisteredResourceValue(ctx, createdID)
+	return c.GetRegisteredResourceValue(ctx, &registeredresources.GetRegisteredResourceValueRequest{
+		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+			ValueId: createdID,
+		},
+	})
 }
 
-func (c PolicyDBClient) GetRegisteredResourceValue(ctx context.Context, identifier any) (*policy.RegisteredResourceValue, error) {
+func (c PolicyDBClient) GetRegisteredResourceValue(ctx context.Context, r *registeredresources.GetRegisteredResourceValueRequest) (*policy.RegisteredResourceValue, error) {
 	var id string
 
-	switch i := identifier.(type) {
-	case string:
-		id = i
-	case *registeredresources.GetRegisteredResourceValueRequest_ValueId:
+	switch {
+	case r.GetValueId() != "":
 		// TODO: refactor to pgtype.UUID once the query supports both id and fqn
-		id = i.ValueId
-	case *registeredresources.GetRegisteredResourceRequest_Fqn:
+		id = r.GetValueId()
+	case r.GetFqn() != "":
 		// TODO: implement
 		return nil, errors.New("FQN support not yet implemented")
 	default:
 		// unexpected type
-		return nil, errors.Join(db.ErrUnknownSelectIdentifier, fmt.Errorf("type [%T] value [%v]", i, i))
+		return nil, db.ErrSelectIdentifierInvalid
 	}
 
 	rv, err := c.Queries.getRegisteredResourceValue(ctx, id)
@@ -327,7 +334,11 @@ func (c PolicyDBClient) UpdateRegisteredResourceValue(ctx context.Context, r *re
 	id := r.GetId()
 	value := strings.ToLower(r.GetValue())
 	metadataJSON, metadata, err := db.MarshalUpdateMetadata(r.GetMetadata(), r.GetMetadataUpdateBehavior(), func() (*common.Metadata, error) {
-		v, err := c.GetRegisteredResourceValue(ctx, id)
+		v, err := c.GetRegisteredResourceValue(ctx, &registeredresources.GetRegisteredResourceValueRequest{
+			Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
+				ValueId: id,
+			},
+		})
 		if err != nil {
 			return nil, err
 		}

From 364fa0722948acca216100a4d4b3fe16c9fcbd85 Mon Sep 17 00:00:00 2001
From: Ryan Yanulites <ryanulites@virtru.com>
Date: Tue, 22 Apr 2025 11:47:15 -0600
Subject: [PATCH 19/19] remove stale comment

---
 service/integration/registered_resources_test.go | 1 -
 1 file changed, 1 deletion(-)

diff --git a/service/integration/registered_resources_test.go b/service/integration/registered_resources_test.go
index 5e831e4b34..5b7a0ffc4b 100644
--- a/service/integration/registered_resources_test.go
+++ b/service/integration/registered_resources_test.go
@@ -440,7 +440,6 @@ func (s *RegisteredResourcesSuite) Test_DeleteRegisteredResource_Succeeds() {
 	// verify resource values deleted
 	gotValues := created.GetValues()
 
-	// gotValue1, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, gotValues[0].GetId())
 	gotValue1, err := s.db.PolicyClient.GetRegisteredResourceValue(s.ctx, &registeredresources.GetRegisteredResourceValueRequest{
 		Identifier: &registeredresources.GetRegisteredResourceValueRequest_ValueId{
 			ValueId: gotValues[0].GetId(),