Include CheckBulkPermissions API

Updates to include 'PermissionService/CheckBulkPermissions' API
which will replace 'ExperimentalService/BulkCheckPermissions'.

magefiles/gen.go

@@ -24,7 +24,7 @@ func (g Gen) All() error {
 const (
 	ProtoPath     = "proto/authzed/api"
 	BufRepository = "buf.build/authzed/api"
-	BufTag        = "14854970e303a3b8e2f9f53efbab9897b5c8f2b1"
+	BufTag        = "4286d7d7e9b9d8a6aecf825e38947b8101869df5"
 )
 
 // Proto runs proto codegen

magefiles/go.mod

@@ -3,7 +3,7 @@ module github.com/authzed/authzed-go/magefiles
 go 1.20
 
 require (
-	github.com/bufbuild/buf v1.27.1
+	github.com/bufbuild/buf v1.30.0
 	github.com/envoyproxy/protoc-gen-validate v1.0.1
 	github.com/golangci/golangci-lint v1.54.2
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.15.2

proto/apidocs.swagger.json

@@ -192,6 +192,40 @@
         ]
       }
     },
+    "/v1/permissions/checkbulk": {
+      "post": {
+        "summary": "CheckBulkPermissions evaluates the given list of permission checks\nand returns the list of results.",
+        "operationId": "PermissionsService_CheckBulkPermissions",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1CheckBulkPermissionsResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "description": "CheckBulkPermissionsRequest issues a check on whether a subject has permission \nor is a member of a relation on a specific resource for each item in the list.\n\nThe ordering of the items in the response is maintained in the response.\nChecks with the same subject/permission will automatically be batched for performance optimization.",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1CheckBulkPermissionsRequest"
+            }
+          }
+        ],
+        "tags": [
+          "PermissionsService"
+        ]
+      }
+    },
     "/v1/permissions/expand": {
       "post": {
         "summary": "ExpandPermissionTree reveals the graph structure for a resource's\npermission or relation. This RPC does not recurse infinitely deep and may\nrequire multiple calls to fully unnest a deeply nested graph.",
@@ -1103,6 +1137,79 @@
       },
       "description": "BulkImportRelationshipsResponse is returned on successful completion of the\nbulk load stream, and contains the total number of relationships loaded."
     },
+    "v1CheckBulkPermissionsPair": {
+      "type": "object",
+      "properties": {
+        "request": {
+          "$ref": "#/definitions/v1CheckBulkPermissionsRequestItem"
+        },
+        "item": {
+          "$ref": "#/definitions/v1CheckBulkPermissionsResponseItem"
+        },
+        "error": {
+          "$ref": "#/definitions/rpcStatus"
+        }
+      }
+    },
+    "v1CheckBulkPermissionsRequest": {
+      "type": "object",
+      "properties": {
+        "consistency": {
+          "$ref": "#/definitions/v1Consistency"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1CheckBulkPermissionsRequestItem"
+          }
+        }
+      },
+      "description": "CheckBulkPermissionsRequest issues a check on whether a subject has permission \nor is a member of a relation on a specific resource for each item in the list.\n\nThe ordering of the items in the response is maintained in the response.\nChecks with the same subject/permission will automatically be batched for performance optimization."
+    },
+    "v1CheckBulkPermissionsRequestItem": {
+      "type": "object",
+      "properties": {
+        "resource": {
+          "$ref": "#/definitions/v1ObjectReference"
+        },
+        "permission": {
+          "type": "string"
+        },
+        "subject": {
+          "$ref": "#/definitions/v1SubjectReference"
+        },
+        "context": {
+          "type": "object"
+        }
+      }
+    },
+    "v1CheckBulkPermissionsResponse": {
+      "type": "object",
+      "properties": {
+        "checkedAt": {
+          "$ref": "#/definitions/v1ZedToken"
+        },
+        "pairs": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1CheckBulkPermissionsPair"
+          }
+        }
+      }
+    },
+    "v1CheckBulkPermissionsResponseItem": {
+      "type": "object",
+      "properties": {
+        "permissionship": {
+          "$ref": "#/definitions/v1CheckPermissionResponsePermissionship"
+        },
+        "partialCaveatInfo": {
+          "$ref": "#/definitions/v1PartialCaveatInfo"
+        }
+      }
+    },
     "v1CheckPermissionRequest": {
       "type": "object",
       "properties": {

proto/authzed/api/v0/zz_generated.version.go

@@ -2,5 +2,5 @@ package v0
 
 const (
 	BufRepository = "buf.build/authzed/api"
-	BufTag        = "14854970e303a3b8e2f9f53efbab9897b5c8f2b1"
+	BufTag        = "4286d7d7e9b9d8a6aecf825e38947b8101869df5"
 )